Security Directory

My Contractor University is a professional online training and business coaching platform focused on HVAC contractors, powered by EGIA. It offers a comprehensive suite of services including online classes, resource libraries, business coaching, workshops, and certification programs. The platform targets HVAC business owners seeking to improve their operations and sales through structured education and coaching. Technically, the website is built on WordPress with modern integrations such as Gravity Forms, Google Tag Manager, and AddSearch, hosted likely on AWS infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and reCAPTCHA protections, though it lacks DNSSEC and some security headers. Privacy policies and terms are linked to the parent company EGIA, indicating compliance with GDPR and other regulations. Overall, the site is trustworthy, professional, and well-maintained, serving a medium-sized business audience in the energy sector.

EGIA is a well-established organization founded in 2003, specializing in contractor training, financing solutions, utility services, and nonprofit workforce development within the HVAC and energy sectors. The company operates multiple subsidiary platforms including Contractor University, HVAC Distributor University, OPTIMUS Financing, and the EGIA Foundation, positioning itself as a comprehensive service provider in its industry. The website reflects a mature digital presence with consistent branding and clear navigation aimed at contractors, distributors, manufacturers, and utility partners. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies and providing a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, with a strong business credibility score.

ConversionRuler is a specialized SaaS provider offering subscription-based PPC and online marketing campaign tracking and ROI measurement services. Established in 2002, the company targets SEO, SEM, and PPC professionals as well as ecommerce businesses seeking detailed insights into their marketing effectiveness. The website presents a clear business model with transparent pricing and a focus on usability and integration with various online marketing channels. Technically, the site uses standard web technologies with AWS DNS infrastructure, but lacks modern CMS or advanced frameworks. The design is professional though somewhat dated, with basic mobile optimization and accessibility features. Security posture is moderate; while domain registration is stable and protected against unauthorized changes, the absence of DNSSEC and security headers, as well as missing cookie consent mechanisms, indicate areas for improvement. No explicit privacy or incident response policies are published, which may affect compliance with GDPR and other regulations. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

Creative Market is a well-established online marketplace founded in 1998, specializing in high-quality digital creative assets such as stock photos, graphics, fonts, and design templates. The platform targets creative professionals, designers, marketers, and small businesses seeking unique digital content. It operates a mature e-commerce business model with a strong market position supported by a large catalog of over 3 million assets from independent creators worldwide. The website demonstrates excellent content quality, professional design, and clear navigation, providing a seamless user experience across devices.

T

Technische Hochschule Georg Agricola

thga.de

58

Technische Hochschule Georg Agricola (THGA) is a specialized engineering university located in Bochum, Germany, offering a broad range of practice-oriented Bachelor and Master degree programs in engineering disciplines such as mechanical engineering, electrical engineering, and industrial engineering. The institution maintains strong industry partnerships to ensure excellent job prospects for its graduates. The website reflects a mature digital infrastructure built on TYPO3 CMS, leveraging modern web technologies and providing a mobile-optimized, accessible, and SEO-friendly user experience. Privacy and cookie compliance are well implemented with a consent management platform and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and minimal exposure of sensitive data, though some improvements in security headers and incident response transparency are recommended. Overall, the website presents a professional, trustworthy, and user-friendly platform that effectively supports the institution's educational mission and stakeholder engagement.

M

Max Planck Institute for Security and Privacy

mpi-sp.org

63

The Max Planck Institute for Security and Privacy is a research institute founded in 2019 and affiliated with the Max Planck Society in Germany. It focuses on advancing security and privacy technologies through foundational research, systems development, and societal impact. The website serves academics, researchers, students, and professionals interested in security and privacy research, offering information about research areas, people, career opportunities, and contact details. The business model is centered on academic research and education within the technology sector, positioning itself as a leading institution in its field. Technically, the website is built on the JustRelate CX Cloud CMS platform, utilizing modern JavaScript libraries such as RequireJS and Slick Carousel for UI components. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate with deferred loading of styles and scripts. Security is well implemented with HTTPS enforced and CSRF protection on forms, though explicit security headers are not detected. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Security posture is strong overall with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in adding security headers, publishing a security policy, and providing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly, but the strong affiliation with the Max Planck Society and professional website design mitigate concerns. No advertising or tracking services are detected, supporting user privacy. Overall, the website is safe, professional, and trustworthy, serving its academic audience effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response and vulnerability disclosure information, and improving accessibility features to further strengthen compliance and user trust.

