Security Directory

Z

Zeren Group Energy BV

zolarisenergy.com

66

Zolaris Energy, operated by Zeren Group Energy BV, is a renewable energy company founded in 2023 and based in Amsterdam, Netherlands. The company focuses on sustainable energy solutions derived from natural sources such as sunlight, wind, and geothermal heat. Their website presents a professional image with clear branding and contact information, targeting businesses and stakeholders interested in clean energy. The company positions itself as an integrated energy provider emphasizing sustainability and environmental benefits. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI and animation effects. It is hosted behind Cloudflare DNS services, ensuring good availability and moderate performance. The site is mobile-optimized with basic accessibility features but lacks advanced SEO and security headers. No CMS or analytics platforms were detected, indicating a lean technical footprint. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers. There are no visible privacy or cookie policies, which represents a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. The absence of tracking scripts suggests minimal user data collection, but also a lack of transparency on data protection practices. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved transparency to strengthen trust and regulatory adherence.

Z

ZEREN Energy

zerenenergy.com

62

ZEREN Energy is a relatively new company founded in 2022, operating in the European energy trading sector with a focus on natural gas. The company offers a range of services including forward contracts, market access and capacity products, financial derivatives, and physical delivery of natural gas across multiple European countries. The website reflects a professional business presence with consistent branding and clear contact information, targeting energy market participants in Western, Central, and Southeastern Europe. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized and performs moderately well, though SEO and accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks important security headers and DNSSEC is not enabled. There are no visible privacy or cookie policies, nor any incident response or vulnerability disclosure information, which indicates gaps in compliance and security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve trust and regulatory adherence.

P

Petroleum Energy

petroleumenergy.co

61

Petroleum Energy is a Turkey-based company specializing in services related to the production, distribution, and refining of petroleum products. The company offers a broad range of services including technical and financial feasibility studies, market and regulatory research aimed at local and foreign entrepreneurs in the energy sector. Their website positions them as a service provider with a focus on supporting energy production and sales businesses. Technically, the website uses a modern tech stack including Bootstrap and jQuery libraries, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Contact information is clearly provided, including phone, email, and physical address, along with active social media profiles. Overall, the website is professional and business-focused but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

MYZ Trading

myztrading.com

63

MYZ Trading is a newly established energy trading company founded in 2024, specializing in the global supply and trading of crude oil, petrochemical products, and investments. The company serves a diverse clientele including national oil companies, multinational corporations, and industrial firms, emphasizing sustainability and responsible business practices. The website reflects a professional and consistent brand image aligned with its parent company, Zeren Group Holding. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information is provided, which may affect user trust and regulatory compliance. Overall, the website is functional, well-designed, and content-rich but requires enhancements in security and privacy transparency to strengthen its digital maturity and trustworthiness.

M

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti.

myzco.com

63

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti. is a diversified Turkish company established in 2014, offering a wide range of services including open-air advertising, media and advertising, IT and software development, automotive and fleet rental, consultancy, logistics, supply, and commodity trading. The company targets business clients seeking comprehensive solutions across these sectors and maintains a moderate market position with a medium-sized enterprise profile. Their website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, with Cloudflare DNS services. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical infrastructure. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. Cookie consent is implemented with an opt-in mechanism, and a privacy policy is present but basic. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business history, supporting legitimacy. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

C

ConFedersicurezza

confedersicurezza.it

49

ConFedersicurezza is an Italian federation coordinating private security associations, serving as a key industry representative and service provider. The website reflects a medium-sized organization with a clear focus on advocacy, publications, events, and member coordination. The technical infrastructure is based on standard web technologies including Bootstrap, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and visible CSRF protections on forms. Overall, the site is professional, GDPR compliant, and trustworthy, with room for security enhancements.

