Security Directory

M

MITSUBISHI MOTORS

mitsubishi-motors.de

64

MITSUBISHI MOTORS Germany operates a professional website showcasing their automotive models, services, and offers with a focus on modern mobility including electric and plug-in hybrid vehicles. The site targets German automotive consumers and provides detailed navigation for models and services. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes comprehensive cookie consent and analytics integration. Security posture is good with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

B

Bodensee Energie

bodensee-energie.de

60

Bodensee Energie is a regional energy provider in Germany offering electricity and gas services with a focus on certified eco-friendly energy. The website targets residential and commercial customers in the Bodensee region, emphasizing competitive pricing and customer service excellence. The digital infrastructure includes modern web technologies such as jQuery, Google Tag Manager, and an advanced accessibility tool by digi·access GmbH, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive cookie policy and GDPR adherence. Overall, the website is professional, accessible, and trustworthy, supporting the company's market position as a reliable regional energy supplier.

U

United Kiosk AG

united-kiosk.de

56

United Kiosk AG operates a well-established German e-commerce platform specializing in digital and print magazine and newspaper subscriptions. With over 25 years in the market, it offers a vast catalog of more than 5,000 titles, serving a broad audience interested in diverse topics. The company emphasizes sustainability, fair practices, and trusted certifications, positioning itself as a reliable and culturally significant media provider in Germany. The website's design is professional, consistent, and optimized for mobile devices, providing an excellent user experience with clear navigation and relevant content.

G

Gabriele Capelli Editore

gabrielecapellieditore.com

61

Gabriele Capelli Editore is a small Italian publishing house specializing in novels, essays, poetry, and cultural literary content. The website serves as a platform to showcase their catalog, authors, and events, targeting readers and literary enthusiasts. The business model revolves around publishing and distributing literary works, including digital ebooks and physical books, with a focus on quality and cultural relevance. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, supported by common libraries such as jQuery and Jetpack. The site is hosted on WordPress.com infrastructure, ensuring reliable uptime and moderate performance. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism via Iubenda, demonstrating GDPR compliance. However, it lacks advanced security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a niche publishing business, with good privacy compliance and moderate technical maturity. Strategic improvements in security headers and incident response transparency could enhance its security posture further.

A

Amedia Kreativ

amediakreativ.no

45

Amedia Kreativ is a Norwegian creative service provider established in 2018, offering consulting and production services primarily targeting a general audience in the media sector. The website is built on WordPress using the Divi theme and integrates modern analytics tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. The site is well-designed with good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website presents a professional image but would benefit from enhanced privacy and security measures to improve trust and compliance.

A

Act-On

actonsoftware.com

75

Act-On is a well-established marketing automation software provider founded in 2005, offering AI-driven solutions to help businesses create, measure, and optimize marketing campaigns. The company targets B2B marketers and enterprises, positioning itself as a competitive mid-market to enterprise SaaS platform with a comprehensive suite of services including multichannel marketing, lead scoring, analytics, and sales alignment. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress using Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, Cookiebot, and 6sense. Hosting is via Amazon AWS, and the site employs HTTPS with good security headers, although DNSSEC is not enabled. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but there is room for improvement by enabling DNSSEC and publishing explicit security policies or vulnerability disclosure information. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. The risk assessment is low, with no blocking WAF detected and no suspicious WHOIS patterns. Strategic recommendations include enhancing DNS security, formalizing security incident response, and improving accessibility features to further strengthen compliance and user experience.

Q

Qwellcode GmbH

qwellcode.de

10

Qwellcode GmbH is a German software development company specializing in custom software solutions for industry and small to medium-sized enterprises (KMUs). Established since 2013, the company offers a broad range of services including web development, e-commerce, mobile applications, virtual reality, and blockchain technologies. Their market position is that of an experienced, innovative agency with international reach and a focus on modern technologies. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on OctoberCMS with modern frontend technologies and is hosted behind Cloudflare DNS, ensuring good performance and security. The site is mobile optimized and SEO friendly, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and publicly available security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

B

Brinkhaus / Ferchow

bf-net.de

53

Brinkhaus / Ferchow is a small creative agency specializing in web design, advertising, and online marketing services primarily targeting clients in Oldenburg, Rastede, and surrounding regions in Germany. The website is built on WordPress using Elementor and jQuery, reflecting a moderate level of technical maturity with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website presents a professional image but could improve compliance and security transparency.

