Security Directory

Z

Zentralverband der deutschen Werbewirtschaft e. V.

zaw.de

0

The Zentralverband der deutschen Werbewirtschaft e. V. (ZAW) is a leading industry association representing the German advertising sector. The organization advocates for balanced political and economic frameworks supporting the advertising industry, publishes market data, and supports self-regulation efforts. The website targets stakeholders in the advertising, media, and political sectors within Germany. Technically, the site is built on WordPress with Yoast SEO, uses Cookiebot for cookie consent, and Matomo for analytics, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and privacy mechanisms, though lacks explicit security policies and incident response information. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in security transparency and policy disclosures.

N

NABU

nabu-naturgucker-journal.de

0

NABU-naturgucker-journal is a well-established non-profit platform dedicated to nature observation, species information, and environmental education primarily targeting German-speaking nature enthusiasts and conservationists. The website offers a broad range of content including species data, nature conservation topics, and community engagement features. It is part of the NABU ecosystem, a reputable environmental organization in Germany. Technically, the site is built on the IntraWeb framework with supporting libraries such as jQuery and Bootstrap, hosted likely by 1&1 IONOS. The site implements standard analytics tools with privacy-conscious configurations such as IP anonymization and cookie consent banners. Security posture is adequate with HTTPS enabled but could be improved by adding more security headers and explicit policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

N

NABU|naturgucker geG

nabu-naturgucker-akademie.de

0

NABU|naturgucker-Akademie is a German non-profit educational platform dedicated to nature observation and biodiversity learning. It offers free courses, blogs, and online lectures primarily targeting nature enthusiasts and observers. The platform is built on the ILIAS LMS system and hosted on RZONe servers, employing modern web technologies such as jQuery, Bootstrap, and MathJax. The website is well-structured, mobile-optimized, and provides clear contact and legal information, enhancing its credibility. Security posture is good with HTTPS and secure login mechanisms, though some improvements in security headers and cookie consent are recommended. Overall, the platform demonstrates a strong commitment to education and user trust, with moderate tracking via Matomo analytics.

NABU|naturgucker is a German non-profit platform dedicated to nature observation and citizen science. It enables users to record and share sightings of plants, animals, fungi, and other natural phenomena, supporting environmental awareness and research. The platform is affiliated with NABU, a well-known German nature conservation organization, which strengthens its credibility and market position in the environmental non-profit sector. The website targets nature enthusiasts, researchers, and the general public interested in biodiversity and conservation. Technically, the website is built on a custom IntraWeb framework with integration of modern JavaScript libraries such as jQuery, Bootstrap, and Google Maps API for interactive mapping features. Hosting is provided via rzone.de, and the site uses HTTPS with nonce attributes in scripts indicating some level of content security policy implementation. The site shows moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and some script nonce attributes, but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security or incident response policies were found. The domain WHOIS data is limited but consistent with the website's purpose and branding. Overall, the website is professional, trustworthy, and safe for general audiences. It serves its non-profit mission effectively but could enhance its technical and security posture by implementing additional security headers, improving mobile responsiveness, and providing clearer contact and incident response information.

B

Bring Dein Leergut

bring-dein-leergut.de

0

Bring-dein-leergut.de is a German website dedicated to promoting the reuse and return of reusable bottles and packaging to support environmental sustainability. The site targets environmentally conscious consumers in Germany and operates as an informational platform advocating for sustainable consumption habits. Technically, the website is built on WordPress using the Divi theme, with common web technologies such as jQuery and Swiper Carousel. Hosting is provided by rzone.de, and the site uses HTTPS with a good SSL configuration. Security posture is moderate, with HTTPS enabled but lacking advanced security headers and explicit security policies. Privacy compliance is good, with a GDPR-compliant privacy and cookie policy present. However, the site lacks explicit contact information, terms of service, and incident response details, which slightly reduces business credibility. Overall, the website is safe, professional, and well-designed for its niche audience, but could improve in security and transparency aspects.