Sogei - Società Generale d'Informatica S.p.A. is a wholly owned IT company of the Italian Ministry of Economy and Finance, specializing in providing digital services and infrastructure to public administration entities. The company plays a strategic role in modernizing and simplifying public services, supporting key government departments and agencies with advanced IT solutions. Their offerings include fiscal information systems, digital platforms, and data center management, positioning them as a critical partner in Italy's digital transformation efforts. Technically, the website demonstrates a mature digital infrastructure using modern frameworks like Bootstrap and Matomo for analytics, with a CMS likely based on Adobe Experience Manager. The site is mobile-optimized, accessible, and well-structured, reflecting a high level of digital maturity. Analytics are implemented with privacy considerations, using anonymized data collection. From a security perspective, the site enforces HTTPS and provides a robust cookie consent mechanism, though it lacks explicit security policy documentation and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns with the organization's identity, reinforcing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital front for a government IT service provider. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

B

Bundeskammer der Ziviltechniker:innen I Arch + Ing

arch-e.eu

46

ARCH-E is a European platform dedicated to promoting architectural design competitions (ADCs) across Europe, focusing on increasing participation especially among small and female-led architectural practices. The platform offers research, practical tools, and advocacy, supported by a consortium reaching over 560,000 architects and co-funded by the European Union. The website provides extensive resources including reports, a network, glossaries, maps, and evaluation tools to support ADCs. Technically, the site uses modern web technologies such as Bootstrap, Masonry.js, and Piwik PRO analytics, with good mobile optimization and a professional design. Security posture is solid with HTTPS and CSRF protections, though some improvements are recommended in cookie consent and security policy disclosures. Overall, the site is trustworthy, well-branded, and serves a specialized professional audience effectively.

B

Bundeskammer der Ziviltechniker:innen I Arch+Ing

bestevergabe.at

50

Beste Vergabe is an official portal operated by the Bundeskammer der Ziviltechniker:innen, serving as a comprehensive resource for public procurement, competitions, awards, and consulting services primarily targeting civil engineers and architects in Austria. The platform offers structured information on procurement procedures, event listings, publications, and advisory services, positioning itself as an authoritative source within the Austrian government and professional sectors. Technically, the website employs modern web technologies including Bootstrap and Piwik PRO analytics, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens, and avoids exposing sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site demonstrates a solid security posture and professional business credibility, with room for improvement in privacy and security transparency.

F

fit4internet

fit4internet.at

10

fit4internet is an Austrian non-profit association dedicated to raising digital competences across Austria. The organization provides a comprehensive digital competence framework (DigComp AT), self-assessment tools, certification and accreditation services, and a course catalog to support lifelong learning in digital skills. The website reflects a professional and consistent brand with a clear focus on education and digital literacy. It targets a broad audience including the general public, education providers, and portal users interested in digital competence development. The business model revolves around standardization, evaluation, and certification of digital skills, positioning fit4internet as a key player in Austria's digital education landscape. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and various UI and analytics libraries such as Matomo and Pinpoll. The site uses a custom CMS and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility compliance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit security policy or incident response information is publicly available. Overall, the website is trustworthy, professionally maintained, and aligned with its educational mission. The WHOIS data confirms legitimacy and consistency with the website's Austrian association identity. There are no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing accessibility standards to improve inclusivity and compliance.

I

Intramovies

intramovies.com

53

Intramovies is an independent film distribution company with a professional online presence showcasing a curated catalogue of feature films, documentaries, classics, and restorations. The company targets film industry professionals and cinephiles, offering distribution and production services. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and includes SEO optimization and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the professional site and social media presence. Overall, the site is functional, secure, and compliant with basic privacy standards.

T

Triumph Italy S.r.l – Società Benefit

icd2025rome.org

10

The website www.icd2025rome.org serves as the official platform for the XIV International Congress of Dermatology 2025, an important global event in the healthcare sector focused on dermatology. It is organized under the auspices of several Italian dermatology societies and hosted by Triumph Italy S.r.l. The site provides comprehensive information about the congress, including scientific sessions, registration, sponsorship, and practical details for attendees. The target audience includes dermatologists, researchers, sponsors, and media professionals. The business model revolves around event organization, sponsorship facilitation, and knowledge dissemination within the dermatology community. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as jQuery, Bootstrap, and Swiper.js for responsive design and user experience. It integrates Iubenda for privacy and cookie compliance, ensuring GDPR adherence. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers could be improved, and the addition of a security.txt file and incident response contact would enhance the security posture. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the ICD 2025 event. The lack of WHOIS data limits domain trust analysis, but the content and compliance measures support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and continuous monitoring of third-party scripts.

