Security Directory

P

PANTHEON

datalab.bg

56

Datalab.bg is a Bulgarian regional provider of the PANTHEON business information system, offering ERP and business process optimization software solutions. The company targets businesses seeking to improve efficiency and organization through digital transformation. The website demonstrates a mature digital presence with multi-country partner domains, indicating a well-established market position in the Balkan region. Technically, the site is built on WordPress with the Enfold theme, integrating modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Google reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the domain registration data aligns with the business claims, supporting legitimacy. The website is safe, professional, and compliant with privacy regulations.

K

Karlsruher Kind

karlsruher-kind.de

64

Karlsruher Kind is a regional magazine targeting parents and children in the Karlsruhe area, providing editorial content, event calendars, and community engagement features. The website is built on WordPress with a modern plugin ecosystem supporting event management and user interaction. The technical infrastructure includes HTTPS, security headers, and structured data for SEO, reflecting a mature digital presence. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though privacy compliance could be improved by publishing explicit privacy and terms policies. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

C

Circular City – Zirkuläre Stadt e.V.

circular.berlin

57

Circular Berlin is a small non-profit organization dedicated to accelerating Berlin's transition towards a circular city. Their core activities include knowledge building, community development, education, and practical programs focused on the circular economy. The organization positions itself as a key local actor fostering sustainable urban metabolism through research and community engagement. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting circular economy practitioners and the broader community in Berlin. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by plugins such as Yoast SEO and Matomo for analytics. Hosting and domain registration are transparent and consistent with the organization's profile. The site is moderately performant and well-optimized for mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some recommended security headers are missing. The cookie consent mechanism is GDPR compliant, using CookieYes for user consent management. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt file is found. Overall, the website presents a trustworthy and professional digital presence for a non-profit organization. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy, and enhancing incident response readiness to further strengthen security posture and trust.

H

Hausarztzentrum Aubing

haz-aubing.de

53

Hausarztzentrum Aubing is a small local healthcare provider based in Munich, Germany, offering comprehensive general medical and internal medicine services. The website presents a professional image with clear descriptions of services, a team of doctors, and accessible contact information. The business targets families and individuals seeking primary care and preventive health services. Technically, the site is built on WordPress with common plugins and uses HTTPS, ensuring secure communication. However, there is room for improvement in security headers and privacy compliance mechanisms. The presence of third-party scripts for online reception introduces some risk that should be managed carefully. Overall, the site is functional, trustworthy, and serves its intended audience well.

H

HAMAG BICRO

hamagbicro.hr

47

HAMAG BICRO is a Croatian government agency dedicated to supporting small businesses and investments. The agency provides comprehensive assistance to entrepreneurs throughout all stages of business development, from idea research and development to commercialization and market placement. The website reflects a national-level institution with a focus on fostering economic growth and innovation in Croatia. Technically, the website is built on WordPress with SEO optimization plugins, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and presents content in Croatian, targeting local entrepreneurs. Security posture shows room for improvement, with no detected security headers and missing privacy and cookie policies, which are critical for GDPR compliance. Overall, the domain registration and WHOIS data align well with the agency's profile, confirming legitimacy. Strategic recommendations include enhancing security headers, adding privacy and cookie policies with consent mechanisms, and publishing clear contact and incident response information to improve trust and compliance.

S

SAFU

safu.hr

56

SAFU is the Central Agency for Financing and Contracting in Croatia, primarily responsible for managing EU and national funds related to various operational programs and projects. The website reflects its role as a government entity, providing information on funding programs, project implementation, and technical assistance. The site targets government bodies, project beneficiaries, and the general public interested in funding opportunities and project updates. Technically, the website is built on WordPress with Elementor, enhanced by SEO and accessibility plugins, and integrates Google Analytics and Tag Manager for performance and user tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not visible. Overall, the site is professional, well-structured, and trustworthy, with no signs of malicious activity or content safety concerns.