F

Fraunhofer-Gesellschaft

fraunhofer.de

62

Fraunhofer-Gesellschaft is a leading German research organization specializing in applied sciences and technology transfer. The website presents comprehensive information about their research fields, strategic initiatives, and collaborations with industry and academia. Their market position is strong as a key player in innovation and technology development in Germany and internationally. The technical infrastructure of the website is modern, leveraging popular JavaScript libraries and Adobe Experience Manager CMS, with good mobile optimization and accessibility. Security posture is robust with HTTPS, DNSSEC, and security headers implemented, though explicit incident response contacts and vulnerability disclosure mechanisms are not prominently published. Overall, the website reflects a professional and trustworthy organization with a strong focus on research excellence and industry collaboration.

EBZ Business School GmbH is a specialized educational institution focused on real estate and related management disciplines, positioning itself as Germany's largest real estate university. The website offers comprehensive information about degree programs, financing options, and career services, targeting students and industry partners. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and cookie consent features, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy-conscious analytics, though it lacks explicit security policy disclosures. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the institution's credibility and market position.

C

Center for Advanced Internet Studies (CAIS) GmbH

cais-research.de

52

The Center for Advanced Internet Studies (CAIS) GmbH operates a professional academic research website focused on digital age internet studies. The site targets researchers and stakeholders interested in internet research and digital society. The business model is that of a specialized research institute, likely non-profit, with a small organizational size and a focus on collaboration, events, and publications. The website is built on WordPress using the Divi theme and several plugins including Yoast SEO and Borlabs Cookie for privacy compliance. The technical infrastructure is modern and supports good SEO and mobile optimization, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

W

WirtschaftsEntwicklungsGesellschaft Bochum mbH

bochum-wirtschaft.de

47

WirtschaftsEntwicklungs-Gesellschaft Bochum mbH operates as a regional economic development agency focused on supporting Bochum-based companies, startups, investors, and project developers. The organization offers a broad range of services including commercial space brokerage, business services, startup consulting, and technology center management. The website reflects a strong market position as a trusted partner for economic growth and innovation in Bochum, Germany. The content is professionally presented, targeting local businesses and stakeholders with clear calls to action and comprehensive service descriptions. Technically, the site is built on TYPO3 CMS with modern frontend libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, supporting the organization's credibility and outreach efforts.

H

Hochschule Bochum

hochschule-bochum.de

64

Hochschule Bochum is a large public University of Applied Sciences in Germany offering a wide range of bachelor and master degree programs across disciplines such as construction, economics, technology, health, computer science, and sustainability. The website is professionally designed, content-rich, and well-structured to serve students, prospective students, and academic stakeholders. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance documentation. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

B

Bochum Marketing GmbH

bochum-tourismus.de

52

Bochum Marketing GmbH operates the official tourism website for the city of Bochum, Germany, providing comprehensive information on local attractions, events, accommodations, and cultural highlights. The website serves as a key digital platform to promote tourism and local engagement, targeting visitors and residents interested in exploring Bochum's offerings. The site is built on TYPO3 CMS and employs modern web technologies, including responsive design and accessibility features, ensuring a positive user experience across devices. While the site is well-branded and professionally maintained, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal incident response contacts. Overall, the website is a reliable and authoritative source for tourism information in Bochum, with room for enhancement in privacy and security transparency.

D

Deutsches Bergbau-Museum Bochum

bergbaumuseum.de

49

The Deutsches Bergbau-Museum Bochum website serves as the digital presence for a prominent German mining museum and Leibniz research institution focused on geo-resources. The site provides educational and research insights into mining, targeting general visitors, researchers, and the public interested in mining history and geology. Technically, the website is built on the TYPO3 CMS platform, integrating modern tools such as Usercentrics for cookie consent and Matomo for analytics, alongside accessibility enhancements via Eye-Able. The site demonstrates good design quality, mobile optimization, and SEO practices, although explicit privacy and terms of service documents are not detected in the provided content. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and formal security policies. Overall, the domain appears legitimate and consistent with an academic/research institution, supported by WHOIS data showing use of German research network name servers. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to strengthen trust and compliance.

