Security Directory

The website revistaidentidad.ec is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information. The site appears to be protected by a JavaScript challenge typical of Cloudflare, indicating a security posture that prioritizes bot mitigation but limits external analysis. Without access to actual site content, no metadata, forms, or external links can be analyzed. The lack of visible security headers or SSL configuration data further limits security assessment. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.

M

Modular DS

modulards.com

69

Modular DS is a Spanish-based technology company founded in 2021 that offers a SaaS platform focused on centralized management and automation of WordPress websites. Their platform provides key services such as automated maintenance, backups, uptime monitoring, vulnerability analysis, and reporting, targeting WordPress site managers, agencies, and freelancers. The website is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress CMS, WP Rocket for performance, and Google Analytics for tracking. Security posture is good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is basic with a cookie policy and consent mechanism present, but no explicit privacy policy or terms of service pages were found. Overall, the domain registration data is consistent and legitimate, supporting the business credibility. The site is free from adult or questionable content and is safe for general audiences.

C

Chatwoot

chatwoot.com

70

Chatwoot is a modern, open-source customer engagement platform that offers both self-hosted and cloud-based solutions. Positioned as an alternative to established players like Intercom and Zendesk, Chatwoot targets businesses seeking to manage all customer conversation channels from a unified platform. The website reflects a professional and consistent brand image with a clear focus on technology and customer support services. The technical infrastructure is built on modern web technologies including Nuxt.js and Tailwind CSS, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response details are not publicly available. Overall, the website is trustworthy and well-structured, but could benefit from enhanced transparency around privacy, security, and contact information.

I

InterBündnis

inter-buendnis.de

43

InterBündnis is a German non-profit political movement founded in 2016, uniting 40 organizations and 40,000 supporters against right-wing developments, fascism, war, and environmental destruction. The website serves as an information and coordination platform for progressive and revolutionary forces across Germany, promoting democratic and solidarity-based activism. The organization participates in elections through affiliated lists and campaigns against anti-communism. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted on rzone.de servers, and is mobile optimized with moderate performance. Security posture is basic with no visible security headers or published policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact is limited to email and social media channels. Overall, the site is trustworthy and safe, but improvements in security and compliance documentation are recommended.

B

booklooker.de: antiquarische und gebrauchte Bücher kaufen und verkaufen, Hörbücher, CDs, Filme und Spiele

booklooker.de

67

Booklooker.de operates as a specialized online marketplace focused on the buying and selling of used and antiquarian books, audiobooks, music, films, and games. Established since 1999, it serves a large customer base exceeding 4.1 million users, offering a secure shopping experience with buyer protection and personalized customer service. The platform provides extensive search and filtering capabilities, user account management, and a seller depot system, positioning itself as a trusted intermediary in the German retail media sector. Technically, the website employs modern web technologies including jQuery and jQuery UI for dynamic user interface elements, and integrates a consent management platform to ensure compliance with privacy regulations. The site is served over HTTPS with no detected blocking or WAF interference, indicating good accessibility and security practices. However, some security headers are missing, which could be improved to enhance protection against common web threats. From a security perspective, the site demonstrates a mature posture with encrypted communications, secure login forms, and no visible exposure of sensitive data. Privacy policies and cookie consent mechanisms are clearly implemented, supporting GDPR compliance. The absence of direct contact emails or phone numbers is mitigated by a contact form, though adding verified contact details could improve trust. The domain registration is consistent with the website branding, though WHOIS data is limited due to DENIC privacy restrictions. Overall, booklooker.de presents a professional, secure, and user-friendly platform with a strong market position in the German used media retail sector. Strategic improvements in security headers and enhanced transparency in contact information could further strengthen its trustworthiness and compliance posture.

P

Plone Foundation

plone.org

65

Plone.org represents the Plone Foundation, a well-established non-profit organization that develops and maintains Plone, an open-source content management system with over 20 years of history. The website serves a diverse audience including content editors, developers, and decision makers, offering software downloads, documentation, training, and community engagement. The foundation's market position is strong within the open-source CMS space, emphasizing security, stability, and extensibility. Technically, the site leverages a modern stack including Python backend and React frontend, with Cloudflare DNS and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, domain transfer protections, and active security advisories, although DNSSEC is not enabled and explicit security policies could be more visible. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and technically sound, reflecting the maturity and community-driven nature of the Plone project.

P

People to People

people-to-people.de

58

People to People is a German-based small business specializing in socially conscious group travel, cultural products, books, and specialty goods. Their website reflects a niche market focus with offerings that combine e-commerce and travel services. The technical infrastructure is based on Shopware CMS with Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of direct contact emails and phone numbers reduces immediate customer trust signals. Overall, the website is accessible, well-structured, and professionally presented but could improve in privacy compliance and security best practices.