S

Stadtverwaltung Eschborn

eschborn.de

55

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

L

Liechtensteinische Wirtschaftsprüfer-Vereinigung

wpv.li

50

The Liechtensteinische Wirtschaftsprüfer-Vereinigung (WPV) is a professional association representing auditors in Liechtenstein. It serves as the official body organizing the profession, providing education, setting ethical standards, and liaising with regulatory authorities such as the FMA. The website is targeted at auditors, auditing firms, and financial market participants within Liechtenstein, offering information about membership, organizational structure, professional standards, and contact details. The WPV holds a recognized position within the Liechtenstein financial and regulatory ecosystem.

S

Swiss Sport Integrity

sportintegrity.ch

63

Swiss Sport Integrity is a Swiss foundation dedicated to protecting the integrity of Swiss sports through anti-doping measures, ethical guidelines, and incident reporting services. The organization serves athletes, coaches, sports organizations, and the public by providing education, prevention, control, and legal frameworks to ensure clean and ethical sports practices. The website is professionally designed, multilingual, and provides comprehensive information and services related to sports integrity in Switzerland. Technically, the website is built on Drupal 11 with modern frontend technologies including Tailwind CSS and jQuery. It is mobile-optimized, accessible, and integrates Google Tag Manager and Analytics for user tracking. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. From a security perspective, the site follows best practices such as secure forms and no exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the website's Swiss non-profit sports integrity mission, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and business credibility. Strategic improvements in security transparency and incident response readiness would further enhance trust and compliance.

B

Building4Jobs

building4jobs.com

9

Building4jobs.com is a specialized online job board focused on the construction sector, primarily serving jobseekers and recruiters in the UK construction industry. The platform offers job search, job alerts, CV uploads, and recruiter services such as job posting and candidate search. The website is powered by the Madgex Job Board Platform and integrates standard digital marketing and analytics tools including Google Analytics and Google Tag Manager. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business model appear credible and consistent with a legitimate niche job board.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

G

Grafik Design Katja Saenze

grafik-art.ch

47

Grafik Design Katja Saenze is a small, professional graphic design agency based in Aargau, Switzerland, specializing in comprehensive visual branding services including logo creation, corporate identity, and web design. The website demonstrates a strong market position locally with over 20 years of experience and a portfolio of more than 1000 projects. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, providing clear contact information and social media presence.

L

Lumosa GmbH

sportplatzbeleuchtung.de

55

Lumosa GmbH is a specialized manufacturer and service provider of LED floodlighting solutions for sports facilities, including football, tennis, hockey, and equestrian sports. The company positions itself as a leading player in the European market with a strong focus on energy efficiency and innovative lighting technology. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Privacy and cookie policies are well implemented with consent mechanisms, indicating good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Overall, the domain and website content are consistent and trustworthy, supporting Lumosa's market position as a reputable business in the energy-efficient sports lighting sector.

Müllverbrennung Kiel GmbH & Co. KG (MVK) operates a highly efficient and environmentally friendly waste-to-energy facility in Kiel, Germany, processing approximately 140,000 tons of household and commercial waste annually. The company serves around 500,000 residents and employs about 70 staff members. Ownership is split between the City of Kiel (51%) and REMONDIS GmbH (49%), positioning MVK as a key regional player in waste management and energy recovery. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries and a cookie consent mechanism compliant with GDPR requirements. Analytics are handled via Matomo, ensuring privacy-conscious tracking.

