Security Directory

The website ydea.it is currently a parked domain page primarily advertising the domain for sale. The content is minimal, with no business services or company information presented. The domain was registered in 2012 and is consistent with a long-held domain now offered for resale. Technically, the site uses basic JavaScript and external ad network scripts, hosted via Amazon Cloudfront CDN. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status provided. The site lacks contact information, privacy, cookie, or terms of service policies, indicating low compliance and business credibility. Overall, the site is low trust and low content quality, suitable only for domain investors or buyers.

E

Evangelische Gesamtkirchengemeinde Ulm

ulmer-muenster.de

57

The Evangelische Gesamtkirchengemeinde Ulm operates the Ulmer Münster, serving as a religious and community organization in Ulm, Germany. The website provides comprehensive information about visiting hours, tours, church services, music ensembles, and community activities. It targets local residents, visitors, and church members, positioning itself as a key cultural and religious institution in the region. The business model is non-profit, focusing on community engagement and cultural preservation. Technically, the website is built on the ChurchDesk CMS platform, which is tailored for church organizations. It uses modern web technologies including JavaScript and jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on servers associated with kasserver.com, with good mobile optimization and accessibility features. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies in German, reflecting GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

R

RADIO 7 Hörfunk GmbH & Co. KG

radio7.de

60

RADIO 7 is a regional private radio broadcaster based in Ulm, Germany, offering a variety of services including live radio streaming, podcasts, regional news, entertainment, and event ticketing. The website reflects a strong local media presence with multiple regional studios and a broad content offering targeting general audiences in southern Germany. The business model centers on media broadcasting and advertising, supported by partnerships with ticketing and advertising platforms. The site is professionally designed, mobile-optimized, and provides clear contact channels and social media integration. Technically, the website leverages modern JavaScript frameworks (Nuxt.js/Vue.js), integrates a consent management platform (Usercentrics), and uses Google Analytics and Tag Manager for analytics. Hosting and media assets are served via Amazon AWS infrastructure, ensuring good performance and scalability. The site demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, employs standard security headers, and anonymizes IP addresses in analytics. Consent mechanisms for cookies and privacy are implemented, aligning with GDPR requirements. However, no explicit security policy or incident response information is publicly available, and no vulnerability disclosure policy is found. The WHOIS data is minimal, lacking detailed registrant information, which slightly reduces trust but is not uncommon for media companies using managed DNS services. Overall, RADIO 7's website is a well-maintained, secure, and privacy-conscious platform that effectively serves its regional audience. Strategic improvements could include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

M

Marathon-Photos.com Limited

marathon-photos.com

37

Marathon Photos Live is a globally operating sports photography company specializing in mass participation event photography, with a presence in 70 countries and a large volume of images and athletes served. The company positions itself as a world leader in this niche, offering event photography services and image sales primarily targeting athletes and event organizers. The website is professionally designed using modern web technologies such as Vue.js, with good mobile optimization and SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. However, direct contact information such as emails or phone numbers is not publicly listed, relying on contact forms instead. The WHOIS data is privacy protected, limiting verification of domain age and registrant details, but the website's content and social media presence support its legitimacy. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and accessibility.

anonystats.de is a small-scale, internal-use web analytics service focused on anonymous and GDPR-compliant web logging. The website content is minimal, indicating the service is not publicly marketed but used internally. The technical infrastructure is simple, leveraging Bootstrap for styling and a custom JavaScript analytics script. There is no evidence of complex CMS or third-party analytics services, reflecting a lightweight and privacy-conscious approach. Security posture is moderate; while no security headers or cookie consent mechanisms are detected, the absence of forms and minimal external dependencies reduce attack surface. The WHOIS data shows consistent domain registration and legitimate name servers, supporting the domain's trustworthiness. Overall, the website is safe, with no adult or questionable content, but lacks public business and contact information, limiting external trust signals.

S

SoftTec GmbH

softtec.de

63

SoftTec GmbH operates a professional website offering hotel software and cloud-based hotel management solutions primarily targeting the hospitality sector in Germany. The website is built on WordPress using Elementor and incorporates modern web technologies such as jQuery and WPRocket for performance optimization. The site is accessible without any WAF or security challenges, indicating a stable hosting environment. However, the website lacks explicit privacy and cookie policies, as well as clear contact information for security incidents or data protection officers, which are critical for GDPR compliance and user trust. Security best practices such as security headers are not evident, suggesting room for improvement in the security posture. Overall, the website presents a good business credibility and technical foundation but requires enhancements in privacy compliance and security transparency.