T

Tito

ti.to

53

Tito is a technology company specializing in simple and powerful event registration software, offering SaaS solutions for event organizers to sell tickets and manage check-ins efficiently. The website demonstrates a modern technical infrastructure built on Vue.js and BootstrapVue frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie management, though explicit privacy and terms of service pages are absent. Overall, the site is professional and trustworthy, targeting event organizers and attendees with clear business focus and minimal tracking.

U

United Front

united-front.info

44

United Front is an international antiimperialist coalition focused on combating fascism, war, and environmental destruction. The organization hosts congresses, webinars, and publishes resolutions to coordinate efforts among over 120 member organizations and individuals worldwide. The website serves as an informational and organizational platform for these activities, targeting activists and political groups globally. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, intl-tel-input, and Summernote for rich text editing. Google Analytics is integrated for visitor tracking. The site is mobile-optimized with a moderate performance profile. However, there is no evidence of a CMS or advanced hosting details. The website lacks explicit privacy and cookie policies, which is a gap in compliance. From a security perspective, the site uses HTTPS and external secure resources but lacks visible security headers and formal security policies. No contact information or incident response channels are provided, limiting transparency. The WHOIS data is unavailable due to registry limitations or privacy protection, which is understandable given the political nature of the organization but reduces trust slightly. Overall, the website is functional and informative but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen trust and security posture.

R

RaveCapture

ravecapture.com

52

RaveCapture is a SaaS platform specializing in ecommerce reviews, user-generated content (UGC), and customer experience surveys. Founded in 2023 and based in the United States, it targets ecommerce merchants seeking to build trust and increase sales through authentic customer feedback and visual content. The company positions itself as a user-friendly alternative to larger review platforms, emphasizing personalized support and no-contract pricing. The website is professionally designed with comprehensive content, clear navigation, and strong branding consistency, supported by customer case studies and testimonials that enhance credibility. Technically, the website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Intercom. Hosting is via Amazon AWS, and the site employs HTTPS with a good SSL configuration. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. The site lacks DNSSEC and some recommended security headers like Content-Security-Policy and Referrer-Policy. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but could enhance its security posture by enabling DNSSEC and adding missing headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism was found. Contact information is available, including a physical address and verified support email. Overall, RaveCapture presents a trustworthy and professional online presence with a solid technical foundation and good security practices. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its posture. The domain registration details align well with the company's claimed history and operations, supporting legitimacy and trustworthiness.

M

motor-traffic.de

motor-traffic.de

54

motor-traffic.de is a German-language online news portal specializing in mobility and automotive topics, including automobiles, motorcycles, commercial vehicles, bicycles, technology, environment, and traffic. The site targets German-speaking readers interested in current mobility news and industry developments. It operates as a niche media outlet providing categorized news articles, event coverage, and RSS feeds. The business model centers on content publishing and dissemination within the transportation and media sectors. The website presents a consistent brand with good content quality and clear navigation.

W

WITTMANN MEDIA

umwelt-panorama.de

56

Umwelt-Panorama.de is a German-language online news portal specializing in environment, energy, climate protection, nature conservation, and scientific topics. Operated by WITTMANN MEDIA since at least 2015, it targets environmentally conscious German-speaking audiences with regularly updated news articles and press releases. The business model relies primarily on advertising revenue, with Google Adsense integrated prominently across the site. The website presents a professional design with clear navigation and mobile optimization, supporting a good user experience.

MOTOR-EXCLUSIVE.de is a German-language online media platform specializing in automotive and motorcycle news, reviews, and service advice. The website targets automotive enthusiasts and the German-speaking market, offering regularly updated content including news articles, vehicle reviews, and motorsport coverage. The business operates under the parent company WITTMANN-MEDIA and maintains partnerships with automotive parts suppliers, supporting its content with relevant advertising and affiliate links. Technically, the website employs a modern tech stack including jQuery and Bootstrap for responsive design, with analytics provided by Google Analytics and Blogfoster Insights. Hosting is managed by 1&1 IONOS, a reputable provider. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Some external scripts are loaded over HTTP, which introduces mixed content risks. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No contact information or terms of service pages are readily visible, which may impact user trust and compliance transparency. Overall, the website presents a professional and content-rich experience with moderate security and privacy compliance. Strategic improvements in security headers, HTTPS enforcement for all resources, and enhanced transparency in contact and policy information would strengthen its security posture and user trust.