A

AKAFÖ Akademisches Förderungswerk A.ö.R.

akafoe.de

56

AKAFÖ Akademisches Förderungswerk A.ö.R. is a regional non-profit student services organization serving the Bochum area and nearby campuses. It provides a broad range of services including student housing, financial aid (notably BAföG), cultural programs, inclusion services, and childcare. The website is well-structured, professionally designed, and targets students and stakeholders in higher education institutions in Germany. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes multilingual support via Google Translate. Analytics are implemented using Matomo and Google Analytics with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant, and serves its audience effectively.

M

MWEIMH Nordrhein-Westfalen

wirtschaft.nrw

65

The website wirtschaft.nrw is the official portal of the Ministry for Economic Affairs, Industry, Climate Protection and Energy of North Rhine-Westphalia, Germany. It serves as a comprehensive information hub for economic policy, industry, energy, climate protection, innovation, and digitalization initiatives within the state. The site targets businesses, entrepreneurs, policymakers, and the general public interested in these sectors. It is positioned as a trusted government source with extensive content and clear navigation. Technically, the site is built on Drupal CMS with modern web technologies including Bootstrap and Modernizr. It employs Matomo analytics with strong privacy controls respecting user consent and Do Not Track settings. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent with a German government entity. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, some security headers are not explicitly detected and DNSSEC is not enabled, which could be improved. There is no public security policy or incident response contact information visible. No vulnerabilities or suspicious content were found. Overall, wirtschaft.nrw demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It is a safe and reliable resource for its audience. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security.txt file, and improving incident response visibility to further strengthen its security posture.

P

Projektträger Jülich

ptj.de

49

Projektträger Jülich (PtJ) is a leading German project funding agency affiliated with Forschungszentrum Jülich, specializing in managing and implementing innovative government-funded research and innovation programs. With over 50 years of experience, PtJ holds a strong market position in the government and energy sectors, offering services such as project funding, strategic development, monitoring, communication, and procurement. The website reflects a professional and comprehensive digital presence, targeting government bodies, research institutions, and companies seeking funding. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Matomo analytics, ensuring excellent performance, mobile optimization, and accessibility. Security posture is strong, supported by ISO certifications and HTTPS enforcement, though explicit security headers could be enhanced. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, PtJ demonstrates high business credibility and trustworthiness with consistent branding and detailed service information.

S

Středočeská centrála cestovního ruchu

sccr.cz

49

Středočeská centrála cestovního ruchu is a regional tourism organization focused on promoting Central Bohemia as a travel destination. The website serves as a corporate portal providing information about the organization's activities, marketing campaigns, regional product sales, and tourist information centers. It targets tourists, regional partners, and media stakeholders. The organization holds a key position in the regional tourism ecosystem, collaborating with government entities and other regional partners. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and performance optimizations via WP Rocket. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and cookie consent mechanisms compliant with GDPR. However, explicit security headers and published security policies are absent. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, which limits domain legitimacy verification, but the website's content and partner affiliations strongly indicate a legitimate and professional entity. Overall, the website is well-structured, professional, and trustworthy for its intended audience, with room for improvement in security transparency and accessibility.

V

Vzdělávací institut Středočeského kraje

visk.cz

54

Vzdělávací institut Středočeského kraje is a well-established educational organization founded in 2009, providing a broad range of training and seminars primarily targeting educators, public administration employees, and social service workers in the Central Bohemian Region of the Czech Republic. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates Google Analytics and Tag Manager for analytics, and uses responsive design techniques to ensure good mobile usability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly disclosed. Overall, the domain registration data aligns well with the website's identity, supporting its legitimacy and trustworthiness.

I

Integrovaná doprava Středočeského kraje, p.o.

idsk.cz

58

Integrovaná doprava Středočeského kraje (IDSK) is a public organization focused on managing and developing an integrated transport system for the Central Bohemian Region and Prague. Established in 2017, it plays a key role in coordinating rail and bus transport services, economic administration, quality standards, and marketing efforts in the region. The website reflects a professional and consistent brand presence with clear information targeting residents and travelers in the region. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and uses an outdated JavaScript library. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible, supported by official contact details and partner links.