B

Best Western Hotels & Resorts

bestwestern.com

73

Best Western Hotels & Resorts operates a global hospitality business offering hotel accommodations through multiple brands. The website serves as a primary booking platform with enhanced cleaning protocols, flexible rates, and a rewards program. The company targets travelers seeking reliable and affordable lodging options worldwide. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and integrates secure payment processing via Stripe. Bot protection and analytics tools like DataDome and Tealium are employed to ensure security and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

Acconsento.click is a website providing a login portal for a service named Acconsento, likely related to privacy or consent management given the name. The website is relatively new, with domain registration dating back to 2020, and uses modern web technologies including Laravel backend and Vue.js frontend with Element UI components. The site is hosted behind Cloudflare DNS but lacks DNSSEC and visible security headers, indicating room for improvement in security hardening. No public privacy, cookie, or terms of service policies are present on the login page, and no contact or incident response information is provided, which limits user trust and compliance transparency. The content is minimal and focused solely on authentication, with no marketing or descriptive business information available.

M

Ministero delle Infrastrutture e dei Trasporti

ilportaledellautomobilista.it

55

Il portale dell'Automobilista is an official Italian government portal managed by the Ministry of Infrastructure and Transport, providing comprehensive services and information related to driving licenses, vehicle registration, road safety, and transport professionals. It serves a broad audience including drivers, vehicle owners, transport companies, and government agencies. The portal offers key services such as online payments via PagoPA, verification of driving license validity, and access to educational resources on road safety. Technically, the website is built on the Liferay CMS platform, utilizing JavaScript libraries like jQuery and Alloy UI, delivering a moderate performance with basic mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and captcha protections on sensitive forms, though it lacks some security headers and explicit privacy and cookie policies. Contact information is clearly provided, enhancing trust and credibility. Overall, the portal is a trustworthy and professional government resource with room for improvement in privacy compliance and technical security best practices.

S

Ski School Ratschings

skischule-ratschings.com

52

Ski School Ratschings operates as a local ski and snowboard instruction service in the Ratschings region of Italy, targeting both children and adults. The website presents a professional and well-structured digital presence, offering private and group courses to enhance skiing skills. The business is positioned as a specialized service provider within the mountain cableways and winter sports sector, with a focus on customer experience and safety. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is adequate with HTTPS enabled, though explicit security headers could be improved. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional appearance and content quality of the site. Overall, the site is trustworthy, user-friendly, and compliant with privacy standards, serving a niche market effectively.

Q

Quantum Diákszövetkezet

qdiak.hu

68

Quantum Diákszövetkezet is a Hungarian digital student cooperative specializing in providing student job placements with a focus on high hourly wages and immediate job start opportunities. Positioned as the first fully digital student cooperative in Hungary, it targets students seeking flexible work opportunities. The website is built on WordPress with modern SEO and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosures. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

D

Databay AG

seminarcatalog.de

64

Databay AG operates the SeminarCatalog platform, a comprehensive seminar and e-learning management software tailored for educational providers in Germany. The platform integrates booking management, participant administration, CRM and payment interfaces, and offers a professional online shop experience. The company positions itself as a specialized provider in the education sector, focusing on seamless integration with ILIAS LMS and blended learning scenarios. The website is professionally designed, content-rich, and targets educational institutions and training providers seeking unified seminar management solutions. Technically, the site is built on TYPO3 CMS with Bootstrap, delivering a responsive and accessible user experience with moderate performance. Security posture is solid with HTTPS, captcha protection on forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the company identity, indicating legitimacy and trustworthiness.

B

Berliner Philharmoniker

berliner-philharmoniker.de

59

The Berliner Philharmoniker website represents a prestigious cultural institution focused on classical music performances, education, and digital streaming services. The site offers comprehensive information about concerts, ticketing, educational programs, and related media, targeting a broad audience including families, youth, and classical music enthusiasts. The business model centers on live event ticket sales, digital content distribution, and educational outreach, supported by strong partnerships such as Deutsche Bank and dedicated streaming platforms. Technically, the website is built on TYPO3 CMS with modern JavaScript integrations, including Vimeo for video content and Usercentrics for GDPR-compliant consent management. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy, professional, and compliant with privacy regulations, though it lacks explicit privacy and terms of service pages in the analyzed content. Recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security and privacy concerns.