CARAVAN-NEWS.de is a German online media portal specializing in news, tests, guides, and travel information related to caravans, motorhomes, and automotive topics. The site targets caravan enthusiasts and travelers primarily in Germany, offering regularly updated content and advertising space. The business operates as a small media entity under WITTMANN-MEDIA.de, with a consistent brand presence and a focused niche market. Technically, the website uses a modern tech stack including jQuery, Foundation CSS, Google Fonts, and Google Analytics, with responsive design and basic SEO optimizations. Security posture is moderate; HTTPS is used, but no explicit security headers were detected, and no dedicated security or incident response pages are present. Privacy compliance is adequate with a GDPR-compliant privacy policy and cookie consent banner. Overall, the site is professional and trustworthy but could improve security and transparency aspects.

S

SuperSparReisen.de

super-spar-reisen.de

52

SuperSparReisen.de is an online travel agency specializing in last minute travel deals, package holidays, hotel bookings, flights, and vacation homes primarily targeting German-speaking customers. The website offers a range of travel services with a focus on affordability and convenience, positioning itself as a niche player in the budget travel market. The business model revolves around providing users with easy access to travel packages and related services through a modern web platform. Technically, the site is built using Angular framework with Bootstrap and other popular front-end libraries, ensuring a responsive and user-friendly experience. However, some areas such as cookie consent and privacy compliance could be improved to meet GDPR standards more fully. Security-wise, the site uses HTTPS but lacks advanced security headers and published policies, indicating room for enhancement in security posture. Overall, the website is functional, professional, and trustworthy but would benefit from stronger privacy and security practices.

S

Smart Home News, Produkte, Projekte - SMARTHOME-on.de

smarthome-on.de

52

SMARTHOME-on.de is a German-language niche media website focused on smart home technology, home automation, and related lifestyle topics including finance and health. The site provides news articles, product reviews, and project showcases targeting German-speaking consumers interested in smart home solutions. The business model appears to rely on content publishing combined with affiliate marketing, notably through Amazon affiliate links. The website is small in scale and serves a specialized audience with consistent branding and good content quality. Technically, the site uses a custom or unknown CMS with a technology stack based on jQuery and various UI plugins for sliders and carousels. Google Analytics is used for visitor tracking. The site is served over HTTPS with moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No major technical red flags were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which impacts compliance and trust. No contact information or incident response details are published. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a small niche site. Overall, the security posture is moderate but could be improved with better policies and headers. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, adding security headers, improving contact transparency, and enhancing mobile and accessibility features to strengthen trust and compliance.

W

WITTMANN MEDIA

unternehmen-heute.de

56

UNTERNEHMEN-HEUTE.de is a German-language online news portal operated by WITTMANN MEDIA, focusing on business, finance, technology, politics, motor industry, and environmental news. The website provides regularly updated news articles, press releases, and multimedia content targeting German-speaking professionals and the general public interested in these sectors. The business model centers on news publishing and press release distribution, supplemented by advertising and partner promotions. The site holds a niche position within the German media landscape with a small operational size. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, Google Tag Manager, CookieConsent2, Google Fonts, and embedded YouTube videos. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The site uses multiple external resources and CDNs for fonts, scripts, and media. From a security perspective, the website uses HTTPS (assumed but not explicitly confirmed in HTML), implements a cookie consent mechanism, and includes Google site verification. However, it lacks explicit security headers such as CSP, HSTS, and X-Frame-Options, which are recommended for enhanced security. No incident response or vulnerability disclosure policies are found. The WHOIS data indicates a consistent domain registration with no privacy protection, aligning with the website operator's identity. Overall, the website is functional, professionally designed, and trustworthy for its intended audience. Security posture is moderate with room for improvement in headers and policies. Privacy compliance is basic but present. Strategic recommendations include enhancing security headers, publishing terms of service, and adding more comprehensive contact information to improve trust and compliance.

ALLRAD-NEWS.de is a German-language online news portal specializing in all-wheel drive vehicles, SUVs, and related automotive topics. The website provides news articles, vehicle reviews, press releases, and guides targeted at automotive enthusiasts and potential buyers interested in 4x4 and SUV vehicles. The business operates as a small content publisher with advertising partnerships and a niche market focus within the transportation and media sectors. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics for visitor tracking and a cookie consent mechanism to comply with GDPR requirements. The site is hosted on UI-DNS nameservers and uses HTTPS with a good SSL configuration. Security posture is moderate, with room for improvement in security headers and explicit incident response contact information. Privacy compliance is good, with a visible privacy policy and cookie consent banner. Overall, the website presents a professional and trustworthy appearance with consistent branding and relevant content for its target audience.

W

WITTMANN-MEDIA

motorzeitung.de

54

MotorZeitung.de is a German-language online media portal specializing in automotive and motorcycle news, reviews, and related content. Operated by WITTMANN-MEDIA, it targets automotive enthusiasts and general readers interested in transport and mobility topics. The site offers diverse content categories including auto, motorcycle, travel, and technical knowledge, supported by affiliate partnerships and advertising. The website demonstrates a consistent brand presence with good content quality and user experience.

