Security Directory

L

Leichtathletik Shop

leichtathletik-shop.info

72

Leichtathletik Shop is the official online merchandise store of the Deutscher Leichtathletik Verband (German Athletics Association), offering athletics apparel and related products primarily targeting athletes and fans in Germany. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Facebook Pixel for marketing analytics. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced, use of security headers, and form protection via hCaptcha, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in transparency of security and contact information.

The website bitvtest.de represents tollwerk GmbH, a specialized service provider focused on accessibility testing and consulting for websites, web applications, and native apps. Their flagship service, the BIK BITV-Test, evaluates compliance with German BITV 2.0 and European EN 301 549 standards, complemented by WCAG 2.2 testing and usability assessments. The company positions itself as a trusted expert in accessibility with a clear quality promise and a professional, well-structured online presence targeting organizations seeking to improve digital accessibility. The site is primarily German-language with English support, reflecting a regional focus with potential international reach. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The site demonstrates good mobile optimization, accessibility, and SEO practices, including comprehensive metadata and social media integration. Performance is moderate, with no critical technical debt or vulnerabilities detected in the visible content. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No WAF or blocking mechanisms interfere with content access. The absence of a published security policy, incident response contacts, or vulnerability disclosure page suggests room for maturity in security governance. The domain WHOIS data is consistent with the website's business claims, supporting legitimacy and trustworthiness. Overall, bitvtest.de is a professional, trustworthy, and well-maintained website serving a niche but important market segment in digital accessibility. Strategic improvements in privacy compliance and security transparency would further enhance its credibility and user trust.

D

DLRG

dlrg.net

66

DLRG.net serves as the Internet Service Center (ISC) for the Deutsche Lebens-Rettungs-Gesellschaft (DLRG), a German non-profit organization focused on water rescue and safety. The website functions as an intranet portal providing active members with access to documents, news, examination tools, and seminar management applications. The platform targets active DLRG members and supports their operational and administrative needs through a secure login system and member-specific applications. The domain is well-established since 1999, reflecting a mature digital presence aligned with the organization's history. Technically, the website employs standard web technologies including jQuery, FontAwesome, and Bootstrap, hosted on AWS infrastructure. The site is mobile-optimized with responsive design and basic accessibility features. However, there is room for improvement in SEO and accessibility enhancements. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended to strengthen defenses. From a security and compliance perspective, the site provides secure login forms with input validation but lacks visible cookie consent mechanisms and detailed privacy or security policies on the main site. No incident response or vulnerability disclosure information is published, which could be improved to enhance transparency and trust. The absence of advertising and tracking scripts indicates a privacy-conscious approach, though cookie policy implementation is advised for GDPR compliance. Overall, dlrg.net is a trustworthy and professional portal serving a defined non-profit community with a good balance of functionality and security. Strategic improvements in security headers, cookie consent, and policy transparency would further elevate its compliance and security posture.

J

Jenko Sternberg Design

jenkosternberg.de

46

Jenko Sternberg Design is a small, regionally focused design agency based in Germany, specializing in communication design, web design and development, photography, film, and social media services. The company targets businesses in Apelnstedt, Braunschweig, Wolfenbüttel, and surrounding areas, positioning itself as a creative agency with a strong local presence since 1995. The website is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Hosting is reliable, leveraging AWS DNS infrastructure. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and policies are not visibly implemented. Privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible, safe, and trustworthy, but could improve compliance and security transparency.

D

DLRG DLRG-Jugend Bundesebene

dlrg-jugend.de

70

DLRG-Jugend Bundesebene is a German non-profit youth organization affiliated with the German Life Saving Association (DLRG). It focuses on youth engagement, education, and community activities related to water safety and youth development. The website serves as an information hub for events, campaigns, and volunteer opportunities targeted primarily at German-speaking youth and volunteers. The organization maintains a consistent brand presence and provides comprehensive contact and privacy information, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design frameworks such as Bootstrap and FontAwesome. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site incorporates GDPR-compliant cookie consent mechanisms and uses both Google Analytics and Plausible Analytics for visitor tracking, with user opt-in consent. From a security perspective, the site enforces HTTPS and employs cookie consent for analytics tracking, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture appropriate for a non-profit organization. The overall risk is low, with recommendations focusing on enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

D

Deutscher Turner-Bund e.V.

beactive-deutschland.de

47

The website www.beactive-deutschland.de serves as the official German portal for the European Week of Sports campaign, coordinated by the Deutscher Turner-Bund e.V. It provides comprehensive information about the campaign, events, partner engagement, and resources to promote physical activity across Germany and Europe. The site targets a broad audience including sports clubs, organizations, schools, and the general public. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party services such as Google Tag Manager and SiteSearch360 for analytics and search functionality. The site is mobile-optimized and presents content in a clear, professional manner.

