Germany security reports

P

Pfeifer & Langen GmbH & Co. KG

pfeifer-langen.de

76

Pfeifer & Langen GmbH & Co. KG is a well-established German sugar manufacturing company founded in 1870, specializing in regional and sustainable sugar production. Their website reflects a mature digital presence with a focus on B2B customers across food, chemical, pharmaceutical, and feed industries, as well as agricultural partners. The company emphasizes sustainability and regional sourcing as key differentiators. Technically, the website is built on the Sitefinity CMS platform, integrates Google Tag Manager for analytics, and uses modern UI components like Swiper.js for interactive content. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and explicit security policies indicates room for improvement. The lack of WHOIS domain registration data is a notable concern, though the website's branding and external social media presence support its legitimacy. Overall, the site scores well on content quality and privacy compliance but should address domain registration transparency and enhance security disclosures.

W

WestLotto

westlotto.de

70

WestLotto.de is the official state lottery operator for North Rhine-Westphalia (NRW), Germany, providing a range of lottery and gaming services including LOTTO, Eurojackpot, KENO, TOTO, and GlücksSpirale. The website targets adult residents of NRW and positions itself as a secure and reliable state-run gaming platform. The business model is focused on regulated lottery services under government oversight, with a strong regional market presence.

The website 'Vereinssuche Landessportbund Nordrhein-Westfalen e.V.' serves as an informational platform for searching sports clubs affiliated with the Landessportbund Nordrhein-Westfalen, a regional non-profit sports federation in Germany. The site targets residents and sports enthusiasts in North Rhine-Westphalia, providing a centralized resource for club information. The business model is non-profit and focused on public service rather than commercial revenue. Technically, the site employs modern web technologies including Blazor WebAssembly and Bootstrap CSS, indicating a contemporary frontend infrastructure. Hosting appears to be managed via Deutsche Telekom infrastructure, inferred from the nameservers. The site shows moderate performance and basic mobile optimization, with dynamic content loading via Blazor. However, the content on the main HTML is minimal, relying on client-side rendering. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the provided data. There are no visible privacy or cookie policies, nor contact information for security incidents, which limits compliance and user trust. No forms or data collection mechanisms were found on the landing page, reducing immediate attack surface but also limiting user engagement features. Overall, the website is legitimate and consistent with its stated purpose and regional focus. However, improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

S

Sportjugend Nordrhein-Westfalen

sportjugend.nrw

47

Sportjugend Nordrhein-Westfalen is a regional youth sports organization affiliated with the Landessportbund Nordrhein-Westfalen, focusing on youth engagement, sports education, volunteer services, and community programs in the German state of North Rhine-Westphalia. The website serves as a comprehensive portal for information on various youth sports initiatives, qualification programs, and events, targeting young people, sports clubs, and volunteers. Technically, the site is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager, Google Analytics, and accessibility tools like ReadSpeaker. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is typical and justified for a non-profit organization. Overall, the website demonstrates a mature digital presence with good content quality and compliance, supporting its role as a trusted regional youth sports entity.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb-nrw.de

46

The Landessportbund Nordrhein-Westfalen e.V. is a large, non-profit regional sports umbrella organization serving the state of North Rhine-Westphalia, Germany. It provides a broad range of sports programs, information, and funding opportunities for sports clubs and individuals. The website is professionally designed, well-structured, and targets sports organizations and enthusiasts within NRW. The technical infrastructure is based on TYPO3 CMS with integration of modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns given the website's professional nature and content. Overall, the site demonstrates a strong commitment to privacy compliance and user experience.

H

Hessischer Turnverband e.V.

htv-online.de

62

Hessischer Turnverband e.V. (HTV) is a regional non-profit sports federation dedicated to gymnastics and related sports in Hessen, Germany. The organization provides a broad range of services including competitions, training and certification for trainers and volunteers, club consulting, and events. The website serves as an information hub for members, clubs, and sports enthusiasts, emphasizing education, child welfare, and community engagement. HTV holds a strong market position as the authoritative body for turn sports in Hessen, supported by partnerships with related organizations and events. Technically, the website is built on TYPO3 CMS with a modern frontend leveraging Bootstrap and jQuery. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on reliable infrastructure with good mobile optimization and accessibility features. SEO and metadata are well implemented, supporting discoverability and user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics settings. While some standard security headers are not explicitly confirmed, no critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent mechanisms are comprehensive and transparent, with clear contact details including a data protection officer. However, no explicit security policy or incident response information is published. Overall, HTV's website demonstrates a mature digital presence with strong compliance to privacy regulations and a solid security posture. The site effectively supports its business goals and community engagement while maintaining user trust. Strategic improvements in security headers and updating legacy libraries could further enhance its security and compliance standing.