AUTO-PRESSE.de is a German automotive news and media portal operated by WITTMANN MEDIA, providing a wide range of content including car news, test reports, new model introductions, e-bike information, travel tips, and automotive guides. The website targets German-speaking automotive enthusiasts and consumers, positioning itself as a niche media platform with a focus on automotive transportation topics. The business model is primarily content publishing supported by advertising and affiliate partnerships with automotive parts and service providers. Technically, the website uses a combination of jQuery, Owl Carousel, Retina.js, and FontAwesome for frontend functionality and styling. The site appears to be custom-built or uses an unknown CMS, with moderate performance and good mobile optimization. SEO practices are adequate with proper meta tags and structured navigation. Cookie consent is implemented, indicating attention to privacy compliance, though no explicit terms of service or security policies are found. From a security perspective, HTTPS usage is implied but no security headers were detected in the provided data. The site lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or malware indicators were found, but security posture could be improved by adding security headers and explicit policies. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the website is accessible with no WAF or blocking mechanisms detected. The domain registration is consistent with the business age and sector, and no suspicious WHOIS patterns were found. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing terms of service, and expanding contact information to improve trust and compliance.

A

autoexport-regional.de

autoexport-regional.de

39

Autoexport Regional is a small German-based vehicle export service specializing in buying and exporting cars and trucks of all conditions, including damaged and non-TÜV vehicles. The company emphasizes fast, uncomplicated sales with free vehicle pickup across Germany. Their website is built on WordPress using modern plugins and themes, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and secure form handling, though lacking explicit security policies and cookie consent mechanisms. Overall, the business appears legitimate and trustworthy with clear contact channels and partner references.

T

TurnCommerce, Inc. DBA NameBright.com

webhash.com

56

WebHash operates as a decentralized web infrastructure platform focused on providing permanent, censorship-resistant website hosting and fast decentralized gateways. The company targets developers, node operators, and no-code users, offering a layered protocol architecture including hosting, gateway, and application layers. Their services include node operation with rewards, no-code website building, and developer-focused deployment platforms. The website is professionally designed with clear navigation and strong branding consistency, reflecting a mature technology business founded in 2009. Technically, the site uses modern JavaScript modules, Cloudflare DNS, and references EVM-compatible smart contracts, indicating a sophisticated decentralized infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, safe, and well-positioned in the decentralized web technology sector.

Z

Zavis Inc.

zavis.ai

59

Zavis Inc. operates a professional and modern website offering AI-powered business automation solutions focused on WhatsApp Business, AI cloud call centers, and omnichannel customer engagement. The company targets businesses seeking to scale customer interactions efficiently using advanced AI technologies. Their market position is that of a specialized SaaS provider delivering full-stack AI solutions for customer communication and engagement across multiple platforms including WhatsApp, Instagram, and voice calls. The website demonstrates a high level of digital maturity with a modern React/Next.js tech stack, embedded multimedia content, and integration of multiple analytics and marketing tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not clearly presented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting a positive business credibility profile.

J

JungeWelt Shop

jungewelt-shop.de

51

JungeWelt Shop is a German e-commerce platform specializing in the sale of media products such as DVDs, books, postcards, and merchandise related to the JungeWelt brand. The website targets German-speaking customers interested in JungeWelt publications and associated cultural products. The business operates a niche online retail model with a focused product catalog. Technically, the site uses modern web technologies including jQuery, Bootstrap, and integrates PayPal for payments, indicating a moderate level of digital maturity. The website is mobile optimized and provides a basic but functional user experience. Security posture is adequate with HTTPS enabled and secure login forms, but lacks visible security headers and comprehensive privacy or cookie policies, which are important for GDPR compliance. No contact information or incident response details are publicly available, limiting transparency. Overall, the site is functional and moderately secure but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

V

Verlag 8. Mai GmbH

unblock-cuba.org

46

The website www.unblock-cuba.org is a German-language non-profit advocacy platform dedicated to ending the US economic blockade against Cuba. It is operated by Verlag 8. Mai GmbH and serves as a hub for information dissemination, campaign coordination, and donation collection. The site targets activists and supporters interested in Cuba solidarity, providing multilingual resources and calls to action. The business model is donation-based, focusing on political advocacy rather than commercial services. Technically, the site is built on WordPress 6.8.3 using the GeneratePress theme and several plugins including Contact Form 7 and DSGVO cookie compliance tools. It employs HTTPS with a valid SSL certificate, ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. No advanced frameworks beyond WordPress are detected. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks advanced security headers and publicly available security policies or incident response information. No vulnerabilities or malicious indicators are found, but the absence of WHOIS data limits domain trust assessment. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a trustworthy and professional front for a small non-profit campaign. Recommendations include enhancing security headers, publishing security and incident response policies, and improving contact transparency. The domain's missing WHOIS data is a concern but does not currently indicate malicious intent. The site is safe for general audiences and free from adult or questionable content.

