High-risk security reports

E

Ehrenamt in Brandenburg

ehrenamt-in-brandenburg.de

42

Ehrenamt in Brandenburg is a government-supported platform dedicated to promoting and supporting voluntary civic engagement within the Brandenburg region of Germany. The website serves as an informational hub providing resources, recognition programs such as the Ehrenamtskarte, event announcements, and support for volunteer networks. It targets volunteers, civic organizations, and government bodies, positioning itself as a key regional player in fostering community involvement. Technically, the site is built on WordPress using the Avada theme and several reputable plugins, indicating a modern and maintainable infrastructure. The hosting appears to be managed by kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding explicit security headers and publishing a security policy. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates good content quality, technical implementation, and business credibility, making it a trustworthy resource for its audience.

G

Gesellschaft für Freiheitsrechte e.V.

grundgesetzlich.org

47

Grundgesetzlich.org hosts a German-language podcast focused on educating the public about fundamental rights and political debates. The podcast is produced by Gesellschaft für Freiheitsrechte e.V., a non-profit organization. The website is built on WordPress with common plugins for podcast delivery and page building. It offers multiple distribution channels via popular podcast platforms and RSS feeds. The technical infrastructure is modern but basic, with no advanced security headers or cookie consent mechanisms detected. The site is secure with HTTPS and has a consistent brand presence. However, contact information and detailed security or privacy policies are limited, which could be improved to enhance trust and compliance.

T

twingle - einfach Spenden

twingle.de

47

twingle is a German-based online fundraising platform specializing in donation widgets and fundraising project management tools tailored for non-profit organizations. The company has established a reputable market position, evidenced by its iF Design Award 2021 and ISO 27001 certified hosting environment. Their services include a variety of donation tools such as occasion-based donations, gift certificates, and mobile/contactless payment options, supported by APIs for CRM integration. The platform is designed for ease of use, mobile responsiveness, and broad payment method support, targeting NGOs and fundraising professionals. Technically, twingle operates on a WordPress CMS with popular plugins like Yoast SEO and Slider Revolution, hosted on INWX-managed servers. The website demonstrates good SEO and mobile optimization, though performance is moderate. Security practices include SSL encryption, ISO 27001 certified data centers, and use of Google reCAPTCHA, but could be improved by adding security headers and explicit privacy and cookie policies. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and incident response contacts indicates room for compliance improvement. The website content is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected. Overall, twingle presents a credible and well-structured fundraising solution with a good balance of technical maturity and business credibility. Strategic enhancements in privacy compliance and security headers would further strengthen its market trust and regulatory adherence.

The website shopware-theme.de currently serves only a 404 Not Found error page with minimal HTML content and no business or contact information. The domain is active with name servers pointing to kasserver.com, a hosting provider, but no further WHOIS registrant details are available. The lack of accessible content, metadata, or structured data prevents meaningful business or technical analysis. The site appears either down, misconfigured, or abandoned. From a technical perspective, the site lacks HTTPS, security headers, and any modern web technologies or analytics. The absence of privacy, cookie, or terms of service policies indicates non-compliance with GDPR and other data protection regulations. No contact forms, emails, or phone numbers are present, limiting user engagement and trust. Security posture is poor due to missing HTTPS and security best practices. No incident response or vulnerability disclosure information is available. The domain registration data is minimal but consistent with a small-scale or inactive business presence. Overall, the site is not currently functional or trustworthy for users or customers. Strategic recommendations include restoring website functionality with proper HTTPS, implementing security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

W

Wazamba Casino

mporoumeedo.gr

48

Wazamba Casino Greece operates as an online gambling platform targeting Greek-speaking adult users. It offers a wide variety of casino games including slots, live dealer games, and table games, supported by major software providers. The platform supports multiple payment methods including cryptocurrencies and provides 24/7 customer support via email. Technically, the website employs modern web technologies such as lazy loading and custom fonts, and is optimized for mobile devices. Security is implemented with HTTPS and TLS 1.2, but lacks advanced HTTP security headers and explicit incident response information. Privacy compliance is partially addressed with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the site presents a professional and trustworthy gambling service with room for improvement in security and privacy transparency.

