Security Directory

Ü

ÜSTRA

uestra.de

62

ÜSTRA operates as a regional public transportation provider in Hannover, Germany, offering bus and tram services along with timetable and ticketing information. The website is built on TYPO3 CMS and integrates specialized public transport widgets, reflecting a mature digital infrastructure. The site is well-designed, mobile-optimized, and provides a good user experience for its target audience of local commuters and visitors. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

G

GOP Entertainment-Group

variete.de

49

GOP Entertainment-Group operates a network of variety theaters across Germany, offering live shows featuring artists, comedians, and entertainers. The company targets a broad audience including families and general entertainment seekers, positioning itself as a leading player in the German hospitality and live entertainment sector. The website is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel, demonstrating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the site is professional, content-rich, and trustworthy, supporting a large-scale entertainment business.

D

DB SCHENKER

dbschenker.de

67

DB SCHENKER is a global leader in logistics, transport, and supply chain management, offering a broad range of services including digital services, land, air, and sea transport, contract logistics, packaging systems, and customs services. The company recently merged with DSV, enhancing its market position as a worldwide leading logistics provider. The website reflects a mature, enterprise-level business with a strong focus on professional service delivery and sustainability. Technically, the website employs modern JavaScript frameworks and integrates with Adobe Experience Platform and other marketing and analytics tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, though additional headers and a security.txt file could improve security transparency. Overall, the site is well-designed, mobile-optimized, and provides comprehensive business and career information, supporting a high trustworthiness rating.

D

Dextro Energy

dextro-energy.com

47

Dextro Energy is a well-established German company specializing in sports nutrition products, particularly dextrose-based energy supplements for endurance and fitness athletes. The company operates a professional e-commerce platform built on Shopify, offering a range of products alongside content such as a magazine and a sports team sponsorship. Their market position is solid with a history dating back to 2005, targeting primarily German-speaking customers interested in sports and fitness nutrition. The website demonstrates good branding consistency and trust signals including customer ratings and GDPR compliance. Technically, the site leverages modern Shopify infrastructure, integrates multiple marketing and analytics tools, and employs Cloudflare for security and performance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site presents a trustworthy and professional digital presence aligned with its business goals.

The website www.rossmann.de is currently inaccessible beyond a security challenge page that verifies the browser before granting access. Rossmann is a well-known retail company operating primarily in Germany, specializing in consumer goods and drugstore products. The site content is blocked by a Web Application Firewall or similar security mechanism, preventing full content and policy analysis. The technical infrastructure shows use of JavaScript and strict Content-Security-Policy headers, with hosting likely managed via netnames.net nameservers. Security posture is moderate due to the presence of CSP but limited by lack of accessible content and policies. Overall, the site is protected but lacks publicly accessible privacy, cookie, or contact information in the analyzed content.

B

BWT

bwt.com

58

BWT is a large, established European company specializing in water treatment technologies and sustainable water solutions for various sectors including residential, hospitality, industry, pharma, and pools. Their website reflects a mature digital presence with comprehensive content, multimedia integration, and multi-language support. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and performance optimizations like Baqend SpeedKit, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized, but the lack of WHOIS data and direct contact details slightly reduce business credibility scores.

ERDINGER Weissbräu operates a professional website focused on promoting its non-alcoholic beer product line, ERDINGER Alkoholfrei, targeting adults over 16 years old and sports enthusiasts. The site features product showcases, athlete sponsorships, and links to an official fan shop. The technical infrastructure is modern, leveraging Next.js and React frameworks, with embedded multimedia content enhancing user engagement. However, the site lacks explicit privacy and cookie policies, and no contact information or security policies are readily available, which may impact user trust and compliance. Security posture is moderate with no detected blocking or WAF challenges, but missing security headers and incident response contacts are areas for improvement. Overall, the website is professionally designed and consistent with the brand's market position but would benefit from enhanced privacy and security disclosures.