H

Hessische Behinderten- und Rehabilitationssportverband

hbrs.de

56

The Hessische Behinderten- und Rehabilitationssportverband is a regional non-profit organization based in Fulda, Germany, dedicated to providing sports and rehabilitation services for people with disabilities. The website serves as an informational portal for the association, targeting disabled individuals and stakeholders in the Hesse region. The business model focuses on community support and advocacy through sports activities and rehabilitation programs. Technically, the website is built on the Wix platform using Wix Thunderbolt technology, with standard Wix scripts and Google Fonts. The site shows moderate performance and good mobile optimization, but accessibility features are basic. The site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS and includes scripts to harden fetch and XMLHttpRequest calls, indicating some attention to security best practices. However, no explicit security headers were detected, and there is no public security or incident response policy. No vulnerabilities or suspicious domains were found. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing incident response information to enhance trust and compliance.

L

Landessportbund Hessen e.V.

landessportbund-hessen.de

45

Landessportbund Hessen e.V. is a large non-profit organization serving as the umbrella sports federation for over 7,300 member clubs in the German state of Hessen. The organization provides a broad range of services including sports development, education and licensing, club management, infrastructure support, and communication. Their website is built on TYPO3 CMS and integrates accessibility tools and privacy-respecting analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and GDPR compliant with clear contact information and social media presence, supporting strong stakeholder engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and hosting are consistent with the organization's identity, indicating a trustworthy online presence.

P

peakzone

peakzone.de

46

Peakzone is a German-based e-commerce retailer specializing in sportswear, equipment, and accessories across a broad range of sports including basketball, football, rugby, volleyball, handball, running, and fitness. The website is built on the Shopware platform and integrates modern payment solutions such as PayPal and Klarna, indicating a mature digital infrastructure. The site offers a well-structured navigation system catering to sports enthusiasts, teams, referees, and lifestyle customers, positioning itself as a niche regional sports retail provider. Technically, the website demonstrates good mobile optimization and moderate performance, though there is room for improvement in SEO and accessibility features. Security posture is solid with HTTPS enabled and secure payment integrations; however, the absence of security headers and explicit privacy and terms of service pages suggests gaps in compliance and best practices. No blocking mechanisms or WAF challenges were detected, allowing full content accessibility. Overall, the site is safe for general audiences with no adult or questionable content. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security maturity.

K

Korbball in Bayern

korbball-bayern.de

38

The website 'Korbball in Bayern' serves as an informational platform dedicated to the sport of Korbball in the Bavaria region of Germany. It provides news, event updates, and community information targeted at Korbball players and enthusiasts. The site is built on Joomla CMS and incorporates modern web technologies such as jQuery and Bootstrap, with Usercentrics managing cookie consent and Facebook SDK integrated for social media features. Hosting is provided by a German hosting provider, agenturserver, as indicated by the nameservers. The website is accessible without any WAF or security challenges, indicating no blocking or content restrictions. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partially addressed through the Usercentrics cookie consent mechanism; however, no dedicated privacy policy or terms of service pages were found. Contact information such as emails or phone numbers is absent, which limits direct communication channels for users or security incident reporting. Overall, the website presents a basic but functional digital presence for a niche regional sports community. The security posture is moderate but could be improved by implementing security headers, publishing privacy and security policies, and providing clear contact information. The content is safe for general audiences with no adult or explicit material detected.

L

Leichtathletik Shop

leichtathletik-shop.info

72

Leichtathletik Shop is the official online merchandise store of the Deutscher Leichtathletik Verband (German Athletics Association), offering athletics apparel and related products primarily targeting athletes and fans in Germany. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Facebook Pixel for marketing analytics. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced, use of security headers, and form protection via hCaptcha, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in transparency of security and contact information.

The website bitvtest.de represents tollwerk GmbH, a specialized service provider focused on accessibility testing and consulting for websites, web applications, and native apps. Their flagship service, the BIK BITV-Test, evaluates compliance with German BITV 2.0 and European EN 301 549 standards, complemented by WCAG 2.2 testing and usability assessments. The company positions itself as a trusted expert in accessibility with a clear quality promise and a professional, well-structured online presence targeting organizations seeking to improve digital accessibility. The site is primarily German-language with English support, reflecting a regional focus with potential international reach. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The site demonstrates good mobile optimization, accessibility, and SEO practices, including comprehensive metadata and social media integration. Performance is moderate, with no critical technical debt or vulnerabilities detected in the visible content. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No WAF or blocking mechanisms interfere with content access. The absence of a published security policy, incident response contacts, or vulnerability disclosure page suggests room for maturity in security governance. The domain WHOIS data is consistent with the website's business claims, supporting legitimacy and trustworthiness. Overall, bitvtest.de is a professional, trustworthy, and well-maintained website serving a niche but important market segment in digital accessibility. Strategic improvements in privacy compliance and security transparency would further enhance its credibility and user trust.

