High-risk security reports

S

Sebastian Bauer

passiondriving.de

46

passiondriving.de is a specialized German-language blog focused on automotive and motorcycle content, including detailed test drives, reviews, and roadtrip reports. Founded in 2011 by Sebastian Bauer, a recognized motor journalist, the site targets enthusiasts passionate about cars and motorcycles, particularly those interested in performance and niche topics like the Nürburgring Nordschleife. The business model centers on content publishing with a strong community and social media presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics with IP anonymization to track user engagement. The website is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy and credible online presence.

K

KEHRE11.de

kehre11.de

47

KEHRE11.de is a German niche blog focused on sporty cars, Alpine passes, and road trips, targeting automotive enthusiasts and travelers interested in scenic driving experiences. The website offers automotive news, reviews, photo stories, hotel recommendations, and a newsletter subscription service. It operates on a WordPress platform with modern web technologies and plugins, ensuring a good user experience and mobile optimization. The site maintains a consistent brand presence with active content updates and social media integration via Instagram. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and cookie consent mechanisms could be improved. Privacy compliance is basic with a privacy policy present but lacking a cookie banner. Overall, the website is professional, trustworthy, and safe for general audiences.

B

BigBlogg.motoring

bigblogg.com

46

BigBlogg.motoring is a niche automotive blog primarily focused on MINI vehicles and related automotive content. The website offers news, reviews, and community engagement through blog articles and social media channels. It targets automotive enthusiasts, especially those interested in MINI and other German car brands. The business model centers on content publishing with a small-scale operation evident from the site structure and content volume. Technically, the site is built on WordPress using Elementor, with moderate performance and good mobile optimization. The use of Matomo analytics suggests a privacy-conscious approach to user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content appears professional and trustworthy. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is functional and relevant to its audience but would benefit from enhanced security and compliance measures.

The website at netint.com is currently inaccessible, serving a 403 Forbidden error page likely enforced by Cloudflare security mechanisms. This prevents access to any meaningful content, including business descriptions, contact information, or policies. The domain is well-established, created in 1994 and registered through GoDaddy, with DNS hosted on Cloudflare. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies significantly limit the ability to assess the company's digital maturity or security posture comprehensively. The website shows minimal technical implementation beyond basic HTML and CSS for the error page, with no visible scripts or analytics. Security headers and DNSSEC are not enabled, indicating room for improvement in security best practices.

S

SPIEL Essen

spiel-essen.de

41

SPIEL Essen is the world's largest public board game fair held in Essen, Germany, attracting over 200,000 visitors and hundreds of exhibitors globally. The website serves as the primary information and ticketing portal for the event, offering detailed program information, exhibitor services, and community engagement through newsletters and social media. The site is professionally designed using Joomla CMS and modern frontend technologies, ensuring a good user experience across devices. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site reflects a mature digital presence aligned with a large-scale event organizer.

I

intersoft consulting services AG

intersoft-consulting.de

48

intersoft consulting services AG is a specialized consulting firm focused on data protection, IT security, and IT forensics. Positioned as one of the leading providers of external data protection officers in Germany, the company offers a broad range of services including GDPR compliance, IT security consulting, incident response, and certification support such as ISO 27001 and ISO 27701. Their target audience primarily consists of businesses seeking expert guidance in data protection and IT security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their market segment. Technically, the site is built on WordPress with modern frameworks and optimization tools, ensuring fast performance and mobile responsiveness. Security posture is strong with HTTPS, inferred security headers, and a cookie consent mechanism, though explicit vulnerability disclosure policies are absent. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business. Strategic recommendations include publishing a vulnerability disclosure policy and enhancing incident response contact visibility to further strengthen security transparency.