O

ONLINEAUSTRIACASINO.AT

oesterreichonlinecasino.at

42

ONLINEAUSTRIACASINO.AT is a specialized online platform providing comprehensive reviews, rankings, and detailed information about legal online casinos in Austria for the year 2025. The website targets Austrian players seeking trustworthy and legally compliant gambling options, offering expert evaluations of casino bonuses, payment methods, game selections, and regulatory compliance. The platform is positioned as a reputable affiliate and informational resource with a consistent brand and a strong focus on user trust and transparency. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics, Google Tag Manager, and Microsoft Clarity for user behavior tracking and performance monitoring. The site is mobile-optimized with lazy loading for images and uses structured data (JSON-LD) to enhance SEO and search engine visibility. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies. No vulnerability disclosure or security.txt files are present, indicating room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include implementing comprehensive privacy and security policies, enhancing accessibility, and publishing vulnerability disclosure information to further strengthen security posture and compliance.

O

OC24 LTD

bestcasinosincanada.net

41

BestCasinosInCanada.net is a specialized affiliate and review website focused on providing Canadian players with trusted information about online casinos, bonuses, payment methods, and casino games. The business operates under OC24 LTD, founded in 2022, and targets the Canadian gambling market with a professional and content-rich platform. The site demonstrates a moderate level of digital maturity with the use of modern web technologies, structured data, and tracking tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the site maintains trust signals such as affiliate disclosures and social media presence. Overall, the website is functional, well-branded, and serves its niche effectively but would benefit from enhanced transparency and security practices.

S

Startup Verband

deutschestartups.org

46

Startup Verband is a prominent German startup association focused on fostering a startup-friendly environment in Germany and Europe. It serves as a large network and research leader with over 1,200 members including startups, scaleups, corporates, and investors. The organization provides advocacy, research reports, events, and member services such as legal templates and educational resources. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries, hosted likely by Schlund Technologies, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

The website at https://iasp.world/lander is minimalistic and appears to be a placeholder or parking page with no substantive business content, metadata, or contact information. The domain WHOIS data is unavailable due to unsupported TLD, which limits the ability to verify domain ownership or legitimacy. The site uses React technology and includes Google Adsense scripts for advertising, but lacks any privacy, cookie, or terms of service policies. There are no forms, social media links, or business identifiers present. The overall digital maturity is low with basic technical implementation and minimal content quality. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. Privacy compliance is non-existent, and business credibility cannot be established from the available data.

T

The International Network for Quality Assurance Agencies in Higher Education (INQAAHE)

inqaahe.org

45

INQAAHE is a globally recognized non-profit network dedicated to quality assurance in higher education, serving over 300 member organizations worldwide. The website reflects a mature digital presence built on WordPress with modern plugins and technologies, offering rich content including membership information, professional development, research, events, and news. The site is well-structured, mobile-optimized, and professionally branded, targeting quality assurance agencies and higher education stakeholders globally. Security posture is solid with HTTPS and secure form handling, though security headers and incident response policies are absent. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Overall, the site demonstrates a strong professional and educational focus with room for security and privacy enhancements.

S

Schwäbisch Media

suedfinder.de

49

Südfinder is a well-established regional weekly newspaper operated by Schwäbisch Media, targeting readers across southern Germany with a strong presence in local markets. The website offers digital e-paper editions, advertising services, and local contact points, reflecting a mature media business model focused on free distribution funded by advertising. Technically, the site is built on WordPress with a modern tech stack including jQuery and Cookiebot for consent management, ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong, with comprehensive cookie consent and a detailed privacy policy. Overall, the site is trustworthy and professionally maintained, with no critical issues detected.

T

TIVENTS

tivents.com

49

TIVENTS is a German-based e-commerce platform specializing in the sale of event tickets, gift vouchers, and sponsorships, particularly focusing on wellness, cultural events, and animal sponsorships at nature parks. The platform targets consumers primarily in Germany and offers a user-friendly marketplace with sorting and pagination features. Technically, the website is built on the Shopware CMS platform, hosted on Hetzner servers, and integrates PayPal for payment processing. The site is mobile-optimized and uses modern web technologies including JavaScript and Plausible Analytics for tracking. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is minimal, with no explicit privacy or cookie policy pages found, though a cookie consent mechanism is present. Contact information is available via phone and contact form but lacks direct email addresses. Overall, the website is professional and trustworthy but could benefit from enhanced privacy and security disclosures.