T

Turn10

turn10.eu

49

Turn10 is a specialized platform dedicated to apparatus gymnastics (Gerätturnen) targeting clubs, schools, trainers, and gymnastics associations primarily in Austria and Germany. The website provides news, training programs, event schedules, results, and an online shop, positioning itself as a niche regional sports information hub. The presence of partner logos from recognized sports organizations enhances its credibility and trustworthiness. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with some use of external libraries such as iframe-resizer. The site is mobile-optimized with good navigation and SEO practices, though no CMS or hosting provider details are evident. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism indicating GDPR compliance. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or tracking analytics were detected, suggesting a low-risk profile but with room for improvement in security best practices. Overall, the website is professionally maintained, trustworthy, and compliant with privacy regulations. The absence of WHOIS data due to privacy restrictions limits domain registration insights but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

D

Deutscher Turner-Bund e.V.

frankfurt26.de

45

The website frankfurt26.de serves as the official digital platform for the 2026 Rhythmic Gymnastics World Championships hosted in Frankfurt, Germany. It is operated by Deutscher Turner-Bund e.V., the German Gymnastics Federation, and provides comprehensive event information, ticket sales links, volunteer recruitment, and social media engagement. The site targets sports fans, athletes, volunteers, and ticket buyers, positioning itself as a central hub for this major international sporting event. The business model revolves around event promotion and community engagement rather than direct sales or e-commerce.

D

DTB-Shop

dtb-shop.de

62

DTB-Shop is a professional e-commerce platform serving as the official online store for the Deutscher Turner-Bund, offering gymnastics apparel, accessories, and exercise materials primarily targeting gymnastics enthusiasts in Germany. The website leverages the Shopify platform with a modern Dawn theme, ensuring a fast, mobile-optimized, and accessible user experience. The presence of privacy and cookie policies with consent mechanisms demonstrates compliance with GDPR requirements. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital storefront with strong branding and social media integration.

D

Deutscher Turner-Bund e.V.

dtb-akademie.de

55

The DTB-Akademie is a well-established German educational institution specializing in training and continuing education for trainers, coaches, and professionals in sports, fitness, health, and related fields. Founded in 1995 and operated by the Deutscher Turner-Bund e.V., it offers a broad range of courses including fitness training, group fitness, health sports, dance, Pilates, yoga, and programs for children and the elderly. The website reflects a professional and consistent brand presence targeting sports professionals and educators across Germany. Technically, the website is built on Concrete CMS and employs standard web technologies such as jQuery, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a moderate to good level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers and incident response information are not present, which could be enhanced to improve security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain appears legitimate with consistent business information, and the site links to multiple official partner domains related to the Deutscher Turner-Bund network.

D

Deutsche UNESCO-Kommission

unesco.de

37

The Deutsche UNESCO-Kommission website serves as the central contact point for all UNESCO-related matters in Germany, acting as a mediator for foreign cultural and educational policy. The site is well-structured, content-rich, and professionally designed, targeting a general audience interested in cultural diversity, education, science, and heritage. It operates on TYPO3 CMS, indicating a mature technical infrastructure with good accessibility and SEO practices. However, the absence of explicit privacy and cookie policies, as well as security headers, represents compliance and security gaps that should be addressed to enhance trust and regulatory adherence. The domain registration data is consistent and trustworthy, supporting the legitimacy of the entity. Overall, the website reflects a stable, credible governmental non-profit organization with room for improvement in privacy and security transparency.

