Security Directory

G

Gesellschaft für Pädagogik, Information und Medien „Johann Amos Comenius“, e.V. (GPI)

comenius-award.de

50

The website comenius-award.de represents the Gesellschaft für Pädagogik, Information und Medien „Johann Amos Comenius“, e.V. (GPI), a non-profit organization focused on promoting high-quality digital education through the Comenius-EduMedia Award. The organization has a long-standing history since 1964 and positions itself as an international authority in digital education awards. The site targets educational institutions, digital education product developers, and pedagogical professionals, offering award programs, media visibility, and professional conferences. Technically, the site is built on WordPress with the Divi theme, enhanced by SEO and analytics tools such as Rank Math and Matomo, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource in its sector.

K

Kompetenzzentrum Technik-Diversity-Chancengleichheit e.V.

komm-mach-mint.de

48

Komm, mach MINT is a German nationwide non-profit network initiative dedicated to encouraging girls and women to pursue STEM (MINT) studies and careers. It operates under the Kompetenzzentrum Technik-Diversity-Chancengleichheit e.V. and is supported by the German Federal Ministry of Education and Research (BMBF). The website offers comprehensive resources including brochures, podcasts, videos, and event information targeted at students, educators, parents, and organizations. The initiative holds a unique position in Germany as the sole nationwide network focusing on women in STEM fields.

O

Open Roberta Initiative

open-roberta.org

61

Open Roberta is an educational initiative under the Fraunhofer IAIS umbrella, focusing on teaching programming and robotics in a playful manner. The website serves as a portal for learners, educators, and makers interested in programming education. Technically, the site is built on WordPress with the Divi theme, leveraging common JavaScript libraries for UI enhancements. The site is well designed, mobile optimized, and provides clear navigation, although it lacks visible contact and privacy-related pages. Security posture is good with HTTPS enforced, but could be improved by adding security headers and formal policies. Overall, the site appears legitimate and professional, but would benefit from enhanced privacy compliance and security transparency.

B

brigl consulting UG (hb)

brigl-consulting.de

43

brigl consulting UG (hb) is a small German consulting agency specializing in Amazon and Google SEO optimization services. With over 10 years of experience, they position themselves as a leading agency in Germany for product listing optimization, PPC campaigns, and technical SEO. Their website is professionally designed using WordPress with modern plugins and technologies, providing a good user experience and clear navigation. Contact information is transparent, including a named founder and company email. The site includes GDPR-compliant cookie consent mechanisms and basic privacy policies, reflecting awareness of data protection requirements. Security posture is good with HTTPS and reCAPTCHA integration, though explicit security policies and headers could be improved. Overall, the website is trustworthy and well-structured for its business purpose.

D

Deutsche Leasing AG

deutsche-leasing.com

65

Deutsche Leasing AG operates as a leading asset finance partner primarily serving the German Mittelstand (SMEs). The company offers a broad range of leasing and financing solutions including machinery, mobility, IT leasing, and sustainable financing options. The website reflects a mature enterprise with a strong market position and comprehensive service portfolio. Technically, the site employs a modern JavaScript stack with consent management and analytics tools, ensuring good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and secure login forms, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the professional web presence. Strategic recommendations include enhancing security headers and clarifying domain registration details.

V

viadee spark

viadee-spark.de

46

viadee spark is a German consulting brand specializing in organizational transformation, innovation management, coaching, mediation, agility, and culture change. The company positions itself as a trusted partner for businesses seeking to implement sustainable change and improve their organizational culture. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on WordPress with modern SEO and consent management tools, hosted on Microsoft Azure DNS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

E

Economy for the Common Good

ecogood.org

54

Economy for the Common Good is an international non-profit movement advocating for an alternative economic model that benefits all stakeholders including employees, suppliers, customers, and society. The organization provides tools such as the Common Good Balance Sheet and certification labels to companies, municipalities, and educational institutions to promote sustainable and ethical business practices. The website is professionally designed using WordPress with modern SEO and accessibility features, supporting a broad international presence with multiple country-specific subdomains. Security posture is strong with HTTPS and basic security best practices, though additional headers could enhance protection. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. However, the lack of WHOIS data transparency is a concern for domain legitimacy, though the website content and network presence support its credibility.