The website 'Best of OpenStreetMap' is a niche platform curated by Geofabrik GmbH, showcasing exemplary mapping projects and interesting places within the OpenStreetMap ecosystem. It targets GIS professionals, map enthusiasts, and the OpenStreetMap community by providing curated map examples and downloadable KML data. The site positions itself as a specialized resource within the mapping technology sector, with a small company footprint based in Germany. Technically, the site employs OpenLayers for map rendering and an outdated version of jQuery, indicating a legacy technology stack. The presence of multiple broken map tile images suggests some maintenance or configuration issues affecting user experience. The site lacks modern CMS indicators and does not appear to use advanced hosting or performance optimization techniques. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, no HTTPS or security headers information was available, and the site lacks privacy and cookie policies, which are critical for compliance and user trust. The WHOIS data is malformed or protected, limiting domain trust analysis, but the association with Geofabrik GmbH and OpenStreetMap contributors supports legitimacy. No signs of malware, phishing, or adult content were detected, and no advanced security frameworks or incident response contacts are present. Overall, the website is functional and relevant to its audience but requires technical and security enhancements to improve user experience, compliance, and trustworthiness. Strategic recommendations include updating the technology stack, fixing broken map tiles, implementing HTTPS and security headers, and publishing privacy and cookie policies.

Allwebco Design Corporation operates a niche website offering developer-grade, mobile-friendly HTML and CSS web templates primarily targeting novice and professional web developers and small businesses. The company has a long-standing presence since 2002 and provides a variety of responsive templates, built-in scripts, and support resources. Their business model centers on downloadable templates and related add-ons, complemented by web hosting services linked via partner domains. The website content is well-structured, professionally designed, and offers clear navigation with multiple template categories and support options.

The website at https://zohopublic.eu/ is currently inaccessible, returning a 401 authentication error with minimal JSON content indicating an authentication failure. Due to this, no meaningful content, metadata, or business information is available for analysis. The domain is registered through CSC CORPORATE DOMAINS INC., a reputable registrar, which suggests a legitimate registration, but the lack of accessible content and contact information limits trust and usability. Technically, the site lacks visible security headers, privacy policies, or any user-facing content, indicating a low digital maturity level. Security posture cannot be fully assessed but is likely weak given the absence of visible security best practices. Overall, the site presents a high risk due to inaccessibility and lack of transparency, and strategic recommendations focus on enabling proper access, implementing security and privacy policies, and improving content quality.

IT-Grünenwald GmbH is a small German IT consulting company specializing in virtualization, installation, migration, maintenance, and training services primarily for municipalities, SMEs, schools, and freelancers in the Stuttgart-Heilbronn-Heidelberg-Karlsruhe region. Their offerings include Windows client and server solutions, IT security, remote support, and hardware/software procurement with leasing options. The website is basic and somewhat outdated, using legacy technologies like Flash and lacking modern security features such as HTTPS and security headers. Contact information is available via email, but no phone numbers or social media links are provided. Privacy compliance is minimal with no cookie consent mechanism detected.

Geosys-Eber Ingenieure is a small regional surveying engineering firm based in Munich, Germany, providing expert surveying and measurement services primarily in Munich and surrounding areas. The company positions itself as a reliable and precise service provider with a focus on quality and long-term client relationships. Their website reflects a professional but modest digital presence, leveraging a common CMS (Redaxo) and standard web technologies such as jQuery and Nivo Slider. The site includes a cookie consent mechanism and uses Matomo analytics, indicating awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the website is well-structured, user-friendly, and trustworthy for its business domain, with room for improvement in mobile optimization and security best practices.

G

Geofabrik GmbH

geofabrik.de

45

Geofabrik GmbH is a specialized technology company focused on extracting, processing, and providing free geodata primarily sourced from OpenStreetMap. Their services include creating shape files, maps, map tiles, and web mapping solutions, complemented by consulting and training offerings. The company positions itself as an expert in the OpenStreetMap ecosystem, targeting businesses and organizations requiring geospatial data solutions. Technically, the website is built with standard HTML, CSS, and JavaScript (including jQuery), hosted on Hetzner infrastructure, and demonstrates moderate performance and basic mobile optimization. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but lacks advanced security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with its business focus.

T

terrestris GmbH & Co. KG

terrestris.de

42

terrestris GmbH & Co. KG is a specialized technology company focused on delivering WebGIS solutions using free and open source software. Their offerings include interactive web maps, 3D spatial data visualization, mobile GIS clients, and comprehensive GIS software stacks such as SHOGun. The company targets organizations and businesses requiring spatial information systems and mapping solutions, positioning itself as a niche expert in open source GIS technologies within Germany. Technically, the website is built on WordPress 6.1.9 with common plugins like Contact Form 7 and Crayon Syntax Highlighter. It uses OpenLayers for map rendering and jQuery 2.1.0 for scripting. Hosting appears to be managed via servers indicated by the nameservers your-server.de and second-ns.de. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility is basic. From a security perspective, the site enforces HTTPS and disables cookies for analytics via Matomo, reflecting a privacy-conscious approach. However, it lacks security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, terrestris.de presents a professional, trustworthy, and content-rich website suitable for its business domain. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance. The domain registration is consistent with the business claims, supporting legitimacy and trustworthiness.