S

Sebastian-Kneipp-Akademie

kneippakademie.de

48

Sebastian-Kneipp-Akademie is a specialized educational institution focused on health promotion and prevention through the Kneipp methodology. It offers a variety of in-person and online training programs, seminars, and workshops targeting health-conscious individuals, course instructors, and self-employed professionals in the health sector. The organization maintains a niche market position within Germany, emphasizing quality and tradition in health education. Technically, the website is built on TYPO3 CMS with common JavaScript libraries for enhanced user experience. The site is mobile-optimized, well-structured, and includes modern web practices such as HTTPS and cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a good baseline with HTTPS and privacy compliance but lacks advanced security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy and professionally maintained. Strategically, the organization should consider enhancing its security posture by implementing security headers, publishing incident response contacts, and possibly adding a vulnerability disclosure policy. These steps will improve trust and compliance, especially as digital threats evolve.

S

Sebastian-Kneipp-Schule

kneippschule.de

54

Sebastian-Kneipp-Schule is a vocational school based in Bad Wörishofen, Germany, specializing in physiotherapy and massage education. Affiliated with the Kneipp-Bund e.V., it offers a range of training programs including 36-month and 18-month physiotherapy courses, massage plus, Kneipp bath attendant courses, and continuing education. The institution targets students and professionals seeking formal education and certification in these health and wellness fields. The school has a longstanding history of over 60 years, positioning it as a reputable educational provider in its niche. Technically, the website is built on TYPO3 CMS, utilizing common web technologies such as jQuery UI and Flexslider for interactive elements. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Google Analytics is used for visitor tracking, indicating moderate user tracking levels. The website performance is moderate, with a generally good user experience and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. A notable security concern is the presence of a hidden spam link to a replica watches site, which poses SEO and reputational risks. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security maturity. Overall, the website is functional, professional, and compliant with privacy regulations but would benefit from enhanced security practices and removal of suspicious hidden content. The domain WHOIS data is minimal but consistent with the business purpose, supporting the legitimacy of the site. Strategic recommendations include removing spam links, adding security headers, publishing security policies, and enhancing incident response readiness.

K

Kneipp-Bund e.V.

kneippvisite.de

38

Kneipp-Visite is the official health guidance platform of the Kneipp-Bund e.V., a well-established German non-profit association representing over 660 Kneipp clubs and 160,000 members. The website serves as a comprehensive health advisor focusing on natural therapies based on the Kneipp principles, including water therapy, nutrition, movement, plants, and lifestyle. It supports affiliated organizations such as Kneipp-Verlag and Sebastian-Kneipp-Akademie, offering educational and publishing services. The target audience includes individuals interested in natural health and wellness, particularly within Germany.

K

Kneipp-Verlag GmbH

kneippverlag.de

45

Kneipp-Verlag GmbH is a specialized publishing company focused on health and natural healing methods, particularly those related to the Kneipp tradition. Established in 1975 as part of the Kneipp-Bund, it publishes the Kneipp-Journal, various Fachbücher, and operates an online shop offering health products. The company targets Kneipp association members and health-conscious individuals, positioning itself as a niche publisher and retailer within Germany. The website is professionally designed, content-rich, and consistent with the company's branding and mission. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies with good mobile optimization and SEO practices. The site is served over HTTPS with a cookie consent mechanism in place, indicating a good level of digital maturity. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. From a security perspective, the site shows no signs of vulnerabilities or malicious content. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Contact information is complete and transparent, enhancing trustworthiness. Overall, the site presents a low-risk profile with room for security policy enhancements. Strategically, the company should focus on implementing security headers, publishing a security policy, and possibly a vulnerability disclosure program to further strengthen its security posture and trust with users.

A

abavo GmbH

abavo.de

52

abavo GmbH is a German media service provider specializing in publishing process automation and typesetting services. Their flagship product, vlow®, offers an automated publishing workflow from manuscript to finished publication, targeting publishing houses and media companies. The company emphasizes precision, craftsmanship, and cost efficiency, positioning itself as a reliable partner in the media production sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. It integrates Google Analytics with IP anonymization and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and published security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a trustworthy and professional business presence.

B

BVA BikeMedia GmbH

fahrrad-buecher-karten.de

67

BVA BikeMedia GmbH operates www.fahrrad-buecher-karten.de as a specialized e-commerce platform focused on cycling maps, books, and related media products. The company holds a strong market position in Germany as a leading provider of cycling literature and maps, targeting cycling enthusiasts and travelers. The website offers a well-structured catalog of products, including digital downloads and magazines, supported by clear navigation and professional design. Technically, the site uses modern web technologies including JavaScript, CSS3, and integrates Google Analytics with privacy-conscious configurations such as IP anonymization. The hosting is managed via INWX nameservers, and the site enforces HTTPS, ensuring secure data transmission. Privacy compliance is robust with a detailed cookie consent mechanism and accessible privacy policy. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. Contact information is comprehensive, including email, phone, physical address, and contact forms, enhancing business credibility. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its retail and media business model.