M

Microformats – building blocks for data-rich web pages

microformats.org

43

Microformats.org is a niche community-driven website focused on the promotion and education of microformats, a set of open data formats for marking up structured data on web pages. The site serves web developers and the IndieWeb community by providing specifications, blog posts, and resources related to microformats. It operates on a WordPress CMS hosted by Linode and has been active since 2005, indicating a mature presence in its domain. The content is technical and educational, targeting a specialized audience interested in semantic web technologies. From a technical perspective, the website uses a standard WordPress setup with JavaScript and CSS for frontend functionality. While the site is accessible and functional, it shows signs of moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses Google Analytics for tracking but lacks visible privacy and cookie policies, which may impact compliance with data protection regulations. Security-wise, the site enforces HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. DNSSEC is not enabled for the domain. No contact or incident response information is provided, which limits transparency and readiness for security issues. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the security posture is moderate but could benefit from enhancements. The overall risk assessment suggests the site is legitimate and trustworthy within its niche but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing privacy and cookie policies, and providing clear contact and incident response information.

Klemm Učilište is a Croatian adult education institution specializing in security-related training programs, including courses, seminars, and workshops. The website presents a professional image with clear program offerings and a focus on personal and professional development in the security sector. The business operates primarily in Croatia and targets adults seeking specialized education in protection and security services. Technically, the site is built on WordPress using popular plugins such as LearnPress for LMS functionality and GDPR compliance tools, indicating a moderate level of digital maturity. The site is mobile-optimized and performs moderately well, though some accessibility and SEO improvements are possible. Security posture is adequate with HTTPS enforced and GDPR cookie compliance, but lacks advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. However, the absence of privacy and terms of service pages represents a compliance gap that should be addressed.

Brno na kole is a well-established non-profit organization dedicated to promoting cycling and improving cycling infrastructure in Brno, Czech Republic. The website serves as a hub for cycling maps, news, analyses, and community events, targeting local cyclists and urban mobility advocates. The organization has a clear market position as a local advocacy group with a strong community presence and active social media engagement. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, integrating modern JavaScript libraries such as jQuery and OpenLayers for map functionalities. Hosting is provided by Websupport, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a domain age appropriate for the organization's history. Overall, the website is professional, trustworthy, and content-rich but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

V

V-Press s.r.o.

ivelo.cz

47

iVelo.cz is a Czech media publisher specializing in cycling-related content, including magazines such as Velo, 53 x 11, and Elektrokola. The website serves as a comprehensive portal for cycling enthusiasts, offering news, product reviews, training tips, and an e-commerce platform for subscriptions and cycling products. The company behind the site is V-Press s.r.o., a medium-sized entity based in Beroun, Czech Republic. The site enjoys a strong market position within the Czech cycling community and maintains consistent branding and professional content quality. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities. It leverages modern web technologies including jQuery, Google Tag Manager, and YouTube API integrations. The site is mobile-optimized with good SEO practices and moderate performance. Security is well implemented with HTTPS, multiple security headers, and cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of a public security policy and incident response information suggests room for improvement in transparency and preparedness. The missing WHOIS data for the domain is a notable concern, reducing trust slightly, though the website content and business information appear legitimate. Overall, iVelo.cz presents a professional, secure, and user-friendly platform for cycling enthusiasts in the Czech Republic. Strategic recommendations include publishing a formal security policy, enhancing incident response visibility, and verifying domain registration details to strengthen trust and compliance.

Ö

Österreichischer Golf Verband

golf.at

64

The Österreichischer Golf Verband is the national governing body for golf in Austria, providing membership services, event organization, and golf-related information to players and clubs. The website is professionally designed using the Neos CMS and Flow PHP framework, with modern technologies such as jQuery and Google Tag Manager integrated. The site demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data. Cookie consent is managed via OneTrust, indicating GDPR compliance. Overall, the website is trustworthy and serves its target audience effectively.

R

Rugby Club Vannes

rugbyclubvannes.bzh

45

Rugby Club Vannes operates a professional and well-structured website serving as the primary digital presence for the rugby club. The site provides comprehensive information about the club's teams, news, match schedules, ticketing, and merchandise. The club targets rugby fans and the local community in France, positioning itself as a regional sports entity with a solid online footprint. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. The site employs modern web technologies including jQuery and Font Awesome, and implements cookie consent via tarteaucitron.io, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent present but no clear privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and functional, with room for improvement in privacy and security transparency.