The website mobidrom.de currently serves only a generic application not available error page, indicating that the application is either not started or not properly deployed. There is no meaningful business content, metadata, or contact information available on the site. The domain uses name servers associated with porscheinformatik.com, suggesting hosting or DNS management by a third party, but no registrant details or company information are provided to confirm ownership or legitimacy. Technically, the site lacks security headers, privacy policies, and any form of user interaction or tracking, reflecting a very low digital maturity level. Security posture is minimal due to absence of HTTPS and security best practices. Overall, the site is non-functional and provides no business or compliance information, resulting in a very low trust and security score.

O

OpenStreetMap Deutschland

openstreetmap.de

47

OpenStreetMap Deutschland operates as a community-driven project dedicated to providing a free, editable world map. The website serves as a hub for information about the project, usage instructions, community engagement, and contribution opportunities. It holds a strong position within the open mapping community in Germany and globally, emphasizing open data and collaborative mapping efforts. Technically, the website is built using the Hugo static site generator, delivering fast performance, good mobile optimization, and accessibility. The site enforces HTTPS and avoids exposing sensitive data, though it lacks some common security headers and cookie consent mechanisms. Security posture is solid but could be improved with additional headers and published security policies. Overall, the domain is legitimate and consistent with the OpenStreetMap project, though registrant details are not publicly disclosed due to DENIC policies. The site maintains high content quality and professionalism, with minimal user tracking and a strong focus on privacy.

F

FOSSGIS e.V.

fossgis.de

46

FOSSGIS e.V. is a German non-profit association dedicated to promoting free GIS software and free geodata. It serves as the official Local Chapter for OpenStreetMap and the OSGeo Foundation in the German-speaking region, organizing community events and conferences such as the FOSSGIS conference. The website reflects a focused community and non-profit orientation with clear messaging and donation options. Technically, the site is built using the Hugo static site generator, hosted on Schlund Technologies infrastructure, and employs modern CSS techniques for responsive design. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and privacy compliance mechanisms such as cookie consent. No contact emails or phone numbers are explicitly provided, which may limit direct communication channels. Overall, the site is professional, trustworthy, and well-aligned with its community-focused mission.

I

intersoft consulting services AG

ai-act-law.eu

45

The website ai-act-law.eu is operated by intersoft consulting services AG, a German consulting firm specializing in data protection, IT security, and IT forensics. The site serves as a comprehensive and neatly arranged resource presenting the final text of the EU Artificial Intelligence Act in English and German, targeting legal professionals, AI developers, and compliance officers. The business model focuses on providing authoritative legal information and consulting services related to AI regulation and data protection. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo, configured to disable cookies for privacy. The site is well-structured, mobile-optimized, and uses HTTPS, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS and privacy-conscious analytics, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professional, and serves as a valuable resource for its target audience.

H

hr werbung GmbH

hr-werbung.de

46

hr werbung GmbH operates as the advertising and sponsorship division of Hessischer Rundfunk, providing radio and television advertising services primarily in the Hessen region of Germany. The company offers targeted radio advertising, sponsoring opportunities, spot production, and licensing services, positioning itself as a key regional media advertising provider. The website reflects a professional and well-structured digital presence with comprehensive service information and legal documentation.

F

FameThemes, Inc.

famethemes.com

45

FameThemes, Inc. operates a professional website specializing in premium WordPress themes and plugins, targeting WordPress users and developers seeking elegant and functional website designs. The company has been active since at least 2013 and offers both free and paid products with live demos and documentation to support customers. The business model centers on digital product sales with a focus on usability and clean design. Technically, the website is built on WordPress 6.8.3 with popular plugins such as Easy Digital Downloads and Elementor, integrating Google Analytics and PayPal for analytics and payments respectively. The site is mobile-optimized and SEO-friendly, providing a good user experience.