The website perlenflasche.de represents the Genossenschaft Deutscher Brunnen eG, a cooperative of German mineral water producers, celebrating the 50th anniversary of the Perlenflasche bottle design. The site provides rich historical context, brand information, sustainability messaging, and showcases a broad portfolio of mineral water brands using this iconic bottle. The cooperative holds a strong market position in the German beverage packaging sector, emphasizing sustainability and standardization. Technically, the website employs modern JavaScript libraries such as jQuery, fullpage.js, and Owl Carousel, with video backgrounds and responsive design elements, delivering a good user experience. Security-wise, the site uses HTTPS, cookie consent with GDPR compliance, and anonymized Google Analytics tracking, but lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Yourletter is a German-based small business specializing in newsletter and mailing services aimed at strengthening customer relationships and boosting sales for other businesses. Their offerings include legally compliant address management, automated news dispatch, customizable newsletter layouts, and content creation support. The website is powered by the Contentserver24 CMS and integrates modern web technologies such as Bootstrap, FontAwesome, and jQuery. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and anti-spam measures in place, but lacks explicit security headers and published security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is professional and trustworthy with a moderate security score and room for improvement in security best practices and transparency.

F

Fund The Planet

fundtheplanet.net

0

Fund The Planet is a small non-profit organization focused on environmental conservation through a subscription-based membership model that allows individuals to legally protect rainforest land in the Amazon. The platform leverages Shopify's e-commerce infrastructure, providing a bilingual website with clear membership plans and impact tracking. The technical infrastructure is modern and well-implemented, using Shopify apps and SDKs for localization, upselling, and analytics. Security posture is good with HTTPS and form protection via hCaptcha, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

P

Post-SV Tübingen

nikolauslauf-tuebingen.de

0

The website represents the 50th itdesign-Nikolauslauf Tübingen, a local half marathon event organized by Post-SV Tübingen. It targets runners and sports enthusiasts in the Tübingen region, providing event information, registration, and promotional content. The site is well-positioned as a regional sports event organizer with a clear focus on community engagement and event promotion. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. It integrates multiple third-party services such as Matomo for analytics, Google Maps for location display, and social media embeds from Facebook, Instagram, YouTube, and Spotify, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms, indicating a good security posture. However, it lacks a dedicated security policy or incident response information, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its audience effectively with moderate technical performance and good user experience.

The website 'Tag des Laufens' serves as a central platform for promoting a nationwide German running event celebrated annually on the first Wednesday of June. It is organized by prominent running associations German Road Races (GRR) and Deutscher Leichtathletik-Verband (DLV), with support from DATEV. The site provides event information, downloadable participation certificates, and promotes a charitable campaign for clean water access in Ghana. The target audience includes running enthusiasts, clubs, and socially conscious participants in Germany. Technically, the site is built on TYPO3 CMS with a combination of established frontend libraries such as Bootstrap 3 and jQuery, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enabled and spam-protected emails, but lacks visible security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its community and charitable goals.

F

Flix SE

flix.com

0

Flix SE operates a prominent European transportation platform offering bus and train ticket booking services across more than 40 countries and 8,000 destinations. The company emphasizes affordable, comfortable, and sustainable travel with features such as free Wi-Fi and assigned seating. The website is professionally designed, mobile-optimized, and integrates modern technologies including React-based UI components, CDN hosting, and advanced analytics tools like Datadog RUM and Usercentrics for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be verified further. Privacy compliance is well addressed with clear policies and consent mechanisms. Despite the absence of WHOIS data for the domain, the website's branding, external domain relationships, and social media presence strongly support its legitimacy. Overall, Flix presents a trustworthy and user-friendly digital presence aligned with its business goals.

F

FlixBus Deutschland

flixbus.de

0

FlixBus Deutschland operates as a leading intercity bus transportation provider across Germany and Europe, offering affordable and convenient travel options to over 8,000 destinations in more than 40 countries. The company leverages a robust online platform and mobile app to facilitate ticket booking, real-time trip tracking, and customer engagement. Their business model focuses on providing extensive route coverage with modern, comfortable buses equipped with amenities such as free Wi-Fi and power outlets. FlixBus holds a strong market position supported by a large user base and multiple subsidiary brands including FlixTrain and Greyhound.

O

openfellas GmbH

openfellas.com

0

openfellas GmbH is a well-established German company specializing in Odoo ERP consulting and implementation services. With over 15 years of experience and more than 250 successful projects, they hold a strong market position as an Odoo Gold Partner since 2014. Their business model focuses on B2B services targeting industries such as manufacturing, energy, and e-commerce. The website reflects a professional and consistent brand image, showcasing detailed service offerings and customer testimonials that reinforce trust and credibility. Technically, the site is built on the Odoo platform, leveraging modern web technologies and hosted behind Cloudflare for performance and security. Analytics and marketing tracking are implemented via Google Tag Manager with a GDPR-compliant cookie consent mechanism. Security posture is generally good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. No explicit security or incident response policies are published. Overall, the website is accessible, well-structured, and trustworthy, supporting the company's business objectives effectively.