The website portalpo.cz serves as a government portal for contributory organizations in the Czech Republic, providing login and instance selection services. It is developed and maintained by BISON, a Czech organization, and targets regional government entities and their contributory organizations. The portal is relatively new, with domain registration in May 2024, indicating a recent launch or redevelopment. The site uses a modern technology stack centered on the Nette PHP framework, Bootstrap for styling, and common JavaScript libraries such as jQuery and TinyMCE. The infrastructure includes SQL Server as the backend database and is hosted under a Czech registrar with DNS servers from Forpsi, a known Czech hosting provider.

T

T-MAPY spol. s r.o.

tmapy.cz

56

T-MAPY spol. s r.o. is a Czech company specializing in information technology and geographic information systems, providing a range of GIS-based solutions primarily targeting public administration, integrated rescue systems, transport, and commercial sectors. Their product portfolio includes digital technical maps, facility management applications, crime analytics, cemetery management, and electronic record services. The company has a strong market presence with over three decades of experience and a substantial client base including government entities and public organizations. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site demonstrates basic good practices like HTTPS and bot protection but could enhance its posture by implementing comprehensive security headers and publishing clear security and incident response policies. The absence of WHOIS data limits domain trust verification, though the website content and client references support legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility. Strategic improvements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

S

Středočeský kraj

stredoceskykraj.cz

64

Středočeský kraj operates an official regional government web portal serving the Central Bohemian Region of the Czech Republic. The website provides comprehensive information about regional government activities, public services, news, projects, and contact details. It targets residents, businesses, and stakeholders within the region, offering services such as public transport information, social services, education, and grant programs. The portal is well-positioned as a trusted government information hub with a large audience and established presence since 2005. Technically, the website is built on the Liferay CMS platform with React components, leveraging modern web technologies and frameworks. It integrates third-party analytics and performance monitoring tools such as Google Analytics and AppDynamics. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses nonce-based Content Security Policy for inline scripts. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. Privacy policies and GDPR compliance information are present, though the cookie consent mechanism could be improved. No vulnerability disclosure or incident response policies are published, representing an area for enhancement. Overall, the website is a professional, secure, and credible government portal with minor gaps in privacy and security transparency. Strategic improvements in cookie consent, security policy publication, and vulnerability disclosure would further strengthen its security posture and user trust.

V

Voiceflow

voiceflow.com

70

Voiceflow is a leading SaaS platform specializing in no-code AI conversational agents for chat and voice. It targets product teams and enterprises aiming to build scalable AI agents across multiple customer channels. The platform offers deep customization, integrations with major CRM and analytics tools, and a strong partner ecosystem. Technically, the website is built on Webflow with modern JavaScript libraries and analytics integrations, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly available. Overall, the domain is privacy protected, which is common for tech companies, and the website content and branding strongly support legitimacy and trustworthiness.

W

Webstudio

webstudio.team

49

Webstudio is a specialized service provider focused on bringing healthcare data to the web through interactive visualizations, graphic design, editorial work, and web development. Their market position is niche, serving state and academic sectors in the Czech Republic with a focus on healthcare and medical education projects. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics and Microsoft Clarity integrated for analytics and user behavior insights. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are not publicly available. Overall, the domain and website appear legitimate and trustworthy, with privacy-protected WHOIS data typical for small specialized businesses.

Ú

Ústav zdravotnických informací a statistiky ČR

uzis.cz

66

Ústav zdravotnických informací a statistiky ČR (ÚZIS ČR) is a Czech government agency responsible for collecting, processing, and publishing healthcare statistical data. It operates the National Health Information System (NZIS) and collaborates with other governmental and international health organizations. The website serves healthcare professionals, statisticians, researchers, and the public with comprehensive data and reports. The organization is positioned as the authoritative source for healthcare statistics in the Czech Republic, supported by its affiliation with the Ministry of Health.

M

Ministerstvo vnitra České republiky

mvcr.cz

56

The website https://mv.gov.cz/ is the official online presence of the Ministry of Interior of the Czech Republic, a key government entity responsible for internal affairs including public order, security, migration, and eGovernment services. The site provides comprehensive information and services targeted at Czech citizens, foreigners, and public institutions. It is positioned as a central authoritative source for internal state administration and security-related matters. Technically, the site employs legacy jQuery scripts alongside modern tracking tools such as Google Tag Manager and Analytics, with HTTPS and Content Security Policy headers ensuring a secure browsing environment. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy in Czech. Security posture is strong with no visible vulnerabilities, though some additional security headers and modern script upgrades are recommended. Overall, the site is professional, trustworthy, and well-structured, reflecting its government status and mission.