S

smartpit.de

smartpit.de

49

smartpit.de is a German-language automotive blog focused on the smart car brand, providing news, reviews, event coverage, and studies related to smart vehicles. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs SEO best practices such as structured data and canonical URLs. The site is well-maintained with regular content updates and a consistent branding approach. However, it lacks explicit contact information and cookie consent mechanisms, which are important for user trust and regulatory compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement.

E

evTrend.de - Neuigkeiten rund um Elektroantrieb

evtrend.de

32

evTrend.de is a German-language online news portal specializing in electric mobility, electric drives, infrastructure, and related automotive and technology sectors. The website provides up-to-date news articles and technical insights targeting German-speaking audiences interested in electric vehicles and sustainable transportation. The business operates as a niche media outlet with a focus on independent and cross-manufacturer news coverage. Technically, the site is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for search engine optimization, caching plugins for performance, and push notification services to engage users. Hosting appears to be managed via kasserver.com, with standard WordPress technologies and jQuery libraries in use. Security posture is moderate, with HTTPS enabled and indications of Wordfence security plugin presence, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The site includes advertising scripts from multiple ad networks and tracking services, indicating monetization through ads and user tracking. Overall, the website is professionally designed, mobile-optimized, and content-rich, but would benefit from enhanced privacy compliance and security best practices.

A

Autophorie

autophorie.de

46

Autophorie.de is a German automotive media website specializing in car reviews, video test drives, and automotive features. The site targets automotive enthusiasts and general consumers interested in detailed and engaging automotive content. It maintains a niche position in the German automotive media landscape, leveraging video content and expert reviews to attract its audience. Technically, the website is built on WordPress using the Twenty Fifteen theme, enhanced with SEO and GDPR compliance plugins such as Yoast SEO and Complianz. Hosting is provided by Bananabyte, a German hosting provider, ensuring regional consistency. The site demonstrates good mobile optimization, moderate performance, and solid SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. However, no explicit terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and safe for general audiences.

T

Tee & Gewürzecke Lux

tee-gewuerze-lux.de

46

Tee & Gewürzecke Lux is a small, well-established retail business based in Weißenburg, Germany, specializing in a diverse range of teas, spices, regional delicacies, and gift products. Founded in 1979, it enjoys a loyal local customer base and emphasizes personalized service and high-quality products. The website reflects this focus with clear product descriptions and social media integration but lacks advanced digital marketing or e-commerce features. Technically, the site is built with standard web technologies and hosted via a German provider, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and protection. Overall, the business presents a trustworthy and professional image online, though enhancements in privacy compliance and security policies would strengthen its digital maturity.

The website stirlingmoss.de is a professionally designed informational site dedicated to the exclusive Mercedes-Benz SLR McLaren Stirling Moss (Z199) sports car. It targets enthusiasts and collectors interested in this limited edition vehicle, providing detailed descriptions, high-quality images, and downloadable manufacturer documentation. The site is hosted on German infrastructure and references Mercedes-Benz Group AG as the rights holder for images and content, lending credibility to the business representation. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) with moderate performance and good mobile optimization. However, it lacks advanced security headers and visible privacy compliance mechanisms such as cookie consent banners. No contact or incident response information is provided, which limits user engagement and trust in security matters. Overall, the site is safe, free of adult or questionable content, and serves as a niche marketing and informational platform for a luxury automotive product.

The domain c4t.cc is registered since 2013 with a reputable registrar and has a valid registration status. However, the website content is completely empty with no metadata, no visible text, no forms, no external links, and no contact information. This indicates the site is either inactive, under construction, or blocked by security mechanisms. The lack of HTTPS and security headers further reduces the security posture. No privacy or cookie policies are present, and no business information or branding is visible. Overall, the website lacks any digital maturity or business presence to assess. The domain registration is consistent and legitimate, but the absence of content and security features poses a risk for trust and usability.

T

toys-kids.de

toys-kids.de

45

toys-kids.de is a German media publishing website specializing in the toy and baby/kids product industry, offering trade magazines, industry news, event listings, and product showcases. The site targets professionals and stakeholders within this niche market and positions itself as an established media source with over 50 years of expertise. The business model revolves around media publishing and industry insights, serving a medium-sized audience primarily in Germany. Technically, the website is built on WordPress 6.8.3 with a modern plugin ecosystem including Yoast SEO, WP Rocket, Slider Revolution, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Hosting appears to be managed via GoDaddy's domain control services. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The site does not appear to be behind a WAF or security challenge, allowing full content access. Overall, toys-kids.de presents a professional and trustworthy online presence with good content quality and technical implementation. However, improvements in privacy policy visibility, security header implementation, and incident response transparency would enhance compliance and security posture.