RetroSouls is a small indie game development team specializing in homebrew games for retro gaming platforms such as ZX Spectrum, Sega Mega Drive/Genesis, MSX, NES/Famicom, Commodore 64, and PC. Their website serves as a hub for game announcements, downloads, and press materials, targeting retro gaming enthusiasts. The business model relies on digital distribution through platforms like Steam and itch.io, supplemented by community engagement and donations. Technically, the site is built on WordPress with a basic but functional design, moderate performance, and minimal mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the active website and external platform integrations support its authenticity. Overall, the site is moderately trustworthy but would benefit from improved compliance and security practices.

B

Blossom Themes

blossomthemes.com

74

Blossom Themes is a small technology company specializing in the development and sale of feminine WordPress themes and templates. Founded in 2017, the company targets women, bloggers, and small business owners seeking easy-to-use, aesthetically pleasing website themes without coding. Their market position is niche-focused, offering specialized products in the WordPress theme ecosystem. The website demonstrates a professional design with good content quality and consistent branding, supported by structured data and SEO optimizations.

F

Freiraumfest

freiraumfest.at

56

Freiraumfest is a non-commercial, self-organized cultural festival based in Graz, Austria, focusing on community-driven events and free spaces for cultural, artistic, and political engagement. The festival is scheduled for November 16-23, 2025, and aims to provide a platform for diverse community participation beyond commercial interests. The website is built on WordPress using modern plugins and themes, offering a good user experience with mobile optimization and SEO features. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. No privacy or cookie policies are present, which is a compliance gap. Overall, the site is legitimate and trustworthy for its purpose but could improve in privacy and security transparency.

C

CryptoParty Austria

cryptoparty.at

60

CryptoParty Austria is a community-driven non-profit initiative focused on educating individuals about internet security, privacy, and anonymity through meetups and workshops. The website serves as an information hub for upcoming events primarily in Austrian cities such as Vienna and Graz, and provides resources for learning about encryption and secure communication. The organization leverages open-source technologies and is hosted by the reputable Chaos Computer Club Wien, reinforcing its community and privacy-oriented ethos. Technically, the site uses DokuWiki CMS with PHP and jQuery, offering a functional but basic user experience with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience well but could improve in compliance and security transparency.

openscienceASAP is an educational and community-focused platform dedicated to promoting open science practices. The website provides resources, research, education, and social engagement opportunities for researchers and advocates of open science. The platform operates as a small-scale non-profit or community resource hub with a niche focus on open science within the education sector. Technically, the website is built on WordPress with standard web technologies including PHP and JavaScript, and uses external resources such as Google Fonts and Fontello icons. The hosting and domain registration are stable and consistent with the website's age and purpose. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response details are provided, limiting transparency. Overall, the website is functional but basic in content and technical sophistication.

F

Forum Urbanes Gärtnern

urbanes-gaertnern.at

54

Forum Urbanes Gärtnern operates the Zentralgartenbüro website as a non-profit organization dedicated to promoting urban gardening, community gardens, and educational gardening initiatives in Graz, Austria. The organization provides workshops, consulting, garden construction, and networking opportunities to foster social-ecological transformation through gardening. Their market position is that of a local leader in community gardening support with a clear focus on education and social impact. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to their audience.

C

CyberChimps

cyberchimps.com

78

CyberChimps is a small technology company specializing in the development and distribution of responsive, fast, and customizable WordPress themes. Established in 2010, the company targets WordPress users and developers seeking quality themes with customization capabilities. The website demonstrates a mature digital presence with professional design and good SEO practices, leveraging popular frameworks such as Elementor and Yoast SEO. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The security posture is solid with HTTPS enabled and domain locks in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is lacking, with no visible privacy or cookie policies and no consent mechanisms, which is a notable gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

Nachhaltig in Graz

nachhaltig-in-graz.at

46

Nachhaltig in Graz is a well-established local sustainability information portal based in Graz, Austria, founded in 2017. It provides residents with comprehensive resources on sustainable living, including news, event calendars, guides, and a dedicated mobile app. The website positions itself as a trusted community hub for environmentally conscious individuals, supported by active social media channels and regular content updates. Technically, the site is built on WordPress with a modern plugin ecosystem, including Yoast SEO and event management tools, hosted on a green energy-powered provider. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks some recommended security headers and explicit incident response policies. Privacy compliance is basic, with a GDPR privacy notice but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

C

cba – cultural broadcasting archive

cba.media

57

cba.media is a non-profit cultural broadcasting archive offering a large collection of podcasts, audio, video, images, and documents primarily targeting German-speaking audiences interested in culture, society, and politics. The platform is built on WordPress with a modern theme and provides a professional user experience with good navigation and mobile optimization. The website is secured with HTTPS and includes a comprehensive privacy policy compliant with GDPR. However, it lacks a cookie consent mechanism and visible security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for this type of organization and does not detract from its legitimacy. Overall, cba.media presents a trustworthy and well-maintained digital presence in the cultural media sector.