A

atrego GmbH

contentserver24.de

44

Contentserver24, operated by atrego GmbH, is a specialized provider of web content and digital solutions tailored for the energy sector, particularly fuel and mineral oil traders. The company offers a comprehensive suite of services including online shops, newsletters, daily pricing updates, and website development, positioning itself as a niche B2B service provider in Germany. The website reflects a professional and consistent brand image with clear navigation and relevant content for its target audience. Technically, the website employs modern frameworks such as Bootstrap 5 and jQuery, integrates Google Analytics with IP anonymization, and uses reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are missing, and no explicit security or incident response policies are published, indicating room for improvement in security posture. The security evaluation shows a good baseline with HTTPS enforced and anti-spam measures in place, but lacks advanced security headers and formal incident response contacts. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanism. WHOIS data is minimal, limiting full trust verification, but the website's professional presentation and business consistency support legitimacy. Overall, Contentserver24 presents a trustworthy and professional digital presence with solid technical foundations and privacy compliance, suitable for its specialized market. Strategic enhancements in security policies and domain transparency would further strengthen its risk profile.

HFDnetzwerk is a German-based community platform operated by the Hochschulforum Digitalisierung, a prominent think-and-do tank focused on digital transformation in higher education. The platform facilitates networking, knowledge exchange, and visibility of informal engagement in digital teaching through features like member search, discussion groups, and a Community Certificate. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Laravel Livewire and Alpine.js, hosted on AWS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy, GDPR compliant, and serves a medium-sized educational community effectively.

F

Forschungszentrum Borstel, Leibniz Lungenzentrum

fz-borstel.de

49

Forschungszentrum Borstel, Leibniz Lungenzentrum is a reputable German lung research institution focusing on chronic inflammatory lung diseases and infectious lung inflammation such as tuberculosis. It operates under the Leibniz Association and is publicly funded, with a strong emphasis on scientific research, publications, and collaboration. The website reflects a professional and well-structured digital presence, utilizing Joomla CMS and modern web technologies, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a high level of trustworthiness and compliance with GDPR regulations.

L

LawBusters

lawbusters.at

42

LawBusters is a small Austrian educational and entertainment entity specializing in legal topics presented with humor and pop culture references. Their offerings include lectures, MOOCs, podcasts, and collaborations with universities and cultural institutions. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking some security headers and a privacy policy page. WHOIS data is unavailable due to quota limits, limiting domain trust analysis. Overall, the site is trustworthy and well-positioned in its niche.

C

C.L.U. Club Italiano di Litiasi Urinaria

calcolosi-urinaria.it

38

The website www.calcolosi-urinaria.it represents the Club Italiano di Litiasi Urinaria (C.L.U.), an Italian non-profit medical association dedicated to the study, prevention, and treatment of urinary stone disease. The site provides information about the association, upcoming congresses, scientific articles, newsletters, and a reserved member area. The target audience primarily includes medical professionals and researchers interested in urology and urinary lithiasis. The business model is focused on education, event organization, and member services within the healthcare sector in Italy. Technically, the website is built on a custom ASP.NET platform with modern front-end technologies such as Bootstrap, Google Fonts, and Swiper.js for interactive sliders. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, some technical aspects such as accessibility and SEO could be improved. No major performance issues were detected, but hosting details and SSL configuration specifics are not available. From a security perspective, the site uses HTTPS and has basic form validation but lacks important security headers like Content-Security-Policy and HSTS. There are no visible privacy or cookie policies, which is a compliance concern under GDPR. No incident response or vulnerability disclosure information is provided. The site does not appear to use tracking or analytics services, which reduces privacy risks but also limits marketing insights. Overall, the website is a credible and professional platform for a specialized medical association but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Bayern Kapital

bayernkapital.de

48

Bayern Kapital is a well-established venture capital investor focused on innovative, technology-oriented startups and companies in Bavaria, Germany. With nearly 30 years of experience and over 320 investments, they manage assets of approximately 700 million Euros. Their investment range spans from early seed funding to later stage growth investments, supporting companies with ticket sizes from 250,000 to 25 million Euros. The website reflects a professional and consistent brand image, targeting ambitious technology startups and scaleups seeking capital and network support in Bavaria. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Usercentrics for consent management and Piwik PRO for analytics. The site is mobile optimized, accessible, and SEO-friendly, hosted likely on Your-Server.de infrastructure. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security policies and headers could be improved. No blocking mechanisms or WAF challenges were detected, allowing full content access. However, explicit privacy policy and terms of service pages were not found in the provided content, which could be a compliance gap. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include publishing detailed privacy and security policies, enhancing security headers, and providing vulnerability disclosure information to improve transparency and trust further.

