Security Directory

Luigi's Box is a Czech Republic-based logistics and storage service provider specializing in e-commerce fulfillment and retail storage solutions. The company targets e-commerce businesses and retail customers, offering integrated digital platforms for efficient logistics management. The website reflects a medium-sized business with a consistent brand presence and professional content tailored to its market segment. Technically, the site employs modern JavaScript lazy loading techniques and Google Tag Manager for analytics, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and professional, though WHOIS data is unavailable, limiting domain registration trust analysis.

Assiste is a Brazilian company specializing in fleet maintenance systems and related technical advisory services. Their website presents a professional image with a clear focus on B2B clients needing fleet management and industrial maintenance solutions. The site offers multiple contact channels including a contact form protected by Google reCAPTCHA, email addresses, phone numbers, and a physical address in Piracicaba, Brazil. The company integrates Google Maps for location display and maintains a LinkedIn presence, indicating a moderate digital maturity. Technically, the site uses a mix of modern and legacy technologies including Bootstrap and an older jQuery version, with Google Analytics and Tag Manager for tracking. Security measures include HTTPS and reCAPTCHA, but lack explicit security headers and use of outdated libraries pose some risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in security and privacy transparency.

Xemel, operated by Trayto a.s., is a specialized SaaS platform focused on feed management for e-commerce businesses. It offers a comprehensive suite of tools including online XML/CSV feed editing, custom feed creation, AI-generated product descriptions, supplier feed integration, and bidding management on comparison shopping engines. The company targets e-shops, agencies, and firms seeking to optimize their product data feeds and advertising efforts, with a strong presence in the Czech and Slovak markets. The website demonstrates a professional and consistent brand image, supported by numerous client testimonials and partnerships with major e-commerce platforms and marketplaces. Technically, the website is well-structured with modern HTML5 and CSS3 technologies, optimized for mobile devices and fast performance. While no CMS or hosting provider is explicitly identified, the site shows good SEO and accessibility practices. Security-wise, the site enforces HTTPS and employs feed URL hashing for obscurity, but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. The absence of WHOIS data reduces domain registration trust but does not detract from the business legitimacy evidenced by client references and partnerships. Overall, Xemel presents a mature digital presence with strong business credibility and a solid technical foundation. Security posture is good but can be improved by implementing standard security headers and explicit privacy consent mechanisms. The company should also consider publishing incident response contacts and data protection officer details to enhance transparency and compliance.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

M

MONOGRAM PARIS

monogram-paris.com

48

MONOGRAM PARIS appears to be an artistic or portfolio website hosted on the Cargo Collective platform, showcasing visual content likely related to art or design. The website is professionally designed with a modern aesthetic and good mobile optimization, but lacks substantive business information, contact details, and privacy or cookie policies. The technical infrastructure is based on Cargo3 framework with standard HTML, CSS, and JavaScript, hosted by Cargo Collective. Security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. The WHOIS data is suspicious due to a future domain creation date, which raises concerns about domain legitimacy. Overall, the website is functional and visually appealing but lacks critical compliance and security features.

T

Time and Date AS

timeanddate.no

69

Time and Date AS operates the Norwegian localized website timeanddate.no, providing comprehensive services related to time, date, calendars, weather, and astronomy. The site targets Norwegian-speaking users and offers tools such as world clocks, time zone converters, calendar generation, weather forecasts, and astronomy data. The business model is primarily advertising-supported with optional paid supporter services for an ad-free experience and exclusive content. The company has an established market presence since 1995 and maintains consistent branding and high-quality content. Technically, the website employs modern web technologies including JavaScript, Google Publisher Tags, Prebid.js for header bidding, and GDPR-compliant consent management platforms. The site is mobile-optimized with good SEO and accessibility features, though some advanced security headers could be improved. Performance is moderate, balancing rich content with advertising scripts. From a security perspective, the site enforces HTTPS and uses consent management for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not present, which could be enhanced to improve trust and readiness. Advertising practices are transparent with reputable ad networks and tracking services. Overall, the website presents a low-risk profile with strong content quality and compliance posture. Strategic recommendations include implementing additional security headers, publishing a dedicated security policy, and maintaining regular audits of third-party scripts to sustain security and privacy standards.