P

PIXELIGHT

pixelight.it

11

PIXELIGHT is a specialized creative studio based in Italy, focusing on motion graphics, animation, and digital visual effects for film, television, and web projects. The company has established a strong market presence with a portfolio of notable clients and partners in the media industry. Their website reflects a professional and modern digital presence, leveraging WordPress and popular frontend technologies to deliver a visually appealing and user-friendly experience. The site includes comprehensive privacy and cookie policies managed through Iubenda, indicating a commitment to GDPR compliance and user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in HTTP security headers and incident response documentation. Overall, PIXELIGHT demonstrates a mature digital infrastructure suitable for its business model and industry demands.

I

INDIGO FILM SRL

indigofilm.it

49

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

S

servier.bar - Self Ordering

servier.bar

67

servier.bar is a German-based digital ordering and payment platform tailored for the hospitality industry. The company offers self-ordering, kiosk, and webshop solutions that enable guests to order and pay via smartphones, aiming to reduce staff workload, minimize errors, and increase revenue. The website is professionally designed using WordPress with modern SEO and analytics integrations, targeting hospitality businesses in Germany. The technical infrastructure includes WordPress CMS, WPBakery Page Builder, Usercentrics for cookie consent, and analytics tools such as Matomo and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. Overall, the website is trustworthy and functional but lacks some compliance and security best practices.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

B

Bernd Hummel

eurotour25-28.de

10

EuroTour25–28 is a multi-year endurance and climate awareness project led by Ulm-based extreme athlete Bernd Hummel, aiming to connect key European regions through sporting challenges and sustainability advocacy from 2025 to 2028. The project is positioned as a niche initiative promoting European unity and environmental responsibility, supported by partners such as the Einstein-Marathon and Technische Hochschule Ulm. The website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. However, it lacks critical compliance elements such as privacy and cookie policies, and no direct contact information is provided, which limits user trust and GDPR compliance. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of security headers and incident response details are areas for improvement.

Datasport Germany GmbH operates a professional website focused on sports event timing and registration services, primarily targeting event organizers and participants in Germany. The company offers key services including event timing, registration management, live result publishing, and event organization support. The website is well-branded and consistent with the company's identity, reflecting a medium-sized business with a solid market position in the sports event sector. Technically, the website employs modern frameworks such as Bootstrap and Material Design Bootstrap, uses jQuery for interactivity, and leverages Cloudflare for DNS and CDN services. Analytics are handled via Matomo, indicating a moderate level of user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare services, but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content. The domain registration data aligns with the business identity, supporting legitimacy. Strategic improvements in security policy transparency and privacy consent mechanisms would enhance compliance and trust.

tapCLIQ is a technology company specializing in AI-driven engagement automation and front-office robotic process automation (RPA) solutions primarily targeting eCommerce businesses and enterprises. Their platform offers a suite of customizable bots and RPAs designed to automate sales processes, enhance customer experience, and improve conversion and retention rates. The company positions itself as an enterprise-grade solution provider with a focus on intelligent marketing automation and customer journey orchestration. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Typed.js for dynamic text effects, and integrates multiple analytics and advertising tools such as Google Analytics, Google Tag Manager, and AdRoll. The site is mobile-optimized with good SEO practices and interactive content including video embeds and multiple user engagement forms. From a security perspective, the site enforces HTTPS and uses secure form validation but lacks explicit security headers and does not disclose a formal security policy or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business presentation are professional and consistent. Overall, tapCLIQ presents a mature digital presence with strong business and technical foundations but would benefit from improved transparency in domain registration and enhanced security practices to bolster trust and compliance.