1

10x Group

10x.group

44

10x Group is a venture capital firm focused on investing in founders across Europe and Silicon Valley, with a portfolio spanning growth, late-stage, and early-stage companies through its 10x Founders and FLEX Capital funds. The website presents a professional and consistent brand image, showcasing a broad portfolio of companies with successful IPOs and exits, indicating a strong market position. Technically, the site uses modern web technologies including jQuery, ScrollReveal, Google Analytics, and Hotjar, providing a moderate level of digital maturity with good mobile optimization and user experience. Security posture is adequate with HTTPS implied, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is safe, business-focused, and trustworthy, though the absence of WHOIS data due to TLD limitations slightly reduces transparency.

D

DeepTechHub

deep-tech-hub.de

40

DeepTechHub is a regional ecosystem platform dedicated to fostering the growth of deep tech startups in north-western Baden-Württemberg, Germany. It acts as a collaborative hub connecting universities, researchers, industry experts, and entrepreneurs to promote innovation and entrepreneurship in deep technology. The website presents a professional and consistent brand image, emphasizing community building, coordination, and talent matchmaking as core services. Technically, the site is built on WordPress with modern SEO and contact form plugins, hosted by agenturserver, and optimized for mobile and accessibility. Security posture is solid with HTTPS and secure forms, though lacking explicit security policies and headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site is trustworthy and well-positioned within its niche ecosystem.

M

mg: mannheimer gründungszentren gmbh

next-mannheim.de

46

NEXT MANNHEIM is a professionally managed startup ecosystem platform focused on supporting entrepreneurs and startups in Mannheim, Germany. It operates as a 100% subsidiary of Innovationsstadt Mannheim, providing infrastructure, consulting, networking, and event spaces tailored to various startup communities including female entrepreneurs and international founders. The website reflects a strong regional market position with comprehensive services and active community engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and some security headers, though improvements are recommended in CSP and incident response transparency. Overall, the site is trustworthy and well-maintained, with minor gaps in privacy compliance and security policy disclosures.

G

Global Certification and Consulting Centre (GCCC)

gccc-exist.de

40

The Global Certification and Consulting Centre (GCCC) is a government-affiliated organization established in 2024 under the German Federal Ministry for Economic Affairs and Energy (BMWE). It serves as a central hub to support international start-up teams by providing certification, consultancy, and visa facilitation services, particularly related to the EXIST Business Start-up Grant and other similar funding programs. The GCCC acts as a liaison between German Missions Abroad, immigration authorities, universities, and research institutions to streamline start-up visa issuance and support innovative entrepreneurship in Germany. The website is professionally designed, multilingual, and provides comprehensive information tailored to entrepreneurs, official institutions, and start-up networks.

K

Kreuzberger Lebensbrücke gGmbH

kreuzberger-lebensbruecke.de

46

The website www.wald-bruecke.de represents Kreuzberger Lebensbrücke gGmbH, a German non-profit organization focused on social integration by providing employment and training opportunities for youth, disabled, and disadvantaged individuals. The business model relies on sales of office and hygiene products, as well as specialized blind products, to fund its social projects. The site is well-structured, professionally designed, and targets a German-speaking audience interested in social welfare and integration services. Technically, the site runs on WordPress with standard plugins like Yoast SEO and CookieYes for cookie consent management. Hosting is provided by Cloudpit, as indicated by the nameservers. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and incident response contact details. The site contains some suspicious hidden content related to online casinos, which may be SEO spam or misplaced text, slightly impacting trust. Overall, the site is functional, compliant with GDPR, and trustworthy for its intended audience.

E

Erziehungswissenschaftliches Fort- und Weiterbildungsinstitut der Evangelischen Kirchen in Rheinland-Pfalz

efwi.de

47

The Erziehungswissenschaftliches Fort- und Weiterbildungsinstitut der Evangelischen Kirchen in Rheinland-Pfalz (EFWI) is a small, regionally focused non-profit educational institute dedicated to supporting teachers and pedagogical professionals through training, consulting, and specialized seminars. The website clearly targets educators in Rheinland-Pfalz, Germany, offering a variety of professional development opportunities aligned with current educational challenges and research. The business model is service-oriented, focusing on educational enrichment and church-affiliated community support. The website is well-branded and consistent with the organization's mission and regional focus. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap 4, jQuery, and FontAwesome. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Hosting is managed via DomainControl, consistent with the domain's WHOIS data. The technical infrastructure supports a professional and accessible user experience. From a security perspective, the site uses HTTPS with an excellent SSL configuration, but lacks visible security headers and a cookie consent mechanism, which are recommended for compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact limits transparency in security management. Overall, the security posture is good but could be improved with additional best practices. The overall risk assessment is low, with no blocking or WAF detected, no suspicious content, and a trustworthy domain registration. Strategic recommendations include implementing a cookie consent banner, adding security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to enhance compliance and trust.