A

ATLANTIC Hotels

atlantic-hotels.de

59

ATLANTIC Hotels operates a regional chain of conference and wellness hotels primarily in Germany and Austria, targeting business travelers and wellness tourists. Their website is built on TYPO3 CMS and integrates modern consent management via Cookiebot and analytics through Google Analytics with opt-out capabilities. The site presents a professional design with good navigation and mobile optimization, supporting a medium-sized hospitality business model. However, the absence of explicit privacy policy and terms of service pages limits full compliance transparency. Technically, the site uses some outdated libraries such as jQuery 1.11.3, which may pose security risks if not updated. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security policies. Overall, the website is accessible without WAF or blocking, linking to multiple external domains related to analytics and booking services.

E

European Film Academy

europeanfilmawards.eu

54

The European Film Academy website serves as the official platform for the European Film Awards, providing comprehensive information about upcoming awards, nominees, winners, and related news. The organization operates as a non-profit cultural entity focused on promoting European cinema and supporting film professionals and enthusiasts across Europe. The site features a professional design, clear navigation, and rich multimedia content, reflecting a mature digital presence. Technically, the website is built on WordPress with Elementor and uses modern libraries such as Swiper.js and Yoast SEO for enhanced user experience and search engine optimization. The site is mobile-optimized and accessible, with good performance indicators. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. However, direct contact information such as emails or phone numbers is not publicly listed, relying instead on contact forms and external press hub links. The domain WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

N

Nagarro

nagarro.com

70

Nagarro is a leading digital product engineering and technology consulting company that drives technology-led business breakthroughs for industry leaders and challengers. Their market position is strong within the technology sector, offering key services such as Digital Engineering, Intelligent Enterprise, and Experience and Design. The company targets enterprises seeking agile and innovative digital transformation solutions. Technically, Nagarro's website is built on the HubSpot CMS platform, utilizing modern web technologies and marketing tools, with good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policy and incident response information, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, although WHOIS data is missing, which slightly impacts domain trust assessment.

A

APSL Tech

apsl.net

66

APSL Tech is a Spanish technology company specializing in custom web development using Python, Django, React, and Vue, with a strong focus on cloud systems and AI-driven solutions. As an AWS partner, they provide cloud architecture, data management, AI automation, and agile product development services. Their market position is reinforced by partnerships with notable clients and institutions, and a parent company relationship with Nagarro. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to their business domain. Technically, the website leverages modern frameworks and cloud platforms, primarily AWS and Google Cloud, with a responsive design optimized for mobile devices. The use of Bootstrap and JavaScript libraries supports a good user experience. Performance is moderate, with room for optimization. Security practices include HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although DNSSEC is not enabled and some security headers could be improved. From a security standpoint, APSL Tech demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Incident response and security policies are documented and accessible. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, APSL Tech presents a low-risk profile with a professional and secure online presence. Strategic recommendations include enabling DNSSEC, enhancing security headers, and conducting regular security audits to maintain and improve their security posture.

A

Asturias Paraíso Natural Film Commission

filmcommissionasturias.com

60

Asturias Paraíso Natural Film Commission is a regional entity dedicated to facilitating audiovisual production in Asturias, Spain. The website offers comprehensive information on filming locations, permits, professional directories, subsidies, and industry news, targeting audiovisual professionals, property owners, and producers. The site is well-branded and consistent with its official regional government affiliation, although WHOIS data is missing, raising questions about domain registration legitimacy. Technically, the site uses Liferay CMS with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is strong with HTTPS and security headers, but lacks published security policies and incident response contacts. Privacy compliance is good with cookie consent and GDPR-aligned policies. Overall, the site is professional and trustworthy but would benefit from clarifying domain registration and enhancing security transparency.

D

d.velop AG

d-velop.de

60

d.velop AG is a German-based enterprise software company specializing in digital document management and business process automation solutions. Serving over 15,000 customers, the company offers a comprehensive suite of products including document management systems, invoice processing, contract management, digital signatures, and process management software. Their solutions target enterprises and public sector organizations aiming to digitally transform their workflows and information management. The website reflects a mature digital presence with professional design, rich content, and extensive customer references, positioning d.velop as a trusted market player in the ECM and BPM space. Technically, the website is built on WordPress with modern integrations such as Yoast SEO, Wistia for video content, HubSpot for forms, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. Security practices include HTTPS enforcement and consent mechanisms, though explicit security policies and vulnerability disclosures are not publicly detailed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. The company demonstrates GDPR compliance through clear privacy and cookie policies and uses trusted third-party services responsibly. Contact information is transparent and includes multiple channels, enhancing business credibility. Overall, d.velop AG presents a professional, secure, and compliant digital footprint suitable for its enterprise clientele. Strategic improvements could include publishing dedicated security and incident response policies and enhancing security headers to further strengthen trust and compliance.