M

MULTA MEDIO AG

lotto-sh.de

66

LOTTO Schleswig-Holstein operates as the official regional lottery provider for Schleswig-Holstein, Germany, offering a comprehensive portfolio of lottery games including LOTTO 6aus49, Eurojackpot, GlücksSpirale, BINGO!, KENO, Rubbellose, and TOTO. The website facilitates online ticket purchases, subscription services, and jackpot tracking, targeting adult lottery players within the region. The platform is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and analytics through Etracker, hosted likely on Telekom infrastructure, ensuring reliable performance and compliance with data protection regulations. Security posture is solid with HTTPS enforcement, CAPTCHA integration, and ISO 27001 certification, though some security headers could be enhanced. Overall, the site demonstrates a mature digital presence aligned with legal and regulatory requirements for gambling services in Germany.

H

Hamburger Sportjugend

hamburger-sportjugend.de

44

Hamburger Sportjugend is a well-established non-profit organization dedicated to youth sports in Hamburg, representing over 220,000 athletes. The website provides comprehensive information about their services including education, voluntary services, funding, and prevention of sexualized violence. Their market position is strong within the Hamburg sports community, supported by partnerships and a clear digital presence. Technically, the website is built on WordPress with Elementor, offering good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve by publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

mylokalesuche AG

myls.ch

67

mylokalesuche AG operates as a specialized marketing agency and software developer focused on Swiss small and medium-sized enterprises (SMEs). Their core offerings include the myls App for synchronizing business profiles across multiple directories, website creation with SEO optimization, and management of Google and Meta advertising campaigns. The company positions itself as a Google Partner, enhancing its credibility and market presence within the local Swiss digital marketing landscape. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress CMS with modern plugins and libraries, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response details are absent. Overall, the business demonstrates a trustworthy and professional online presence with strong customer trust signals, including numerous positive Google reviews.

L

Landessportbund Hessen e.V.

landessportbund-hessen.de

45

Landessportbund Hessen e.V. is a large non-profit organization serving as the umbrella sports federation for over 7,300 member clubs in the German state of Hessen. The organization provides a broad range of services including sports development, education and licensing, club management, infrastructure support, and communication. Their website is built on TYPO3 CMS and integrates accessibility tools and privacy-respecting analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and GDPR compliant with clear contact information and social media presence, supporting strong stakeholder engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and hosting are consistent with the organization's identity, indicating a trustworthy online presence.

K

Korbball in Bayern

korbball-bayern.de

38

The website 'Korbball in Bayern' serves as an informational platform dedicated to the sport of Korbball in the Bavaria region of Germany. It provides news, event updates, and community information targeted at Korbball players and enthusiasts. The site is built on Joomla CMS and incorporates modern web technologies such as jQuery and Bootstrap, with Usercentrics managing cookie consent and Facebook SDK integrated for social media features. Hosting is provided by a German hosting provider, agenturserver, as indicated by the nameservers. The website is accessible without any WAF or security challenges, indicating no blocking or content restrictions. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partially addressed through the Usercentrics cookie consent mechanism; however, no dedicated privacy policy or terms of service pages were found. Contact information such as emails or phone numbers is absent, which limits direct communication channels for users or security incident reporting. Overall, the website presents a basic but functional digital presence for a niche regional sports community. The security posture is moderate but could be improved by implementing security headers, publishing privacy and security policies, and providing clear contact information. The content is safe for general audiences with no adult or explicit material detected.

D

DLRG

dlrg.net

66

DLRG.net serves as the Internet Service Center (ISC) for the Deutsche Lebens-Rettungs-Gesellschaft (DLRG), a German non-profit organization focused on water rescue and safety. The website functions as an intranet portal providing active members with access to documents, news, examination tools, and seminar management applications. The platform targets active DLRG members and supports their operational and administrative needs through a secure login system and member-specific applications. The domain is well-established since 1999, reflecting a mature digital presence aligned with the organization's history. Technically, the website employs standard web technologies including jQuery, FontAwesome, and Bootstrap, hosted on AWS infrastructure. The site is mobile-optimized with responsive design and basic accessibility features. However, there is room for improvement in SEO and accessibility enhancements. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended to strengthen defenses. From a security and compliance perspective, the site provides secure login forms with input validation but lacks visible cookie consent mechanisms and detailed privacy or security policies on the main site. No incident response or vulnerability disclosure information is published, which could be improved to enhance transparency and trust. The absence of advertising and tracking scripts indicates a privacy-conscious approach, though cookie policy implementation is advised for GDPR compliance. Overall, dlrg.net is a trustworthy and professional portal serving a defined non-profit community with a good balance of functionality and security. Strategic improvements in security headers, cookie consent, and policy transparency would further elevate its compliance and security posture.