DIE VIELEN is a German non-profit organization dedicated to promoting an open, solidaric, diverse, and democratic society. The website serves as a platform to present their advocacy campaigns, cultural projects, event calendar, and press resources. The organization targets a general audience interested in social justice and anti-right-wing extremism initiatives. The website is built on WordPress with modern frontend technologies such as Vue.js, indicating a moderate level of digital maturity. Hosting is managed via domaincontrol.com name servers, commonly associated with GoDaddy. From a security perspective, the website enforces HTTPS and uses secure form submission endpoints, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, suggesting minimal user tracking. Overall, the security posture is adequate but could be improved with additional headers and compliance documentation. The website content is safe for general audiences with no adult or questionable content detected. Navigation and design quality are good, providing a professional user experience. Contact options are limited to forms without direct email or phone contacts. The WHOIS data is minimal but consistent with a legitimate domain registration. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

G

Genesys

mypurecloud.ie

74

Genesys is a leading enterprise technology company specializing in cloud-based contact center and customer experience solutions. Their flagship product, Genesys Cloud CX, leverages AI-powered orchestration to enhance customer journeys across multiple channels. The company targets large enterprises seeking scalable and innovative customer engagement platforms. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the site employs modern web technologies including Bootstrap 5 and JavaScript frameworks, optimized for performance and mobile responsiveness. The use of Intellimize indicates advanced marketing personalization capabilities. The CMS is WordPress, indicating a flexible content management approach. SEO and accessibility features are well implemented. From a security perspective, the site enforces HTTPS, includes key security headers, and demonstrates compliance with industry standards such as SOC 2, ISO 27001, and HIPAA. Privacy and cookie policies are clearly presented with consent mechanisms, and a vulnerability disclosure program is in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and security posture. The lack of WHOIS data is consistent with privacy protection practices common for enterprise domains. Strategic recommendations include tightening CSP policies and enhancing public security documentation to further build trust.

U

Unoenergy S.p.a.

unoenergy.it

73

Unoenergy S.p.a. is a well-established Italian energy provider with over 20 years of experience, offering electricity, gas, photovoltaic systems, and electric mobility solutions primarily targeting residential customers, condominiums, and businesses in Italy. The company positions itself as a leading private operator in the Italian energy market, emphasizing professionalism, customer proximity, and environmental commitment. The website reflects a mature digital presence with comprehensive product offerings and clear branding. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, and is optimized for mobile and SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response information is noted. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though improvements in transparency and security documentation are recommended.

K

KCWA

kcwa.de

65

KCWA is a small German-based communication agency specializing in marketing and communication services for technical products and brands. The company positions itself as a niche service provider helping technical brands achieve their goals in a connected world. The website is built on WordPress using a commercial Brooklyn theme, indicating a moderate level of digital maturity with a focus on professional presentation and usability. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and Google Fonts, hosted likely via GoDaddy's domain control services. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a compliance risk under GDPR. Overall, the website is professional and safe but would benefit from enhanced security and privacy measures.

I

Ideo Solutions AS

ideosolutions.no

58

Ideo Solutions AS is a Norwegian-based interactive agency and internet software house specializing in responsive websites, e-commerce, mobile applications, e-learning platforms, digital marketing, and IT outsourcing services. With over 10 years of experience in Norway and a large team of experts in Poland, the company positions itself as a reliable technology partner offering flexible collaboration models including team leasing and outsourcing. Their market presence is supported by a professional website, client testimonials, and a portfolio showcasing diverse projects across sectors such as energy and education. Technically, the website employs modern web technologies including Google Tag Manager for analytics and marketing, and likely uses the Edito CMS platform. The site is mobile-optimized, accessible, and SEO-friendly with a comprehensive cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected in the HTML source, and the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and enforces cookie consent with granular controls, but lacks visible security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website demonstrates a good security posture but could improve by implementing security headers and publishing clear security policies. The overall risk assessment suggests a legitimate and professional business with minor gaps in domain registration transparency and security policy disclosures. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing incident response and terms of service documents to strengthen trust and compliance.

I

Ideo Force Sp. z o.o.

ideoforce.pl

60

Ideo Force Sp. z o.o. is a Polish digital marketing and e-commerce agency focused on helping brands succeed online through services such as SEO, content marketing, social media, and analytics. The company targets businesses seeking to enhance their online presence and sales performance. The website demonstrates a professional digital presence with modern marketing tools and a cookie consent mechanism compliant with GDPR requirements. Technically, the site uses Google Tag Manager, Cookiebot, and Google Analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and consent-based tracking, though security headers and explicit security policies are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the website is well-structured, trustworthy, and compliant with privacy norms, though improvements in transparency and security documentation are recommended.