E

enercity AG

enercity.de

71

enercity AG is a large, established German energy provider with a history dating back to 1825. The company offers a broad portfolio of energy-related services including electricity, gas, solar solutions, heating, water supply, telecommunications, and electromobility. It serves a wide audience including private customers, businesses, and municipalities primarily in Germany, with a strong regional focus on Hannover. The website reflects a mature digital presence with modern technologies such as React and Next.js, and implements GDPR-compliant consent management. Multiple industry awards and high customer ratings reinforce its market position and trustworthiness. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, user-friendly, and compliant with privacy regulations, supporting enercity's reputation as a reliable energy partner.

C

Continental AG

continental.de

80

Continental AG is a leading global automotive supplier and tire manufacturer headquartered in Germany. The company focuses on innovation for safe, connected, and sustainable mobility, offering products and solutions primarily for automotive manufacturers and industrial customers. The website reflects a mature digital presence with comprehensive information for investors, job seekers, partners, and customers. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and consent management for GDPR compliance. Security posture is strong with HTTPS enforced and content security policies in place, although additional headers could enhance protection. The absence of public WHOIS data is noted but likely due to privacy protection, not detracting from the site's legitimacy. Overall, Continental AG's website demonstrates professionalism, compliance, and a robust corporate identity.

A

ADAC Niedersachsen/Sachsen-Anhalt e.V.

adac-niedersachsen-sachsen-anhalt.de

48

ADAC Niedersachsen/Sachsen-Anhalt e.V. operates as a regional club focused on mobility, motorsport, tourism, and traffic safety within the German states of Niedersachsen and Sachsen-Anhalt. The organization provides a variety of services including motorsport events, tourism activities, traffic safety programs, and member support. The website reflects a well-established regional presence with consistent branding and a clear target audience of club members and regional residents interested in mobility and motorsport. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as jQuery, Bootstrap, and carousel plugins, offering a good user experience with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's credibility and regional leadership.

The Silvesterlauf Hannover website represents a well-established regional sports event organizer, eichels GmbH, focusing on running and triathlon events in Hannover, Germany. The site provides comprehensive event information, registration options, news updates, and media content, targeting athletes and local community members interested in active year-end celebrations and related sports activities. The business model centers on event management and community engagement with a strong local presence and partnerships with other regional sports events. Technically, the website is built on TYPO3 CMS and leverages common web technologies such as jQuery, Bootstrap, and Font Awesome. It demonstrates good mobile optimization and SEO practices, although performance is moderate. The site uses HTTPS with a solid SSL configuration and employs basic security best practices like email obfuscation and cookie consent mechanisms. However, it lacks advanced security headers and explicit security or incident response policies. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie banner. Contact information is transparent and complete, enhancing business credibility. No suspicious or malicious content was detected, and the site is free from WAF or blocking mechanisms, allowing full content access. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional platform for its target audience.

The website sportscheck.com is a retail and event promotion platform focused on running events, specifically the SportScheck RUN Hannover 2025. It targets a general audience interested in sports and running, offering event participation options and related sports equipment. The site uses modern web technologies including React and various JavaScript tracking libraries, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as missing WHOIS registration data, suggests gaps in compliance and transparency. Security posture appears average with no explicit security headers detected in the provided data, and no evidence of vulnerabilities or exposed sensitive data. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

E

eichels GmbH

triathlon-hannover.de

48

Triathlon Hannover is a regional sports event organizer specializing in triathlon and running events in Hannover, Germany. The company, eichels GmbH, manages multiple annual events including the Hannover Triathlon, Steinhuder Meer Triathlon, and other running competitions, targeting athletes and sports enthusiasts. The website serves as an information hub for participants and spectators, offering event details, registration, results, and media content. The business model revolves around event organization, sponsorships, and participant fees, positioning itself as a well-established regional player with consistent branding and a professional online presence. Technically, the website is built on TYPO3 CMS and employs a range of established front-end libraries such as jQuery, Bootstrap, and Font Awesome. The site demonstrates good mobile optimization and SEO practices, though some libraries are outdated which could pose security risks. Performance is moderate with a clean, navigable structure and clear content presentation. The site uses HTTPS and implements cookie consent mechanisms, reflecting GDPR compliance awareness. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security headers like Content-Security-Policy and HSTS, and uses older JavaScript libraries that may have vulnerabilities. No incident response or security policy pages are found, indicating room for improvement in security maturity. No signs of tracking or analytics services were detected, suggesting minimal user tracking. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include updating libraries, implementing security headers, and publishing security policies to enhance trust and security posture.