E

ethicDeals

ethicdeals.de

0

ethicDeals is a German-based e-commerce platform specializing in sustainable, fair trade, organic, and eco-friendly products. It offers consumers exclusive discount vouchers to try ethical brands, positioning itself as a niche leader in green lifestyle retail. The website is built on Drupal 9 with Commerce 2, integrating modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The platform demonstrates good digital maturity with mobile optimization, clear navigation, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and well-aligned with its sustainability mission.

ProfiDOM is a German-based professional hosting service provider specializing in domain registration, webspace hosting, SSL certificates, spam protection, and server hosting with a focus on high performance and availability. Their services cater to a broad audience including small to large businesses, self-employed individuals, and private customers. The company emphasizes personal service and technical support for CMS and shop systems, hosting data in an ISO-certified data center in Frankfurt am Main. Technically, the website is built on the Contentserver24 CMS platform, utilizing Bootstrap and FontAwesome for design, and integrates Google Analytics with privacy-conscious settings. Security posture is moderate with HTTPS and some anti-bot measures in forms, but lacks explicit security headers and published incident response policies. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. The domain WHOIS data is limited but consistent with the business profile. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in security practices and transparency.

I

Internationaler Bund (IB)

ib.de

0

Internationaler Bund (IB) is a large German non-profit organization focused on social work and education, supporting children, youth, and adults nationwide. Their services span social assistance, vocational training, refugee aid, and international cooperation. The website is professionally designed using TYPO3 CMS, with good mobile optimization and user experience. Technical infrastructure includes reputable hosting with Deutsche Telekom, integration of Matomo analytics respecting user consent, and Cookiebot for cookie management. Security posture is solid with HTTPS and consent-based tracking, though improvements in security headers and explicit security policies are recommended. Overall, the website reflects a trustworthy and established organization with a clear social mission.

T

Traderando GmbH

bali4home.de

0

Traderando GmbH operates the website bali4home.de, specializing in the retail of bamboo pavilions, garden furniture, and related accessories. The company targets garden enthusiasts seeking sustainable and exotic outdoor furniture, positioning itself as a niche e-commerce provider with a focus on handcrafted products from Asia. The website is well-structured, professionally designed, and provides comprehensive product information, digital assembly instructions, and a blog to engage customers. Contact details and trust signals such as customer ratings and certifications enhance credibility. Technically, the site leverages modern web technologies including jQuery, Bootstrap 5, and a specialized CMS platform (ContentServer24). It integrates Google Analytics for user insights and EasyCredit components for payment options. The site is mobile-optimized with good SEO and accessibility basics, though some security headers could be improved. HTTPS is enforced, and cookie consent mechanisms are in place, supporting GDPR compliance. From a security perspective, the website demonstrates solid practices with secure forms and no visible vulnerabilities. However, the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for maturity. WHOIS data is minimal and generic, which slightly impacts domain trust, but the overall business presence and transparency mitigate concerns. Overall, bali4home.de presents a trustworthy, professional e-commerce platform with good privacy and security hygiene, suitable for its market niche. Strategic improvements in security headers and transparency could further enhance its posture.

The website cs4.me currently serves only as a default AlmaLinux HTTP server test page, indicating that the server is operational but no actual business or service content is published. The domain is registered since 2013 with a reputable German registrar, suggesting a legitimate registration, but the lack of content and contact information implies the site is either under development or abandoned. Technically, the site uses AlmaLinux with Apache and NGINX references, but no CMS or advanced frameworks are detected. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with common data protection regulations. Overall, the site is low trust and low maturity from a business and security perspective.

D

Deutsche Hochschulmedizin e.V.

deutsche-hochschulmedizin.de

0

Deutsche Hochschulmedizin e.V. is a non-profit association representing university hospitals and medical faculties across Germany. It serves as a central body advocating for the interests of university medicine, promoting collaboration in teaching, research, and patient care. The organization targets stakeholders in politics, science, and society, positioning itself as a key player in the German healthcare sector. The website reflects a professional and consistent brand image, with clear communication of its mission and services. Technically, the website is built on WordPress 6.8.3, utilizing modern JavaScript libraries such as jQuery, Swiper.js, and Borlabs Cookie for consent management. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the website's legitimacy, supported by authoritative nameservers and external partner links. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and user trust.