D

DLRG

dlrg.net

66

DLRG.net serves as the Internet Service Center (ISC) for the Deutsche Lebens-Rettungs-Gesellschaft (DLRG), a German non-profit organization focused on water rescue and safety. The website functions as an intranet portal providing active members with access to documents, news, examination tools, and seminar management applications. The platform targets active DLRG members and supports their operational and administrative needs through a secure login system and member-specific applications. The domain is well-established since 1999, reflecting a mature digital presence aligned with the organization's history. Technically, the website employs standard web technologies including jQuery, FontAwesome, and Bootstrap, hosted on AWS infrastructure. The site is mobile-optimized with responsive design and basic accessibility features. However, there is room for improvement in SEO and accessibility enhancements. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended to strengthen defenses. From a security and compliance perspective, the site provides secure login forms with input validation but lacks visible cookie consent mechanisms and detailed privacy or security policies on the main site. No incident response or vulnerability disclosure information is published, which could be improved to enhance transparency and trust. The absence of advertising and tracking scripts indicates a privacy-conscious approach, though cookie policy implementation is advised for GDPR compliance. Overall, dlrg.net is a trustworthy and professional portal serving a defined non-profit community with a good balance of functionality and security. Strategic improvements in security headers, cookie consent, and policy transparency would further elevate its compliance and security posture.

J

Jenko Sternberg Design

jenkosternberg.de

46

Jenko Sternberg Design is a small, regionally focused design agency based in Germany, specializing in communication design, web design and development, photography, film, and social media services. The company targets businesses in Apelnstedt, Braunschweig, Wolfenbüttel, and surrounding areas, positioning itself as a creative agency with a strong local presence since 1995. The website is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Hosting is reliable, leveraging AWS DNS infrastructure. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and policies are not visibly implemented. Privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible, safe, and trustworthy, but could improve compliance and security transparency.

D

DLRG DLRG-Jugend Bundesebene

dlrg-jugend.de

70

DLRG-Jugend Bundesebene is a German non-profit youth organization affiliated with the German Life Saving Association (DLRG). It focuses on youth engagement, education, and community activities related to water safety and youth development. The website serves as an information hub for events, campaigns, and volunteer opportunities targeted primarily at German-speaking youth and volunteers. The organization maintains a consistent brand presence and provides comprehensive contact and privacy information, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design frameworks such as Bootstrap and FontAwesome. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site incorporates GDPR-compliant cookie consent mechanisms and uses both Google Analytics and Plausible Analytics for visitor tracking, with user opt-in consent. From a security perspective, the site enforces HTTPS and employs cookie consent for analytics tracking, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture appropriate for a non-profit organization. The overall risk is low, with recommendations focusing on enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

D

Deutscher Turner-Bund e.V.

beactive-deutschland.de

47

The website www.beactive-deutschland.de serves as the official German portal for the European Week of Sports campaign, coordinated by the Deutscher Turner-Bund e.V. It provides comprehensive information about the campaign, events, partner engagement, and resources to promote physical activity across Germany and Europe. The site targets a broad audience including sports clubs, organizations, schools, and the general public. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party services such as Google Tag Manager and SiteSearch360 for analytics and search functionality. The site is mobile-optimized and presents content in a clear, professional manner.

D

Deutscher Turner-Bund e.V.

frankfurt26.de

45

The website frankfurt26.de serves as the official digital platform for the 2026 Rhythmic Gymnastics World Championships hosted in Frankfurt, Germany. It is operated by Deutscher Turner-Bund e.V., the German Gymnastics Federation, and provides comprehensive event information, ticket sales links, volunteer recruitment, and social media engagement. The site targets sports fans, athletes, volunteers, and ticket buyers, positioning itself as a central hub for this major international sporting event. The business model revolves around event promotion and community engagement rather than direct sales or e-commerce.

D

DTB-Shop

dtb-shop.de

62

DTB-Shop is a professional e-commerce platform serving as the official online store for the Deutscher Turner-Bund, offering gymnastics apparel, accessories, and exercise materials primarily targeting gymnastics enthusiasts in Germany. The website leverages the Shopify platform with a modern Dawn theme, ensuring a fast, mobile-optimized, and accessible user experience. The presence of privacy and cookie policies with consent mechanisms demonstrates compliance with GDPR requirements. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital storefront with strong branding and social media integration.