W

white label eCommerce GmbH

radiosparbox.de

63

RadioSparBox is an e-commerce platform operated by white label eCommerce GmbH, specializing in selling tickets and vouchers for a variety of entertainment and leisure activities including concerts, festivals, sports events, and restaurants. The platform targets regional customers in Germany, offering exclusive discounts up to 50%, positioning itself as a regional niche player in the entertainment e-commerce market. The website is professionally designed with clear navigation and a good user experience, supporting multiple payment methods and integrating marketing and analytics tools with user consent mechanisms.

R

regioshop

dein-shop.de

59

Dein Shop is a German e-commerce platform operating under the brand 'regioshop', offering a broad range of consumer products across categories such as home, lifestyle, health, and seasonal goods. The website is built on the Shopware CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Friendly Captcha for enhanced user experience and security. The site demonstrates good design quality, clear navigation, and mobile optimization, targeting a general audience in Germany with a medium-sized market presence. From a technical perspective, the website employs HTTPS with strong security headers, uses CAPTCHA to protect forms, and integrates multiple analytics and tracking tools with some consent mechanisms in place. However, the privacy and cookie policies are basic, and there is no dedicated security policy or incident response information published. The domain WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The website complies with GDPR to a basic extent, providing privacy and cookie policies and mechanisms for user consent. Business credibility is supported by professional content, consistent branding, and trust indicators such as HTTPS and contact options. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and transparency regarding security policies.

W

Westfunk GmbH & Co. KG

westfunk.de

52

Westfunk GmbH & Co. KG is a regional media service company based in Essen, Germany, specializing in local radio broadcasting and advertising services. As part of the FUNKE MEDIENGRUPPE, it serves as the backbone for twelve independent local radio stations across the Ruhrgebiet, Niederrhein, and Sauerland regions. The company offers technical, marketing, and digital product services to local radio stations and provides advertising sales support through FUNKE MediaSales. The website reflects a strong market position as a regional market leader in several broadcast areas, supported by professional content and clear business messaging. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. It employs Google Tag Manager for analytics and uses a consent management platform for GDPR-compliant cookie handling. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, indicating a secure and modern infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, Westfunk's website demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features to further strengthen the site’s security and user experience.

FUNKE Mediengruppe is a large German media company active in regional newspapers, magazines, and digital media. The website reflects a professional media group with a clear focus on quality journalism and corporate responsibility, including sustainability and diversity. The technical infrastructure is modern, leveraging Contao CMS and popular JavaScript frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and well-maintained, supporting a broad audience interested in media and journalism.

ZEIT Akademie is a reputable digital education platform operated by the ZEIT Verlagsgruppe, offering over 80 online courses across diverse fields for private and professional learners. The platform targets knowledge seekers and professionals up to top management, providing flexible subscription models and high-quality content delivered by expert instructors. Technically, the website is built on WordPress with WooCommerce integration, hosted on DigitalOcean, and employs modern analytics and monitoring tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and New Relic. The site demonstrates good SEO and mobile optimization, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and use of security best practices, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-positioned in the digital education market.

Z

Zeitverlag Gerd Bucerius GmbH & Co. KG

zeit-verlagsgruppe.de

51

Die ZEIT Verlagsgruppe ist ein etabliertes und renommiertes Medienunternehmen mit einem breiten Portfolio an Print-, Online-, Audio- und Eventangeboten. Die Website präsentiert das Unternehmen als innovativ und engagiert mit einer starken Medienmarke und einem exzellenten Bildungsprogramm. Technisch basiert die Website auf WordPress mit modernen Plugins und Frameworks, bietet gute mobile Optimierung und eine professionelle Nutzererfahrung. Die Sicherheitslage ist solide mit HTTPS, Cookie-Consent-Management und reCAPTCHA, jedoch fehlen öffentlich zugängliche Sicherheitsrichtlinien und Incident-Response-Kontakte. Insgesamt ist die Website vertrauenswürdig, gut gepflegt und entspricht den Datenschutzanforderungen.

N

Nordkurier

nordkurier.de

63

Nordkurier.de is a regional news portal serving Mecklenburg-Vorpommern and Brandenburg in Germany, providing local news, e-paper services, job listings, and event calendars. The website targets residents and readers interested in regional news and operates a subscription-based business model supplemented by advertising revenue. The site uses modern web technologies including React and Next.js, and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Microsoft Clarity. Consent management is implemented, indicating GDPR awareness, though explicit privacy and terms of service documents were not found in the provided content. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response contacts. Overall, the site is professional, well-branded, and trustworthy for its target audience.