G

GALORE

galore.de

44

GALORE is a German interview magazine focused on cultural, societal, and lifestyle topics, offering authentic and insightful interviews with notable personalities. The website serves as a platform for magazine subscription, cultural articles, and newsletters, targeting a general audience interested in culture and society. The business operates in the media sector with a niche market position and a small company size. Technically, the website uses modern web technologies including Bootstrap and Owl Carousel, with Google Analytics for user tracking. The site is mobile optimized and has good SEO practices, though no CMS is explicitly identified. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which impacts privacy compliance. No explicit contact information or security policies are published, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Domainers Registrar AG

domainers.de

45

Domainers Registrar AG is a German-based domain registrar specializing in domain registration and management services primarily for European markets. Established since 2008, the company emphasizes personal service, efficient domain portfolio management, and transparent pricing. Their offerings include domain registration for popular TLDs such as .de, .eu, and .com, alongside value-added services like reseller systems, API integrations, smartphone apps, and SSL certificate provisioning. The website reflects a mature digital presence built on WordPress with modern plugins and security features such as CAPTCHA and two-factor authentication.

M

Mint Media AS

mintmedia.no

46

Mint Media AS is a Norwegian digital marketing agency established in 2016, specializing in helping small and large companies increase their digital visibility and marketing effectiveness. The company holds a Google Partner certification, underscoring its expertise in Google Ads and digital advertising. Their website showcases a professional design with clear navigation, client case studies, and trust signals such as Trustpilot reviews, positioning them as a credible player in the media sector in Norway. Technically, the site is built on WordPress with modern tools like WPBakery, Gravity Forms, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the site reflects a trustworthy and professional business with good digital maturity.

FOSSGIS e.V. organizes the FOSSGIS-Konferenz 2026, a leading conference in the German-speaking region focused on Free and Open Source Software for Geoinformation Systems, Open Data, and OpenStreetMap. The event targets users, developers, researchers, and enthusiasts in the GIS and open data community, providing a platform for knowledge exchange and networking. The conference is supported by multiple sponsors and academic partners, including the University of Göttingen. Technically, the website is built with standard HTML5 and CSS3, uses FontAwesome for icons, and is hosted on Schlundtech infrastructure. The site is well-structured, mobile-optimized, and SEO-friendly but lacks advanced frameworks or CMS indications. Security posture is moderate with no visible security headers or incident response policies, and no cookie consent mechanism is implemented despite GDPR relevance. Contact information is limited to an email address for conference organization. Overall, the website is professional and trustworthy but could improve in security and privacy compliance aspects.

K

Karl-Heinz Blum GmbH & Co.KG

walhalla.shop

44

Walhalla Shop is a specialized e-commerce retailer based in Germany, offering a range of Nordic-themed alcoholic beverages and related fan merchandise. The company leverages a Joomla CMS platform enhanced with modern front-end technologies such as Bootstrap and Smart Slider 3 to deliver a visually appealing and user-friendly website. The site is well-structured with clear navigation and includes essential business contact information, privacy, cookie, and terms of service policies, reflecting a mature digital presence. Security-wise, the website enforces HTTPS and uses CAPTCHA on forms, but lacks some advanced security headers, indicating room for improvement in hardening its security posture. Overall, the website is accessible without WAF or blocking mechanisms, and the domain registration data aligns well with the business claims, supporting its legitimacy.

T

The Jekill & Hyde Company bv

jekillandhyde.com

47

The Jekill & Hyde Company bv operates a niche business specializing in electronically adjustable motorcycle exhaust systems, targeting motorcycle enthusiasts primarily in the Netherlands. Their website offers a brand selector configurator tool, emphasizing product customization, performance, quality, and legal compliance. The company positions itself as a quality-focused manufacturer with a direct-to-consumer sales model. Technically, the website employs a modern JavaScript stack including jQuery, Select2, Hammer.js, and integrates marketing and analytics tools such as Klaviyo, Google Tag Manager, and Facebook Pixel. Cookie consent is managed via Cookiebot with TCF v2.2 compliance, indicating attention to privacy regulations. However, no explicit privacy or terms of service pages were found in the provided content. Security posture shows some strengths like CSRF token usage and HTTPS implied by external scripts, but lacks visible security headers and explicit security policies. WHOIS data is missing, which is unusual and reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is professionally designed, mobile optimized, and provides clear contact details, but could improve transparency and security practices.