D

Deutscher Turner-Bund e.V.

beactive-deutschland.de

47

The website www.beactive-deutschland.de serves as the official German portal for the European Week of Sports campaign, coordinated by the Deutscher Turner-Bund e.V. It provides comprehensive information about the campaign, events, partner engagement, and resources to promote physical activity across Germany and Europe. The site targets a broad audience including sports clubs, organizations, schools, and the general public. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party services such as Google Tag Manager and SiteSearch360 for analytics and search functionality. The site is mobile-optimized and presents content in a clear, professional manner.

D

Deutscher Turner-Bund e.V.

dtb-akademie.de

55

The DTB-Akademie is a well-established German educational institution specializing in training and continuing education for trainers, coaches, and professionals in sports, fitness, health, and related fields. Founded in 1995 and operated by the Deutscher Turner-Bund e.V., it offers a broad range of courses including fitness training, group fitness, health sports, dance, Pilates, yoga, and programs for children and the elderly. The website reflects a professional and consistent brand presence targeting sports professionals and educators across Germany. Technically, the website is built on Concrete CMS and employs standard web technologies such as jQuery, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a moderate to good level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers and incident response information are not present, which could be enhanced to improve security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain appears legitimate with consistent business information, and the site links to multiple official partner domains related to the Deutscher Turner-Bund network.

S

Sebastian-Kneipp-Akademie

kneippakademie.de

48

Sebastian-Kneipp-Akademie is a specialized educational institution focused on health promotion and prevention through the Kneipp methodology. It offers a variety of in-person and online training programs, seminars, and workshops targeting health-conscious individuals, course instructors, and self-employed professionals in the health sector. The organization maintains a niche market position within Germany, emphasizing quality and tradition in health education. Technically, the website is built on TYPO3 CMS with common JavaScript libraries for enhanced user experience. The site is mobile-optimized, well-structured, and includes modern web practices such as HTTPS and cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a good baseline with HTTPS and privacy compliance but lacks advanced security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy and professionally maintained. Strategically, the organization should consider enhancing its security posture by implementing security headers, publishing incident response contacts, and possibly adding a vulnerability disclosure policy. These steps will improve trust and compliance, especially as digital threats evolve.

B

BVA BikeMedia GmbH

fahrrad-buecher-karten.de

67

BVA BikeMedia GmbH operates www.fahrrad-buecher-karten.de as a specialized e-commerce platform focused on cycling maps, books, and related media products. The company holds a strong market position in Germany as a leading provider of cycling literature and maps, targeting cycling enthusiasts and travelers. The website offers a well-structured catalog of products, including digital downloads and magazines, supported by clear navigation and professional design. Technically, the site uses modern web technologies including JavaScript, CSS3, and integrates Google Analytics with privacy-conscious configurations such as IP anonymization. The hosting is managed via INWX nameservers, and the site enforces HTTPS, ensuring secure data transmission. Privacy compliance is robust with a detailed cookie consent mechanism and accessible privacy policy. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. Contact information is comprehensive, including email, phone, physical address, and contact forms, enhancing business credibility. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its retail and media business model.

T

Talleux & Zöllner GbR

talleux-zoellner.de

47

Talleux & Zöllner GbR is a small German internet agency specializing in the conception and programming of websites and web applications, primarily using TYPO3 CMS. They serve medium-sized companies, organizations, and agencies, offering services from project conception to ongoing maintenance and support. Their market position is that of a niche provider with certified TYPO3 developers and a focus on tailored web solutions. Technically, the website is built on TYPO3 CMS with PHP, Python, and JavaScript technologies, featuring a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused.