NIC.ec, operated by ECUADORDOMAIN S.A., is the official registry and registrar for Ecuador's .ec country code top-level domain. The website provides domain search, registration, and management services targeting individuals, businesses, and government entities within Ecuador. It holds multiple official accreditations such as ICANN, IANA, LACNIC, and LACTLD, reinforcing its authoritative position in the domain registration market. The site also promotes partnerships with registrar agents and offers specialized services for government and military domains. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, Google Analytics, Yandex Metrika, and Chatwoot for live chat support. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms. The site is mobile optimized and features good navigation and content quality. However, no explicit CMS or hosting provider information is detected, suggesting a custom-built platform. From a security perspective, the site follows best practices such as HTTPS enforcement, CSRF tokens, and reCAPTCHA integration. While security headers are not explicitly visible in the HTML, the site does not expose sensitive data or show signs of vulnerabilities. The absence of a published security policy or incident response contact is noted. Extensive tracking and marketing tools are used, indicating a moderate to extensive user tracking level, with basic privacy compliance. Overall, NIC.ec presents a trustworthy and professional online presence consistent with its role as Ecuador's official domain registry. Recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

S

Shop Houzz

shophouzz.com

72

Shop Houzz operates as an e-commerce platform specializing in home furniture, lighting, and decor products. The website is built on the Shopify platform, leveraging a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for product reviews. The site targets consumers looking for home essentials and offers a broad product catalog with clear navigation and a professional design. The business model is retail-focused, serving the US market primarily. Technically, the site is well-structured with good mobile optimization and moderate performance, hosted on Shopify's CDN infrastructure. Security posture is adequate with HTTPS enforced and use of fraud prevention services, though explicit security headers and dedicated security policies are not visible. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security best practices.

Horde is a Swiss-based strategic and creative communication agency with offices in Lausanne, Zürich, Genève, and Valais. The company offers a broad range of services including design, advertising, digital strategy, motion design, and copywriting. It serves a diverse clientele including major brands such as Migros, Swiss International Air Lines, Nespresso, and Tesla, positioning itself as a reputable medium-sized agency in the Swiss media and advertising market. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with advanced SEO and performance optimizations, leveraging tools like Yoast SEO, WP Rocket, and Google Tag Manager. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though explicit security policies and cookie consent mechanisms are absent. Overall, the site demonstrates strong business credibility and technical maturity but would benefit from enhanced privacy and security disclosures.

M

Mutual Aid LA Network

mutualaidla.org

58

Mutual Aid LA Network is a small non-profit organization serving as a connector and information hub for mutual aid efforts across Los Angeles. The website provides information about their projects, resource directories, and community engagement opportunities. Their market position is focused on local community solidarity and abolitionist principles, supporting mutual aid groups and individuals through various projects and donations. Technically, the website is built on WordPress.com using Jetpack and Gutenberg, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain registrar locks but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and safe for general audiences but could improve in privacy and security transparency.

G

Grief and Hope Los Angeles

griefandhopela.com

59

Grief and Hope Los Angeles is a small non-profit volunteer organization focused on raising funds to support artists and art workers affected by the Los Angeles fires in January 2025. The website is hosted on Squarespace and uses a clean, professional design with clear calls to action directing visitors to donate via GoFundMe. The technical infrastructure is modern and secure, with HTTPS and HSTS enabled, but lacks advanced security headers and privacy compliance features. No contact information or privacy policies are present, which limits trust and compliance. The domain WHOIS data is unavailable, raising questions about domain registration status and legitimacy, though the website content and hosting suggest a genuine community effort.

R

rauminhalt

rauminhalt.com

50

The website www.rauminhalt.com represents an art gallery platform named Rauminhalt_Harald Bichler, focusing on contemporary art at the intersection of art and design. The business appears to be a small-scale gallery based in Austria, targeting art enthusiasts and professionals interested in interdisciplinary art forms. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of technical maturity. The website design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of privacy, cookie, and terms of service policies, as well as missing contact information, limits the site's compliance and business credibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible and safe but requires improvements in compliance, security best practices, and business transparency.

M

Museo Nacional Thyssen-Bornemisza

museothyssen.org

65

Museo Nacional Thyssen-Bornemisza is a prominent national art museum located in Madrid, Spain, forming part of the renowned 'Paseo del Arte' cultural corridor alongside Museo del Prado and Centro de Arte Reina Sofía. The museum offers a rich collection of Western art from the 13th to the 20th century, complemented by temporary exhibitions, educational activities, and a museum shop. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting general public and art enthusiasts. Technically, the site is built on Drupal 10, integrates Google Tag Manager and Google Optimize for analytics and marketing, and employs CookiePro for GDPR-compliant cookie consent management. Security posture is strong with HTTPS enforced and privacy-conscious analytics activation, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, but the website's branding and content indicate legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations, serving as a reliable digital front for the museum.