E

eichels GmbH

steinhudermeer-triathlon.de

46

The Steinhuder Meer Triathlon website is a professionally managed platform dedicated to organizing and promoting a regional triathlon event in Steinhude, Germany. Operated by eichels GmbH, the site provides comprehensive event information, registration capabilities, results publication, and media galleries targeting athletes and sports enthusiasts. The business operates within the event management sector with a clear focus on triathlon sports, maintaining a strong regional presence and partnerships with relevant sponsors and related events. Technically, the website leverages TYPO3 CMS along with modern frontend libraries such as Bootstrap, jQuery, and Slick Carousel to deliver a responsive and user-friendly experience. The site is well-optimized for mobile devices and includes SEO best practices, although some accessibility features could be enhanced. Hosting details are not explicitly disclosed, but the site uses HTTPS with a strong SSL configuration, ensuring secure data transmission. From a security perspective, the website enforces HTTPS and employs email obfuscation to protect contact information. However, it lacks explicit HTTP security headers and does not provide a public security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the site complies with GDPR requirements, including a cookie consent mechanism and privacy policy. Overall, the website demonstrates a solid security posture and business credibility with clear contact information and legal disclosures. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the site's security and compliance posture.

D

Deutsche Stiftung für Engagement und Ehrenamt

d-s-e-e.de

52

The Deutsche Stiftung für Engagement und Ehrenamt is a German non-profit foundation dedicated to strengthening volunteer engagement through diverse funding, networking, consulting, and educational programs. It holds a significant position in the national landscape of volunteer support, offering digital formats, events, and direct assistance to volunteers and organizations. The website reflects a mature digital infrastructure built on WordPress with modern plugins and SEO tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The domain registration data aligns well with the organization's identity, enhancing trustworthiness. Overall, the site is professional, compliant with GDPR, and serves its target audience effectively.

The Deutsche Stiftung für Engagement und Ehrenamt operates the DSEE Lernportal, a dedicated educational platform aimed at supporting volunteers and engaged individuals in non-profit organizations. The portal offers a variety of learning resources including courses, webinars, and video content focused on topics such as digitalization, financing, member recruitment, and organizational management. The platform is positioned as a trusted resource within the German volunteer sector, providing free access to educational materials and fostering community growth. Technically, the website is built on the Totara LMS platform, which is based on Moodle, utilizing modern JavaScript libraries such as YUI and jQuery, and includes accessibility and mobile optimization features. The infrastructure supports a good user experience with moderate performance and solid SEO practices. The site enforces HTTPS and employs secure session management, though it lacks some advanced security headers and a formal security policy page. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, there is no explicit incident response or vulnerability disclosure information available. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the DSEE Lernportal is a professionally maintained, secure, and privacy-conscious platform serving the non-profit volunteer community in Germany. Strategic improvements in security policy transparency and incident response readiness could further strengthen its security posture and user trust.

Smart LGT GmbH is a German-based company specializing in AI and automation consulting and software development. Founded in 2015, the company offers tailored AI strategy consulting, software development for large language model applications, consulting services, and process automation solutions targeting businesses seeking to innovate with AI technologies. The website is professionally designed using the Hugo static site generator and includes modern iconography and responsive design, indicating a moderate level of digital maturity. Contact information is clearly provided, but no social media presence or interactive forms are present. Security posture is moderate with domain transfer protection enabled but lacks DNSSEC and security headers. Privacy compliance is partially addressed with a privacy policy but no cookie consent mechanism. Overall, the website presents a trustworthy and legitimate business presence with room for improvement in security and privacy practices.