S

ScaDS.AI

scads.ai

45

ScaDS.AI Dresden/Leipzig is a government-funded German research center specializing in scalable data analytics, artificial intelligence, and big data. It operates as a permanent research facility with strong academic partnerships with TU Dresden and Leipzig University. The center offers interdisciplinary research, graduate education, consulting, and public engagement through its Living Lab. The website reflects a mature digital presence with professional design and comprehensive content tailored to researchers, students, and professionals in AI and data science. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common plugins for forms and media display. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is good with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its academic and governmental mission.

T

timum GmbH

timum.de

47

timum GmbH operates a specialized SaaS platform focused on automated appointment coordination and online booking solutions tailored for the real estate sector, including real estate agents, property managers, and facility management professionals. The company positions itself as a PropTech innovator with integrations into major real estate platforms and CRM systems, offering scalable solutions from basic to professional tiers. The website content is professionally presented, targeting German-speaking markets with localized versions for Switzerland and English-speaking users. Technically, the site is built on WordPress with modern frameworks and hosted on AWS infrastructure, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators, suitable for its niche market.

B

BBS-Betriebe

bbs-betriebe.de

43

The website bbs-betriebe.de serves as a login portal primarily for businesses and external users associated with a school scheduling system. It provides access to schedules, class books, and trainee information, targeting a niche educational audience in Germany. The platform is built using RapidWeaver CMS with Bootstrap and jQuery, offering basic mobile responsiveness and user navigation. While the site includes essential privacy and cookie consent mechanisms, it lacks comprehensive contact information, terms of service, and advanced security policies. Security posture is moderate with HTTPS enabled but missing critical security headers and using an outdated jQuery version, which could expose vulnerabilities. Overall, the site is functional for its intended educational business use but would benefit from enhanced security and clearer business transparency.

C

CPS-Datensysteme GmbH

virtueller-stundenplan.org

49

Virtueller Stundenplan is a German educational platform focused on providing students and school staff with digital timetable management, class plans, and administrative tools such as sick leave reporting. The platform supports login via email/password and integrates with Microsoft Office365 for authentication, targeting primarily German-speaking students and educational institutions. The website is built using RapidWeaver CMS with Bootstrap and jQuery, offering a responsive and user-friendly interface. While the technical infrastructure is adequate for its purpose, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. The domain registration is consistent and transparent, registered under CPS-Datensysteme GmbH since 2020, which aligns with the business age and purpose. Overall, the website demonstrates moderate technical maturity and business credibility but lacks comprehensive privacy and security policies.

C

Con i Bambini

percorsiconibambini.it

39

Percorsi con i bambini is a non-profit network platform managed by Con i Bambini, focused on coordinating and sharing projects aimed at combating educational poverty among minors in Italy. The website serves as a collaborative space for project leaders and partners to publish updates, articles, and event information. It is affiliated with Fondazione CON IL SUD, indicating a strong institutional backing. The platform targets organizations involved in social and educational initiatives, providing a niche but important service in the non-profit sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and the Yoast SEO plugin, ensuring good SEO and mobile responsiveness. It uses Matomo for analytics, emphasizing privacy. The site is well-structured with comprehensive metadata and structured data for SEO. However, the domain is currently expired, posing a risk to availability. Security headers are not explicitly detected, and there is no visible security policy or incident response information, which are areas for improvement. From a security perspective, the site uses HTTPS and DNSSEC, which are positive indicators. The lack of explicit security headers and vulnerability disclosure mechanisms suggests moderate security maturity. Privacy compliance is good, with clear privacy and cookie policies and a consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and serves a clear social mission. The main risk is operational due to domain expiration and some missing security best practices. Addressing these will improve resilience and trustworthiness.

B

basemap.de

basiskarte.com

46

basemap.de is a German-focused official cartographic service provider offering a range of modern map products including vector and raster services, 3D geodata visualization, and flexible cartographic solutions. The website is professionally designed using WordPress and modern plugins, targeting government agencies, GIS professionals, and businesses requiring authoritative geospatial data. The technical infrastructure is solid, leveraging a reputable hosting provider and modern web technologies, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Privacy compliance is adequate with a privacy policy present but lacks cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its niche.