D

Deutscher Turner-Bund e.V.

dtb-akademie.de

55

The DTB-Akademie is a well-established German educational institution specializing in training and continuing education for trainers, coaches, and professionals in sports, fitness, health, and related fields. Founded in 1995 and operated by the Deutscher Turner-Bund e.V., it offers a broad range of courses including fitness training, group fitness, health sports, dance, Pilates, yoga, and programs for children and the elderly. The website reflects a professional and consistent brand presence targeting sports professionals and educators across Germany. Technically, the website is built on Concrete CMS and employs standard web technologies such as jQuery, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a moderate to good level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers and incident response information are not present, which could be enhanced to improve security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain appears legitimate with consistent business information, and the site links to multiple official partner domains related to the Deutscher Turner-Bund network.

D

Deutsche UNESCO-Kommission

unesco.de

37

The Deutsche UNESCO-Kommission website serves as the central contact point for all UNESCO-related matters in Germany, acting as a mediator for foreign cultural and educational policy. The site is well-structured, content-rich, and professionally designed, targeting a general audience interested in cultural diversity, education, science, and heritage. It operates on TYPO3 CMS, indicating a mature technical infrastructure with good accessibility and SEO practices. However, the absence of explicit privacy and cookie policies, as well as security headers, represents compliance and security gaps that should be addressed to enhance trust and regulatory adherence. The domain registration data is consistent and trustworthy, supporting the legitimacy of the entity. Overall, the website reflects a stable, credible governmental non-profit organization with room for improvement in privacy and security transparency.

S

Sebastian-Kneipp-Akademie

kneippakademie.de

48

Sebastian-Kneipp-Akademie is a specialized educational institution focused on health promotion and prevention through the Kneipp methodology. It offers a variety of in-person and online training programs, seminars, and workshops targeting health-conscious individuals, course instructors, and self-employed professionals in the health sector. The organization maintains a niche market position within Germany, emphasizing quality and tradition in health education. Technically, the website is built on TYPO3 CMS with common JavaScript libraries for enhanced user experience. The site is mobile-optimized, well-structured, and includes modern web practices such as HTTPS and cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a good baseline with HTTPS and privacy compliance but lacks advanced security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy and professionally maintained. Strategically, the organization should consider enhancing its security posture by implementing security headers, publishing incident response contacts, and possibly adding a vulnerability disclosure policy. These steps will improve trust and compliance, especially as digital threats evolve.

S

Sebastian-Kneipp-Schule

kneippschule.de

54

Sebastian-Kneipp-Schule is a vocational school based in Bad Wörishofen, Germany, specializing in physiotherapy and massage education. Affiliated with the Kneipp-Bund e.V., it offers a range of training programs including 36-month and 18-month physiotherapy courses, massage plus, Kneipp bath attendant courses, and continuing education. The institution targets students and professionals seeking formal education and certification in these health and wellness fields. The school has a longstanding history of over 60 years, positioning it as a reputable educational provider in its niche. Technically, the website is built on TYPO3 CMS, utilizing common web technologies such as jQuery UI and Flexslider for interactive elements. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Google Analytics is used for visitor tracking, indicating moderate user tracking levels. The website performance is moderate, with a generally good user experience and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. A notable security concern is the presence of a hidden spam link to a replica watches site, which poses SEO and reputational risks. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security maturity. Overall, the website is functional, professional, and compliant with privacy regulations but would benefit from enhanced security practices and removal of suspicious hidden content. The domain WHOIS data is minimal but consistent with the business purpose, supporting the legitimacy of the site. Strategic recommendations include removing spam links, adding security headers, publishing security policies, and enhancing incident response readiness.

K

Kneipp-Bund e.V.

kneippvisite.de

38

Kneipp-Visite is the official health guidance platform of the Kneipp-Bund e.V., a well-established German non-profit association representing over 660 Kneipp clubs and 160,000 members. The website serves as a comprehensive health advisor focusing on natural therapies based on the Kneipp principles, including water therapy, nutrition, movement, plants, and lifestyle. It supports affiliated organizations such as Kneipp-Verlag and Sebastian-Kneipp-Akademie, offering educational and publishing services. The target audience includes individuals interested in natural health and wellness, particularly within Germany.