P

Pro Generika e.V.

progenerika.de

0

Pro Generika e.V. is a German non-profit association representing generics and biosimilar pharmaceutical companies. The organization plays a key role in advocating for the interests of its members who supply the majority of generic medicines in Germany. The website provides comprehensive information including studies, market data, news, and policy positions, targeting healthcare professionals, policymakers, and the general public interested in pharmaceutical topics. Technically, the site is built on WordPress with modern web technologies, optimized for mobile and SEO, and includes cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-maintained, supporting the association's mission effectively.

N

NABU | naturgucker

nabu-naturgucker.de

0

NABU|naturgucker is a well-established non-profit organization dedicated to nature observation, education, and conservation in Germany. The website serves as a hub for citizen science activities, offering a social network for nature observations, an online academy, travel experiences, and a participatory nature journal. It targets nature enthusiasts and researchers, providing extensive resources and community engagement opportunities. The platform is professionally designed, SEO optimized, and mobile-friendly, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins enhancing functionality and user experience. Security posture is good with HTTPS and cookie consent mechanisms in place, though formal security policies and incident response contacts are not explicitly published. Overall, the site is trustworthy, content-rich, and aligned with its mission to promote nature awareness and scientific collaboration.

D

Dachverband Deutscher Avifaunisten (DDA)

dda-web.de

0

The Dachverband Deutscher Avifaunisten (DDA) is a German non-profit umbrella organization representing regional and state ornithological associations, serving approximately 10,000 field ornithologists and bird watchers. The website provides comprehensive information about bird monitoring activities, data collection, and publications such as bird atlases. The target audience includes ornithologists, environmental researchers, and bird enthusiasts in Germany. The organization positions itself as a leading national entity in the ornithological community. Technically, the website employs modern JavaScript libraries including jQuery, GSAP, and Vue.js components, along with Matomo for analytics and Leaflet for mapping functionalities. Hosting is provided by manitu.net, a reputable German hosting provider. The site is mobile-optimized with good SEO and basic accessibility features, though some improvements could be made in accessibility and performance. From a security perspective, the site enforces HTTPS, uses security headers, and includes CSRF tokens, indicating a solid security posture. Privacy and cookie policies are present and GDPR compliant, with a named data protection officer contact. However, no explicit security policy or vulnerability disclosure mechanisms were found, which could be areas for enhancement. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. The risk level is low, with recommendations focusing on enhancing security transparency and accessibility. The domain registration is consistent with the business type, though registrant details are minimal. The site is safe for general audiences with no adult or questionable content.

D

Deutscher Datenschutzrat Online-Werbung

meine-cookies.org

0

The Deutscher Datenschutzrat Online-Werbung (DDOW) operates as a voluntary self-regulatory organization focused on online behavioral advertising (OBA) in Germany. It aims to harmonize consumer interests and digital advertising industry standards by providing transparency, consumer control mechanisms, and a complaint process. The website serves as an information hub for consumers and businesses regarding data protection in online advertising. Technically, the site is built on WordPress using a child theme of Twenty Twenty-One, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded, serving a niche regulatory function in the German digital advertising market.

Spielmobile e.V. is a German non-profit organization dedicated to advocating for children's right to play and fostering a child- and family-friendly society. The website serves as an informational and community platform, leveraging WordPress with BuddyBoss and WooCommerce to provide interactive and e-commerce capabilities. The organization targets families and community members interested in child welfare and play rights. Technically, the site employs modern web technologies, including GDPR-compliant cookie consent management and integration with Google services for analytics and maps. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the organization's mission effectively.

B

Biologische Heilmittel Heel GmbH

wissenswerte.info

0

The website wissenswerte.info serves as a specialized portal for Heilpraktiker (natural health practitioners) providing up-to-date information, training, and resources related to natural medicine and therapies. Operated by Biologische Heilmittel Heel GmbH, the platform offers free access to educational content, e-learning certifications, videos, and case studies, positioning itself as a niche healthcare knowledge hub in Germany. The business model focuses on providing value-added content to practitioners, fostering community engagement and professional development. Technically, the site is built on the Weblication CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager for analytics, FriendlyCaptcha for bot protection, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized with good SEO and accessibility practices, though some security headers could be enhanced. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses captcha on login forms, and integrates a consent management platform, indicating a strong privacy posture. However, explicit security headers and incident response information are not publicly available, representing areas for improvement. The WHOIS data is privacy protected, which is typical for commercial healthcare sites, and no suspicious patterns were detected. Overall, the website presents a trustworthy, professional, and secure platform for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