D

Degrowth.info | degrowth.info

degrowth.info

50

Degrowth.info is a niche advocacy and informational platform focused on critiquing global capitalism and promoting social and ecological well-being through the degrowth movement. It serves activists, researchers, and the general public interested in environmental justice and systemic change. The website offers a rich library of articles, blog posts, event information, and community engagement tools. Technically, the site uses modern JavaScript frameworks and Matomo analytics, with good mobile optimization and clear navigation, though some accessibility features could be improved. Security posture is moderate with HTTPS and CSRF protections but lacks visible security headers and published privacy or cookie policies, which impacts compliance. Overall, the site is professional and trustworthy with a moderate risk profile due to limited transparency in WHOIS data and privacy policy absence.

B

Bundesverband Deutscher Finanzberater e.V.

bundesverband-deutscher-finanzberater.de

58

The Bundesverband Deutscher Finanzberater e.V. (BDF) is a professional association representing financial, asset, and investment advisors in Germany. It acts as a political and professional voice for its members, providing certification, rating services, and continuing education. The website serves multiple audiences including financial experts seeking certification, consumers looking for certified advisors, and media professionals. The organization positions itself as a leading association in the German finance advisory sector with a focus on independence and quality standards. Technically, the website is built on the IONOS MyWebsite platform, using standard JavaScript libraries and CDNs, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

B

BWH Hotels Central Europe GmbH

bestwestern.de

72

Best Western Hotels & Resorts Germany (operated by BWH Hotels Central Europe GmbH) is a large hospitality company offering online booking for over 200 hotels across Germany, Austria, Switzerland, and Luxembourg. The website provides detailed hotel information, booking capabilities, and loyalty program access, targeting travelers in Central Europe. Technically, the site uses a custom CMS with modern JavaScript libraries, Google reCAPTCHA for bot protection, and consent management tools to comply with GDPR. Accessibility is a strong focus, with an extensive accessibility tool integrated. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

S

SoftTec GmbH

hotels-online-buchen.de

62

SoftTec GmbH operates a professional website offering hotel software and cloud hotel program solutions targeted at the hospitality industry in Germany. The website is built on WordPress using Elementor and jQuery, indicating a modern and maintainable technical infrastructure. The site is accessible without any WAF or security challenges, and the content is relevant and professionally presented. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security headers and incident response information are also missing, which could be improved to enhance the security posture. Overall, the website demonstrates a moderate level of digital maturity with room for improvement in privacy and security compliance.

Ulmer Weihnachtscircus is a small regional event organizer specializing in an annual Christmas circus show in Ulm, Germany. The website provides detailed information about the event schedule, ticket sales, and partners, targeting families and local visitors. The business has a solid regional presence with longstanding tradition and partnerships with local media and sponsors. Technically, the website uses outdated technologies such as jQuery 1.2.3 and Flash, lacks HTTPS enforcement, and does not implement modern privacy or security standards. Security posture is weak due to missing HTTPS, lack of security headers, and use of deprecated libraries. Privacy compliance is minimal with no cookie consent or GDPR indicators. Overall, the site is functional but requires modernization and security improvements to meet current standards.

The website kulturnacht-ulm.de serves as the official portal for the Kulturnacht Ulm/Neu-Ulm 2025 cultural event, providing visitors with information about the event's schedule, partners, and participation opportunities. The site targets a broad audience including families and culture enthusiasts in the Ulm and Neu-Ulm region. The business model centers on event organization and cultural promotion, positioning itself as a regional cultural event organizer. Technically, the site uses traditional web technologies including JavaScript and CSS with custom scripts for image galleries and UI elements. The site lacks modern CMS or frameworks and shows basic mobile and accessibility support. Security posture is limited with no detected security headers or cookie consent mechanisms, and no explicit contact or incident response information is available on the main page. The domain's WHOIS data and name servers indicate local institutional hosting, supporting legitimacy. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy compliance measures.