D

DELTA PARTS

deltaparts.de

46

DELTA PARTS is a German manufacturer and retailer specializing in high-quality custom motorcycle parts produced using advanced CNC milling and laser technology. The company targets motorcycle enthusiasts and retailers seeking premium components such as license plate holders, fuel caps, lighting, and accessories. Their market position is that of a specialized manufacturer with a focus on quality and German engineering. The website is built on WordPress with Elementor, featuring modern design and multilingual support via GTranslate. Technical infrastructure is solid with HTTPS enabled and use of SEO plugins, though performance is moderate. Security posture is adequate but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

T

Toni-Garten und Landschaftsbau

toni-garten-und-landschaftsbau.de

49

Toni-Garten und Landschaftsbau is a small, local landscaping and garden care business based in Delmenhorst, Germany. The company offers a range of services including hedge trimming, lawn mowing, and complete garden redesigns, emphasizing quality workmanship and customer satisfaction. Their website is professionally designed with clear navigation and provides comprehensive contact options including phone numbers, email, physical address, and a secure contact form with CAPTCHA. Social media presence on Facebook and Instagram supports their local marketing efforts. Technically, the website is built using the MyWebsite NOW platform, employing modern web standards such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. Hosting is managed via UI-DNS name servers, indicating a professional DNS setup. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner, although no explicit security policy or incident response information is provided. Security posture is moderate, with secure form handling and consent mechanisms in place, but lacking visible security headers and detailed security documentation. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's business claims, supporting legitimacy. Overall, the site presents a trustworthy and professional image suitable for its local service market. Recommendations include enhancing security headers, verifying SSL/TLS configurations, adding explicit security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

Studio 49 Vechta is a small local tattoo and piercing studio based in Schneiderkrug, Germany. The business offers tattoo and piercing services with a focus on appointment-based scheduling, including online booking for piercings. Their website is built on WordPress using common plugins such as Contact Form 7 and Bookly for appointment management. The site is professionally designed with consistent branding and provides clear information about services, pricing, and team members. Social media presence on Facebook and Instagram supports customer engagement. Technically, the website uses a modern WordPress stack with jQuery and Bootstrap, hosted on servers associated with kasserver.com. The site is mobile-optimized and performs moderately well. Security is adequate with HTTPS enforced and CSRF tokens in forms, but lacks advanced security headers and explicit security policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a consent mechanism. The security posture is solid for a small business, with no detected vulnerabilities or exposed sensitive data. However, improvements can be made by adding security headers and incident response contacts. The domain WHOIS data is consistent with the website content and business location, indicating legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, Studio 49 Vechta presents a trustworthy and professional online presence suitable for its local service business. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining plugin updates to ensure ongoing security and compliance.

ZECH Smart Construction operates as a partnering model for complex construction projects, emphasizing cooperation, constructiveness, and transparency. The company is positioned within the German construction and real estate sector, targeting industry professionals and project partners. Their business model focuses on providing smart construction modules and project implementation support under the ZECH brand umbrella. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and jQuery, featuring a moderate performance and good mobile optimization. The site employs Matomo analytics with a compliant cookie consent mechanism, reflecting a mature approach to privacy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected and no formal security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in its market niche.

ZECH Building operates a business-focused digital platform primarily serving clients in the building and construction sectors in Germany. The website analyzed is a login portal for business users, built on the TYPO3 CMS platform with standard web technologies such as jQuery and Bootstrap. The site demonstrates a moderate level of digital maturity with secure HTTPS implementation and a professional, though basic, design. Privacy policy is externally linked on the parent domain, indicating some compliance with GDPR requirements, though cookie consent mechanisms are absent. Security posture is adequate with secure form handling but lacks advanced security headers and incident response disclosures. Overall, the site is functional and trustworthy for its intended business audience but could improve in privacy compliance and security transparency.