B

brite

britehealth.com

0

brite is a digital health companion platform focused on supporting therapy through expert knowledge, progress tracking, and reminders, targeting German-speaking patients. The website is professionally designed using modern web technologies such as Webflow CMS, Matomo analytics, and Cookiebot for GDPR-compliant cookie management. The technical infrastructure is solid with HTTPS enforced and a cookie consent mechanism in place, though some security headers are missing. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be further investigated. Overall, the site demonstrates good privacy compliance and user experience but lacks explicit contact and legal pages.

A

apomio GmbH

apomio.de

0

apomio.de operates as a specialized price comparison platform focused on medications, health products, and wellness items primarily targeting German-speaking consumers. The platform aggregates offers from over 90 pharmacies and health shops, providing users with competitive pricing and product information. The website features a modern, responsive design with integrated search and filtering capabilities, complemented by a health blog to engage users with relevant content. Technically, the site employs contemporary web technologies, including JavaScript frameworks, Google reCAPTCHA for bot protection, and Usercentrics for consent management, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and multiple security headers, although a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

S

Sparmedo GmbH

sparmedo.de

0

Sparmedo GmbH operates a German-language online platform specializing in price comparison for pharmaceutical and pharmacy products. The website offers consumers access to pricing from over 85 certified online pharmacies, targeting cost-conscious customers in Germany seeking medicines and health products at competitive prices. The business model centers on e-commerce facilitation through comparison services, positioning Sparmedo as a niche player in the healthcare e-commerce sector. Technically, the website employs legacy jQuery 1.4.4 and standard CSS with SVG graphics, hosted on servers associated with internet1.de. The site is mobile optimized and SEO friendly, though some technical modernization is advisable. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated JavaScript libraries, which could expose vulnerabilities. Privacy compliance is weak due to absence of explicit privacy and cookie policies, and no visible contact or incident response information is provided. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures to improve trust and regulatory adherence.

M

medizinfuchs GmbH

medizinfuchs.de

0

medizinfuchs GmbH operates a professional online price comparison platform specializing in medications, health supplements, and cosmetic products primarily targeting consumers in Germany and Austria. The website offers a comprehensive service that includes price comparisons from over 180 verified shipping pharmacies, user reviews, and a mobile app to facilitate on-the-go access. The company positions itself as a leading player in the German healthcare e-commerce sector, emphasizing cost savings and convenience for its users. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with analytics powered by Matomo, Google Tag Manager, and Bing Ads tracking. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and manages user consent effectively for cookies and tracking, aligning with GDPR requirements. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not clearly present, and no public security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, medizinfuchs.de presents a trustworthy and user-friendly platform with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency would further strengthen its security stance and user trust.

C

Centalus Media GmbH

medipreis.de

0

MediPreis.de operates as a specialized online price comparison platform focused on medications, homeopathic products, cosmetics, and wellness items from various online pharmacies in Germany. Established since 2004 and owned by Centalus Media GmbH, it offers consumers the ability to compare prices, read product and pharmacy reviews, and access health-related content. The platform supports mobile users and provides a dedicated app, enhancing accessibility and user convenience. The business model is primarily based on advertising and partnerships with pharmacy providers, ensuring a free service for end users. Technically, the website employs a combination of jQuery, jQuery UI, Fancybox, and QuaggaJS for barcode scanning, indicating a mature but somewhat traditional tech stack. The site is mobile-optimized with good SEO and accessibility basics, though some modern security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Analytics usage includes Google Analytics with moderate user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is limited but consistent with the business claims, supporting legitimacy. Overall, MediPreis.de presents a trustworthy, professional, and user-friendly platform with strong content quality and business credibility. Strategic enhancements in security transparency and technical modernization could further strengthen its market position.

D

Deutscher Apotheker Verlag

apotheken.de

0

apotheken.de is a professionally managed German healthcare portal operated by Deutscher Apotheker Verlag. It provides comprehensive pharmacy-related services including emergency pharmacy locator, health information on diseases, symptoms, therapies, and medications, as well as tools like diagnosis finder and medication leaflet search. The website targets the general German public seeking reliable health and pharmacy information. Technically, the site uses modern JavaScript frameworks, asynchronous analytics loading, and is hosted on Amazon AWS infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and privacy standards.