B

BTFB Sport Events GmbH

btfb-services.berlin

50

BTFB Sport Events GmbH operates a niche sports event and service platform primarily serving the Berlin region. The company focuses on marketing and distributing BTFB activities, managing events such as FEUERWERK DER TURNKUNST and NIGHT OF SPORTS, and supporting brand development within DTB brands. Their business model includes ticket sales, rental services, and a specialized shop for sports and club merchandise. The website is built on the SIQUANDO Shop 12 CMS and uses standard web technologies like jQuery and JavaScript. While the site is accessible and provides a good user experience with clear navigation and relevant content, it lacks advanced technical SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which should be addressed to improve resilience. Privacy compliance is partially met with cookie consent but lacks detailed GDPR indicators and contact information. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

ISTAF INDOOR

istaf-indoor.de

51

ISTAF INDOOR is a professional athletics event organization operating primarily in Berlin and Düsseldorf, Germany. The website serves as a digital platform to promote world-class indoor track and field events, targeting sports enthusiasts and attendees. The business model revolves around event promotion, ticket sales, and providing information about athletics competitions. The site positions itself as a reputable event organizer with a consistent brand presence and active social media engagement. Technically, the website is built on WordPress using the Divi theme and several well-known plugins such as LayerSlider, Contact Form 7, and Real Cookie Banner for GDPR compliance. The infrastructure is hosted on rzone.de, with modern web technologies including Google Fonts, Font Awesome, and Google reCAPTCHA integrated for enhanced user experience and security. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the use of reCAPTCHA and absence of exposed sensitive data indicate a reasonable security posture. However, the site lacks a public security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, ISTAF INDOOR presents a professional and trustworthy online presence with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and business credibility.

Sportbunt.de is a professionally maintained non-profit website operated by Landessportbund Berlin e.V., focused on promoting integration through sports activities in Berlin, especially targeting refugees and local sports clubs. The site offers information on sports programs, training, events, and community engagement. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates mapping and analytics services, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are not publicly visible. Overall, the website is trustworthy, compliant with GDPR, and serves its community-oriented mission effectively.

L

Landessportbund Berlin

berlin-hat-talent.de

44

Berlin hat Talent is a well-established non-profit initiative supported by the Landessportbund Berlin and the Berlin Senate Department for Education, Youth and Science. The initiative focuses on promoting sports and physical activity among children in Berlin through programs such as Bewegungsfördergruppen and Talentiaden. The website reflects a professional and consistent brand presence with strong government and sports federation partnerships. Technically, the site is built on WordPress with a modern plugin ecosystem, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is trustworthy, safe, and serves its target audience effectively.

The Bildungsportal des Hamburger Sportbundes is a specialized educational platform focused on providing sports-related training and seminars primarily for the Hamburg region. It serves as a centralized portal for various sports federations and organizations to offer their educational programs, targeting volunteers, professionals, and sports enthusiasts. The platform is positioned as a trusted non-profit educational resource with a clear focus on accessibility and user-friendly navigation. Technically, the website employs standard modern web technologies including Bootstrap and jQuery, with a responsive design and good accessibility features. Hosting is provided by Host Europe Group, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious elements were detected. Overall, the site demonstrates a solid balance of content quality, technical implementation, and privacy compliance, making it a reliable resource for its target audience.

S

Sächsischer Tennis Verband e.V.

stv-tennis.de

40

The Sächsischer Tennis Verband e.V. website serves as the official online presence of the largest tennis association in the new federal states of Germany. It primarily targets players, trainers, referees, and teams involved in tennis competitions across various age groups and leagues. The site provides news, event calendars, and organizational information, supporting the association's mission to coordinate tennis activities regionally. Technically, the site is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, calendar management, and newsletter capabilities. The infrastructure is hosted on servers associated with kasserver.com, and the site employs HTTPS with Google reCAPTCHA to secure forms. Security posture is solid but could be improved by adding explicit security headers and publishing formal security policies. Privacy compliance is well addressed through the Complianz GDPR plugin and cookie consent mechanisms. Overall, the website is professional, accessible, and trustworthy, with no signs of malicious or adult content.