N

next.motion OHG

next-motion.de

63

next.motion OHG is a German-based small IT and digital services company established in 2003, specializing in web development, IT infrastructure, and digital strategy. The company operates as a full-service partner combining a Kreativagentur and IT-Systemhaus, serving primarily small and medium-sized businesses. Their market position is solid with 20 years of experience and a team of about 20 employees. The website reflects a professional and modern digital presence with comprehensive service offerings including TYPO3 CMS, Symfony Framework, cloud hosting, IT support, and security solutions. Technically, the site uses TYPO3 CMS, PHP, JavaScript, and integrates privacy-conscious analytics tools like Matomo alongside Google Analytics and Facebook Pixel, managed via Google Tag Manager. Cookie consent is handled by Cookiebot, ensuring GDPR compliance. Security posture is good with HTTPS enforced and reCAPTCHA on forms, though explicit security headers are not confirmed. No public security policy or incident response contacts are found, which is a potential area for improvement. WHOIS data is limited due to DENIC privacy policies but consistent with the business claims. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, making it a reliable digital front for the company.

Landesmusikrat Brandenburg e.V. is a well-established non-profit umbrella organization representing music associations, institutions, and individuals in Brandenburg, Germany. Founded in 1990, it serves as an advocate and advisor in music policy, organizes events, and offers educational and funding programs. The website reflects a professional and content-rich platform targeting musicians, cultural institutions, and the general public interested in music. Technically, the site uses modern web technologies including a CMS likely Drupal, JavaScript libraries for UI components, and is hosted on rzone.de. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Cit Studio is a small creative media studio based in Italy specializing in cinema and video production services. The website presents a professional and visually appealing interface targeting film and media professionals or clients seeking creative video production. The technical infrastructure is built on WordPress with common web technologies such as Bootstrap and jQuery, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. Overall, the site is legitimate and safe, but enhancing privacy compliance and security best practices would strengthen trust and reduce risk.

D

Deutsches Musikinformationszentrum (miz)

miz.org

70

The Deutsches Musikinformationszentrum (miz) is a well-established non-profit organization serving as the central information hub for music life in Germany. Founded in 1998, it offers comprehensive resources including news, studies, thematic portals, and event calendars targeted at music professionals, institutions, and enthusiasts. The website is professionally designed with excellent content quality and clear navigation, supporting a broad audience interested in the German music scene. Technically, the site is built on Drupal 10, hosted via Cloudpit, and employs modern web technologies including Matomo for analytics and a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with clear cookie policies and user consent management. Contact information is primarily via contact forms and social media channels, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence with a trustworthy reputation in its sector.

D

Deutscher Musikrat gGmbH

popcamp.de

37

PopCamp is a well-established German non-profit artist promotion program operated by Deutscher Musikrat gGmbH. It offers high-level coaching and professional development for emerging musicians, supporting them through workshops, showcases, and project funding. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on artist development. Technically, the site is built on TYPO3 CMS, hosted by Schlundtech, and uses Matomo for analytics, indicating a preference for privacy-conscious tools. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

D

Dein-Job-Magnet

dein-job-magnet.de

52

Dein-Job-Magnet is a German job platform focused on connecting job seekers with employers through online job listings and recruitment marketing services. The website targets primarily the German market and operates as a small-sized business with a niche focus. The platform employs modern web technologies including Vue.js and Leaflet.js for interactive maps, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The technical infrastructure is moderately performant and mobile-optimized, with a custom or unknown CMS backend. Security posture is solid with HTTPS enforced and CSRF protection implemented, though some security headers could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the website presents a professional and trustworthy front for its business operations.

The website scientists4future.org currently presents a security challenge page that blocks direct access to its main content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered with InterNetX GmbH since 2019 and is valid with no privacy protection, suggesting a legitimate registration. However, the website uses outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities and are no longer supported. No privacy, cookie, or terms of service policies are present, and no contact information is available on the accessible page. The site links externally to bitninja.io, indicating use of a security service. Overall, the website's technical infrastructure is outdated, and the content is minimal and inaccessible due to security measures.

I

ITV.SH

itvsh.de

65

ITV.SH is a regional government partner focused on the digital transformation of municipal administrations in Schleswig-Holstein, Germany. The website presents a comprehensive portfolio of digital services including citizen portals, digital archiving, and cloud solutions tailored for public sector needs. The organization positions itself as a key enabler of end-to-end digitalization in local government processes. Technically, the site is built on TYPO3 CMS, leveraging privacy-conscious Matomo analytics with cookies disabled, indicating a mature approach to user privacy. The site is well-structured, mobile-optimized, and uses modern web technologies, although some security best practices such as explicit security headers and cookie consent mechanisms are missing. The WHOIS data aligns with the hosting provider and regional focus, supporting legitimacy. Overall, ITV.SH demonstrates a solid digital presence with room for improvement in security and privacy compliance to enhance trust and regulatory adherence.