E

El Tiempo

eltiempo.es

69

El Tiempo is a prominent weather forecasting website primarily serving Spain and international users with detailed meteorological data and forecasts for over 200,000 cities. The site operates on an advertising-supported model, leveraging multiple ad networks and tracking technologies while implementing consent management via the Didomi SDK. The technical infrastructure includes modern JavaScript frameworks, CDN hosting, and integration with analytics and marketing tools, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and publishing explicit privacy and security policies. Overall, the website is professional, trustworthy, and well-positioned in the media sector for weather information.

D

Digival.es

digival.es

51

Digival.es is a well-established Spanish technology service provider specializing in domain registration, professional web hosting with SSD NVMe technology, WordPress optimized hosting, VPS servers, professional email solutions, web design, e-commerce development, and SEO services. With 25 years of experience and official accreditation as a .es domain registrar, Digival.es holds a strong market position serving businesses and individuals in Spain. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Google Analytics, and live chat support, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and reCAPTCHA integration, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security and compliance.

S

SHOW2BE

show2be.com

53

SHOW2BE is a newly established (2023) Spanish company specializing in global trade fair operations and marketing solutions. The company positions itself as an innovative operator focusing on B2P (Business-to-People) event ecosystems, leveraging creativity, technology, and strategic alliances to serve industries and professionals. The website reflects a professional and modern digital presence with multimedia content, clear navigation, and comprehensive information about services and team members. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and cookie consent management, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS and domain protection statuses, but lacks visible security policies or incident response contacts. Privacy compliance is strong with clear cookie and privacy policies. Overall, the website is trustworthy, well-branded, and professionally executed, suitable for its target audience in the trade fair and marketing sectors.

The website fibar-valladolid.com is currently inaccessible due to a server-side bandwidth limit exceeded error (HTTP 509). This prevents access to any meaningful content, including business descriptions, contact information, or security policies. The domain is registered since 2013 with a reputable registrar, indicating a potentially established business, but no online presence is currently available to confirm this. The lack of accessible content severely limits the ability to assess the company's market position, services, or technical infrastructure. Security posture cannot be evaluated due to absence of accessible data and no HTTPS or security headers information is available. Overall, the site is effectively offline for analysis, resulting in a very low AI score and a recommendation to resolve hosting or bandwidth issues to restore accessibility.

A

AR-PA Turismo cultural

arpaturismocultural.es

46

AR-PA Turismo cultural is a well-established cultural heritage fair organized by the Junta de Castilla y León in Spain, focusing on cultural heritage, innovation, and professional networking. The website is professionally designed using WordPress with Elementor and various plugins, providing a rich user experience with multimedia content and clear navigation. The technical infrastructure is modern and includes SEO and GDPR compliance tools, although a dedicated privacy policy page is not explicitly found. Security posture is good with HTTPS and no visible vulnerabilities, but security headers could be improved. WHOIS data is restricted due to Red.es policies, which is common for .es domains, but the website's content and branding strongly support its legitimacy. Overall, the site is credible, secure, and serves its target audience effectively.

D

DEMO8

mercartes.es

61

Mercartes is a professional event and online platform dedicated to the performing arts and music sectors in Spain. It facilitates networking, business meetings, and sector promotion through an annual event and digital tools such as a professional catalog and private user areas. The website is built on WordPress with a modern theme and plugins, including SEO and cookie consent management. The technical infrastructure is standard for event websites, with multimedia content and mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available due to query restrictions, limiting domain legitimacy assessment. Overall, the site is professional and trustworthy for its target audience.

FINE ITALY is an international marketplace event dedicated to wine tourism, organized by Feria de Valladolid, with its first Italian edition scheduled for October 2025 in Riva del Garda, Italy. The platform connects wineries and tourism operators to promote wine tourism destinations and business opportunities in Southern Europe. The website is built on WordPress and uses modern web technologies including LayerSlider and Cloudflare DNS. It features professional design and good content quality but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Tracking technologies such as Google Analytics and Adform are used, indicating moderate user tracking. Overall, the site is legitimate and professionally presented but could improve in privacy and security transparency.