S

SchloR

schlor.org

42

SchloR is a self-managed non-profit community project based in Vienna-Simmering, Austria, focused on providing solidarity-based housing and creative workspaces. The organization operates under the umbrella of recognized entities such as habiTAT and Mietshäuser-Syndikat, emphasizing collective living and cultural engagement. Their business model includes direct loans from supporters to finance their projects, reflecting a strong community trust and engagement. The website is well-structured, content-rich, and targets local community members interested in alternative housing and cultural activities. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The presence of Google reCAPTCHA on forms enhances security against automated abuse. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved to strengthen the security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, indicating a legitimate and controlled domain. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Privacy compliance is adequate with a privacy policy present, though cookie consent mechanisms are lacking. No incident response or vulnerability disclosure information is found, which could be areas for future enhancement. Overall, SchloR presents a trustworthy, community-oriented project with a solid web presence and moderate technical maturity. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance their security and compliance posture further.

C

CENDIS, s.p.

cendis.cz

62

CENDIS, s.p. is a Czech government-related entity specializing in transportation information systems under the Ministry of Transport of the Czech Republic. The organization provides key ICT solutions and services such as electronic highway vignettes, unified railway tickets, electronic toll supervision, and various training and certification programs. Their target audience includes drivers, transport operators, public transport passengers, and government officials. The website reflects a professional and consistent brand image with a focus on transparency and public service. Technically, the site is built on WordPress using Elementor and Smart Slider 3, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and offers good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. WHOIS data is missing, which reduces domain trustworthiness, but the official nature of the site and linked government registries support legitimacy. Overall, the site is a reliable source of transportation ICT information and services in the Czech Republic.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-kampagne-2019.de

42

The website 'bkk-kampagne-2019.de' represents a health awareness campaign by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on promoting healthy sleep habits. It provides educational content, tips, and resources related to sleep health, targeting the general German-speaking public. The campaign is positioned as a niche, non-profit initiative within the healthcare sector, with a clear and consistent branding approach. The website content is well-structured, professionally designed, and offers multilingual support (German and English). Technically, the site is built on WordPress, leveraging caching and minification plugins to optimize performance. It uses HTTPS with a good SSL configuration, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and security. No forms or data collection mechanisms are visible on the homepage, reducing privacy risks. Contact information is clearly provided, including a verified organizational email and physical address in Berlin. No suspicious or malicious indicators were found, and the domain appears legitimate and appropriate for the campaign's history and purpose.

H

Headspin UI

headspinui.com

61

Headspin UI is a newly launched technology company specializing in a UI framework and wireframe collections tailored for Breakdance users. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins and frameworks such as Easy Digital Downloads and Breakdance builder. The company targets web designers and developers seeking efficient tools to accelerate website creation. Technically, the site is well-implemented with responsive design, accessible color schemes, and fluid typography, though some security headers could be improved. The security posture is solid with HTTPS and domain transfer protections, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong, with clear cookie consent and GDPR-aligned privacy policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy despite the domain's recent creation. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding vulnerability disclosure information to strengthen trust and security maturity.

Auto Sport Klub Hořovice operates as a local motorsport club primarily focused on organizing rally events such as Rallye Hořovice. The website serves as an information hub for participants, media, and fans, providing event schedules, official documents, and partner links. The business is small-sized, rooted in the Czech Republic, and has been established since 2003, as supported by domain registration data. The target audience includes motorsport enthusiasts and regional participants. Technically, the website is built on WordPress with common JavaScript libraries like jQuery and MooTools, offering basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, but lacks advanced security headers and explicit privacy policies. No contact emails or phone numbers are directly provided, which limits direct communication channels. Overall, the website is functional and trustworthy for its niche but could benefit from enhanced privacy and security disclosures.