H

Häussler GmbH

haeussler.de

44

Häussler GmbH is a well-established German company specializing in the rental of high-quality gastronomy and event equipment, including cutlery, glasses, tableware, linens, furniture, buffet and banquet supplies, and coffee culture products. Founded in 1991, the company serves both business and private clients, focusing on large-scale events such as trade fairs, weddings, and corporate anniversaries. Their market position is strong with a reputation for quality and reliability, supported by two related brands: Häussler Leihservice and dishcounter, which extend their service offerings in the event rental space. Technically, the website employs a modern but basic tech stack including jQuery, Bootstrap, AOS for animations, and Google Maps API. The site is mobile-optimized and well-structured, though some external resources are loaded over HTTP, which could cause mixed content issues. No CMS was detected, and hosting is provided by a German hosting provider consistent with the company’s location. From a security perspective, the site lacks visible security headers and a cookie consent mechanism, which impacts privacy compliance. No forms or sensitive data collection points were found, reducing immediate risk exposure. The WHOIS data aligns with the company’s claimed history and location, supporting legitimacy. Overall, the security posture is moderate but could be improved by enforcing HTTPS on all resources and adding security headers. The overall risk assessment is low, with recommendations focusing on improving security best practices, privacy compliance, and technical modernization to enhance trust and user experience.

The website jugend-in-aktion.de is currently inaccessible due to a Cloudflare security block, which prevents any meaningful content or business information from being retrieved or analyzed. The site appears to be protected by Cloudflare's Web Application Firewall (WAF), which has triggered a block likely due to suspicious or malformed requests. As a result, no privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions available. This severely limits the ability to assess the company's market position, services, or compliance posture. From a technical perspective, the site is hosted behind Cloudflare, indicating a modern security infrastructure, but the block prevents evaluation of the underlying technology stack, performance, or SEO characteristics. Security posture cannot be fully assessed beyond the presence of Cloudflare protection. No security headers or SSL details are available from the provided data. Overall, the site currently presents a high risk from a usability and trust perspective due to inaccessibility. The lack of visible business or compliance information further reduces confidence. Strategic recommendations include resolving the Cloudflare block to restore access, publishing clear privacy and cookie policies, and providing transparent contact and security information to improve trust and compliance.

W

WeCanHelp gGmbH

bildungsspender.de

42

Bildungsspender.de is a well-established German charity shopping platform operated by WeCanHelp gGmbH. It enables users to support thousands of charitable institutions by shopping at a large network of partner shops without additional cost. The platform also offers a fee-free Mastercard and direct donation options, positioning itself as a leading charity e-commerce facilitator in Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. Technically, it uses a modern stack including Bootstrap 4, jQuery, and FontAwesome, hosted on kasserver.com. Security posture is adequate with HTTPS enabled and obfuscated contact emails, but lacks explicit security headers and a cookie consent mechanism. WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the site demonstrates good business credibility and technical maturity with room for security and privacy improvements.

C

Codex GmbH & Co. KG

codex-x.com

47

Codex GmbH & Co. KG operates a professional website focused on providing high-quality installation systems for tiling and natural stone, targeting qualified tilers and construction professionals. The company is positioned as a medium-sized manufacturing entity within Germany and is part of the Uzin Utz SE group, which is reflected in the branding and linked domains. The website is built on TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo, demonstrating a mature digital infrastructure. The site features comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements, enhancing user trust and compliance. Security posture is solid with HTTPS enforced and session management for logged-in users, though some security headers and explicit security policies are absent. Overall, the website presents a professional, well-structured, and user-friendly experience with clear business information and contact details. However, the lack of WHOIS data for the subdomain reduces domain trustworthiness slightly, though the overall legitimacy is supported by consistent branding and external references.

K

Startseite - KDN

kdn.de

44

The website www.kdn.de presents a German-language business site with a basic but functional design, built on WordPress using Elementor and optimized with WPRocket. The site appears to be a small-scale business presence with limited publicly available business information. Technical infrastructure includes modern web technologies but lacks visible advanced security configurations such as security headers or explicit SSL details. No privacy, cookie, or terms of service policies were detected, indicating potential compliance gaps. Contact information and incident response channels are not clearly provided, limiting user trust and support options. Overall, the site is accessible without WAF or blocking mechanisms but would benefit from enhanced security and compliance measures.

B

beckers-ulm

beckers-ulm.de

47

beckers-ulm is a hospitality and event services provider based in Ulm, Germany, offering event planning, catering, and multiple venue services including a café restaurant, pizzeria, and bar. The company targets a general audience interested in organizing events and enjoying quality dining experiences. The website reflects a local/regional market position with a focus on personalized hospitality services. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging popular plugins for SEO and GDPR compliance. The hosting is consistent with the domain registration, indicating a stable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear policies and consent banners. Overall, the website is professional, trustworthy, and well-optimized for its business domain.