F

Feria Outlet Valladolid

feriaoutletvalladolid.com

58

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

C

Cyber Folks

cyberstores.pl

64

Cyber Folks is a Polish technology company specializing in hosting services and e-commerce platform solutions, including Shoper, WooCommerce, and PrestaShop. Founded in 2019, the company positions itself as a provider of comprehensive online store solutions targeting businesses and individuals seeking to establish or enhance their e-commerce presence. The website content is professionally presented in Polish, with clear branding and consistent messaging aligned with the company's services. The digital infrastructure is based on WordPress CMS, enhanced with plugins such as Ajax Search Pro and Visual Website Optimizer for analytics and A/B testing, indicating a moderate level of digital maturity.

B

BAB APP MARKET GmbH

bab-appmarket.de

48

BAB APP MARKET GmbH operates a specialized B2B e-commerce platform focused on smart home applications, targeting professional customers such as electricians and system integrators. The website offers a curated marketplace for smart home apps integrating with building automation systems, emphasizing business customers with a mandatory trade license for registration. The company positions itself as a niche leader in the German smart home technology sector, providing key services including app sales, SDK access, and integration support. Technically, the website is built on the Magento e-commerce platform with a combination of JavaScript libraries including jQuery, Prototype.js, and Bootstrap. The site is mobile-optimized and employs Google Analytics with IP anonymization for user tracking. While the site uses HTTPS and cookie consent mechanisms, it lacks advanced security headers and explicit security or incident response policies, indicating room for improvement in security maturity. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and cookie consent but does not provide detailed security policies or vulnerability disclosure mechanisms. The use of older JavaScript libraries may pose potential risks if not regularly updated. No WAF or blocking mechanisms are detected, and no suspicious content or vulnerabilities are apparent from the analysis. Overall, the website is professional, trustworthy, and well-targeted to its business audience. However, enhancing security headers, publishing security policies, and improving transparency around incident response would strengthen its security posture and compliance stance.

D

Draka Comteq Germany - Datenkabel

draka-kabel.com

49

Draka Comteq Germany operates as a specialized manufacturer and supplier of data cables, including fiber optic (LWL) and copper cables, industrial cables, and broadcast cables. The company is positioned under the Prysmian Group Multimedia Solutions business unit, serving primarily B2B customers in Germany and related markets. The website reflects a professional corporate presence with multilingual support and regularly updated content showcasing products and industry events. Technically, the website is built on a modern WordPress CMS with popular plugins such as Yoast SEO, Complianz for GDPR compliance, and Weglot for translations. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and explicit security policies are absent. No critical vulnerabilities or suspicious content were detected. The WHOIS data is incomplete or unavailable, possibly due to privacy protection or domain aliasing, but the website's branding and external references support its legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy digital asset for Draka Comteq Germany.

P

Prysmian

prysmiangroup.com

78

Prysmian is a global leader in the cable manufacturing industry, specializing in energy solutions and telecommunications cables and systems. The company positions itself as a world leader, targeting industrial and commercial clients requiring advanced cable and energy infrastructure. The website reflects a mature enterprise with a comprehensive digital presence, leveraging Drupal 10 CMS and multiple modern web technologies to deliver a professional and accessible user experience. The site includes robust privacy and cookie consent mechanisms, indicating a strong commitment to GDPR compliance and user data protection. However, the absence of WHOIS registration data raises questions about domain registration transparency, although the corporate branding and content strongly support legitimacy. Security posture is generally good with HTTPS and consent management, but lacks visible HTTP security headers and explicit security policies. Overall, the website is professional, secure, and compliant, with room for improvement in domain registration transparency and security header implementation.

C

ClouDNS

cloudns.net

73

ClouDNS is a DNS hosting and domain registration provider offering a range of services including free DNS, premium DNS, DDoS protected DNS, GeoDNS, and domain name registration. The company positions itself as a high-performance DNS provider, ranked #1 by DNSPerf for raw DNS performance as of May 2025. Their service portfolio targets businesses and individuals requiring reliable and secure DNS management with global anycast infrastructure and 24/7 support. The website is professionally designed, mobile-optimized, and provides extensive service information and customer testimonials, indicating a mature digital presence. Technically, the site uses modern JavaScript libraries like jQuery and embeds multimedia content efficiently. Security posture is good with HTTPS and secure forms, though explicit security headers and incident response policies are not published. WHOIS data is unavailable, which slightly reduces trust but is not uncommon for DNS service providers. Overall, ClouDNS demonstrates a strong market position with a comprehensive service offering and good user experience.