K

Kneipp-Verlag GmbH

kneippverlag.de

45

Kneipp-Verlag GmbH is a specialized publishing company focused on health and natural healing methods, particularly those related to the Kneipp tradition. Established in 1975 as part of the Kneipp-Bund, it publishes the Kneipp-Journal, various Fachbücher, and operates an online shop offering health products. The company targets Kneipp association members and health-conscious individuals, positioning itself as a niche publisher and retailer within Germany. The website is professionally designed, content-rich, and consistent with the company's branding and mission. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies with good mobile optimization and SEO practices. The site is served over HTTPS with a cookie consent mechanism in place, indicating a good level of digital maturity. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. From a security perspective, the site shows no signs of vulnerabilities or malicious content. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Contact information is complete and transparent, enhancing trustworthiness. Overall, the site presents a low-risk profile with room for security policy enhancements. Strategically, the company should focus on implementing security headers, publishing a security policy, and possibly a vulnerability disclosure program to further strengthen its security posture and trust with users.

A

abavo GmbH

abavo.de

52

abavo GmbH is a German media service provider specializing in publishing process automation and typesetting services. Their flagship product, vlow®, offers an automated publishing workflow from manuscript to finished publication, targeting publishing houses and media companies. The company emphasizes precision, craftsmanship, and cost efficiency, positioning itself as a reliable partner in the media production sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. It integrates Google Analytics with IP anonymization and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and published security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a trustworthy and professional business presence.

B

BVA BikeMedia GmbH

fahrrad-buecher-karten.de

67

BVA BikeMedia GmbH operates www.fahrrad-buecher-karten.de as a specialized e-commerce platform focused on cycling maps, books, and related media products. The company holds a strong market position in Germany as a leading provider of cycling literature and maps, targeting cycling enthusiasts and travelers. The website offers a well-structured catalog of products, including digital downloads and magazines, supported by clear navigation and professional design. Technically, the site uses modern web technologies including JavaScript, CSS3, and integrates Google Analytics with privacy-conscious configurations such as IP anonymization. The hosting is managed via INWX nameservers, and the site enforces HTTPS, ensuring secure data transmission. Privacy compliance is robust with a detailed cookie consent mechanism and accessible privacy policy. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. Contact information is comprehensive, including email, phone, physical address, and contact forms, enhancing business credibility. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its retail and media business model.

T

Talleux & Zöllner GbR

talleux-zoellner.de

47

Talleux & Zöllner GbR is a small German internet agency specializing in the conception and programming of websites and web applications, primarily using TYPO3 CMS. They serve medium-sized companies, organizations, and agencies, offering services from project conception to ongoing maintenance and support. Their market position is that of a niche provider with certified TYPO3 developers and a focus on tailored web solutions. Technically, the website is built on TYPO3 CMS with PHP, Python, and JavaScript technologies, featuring a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused.

B

BTFB Sport Events GmbH

btfb-services.berlin

50

BTFB Sport Events GmbH operates a niche sports event and service platform primarily serving the Berlin region. The company focuses on marketing and distributing BTFB activities, managing events such as FEUERWERK DER TURNKUNST and NIGHT OF SPORTS, and supporting brand development within DTB brands. Their business model includes ticket sales, rental services, and a specialized shop for sports and club merchandise. The website is built on the SIQUANDO Shop 12 CMS and uses standard web technologies like jQuery and JavaScript. While the site is accessible and provides a good user experience with clear navigation and relevant content, it lacks advanced technical SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which should be addressed to improve resilience. Privacy compliance is partially met with cookie consent but lacks detailed GDPR indicators and contact information. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

ISTAF INDOOR

istaf-indoor.de

51

ISTAF INDOOR is a professional athletics event organization operating primarily in Berlin and Düsseldorf, Germany. The website serves as a digital platform to promote world-class indoor track and field events, targeting sports enthusiasts and attendees. The business model revolves around event promotion, ticket sales, and providing information about athletics competitions. The site positions itself as a reputable event organizer with a consistent brand presence and active social media engagement. Technically, the website is built on WordPress using the Divi theme and several well-known plugins such as LayerSlider, Contact Form 7, and Real Cookie Banner for GDPR compliance. The infrastructure is hosted on rzone.de, with modern web technologies including Google Fonts, Font Awesome, and Google reCAPTCHA integrated for enhanced user experience and security. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the use of reCAPTCHA and absence of exposed sensitive data indicate a reasonable security posture. However, the site lacks a public security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, ISTAF INDOOR presents a professional and trustworthy online presence with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and business credibility.

L

Landessportbund Berlin

lsb-berlin.net

44

Landessportbund Berlin is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in Berlin. The website serves as a comprehensive portal offering information on funding, training, programs, and child protection initiatives, targeting sports clubs, athletes, and the general public interested in sports. The organization holds a strong market position as a key regional sports umbrella body with extensive partnerships and community engagement. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and Font Awesome, hosted by Claranet. It incorporates accessibility tools such as eyeAble and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, well-structured, and performs moderately well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. While some security headers are not explicitly visible in the provided content, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published vulnerability disclosure or incident response contacts suggests areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, presenting minimal risk. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and trust.