M

Městské sportovní centrum Hořovice příspěvková organizace města Hořovice

bazenhorovice.cz

43

Bazén Hořovice is a municipal swimming pool and aquapark facility operated by the Městské sportovní centrum Hořovice, a city sports organization in the Czech Republic. The website provides comprehensive information about the indoor swimming pool, summer aquapark, services such as refreshments, gym access, and specialized massages. It targets local residents and visitors seeking recreational aquatic activities. The business operates as a public service entity with a local government affiliation, emphasizing community engagement and leisure services. Technically, the website is built on WordPress CMS, utilizing plugins like Smart Slider 3 and integrating YouTube videos for enhanced user experience. The site is hosted by hosting-profi.cz and demonstrates moderate performance with good mobile optimization. SEO and accessibility are basic but functional. The cookie consent mechanism complies with GDPR requirements, although privacy and terms of service policies are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is a trustworthy, well-maintained municipal service portal with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and improving accessibility features.

A

AF-CIX powered by DE-CIX Management GmbH

af-cix.net

62

AF-CIX is a telecommunications interconnection exchange hub based in Lagos, Nigeria, serving the West African region with strategic connectivity to Europe. Powered by DE-CIX Management GmbH, it offers services such as GlobePEER, Blackholing, and VirtualPNI to network operators and content providers. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and access. Technically, it uses modern frameworks including Neos CMS and PHP Flow, with Google Tag Manager for analytics and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain reduces transparency but the association with DE-CIX supports legitimacy. Overall, the site is trustworthy, business-focused, and compliant with GDPR requirements.

S

SEECIX powered by DE-CIX Management GmbH

seecix.net

65

SEECIX powered by DE-CIX Management GmbH operates a neutral interconnection exchange platform based in Athens, Greece, targeting the South East Europe region and acting as a gateway between Europe, Africa, and Asia. The platform offers a range of interconnection services including peering, cloud connectivity, and security features, integrated with the global DE-CIX ecosystem. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of network operators and cloud service customers. Technically, the site uses modern PHP frameworks and Neos CMS, with Google Tag Manager for analytics, hosted likely at Digital Realty's Athens data center. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and incident response contacts are absent. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional presentation and association with DE-CIX. Overall, the site is trustworthy but would benefit from improved transparency on domain registration and security policies.

A

AqabaIX powered by DE-CIX Management GmbH

aqabaix.com

66

AqabaIX is a telecommunications interconnection hub located in Aqaba, Jordan, operated under the umbrella of DE-CIX Management GmbH. It provides neutral internet exchange services, enabling network operators and content providers to interconnect efficiently. The website reflects a professional and modern digital presence, leveraging Neos CMS and PHP frameworks, with integrated Google Tag Manager for analytics. Privacy and cookie compliance are well implemented, including a consent mechanism aligned with GDPR requirements. However, the absence of publicly available WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Despite this, the strong association with DE-CIX and the professional quality of the website support the business's credibility. Security posture is solid with HTTPS and cookie consent but could be improved by adding security headers and publishing explicit security policies. Overall, AqabaIX presents as a trustworthy and technically competent entity in the regional telecommunications market.

A

ACIX powered by DE-CIX Management GmbH

acix.net

64

ACIX powered by DE-CIX Management GmbH operates a new internet exchange hub located in Kinshasa, Democratic Republic of Congo, targeting the Central African telecommunications market. The company offers interconnection services such as GlobePEER, Blackholing, and VirtualPNI, positioning itself as a regional hub bridging West and East Africa. The website reflects a professional and consistent brand image aligned with DE-CIX, a recognized global internet exchange operator. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Privacy compliance is well addressed with a comprehensive privacy policy and a cookie consent mechanism supporting GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. Overall, ACIX's website demonstrates a solid digital presence and business positioning in the telecommunications sector but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen trust and compliance.

E

EDUin

eduin.cz

10

EDUin is a Czech non-profit organization dedicated to informing the public about education through news articles, analyses, podcasts, and event listings. The website serves educators, policymakers, media professionals, and the general public interested in education topics. It holds a reputable position in the Czech educational media landscape, offering comprehensive and up-to-date content. Technically, the site is built on WordPress with modern optimizations including WP Rocket and uses Matomo and Google Analytics for tracking, balancing performance and privacy. The security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data and explicit privacy policy pages slightly reduce trust but do not undermine the overall legitimacy. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience.