I

InfoCamere

id-lei.com

68

ID LEI, powered by InfoCamere, is an official Local Operating Unit (LOU) accredited by the Global Legal Entity Identifier Foundation (GLEIF), providing fast and reliable Legal Entity Identifier (LEI) services. The website offers clear, professional information about registering, renewing, and transferring LEI codes, targeting businesses needing compliance with international financial regulations. The service is positioned strongly in Italy with expanding international presence, supported by transparent pricing and customer support features.

F

FH Münster

fh-muenster.de

64

FH Münster is a prominent university of applied sciences in Germany, offering a wide range of bachelor, master, dual study, and continuing education programs. It is recognized for its strong emphasis on applied research, innovation, and quality culture. The institution targets students, researchers, and professional learners, positioning itself as a leading educational provider in the region. The website reflects a professional and comprehensive digital presence, supporting its educational mission effectively. Technically, the site uses modern JavaScript modules, CSS, and enforces security policies such as Content-Security-Policy and HTTPS, hosted on DFN infrastructure. The site is mobile-optimized and accessible, with clear navigation and rich content. Security posture is strong with no visible vulnerabilities, though it lacks some compliance features like a cookie consent mechanism and published incident response policies. Overall, FH Münster demonstrates a mature digital and security posture appropriate for a large educational institution.

A

AStA der FH Münster

astafh.de

57

The AStA der FH Münster website serves as the official online presence of the student representation body at FH Münster, Germany. It provides students with information about their interests representation, services such as legal and social counseling, political education, and management of student tickets. The organization is positioned as a key non-profit entity supporting student welfare and participation in university governance. The website is well-structured, content-rich, and targets primarily the student community of FH Münster. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and Font Awesome for iconography. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance maturity.

immobilienbesucher.de is a German real estate service provider specializing in nationwide property inspections, measurement services compliant with WoFlV and DIN277, and property valuation reports including Wertindikationen and Gutachtenerstellungen. The company targets business customers, investors, and real estate professionals, offering detailed service descriptions, pricing, and online order forms. The website is built on modern technologies including React and Next.js, hosted on DigitalOcean, and uses Material-UI for UI components. It features a cookie consent mechanism via Klaro and integrates Google reCAPTCHA for bot protection. Security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing a security policy. The domain WHOIS data is consistent with the business focus and shows no privacy protection, which is appropriate. Overall, the website is professional, trustworthy, and well-optimized for performance and SEO.

A

Apple Inc.

icloud-content.com

74

Apple's iCloud developer site provides a comprehensive platform for developers to securely store and sync user data across Apple devices using iCloud and CloudKit technologies. The site offers detailed resources, telemetry, dashboards, and push notification tools, positioning Apple as a market leader in cloud services and developer tools. The technical infrastructure is modern and optimized for performance and accessibility, leveraging Apple's proprietary technologies and fonts. Security posture is strong with HTTPS enforced and privacy-respecting telemetry, though explicit security headers and incident response contacts are not evident on this page. Overall, the site demonstrates high professionalism, trustworthiness, and a mature digital presence.

DPG Media Group operates a privacy consent management page as part of its digital media services, primarily targeting users in Belgium and the Netherlands. The page analyzed is a minimal privacy gate interface designed to handle user consent for privacy compliance, featuring a loading animation and redirect logic. The company is a large media group with a strong market position in the media industry. The website uses Google Tag Manager for analytics and tracking purposes, indicating a moderate level of digital maturity. Technically, the site employs standard JavaScript and Google Tag Manager scripts but lacks visible advanced frameworks or CMS indicators. The page is mobile optimized with responsive background images and basic accessibility features. However, no explicit security headers or SSL configuration details were provided, limiting the security posture assessment. The absence of visible privacy and cookie policies on this page reduces privacy compliance confidence. From a security perspective, the site does not show signs of WAF or blocking mechanisms and appears accessible. The WHOIS query for the subdomain failed, which is expected behavior since WHOIS typically does not provide data for subdomains. The main domain likely holds the registration data. No suspicious or malicious indicators were found in the content or scripts. Overall, the security posture is moderate but could be improved by adding explicit privacy policies, security headers, and contact information. The overall risk is moderate with recommendations to enhance privacy transparency, implement security best practices, and provide clear contact channels for privacy and security inquiries to improve trust and compliance.