K

Kanzlei Dr. Peter Unmüßig

kanzlei-unmuessig.de

55

Kanzlei Dr. Peter Unmüßig is a small, regionally established German law firm specializing in traffic law, labor law, inheritance law, tenancy law, administrative offenses, insurance law, and civil law. The firm operates from a main office in Gundelfingen with multiple branch offices, and is a member of the Apraxa cooperative network of law firms. The website provides comprehensive legal service information, attorney biographies, and detailed privacy and legal disclaimers, targeting private clients and businesses seeking legal representation. Technically, the website uses legacy jQuery and standard HTML/CSS with moderate performance and basic mobile optimization. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and an outdated jQuery version poses a potential risk. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the site is professional and trustworthy but would benefit from technical and security updates.

F

Funkhaus Freiburg

baden.fm

63

baden.fm is a regional media broadcaster serving Freiburg and the Südbaden region in Germany, offering radio streaming, news, event tips, and ticket sales. The website is professionally designed with consistent branding and targets local residents and listeners. Technically, the site uses a modern tech stack including WordPress CMS, JavaScript libraries such as Swiper.js and Video.js, and analytics tools like Matomo and Google Tag Manager. Security posture is adequate with HTTPS enforced and bot protection via hCaptcha, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business identity.

A

Academy of Sports GmbH

academyofsports.de

54

Academy of Sports GmbH is a reputable German educational institution specializing in flexible, state-certified distance learning programs primarily in fitness, nutrition, coaching, sport management, and e-sports. Established in 2005, it offers over 50 accredited courses targeting professionals and individuals seeking career advancement or personal development in health and sports sectors. The company holds multiple certifications and awards, reinforcing its market position as a trusted provider in the education sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Salesforce integrations, hosted on a reliable infrastructure with domain control by GoDaddy. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports user engagement and navigation. From a security perspective, the site enforces HTTPS, uses security best practices, and avoids exposing sensitive data. However, it lacks explicit security policies and a vulnerability disclosure mechanism, which could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include enhancing security transparency and adding formal incident response documentation to further strengthen trust and resilience.

R

Robinson Club GmbH

robinson.com

63

Robinson Club GmbH operates a hospitality business focused on resort holidays catering to families, couples, and singles. Their offerings include sports, childcare, wellness, and entertainment events, positioning them as a well-established player in the holiday resort market primarily in Germany. The website is built on TYPO3 CMS with modern web technologies including PWA support and uses third-party marketing tools such as Optimizely for optimization and Gigya for user engagement. Social media presence is strong and verified, enhancing brand trust. From a technical perspective, the website demonstrates moderate to good performance with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms, which is a notable gap given GDPR requirements. WHOIS data is missing or unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. However, the website content and official social media links support legitimacy. Overall, the site is professionally designed and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

Kontakt Stiftung is a German non-profit foundation focused on promoting science, research, education, volunteerism, and sports-related community projects. The foundation collaborates with partners such as the Deutscher Schwimm-Verband and trainersuchportal.de to foster social cohesion through sports and education. The website is professionally designed using modern front-end technologies and is mobile-optimized, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. Technically, the site is built with the Hugo static site generator and uses popular libraries like Bootstrap and jQuery, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. Overall, the site is trustworthy, safe, and well-aligned with its non-profit mission.

A

ats Elektronik GmbH

atsonline.de

48

ats Elektronik GmbH is a German technology company specializing in secure communication and safety technology solutions. Their website presents a professional image with detailed service offerings in areas such as 5G, TETRA, MOTOTRBO/DMR radio technology, security systems, system solutions for energy, transport, public safety, and military sectors, as well as research projects and training. The company targets security professionals and enterprises requiring advanced communication and safety solutions. The website is well-structured, multilingual (German and English), and includes comprehensive contact information and policies, reflecting a mature digital presence. Technically, the website uses a proprietary CMS (sethora.de Synapsis CMS), integrates modern JavaScript libraries including jQuery and MediaElement.js, and leverages Google Maps API for location services. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. Security posture is decent with HTTPS enforced and cookie consent implemented. However, no explicit security policy or incident response information is published, and security headers are absent. The WHOIS data shows an anomalous future domain creation date, which is likely an error but reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with minor security and compliance gaps. Strategic improvements in security transparency and WHOIS data accuracy are recommended to enhance credibility and risk posture.