T

Talleux & Zöllner GbR

talleux-zoellner.de

47

Talleux & Zöllner GbR is a small German internet agency specializing in the conception and programming of websites and web applications, primarily using TYPO3 CMS. They serve medium-sized companies, organizations, and agencies, offering services from project conception to ongoing maintenance and support. Their market position is that of a niche provider with certified TYPO3 developers and a focus on tailored web solutions. Technically, the website is built on TYPO3 CMS with PHP, Python, and JavaScript technologies, featuring a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused.

B

BTFB Sport Events GmbH

btfb-services.berlin

50

BTFB Sport Events GmbH operates a niche sports event and service platform primarily serving the Berlin region. The company focuses on marketing and distributing BTFB activities, managing events such as FEUERWERK DER TURNKUNST and NIGHT OF SPORTS, and supporting brand development within DTB brands. Their business model includes ticket sales, rental services, and a specialized shop for sports and club merchandise. The website is built on the SIQUANDO Shop 12 CMS and uses standard web technologies like jQuery and JavaScript. While the site is accessible and provides a good user experience with clear navigation and relevant content, it lacks advanced technical SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which should be addressed to improve resilience. Privacy compliance is partially met with cookie consent but lacks detailed GDPR indicators and contact information. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

ISTAF INDOOR

istaf-indoor.de

51

ISTAF INDOOR is a professional athletics event organization operating primarily in Berlin and Düsseldorf, Germany. The website serves as a digital platform to promote world-class indoor track and field events, targeting sports enthusiasts and attendees. The business model revolves around event promotion, ticket sales, and providing information about athletics competitions. The site positions itself as a reputable event organizer with a consistent brand presence and active social media engagement. Technically, the website is built on WordPress using the Divi theme and several well-known plugins such as LayerSlider, Contact Form 7, and Real Cookie Banner for GDPR compliance. The infrastructure is hosted on rzone.de, with modern web technologies including Google Fonts, Font Awesome, and Google reCAPTCHA integrated for enhanced user experience and security. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the use of reCAPTCHA and absence of exposed sensitive data indicate a reasonable security posture. However, the site lacks a public security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, ISTAF INDOOR presents a professional and trustworthy online presence with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and business credibility.

L

Landessportbund Berlin

lsb-berlin.net

44

Landessportbund Berlin is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in Berlin. The website serves as a comprehensive portal offering information on funding, training, programs, and child protection initiatives, targeting sports clubs, athletes, and the general public interested in sports. The organization holds a strong market position as a key regional sports umbrella body with extensive partnerships and community engagement. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and Font Awesome, hosted by Claranet. It incorporates accessibility tools such as eyeAble and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, well-structured, and performs moderately well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. While some security headers are not explicitly visible in the provided content, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published vulnerability disclosure or incident response contacts suggests areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, presenting minimal risk. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and trust.

L

Landessportbund Berlin e.V.

familiensportfest-berlin.de

42

The website familiensportfest-berlin.de represents the Landessportbund Berlin e.V., promoting the Familiensportfest Berlin, a family-oriented sports festival held across various districts in Berlin. The event aims to engage families and local communities in diverse sports activities, fostering health, inclusion, and community spirit. The organization holds a strong regional presence with partnerships across Berlin's sports federations and clubs. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and Font Awesome, integrating accessibility tools and Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS and some privacy measures, though explicit security headers and policies are absent. Contact information is comprehensive, supporting business credibility. Overall, the site is professional, accessible, and trustworthy, serving its community-focused mission effectively.

Sportbunt.de is a professionally maintained non-profit website operated by Landessportbund Berlin e.V., focused on promoting integration through sports activities in Berlin, especially targeting refugees and local sports clubs. The site offers information on sports programs, training, events, and community engagement. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates mapping and analytics services, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are not publicly visible. Overall, the website is trustworthy, compliant with GDPR, and serves its community-oriented mission effectively.