T

TOPlist s.r.o.

toplist.cz

58

TOPlist s.r.o. operates a Czech web analytics and visitor counting service, providing online traffic auditing and advertising listings primarily targeting website owners and businesses interested in monitoring their web traffic. The company has a long-standing presence since 1997, positioning itself as a trusted local provider in the web analytics niche. The website is professionally designed with clear navigation and a focus on delivering relevant content and services. Technically, the site employs modern frontend technologies including Bootstrap, FontAwesome, jQuery, and the Ace Admin Template, ensuring a responsive and user-friendly experience. However, some technical aspects such as security headers and privacy compliance require improvement. Security posture is moderate with HTTPS enabled and obfuscated email addresses, but lacks explicit security policies and headers. Overall, the site is safe, trustworthy, and well-maintained but would benefit from enhanced privacy and security practices to align with modern compliance standards.

T

The Ravestijn Gallery

theravestijngallery.com

64

The Ravestijn Gallery is a leading photography gallery based in the Netherlands, specializing in exhibitions, artist representation, exclusive artwork editions, and a bookshop. The website reflects a professional art gallery business model targeting photography collectors and art enthusiasts. The company positions itself as a prominent player in the Dutch photography art market with a focus on quality and exclusivity. Technically, the website is built on the Artlogic CMS platform, utilizing jQuery and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted with secure HTTPS and uses Cloudinary for image hosting. Performance is moderate with good mobile optimization and accessibility features, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are publicly available. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, supporting domain legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements could be made in security header implementation and transparency of security policies. The risk level is low, with recommendations focusing on enhancing security posture and compliance documentation.

D

Dashwood Books

dashwoodbooks.com

57

Dashwood Books operates as a niche retailer and publisher specializing in art and photography books. The website presents a curated selection of featured books, events, and press information, targeting collectors and enthusiasts in the art book market. The business model centers on e-commerce sales and publishing, supported by a professional and consistent brand presence online. Technically, the site leverages Bootstrap for responsive design, jQuery for interactivity, and New Relic for performance monitoring, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service pages suggests room for improvement in compliance and transparency. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed incident response contacts. Overall, the site is functional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

R

Ruth van Beek

ruthvanbeek.com

45

Ruth van Beek's website serves as a professional portfolio for the artist based in the Netherlands, showcasing her art and related book publications. The site targets art enthusiasts and potential gallery visitors, positioning itself as a niche artist platform with gallery representation and book sales. The business model revolves around art promotion and sales through galleries and publications. Technically, the website is built on the ProcessWire CMS with custom JavaScript and CSS, delivering a visually appealing and moderately performant experience with good mobile optimization. However, accessibility features are basic and could be improved. Security posture is moderate with HTTPS enabled and email obfuscation implemented, but lacks security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible GDPR compliance mechanisms. Overall, the website is trustworthy and professional but would benefit from improved security and privacy practices.

Rie Koizumi's website serves as a professional portfolio showcasing the artist's illustrations and works, targeting art enthusiasts and potential buyers. The site includes galleries of artwork, links to an external shop, and social media presence on Instagram. The business model is primarily personal branding and direct-to-consumer sales through an external platform. Technically, the site is built on WordPress with a child theme and uses common web technologies like jQuery. SEO is supported by the All in One SEO plugin, and the site is mobile optimized with good navigation and design quality. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is a well-maintained artist portfolio with room for improvement in security and compliance.

MOS is a small, US-based architecture and design practice with a strong focus on theoretical and experimental architecture, publishing, and exhibitions. The website serves as a comprehensive archive of their projects, writings, and exhibitions spanning over two decades, targeting architects, students, and design professionals. Technically, the site is built on WordPress with modern JavaScript libraries and hosted on Linode, offering good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