E

Evangelische Hochschule Ludwigsburg

eh-ludwigsburg.de

53

Evangelische Hochschule Ludwigsburg is a state-recognized university of applied sciences affiliated with the Evangelical Church in Württemberg, Germany. The institution offers a broad range of bachelor and master programs primarily in social work, pedagogy, and theology, with a strong emphasis on practical application and international orientation. The website reflects a well-established academic institution with a clear focus on education, research, and community engagement. The target audience includes prospective and current students, academic staff, and partners in social and church-related sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates third-party services like Google Analytics 4 and YouTube for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy and cookie compliance are robust, featuring a detailed cookie consent mechanism and clear privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie management best practices. While explicit security headers like Content-Security-Policy are not visibly declared, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The WHOIS data is minimal but consistent with the domain's educational purpose, and no suspicious patterns were detected. Overall, the website demonstrates a mature digital presence with high content quality, good technical implementation, and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and trust.

Wasserverbandstag e.V. is a well-established German non-profit association focused on water management and operational planning through its member associations primarily in Bremen, Niedersachsen, and Sachsen-Anhalt. The website serves as an information hub offering services, publications, and event information to its members and stakeholders. The organization has a strong regional presence with a history spanning over 75 years, reflecting stability and trust within its sector. Technically, the website is built on TYPO3 CMS, leveraging common web technologies such as jQuery and Bootstrap, providing a responsive and user-friendly experience. Security measures include RSA encryption for login forms, but the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the site is professional, trustworthy, and serves its target audience effectively.

L

Landessportbund Nordrhein-Westfalen e. V.

vibss.de

30

The website www.vibss.de serves as an information and advisory portal for sports clubs primarily in the German state of Nordrhein-Westfalen. Operated by the Landessportbund Nordrhein-Westfalen e. V., a non-profit organization, it offers comprehensive resources on club management, sports practice, legal matters, and digital transformation including AI assistance. The site is well-positioned as a regional leader in supporting sports associations with a clear focus on practical and legal guidance. Technically, the site is built on the TYPO3 CMS platform, integrates Google Analytics and Tag Manager for tracking and search functionalities, and is hosted likely via Deutsche Telekom infrastructure. The website demonstrates good mobile optimization, structured navigation, and professional branding consistency. Security-wise, the site enforces HTTPS, implements GDPR-compliant cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant, and serves its target audience effectively.

Vereinshelden is a well-established non-profit organization focused on supporting volunteer engagement in sports within Niedersachsen, Germany. The website serves as a comprehensive platform offering funding, consulting, training, and recognition services to sports clubs and volunteers. It holds a strong regional market position supported by partnerships with key sports organizations and government entities. The digital infrastructure is based on WordPress with modern plugins and themes, ensuring good SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response policies are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Stiftung Nationale Anti Doping Agentur Deutschland

gemeinsam-gegen-doping.de

39

GEMEINSAM GEGEN DOPING is a German government-supported non-profit network focused on anti-doping education and prevention in sports. It operates under the Stiftung Nationale Anti Doping Agentur Deutschland and collaborates with national and international partners such as NADA, WADA, and the German Olympic Sports Confederation. The website serves as an information hub offering workshops, e-learning, quizzes, and community engagement to promote clean sports. Technically, the site is built on TYPO3 CMS with modern JavaScript integrations, uses hCaptcha for form security, and employs Matomo for analytics with a strong emphasis on privacy compliance via Cookiebot. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO.