L

Landessportbund Berlin

berlin-hat-talent.de

44

Berlin hat Talent is a well-established non-profit initiative supported by the Landessportbund Berlin and the Berlin Senate Department for Education, Youth and Science. The initiative focuses on promoting sports and physical activity among children in Berlin through programs such as Bewegungsfördergruppen and Talentiaden. The website reflects a professional and consistent brand presence with strong government and sports federation partnerships. Technically, the site is built on WordPress with a modern plugin ecosystem, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and a cookie consent mechanism, which are areas for improvement. Overall, the site is trustworthy, safe, and serves its target audience effectively.

S

Sportstiftung Berlin

sportstiftung-berlin.org

55

Sportstiftung Berlin is a well-established non-profit foundation focused on promoting youth sports and supporting athletes in their career and vocational development post-sports. The organization operates primarily within Berlin, Germany, and has been active since 2005. Their website provides clear information about their mission, donation options, and contact details, reflecting a transparent and community-oriented approach. Technically, the site is built on the cm4all CMS platform, hosted likely via Strato, and uses older JavaScript libraries which may pose security risks. The site is mobile-optimized and includes basic accessibility features. Security posture is moderate with cookie consent implemented and no visible sensitive data exposure, but lacks modern security headers and DNSSEC. Privacy compliance is good with a dedicated privacy policy and cookie consent mechanism. Overall, the website is professional and trustworthy but would benefit from technical and security updates.

S

Sportjugend Berlin

sportjugend-berlin.de

46

Sportjugend Berlin is a well-established youth sports organization affiliated with the Landessportbund Berlin, focusing on youth social work, educational programs, youth travel, volunteer services, and youth engagement within Berlin. The organization targets youth, sports clubs, volunteers, educators, and families, providing a broad range of community and sports-related services. The website reflects a professional and consistent brand image, with clear contact information and a strong social media presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap 5 and Font Awesome 6. It is hosted on Microsoft Online infrastructure and incorporates accessibility tools such as eyeAble, demonstrating a commitment to inclusive design. The site performs moderately well with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and disables cookies in Matomo analytics to enhance privacy. However, it lacks some security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professional, and serves its community effectively. Strategic improvements in security policies and privacy consent mechanisms would further strengthen its posture.

The Bildungsportal des Hamburger Sportbundes is a specialized educational platform focused on providing sports-related training and seminars primarily for the Hamburg region. It serves as a centralized portal for various sports federations and organizations to offer their educational programs, targeting volunteers, professionals, and sports enthusiasts. The platform is positioned as a trusted non-profit educational resource with a clear focus on accessibility and user-friendly navigation. Technically, the website employs standard modern web technologies including Bootstrap and jQuery, with a responsive design and good accessibility features. Hosting is provided by Host Europe Group, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious elements were detected. Overall, the site demonstrates a solid balance of content quality, technical implementation, and privacy compliance, making it a reliable resource for its target audience.

S

Sächsischer Tennis Verband e.V.

stv-tennis.de

40

The Sächsischer Tennis Verband e.V. website serves as the official online presence of the largest tennis association in the new federal states of Germany. It primarily targets players, trainers, referees, and teams involved in tennis competitions across various age groups and leagues. The site provides news, event calendars, and organizational information, supporting the association's mission to coordinate tennis activities regionally. Technically, the site is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, calendar management, and newsletter capabilities. The infrastructure is hosted on servers associated with kasserver.com, and the site employs HTTPS with Google reCAPTCHA to secure forms. Security posture is solid but could be improved by adding explicit security headers and publishing formal security policies. Privacy compliance is well addressed through the Complianz GDPR plugin and cookie consent mechanisms. Overall, the website is professional, accessible, and trustworthy, with no signs of malicious or adult content.

T

Tennisverband Rheinland-Pfalz e. V.

rlp-tennis.de

57

The Tennisverband Rheinland-Pfalz e. V. operates as a regional tennis association in Germany, providing comprehensive tennis-related news, event management, training, and support services to clubs and players in Rheinland-Pfalz. The website serves as an information hub for tennis enthusiasts, clubs, and officials, reflecting a well-established organization with a strong regional presence and a history dating back to 1948. The association is positioned among the top ten tennis federations in Germany, emphasizing youth development, inclusion, and adult tennis activities. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design, integrating accessibility tools such as eyeAble and analytics via Google Tag Manager. The site demonstrates good mobile optimization, clear navigation, and structured content, supporting a positive user experience. Hosting appears stable with dedicated nameservers, and the site uses HTTPS, although explicit security headers are not detected. From a security perspective, the site shows a moderate security posture with secure login forms and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data aligns well with the organization's identity, showing consistent registration details and no privacy protection, indicating transparency and legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, privacy compliance, and published security policies would enhance its security posture and regulatory adherence.