A

Antica Terra

anticaterra.com

57

Antica Terra is a boutique winery and hospitality business based in Amity, Oregon, with a strong focus on direct-to-consumer wine sales, exclusive membership programs, and curated wine experiences. The website reflects a professional and consistent brand image targeting wine enthusiasts and mature audiences. Technically, the site is built on WordPress with integrations such as Gravity Forms, Google Analytics, Klaviyo, and Commerce7, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and contact information. Security posture is adequate with HTTPS and form CAPTCHA, but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are published, which are compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Marta Editions

marta-editions.com

66

Marta Editions is a specialized e-commerce business focused on releasing limited edition, numbered art prints in collaboration with artists and architectural firms. The website presents a professional and curated experience targeting art collectors and enthusiasts. Technically, the site leverages modern frameworks such as Nuxt.js and integrates Shopify for commerce, supported by Sanity.io as a CMS. The site is well-optimized for mobile and SEO, with fast performance and clear navigation. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. WHOIS data is missing, which raises some concerns about domain legitimacy, but the overall professional presentation and detailed policies suggest a legitimate business. Strategic recommendations include adding security headers, implementing cookie consent, and monitoring domain registration status to improve trust and compliance.

A

Autodesk, Inc.

spacemaker.ai

73

Autodesk, Inc. is a leading global provider of design and engineering software solutions, with a strong market position in the Architecture, Engineering, and Construction (AEC) sector. The Forma Site Design product is a cloud-based software offering AI-powered tools for concept and schematic design, targeting professionals in the AEC industry. The website is hosted on the official Autodesk domain, featuring a professional design and comprehensive product information, supporting a SaaS subscription business model. The company is well-established, founded in 1982, and operates at an enterprise scale. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and advanced monitoring and analytics tools such as Dynatrace and Adobe Target. The site demonstrates excellent performance, mobile optimization, and accessibility, with strong SEO practices. Security is robust with HTTPS enforced, comprehensive security headers, and monitoring in place, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. However, explicit contact information such as emails or phone numbers was not found on this page, which is typical for large enterprise sites that centralize contact through support portals. WHOIS data is unavailable, likely due to privacy protection or registrar restrictions, but the domain's legitimacy is supported by the official Autodesk branding and infrastructure. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. Strategic recommendations include maintaining up-to-date security audits, monitoring third-party scripts, and enhancing direct contact availability for improved user support.

A

Autodesk

autodesk.eu

72

Autodesk is a globally recognized leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The website reflects a mature enterprise-grade digital presence with strong branding and internationalization support. The technical infrastructure leverages modern web technologies, Adobe Experience Manager CMS, and advanced monitoring via Dynatrace, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and monitoring in place, though explicit security policies and vulnerability disclosures are not publicly visible. Privacy compliance appears limited in the provided content, lacking clear privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve transparency on privacy and security policies.

A

Autodesk, Inc.

plangrid.com

69

Autodesk Construction Cloud's PlanGrid product is a leading construction productivity software that provides real-time access to project plans, issues, photos, and forms for general contractors, subcontractors, and owners. It is integrated into the broader Autodesk Construction Cloud ecosystem, offering a comprehensive SaaS solution for construction management. The website demonstrates a high level of professionalism, with clear navigation, mobile optimization, and extensive content relevant to its target audience. Technically, the site leverages modern frameworks such as React and Next.js, and integrates multiple marketing and analytics tools including Marketo, Tealium, and 6sense. Security posture is strong with HTTPS enforced and use of secure cookies, though explicit security headers could be more visible. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence consistent with an enterprise-level technology provider.

M

Ministry of Interior

nasiukrajinci.cz

66

The website nasiukrajinci.cz is an official Czech government platform managed by the Ministry of Interior, providing comprehensive information and resources to support Ukrainian refugees in the Czech Republic. It offers multilingual content covering legal stay, financial aid, healthcare, education, employment, and additional assistance. The site also targets Czech citizens and organizations willing to help Ukrainians, positioning itself as a central information hub in this humanitarian context. The business model is public service oriented, with no commercial intent, focusing on accessibility and clarity. Technically, the website is built on modern web technologies including React and Next.js, hosted on Azure DNS infrastructure. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for government services. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official nature of the site, showing consistent registration and domain age appropriate for the service's launch in 2022. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for incident response to further strengthen trust and compliance.