Hamburger Tennis-Verband e.V. is a regional non-profit sports association dedicated to promoting tennis activities in Hamburg, Germany. The website serves as an information hub for players, clubs, trainers, and tennis enthusiasts, offering event calendars, tournament details, training programs, youth development initiatives, and inclusion projects. The association maintains partnerships with recognized tennis organizations and sponsors, reinforcing its position as a key regional tennis authority. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap 3.3.5, Owl Carousel, and jQuery.mmenu for responsive and interactive UI elements. Google Tag Manager and Google Analytics are used for visitor tracking and analytics. The site is mobile-optimized with a clear navigation structure, though it lacks a known CMS and some modern security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security policies or incident response contacts are published, and security headers like CSP or HSTS are not detected. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, aligning with the organization's transparency. Overall, the website is professional, trustworthy, and well-suited for its audience, with room for improvement in security best practices and formal policy disclosures.

K

KOMUNIQUE

komunique.com

10

KOMUNIQUE is a Swiss-based independent web design and development studio led by Philipp Roth, specializing in creating custom websites, web applications, and mobile apps using advanced platforms such as Webflow, Craft CMS, FlutterFlow, and Webstudio. The company serves clients primarily in Switzerland but also internationally, focusing on delivering unique, user-friendly, and SEO-optimized digital solutions. KOMUNIQUE collaborates with partners in design and content to provide comprehensive digital services. Technically, the website leverages modern web technologies, including GSAP for animations, Lenis for smooth scrolling, and integrates marketing and analytics tools like Google Tag Manager and MailerLite. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies. WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection or recent registration. Overall, KOMUNIQUE presents as a professional and credible digital agency with a strong technical foundation and good privacy compliance.

Z

zweihochdrei gmbh

zweihochdrei.ch

9

zweihochdrei gmbh is a small Swiss agency based in Basel that has operated for 17 years, providing agency services to clients. The website announces the cessation of agency activities as of May 31, 2023, and provides contact details for support after closure. The company maintains a professional web presence using WordPress and UIkit, with a consistent brand image and clear contact information. Technically, the site uses common web technologies and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or tracking scripts are present, reducing privacy risks but also limiting user engagement and analytics capabilities. Overall, the website is trustworthy and professional but could improve compliance and security practices.

E

Evangelisch-reformierte Kirche des Kantons Basel-Stadt

erk-bs.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Stadt website serves as the official online presence for the regional Protestant church in Basel-Stadt, Switzerland. It provides comprehensive information about church services, events, community programs, and pension fund management. The site targets church members and the local community, offering timely updates and resources in German. The business model is non-profit and community-oriented, focusing on religious and social services within the canton. Technically, the website is built on the kirchenweb.ch CMS platform, utilizing common web technologies such as jQuery and Owl Carousel. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes some security headers, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with domain registration details consistent with the organization's identity.

Z

zur Mägd

zurmaegd.ch

38

Zur Mägd is an Italian restaurant located in Basel, Switzerland, offering authentic Italian cuisine, private events, and banquet services. The business operates under the parent company groupe-Oniro and targets local residents and visitors seeking Italian dining experiences. The website is built on WordPress with modern technologies such as jQuery and integrates Mailchimp for newsletter subscriptions. The site is professionally designed with good mobile optimization and clear navigation, providing comprehensive contact information and booking options. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Privacy policies and terms of service are present and linked to the parent company’s domain, indicating compliance with GDPR. Overall, the website reflects a trustworthy and credible hospitality business with a moderate to good digital maturity level.