Y

yack.rocks GmbH

weekli.de

56

weekli.de is a German digital platform operated by yack.rocks GmbH that aggregates weekly retail brochures, offers, and store information from a wide range of retailers. The website targets general consumers in Germany seeking to save money by browsing current offers and coupons online. It holds a strong market position with partnerships with major retailers such as Kaufland, Lidl, and MediaMarkt, and cooperates with regional newspapers to provide up-to-date content. The platform supports mobile users with dedicated iOS and Android apps, enhancing accessibility and user engagement. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Adsense, and CookieFirst for consent management. The site is mobile-optimized with good SEO practices and a clear navigation structure. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though some security headers could be enhanced. No critical vulnerabilities or security issues were detected. The site respects GDPR requirements with a comprehensive privacy policy and cookie consent mechanism. Contact information is partially available, including an email address and a contact form linked via the parent company site. The domain registration is consistent with the business profile, indicating legitimacy. Overall, weekli.de presents a professional, trustworthy, and user-friendly platform for retail brochure aggregation in Germany, with a good balance of content quality, technical implementation, and privacy compliance.

A

A38 Hajó

a38.hu

47

A38 Hajó is a well-established cultural venue and concert ship located in Budapest, Hungary, offering a diverse range of live music events, cultural programs, and hospitality services including a bar and bistro. The website reflects a mature business with a strong local and international presence, supported by partnerships with cultural organizations and sponsors. The target audience includes music lovers, cultural enthusiasts, and young artists seeking performance opportunities. Technically, the website uses a modern tech stack including October CMS, Foundation framework, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The site is professionally designed, mobile optimized, and provides clear navigation and contact information. Overall, the website is trustworthy and compliant with GDPR requirements, supporting a positive user experience and business credibility.

A

Appsters Kft.

appsters.me

42

Appsters Kft. is a Hungarian IT company with over 10 years of experience specializing in web and mobile application development, museum technology, geoinformatics, and complex IT systems. The company targets businesses and organizations seeking creative technological solutions to enhance their digital presence. The website is built on WordPress using the Divi theme, employing modern web technologies and includes cookie consent and reCAPTCHA for spam protection. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with no visible privacy policy or terms of service on the homepage. Overall, the site is professional and trustworthy but could improve transparency and security practices.

P

Petőfi Kulturális Ügynökség Nonprofit Zrt.

petofiugynokseg.hu

44

Petőfi Kulturális Ügynökség Nonprofit Zrt. is a Hungarian non-profit cultural agency founded in 2020, focused on promoting national and local cultural values across various sectors of contemporary Hungarian culture. The organization operates multiple subsidiaries and partners with several cultural institutions, positioning itself as a key player in Hungary's cultural landscape. The website reflects a professional and consistent brand image, targeting cultural stakeholders and the general public interested in cultural events and support programs. Technically, the website employs modern JavaScript libraries, consent management tools, and analytics platforms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration aligns well with the business history, indicating legitimacy and trustworthiness.

D

Domain Protection Services, Inc.

kultiq.ai

62

KultIQ.ai is a Hungarian language AI-driven platform specializing in intelligent search and analysis of cultural databases, including documents, spreadsheets, and archives. The business targets cultural institutions and researchers requiring advanced AI tools for data integration and contextual text analysis. The company appears to be a small technology startup founded in 2025, leveraging modern web technologies such as JavaScript ES modules and WebP images for a responsive and visually appealing user experience. The website is well-structured and optimized for SEO, though it lacks explicit privacy and cookie policies, as well as contact information, which limits user trust and compliance visibility. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, indicating room for improvement in domain and web security configurations. Overall, the site is safe with no adult or questionable content detected.

The domain agonyshark.com currently serves a 404 Not Found error page with embedded information describing services provided by Admiral, a company specializing in copyright access control and privacy consent management for digital publishers. The site lacks any actual business content, contact information, or interactive features, indicating it is either inactive or used solely as a service endpoint. The technical infrastructure is minimal, hosted on Google Cloud Platform with AWS DNS servers, and uses HTTPS with frequent certificate rotation. Security practices are described as industry standard, with no executable files hosted and continuous scanning in place. However, the absence of DNSSEC and security headers reduces the overall security posture. The domain registration is recent but consistent with a service domain, registered via NameCheap, Inc. Overall, the site is safe but lacks substantive content and business credibility, resulting in a low AI score and limited insights.