FeWo-Touristik GmbH operates a specialized online platform for vacation rental listings, focusing on Ferienwohnungen and Ferienhäuser primarily in Germany and Europe. The company manages over 10,000 listings and offers niche portals targeting dog owners and regional markets such as Sylt. The business model emphasizes direct control for property owners without commission fees, positioning the company as a trusted intermediary in the hospitality sector. Technically, the website is built with standard HTML5 and CSS3, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. WHOIS data confirms domain legitimacy with consistent registration details and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

Monteurzimmer.at

monteurzimmer.at

71

Monteurzimmer.at is a well-established online platform specializing in affordable accommodation listings for workers and travelers in Austria. The website offers over 1,000 budget-friendly lodging options with direct contact to landlords and free mediation services, positioning itself as a key player in the hospitality sector targeting a niche audience of monteurs and budget travelers. The platform supports multiple languages, enhancing accessibility for diverse users. Technically, the site employs modern web technologies including Google Maps API and Google Tag Manager, ensuring functional and analytical capabilities. Security measures such as HTTPS and multiple security headers are implemented, reflecting a good security posture. Privacy and cookie policies are comprehensive and GDPR compliant, indicating strong privacy awareness. However, the absence of WHOIS data due to privacy protection slightly reduces trustworthiness but is common for this business type. Overall, Monteurzimmer.at demonstrates a professional, secure, and user-friendly online presence with moderate to good technical maturity.

M

Microsoft

cloud.microsoft

80

Microsoft 365 Copilot is a product offering from Microsoft Corporation, a leading global technology enterprise founded in 1975. The website serves as a sign-in and informational portal for Microsoft 365 Copilot, an AI-powered productivity assistant integrated with Microsoft 365 applications such as Word, Excel, and PowerPoint. The site targets both individual users and business customers, reflecting Microsoft's broad market reach and subscription-based SaaS business model. The website is professionally designed with consistent branding and clear navigation, optimized for mobile and desktop platforms.

The website fondzabranyskod.cz currently serves a CAPTCHA challenge page designed to verify human visitors and prevent automated spam submissions. Due to this security mechanism, no substantive business content, contact information, or policies are accessible for analysis. The domain was registered in 2014 with REG-WEBGLOBE and uses the nameserver ns1.ignum.com, indicating a stable registration history but minimal public WHOIS data. The lack of visible business information and security headers limits the ability to assess the website's operational maturity or security posture comprehensively.

Xemel, operated by Trayto a.s., is a specialized SaaS platform focused on feed management for e-commerce businesses. It offers a comprehensive suite of tools including online XML/CSV feed editing, custom feed creation, AI-generated product descriptions, and integration with marketplaces and suppliers. The company targets e-shops, agencies, and firms seeking to optimize their product data feeds and online advertising. With a medium-sized presence and partnerships with notable e-commerce platforms, Xemel holds a strong market position in the Czech Republic and surrounding regions. Technically, the website is well-built with modern HTML5 and CSS3 standards, optimized for mobile devices, and provides a fast user experience. The presence of a security.txt file and HTTPS enforcement indicates a baseline security posture, though there is room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the rich content and client references. Security-wise, Xemel demonstrates good practices such as hashed feed URLs and backup strategies, but lacks explicit incident response contacts and some security headers. Privacy compliance is supported by a comprehensive GDPR policy and clear contact information. Overall, the platform appears reliable and professional, with a high level of business credibility and user trust. The main risks relate to the missing WHOIS data and minor security header gaps, which should be addressed to enhance trust and compliance. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response details, and pursuing formal security certifications to strengthen market confidence.

W

WinLocal

winlocal.de

58

WinLocal is a German-based B2B digital marketing service provider specializing in online visibility, online reviews, online advertising, and an integrated online control center powered by AI. The company targets businesses seeking to improve their online presence and customer acquisition through measurable and efficient digital marketing solutions. The website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics 4 and Google Tag Manager. Hosting is provided by a reputable German hosting provider, ensuring reliable infrastructure. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of explicit security headers and policies suggests room for improvement. Privacy compliance is basic, with no visible privacy or cookie policies in the provided content. Overall, the website presents a professional and trustworthy image with good content quality and business credibility.

Č

České Radiokomunikace a.s.

cra.cz

81

České Radiokomunikace a.s. is a leading Czech provider of unique television, radio, and internet infrastructure services. The company focuses on transforming technological trends into innovative media, telecommunications, and IT infrastructure solutions, targeting business and technology sectors primarily within the Czech Republic. Their key services include data centers, cloud computing, IoT, and broadcasting infrastructure. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern technologies such as Google Tag Manager, Microsoft Clarity, Cookiebot CMP, and likely Cloudflare for hosting and security. The site is mobile-optimized with good SEO and accessibility basics. Performance is moderate, with efficient font loading and asynchronous script execution. Privacy compliance is well addressed through a comprehensive cookie consent mechanism with granular user controls and integration of Google Consent Mode. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, it lacks explicit security headers and visible incident response or security contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces the domain trustworthiness score, but the website's professional presentation and technology usage support its legitimacy. Overall, the website is secure, privacy-conscious, and professionally maintained, though improvements in transparency regarding privacy policies, contact information, and security disclosures are recommended to enhance trust and compliance.