D

Deutschland – Land der Ideen

land-der-ideen.de

45

Deutschland – Land der Ideen is a German non-profit initiative focused on promoting innovation and good ideas across the country. The organization supports innovators, educators, and business leaders by organizing competitions, networking events, and conferences to foster a culture of innovation. Their market position is well established as a national platform for innovation promotion with a medium-sized operational scale. Technically, the website uses modern web technologies including JavaScript, CSS, and HTML5, with privacy-respecting Matomo analytics. The site is well optimized for mobile and accessibility, with good SEO practices and a professional design. The platform appears to be custom-built or uses a proprietary CMS. From a security perspective, the site enforces HTTPS and uses secure login forms. While some security headers are not explicitly confirmed, the site follows best practices such as cookie consent and no exposed sensitive data. However, there is no public security policy or incident response contact, and no vulnerability disclosure mechanism is present. Overall, the website is trustworthy, professional, and compliant with GDPR. The lack of detailed WHOIS registrant data slightly reduces domain trust but does not raise significant concerns. Strategic improvements in security transparency and header implementation are recommended to enhance security posture further.

A

Asturias Paraíso Natural Film Commission

filmcommissionasturias.com

60

Asturias Paraíso Natural Film Commission is a regional entity dedicated to facilitating audiovisual production in Asturias, Spain. The website offers comprehensive information on filming locations, permits, professional directories, subsidies, and industry news, targeting audiovisual professionals, property owners, and producers. The site is well-branded and consistent with its official regional government affiliation, although WHOIS data is missing, raising questions about domain registration legitimacy. Technically, the site uses Liferay CMS with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers, but lacks published security policies and incident response contacts. Privacy compliance is good with cookie consent and GDPR-aligned policies. Overall, the site is professional and trustworthy but would benefit from clarifying domain registration and enhancing security transparency.

E

El Tiempo

eltiempo.es

69

El Tiempo is a prominent weather forecasting website primarily serving Spain and international users with detailed meteorological data and forecasts for over 200,000 cities. The site operates on an advertising-supported model, leveraging multiple ad networks and tracking technologies while implementing consent management via the Didomi SDK. The technical infrastructure includes modern JavaScript frameworks, CDN hosting, and integration with analytics and marketing tools, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and publishing explicit privacy and security policies. Overall, the website is professional, trustworthy, and well-positioned in the media sector for weather information.

A

Apple Inc.

icloud-content.com

74

Apple's iCloud developer site provides a comprehensive platform for developers to securely store and sync user data across Apple devices using iCloud and CloudKit technologies. The site offers detailed resources, telemetry, dashboards, and push notification tools, positioning Apple as a market leader in cloud services and developer tools. The technical infrastructure is modern and optimized for performance and accessibility, leveraging Apple's proprietary technologies and fonts. Security posture is strong with HTTPS enforced and privacy-respecting telemetry, though explicit security headers and incident response contacts are not evident on this page. Overall, the site demonstrates high professionalism, trustworthiness, and a mature digital presence.

DPG Media Group operates a privacy consent management page as part of its digital media services, primarily targeting users in Belgium and the Netherlands. The page analyzed is a minimal privacy gate interface designed to handle user consent for privacy compliance, featuring a loading animation and redirect logic. The company is a large media group with a strong market position in the media industry. The website uses Google Tag Manager for analytics and tracking purposes, indicating a moderate level of digital maturity. Technically, the site employs standard JavaScript and Google Tag Manager scripts but lacks visible advanced frameworks or CMS indicators. The page is mobile optimized with responsive background images and basic accessibility features. However, no explicit security headers or SSL configuration details were provided, limiting the security posture assessment. The absence of visible privacy and cookie policies on this page reduces privacy compliance confidence. From a security perspective, the site does not show signs of WAF or blocking mechanisms and appears accessible. The WHOIS query for the subdomain failed, which is expected behavior since WHOIS typically does not provide data for subdomains. The main domain likely holds the registration data. No suspicious or malicious indicators were found in the content or scripts. Overall, the security posture is moderate but could be improved by adding explicit privacy policies, security headers, and contact information. The overall risk is moderate with recommendations to enhance privacy transparency, implement security best practices, and provide clear contact channels for privacy and security inquiries to improve trust and compliance.