Yieldbird Sp. z o.o. is a Poland-based programmatic advertising partner specializing in maximizing publisher revenue through tailored technology, demand partnerships, and expert services. With over 15 years of experience and a client base spanning 1000+ websites across 40 countries, Yieldbird holds a strong market position supported by its parent company Agora, a major European publishing group. The company offers a comprehensive platform including advanced header bidding, video solutions, and rich media ad formats, complemented by consulting and programmatic deal management services. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and a consent management platform to ensure compliance and user experience. The hosting is managed via home.pl DNS servers, consistent with its Polish base. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

M

Minding Creative Minds

mindingcreativeminds.ie

59

Minding Creative Minds is a small non-profit organization founded in 2020, dedicated to providing free 24/7 mental wellbeing support services to individuals in the Irish creative sector. Their offerings include a helpline, counselling, creative arts therapies, specialist trauma support, career services, and legal assistance. The organization targets a broad range of creative professionals including musicians, actors, writers, and arts administrators within Ireland and Irish creatives abroad. The website positions itself as a trusted resource with clear contact information, company registration details, and government cultural support, reinforcing its legitimacy and community focus. Technically, the website is built on WordPress using the Enfold theme, integrating modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA v3 for security and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting details are partially known, with domain registration through Register 365. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be enhanced by enabling DNSSEC and additional security headers. Security-wise, the site shows adherence to best practices with secure forms and anti-bot measures, but lacks explicit security policies or incident response contacts. Privacy compliance is basic but present, with privacy and cookie policies accessible and a consent mechanism implemented. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and well-aligned with its mission. The overall risk is low, with recommendations focusing on improving DNS security, publishing security policies, and enhancing security headers to further strengthen the security posture and trustworthiness of the platform.

C

Cultural & Creative Industries Skillnet

creativeskillnet.ie

52

Cultural & Creative Industries Skillnet is a professional organization dedicated to providing high-quality, subsidised skills development and training programs tailored for the cultural and creative sectors in Ireland. The website reflects a well-established entity with a clear focus on delivering responsive and relevant training courses, events, and resources to industry professionals. The presence of co-funding logos from Skillnet Ireland and the Government of Ireland further supports its credibility and market position. Technically, the website is built on a modern WordPress platform utilizing a variety of plugins such as LifterLMS for course management, Complianz for GDPR compliance, and Google Analytics for visitor tracking. The site is well-optimized for SEO and mobile responsiveness, with a clean design and clear navigation enhancing user experience. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, although additional security headers could improve the security posture. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. However, there is no explicit incident response or vulnerability disclosure information, which could be areas for improvement. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility features to further strengthen compliance and trust.

F

First Music Contact

firstmusiccontact.com

62

First Music Contact is a small, Ireland-based non-profit organization dedicated to supporting musicians and the independent music sector through various projects, consultancy services, and development programs. The website is professionally designed using the Squarespace platform, featuring clear navigation and a focus on artist support and regional development. Technically, the site uses modern web technologies and is hosted on Squarespace's CDN, providing good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and social media presence suggest a genuine organization. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security practices.

R

RECORDED ARTISTS ACTORS PERFORMERS

raap.ie

42

RECORDED ARTISTS ACTORS PERFORMERS (RAAP) is an established Irish non-profit organization founded in 2000, dedicated to collecting and distributing royalties to performers such as musicians and actors for the use of their recorded performances. The organization operates primarily within Ireland but also manages international rights, positioning itself as the key performers' collection society in the Irish media sector. RAAP emphasizes fairness, transparency, and strong representation for its members, serving a diverse range of performers from emerging artists to internationally recognized acts. The website reflects a professional and consistent brand with clear calls to action for membership and member login access. Technically, the website is built on a modern WordPress platform using the GeneratePress theme and Elementor page builder, supplemented by GDPR-compliant cookie management via the Complianz plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are not explicitly present. Hosting details are not fully disclosed but DNS is managed via clouddns.ie. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site shows good baseline practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks published security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, RAAP's website is a trustworthy, well-maintained digital presence for a niche non-profit organization serving the Irish performing arts community. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to improve accessibility and performance to maintain high standards and user trust.

C

Culture Ireland

cultureireland.ie

55

Culture Ireland is a government agency focused on promoting Irish arts worldwide through funding and support programs. The website serves as an official platform providing information on grants, news, and cultural events, targeting artists, cultural organizations, and international arts presenters. The site is well-branded, consistent with government standards, and includes official contact information and social media links. Technically, the site is built on WordPress with modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers are not explicitly detected. WHOIS data is unavailable, but the domain's .ie extension and government affiliation strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its cultural promotion mission effectively.