G

German Road Races (GRR) e.V.

germanroadraces.de

42

German Road Races (GRR) e.V. is a German non-profit association representing running event organizers. It serves as a community hub and voice for running sports, providing event promotion, knowledge exchange, and awards. The website is professionally designed using WordPress with BuddyBoss and Elementor, offering good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy policies are present and GDPR compliant. Contact is available via email and forms, and social media presence supports community engagement. Overall, the site reflects a legitimate, well-maintained organization with a clear focus on running sports in Germany.

The website oxygenforensics.com is currently inaccessible due to a Cloudflare security challenge page that blocks direct content access. This challenge page is designed to verify visitor legitimacy before granting access to the actual website content. As a result, no business-related content, contact information, or policies are visible for analysis. The domain is registered since 2013 with NameCheap, Inc. and uses Cloudflare for DNS and security services, indicating a legitimate and established domain. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance posture. The technical infrastructure includes modern JavaScript and Web Worker usage for the captcha challenge, but no SEO or accessibility optimizations are evident on the challenge page itself. Security headers and privacy policies are not visible, which is typical for a challenge page but limits security posture evaluation.

C

COSMO Wissenschaftsforum

cosmo-wissenschaftsforum.de

44

COSMO Wissenschaftsforum is a science communication and exhibition platform located in Dresden, Germany, focused on engaging the public with current scientific research in areas such as artificial intelligence, robotics, and medical technology. It offers interactive exhibitions, workshops for children and youth, guided tours, and space rental services. The website is built on WordPress with Elementor and integrates various plugins for social media feeds, event management, and GDPR compliance. The technical infrastructure is modern and hosted on OVH, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and secure forms, though some security headers and policies could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy. Overall, the website presents a professional and trustworthy image suitable for its educational mission.

I

innovationen-sachsen.de

innovationen-sachsen.de

44

The website at wisawi-vernetzt.de currently presents only a minimal loading spinner with no accessible content, indicating that the site is either under construction, blocked, or improperly configured. The domain is hosted on agenturserver nameservers and uses assets from the Innoloft platform, but no business or contact information is available on the site. This severely limits the ability to assess the business model, market position, or services offered. Technically, the site uses modern JavaScript modules and CSS but lacks visible SEO, accessibility, or performance optimizations. Security posture is weak due to absence of HTTPS confirmation and missing security headers. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site is not currently functional or informative, posing a risk for trust and credibility.

B

Bootstrap Package

bootstrap-package.com

46

Bootstrap Package is an open source project providing a fully configured frontend theme for TYPO3 CMS based on the Bootstrap CSS Framework. It targets TYPO3 users and developers seeking advanced theming capabilities and modern templating without reliance on third-party extensions. The project is maintained openly on GitHub and distributed via the TYPO3 Extension Repository and Packagist, positioning itself as a leading theme package within the TYPO3 ecosystem. Technically, the website leverages TYPO3 CMS with Bootstrap 5, enhanced by JavaScript libraries such as Photoswipe and Prism.js. It employs Google Tag Manager for analytics and tracking, and the site is mobile-optimized with good accessibility and SEO practices. The site uses HTTPS with strong SSL configuration but lacks some advanced security headers. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks explicit security policies, incident response information, and vulnerability disclosure channels. The absence of WHOIS registration data limits domain legitimacy verification, though the open source nature and professional presentation suggest a trustworthy project. Overall, the site presents a professional, well-structured, and content-rich platform for TYPO3 theming, with moderate security posture and good privacy compliance. Strategic improvements in security headers, contact transparency, and domain registration clarity would enhance trust and compliance.

M

Munich Intellectual Property Law Center (MIPLC)

miplc.de

45

The Munich Intellectual Property Law Center (MIPLC) is a specialized academic institution offering a one-year LL.M. program focused on intellectual property, innovation, and competition law. It operates with strong partnerships including the Max Planck Institute for Innovation and Competition and prominent universities, positioning itself as a niche leader in legal education for innovation-driven economies. The website reflects a high level of professionalism, with comprehensive content, multimedia integration, and clear navigation tailored to prospective students and academic audiences. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and privacy-conscious analytics via Matomo with cookies disabled. However, some security headers and explicit security policies are missing, and no direct contact emails or phone numbers are provided, relying instead on contact forms. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though improvements in transparency and security documentation could enhance user trust further.