P

Petőfi Kulturális Ügynökség Nonprofit Zrt.

petofiugynokseg.hu

44

Petőfi Kulturális Ügynökség Nonprofit Zrt. is a Hungarian non-profit cultural agency founded in 2020, focused on promoting national and local cultural values across various sectors of contemporary Hungarian culture. The organization operates multiple subsidiaries and partners with several cultural institutions, positioning itself as a key player in Hungary's cultural landscape. The website reflects a professional and consistent brand image, targeting cultural stakeholders and the general public interested in cultural events and support programs. Technically, the website employs modern JavaScript libraries, consent management tools, and analytics platforms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration aligns well with the business history, indicating legitimacy and trustworthiness.

The domain agonyshark.com currently serves a 404 Not Found error page with embedded information describing services provided by Admiral, a company specializing in copyright access control and privacy consent management for digital publishers. The site lacks any actual business content, contact information, or interactive features, indicating it is either inactive or used solely as a service endpoint. The technical infrastructure is minimal, hosted on Google Cloud Platform with AWS DNS servers, and uses HTTPS with frequent certificate rotation. Security practices are described as industry standard, with no executable files hosted and continuous scanning in place. However, the absence of DNSSEC and security headers reduces the overall security posture. The domain registration is recent but consistent with a service domain, registered via NameCheap, Inc. Overall, the site is safe but lacks substantive content and business credibility, resulting in a low AI score and limited insights.

M

Minding Creative Minds

mindingcreativeminds.ie

59

Minding Creative Minds is a small non-profit organization founded in 2020, dedicated to providing free 24/7 mental wellbeing support services to individuals in the Irish creative sector. Their offerings include a helpline, counselling, creative arts therapies, specialist trauma support, career services, and legal assistance. The organization targets a broad range of creative professionals including musicians, actors, writers, and arts administrators within Ireland and Irish creatives abroad. The website positions itself as a trusted resource with clear contact information, company registration details, and government cultural support, reinforcing its legitimacy and community focus. Technically, the website is built on WordPress using the Enfold theme, integrating modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA v3 for security and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting details are partially known, with domain registration through Register 365. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be enhanced by enabling DNSSEC and additional security headers. Security-wise, the site shows adherence to best practices with secure forms and anti-bot measures, but lacks explicit security policies or incident response contacts. Privacy compliance is basic but present, with privacy and cookie policies accessible and a consent mechanism implemented. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and well-aligned with its mission. The overall risk is low, with recommendations focusing on improving DNS security, publishing security policies, and enhancing security headers to further strengthen the security posture and trustworthiness of the platform.

F

First Music Contact

firstmusiccontact.com

62

First Music Contact is a small, Ireland-based non-profit organization dedicated to supporting musicians and the independent music sector through various projects, consultancy services, and development programs. The website is professionally designed using the Squarespace platform, featuring clear navigation and a focus on artist support and regional development. Technically, the site uses modern web technologies and is hosted on Squarespace's CDN, providing good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and social media presence suggest a genuine organization. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security practices.

The Irish Recorded Music Association (IRMA) website serves as the official platform for the Irish music industry, providing information on Irish music charts, piracy, copyright, and member services. The site targets music industry professionals, members, and the general public interested in Irish music. It offers key services such as official Irish music charts, piracy information, and member login functionalities. The website positions itself as the authoritative body for the Irish recorded music industry and charts. Technically, the website employs a mix of older and modern JavaScript libraries including jQuery 1.10.2, Prototype.js, and Scriptaculous, alongside Google Analytics, Google Tag Manager, and CookiePro for cookie consent management. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses HTTPS, but no explicit security headers were detected in the provided data. From a security perspective, the site implements cookie consent and denies most tracking by default except security storage. No exposed sensitive data or vulnerabilities were identified in the HTML content. However, the absence of WHOIS data and lack of explicit privacy and security policies reduce the overall trustworthiness. No incident response or vulnerability disclosure information is available. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professionally designed with consistent branding and relevant content for its audience. The main risks relate to incomplete WHOIS data and missing explicit privacy and security documentation. Strategic improvements in security headers, privacy policy publication, and WHOIS transparency would enhance trust and compliance.

M

Meta

oculus.com

62

The website www.meta.com/quest is a part of Meta Platforms, Inc., focusing on their Meta Quest virtual reality products. However, the content is fully gated behind a login wall requiring a Meta account, preventing access to substantive content without authentication. The site uses advanced React-based frameworks and Facebook's internal technologies, indicating a modern technical infrastructure. Security posture and privacy compliance cannot be fully assessed due to lack of accessible content and missing WHOIS data. The domain is legitimate but WHOIS transparency is limited, likely due to corporate privacy policies. Overall, the site is a secure, enterprise-grade platform but inaccessible for public analysis.