Cubainformacion.tv is a Spanish-language media website focused on delivering news, videos, and political commentary related to Cuba and Latin America. It serves a niche audience interested in Cuban affairs, solidarity movements, and political developments. The site offers a mix of video content, news articles, radio broadcasts, and campaign promotions, positioning itself as a specialized media outlet in this domain. Technically, the website uses a custom CMS named Cubainformacion Publishing System, integrates modern video playback technologies such as Video.js and YouTube iframe API, and employs Google Analytics with IP anonymization for user tracking. The site is mobile-optimized and features a consistent branding approach with good content quality and navigation clarity. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain ownership verification, but the website content and technical setup appear legitimate and professional. Overall, the site is safe for general audiences and does not contain adult or explicit content.

A

Autodesk

autodesk.fr

74

Autodesk is a globally recognized leader in design and manufacturing technology, offering a comprehensive suite of software solutions for architecture, engineering, construction, manufacturing, and entertainment industries. The website reflects a mature digital presence with professional design, multilingual support, and extensive use of modern web technologies. The technical infrastructure includes advanced monitoring and analytics tools such as Dynatrace, Tealium, and Qualtrics, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security and privacy policies are not clearly presented in the provided content. Overall, Autodesk's website demonstrates a high level of professionalism and trustworthiness, consistent with its market position as an enterprise technology provider.

A

Autodesk

autodesk.co.nz

73

Autodesk is a global leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The company operates an enterprise-grade website that showcases its products and services with a professional and modern design. The website targets professionals and enterprises seeking advanced 3D design, engineering, and entertainment software solutions. Autodesk's market position is strong, supported by a comprehensive portfolio and a large global customer base. Technically, the website leverages modern web technologies including JavaScript, CSS3, and HTML5, integrated with Adobe Experience Manager CMS and advanced analytics and tag management tools such as Dynatrace and Tealium. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Autodesk employs HTTPS with strong SSL configurations, security headers, and content security policies. The site uses secure cookie attributes and third-party monitoring tools to maintain security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, Autodesk's website demonstrates a high level of professionalism, security, and compliance, consistent with its enterprise stature. The domain is longstanding and privacy protected, which is justified given the company's size and brand. Strategic recommendations include enhancing public security disclosures and maintaining vigilant updates to third-party components.

A

Autodesk

autodesk.com.au

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals and enterprises across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack, including advanced analytics and tag management tools, and a robust content management system (Adobe Experience Manager). The website reflects a mature digital infrastructure with excellent performance, mobile optimization, and accessibility. Security posture is strong, with HTTPS enforcement, comprehensive security headers, and publicly available security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and a designated Data Protection Officer. Overall, Autodesk's website and digital footprint demonstrate a high level of professionalism, trustworthiness, and business credibility.

A

Autodesk

autodesk.co.uk

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack including Adobe Experience Manager CMS, advanced analytics, and performance monitoring tools. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting Autodesk's enterprise-grade digital maturity. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Autodesk's website reflects a high level of professionalism, trustworthiness, and business credibility consistent with its market position.

F

Flying Bisons

flyingbisons.com

71

Flying Bisons is a well-established digital consulting and delivery firm founded in 2015, specializing in helping businesses drive digital transformation and accelerate growth through a broad range of services including UX research, digital strategy, product design, branding, development, and data analytics. The company targets ambitious brands and startups seeking to create world-class digital products and experiences. Their market position is strong, supported by a high Clutch rating and a portfolio of notable clients such as KFC, IKEA, and Burger King. Technically, the website is built with modern web technologies, uses Cloudflare DNS, and integrates advanced tracking and analytics tools like Google Tag Manager and Sentry for error monitoring. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and some security best practices in place, though DNSSEC is not enabled and some security headers are not explicitly found. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.

H

High Five GmbH

iamstudent.de

59

iamstudent.de is a German online platform operated by High Five GmbH that provides students with access to exclusive discounts, coupons, and sweepstakes tailored to their needs. The platform is well-positioned in the student discount market in Germany and extends its services to Austria and Switzerland through related domains. The website offers a user-friendly experience with a focus on student engagement and brand partnerships. Technically, the site leverages modern web technologies including AngularJS, consent management platforms, and analytics tools, hosted on Amazon AWS infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security policies and incident response contacts are not prominently displayed. Overall, the site demonstrates a professional and trustworthy presence with good privacy practices and a clear business focus on education and retail sectors.

booklookerforum.de is a German language community forum dedicated to supporting users and sellers on the booklooker.de marketplace, which specializes in used and antiquarian books as well as related media such as films, music, and games. The forum provides discussion areas for new features, user help, shipping, payment methods, and various book genres, fostering an engaged user base with thousands of topics and posts. The business model centers on community engagement to support and enhance the marketplace experience. Technically, the site runs on the phpBB forum platform with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The hosting appears stable with dedicated nameservers, and the site is accessible via HTTPS, although explicit security headers are not visible in the provided content. Security posture is moderate with secure login forms but lacks published security policies or vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, serving a niche e-commerce community effectively.