L

Landessportbund Berlin e.V.

familiensportfest-berlin.de

42

The website familiensportfest-berlin.de represents the Landessportbund Berlin e.V., promoting the Familiensportfest Berlin, a family-oriented sports festival held across various districts in Berlin. The event aims to engage families and local communities in diverse sports activities, fostering health, inclusion, and community spirit. The organization holds a strong regional presence with partnerships across Berlin's sports federations and clubs. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and Font Awesome, integrating accessibility tools and Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS and some privacy measures, though explicit security headers and policies are absent. Contact information is comprehensive, supporting business credibility. Overall, the site is professional, accessible, and trustworthy, serving its community-focused mission effectively.

Sportbunt.de is a professionally maintained non-profit website operated by Landessportbund Berlin e.V., focused on promoting integration through sports activities in Berlin, especially targeting refugees and local sports clubs. The site offers information on sports programs, training, events, and community engagement. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates mapping and analytics services, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are not publicly visible. Overall, the website is trustworthy, compliant with GDPR, and serves its community-oriented mission effectively.

L

Landessportbund Berlin

berlin-hat-talent.de

44

Berlin hat Talent is a well-established non-profit initiative supported by the Landessportbund Berlin and the Berlin Senate Department for Education, Youth and Science. The initiative focuses on promoting sports and physical activity among children in Berlin through programs such as Bewegungsfördergruppen and Talentiaden. The website reflects a professional and consistent brand presence with strong government and sports federation partnerships. Technically, the site is built on WordPress with a modern plugin ecosystem, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is trustworthy, safe, and serves its target audience effectively.

S

Sportstiftung Berlin

sportstiftung-berlin.org

55

Sportstiftung Berlin is a well-established non-profit foundation focused on promoting youth sports and supporting athletes in their career and vocational development post-sports. The organization operates primarily within Berlin, Germany, and has been active since 2005. Their website provides clear information about their mission, donation options, and contact details, reflecting a transparent and community-oriented approach. Technically, the site is built on the cm4all CMS platform, hosted likely via Strato, and uses older JavaScript libraries which may pose security risks. The site is mobile-optimized and includes basic accessibility features. Security posture is moderate with cookie consent implemented and no visible sensitive data exposure, but lacks modern security headers and DNSSEC. Privacy compliance is good with a dedicated privacy policy and cookie consent mechanism. Overall, the website is professional and trustworthy but would benefit from technical and security updates.

S

Sportjugend Berlin

sportjugend-berlin.de

46

Sportjugend Berlin is a well-established youth sports organization affiliated with the Landessportbund Berlin, focusing on youth social work, educational programs, youth travel, volunteer services, and youth engagement within Berlin. The organization targets youth, sports clubs, volunteers, educators, and families, providing a broad range of community and sports-related services. The website reflects a professional and consistent brand image, with clear contact information and a strong social media presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap 5 and Font Awesome 6. It is hosted on Microsoft Online infrastructure and incorporates accessibility tools such as eyeAble, demonstrating a commitment to inclusive design. The site performs moderately well with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and disables cookies in Matomo analytics to enhance privacy. However, it lacks some security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professional, and serves its community effectively. Strategic improvements in security policies and privacy consent mechanisms would further strengthen its posture.

The Bildungsportal des Hamburger Sportbundes is a specialized educational platform focused on providing sports-related training and seminars primarily for the Hamburg region. It serves as a centralized portal for various sports federations and organizations to offer their educational programs, targeting volunteers, professionals, and sports enthusiasts. The platform is positioned as a trusted non-profit educational resource with a clear focus on accessibility and user-friendly navigation. Technically, the website employs standard modern web technologies including Bootstrap and jQuery, with a responsive design and good accessibility features. Hosting is provided by Host Europe Group, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious elements were detected. Overall, the site demonstrates a solid balance of content quality, technical implementation, and privacy compliance, making it a reliable resource for its target audience.

S

Sächsischer Tennis Verband e.V.

stv-tennis.de

40

The Sächsischer Tennis Verband e.V. website serves as the official online presence of the largest tennis association in the new federal states of Germany. It primarily targets players, trainers, referees, and teams involved in tennis competitions across various age groups and leagues. The site provides news, event calendars, and organizational information, supporting the association's mission to coordinate tennis activities regionally. Technically, the site is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, calendar management, and newsletter capabilities. The infrastructure is hosted on servers associated with kasserver.com, and the site employs HTTPS with Google reCAPTCHA to secure forms. Security posture is solid but could be improved by adding explicit security headers and publishing formal security policies. Privacy compliance is well addressed through the Complianz GDPR plugin and cookie consent mechanisms. Overall, the website is professional, accessible, and trustworthy, with no signs of malicious or adult content.