The Niedersächsisches Institut für Sportgeschichte e.V. (NISH) is a specialized non-profit institute dedicated to documenting and researching the sports history of Lower Saxony and surrounding regions. Founded in 1981 and supported by the LandesSportBund Niedersachsen, it offers extensive archival resources, a specialized library, and collections related to various sports disciplines. The website serves as an information hub for sports clubs, educational institutions, researchers, and enthusiasts. Technically, the site is built on WordPress with standard plugins for contact forms, newsletters, and cookie management, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact details and transparent policies.

Freiwilligendienste im Sport is a non-profit organization based in Germany focused on promoting voluntary social engagement in sports, primarily targeting young people. The organization facilitates various volunteer service formats, including domestic and international projects, providing educational and orientation opportunities in the sports sector. Their website is professionally designed, accessible, and provides clear information and contact details, supporting their mission effectively. Technically, the site uses ProcessWire CMS with modern frontend libraries and includes accessibility features and cookie consent mechanisms, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and documented policies. Overall, the site is trustworthy and well-positioned within its niche, though improvements in security documentation and terms of service could enhance compliance and user trust.

The Meldestelle Sportmanipulation website serves as an official German government-related platform dedicated to combating manipulation in sports competitions and betting fraud. It provides a secure and anonymous whistleblower system, supported by a reputable law firm, to encourage fair play and integrity in sports. The site targets sports enthusiasts, athletes, and the general public interested in maintaining fairness in sports. The business model is a state-mandated reporting and advisory service, positioning itself as a trusted authority in the niche of sports integrity. Technically, the website is built using the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and JavaScript, and integrates Matomo for web analytics with a clear cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good digital maturity. Hosting details are not explicit, but HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with opt-out options. However, no explicit security headers were detected in the provided data, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were found. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and incident handling readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and official branding. The WHOIS data is minimal but does not raise significant concerns given the governmental nature of the site. Recommendations include publishing formal security policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security posture and user trust.

TuS Glarum is a local German sports club offering a wide range of sports and fitness activities for all age groups, including gymnastics, ball sports, dance, and rehabilitation programs. The website serves as an information portal for members and the local community, providing schedules, news, and contact details. The club maintains an active presence on social media platforms such as Facebook and Instagram, enhancing community engagement. Technically, the website is built on the Clansphere CMS platform, utilizing standard web technologies including HTML, CSS, and JavaScript. It employs legacy components such as FCKeditor and Ajax scripts. The site is hosted via INWX nameservers, indicating a German hosting provider. Performance and mobile optimization are moderate, with basic accessibility and SEO features implemented. From a security perspective, the website lacks visible security headers and modern security policies. The use of an outdated editor and absence of cookie consent mechanisms highlight areas for improvement. The email address is obfuscated to reduce spam, but no explicit incident response or security policy pages are present. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and trustworthy for its community sports purpose but would benefit from enhanced security measures, privacy compliance improvements, and modernization of technical components to reduce risk and improve user trust.

R

RSG - Rollstuhl-Sportgemeinschaft Hannover '94 e.V.

rsghannover.de

9

RSG - Rollstuhl-Sportgemeinschaft Hannover '94 e.V. is a non-profit sports community organization based in Hannover, Germany, specializing in wheelchair and integrative sports. The website serves as an informational platform targeting local community members interested in inclusive sports activities. The organization has a long-standing presence since 1994, reflecting stability and community engagement. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and standard CSS frameworks. The site is moderately optimized for mobile devices and offers a reasonable user experience, though content depth and SEO could be improved. Security-wise, the site employs HTTPS with good SSL configuration and standard security headers, but lacks explicit security policies or incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, but the absence of a privacy policy and terms of service pages indicates compliance gaps. Overall, the website is functional and trustworthy for its niche audience but would benefit from enhanced privacy and security transparency.