G

Guten Tag Apotheke

mein-tag.de

0

MEIN TAG® is a German-language health advisory website affiliated with the Guten Tag Apotheke pharmacy network. It provides daily health and wellness content, including medical news, tips, recipes, and expert advice. The platform targets the general German-speaking public interested in health topics and wellness. The business model centers on content publishing with ancillary services such as a pharmacy finder and e-prescription information, supported by advertising partnerships and a linked online shop. Technically, the site is built on WordPress with modern plugins for SEO, advertising, and GDPR compliance, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. No critical vulnerabilities or privacy issues were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, serving as a reliable health information source.

L

Lions Pharmacy

lions-pharmacy.com

0

Lions Pharmacy is a licensed German pharmacy specializing in natural medicine, naturopathy, and homeopathy, operating an e-commerce platform with over 15,000 products and international shipping. The website is built on a modern WordPress infrastructure using WooCommerce and Elementor, integrating secure payment options such as PayPal and Google Pay. The site demonstrates good digital maturity with GDPR-compliant privacy and cookie policies, clear contact information, and a professional design. Security posture is solid with HTTPS and clientTransferProhibited domain status, though DNSSEC is not enabled and advanced security headers are not explicitly detected. Overall, the site is trustworthy and well-positioned in its niche market.

L

Löwen Apotheke

e-rezept-app.de

0

Löwen Apotheke operates a licensed online pharmacy service based in Baden-Baden, Germany, specializing in natural medicine and digital prescription fulfillment via their E-Rezept App. The website provides a modern e-commerce platform built on WordPress with WooCommerce and Elementor, offering a seamless user experience for customers to upload and redeem electronic prescriptions. The business is well-positioned in the healthcare sector with a focus on convenience and fast delivery, supported by positive customer ratings and certifications. Technically, the site uses contemporary web technologies and integrates Google Analytics and Tag Manager for marketing insights. Security posture is solid with HTTPS and secure forms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie consent regulations.

NABU - Naturschutzbund Deutschland e.V. is a well-established German non-profit organization dedicated to nature conservation and environmental protection. The website focuses on public awareness campaigns such as the 'Bird of the Year 2026' featuring the Rebhuhn (partridge), highlighting endangered species and promoting biodiversity. NABU enjoys a strong market position in Germany with a large membership base and extensive volunteer network. The site offers rich content, educational resources, and engagement opportunities for the general public and conservation enthusiasts. Technically, the website is built on the IMPERIA CMS platform, utilizing modern web technologies including Bootstrap, jQuery, and privacy-respecting analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly. Cookie consent is managed via Klaro, ensuring GDPR compliance. The infrastructure appears stable with European-based DNS and hosting. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers are not visible in the HTML source, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected. The site integrates tracking pixels from major platforms (Meta, TikTok, Google Ads) with user consent. Overall, NABU's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its mission to educate and engage the public in environmental conservation. Strategic improvements could include publishing a dedicated security policy and enhancing security header implementation to further strengthen its security posture.

The Bundesamt für Naturschutz (BfN) is a German federal government authority responsible for nature conservation, providing scientific, administrative, and informational services. The website serves a broad audience including policymakers, researchers, and the general public interested in environmental protection. It offers comprehensive content in German with English support, focusing on biodiversity, habitat protection, and environmental data. Technically, the site is built on Drupal CMS with modern web technologies and is hosted within the German research network infrastructure, ensuring reliability and performance. The site demonstrates strong privacy compliance with explicit cookie consent mechanisms and respects user privacy via etracker analytics configured to honor Do Not Track settings. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be enhanced, and a formal security policy or incident response contact is not evident. Overall, the site is trustworthy, professionally maintained, and aligns well with its governmental role.