Hamburger Tennis-Verband e.V. is a regional non-profit sports association dedicated to promoting tennis activities in Hamburg, Germany. The website serves as an information hub for players, clubs, trainers, and tennis enthusiasts, offering event calendars, tournament details, training programs, youth development initiatives, and inclusion projects. The association maintains partnerships with recognized tennis organizations and sponsors, reinforcing its position as a key regional tennis authority. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap 3.3.5, Owl Carousel, and jQuery.mmenu for responsive and interactive UI elements. Google Tag Manager and Google Analytics are used for visitor tracking and analytics. The site is mobile-optimized with a clear navigation structure, though it lacks a known CMS and some modern security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security policies or incident response contacts are published, and security headers like CSP or HSTS are not detected. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, aligning with the organization's transparency. Overall, the website is professional, trustworthy, and well-suited for its audience, with room for improvement in security best practices and formal policy disclosures.

C

CUPRA

cupraofficial.de

62

CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The site offers comprehensive information on vehicle models, leasing and financing options, electric mobility solutions, and after-sales services. The brand targets automotive consumers in Germany who seek performance-oriented and modern electric vehicles. The website is built on Adobe Experience Manager and integrates modern web technologies, providing a good user experience with multimedia content and clear navigation.

The website moku.de currently serves as a placeholder page indicating that a new homepage is under construction. It lacks any substantive business description, contact information, or user engagement features. The site is hosted on t-online.de name servers and uses basic JavaScript tracking scripts from Xiti Analytics and RefinedAds, but does not implement HTTPS or security headers, which significantly weakens its security posture. There are no privacy or cookie policies, nor any GDPR compliance indicators, which raises concerns about privacy and regulatory adherence. Overall, the site appears to be in an early or dormant state with minimal digital maturity and poor content quality.

M

MUKS Museum Kultur und Spiel Riehen

muks.ch

11

MUKS Museum Kultur und Spiel Riehen is a small cultural museum located in Riehen, Switzerland, focusing on exhibitions and programs related to local culture, history, and play. The website presents a professional and well-structured digital presence, offering detailed information about exhibitions, events, and visitor services. The museum targets a broad audience including families, children, students, and cultural visitors, operating primarily as a non-profit institution. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the domain registration aligns well with the museum's identity, supporting trustworthiness and legitimacy.

K

KOMUNIQUE

komunique.com

10

KOMUNIQUE is a Swiss-based independent web design and development studio led by Philipp Roth, specializing in creating custom websites, web applications, and mobile apps using advanced platforms such as Webflow, Craft CMS, FlutterFlow, and Webstudio. The company serves clients primarily in Switzerland but also internationally, focusing on delivering unique, user-friendly, and SEO-optimized digital solutions. KOMUNIQUE collaborates with partners in design and content to provide comprehensive digital services. Technically, the website leverages modern web technologies, including GSAP for animations, Lenis for smooth scrolling, and integrates marketing and analytics tools like Google Tag Manager and MailerLite. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies. WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection or recent registration. Overall, KOMUNIQUE presents as a professional and credible digital agency with a strong technical foundation and good privacy compliance.

C

Culturescapes

culturescapes.ch

10

Culturescapes is a Swiss-based cultural festival and platform dedicated to international cultural exchange, with a focus on thematic editions such as Sahara 2025 that explore North African culture and its political ties with Switzerland. The website offers a rich array of content including event programs, magazines, books, and archives, targeting cultural enthusiasts, academics, and the general public interested in intercultural dialogue. The business operates primarily as a non-profit cultural organization, leveraging events and publications to engage its audience. Technically, the website employs modern web technologies including Vue.js, ES modules, and Swiper.js for interactive content presentation. It integrates Mailchimp for newsletter subscriptions and maintains a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or vulnerability disclosure policy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security policies, contact transparency, and compliance documentation would enhance its security posture and user trust.