L

Le Rhin Bleu

lerhinbleu.ch

10

Le Rhin Bleu is a small hospitality business operating a seasonal restaurant located on the banks of the Rhine in Basel, Switzerland. The restaurant specializes in Mediterranean cuisine and offers additional services such as event hosting and gift voucher sales. The website is professionally designed using WordPress and integrates modern marketing and analytics tools including Google Tag Manager and Mailchimp. The business maintains a clear and consistent brand presence with active social media channels and partner affiliations. Technically, the website is well-implemented with HTTPS and cookie consent mechanisms, though it lacks explicit security and incident response policies. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kunstmuseum Basel

kunstmuseumbasel.ch

61

Kunstmuseum Basel is a prestigious and historic public art museum located in Basel, Switzerland, recognized as the oldest public art collection in the world. The museum offers a rich collection of paintings, sculptures, installations, videos, drawings, and prints spanning seven centuries. It serves a diverse audience including art enthusiasts, families, researchers, and educational groups through exhibitions, workshops, guided tours, and research initiatives. The museum operates as a non-profit cultural institution with a strong market position in the art and cultural sector. Technically, the website employs a modern JavaScript stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Visual Website Optimizer for analytics and marketing purposes. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks a visible cookie consent mechanism and explicit security policies, which are areas for improvement in privacy compliance and security transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The WHOIS data confirms the legitimacy and consistency of the domain registration with the museum's identity. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Kunstmuseum Basel's website is professional, trustworthy, and content-rich, but could enhance privacy compliance by implementing cookie consent and publishing security policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

R

Restaurant Brauerei

brauerei-basel.ch

49

Restaurant Brauerei is a traditional Swiss hospitality business located in Basel, Switzerland, offering restaurant dining, an exclusive enothek wine shop, catering services, and event hosting. The business targets a general audience including locals and visitors seeking traditional and innovative Swiss cuisine, complemented by a curated wine selection. The website reflects a well-established local presence with clear contact information, partner affiliations, and a focus on customer experience. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, supporting good user engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no critical vulnerabilities detected.

R

Rifonsa AG

safran-zunft.ch

50

Safran Zunft is a traditional yet modern restaurant located in the heart of Basel, Switzerland, operated by Rifonsa AG. The business offers a blend of traditional ambiance with innovative cuisine focusing on local and seasonal products. It caters to a diverse clientele including local residents, tourists, and corporate clients, providing services such as restaurant dining, event hosting, catering, and home delivery. The website reflects a well-established hospitality business with multiple certifications and a strong local presence. Technically, the website is built on WordPress using modern tools such as WPBakery Page Builder, Google Tag Manager, and Mailchimp for marketing automation. It employs HTTPS with good SSL configuration and uses lazy loading for images to optimize performance. The site is mobile optimized and SEO friendly with structured data implemented via JSON-LD. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present and there is no visible security policy or vulnerability disclosure page, which could be improved. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to further strengthen security posture.

G

Groupe-oniro

groupe-oniro.ch

49

Groupe-oniro is a Swiss hospitality group operating six distinct restaurant venues and catering services primarily located in Basel, Switzerland. Their business model focuses on delivering high-quality culinary experiences across diverse settings, from historic guild halls to modern terraces and Italian cuisine. The company targets a broad audience including locals, tourists, and event organizers, emphasizing authenticity and personal hospitality. Technically, the website is built on WordPress with modern SEO and cookie consent implementations, providing a good user experience with multi-language support and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not published. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the hospitality group.

H

Hochschul-IT-Zentrum des Saarlandes

hiz-saarland.de

60

The Hochschul-IT-Zentrum des Saarlandes operates as a regional IT service center supporting higher education institutions in Saarland, Germany. It provides a range of IT services including user account management, network access (WLAN, VPN), email and groupware solutions, hardware procurement, and cloud services. The website is professionally designed using TYPO3 CMS and targets students, employees, guests, and academic facilities. It maintains partnerships with multiple universities in the region, reinforcing its role as a central IT hub for academic institutions. Technically, the website leverages modern web technologies such as TYPO3 CMS, Bootstrap, and jQuery, hosted likely within university or DFN infrastructure. The site is mobile optimized and offers good navigation and content relevance. However, some improvements in accessibility and SEO could be considered. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the security posture is sound for an academic IT service provider, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's academic context, indicating legitimacy and trustworthiness. The site does not engage in advertising or extensive user tracking, supporting a privacy-conscious approach. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and considering a vulnerability disclosure program to enhance trust and compliance.