D

DE-CIX Management GmbH

de-cix.net

75

DE-CIX Management GmbH operates a globally recognized network of neutral Internet Exchanges, providing premium interconnection services across multiple continents including Europe, the Middle East, Africa, Asia, and the Americas. The company targets enterprises, network operators, cloud providers, and ISPs, offering a broad portfolio of services such as peering, private interconnects, cloud connectivity, and infrastructure solutions. DE-CIX holds a leading market position as a large-scale telecommunications provider with a strong brand and extensive international presence. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern JavaScript libraries and Google Tag Manager for analytics and tracking. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, comprehensive security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well implemented with clear privacy and cookie policies, GDPR consent mechanisms, and transparent data collection practices. Business credibility is high, supported by professional content, consistent branding, and trust indicators such as customer logos and social media presence. Overall, DE-CIX presents a trustworthy and professional online presence aligned with its role as a critical telecommunications infrastructure provider. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details to further strengthen trust and compliance.

S

Spotler

spotlerpages.com

11

Spotler is a Netherlands-based marketing cloud software provider founded in 2014, offering data-driven marketing tools designed to help marketers engage audiences and personalize campaigns effectively. The company positions itself as a user-friendly SaaS platform with a strong focus on leveraging data to improve marketing results. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern integrations such as Google Tag Manager, Cookiebot for consent management, and Cloudflare for DNS and CDN services, indicating a robust and scalable infrastructure. Security-wise, the website enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms, although DNSSEC is not enabled and some security headers are not explicitly detected. Overall, the security posture is good with room for improvement in header implementation and vulnerability disclosure. The domain WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s history and no privacy protection, enhancing trust. The website complies well with GDPR, featuring comprehensive privacy and cookie policies with active consent management. No critical security or content safety issues were found, and the site is free from adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen the security posture.

B

BIO-TECH Betriebshygiene GmbH

biotech.at

47

BIO-TECH Betriebshygiene GmbH is a small Austrian company specializing in hygiene services and training primarily targeting industrial and gastronomy businesses as well as private customers. The website presents a professional and consistent brand image with clear navigation and relevant content in German. The business model focuses on providing hygiene solutions and educational offerings, positioning itself as a niche regional service provider. Technically, the website is built on WordPress with common optimization plugins such as Autoptimize and lazy loading for images, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. Privacy compliance is well addressed with a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website is trustworthy and professionally maintained, with no signs of suspicious activity or content blocking.

O

otris software AG

otris.software

62

otris software AG operates a professional customer portal at otris.software, providing access to software product documentation, update information, and product news primarily targeting their German-speaking customer base. The portal is built on a WordPress CMS with modern web technologies including jQuery, Google reCAPTCHA v3 for security, and WPBakery Page Builder for content management. The website demonstrates a good level of digital maturity with secure HTTPS implementation and user authentication mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data, although additional security headers and a formal vulnerability disclosure policy could enhance the security framework. Privacy compliance is generally good with a clear privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a minor compliance gap. Overall, the domain and website present a trustworthy and professional image consistent with a medium-sized technology company in Germany.

B

BerlinerLuft. México S. De R.L. de C.V.

berlinerluft.mx

51

BerlinerLuft. México S. De R.L. de C.V. is a medium-sized manufacturing company specializing in HVAC equipment, components, and duct systems with a global footprint including production plants in Mexico and Brazil. The website presents a professional image with clear business descriptions, product portfolios, and case studies targeting B2B clients in the HVAC and industrial sectors. The digital infrastructure is built on WordPress with modern plugins and technologies, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, though it lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve in compliance and security transparency.