Z

zweihochdrei gmbh

zweihochdrei.ch

9

zweihochdrei gmbh is a small Swiss agency based in Basel that has operated for 17 years, providing agency services to clients. The website announces the cessation of agency activities as of May 31, 2023, and provides contact details for support after closure. The company maintains a professional web presence using WordPress and UIkit, with a consistent brand image and clear contact information. Technically, the site uses common web technologies and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or tracking scripts are present, reducing privacy risks but also limiting user engagement and analytics capabilities. Overall, the website is trustworthy and professional but could improve compliance and security practices.

L

L'Unique Foundation

rockartcollection.com

10

The Rock Art Collection website by L'Unique Foundation presents a niche private collection of celebrity and rock memorabilia art, targeting collectors and enthusiasts. The site supports e-commerce for art sales and promotes charitable activities through the foundation. The business operates primarily in Switzerland and maintains a professional online presence with clear contact details and social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and Google Analytics for tracking. While the site is generally well-structured and mobile-optimized, it lacks some privacy compliance features such as a cookie consent mechanism and explicit security headers. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the site demonstrates a good balance of business credibility and technical implementation but could improve its security posture and privacy compliance.

L

L'Unique Foundation

lunique-foundation.org

51

L'Unique Foundation is a Swiss non-profit organization established in 2018, managing a significant private collection of celebrity and rock art. The foundation channels proceeds from its collection and related activities into humanitarian aid projects in Nepal, focusing on water supply and sanitation for vulnerable communities. The website is professionally designed using WordPress and WooCommerce, integrating modern plugins and multimedia content to engage donors and supporters. The foundation maintains a consistent brand presence and transparent contact information, enhancing trustworthiness. Technically, the site is hosted by Hostpoint AG, uses HTTPS, and implements Google Analytics with an opt-out mechanism, though it lacks DNSSEC and some advanced security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the site demonstrates a solid security posture with room for improvement in vulnerability disclosure and cookie management.

A

Abteilung Kultur, Präsidialdepartement des Kantons Basel-Stadt

museenbasel.ch

61

Museen Basel is a government-affiliated cultural platform representing 37 museums in Basel, Switzerland. It provides comprehensive information about museums, exhibitions, events, and educational contacts, targeting the general public, families, and cultural enthusiasts. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages with German as the primary language. The platform serves as a central hub for cultural engagement in Basel, enhancing the visibility and accessibility of local museums. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates analytics tools like Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. The content is rich and relevant, supporting a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the website's government affiliation, indicating high legitimacy. Overall, Museen Basel presents a trustworthy and professional digital presence for cultural promotion, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

E

Evangelisch-reformierte Kirche des Kantons Basel-Stadt

erk-bs.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Stadt website serves as the official online presence for the regional Protestant church in Basel-Stadt, Switzerland. It provides comprehensive information about church services, events, community programs, and pension fund management. The site targets church members and the local community, offering timely updates and resources in German. The business model is non-profit and community-oriented, focusing on religious and social services within the canton. Technically, the website is built on the kirchenweb.ch CMS platform, utilizing common web technologies such as jQuery and Owl Carousel. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes some security headers, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with domain registration details consistent with the organization's identity.

Z

zur Mägd

zurmaegd.ch

38

Zur Mägd is an Italian restaurant located in Basel, Switzerland, offering authentic Italian cuisine, private events, and banquet services. The business operates under the parent company groupe-Oniro and targets local residents and visitors seeking Italian dining experiences. The website is built on WordPress with modern technologies such as jQuery and integrates Mailchimp for newsletter subscriptions. The site is professionally designed with good mobile optimization and clear navigation, providing comprehensive contact information and booking options. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Privacy policies and terms of service are present and linked to the parent company’s domain, indicating compliance with GDPR. Overall, the website reflects a trustworthy and credible hospitality business with a moderate to good digital maturity level.