Digitális Erőmű is a Hungarian educational and cultural institution focused on providing digital pedagogical resources and interactive exhibition spaces. It serves teachers, students, and the local community by offering modern educational tools such as the Digipédia system and hosting various exhibitions and events. The website reflects a regional cultural hub with a clear focus on education and community engagement. Technically, the site is built on WordPress and uses common front-end libraries like jQuery and Bootstrap, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Nemzeti Filmtörténeti Élménypark is a Hungarian cultural institution dedicated to preserving and presenting the history of Hungarian film through interactive exhibitions, educational programs, and event services. The website serves as an information portal for visitors, schools, and event organizers, highlighting key attractions and services. It maintains a strong national cultural identity with affiliations to government and cultural bodies. Technically, the site is built on WordPress with common front-end libraries and includes standard tracking tools like Google Analytics and Facebook SDK. The site is mobile-optimized and provides basic accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with clear policies and cookie banners. Overall, the site is professional, trustworthy, and well-suited for its cultural and educational mission.

3dorszagjaro.hu is a Hungarian website dedicated to providing virtual 3D tours of cultural heritage sites across Hungary. The platform showcases 128 digitized locations, enabling users to explore these sites virtually. The business operates in a niche market focused on cultural tourism and digital heritage preservation. The website is built on WordPress and employs common web technologies such as jQuery, Bootstrap, and Google Analytics for tracking visitor interactions. The site is well designed with good navigation and mobile optimization, providing a positive user experience. However, it lacks some privacy compliance features such as a cookie consent mechanism and does not provide direct contact information or detailed security policies. The domain registration is consistent with the business age and content, indicating legitimacy. Overall, the website demonstrates moderate technical maturity and a good content offering but could improve in security and privacy compliance aspects.

E

Elexys srl

elexys.it

61

Elexys srl is an Italian software company specializing in the development, integration, and support of innovative software solutions for small and medium enterprises (SMEs) and professionals. Established in 2009, the company offers a range of business management software including ERP, CRM, and sector-specific solutions for metal trading, waste management, and hardware stores. Their market position is strengthened by partnerships with other software houses and a focus on tailored software solutions. The website reflects a professional and consistent brand image targeting Italian SMEs and larger companies.

F

Forum Hungaricum Non-profit Ltd.

forumhungaricum.hu

50

Forum Hungaricum Non-profit Ltd. operates a Hungarian cultural heritage and public employment information portal, providing news, articles, and access to digital cultural resources. The website serves a general audience interested in Hungarian culture and government-related public employment programs. It holds a trusted position as a cultural aggregator with partnerships including Europeana and Hungarian government ministries. Technically, the site is built on WordPress with modern JavaScript libraries and APIs, including Google Maps and reCAPTCHA, ensuring a functional and responsive user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant, supporting user data protection. Overall, the site is professional, trustworthy, and well-maintained, with moderate tracking via Google Analytics and Tag Manager.

1

1749

1749.hu

45

1749.hu is a Hungarian literary and cultural media platform founded in 2020, offering a variety of content including prose, poetry, essays, interviews, and news. The website targets a general audience interested in literature and culture, positioning itself as a niche content provider with a consistent brand and good content quality. Technically, the site uses modern frontend technologies such as Bootstrap, AOS, and integrates analytics tools like Gemius, Hotjar, and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

P

Petőfi Kulturális Ügynökség Nonprofit Ltd

continentalmagazine.com

68

The Continental Literary Magazine is a small, niche media company focused on publishing quarterly English-language literary content highlighting emerging Central European authors. The website is professionally designed using WordPress and WooCommerce, supporting subscription sales and rich editorial content. The company maintains an active social media presence and provides GDPR-compliant privacy and cookie policies with consent mechanisms. Technically, the site uses modern frameworks like Bootstrap and integrates marketing and analytics tools such as Facebook Pixel and Google Analytics. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. No direct contact emails or phone numbers are published, relying on contact forms instead. Overall, the website is trustworthy, well-maintained, and suitable for its target literary audience.

D

Databay AG

seminarcatalog.de

64

Databay AG operates the SeminarCatalog platform, a comprehensive seminar and e-learning management software tailored for educational providers in Germany. The platform integrates booking management, participant administration, CRM and payment interfaces, and offers a professional online shop experience. The company positions itself as a specialized provider in the education sector, focusing on seamless integration with ILIAS LMS and blended learning scenarios. The website is professionally designed, content-rich, and targets educational institutions and training providers seeking unified seminar management solutions. Technically, the site is built on TYPO3 CMS with Bootstrap, delivering a responsive and accessible user experience with moderate performance. Security posture is solid with HTTPS, captcha protection on forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the company identity, indicating legitimacy and trustworthiness.