N

Národní plán obnovy, Ministerstvo průmyslu a obchodu ČR

planobnovycr.cz

46

The website planobnovy.gov.cz represents the official National Recovery Plan (Národní plán obnovy) coordinated by the Ministry of Industry and Trade of the Czech Republic. It serves as a government platform to communicate reforms and investments funded by the European Union, aimed at modernizing the Czech Republic across multiple sectors including digital transformation, green energy, education, and public administration. The site is well-positioned as a key government initiative with strong branding and clear messaging targeted at Czech citizens, public institutions, and stakeholders involved in national development. Technically, the website is built on a modern WordPress CMS platform, leveraging Bootstrap for responsive design, FontAwesome for icons, and several plugins including Complianz for GDPR compliance and Lightbox Photoswipe for media display. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, though some HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the security posture is solid for a government site, with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is likely due to privacy protection, which is justified given the nature of the domain. The site maintains compliance with GDPR and provides clear privacy and cookie policies. The risk assessment is low, with no suspicious content or security red flags detected.

N

National Agency for Communication and Information Technologies

nakit.cz

56

NAKIT is a Czech government agency specializing in providing communication and information technology services to public administration and eGovernment sectors. Established in 2015, it serves as a strategic partner for state ICT infrastructure, application development, and cybersecurity. The agency targets public administration bodies, the Integrated Rescue System, and internal ICT systems within the Ministry of the Interior. The website reflects a professional government presence with clear service offerings and official contact information. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for mobile devices and SEO-friendly through the Yoast SEO plugin. Performance is moderate with good design and navigation clarity. However, some accessibility features could be improved. Security posture is adequate with HTTPS usage but lacks visible security headers and published security policies. Security-wise, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response and vulnerability disclosure information, indicates compliance gaps. The WHOIS data confirms domain legitimacy and consistency with the agency's public profile. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

Czech POINT is an official Czech government digital service platform managed by the Digitální a informační agentura. It provides verified outputs from public administration information systems to the general public, government officials, and system administrators. The platform offers a variety of services including document verification, statistical information, and developer resources, positioning itself as a key government digital service in the Czech Republic. The website is well-branded, professionally designed, and targets a broad audience including citizens and officials. Technically, the website is built on WordPress with custom government-themed components and uses modern web technologies such as jQuery and a government design system. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. HTTPS is enforced, ensuring secure communication, although some security headers are missing which could be improved. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present, which could enhance trust and preparedness. Privacy compliance is addressed with GDPR and cookie policies, though a cookie consent mechanism is not evident. Overall, the site is trustworthy and professional, with strong government affiliation and clear contact information. The lack of WHOIS data is likely due to CZ NIC policies rather than suspicious activity. Strategic recommendations include enhancing security headers, adding incident response details, and implementing cookie consent mechanisms to improve compliance and security posture.

Ú

ÚZIS ČR

nzip.cz

60

The website www.nzip.cz serves as the National Health Information Portal of the Czech Republic, operated by the Ústav zdravotnických informací a statistiky České republiky (ÚZIS ČR). It provides authoritative and guaranteed information on healthy lifestyles, diseases, medical advice, and contact details for healthcare providers. The portal targets the general public seeking reliable health information. Technically, the site employs modern web technologies including JavaScript and CSS, and uses Matomo analytics hosted on a related domain, indicating a focus on privacy. The site is accessible without any WAF or blocking mechanisms and is optimized for mobile and accessibility standards. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and terms policies. WHOIS data is unavailable, which slightly reduces trust but does not detract from the site's legitimacy given its governmental affiliation. Overall, the site is professional, trustworthy, and serves an essential public health function.

The website info.mojedatovaschranka.cz serves as an official government portal providing comprehensive information and services related to 'Datové schránky' (Data Mailboxes), a digital communication system between citizens, businesses, and government institutions in the Czech Republic. Operated by Česká pošta, s.p., the portal offers detailed guidance, multiple secure login methods, technical requirements, and up-to-date news, positioning itself as a trusted and authoritative source for electronic communication with the state. From a technical perspective, the site employs modern web technologies including jQuery, Slick Carousel, and a government design system ensuring good mobile optimization, accessibility, and user experience. The integration of a chatbot enhances user support. While performance is moderate, the site is well-structured and SEO optimized, reflecting a mature digital infrastructure. Security-wise, the portal enforces HTTPS and offers multiple secure authentication methods such as mobile keys and citizen identity logins. However, explicit security headers are not detected, and no vulnerability disclosure or incident response contacts are published, indicating areas for improvement. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though cookie consent mechanisms are absent. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility as a government service portal. The lack of WHOIS data for the subdomain is noted but does not detract from legitimacy given the official branding and content. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing vulnerability disclosure information to further strengthen security posture and user trust.