T

Tennisverband Rheinland-Pfalz e. V.

rlp-tennis.de

57

The Tennisverband Rheinland-Pfalz e. V. operates as a regional tennis association in Germany, providing comprehensive tennis-related news, event management, training, and support services to clubs and players in Rheinland-Pfalz. The website serves as an information hub for tennis enthusiasts, clubs, and officials, reflecting a well-established organization with a strong regional presence and a history dating back to 1948. The association is positioned among the top ten tennis federations in Germany, emphasizing youth development, inclusion, and adult tennis activities. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design, integrating accessibility tools such as eyeAble and analytics via Google Tag Manager. The site demonstrates good mobile optimization, clear navigation, and structured content, supporting a positive user experience. Hosting appears stable with dedicated nameservers, and the site uses HTTPS, although explicit security headers are not detected. From a security perspective, the site shows a moderate security posture with secure login forms and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data aligns well with the organization's identity, showing consistent registration details and no privacy protection, indicating transparency and legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, privacy compliance, and published security policies would enhance its security posture and regulatory adherence.

Hamburger Tennis-Verband e.V. is a regional non-profit sports association dedicated to promoting tennis activities in Hamburg, Germany. The website serves as an information hub for players, clubs, trainers, and tennis enthusiasts, offering event calendars, tournament details, training programs, youth development initiatives, and inclusion projects. The association maintains partnerships with recognized tennis organizations and sponsors, reinforcing its position as a key regional tennis authority. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap 3.3.5, Owl Carousel, and jQuery.mmenu for responsive and interactive UI elements. Google Tag Manager and Google Analytics are used for visitor tracking and analytics. The site is mobile-optimized with a clear navigation structure, though it lacks a known CMS and some modern security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security policies or incident response contacts are published, and security headers like CSP or HSTS are not detected. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, aligning with the organization's transparency. Overall, the website is professional, trustworthy, and well-suited for its audience, with room for improvement in security best practices and formal policy disclosures.

C

CUPRA

cupraofficial.de

62

CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The site offers comprehensive information on vehicle models, leasing and financing options, electric mobility solutions, and after-sales services. The brand targets automotive consumers in Germany who seek performance-oriented and modern electric vehicles. The website is built on Adobe Experience Manager and integrates modern web technologies, providing a good user experience with multimedia content and clear navigation.

The website moku.de currently serves as a placeholder page indicating that a new homepage is under construction. It lacks any substantive business description, contact information, or user engagement features. The site is hosted on t-online.de name servers and uses basic JavaScript tracking scripts from Xiti Analytics and RefinedAds, but does not implement HTTPS or security headers, which significantly weakens its security posture. There are no privacy or cookie policies, nor any GDPR compliance indicators, which raises concerns about privacy and regulatory adherence. Overall, the site appears to be in an early or dormant state with minimal digital maturity and poor content quality.

H

Hochschul-IT-Zentrum des Saarlandes

hiz-saarland.de

60

The Hochschul-IT-Zentrum des Saarlandes operates as a regional IT service center supporting higher education institutions in Saarland, Germany. It provides a range of IT services including user account management, network access (WLAN, VPN), email and groupware solutions, hardware procurement, and cloud services. The website is professionally designed using TYPO3 CMS and targets students, employees, guests, and academic facilities. It maintains partnerships with multiple universities in the region, reinforcing its role as a central IT hub for academic institutions. Technically, the website leverages modern web technologies such as TYPO3 CMS, Bootstrap, and jQuery, hosted likely within university or DFN infrastructure. The site is mobile optimized and offers good navigation and content relevance. However, some improvements in accessibility and SEO could be considered. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the security posture is sound for an academic IT service provider, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's academic context, indicating legitimacy and trustworthiness. The site does not engage in advertising or extensive user tracking, supporting a privacy-conscious approach. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and considering a vulnerability disclosure program to enhance trust and compliance.

H

Hochschule für Technik und Wirtschaft des Saarlandes

wissenwasverbindet.de

67

The Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) is a well-established higher education institution in Germany, specializing in dual study programs that combine academic learning with practical work experience. The website effectively communicates its educational offerings, cooperation with industry partners, and benefits for students. It targets prospective students and companies interested in dual education partnerships. The institution holds multiple certifications and maintains an active social media presence, reinforcing its credibility and market position. Technically, the website is built on TYPO3 CMS and employs Matomo for analytics, reflecting a modern and privacy-conscious infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and shows no signs of exposed sensitive data or vulnerable libraries. The absence of explicit security policies and incident response information suggests an opportunity to strengthen transparency and preparedness. Overall, the website demonstrates a solid security posture but could benefit from additional security best practices and compliance features. The overall risk assessment is low, with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security policies, and establishing a vulnerability disclosure process to further enhance trust and security culture.