G

Generation Press

generationpress.co.uk

55

Generation Press is a small, niche sustainable printing company specializing in litho, digital, and foil-blocking printing services for international clients and artists. The company positions itself as a sustainable and corporate-certified printer, targeting environmentally conscious brands and individuals. The website is built on the Webflow platform, leveraging modern web technologies such as jQuery and Webflow's own scripts and CDN for content delivery. The site features a rich visual design with a carousel of high-quality images showcasing their work, indicating a focus on branding and visual appeal. From a security perspective, the website lacks visible security headers and privacy-related policies, which suggests room for improvement in compliance and security posture. The WHOIS data for the domain www.generationpress.co.uk is unavailable due to a registration error indicating the domain name contains too many parts, which is unusual for an active website and raises questions about domain legitimacy or alternative domain usage. No contact emails, phone numbers, or social media links were found, limiting direct communication channels and trust signals. Overall, the website presents a professional and visually appealing front for a sustainable printing business but requires enhancements in security, privacy compliance, and transparency to improve trustworthiness and regulatory adherence. The domain registration inconsistency is a notable risk factor that should be addressed to ensure legitimacy and reduce potential reputational risks.

L

Lézard Graphique

lezard-graphique.com

52

Lézard Graphique is a specialized printing and screen printing company with over 40 years of experience, focusing on high-quality communication and signage supports. The company serves graphic designers, cultural institutions, and private/public commissioners primarily in France but also internationally. Their website reflects a professional and well-established business with clear service offerings and a strong market position supported by awards and client trust. Technically, the website is built on WordPress with modern plugins and technologies, including Gravity Forms and Google reCAPTCHA, ensuring a good user experience and security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security practices are solid with HTTPS and form protections, though some improvements in security headers and DNSSEC could enhance the posture further. Overall, the website is trustworthy, well-maintained, and provides comprehensive contact and business information.

H

Harvey Lloyd Screens

harveylloydscreens.co.uk

55

Harvey Lloyd Screens is a small, established UK-based business specializing in bespoke screen printing services for artists, illustrators, and graphic designers. The company has a long history dating back to 1976 and operates an e-commerce platform hosted on Shopify, targeting creative professionals seeking high-quality screen printing solutions. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern Shopify infrastructure and scripts, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers are minimal. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the WHOIS data for the domain is unavailable due to domain naming rules errors, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced security headers and clearer business contact information.

E

EducaThyssen

educathyssen.org

59

EducaThyssen is an educational platform associated with the Museo Nacional Thyssen-Bornemisza in Madrid, Spain. It serves as a cultural and educational resource, complementing major art institutions in the city. The website provides educational content and resources aimed at a general audience interested in art and culture. The platform is positioned as a trusted source for museum-related educational materials, leveraging its association with a renowned national museum. Technically, the website is built on Drupal 10, utilizing modern tracking and consent management tools such as Google Tag Manager and CookiePro. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Security posture is strong with HTTPS enforcement and standard security headers, but lacks explicit security policy or vulnerability disclosure mechanisms. The absence of a clear privacy policy and terms of service pages slightly reduces compliance confidence. WHOIS data is unavailable or malformed, limiting domain trust verification, but the website content and official affiliations suggest legitimacy. Overall, EducaThyssen presents a professional, secure, and content-rich platform with room for improvement in privacy transparency and accessibility.

T

TINYCC

tiny.cc

66

Tiny.cc is a well-established URL shortening service operating since 2006, offering free and premium plans to general internet users and businesses. The service provides core features such as URL shortening, link editing, click statistics, QR code generation, and custom domains. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. The presence of a cookie consent banner and privacy policy indicates awareness of privacy compliance requirements. Technically, the site uses modern JavaScript libraries and third-party advertising and sharing tools, with HTTPS enforced ensuring secure communications. However, security headers and explicit security policies are not published, representing an area for improvement. WHOIS data confirms the domain's legitimacy and consistent registration details, supporting trustworthiness. Overall, the site is functional, secure, and credible with room for enhanced security transparency and contact information.

G

502 Bad Gateway

gofundme.com

43

The website www.gofundme.com is currently inaccessible, returning a 502 Bad Gateway error page with minimal HTML content. Due to this, no meaningful content, metadata, or business information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's privacy policies, security posture, or technical infrastructure. Consequently, the overall risk assessment is limited and the site is considered blocked or down at this time.