D

Deutscher Musikrat gGmbH / Bundesjugendorchester

bjo-alumni.de

54

The Bundesjugendorchester Alumni website serves as a dedicated networking and information platform for former members of the Federal Youth Orchestra in Germany. It provides alumni with tools to connect, access event information, subscribe to newsletters, and purchase merchandise. The platform is supported by the Deutscher Musikrat gGmbH and leverages a specialized CMS by Paulbergman GmbH (Alumnii). The site is well-structured, mobile-optimized, and integrates modern web technologies including Bootstrap, jQuery, and Matomo analytics. Security measures include HTTPS, CAPTCHA protection, and a comprehensive cookie consent mechanism. Privacy policies are detailed and GDPR compliant, with clear data protection officer contact information. However, no explicit terms of service or security policy pages were found.

I

Ibec

ibecacademy.ie

71

Ibec Academy is a professional education provider specializing in accredited and customised training programmes aimed at developing workforce skills in Ireland. The organization partners with Technological University Dublin to offer CPD-certified diplomas and certificates, targeting HR professionals, managers, and business leaders. The website demonstrates a strong market position with a focus on practical and applied learning, supported by client testimonials and ISO 9001:2015 certification. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Hotjar, with a CMS platform identified as Ibcms. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and captcha protections, though additional security headers could enhance defenses. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS data limits domain trust evaluation. Strategic recommendations include improving security headers, verifying WHOIS data, and enhancing accessibility features.

L

Lime Tree Theatre

limetreetheatre.ie

51

Lime Tree Theatre is a cultural venue based in Limerick, Ireland, offering a diverse range of arts programming including theatre, music, dance, and film. It supports local artists through initiatives like Belltable:Connect and engages the community with events and membership programs. The website reflects a well-established cultural institution with strong local partnerships and a clear mission to foster arts and culture in the region. Technically, the site is built on WordPress with modern plugins and integrations, including accessibility tools and multilingual support. Security measures such as HTTPS and hCaptcha are implemented, though there is room for improvement in DNSSEC and security headers. Overall, the site is professional, user-friendly, and trustworthy, with comprehensive contact information and privacy compliance. The domain registration is consistent with the business profile, enhancing legitimacy.

T

Transparency Deutschland

hochschulwatch.de

26

Hochschulwatch is a transparency-focused website operated under the auspices of Transparency Deutschland, a non-profit organization dedicated to exposing and preventing corruption, particularly in the context of German higher education institutions. The site currently serves as an informational resource highlighting the interconnections between business and academia in Germany. The homepage indicates the site is undergoing reconstruction and updates, limiting available content. Contact information is clearly provided, reinforcing organizational legitimacy. Technically, the website employs a simple and common technology stack including Bootstrap, jQuery, and LESS for styling. The site is mobile responsive and moderately performant but lacks advanced technical features such as CMS integration or analytics. No security headers or advanced security configurations are detected, and the site does not currently provide privacy or cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS (assumed from URL scheme though not explicitly confirmed), but lacks security headers and formal policies related to privacy and incident response. No forms or data collection mechanisms are present, reducing immediate risk exposure. The WHOIS data is minimal but consistent with a legitimate small non-profit project. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the site scores moderately on AI evaluation due to limited content and missing compliance documentation. Strategic improvements in privacy policy publication, security header implementation, and enhanced content will improve trust and compliance posture.

L

Lernfabriken ...meutern

lernfabriken-meutern.de

53

Lernfabriken ...meutern is a German non-profit educational alliance focused on addressing systemic issues in education through campaigns, events, and political networking. The website serves as a platform to disseminate information, organize events such as Summer Schools, and engage a broad audience including students, educators, and social workers. Technically, the site is built on WordPress with modern front-end technologies and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks important security headers and visible privacy compliance mechanisms. Contact information is limited to email, with active social media channels enhancing outreach. Overall, the site is legitimate and consistent with its mission but would benefit from improved privacy and security practices.