P

Planetary Networks GmbH

planetary-networks.eu

49

Planetary Networks GmbH is a specialized hosting provider based in Berlin, Germany, with over 14 years of experience delivering high-quality hosting, server, and groupware solutions. The company operates its own infrastructure across two Berlin data centers with direct peering at BCIX, emphasizing reliability and customer-centric service. Their offerings include virtual and dedicated servers, web hosting, email groupware based on Zimbra, backup solutions, and consulting services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built on WordPress 6.0.11, utilizing modern plugins such as Slider Revolution and Borlabs Cookie for GDPR-compliant cookie management. The hosting infrastructure is self-managed, indicating a mature technical setup. Performance is moderate with good mobile optimization, though accessibility features could be improved. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS with a good SSL configuration and employs cookie consent mechanisms. However, there is a lack of explicit security headers and no published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Certifications such as ISO 9001:2015 and TÜV attest to quality management and operational standards. Overall, the website and business demonstrate a solid security posture and compliance with GDPR, though improvements in security headers and incident response transparency are recommended. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Planetary Networks GmbH

planetary-networks.de

49

Planetary Networks GmbH is a specialized hosting provider based in Berlin, Germany, with over 14 years of experience. The company operates its own infrastructure across two Berlin data centers and offers a range of services including hosting, virtual and dedicated servers, groupware solutions based on Zimbra, and backup services. Their business model focuses on high-quality, reliable hosting solutions for both private and corporate clients, emphasizing customer trust and service quality. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and Borlabs Cookie for GDPR compliance. The infrastructure is self-hosted, indicating a mature technical setup. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The website is professional, well-branded, and provides clear navigation and content relevant to its audience. No critical vulnerabilities or blocking mechanisms were detected, and the domain WHOIS data aligns well with the company's claims, supporting legitimacy. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.

T

TJ Sokol Nespeky

sokolnespeky.cz

56

TJ Sokol Nespeky operates as a local amateur football club in the Czech Republic, providing community sports engagement through multiple football teams across various age groups. The website serves as a hub for match reports, schedules, league standings, and club news, targeting local players, fans, and community members. The club's market position is that of a small, community-focused sports organization competing in regional leagues. Technically, the website is built on WordPress with the SportsPress Pro plugin, leveraging common web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate local sports club. Overall, the site is functional, informative, and safe for general audiences.

K

Kenda Elektrotechnik

kenda.de

43

Kenda Elektrotechnik is a small, locally focused electrical service provider operating in the Köln-Bonn region of Germany. With approximately 40 years of experience, the company offers a range of services including smart home automation, photovoltaic installations, electric vehicle charging solutions, lighting, and general electrical installations. The website is built on WordPress using the Avada theme and integrates modern technologies such as LayerSlider and Leaflet for maps. The site is well-structured, mobile-optimized, and presents a professional image with partner logos from recognized brands. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website reflects a credible and trustworthy small business with room for improvement in security and privacy transparency.

G

GfA Lüneburg – gkAöR (gemeinsame kommunale Anstalt des öffentlichen Rechts)

gfa-lueneburg.de

53

GfA Lüneburg is a public municipal waste management entity operating in the Landkreis and Hansestadt Lüneburg, Germany. It provides comprehensive waste collection, transport, composting, and problem waste disposal services with a workforce of approximately 220 employees. The organization is positioned as a certified waste management specialist and serves both private and commercial customers. The website reflects a regional public service provider with a clear focus on environmental sustainability and community service. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, including Google reCAPTCHA v3 for form security. The site is mobile optimized and SEO friendly but lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but improvements in security headers and incident response disclosures are advised. Overall, the domain and website content are consistent with a legitimate public entity, though WHOIS data is minimal. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing a vulnerability disclosure policy to improve trust and compliance.

eTwinning România is a national educational project co-funded by the European Commission under the Erasmus+ program. It facilitates inter-school collaborative projects for teachers and students across Europe using the European School Education Platform. The website serves as the official Romanian portal, coordinated by the Agenția Națională pentru Programe Comunitare în Domeniul Educației și Formării Profesionale (ANPCDEFP). It provides resources, news, professional development courses, and contact information for stakeholders. The site is well-branded, consistent, and targets educators and schools in Romania and Europe. Technically, it is built on WordPress with common plugins and integrates Google services such as Maps and Analytics. Hosting is provided by HostX, and the site uses HTTPS with a moderate security posture. However, DNSSEC is not enabled, and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact details are clearly provided, enhancing business credibility.