G

GSV Oldenburg

gsv-ol.de

47

GSV Oldenburg operates as a local community sports organization based in Germany, providing various sports activities, events, and social engagement opportunities. The website serves as an information hub for members and interested parties, featuring event announcements, calendars, and news updates. The organization appears to be a small-sized non-profit entity focused on serving the Oldenburg community. Technically, the website is built on WordPress with a modern plugin ecosystem including Elementor, calendar, and polling tools. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No direct contact emails or phone numbers are visible on the homepage, which could be improved for better user engagement and trust. Overall, the website is professional and trustworthy for its intended audience but could enhance privacy and security features to align with best practices.

S

Sozialverband Deutschland e.V. Landesverband Niedersachsen

sovd-nds.de

53

The Sozialverband Deutschland e.V. Landesverband Niedersachsen is a regional non-profit social association dedicated to providing social law advice, member services, and advocacy in the German state of Niedersachsen. The website serves as an information hub for members and interested parties, offering digital tools, campaigns, and contact options. It holds a solid market position as a regional branch of a national organization, focusing on social welfare, legal advice, and community support. The target audience includes members, social law clients, and the general public interested in social policy. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. It is hosted on generic servers with multiple nameservers, uses HTTPS with good SSL configuration, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for marketing and chatbot scripts, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and security headers, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the organization's mission and member engagement. Strategic recommendations include enhancing security transparency, publishing incident response information, and adding security headers to further strengthen the security posture.

The website 'dafuer-sein-ist-alles.de' serves as an official informational and promotional platform supporting Germany's bid to host the Olympic and Paralympic Games. It is backed by the Deutscher Olympischer Sportbund (DOSB) and the German Federal Ministry of the Interior, reflecting a strong government and sports authority presence. The site provides detailed information about the vision, bid concepts from major German cities and regions, interactive tools like the Olympi-O-Mat, news updates, and multimedia content aimed at engaging the general public and sports enthusiasts. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and integrates third-party services such as ConsentManager for cookie compliance, Matomo for analytics, and Vimeo for video content. The site is well-optimized for mobile devices, demonstrates good SEO practices, and maintains a fast performance profile. Hosting appears reliable with no detected WAF or blocking mechanisms. From a security perspective, the site enforces HTTPS and uses consent management to comply with privacy regulations. While explicit security headers are not detected in the provided data, no vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are comprehensive and GDPR compliant. No direct contact emails or phone numbers are publicly listed, which is typical for campaign sites. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Olympic bid campaign. It scores well across content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable source of information for its target audience.

D

Deutscher Olympischer Sportbund (DOSB)

sterne-des-sports.de

56

The website sterne-des-sports.de represents the official platform for the 'Sterne des Sports' awards, a prestigious German recognition program honoring sports clubs for their social engagement. Operated under the Deutscher Olympischer Sportbund (DOSB) and in partnership with Volksbanken Raiffeisenbanken, the site serves as an information hub for participants, partners, and the public. It offers detailed content about the competition, participation guidelines, news updates, and multimedia resources. The target audience includes sports clubs, banking partners, sports associations, and media professionals. The business model is non-profit, focusing on community engagement and corporate social responsibility within the sports sector.

The Deutscher Behindertensportverband e.V. (DBS) is the largest disabled sports association globally, serving as the National Paralympic Committee for Germany. The website provides comprehensive information about disabled sports, athlete support, events, and educational resources, targeting individuals interested in Paralympic and disabled sports. The organization operates as a non-profit entity with a strong market position in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox, and is hosted by agenturserver. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and implements a cookie consent mechanism with GDPR compliance. However, it lacks explicit security policy pages and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, with active social media engagement and clear branding.

Sportabzeichen-Digital is a German digital platform dedicated to managing and facilitating the German Sports Badge program. It provides users with registration, login, and access to sport badge events and information, targeting sports participants and organizers within Germany. The platform leverages modern web technologies such as Nuxt.js and Vue.js and is hosted on Hetzner infrastructure, ensuring reliable performance and availability. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, including opt-in for analytics via Matomo. Security posture is adequate with HTTPS enforced and anti-bot measures in place, though improvements are recommended in implementing security headers and publishing incident response information. Overall, the website is professional, user-friendly, and trustworthy, serving a niche sports community effectively.