B

beckers-ulm

cafe-restaurant-stadthaus.de

47

beckers-ulm operates a hospitality business focused on café and restaurant services located in Ulm, Germany. The website highlights their offerings including lunch menus, homemade cakes, and coffee from their own roastery, targeting local customers and visitors. The business maintains a professional online presence with clear contact details and a user-friendly reservation system. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging SEO and privacy plugins to enhance user experience and compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the business's local market position effectively.

H

Hagmann Umzüge GmbH

hagmann-umzug.com

37

Hagmann Umzüge GmbH is a well-established moving and logistics company based in Ulm, Germany, founded in 2000. The company offers a broad range of services including private and corporate relocations, transport, storage solutions, and specialized moving services such as high-tech and international moves. Their market position is regional with a focus on quality service for both private individuals and businesses. The website reflects a professional business model with clear service offerings and a consistent brand presence. Technically, the website employs modern tracking and consent management technologies such as Cookiebot, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. The site is hosted by IONOS SE, a reputable provider, and uses HTTPS with a clientTransferProhibited domain status, enhancing security. Mobile optimization and SEO practices are good, though accessibility could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent compliance. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent with the business history, supporting legitimacy. Overall, the website is secure, compliant with GDPR, and professionally maintained, with minor recommendations to enhance DNS security and publish explicit security policies. The risk profile is low, and the company appears trustworthy and credible in its sector.

B

Brunnenverwaltung Bad Dietenbronn GmbH

dietenbronner.de

46

Brunnenverwaltung Bad Dietenbronn GmbH operates the Dietenbronner Mineralwasser brand, a regional mineral water and beverage producer based in Oberschwaben, Germany. The company has a long-standing family ownership of over 90 years and offers a range of products including mineral water, schorlen, fruit juice beverages, and lemonades. The website reflects a professional and consistent brand image targeting general consumers interested in natural and regional products. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and JavaScript libraries, providing a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

H

Häussler Technische Orthopädie GmbH

haeussler-ulm.de

45

Häussler Technische Orthopädie GmbH is a well-established healthcare provider specializing in orthopaedic and rehabilitation technology, medical supplies, and homecare services. With over 100 years of history and multiple physical branches primarily in the Ulm region of Germany, the company offers personalized consultation and a broad range of healthcare products. Their market position is that of a trusted regional family business with a strong local presence and comprehensive service offerings. Technically, the website is built using modern frontend technologies including Vue.js and Tailwind CSS, with good mobile optimization and performance. The site integrates Google Tag Manager and Google Identity Services for analytics and marketing purposes. Security posture is solid with HTTPS enforced and cookie consent implemented, although explicit security headers and a public security policy are absent. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and user-friendly digital presence aligned with the company's business objectives.

B

basemap.de

basemap.de

46

basemap.de is a specialized provider of official cartographic products and web mapping services for Germany, targeting government agencies and GIS professionals. The website presents a professional and consistent brand image with a focus on official geospatial data products derived from centralized data sources. The technical infrastructure is based on a modern WordPress CMS with popular plugins and frameworks, hosted on German servers, indicating a mature digital presence. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its niche, though improvements in security and compliance would enhance its profile.

P

Panoramahotel Oberjoch

panoramahotel-oberjoch.de

49

Panoramahotel Oberjoch is a 4-star superior wellness hotel located in the Allgäu region of Germany, offering services such as pools, saunas, massages, fine dining, and alpine spa experiences. The website positions the hotel as a premium destination for wellness and leisure travelers, supported by a strong customer rating and active social media presence. Technically, the site is built on TYPO3 CMS, integrates modern marketing and analytics tools like Mailchimp and Google Tag Manager, and is hosted on raidboxes.net, indicating a professional digital infrastructure. Security posture is moderate with HTTPS implied but lacks visible security headers and formal privacy or cookie policies, which are recommended for compliance and trust. Overall, the website is well-designed, content-rich, and trustworthy, with room for improvement in privacy compliance and security best practices.

The website www.rinascente.it is currently inaccessible due to geo-blocking restrictions, presenting only a minimal HTML page with an iframe pointing to a maintenance or geo-block notice. Rinascente is a retail business based in Italy, likely operating in the luxury or fashion sector, but no direct content or business details are accessible on the landing page. The domain registration data is consistent with a legitimate retail company in Italy, supporting the business credibility despite the lack of accessible content. Technically, the site does not expose any metadata, scripts, or contact information in the provided HTML, limiting the ability to assess technical maturity or security posture. Security evaluation is constrained by the lack of accessible content and headers, but no immediate vulnerabilities or risks are evident from the data. Overall, the site is safe with no adult or explicit content, but the geo-blocking significantly limits analysis and user experience.