K

Key-Systems GmbH

key-systems.net

60

Key-Systems GmbH is a German-based company specializing in domain registration and management services. The company operates multiple portals including domaindiscount24 for end customers, CentralNic Reseller for ISPs and domain investors, and BrandShelter for corporate domain management. The website is professionally designed, targeting domain investors, ISPs, and corporate clients, positioning itself as a trusted domain expert in the technology sector. The company maintains a consistent brand presence and offers comprehensive product offerings in the domain services market. Technically, the website runs on WordPress with modern plugins and themes, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and secure form handling, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is addressed with detailed privacy and cookie policies, though no explicit cookie consent mechanism is detected. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, though the website content and branding strongly indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security headers and privacy consent mechanisms.

The website www.schwoermontag.com serves as an informational portal dedicated to the Ulmer Schwörmontag and the associated Schwörwoche events. It provides visitors with event details, historical context, and multimedia content to engage local residents and tourists interested in these cultural festivities. The site monetizes primarily through advertising and affiliate ticket sales, positioning itself as a niche local event information provider. Technically, the site employs a standard web stack including Bootstrap and jQuery, with Google Adsense and other ad networks integrated alongside a consent management platform to ensure GDPR compliance. Security posture is moderate, with HTTPS implied but lacking explicit security headers and documented incident response channels. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content appears legitimate and professional. Overall, the site offers a good user experience with clear navigation and relevant content but would benefit from enhanced security practices and verified domain registration.

N

next.motion OHG

next-motion.de

63

next.motion OHG is a German-based small IT and digital services company established in 2003, specializing in web development, IT infrastructure, and digital strategy. The company operates as a full-service partner combining a Kreativagentur and IT-Systemhaus, serving primarily small and medium-sized businesses. Their market position is solid with 20 years of experience and a team of about 20 employees. The website reflects a professional and modern digital presence with comprehensive service offerings including TYPO3 CMS, Symfony Framework, cloud hosting, IT support, and security solutions. Technically, the site uses TYPO3 CMS, PHP, JavaScript, and integrates privacy-conscious analytics tools like Matomo alongside Google Analytics and Facebook Pixel, managed via Google Tag Manager. Cookie consent is handled by Cookiebot, ensuring GDPR compliance. Security posture is good with HTTPS enforced and reCAPTCHA on forms, though explicit security headers are not confirmed. No public security policy or incident response contacts are found, which is a potential area for improvement. WHOIS data is limited due to DENIC privacy policies but consistent with the business claims. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, making it a reliable digital front for the company.

W

WCD2027 | 26th World Congress of Dermatology

wcd2027guadalajara.org

57

The website www.wcd2027guadalajara.org represents the official online presence for the 26th World Congress of Dermatology scheduled for June 21-26, 2027, in Guadalajara, Mexico. It serves as an information hub for dermatology professionals, researchers, and stakeholders globally, providing event details, registration information, and updates. The site is professionally designed using WordPress CMS with modern front-end technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with integrated cookie consent mechanisms and a comprehensive privacy policy, reflecting adherence to GDPR and related regulations. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit security policies and incident response contacts are not provided. WHOIS data is unavailable or privacy protected, which is typical for event domains, and no suspicious patterns were detected. Overall, the website demonstrates a mature digital infrastructure suitable for an international medical congress, with good trust indicators and compliance practices.

Cit Studio is a small creative media studio based in Italy specializing in cinema and video production services. The website presents a professional and visually appealing interface targeting film and media professionals or clients seeking creative video production. The technical infrastructure is built on WordPress with common web technologies such as Bootstrap and jQuery, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. Overall, the site is legitimate and safe, but enhancing privacy compliance and security best practices would strengthen trust and reduce risk.

D

Deutscher Musikrat gGmbH

deutscher-chorwettbewerb.de

47

The Deutscher Chorwettbewerb website represents a well-established non-profit cultural organization dedicated to organizing national amateur choir competitions in Germany. The site provides comprehensive information about events, workshops, and participation, targeting amateur choirs and music enthusiasts. The organization behind the site is Deutscher Musikrat gGmbH, a recognized entity in the German cultural sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

D

Deutscher Musikrat

bundesjazzorchester.de

47

The Bundesjazzorchester website represents a well-established non-profit cultural institution focused on promoting young jazz musicians in Germany. It is affiliated with the Deutscher Musikrat and serves as a bridge between education and professional jazz careers. The site is built on TYPO3 CMS, professionally designed, and optimized for accessibility and mobile use. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. The domain is legitimate, consistent with the organization's history and hosting provider. Overall, the site is trustworthy, professional, and serves its target audience effectively.