The domain prf.hn currently serves a 403 Forbidden error page, indicating that the website content is inaccessible or restricted. There is no visible content, metadata, or business information available on the site. The domain is registered with Gandi SAS since 2010, suggesting a long-standing registration, but no further business details or digital presence are evident. The technical infrastructure includes multiple authoritative DNS servers but lacks DNSSEC and visible security headers. The absence of HTTPS and security policies further limits the security posture assessment. Overall, the site appears inactive or intentionally blocked, resulting in a low confidence analysis and limited business insights.

G

Gorgias

gorgias.help

67

Gorgias is a technology company specializing in conversational AI platforms tailored for ecommerce businesses. Their platform integrates AI agents, helpdesk solutions, chat, and FAQ automation to enhance customer support and drive sales. Positioned as a leading solution trusted by over 15,000 brands, Gorgias targets ecommerce merchants seeking to automate and improve customer interactions. The website reflects a mature digital presence with professional design, clear messaging, and extensive use of modern marketing and analytics technologies. The technical infrastructure leverages Webflow CMS, Google Analytics, Amplitude, Facebook Pixel, and advanced A/B testing tools like VWO, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and technology use. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance transparency and trust.

FUNKE Mediengruppe is a prominent German media company operating in regional newspapers, magazines, and digital media. The website reflects a mature media group with a strong emphasis on quality journalism, sustainability, and diversity. Their digital presence is supported by modern technologies including Contao CMS and Vue.js, with integrated analytics via Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and professionally designed, targeting a broad audience interested in media and journalism. Security posture is solid with HTTPS enforced, though some security headers and incident response details could be improved. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the website projects high business credibility and trustworthiness.

R

Raufeld Medien GmbH

raufeld.de

60

Raufeld Medien GmbH is a well-established media and content agency based in Germany, specializing in storytelling, content marketing, CSR communication, corporate and public affairs, digital solutions, editorial and educational services, and events. The company has a strong market position with 20 years of experience and a professional digital presence. Their website is built on the Contao CMS platform and employs modern technologies such as Matomo for analytics and Cookiebot for consent management, reflecting a mature digital infrastructure. Security practices are solid, with HTTPS enforced and appropriate security headers in place, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

W

white label eCommerce GmbH

wlec.ag

57

Online-ticket.de operates as a German e-commerce platform specializing in the direct sale of tickets for a variety of events including concerts, festivals, comedy shows, musicals, and sports. The platform targets a broad audience of event-goers in Germany, providing official tickets directly from event organizers. The business is positioned as a niche player in the ticket retail market, leveraging a partnership with white label eCommerce GmbH for its platform infrastructure. The website demonstrates consistent branding and offers key services such as newsletter and event alarm subscriptions to engage customers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and custom scripts from the Youtix ticketing platform. Hosting is provided via Google Cloud DNS, indicating a reliable and scalable infrastructure. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with a valid GeoTrust SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt disclosures. No critical vulnerabilities or exposed sensitive data were detected. The site uses recognized payment methods and maintains trust signals such as social media presence and legal compliance links. Overall, online-ticket.de presents a trustworthy and professional e-commerce platform with a solid technical foundation and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

The website wfintern.de currently serves as a placeholder page with minimal content indicating that a new website is under construction. There is no substantive business information, contact details, or service descriptions available. The domain is hosted on servers associated with Agenturserver, a German hosting provider, but no registrant details or company information are provided to establish business identity or credibility. Technically, the site is very basic, consisting only of simple HTML and CSS without any advanced frameworks, scripts, or analytics integrations. Security posture is weak due to the absence of HTTPS and security headers, and there are no privacy or cookie policies to indicate compliance with data protection regulations. Overall, the site is not yet operational and lacks the elements necessary for a professional online presence.

C

C/O RED | Die Kreativagentur der FUNKE Medien NRW

co-red.de

39

C/O RED is a creative agency operating under the umbrella of FUNKE Medien NRW GmbH, specializing in branding, design, and campaign services primarily for media and marketing clients in Germany. The company emphasizes clear, individual design solutions and has a strategic partnership with ALTOBELLI agency to enhance service offerings. Their website reflects a professional and modern digital presence built on WordPress with SEO and consent management tools integrated. Security posture is solid with HTTPS and consent mechanisms, though some security headers and vulnerability disclosures are missing. Overall, the site is trustworthy and well-positioned in its market segment.