K

Kreisstadt Schkeuditz

schkeuditz.de

0

The website www.schkeuditz.de serves as the official digital presence of the city of Schkeuditz, Germany, providing comprehensive information and services related to municipal administration, citizen services, cultural events, economic development, education, and social welfare. It targets residents, local businesses, visitors, and government stakeholders, positioning itself as a key resource for local governance and community engagement. The site is structured to facilitate easy navigation across various service areas, reflecting a well-organized municipal portal. Technically, the website is built on the NOLIS CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It demonstrates good mobile optimization and accessibility features, with a responsive design and clear navigation menus. Hosting appears to be managed through German telecom infrastructure, ensuring reliable performance. SEO practices are adequately implemented with proper meta tags and structured data using schema.org vocabulary. From a security perspective, the site enforces HTTPS and employs secure form validation. However, it lacks explicit security headers and does not publicly disclose incident response or vulnerability disclosure policies. No cookie consent mechanism was detected, which may impact GDPR compliance. The WHOIS data aligns well with the official nature of the site, showing consistent registration and authoritative nameservers, supporting the site's legitimacy. Overall, the website presents a professional and trustworthy municipal portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its security posture and user trust.

L

Landesbund für Vogelschutz in Bayern e.V. (LBV)

botschafter-spatz.de

0

The website botschafter-spatz.de represents a non-profit environmental conservation project managed by the Landesbund für Vogelschutz in Bayern e.V. (LBV). It focuses on the protection and monitoring of building-nesting birds in Bavaria, such as sparrows, swallows, and swifts. The site provides educational resources, a reporting platform for bird nesting sites, and promotes citizen participation in urban nature conservation. The project is regionally significant and well-integrated with the LBV's broader conservation efforts. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries including jQuery and mmenu for responsive navigation. It is hosted on servers associated with kasserver.com and uses HTTPS with a good SSL configuration. The site includes cookie consent mechanisms and detailed privacy policies, reflecting compliance with GDPR requirements. Social media integration is present via Facebook and Instagram links. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious content were detected in the provided HTML. The absence of a security.txt or vulnerability disclosure page suggests room for improvement in transparency and security posture. Overall, botschafter-spatz.de is a professionally maintained, trustworthy website serving a clear non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date libraries to further strengthen security and compliance.

R

ratiopharm GmbH

ratiopharm.de

0

ratiopharm GmbH is a well-established German pharmaceutical company specializing in generic medicines and health solutions, operating under the global Teva Pharmaceutical Industries umbrella. The website reflects a mature digital presence with a focus on product information, health advice, and professional services targeting both consumers and healthcare professionals. The technical infrastructure is built on TYPO3 CMS with modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with corporate branding.

C

CCC München - Comprehensive Cancer Center

ccc-muenchen.de

0

CCC München is a comprehensive cancer center jointly operated by the Ludwig-Maximilians-Universität München and the Technische Universität München. Established in 2014 and recognized as an oncological excellence center by Deutsche Krebshilfe, it provides advanced cancer patient care, clinical research, and educational events for medical professionals. The website targets patients, healthcare providers, and researchers, offering detailed information about services, events, and collaborations. Technically, the website is built on the Scrivito CMS platform, hosted on AWS infrastructure, and uses modern web technologies including JavaScript, Matomo analytics for privacy-conscious tracking, and Leaflet for interactive maps. The site is mobile-optimized and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports its healthcare mission but could improve by publishing more detailed security and incident response information.

U

Universitätsmedizin Bayern (UMB) e.V.

unimedizin-bayern.de

0

Universitätsmedizin Bayern (UMB) e.V. is a non-profit association representing the collaboration of Bavarian university medical faculties and university hospitals. Founded in 2017, it aims to promote cooperation in teaching, research, and patient care across six locations in Bavaria. The website serves as an informational and representative platform targeting academic, clinical, and political stakeholders within the Bavarian healthcare ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries, offering a professional and responsive user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the site reflects a trustworthy and credible organization with a clear mission and professional presentation.

V

Verband Universitätsklinika Deutschland

uniklinika.de

0

The website www.uniklinika.de represents the Verband Universitätsklinika Deutschland, an association of all 33 university medical hospitals in Germany. It serves as an information and advocacy platform targeting healthcare professionals, policymakers, and the public interested in university hospitals. The site provides news, policy updates, and thematic content related to university medicine in Germany. Technically, the site is built on TYPO3 CMS, hosted by Hetzner, and uses Usercentrics for GDPR-compliant cookie consent. Google Analytics is employed for visitor tracking with user consent mechanisms in place. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The site lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving as a credible resource in the healthcare sector.