M

Meta

metacareers.com

80

Meta Careers website serves as the official career portal for Meta, a leading global technology company focused on AI, metaverse, and innovative hardware and software products. The site highlights various technology and business teams, signature events, and career programs, targeting job seekers and professionals interested in cutting-edge technology roles. The website is hosted on Meta's infrastructure, uses modern web technologies including React and Facebook's internal libraries, and integrates analytics and marketing tools from Facebook and Google. Security posture is strong with HTTPS and security headers implied, though explicit privacy and cookie policies are not detected in the provided content. WHOIS data is unavailable publicly, likely due to privacy or internal management, but the domain and content strongly align with Meta's brand and infrastructure, indicating high legitimacy.

N

Nasze Miasto

naszemiasto.pl

58

Nasze Miasto is a Polish local news media portal providing city news, sports, business, health, and event information. It operates under a large media group, likely Polskapress, supported by extensive advertising and analytics infrastructure. The website is technically mature, employing modern JavaScript libraries, header bidding for ads, and consent management tools to comply with privacy regulations. Security posture is good with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response information are not published. The domain is well aged and registered with a reputable registrar, indicating legitimacy. Privacy compliance is basic, with a consent mechanism but lacking explicit privacy and terms pages. Overall, the site is professional, trustworthy, and safe for general audiences.

V

VRT

vrtmax.be

77

VRT MAX is the official online streaming platform of the Flemish public broadcaster VRT, offering free access to a wide range of TV programs, podcasts, and live radio streams. It serves a broad general audience in Belgium, providing high-quality media content with a strong brand presence and consistent user experience. The platform leverages modern web technologies such as React and optimized media delivery to ensure fast and accessible content consumption across devices. Security posture is solid with HTTPS enforced and a responsible disclosure policy in place, though some security headers could be enhanced. Privacy compliance is robust, with clear policies and consent mechanisms aligned with GDPR requirements. Overall, VRT MAX represents a mature, trustworthy media service with strong business credibility and technical implementation.

M

Mesecentrum Nyitólap - IGYIC

mesecentrum.hu

45

Mesecentrum.hu is a Hungarian media website focused on children's literature, cultural content, and educational media. The site offers book recommendations, literary critiques, interviews, event information, essays, and podcasts, targeting a general audience interested in Hungarian children's culture. The website appears to be a niche media outlet with a small but consistent presence since its domain registration in 2020. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Hotjar for user behavior tracking. The site is mobile-optimized and has a professional design with clear navigation, although accessibility features are basic. Security posture is moderate with HTTPS enforced but lacks important security headers and visible privacy or cookie policies. No direct company contact emails or phone numbers are found, but a contact form is available. Overall, the site is legitimate and stable but could improve privacy compliance and security best practices.

B

Bahia Kiadó

popkulturalis.hu

58

The website popkulturalis.hu serves as the largest Hungarian pop cultural database, providing extensive archival information on performers, bands, films, albums, and other cultural entities. It also highlights the Bahia Kiadó publishing house, a significant player in Hungary's alternative and underground cultural scene since 1991. The platform targets Hungarian pop culture enthusiasts and researchers, offering detailed data and video content. Technically, the site employs modern JavaScript frameworks, tracking tools like Google Tag Manager, Hotjar, and Facebook Pixel, and enforces HTTPS with cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and privacy policies, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate to good technical and security maturity.

I

Initiative Open Source LMS

opensourcelms.de

49

The website opensourcelms.de serves as a German-language advocacy platform promoting free and open-source learning management systems (LMS) for educational institutions. It represents a coalition of major LMS communities including ILIAS, Stud.IP, and Moodle, supported by numerous universities and educational organizations across Germany. The site emphasizes the importance of sustainable funding, policy support, and the preservation of digital sovereignty in education through open-source software. Technically, the site is built with standard web technologies including HTML5, CSS3, and JavaScript with jQuery, and is hosted with DNS services from DomainControl (GoDaddy). The website is well-structured, mobile-optimized, and provides extensive content relevant to its audience. Security-wise, while HTTPS usage is assumed, explicit security headers and incident response policies are not evident, and no forms collect sensitive data except a downloadable PDF form. Contact is primarily via an obfuscated email address. Overall, the site is legitimate, trustworthy, and serves an important role in the German education sector.