A

Auer Weber

auer-weber.de

49

Auer Weber is an established international architecture firm based in Germany with offices in Stuttgart and Munich. The company employs approximately 150 staff and has a strong portfolio of projects and awards, positioning itself as a reputable player in the architecture and real estate sector. Their website reflects a professional image with multilingual support and showcases their key projects and news updates. Technically, the website is built on TYPO3 CMS, leveraging JavaScript libraries such as jQuery and Flowplayer, and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and does not expose sensitive data, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a privacy and cookie policy present, though no active cookie consent mechanism is detected. Overall, the website is trustworthy and professional but could improve in security and compliance transparency.

The website bitex-workwear.de is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this, no business information, contact details, or policies are available for analysis. The domain is hosted on SiteGround name servers, a reputable hosting provider, but lacks publicly available WHOIS registrant details. The technical infrastructure appears minimal with no detectable scripts, analytics, or external links. Security posture cannot be fully assessed due to lack of accessible content and missing security headers or SSL details. Overall, the site presents a high risk due to inaccessibility and lack of transparency, limiting trust and business credibility.

Z

Zeller Kranservice

zeller-kranservice.de

44

Zeller Kranservice is a small German transportation service provider specializing in crane rental, offering autokran, anhängerkran, and minikran for various projects. The website is built on WordPress using the Divi theme and several plugins including Rank Math PRO for SEO optimization. The technical infrastructure is modern and moderately performant, hosted by Cloudpit. Security posture is adequate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. No contact emails or phone numbers were found in the provided content, which limits direct communication channels. Overall, the website presents a professional business presence with good SEO but requires improvements in privacy, security policies, and contact transparency to enhance trust and compliance.

B

Bauverlag

profil-buchhandlung.de

47

Profil-Buchhandlung is a specialized e-commerce platform operated by Bauverlag, focusing on providing technical books and data products related to construction, civil engineering, and architecture. The website offers a range of products including online access, print books, and data packages for the BGL BAUGERÄTELISTE, a key resource in the construction industry. The target audience includes professionals and students in the construction sector. The business maintains a consistent and professional online presence with clear contact and legal information, supporting its niche market position. Technically, the website is built on the SELLTEC CMS system and integrates modern tools such as Google Tag Manager and Usercentrics for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around security policies could further enhance trust and security posture.

Mercedes-Benz Oldtimer-Ticker is a specialized German-language online news portal dedicated to classic, old, and youngtimer Mercedes-Benz vehicles. It serves a niche audience of classic car enthusiasts and Mercedes-Benz lovers by providing news, event information, and community updates related to vintage Mercedes-Benz automobiles. The website is positioned as a trusted source within the classic automotive community, leveraging social media channels and structured data to enhance visibility and engagement. Technically, the website is built on the WordPress CMS platform, utilizing a variety of plugins for analytics, social media integration, and user login functionality. The hosting is managed via kasserver.com, and the site employs HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and anonymizes IP addresses in analytics. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found on the homepage. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility compliance.

Museen.de is a German-language media portal focused on providing comprehensive information about museums, exhibitions, and cultural topics within Germany. The site offers a full-text search feature, regional and thematic navigation, and articles related to museum events and cultural heritage. The target audience is the general public interested in museums and cultural activities. The business operates as a small media content provider under the Webmuseen Verlag brand. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Leaflet.js for interactive maps. The hosting appears to be managed via DomainControl (GoDaddy). The site shows basic mobile optimization and SEO practices but lacks advanced technical features or CMS identification. Performance is moderate with no evident critical technical issues. From a security perspective, the site uses HTTPS as implied by canonical URLs but lacks visible security headers such as CSP or HSTS. Forms do not show anti-CSRF tokens, and no security or incident response policies are published. Privacy compliance is weak, with no privacy or cookie policies detected, which is a significant gap given GDPR requirements. Contact information is limited to email addresses without phone or physical addresses. Overall, the website is functional and provides relevant cultural content but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.

KABINETT Verlag is a small German media publishing company with a focus on motor journalism and related media content. The website kabinett-online.de is currently under maintenance and provides detailed contact information and company background but lacks privacy, cookie, and security policies. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, hosted on servers indicated by the nameservers. No advanced CMS or analytics tools are detected. Security posture is moderate but could be improved by implementing HTTPS, security headers, and privacy compliance measures. Overall, the website presents a legitimate and consistent business presence but requires modernization and enhanced security and privacy practices to meet current standards.