D

Deutscher Musikrat gGmbH

popcamp.de

37

PopCamp is a well-established German non-profit artist promotion program operated by Deutscher Musikrat gGmbH. It offers high-level coaching and professional development for emerging musicians, supporting them through workshops, showcases, and project funding. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on artist development. Technically, the site is built on TYPO3 CMS, hosted by Schlundtech, and uses Matomo for analytics, indicating a preference for privacy-conscious tools. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

F

fixpunkt für digitales GmbH

bundesjugendchor.org

45

The Bundesjugendchor website represents a German youth choir ensemble affiliated with the Deutscher Musikrat, focusing on promoting choral excellence among young singers. The site offers information about the choir, upcoming concerts, media productions, and opportunities to join. The business operates as a non-profit cultural organization with a clear target audience of music enthusiasts and young singers. The website is professionally designed using TYPO3 CMS, with a modern tech stack including Matomo analytics for privacy-conscious tracking. Hosting is provided by a German provider consistent with the organization's location. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, reflecting good privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no incident response or vulnerability disclosure policies are published. No critical vulnerabilities or suspicious content were found. The website is accessible without WAF or security challenges, indicating stable infrastructure. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Privacy compliance is well addressed, and the security posture is adequate but could be enhanced with additional headers and policies. The domain WHOIS data aligns with the website's identity, supporting legitimacy. Strategic recommendations include implementing additional security headers, publishing incident response and terms of service documents, and enhancing accessibility features to improve compliance and user experience.

I

Ibec

ibec.ie

74

Ibec is Ireland’s largest business representative and lobbying organization, providing a broad range of services including government lobbying, professional HR and employment law advice, occupational health and safety consulting, management training, and networking opportunities. The organization targets Irish businesses and employers, positioning itself as a key influencer and support entity in the Irish business ecosystem. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website leverages modern web technologies such as Google Tag Manager, Datadog RUM for real user monitoring, Bootstrap for responsive design, and Vue.js for interactive components. It is hosted on Microsoft Azure and uses Sitecore CMS, indicating a robust and scalable infrastructure. Performance and mobile optimization are excellent, with accessibility and SEO also well addressed. From a security perspective, the site enforces HTTPS and employs privacy consent mechanisms, masking user input in analytics to protect privacy. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present, and no public security or incident response policies are found. The absence of WHOIS data limits domain trust assessment, but the professional nature of the site and clear contact information mitigate concerns. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

A

Asturias Paraíso Natural Film Commission

filmcommissionasturias.com

60

Asturias Paraíso Natural Film Commission is a regional entity dedicated to facilitating audiovisual production in Asturias, Spain. The website offers comprehensive information on filming locations, permits, professional directories, subsidies, and industry news, targeting audiovisual professionals, property owners, and producers. The site is well-branded and consistent with its official regional government affiliation, although WHOIS data is missing, raising questions about domain registration legitimacy. Technically, the site uses Liferay CMS with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers, but lacks published security policies and incident response contacts. Privacy compliance is good with cookie consent and GDPR-aligned policies. Overall, the site is professional and trustworthy but would benefit from clarifying domain registration and enhancing security transparency.