N

National Shooting Sports Foundation, Inc.

shootingsportsmonth.org

58

The National Shooting Sports Month website serves as a promotional platform for the National Shooting Sports Foundation, Inc., a well-established non-profit organization dedicated to growing participation in shooting sports across the United States. The site effectively targets gun owners, shooting ranges, retailers, manufacturers, and organizations by providing event information, promotional toolkits, and opportunities to get involved. The website's market position is strong within its niche, leveraging official branding and partnerships to maintain credibility and industry leadership. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience with mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are missing and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates high business credibility with clear contact information and trust indicators such as testimonials and social media presence. The WHOIS data is unavailable due to privacy protection or query issues, but the domain age and content consistency support legitimacy. Strategic recommendations include enhancing security headers, expanding incident response information, and improving accessibility features to further strengthen the site's security and compliance stance.

S

Smex Ed

smexed.com

55

Smex Ed is a small digital media company operating a free digital magazine focused on sexual empowerment and education. Founded in 2023, it offers educational content, a podcast, and advertising opportunities targeting a general audience interested in sexual health and empowerment. The website is hosted on WordPress.com and uses modern web technologies including embedded social media and podcast platforms. The business model relies on donations and advertising revenue. The site is professionally designed with good navigation and mobile optimization, though it lacks formal privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved with enhanced security headers and published policies. Overall, the domain registration and hosting are consistent and legitimate for the business type.

W

World Music Festival der Klangfreunde e.V.

worldmusicfestival.de

54

World Music Festival der Klangfreunde e.V. is a small, regionally focused cultural event organizer based in Germany, specializing in hosting an annual world music festival in Loshausen. The website provides comprehensive information about the festival, including event dates, ticket sales, workshops, and community involvement. The organization targets music enthusiasts and cultural participants, leveraging partnerships with ticketing platforms and regional cultural magazines to enhance reach. Technically, the website is built on a modern WordPress infrastructure with popular plugins such as Elementor and caching mechanisms to optimize performance. The site is mobile-optimized and includes accessibility features, structured data for SEO, and GDPR-compliant privacy and cookie policies. Hosting is provided by Goneo, a German hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with clear policies and user consent mechanisms in place. Overall, the website is trustworthy, professionally maintained, and compliant with relevant regulations. It effectively supports the festival's business model and community engagement goals.

E

Elmores

elmores.de

51

Elmores is a small hospitality business operating a beer garden and lounge located at the Siegwasserfall waterfall in Germany. The website highlights their offerings including food, drinks, and hosting various cultural and entertainment events such as concerts, festivals, and flea markets. The business targets local visitors and event attendees, positioning itself as a community-focused venue with a vibrant atmosphere. Technically, the website is built on WordPress using the Enfold theme, hosted likely by 1blu based on nameserver information. The site employs modern web technologies including jQuery and integrates CookieYes for cookie consent management, demonstrating awareness of privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with detailed categories, but lacks advanced security headers and does not provide a security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is good with a clear privacy policy and cookie banner. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of a terms of service page and incident response details are minor gaps. The site is safe for general audiences with no adult content. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility and incident response transparency.

G

GR Holding GmbH

gr-holding.de

61

GR Holding GmbH is a German holding company specializing in healthcare and digital solutions, managing six subsidiaries that provide emergency medical services, personnel management, training, and software development. The company emphasizes a leadership philosophy centered on motivation, culture, and administrative efficiency. Their website reflects a professional and consistent brand image, targeting healthcare professionals and partner organizations primarily in Baden-Württemberg. Technically, the site is built on WordPress with a modern theme and plugins, offering good mobile optimization and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response disclosures. Overall, the website is trustworthy and well-maintained, with clear contact information and subsidiary links.

U

Umlaut Recordings

umlaut.de

40

Umlaut Recordings is a small, niche music label and artist management entity focused on the Didgeridoo player Tom Fronza and associated musicians. The company offers workshops, live performances, studio music production, and music sales through an online shop. The website is professionally designed with clear navigation and good content quality, targeting music enthusiasts and event organizers. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, spam protection, and reCAPTCHA, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy small business in the music sector.

S

Softwareallianz Deutschland

softwareallianz.de

66

Softwareallianz Deutschland is a German-based IT services company specializing in providing IT experts and consulting services to businesses, particularly bridging the gap between IT mid-sized companies and large enterprises. Their website highlights competencies in areas such as Artificial Intelligence, Cybersecurity, Custom Software Development, E-Commerce, Microsoft, and SAP technologies. The company targets businesses seeking timely and specialized IT expertise for large projects. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Matomo Analytics, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and CAPTCHA protections on forms, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy business presence with room for improvement in privacy and security disclosures.