N

Netzwerk Cuba – informationsbüro – e.V.

netzwerk-cuba.org

52

Netzwerk Cuba – informationsbüro – e.V. is a German non-profit organization dedicated to solidarity with Cuba, providing information, campaigns, and organizing events to support Cuban causes. The website serves as a hub for news, official documents, and community engagement, targeting activists and supporters interested in Cuba-related political and social issues. The organization maintains a consistent brand presence and multilingual content to reach a broader audience. Technically, the website is built on WordPress using the Weaver Xtreme theme and several plugins for event management, email encoding, and newsletters. The site is moderately performant, mobile-optimized, and includes basic accessibility features. Security practices include HTTPS enforcement and email obfuscation, though it lacks some security headers and a cookie consent mechanism. The security posture is generally good with no detected vulnerabilities or malware, but the absence of WHOIS data due to a malformed or restricted WHOIS response limits full trust assessment. The site does not use tracking or advertising services, enhancing privacy compliance. Overall, the website is professional, content-rich, and trustworthy for its niche audience. Strategic recommendations include implementing security headers, adding a cookie consent banner for GDPR compliance, publishing a security.txt file for vulnerability disclosure, and improving WHOIS transparency to enhance trustworthiness and security posture.

L

LACTLD - ASOCIACIÓN DE CCTLD DE AMÉRICA LATINA Y EL CARIBE

lactld.org

55

LACTLD is a non-profit association representing the community of country code top-level domain (ccTLD) administrators in Latin America and the Caribbean. Founded in 1998 and based in Uruguay, it serves as a regional leader providing coordination, services, and advocacy for ccTLD operators. The website highlights key services such as a unified domain search tool and an Anycast DNS network to strengthen regional DNS infrastructure. The organization maintains an active presence through publications, events, and working groups, targeting domain administrators and stakeholders in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern CMS infrastructure with good SEO practices. The site is mobile-optimized and uses HTTPS, but lacks DNSSEC and security headers, which are recommended for enhanced security. Performance is moderate, with no significant issues detected. The site does not appear to use analytics or tracking tools, suggesting a privacy-conscious approach. From a security perspective, the domain registration is consistent and legitimate, with protective domain status flags in place. However, the absence of explicit privacy, cookie, and security policies on the website is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the security posture is adequate but could be improved by enabling DNSSEC and adding security headers. The website content is professional, relevant, and safe for general audiences, with no adult or questionable content detected. Contact information is limited to a phone number and physical address, with no email or contact forms visible. Social media links are present and active, enhancing trust and engagement. The overall risk is low, but strategic improvements in privacy compliance and security practices are recommended.

.

.EC DOMINIOS ECUADOR S.A.S

dominiosecuador.ec

49

The website dominiosecuador.ec represents .EC DOMINIOS ECUADOR S.A.S, a small Ecuadorian company specializing in domain registration, hosting, email, SSL certificates, and web design services. The site targets Ecuadorian businesses and entrepreneurs seeking digital presence solutions. The company positions itself as a local provider with a focus on .EC domains and related services. Technically, the website is built on the WHMCS platform using the Lagom template, incorporating modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and provides a user-friendly experience with clear navigation and active customer support chat integration. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, though GDPR compliance is not clearly demonstrated. WHOIS data confirms the legitimacy of the domain registration, matching the business claims and showing no suspicious patterns. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security policies and technical SEO could enhance its posture.

DIGITALECUADOR CIA LTDA is a small Ecuadorian technology company specializing in domain registration, web hosting, DNS server management, and web design services. The website targets individuals and businesses within Ecuador, offering localized services primarily through a WHMCS-powered platform. The business model focuses on providing essential internet infrastructure and web presence solutions to its regional market. The website content is primarily in Spanish with options for English and Portuguese, indicating a regional multilingual approach. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, FontAwesome icons, and Google Fonts. The use of WHMCS indicates a mature client management and e-commerce platform. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include CSRF tokens and Google reCAPTCHA integration, but no advanced security headers or explicit SSL/TLS configuration details were found in the provided content. From a security perspective, the site demonstrates basic protections but lacks published privacy, cookie, or terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is available. WHOIS data aligns well with the website's business identity, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the security posture is moderate but could be improved with enhanced policies, security headers, and transparency. The overall risk assessment suggests a functional and legitimate business website with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing contact transparency, and establishing vulnerability disclosure mechanisms to strengthen trust and compliance.