L

Le Rhin Bleu

lerhinbleu.ch

10

Le Rhin Bleu is a small hospitality business operating a seasonal restaurant located on the banks of the Rhine in Basel, Switzerland. The restaurant specializes in Mediterranean cuisine and offers additional services such as event hosting and gift voucher sales. The website is professionally designed using WordPress and integrates modern marketing and analytics tools including Google Tag Manager and Mailchimp. The business maintains a clear and consistent brand presence with active social media channels and partner affiliations. Technically, the website is well-implemented with HTTPS and cookie consent mechanisms, though it lacks explicit security and incident response policies. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kunstmuseum Basel

kunstmuseumbasel.ch

61

Kunstmuseum Basel is a prestigious and historic public art museum located in Basel, Switzerland, recognized as the oldest public art collection in the world. The museum offers a rich collection of paintings, sculptures, installations, videos, drawings, and prints spanning seven centuries. It serves a diverse audience including art enthusiasts, families, researchers, and educational groups through exhibitions, workshops, guided tours, and research initiatives. The museum operates as a non-profit cultural institution with a strong market position in the art and cultural sector. Technically, the website employs a modern JavaScript stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Visual Website Optimizer for analytics and marketing purposes. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks a visible cookie consent mechanism and explicit security policies, which are areas for improvement in privacy compliance and security transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The WHOIS data confirms the legitimacy and consistency of the domain registration with the museum's identity. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Kunstmuseum Basel's website is professional, trustworthy, and content-rich, but could enhance privacy compliance by implementing cookie consent and publishing security policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

R

Restaurant Brauerei

brauerei-basel.ch

49

Restaurant Brauerei is a traditional Swiss hospitality business located in Basel, Switzerland, offering restaurant dining, an exclusive enothek wine shop, catering services, and event hosting. The business targets a general audience including locals and visitors seeking traditional and innovative Swiss cuisine, complemented by a curated wine selection. The website reflects a well-established local presence with clear contact information, partner affiliations, and a focus on customer experience. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, supporting good user engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no critical vulnerabilities detected.

R

Rifonsa AG

safran-zunft.ch

50

Safran Zunft is a traditional yet modern restaurant located in the heart of Basel, Switzerland, operated by Rifonsa AG. The business offers a blend of traditional ambiance with innovative cuisine focusing on local and seasonal products. It caters to a diverse clientele including local residents, tourists, and corporate clients, providing services such as restaurant dining, event hosting, catering, and home delivery. The website reflects a well-established hospitality business with multiple certifications and a strong local presence. Technically, the website is built on WordPress using modern tools such as WPBakery Page Builder, Google Tag Manager, and Mailchimp for marketing automation. It employs HTTPS with good SSL configuration and uses lazy loading for images to optimize performance. The site is mobile optimized and SEO friendly with structured data implemented via JSON-LD. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present and there is no visible security policy or vulnerability disclosure page, which could be improved. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to further strengthen security posture.

O

Optimize AG

eventlokale.ch

62

eventlokale.ch is a well-established Swiss event portal operated by Optimize AG, offering a comprehensive marketplace for event locations, service providers, and event-related job listings. The platform targets event planners and individuals in Switzerland, positioning itself as the largest event portal in the country. The website provides rich content including editorial articles, event ideas, and the Swiss Location Award information, enhancing its market presence and user engagement. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with integrations of Google Analytics, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible privacy and cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found, which may impact user trust and compliance. Overall, the site is professional and trustworthy but should address privacy compliance and contact transparency to enhance its security posture and user confidence.

G

Groupe-oniro

groupe-oniro.ch

49

Groupe-oniro is a Swiss hospitality group operating six distinct restaurant venues and catering services primarily located in Basel, Switzerland. Their business model focuses on delivering high-quality culinary experiences across diverse settings, from historic guild halls to modern terraces and Italian cuisine. The company targets a broad audience including locals, tourists, and event organizers, emphasizing authenticity and personal hospitality. Technically, the website is built on WordPress with modern SEO and cookie consent implementations, providing a good user experience with multi-language support and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not published. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the hospitality group.

i-Run is a well-established French e-commerce retailer specializing in sports shoes, apparel, and equipment for running, trail, hiking, and fitness. The website targets French-speaking sports enthusiasts and offers a wide range of products from major brands with fast delivery options. The digital infrastructure incorporates modern web technologies, including JavaScript frameworks, consent management via Didomi, and analytics tools such as Realytics and Ab Tasty, indicating a mature digital presence. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a public security policy and incident response contacts suggests room for improvement in transparency. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy in French. Overall, the website presents a professional, trustworthy, and user-friendly experience with no signs of malicious activity or content blocking.