The Irish Recorded Music Association (IRMA) website serves as the official platform for the Irish music industry, providing information on Irish music charts, piracy, copyright, and member services. The site targets music industry professionals, members, and the general public interested in Irish music. It offers key services such as official Irish music charts, piracy information, and member login functionalities. The website positions itself as the authoritative body for the Irish recorded music industry and charts. Technically, the website employs a mix of older and modern JavaScript libraries including jQuery 1.10.2, Prototype.js, and Scriptaculous, alongside Google Analytics, Google Tag Manager, and CookiePro for cookie consent management. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses HTTPS, but no explicit security headers were detected in the provided data. From a security perspective, the site implements cookie consent and denies most tracking by default except security storage. No exposed sensitive data or vulnerabilities were identified in the HTML content. However, the absence of WHOIS data and lack of explicit privacy and security policies reduce the overall trustworthiness. No incident response or vulnerability disclosure information is available. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professionally designed with consistent branding and relevant content for its audience. The main risks relate to incomplete WHOIS data and missing explicit privacy and security documentation. Strategic improvements in security headers, privacy policy publication, and WHOIS transparency would enhance trust and compliance.

I

Irish Music Rights Organisation

imro.ie

64

The Irish Music Rights Organisation (IMRO) operates as a collective rights management entity in Ireland, administering performing rights for songwriters, composers, and music publishers. The organization licenses music use to businesses and distributes royalties to rights holders, positioning itself as a key player in the Irish music industry. The website clearly targets two main audiences: music creators seeking membership and royalty management, and music users requiring legal music licenses. The business model is based on licensing and rights management, supported by a professional and well-structured digital presence. Technically, the website is built on WordPress with modern frameworks like UIkit and optimized with caching and SEO plugins, ensuring fast performance and excellent mobile responsiveness. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy organization with a solid digital infrastructure and clear business focus.

M

Meta

oculus.com

62

The website www.meta.com/quest is a part of Meta Platforms, Inc., focusing on their Meta Quest virtual reality products. However, the content is fully gated behind a login wall requiring a Meta account, preventing access to substantive content without authentication. The site uses advanced React-based frameworks and Facebook's internal technologies, indicating a modern technical infrastructure. Security posture and privacy compliance cannot be fully assessed due to lack of accessible content and missing WHOIS data. The domain is legitimate but WHOIS transparency is limited, likely due to corporate privacy policies. Overall, the site is a secure, enterprise-grade platform but inaccessible for public analysis.

M

Meta

metacareers.com

80

Meta Careers website serves as the official career portal for Meta, a leading global technology company focused on AI, metaverse, and innovative hardware and software products. The site highlights various technology and business teams, signature events, and career programs, targeting job seekers and professionals interested in cutting-edge technology roles. The website is hosted on Meta's infrastructure, uses modern web technologies including React and Facebook's internal libraries, and integrates analytics and marketing tools from Facebook and Google. Security posture is strong with HTTPS and security headers implied, though explicit privacy and cookie policies are not detected in the provided content. WHOIS data is unavailable publicly, likely due to privacy or internal management, but the domain and content strongly align with Meta's brand and infrastructure, indicating high legitimacy.

Ray-Ban's official EU online store offers a comprehensive e-commerce platform for purchasing sun and prescription eyewear. The website reflects the brand's strong market position as a leader in eyewear, providing premium products with a focus on style and authenticity. The site targets European consumers and supports multiple regional versions, indicating a broad international presence. Technically, the website employs a modern tech stack including CoreMedia CMS, Algolia search, and various marketing and security tools such as Tealium and Forter, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforced and integration of fraud prevention services, although some security headers are not explicitly detected in the provided content. Privacy compliance indicators such as privacy and cookie policies are not clearly found in the analyzed content, suggesting room for improvement in transparency and GDPR compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience, with no signs of blocking or WAF interference. The absence of WHOIS data limits domain registration insights but does not detract from the site's legitimacy given the brand recognition and secure implementation.

O

OrionThemes

orionthemes.com

47

OrionThemes is a small technology company specializing in the creation and sale of premium, responsive WordPress themes. Established in 2014, the company offers well-documented themes such as Dentalia and Recycle, targeting WordPress users and businesses seeking elegant website solutions. The website demonstrates a consistent brand presence with positive customer testimonials and a focus on quality and support. Technically, the site is built on WordPress 5.6.16, utilizing common plugins and libraries including Contact Form 7, Redux Framework, and Google Analytics for tracking. Hosting is provided via Neoserv.si, with domain registration through NameCheap, Inc. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.