S

STUCO Fullservice GmbH

fullservice-stuco.de

55

STUCO Fullservice GmbH operates as a specialist fullservice provider for promotional products in Germany, offering comprehensive services from product conception to logistics and e-shop solutions. The company targets businesses seeking scalable and sustainable promotional merchandise solutions. The website reflects a professional digital presence with a modern WordPress and Elementor infrastructure, enhanced by SEO plugins and consent management tools. While the technical setup is solid, there is room for improvement in privacy compliance and security best practices. The absence of a published privacy policy and terms of service represents a compliance gap, and security headers are not detected, which could be enhanced to improve security posture. Overall, the site is trustworthy and well-positioned in its niche, with active social media engagement and recognized certifications such as EcoVadis.

D

Deutscher Olympischer Sportbund (DOSB)

bewegungslandkarte.de

53

Bewegungslandkarte.de is a German non-profit sports platform operated by the Deutscher Olympischer Sportbund (DOSB). It provides a searchable directory of sports and movement offers across Germany, targeting both sports enthusiasts and non-profit sports providers. The website is well-branded, consistent, and supported by a broad network of reputable sports organizations and government bodies. Technically, it is built on TYPO3 CMS, hosted by Hetzner, and integrates modern analytics and marketing tools such as Matomo and Adition. The site is mobile-optimized and SEO-friendly, offering a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and cookie consent is implemented with granular controls, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a strong legitimacy and trustworthiness profile with no suspicious content or vulnerabilities detected.

S

Sparkasse

sportabzeichen-wettbewerb.de

57

The Sportabzeichen-Wettbewerb website is a professionally designed platform promoting a national sports competition initiative supported by the Sparkassen-Finanzgruppe in Germany. It focuses on encouraging both athletic achievement and social engagement through the Deutsches Sportabzeichen. The site offers information about participation, prizes, and related projects, targeting athletes, sports clubs, and community organizers. Technically, the site is built on a Laravel-based framework, uses modern web standards including HTTPS, and integrates Google Analytics for visitor tracking. The cookie consent mechanism is robust and GDPR compliant. Security posture is solid with CSRF protections and secure cookie handling, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and serves its non-profit sports promotion mission effectively.

M

maxcluster

maxcluster.net

53

maxcluster is a German technology company specializing in managed hosting services, particularly for e-commerce platforms. Founded in 2009, it has established itself as a medium-sized player in the managed hosting market. The website content provided is a 404 error page, indicating the requested resource is not found, which limits the ability to fully assess the company's online presence. Contact information such as phone number and support email are available in the page's JavaScript variables and footer links, suggesting accessible customer support channels. Technically, the website uses jQuery and Bootstrap frameworks, with Bugsnag integrated for error monitoring configured to avoid IP tracking, reflecting some privacy consideration. However, the absence of DNSSEC, security headers, and privacy or cookie policies indicates gaps in security and compliance maturity. The website lacks structured data and SEO optimization, and the 404 page design and content quality are poor, impacting user experience and trust. From a security perspective, the domain is registered with RegistryGate GmbH since 2009, with no privacy protection, and the registrant information aligns with the website's German origin, supporting legitimacy. The security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy policies. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, the website's current state reflects a functional but minimal online presence with room for improvement in content quality, security best practices, and privacy compliance. Strategic enhancements in these areas would strengthen trust, user experience, and regulatory adherence.

V

Verbund Offener Werkstätten

offene-werkstaetten.org

54

Verbund Offener Werkstätten operates as a non-profit network of open workshops in Germany, providing shared access to craft and digital fabrication resources. The website serves as a community hub offering workshop search, membership information, and educational content. The organization targets individuals interested in maker culture and collaborative craftsmanship. Technically, the website employs modern JavaScript libraries such as Swiper.js and SweetAlert2, with accessibility features via Eye-Able scripts, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.