Gewerbeverein Pfaffnau / St. Urban & Roggliswil is a small local business association focused on fostering networking and collaboration among local and regional businesses and community stakeholders in Switzerland. The website is built on WordPress using the Divi theme, providing a good user experience with clear navigation and relevant content about the association's purpose, events, and members. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is safe, professional, and trustworthy for its intended audience but could improve in compliance and security transparency.

V

Verein Sakrallandschaft Innerschweiz

sakrallandschaft-innerschweiz.ch

67

Verein Sakrallandschaft Innerschweiz is a non-profit organization dedicated to promoting the rich cultural and spiritual heritage of Central Switzerland, focusing on churches, chapels, monasteries, and sacred sites. The website serves as an informational and promotional platform targeting tourists, pilgrims, families, and cultural enthusiasts interested in spirituality and history. It offers event information, guided tours, newsletters, and partner collaborations to enhance visitor engagement. Technically, the site is built on the Jimdo CMS platform, leveraging common web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could be improved by adding more security headers and explicit security policies. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations, though it lacks detailed terms of service and incident response information.

G

Guidle AG

kallaender.ch

50

The website www.kallaender.ch is a local event listing platform focused on the municipality of Allschwil, Switzerland. Operated by Guidle AG, it provides users with information about upcoming events and allows event organizers to submit their events via a dedicated page. The site targets residents and visitors interested in community activities, positioning itself as a localized event management and information service. The business model revolves around providing a centralized platform for event discovery and submission within the Allschwil community. Technically, the website employs modern web technologies including JavaScript modules, SVG graphics, and the Vite build system. It uses HTTPS to secure communications and loads external scripts from trusted domains such as guidle.com and ajax.googleapis.com. The site is mobile-optimized with responsive design elements and good navigation clarity. However, it lacks some advanced accessibility features and security headers that could enhance its security posture. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data in its HTML content. There are no detected vulnerabilities or malicious scripts. However, the absence of security headers like Content-Security-Policy and Strict-Transport-Security, as well as the lack of a cookie consent mechanism, represent areas for improvement. No explicit privacy or security policies are published beyond an impressum page, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional, trustworthy, and serves its community purpose well but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing cookie consent, publishing detailed privacy and security policies, adding security headers, and considering a vulnerability disclosure program to improve trust and compliance.

G

GSUB - Gesellschaft für soziale Unternehmensberatung MbH

teilhabeberatung.de

61

The website www.teilhabeberatung.de represents the Ergänzende unabhängige Teilhabeberatung (EUTB®), a German non-profit advisory service supporting people with disabilities and their relatives regarding rehabilitation and participation. Operated by GSUB - Gesellschaft für soziale Unternehmensberatung MbH, the site offers comprehensive advisory services, publications, and a dedicated app for appointment scheduling. The organization holds recognized accessibility certification (BIK - BITV-konform) and maintains a professional online presence with clear navigation and content relevance. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and ReadSpeaker for accessibility. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. No blocking mechanisms or WAF challenges were detected, allowing full content access. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, no direct contact emails or phone numbers are publicly listed, relying on contact forms for communication. Overall, the website is trustworthy, professionally managed, and aligned with its non-profit mission. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

VDMA is a prominent German and European industry association representing approximately 3,600 companies in the machinery and plant engineering sector. The organization focuses on innovation, export orientation, and supporting medium-sized enterprises. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to industry professionals and stakeholders. The technical infrastructure is based on the Liferay CMS platform, leveraging modern JavaScript frameworks and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, consent management, and use of security best practices, although explicit security headers could be enhanced. Overall, the site demonstrates compliance with GDPR and provides clear contact and privacy information, supporting trust and credibility.