G

GSUB - Gesellschaft für soziale Unternehmensberatung MbH

teilhabeberatung.de

61

The website www.teilhabeberatung.de represents the Ergänzende unabhängige Teilhabeberatung (EUTB®), a German non-profit advisory service supporting people with disabilities and their relatives regarding rehabilitation and participation. Operated by GSUB - Gesellschaft für soziale Unternehmensberatung MbH, the site offers comprehensive advisory services, publications, and a dedicated app for appointment scheduling. The organization holds recognized accessibility certification (BIK - BITV-konform) and maintains a professional online presence with clear navigation and content relevance. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and ReadSpeaker for accessibility. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. No blocking mechanisms or WAF challenges were detected, allowing full content access. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, no direct contact emails or phone numbers are publicly listed, relying on contact forms for communication. Overall, the website is trustworthy, professionally managed, and aligned with its non-profit mission. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

I

Intersnack Deutschland SE

intersnack.de

61

Intersnack Deutschland SE is a large German-based manufacturer and retailer of popular salty snacks, emphasizing sustainability and responsible production. The company operates a professional, well-structured website powered by TYPO3 CMS, targeting general consumers and potential employees. The site offers comprehensive information about their brands, sustainability initiatives, and career opportunities, with a clear corporate identity and consistent branding. Technically, the website uses modern web technologies and includes analytics via eTracker, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some advanced security headers and policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data aligns with the corporate identity, showing a legitimate and consistent domain registration. Overall, the website reflects a mature digital presence suitable for a large enterprise in the retail food sector.

VDMA is a prominent German and European industry association representing approximately 3,600 companies in the machinery and plant engineering sector. The organization focuses on innovation, export orientation, and supporting medium-sized enterprises. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to industry professionals and stakeholders. The technical infrastructure is based on the Liferay CMS platform, leveraging modern JavaScript frameworks and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, consent management, and use of security best practices, although explicit security headers could be enhanced. Overall, the site demonstrates compliance with GDPR and provides clear contact and privacy information, supporting trust and credibility.

K

kv.digital GmbH

kv.digital

58

kv.digital GmbH is a medium-sized digital healthcare company based in Germany, fully owned by the Kassenärztliche Bundesvereinigung (KBV). It specializes in providing secure medical communication solutions, including KIM services and the 116117 appointment service software, serving healthcare providers and software manufacturers. The company acts as a central innovation platform and competence center for digitalization in ambulatory healthcare. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a GDPR-compliant cookie consent mechanism. The presence of ISO 27001 certification demonstrates a strong commitment to information security. Security posture is robust with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the healthcare technology sector.

E

e-pixler GmbH

patientenberatung-der-zahnaerzte.de

44

The website 'Zahnärztliche Patientenberatung' provides a comprehensive, nationwide, and free dental patient advisory service in Germany. It is operated by the (Landes-)Zahnärztekammern and Kassenzahnärztlichen Vereinigungen, offering expert, independent advice on dental health, treatments, and costs to both statutory and private insured patients. The site is professionally designed and well-structured, targeting patients and their families with clear navigation and relevant content. It also links to authoritative health organizations and provides video resources to enhance user understanding. Technically, the website is built on TYPO3 CMS, hosted on sldomains.de nameservers, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. No blocking or WAF mechanisms interfere with content access, ensuring full availability. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a clear privacy policy, though no cookie consent mechanism was found. Contact information is present but limited, and no social media or tracking scripts are used, indicating minimal user tracking. Overall, the website is trustworthy, professional, and serves an important public health function. Strategic improvements include implementing cookie consent, adding security headers, and publishing incident response details to enhance security posture and compliance.

CIRS dent operates as a specialized error reporting and learning platform targeted at dental practices in Germany. The website provides anonymous and sanction-free reporting of undesired events in dental practice workflows, aiming to improve patient safety and professional learning. The project is supported by reputable German dental organizations BZÄK and KZBV and collaborates with medical experts, enhancing its credibility and niche market position. The platform offers services such as report creation, database search, publications, and user feedback mechanisms, positioning itself as a valuable resource in healthcare quality management for dentists. Technically, the website employs a traditional web stack with jQuery and Matomo analytics, hosted on German infrastructure (netcologne.de). The site is mobile-optimized with clear navigation and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate but could be improved by implementing security headers and explicit incident response policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and aligned with its healthcare mission.