M

MARS – Center for Entrepreneurship

checkyouridea.com

0

CheckYourIdea is an educational and startup support platform developed by the MARS Center for Entrepreneurship at Mannheim University of Applied Sciences, in collaboration with Worms University of Applied Sciences. The platform offers a free online tool to assess the maturity level of business ideas and provides personalized two-page feedback reports. It targets founders, startup consultants, and investors, aiming to facilitate efficient startup consulting and investment decision-making. The business model focuses on providing value through academic partnerships and embedding options for institutions. Technically, the website is built using modern web technologies including React and Next.js, hosted under a reputable registrar. The site is well-optimized for performance, mobile-friendly, and accessible, with a clean and professional design. SEO and metadata are properly implemented, enhancing discoverability. From a security perspective, the site uses HTTPS and secure form inputs but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy, including consent mechanisms. However, terms of service and incident response information are absent. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Recommendations include enabling DNSSEC, adding security headers, publishing security policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

T

Technische Hochschule Mannheim

th-mannheim.de

0

Technische Hochschule Mannheim is a well-established public technical university in Germany offering a wide range of Bachelor and Master degree programs with innovative study concepts. The institution targets students, prospective students, employees, and companies, providing education, research, transfer services, and international exchange opportunities. The website reflects a strong market position as a regional technical university with comprehensive academic and research offerings. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website is professional, trustworthy, and user-friendly, supporting the institution's credibility and outreach.

A

atrego GmbH

brennstoffboerse.de

0

Brennstoffboerse.de is an established German online energy marketplace operated by atrego GmbH, offering price comparison and purchasing services for energy products such as Flüssiggas, Heizöl, and Holzpellets. The platform targets consumers and businesses in Germany seeking competitive energy prices and comprehensive information on energy topics. The website features customer reviews, price trend charts, and a dealer login portal, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries including jQuery and ApexCharts, integrates a consent management platform (Usercentrics), and serves ads via Google Adsense, indicating a well-rounded infrastructure. Security posture is solid with HTTPS enforced and security headers present, though explicit privacy and security policies are not clearly published. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, but could improve transparency by adding dedicated policy pages and incident response contacts.

Clever2App is a small German technology service provider specializing in affordable and customized mobile app development for Android and iOS platforms. Their offerings include app concept, design, programming, push notifications, login functions, and ongoing marketing and support. The company also provides complementary digital services such as website flat rates, online shop integration, newsletters, and SEO services. The website is professionally designed, mobile-optimized, and uses a CMS platform (Contentserver24) with Bootstrap and FontAwesome technologies. Google Analytics is implemented with privacy-conscious IP anonymization and a cookie consent mechanism. Security posture is moderate with HTTPS enforced but lacks explicit security headers and documented security policies. WHOIS data is minimal but consistent with a legitimate small business. Overall, the website presents a trustworthy and professional digital presence suitable for its target audience of businesses seeking app development solutions.

G

GeWaShop

gewashop.de

0

GeWaShop is a German-based small business specializing in providing simple, no-installation online shop systems that integrate seamlessly into existing websites. Their market position is niche-focused on ease of use and quick deployment, complemented by additional digital services such as website flat rates, mobile app creation, newsletters, and SEO. The website is professionally designed with good navigation and mobile optimization, leveraging modern web technologies including Contentserver24 CMS, Bootstrap, and FontAwesome. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and documented incident response policies. Privacy compliance is addressed with a privacy policy and GDPR cookie consent, though terms of service and security policies are absent. Overall, the website is trustworthy and functional with moderate risk, suitable for its business scope.

The website www.websiteflatrate.de is operated by atrego GmbH, a small German technology company specializing in professional web design and CMS development since 2001. The company offers subscription-based web design flatrates tailored to small and medium businesses, freelancers, and agencies. The site demonstrates a mature digital infrastructure using ContentServer24 CMS, Bootstrap, and modern JavaScript libraries, with responsive design and good SEO practices. Security posture is strong with HTTPS, cookie consent, and anonymized analytics, though some security headers could be improved. Contact information and GDPR compliance are clearly addressed, enhancing trustworthiness. Overall, the site presents a professional and credible business presence with a good balance of technical and business maturity.

A

atrego GmbH

atrego.de

0

atrego GmbH is a small, established German technology company specializing in professional web design, app development, software programming, and related digital services. Founded in 2001 and based in Halle (Saale), Germany, the company targets businesses seeking comprehensive online presence solutions including web hosting, SEO, and social media marketing. The website reflects a consistent and professional brand image with clear service offerings and customer engagement channels. Technically, the site uses a modern tech stack including Bootstrap, jQuery, FontAwesome Pro, and Google Analytics with a CMS platform named Contentserver24. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.