F

Feria Outlet Valladolid

feriaoutletvalladolid.com

58

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

B

BAB APP MARKET GmbH

bab-appmarket.de

48

BAB APP MARKET GmbH operates a specialized B2B e-commerce platform focused on smart home applications, targeting professional customers such as electricians and system integrators. The website offers a curated marketplace for smart home apps integrating with building automation systems, emphasizing business customers with a mandatory trade license for registration. The company positions itself as a niche leader in the German smart home technology sector, providing key services including app sales, SDK access, and integration support. Technically, the website is built on the Magento e-commerce platform with a combination of JavaScript libraries including jQuery, Prototype.js, and Bootstrap. The site is mobile-optimized and employs Google Analytics with IP anonymization for user tracking. While the site uses HTTPS and cookie consent mechanisms, it lacks advanced security headers and explicit security or incident response policies, indicating room for improvement in security maturity. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and cookie consent but does not provide detailed security policies or vulnerability disclosure mechanisms. The use of older JavaScript libraries may pose potential risks if not regularly updated. No WAF or blocking mechanisms are detected, and no suspicious content or vulnerabilities are apparent from the analysis. Overall, the website is professional, trustworthy, and well-targeted to its business audience. However, enhancing security headers, publishing security policies, and improving transparency around incident response would strengthen its security posture and compliance stance.

A

AStA der FH Münster

astafh.de

57

The AStA der FH Münster website serves as the official online presence of the student representation body at FH Münster, Germany. It provides students with information about their interests representation, services such as legal and social counseling, political education, and management of student tickets. The organization is positioned as a key non-profit entity supporting student welfare and participation in university governance. The website is well-structured, content-rich, and targets primarily the student community of FH Münster. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and Font Awesome for iconography. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance maturity.

D

Deutscher Musikrat

forum-dirigieren.de

46

Forum Dirigieren is a well-established non-profit program under the Deutscher Musikrat, dedicated to fostering young orchestral and choral conducting talent in Germany. The website serves as an information hub for their funding programs, competitions, and events, targeting aspiring conductors and music professionals. The organization leverages a professional TYPO3 CMS-based website with clear navigation and comprehensive content, reflecting its long-standing presence and commitment to the music community. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, ensuring a balance between functionality and privacy. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some improvements like explicit security policies and security.txt could enhance trust further. Overall, the domain registration and hosting align well with the organization's profile, supporting the site's legitimacy and credibility.

The IXP Database (IXPDB) is a specialized public platform providing comprehensive and up-to-date data on Internet Exchange Points worldwide. It aggregates data automatically from IXP management systems, offering valuable insights into IXP architecture, membership, hardware, and traffic. The service targets network operators, researchers, and commercial analysts, positioning itself as a key resource within the telecommunications and technology sectors. The website is professionally designed with clear navigation and offers a free API for data access, enhancing its utility and reach. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, and is likely built on the Django framework. The site is mobile-optimized and provides a good user experience, although some accessibility and SEO optimizations could be improved. Security measures include CSRF protection, but the absence of HTTP security headers and cookie consent mechanisms indicates room for enhancement. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site shows a moderate posture with secure form handling but lacks comprehensive security headers and published incident response policies. The WHOIS data for the domain is missing or not publicly available, which reduces trust from a domain registration standpoint. However, the website content and affiliations with Euro-IX and IX-F lend credibility. No signs of malicious or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the IXPDB website is a credible and valuable resource within its niche but would benefit from improved transparency in domain registration, enhanced security headers, and formalized privacy and cookie policies to strengthen trust and compliance.

A

ABL

ablmobility.de

60

ABL Mobility operates a professional website focused on electric vehicle charging solutions, including private wallboxes, commercial charging stations, and public charging infrastructure. The company is positioned as a recognized leader in the eMobility sector in Germany, with an emphasis on quality and innovation as evidenced by the ADAC award mention. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries, responsive design, and cookie consent mechanisms. However, explicit privacy policies and contact information are not clearly presented in the analyzed content, which may impact user trust and compliance perception. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy but could improve transparency and security best practices.

A

Anna Cichosz

annacichosz.pl

58

Anna Cichosz operates a Polish-language fashion e-commerce website specializing in high-quality designer clothing including Haute Couture and Pret a Porter collections. The site targets fashion-conscious consumers in Poland, offering a curated selection of dresses, suits, and accessories. The business appears to be a small-sized, established brand with a domain registered since 2010, indicating a stable market presence. Technically, the website is built on WordPress with WooCommerce, leveraging modern frontend libraries such as Bootstrap and Swiper.js, and SEO optimized with Yoast. The site is mobile-friendly and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and secure e-commerce forms, but lacks advanced security headers and explicit privacy or terms of service documentation, which are compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.