G

Gransy, s.r.o.

mapy.cz

63

Mapy.com is a well-established online mapping portal operated by Gransy, s.r.o., offering detailed global maps with specialized features such as hiking and cycling trails, route planning, and aerial/3D views. The platform targets tourists, outdoor enthusiasts, and general users seeking comprehensive map services. The website demonstrates a mature digital infrastructure leveraging modern JavaScript APIs, asynchronous loading, and integration with Seznam.cz services. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though additional security headers and formal security policies could enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is professional, user-friendly, and trustworthy with a strong market position in the transportation and mapping sector.

P

Domain Default page

pm-srv-15.de

32

The analyzed website pm-srv-15.de currently serves as a default placeholder page generated by the Plesk hosting control panel. It contains no active business content, contact information, or privacy and security policies. The page primarily targets IT specialists or website owners managing hosting environments, providing links to Plesk resources. The domain appears to be hosted by Host Europe with DNS partly managed by GoDaddy. The lack of HTTPS enforcement and absence of security headers indicate a low security posture. No analytics or tracking mechanisms are present, and the site does not collect user data. Overall, the website is inactive and does not represent an operational business or service at this time.

I

Integrovaná doprava Středočeského kraje, p.o.

idsk.cz

58

Integrovaná doprava Středočeského kraje (IDSK) is a public organization focused on managing and developing an integrated transport system for the Central Bohemian Region and Prague. Established in 2017, it plays a key role in coordinating rail and bus transport services, economic administration, quality standards, and marketing efforts in the region. The website reflects a professional and consistent brand presence with clear information targeting residents and travelers in the region. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and uses an outdated JavaScript library. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible, supported by official contact details and partner links.

W

Webstudio

webstudio.team

49

Webstudio is a specialized service provider focused on bringing healthcare data to the web through interactive visualizations, graphic design, editorial work, and web development. Their market position is niche, serving state and academic sectors in the Czech Republic with a focus on healthcare and medical education projects. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics and Microsoft Clarity integrated for analytics and user behavior insights. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are not publicly available. Overall, the domain and website appear legitimate and trustworthy, with privacy-protected WHOIS data typical for small specialized businesses.

H

Harvey Lloyd Screens

harveylloydscreens.co.uk

55

Harvey Lloyd Screens is a small, established UK-based business specializing in bespoke screen printing services for artists, illustrators, and graphic designers. The company has a long history dating back to 1976 and operates an e-commerce platform hosted on Shopify, targeting creative professionals seeking high-quality screen printing solutions. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern Shopify infrastructure and scripts, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers are minimal. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the WHOIS data for the domain is unavailable due to domain naming rules errors, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced security headers and clearer business contact information.

.

.EC DOMINIOS ECUADOR S.A.S

dominiosecuador.ec

49

The website dominiosecuador.ec represents .EC DOMINIOS ECUADOR S.A.S, a small Ecuadorian company specializing in domain registration, hosting, email, SSL certificates, and web design services. The site targets Ecuadorian businesses and entrepreneurs seeking digital presence solutions. The company positions itself as a local provider with a focus on .EC domains and related services. Technically, the website is built on the WHMCS platform using the Lagom template, incorporating modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and provides a user-friendly experience with clear navigation and active customer support chat integration. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, though GDPR compliance is not clearly demonstrated. WHOIS data confirms the legitimacy of the domain registration, matching the business claims and showing no suspicious patterns. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security policies and technical SEO could enhance its posture.

DIGITALECUADOR CIA LTDA is a small Ecuadorian technology company specializing in domain registration, web hosting, DNS server management, and web design services. The website targets individuals and businesses within Ecuador, offering localized services primarily through a WHMCS-powered platform. The business model focuses on providing essential internet infrastructure and web presence solutions to its regional market. The website content is primarily in Spanish with options for English and Portuguese, indicating a regional multilingual approach. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, FontAwesome icons, and Google Fonts. The use of WHMCS indicates a mature client management and e-commerce platform. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include CSRF tokens and Google reCAPTCHA integration, but no advanced security headers or explicit SSL/TLS configuration details were found in the provided content. From a security perspective, the site demonstrates basic protections but lacks published privacy, cookie, or terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is available. WHOIS data aligns well with the website's business identity, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the security posture is moderate but could be improved with enhanced policies, security headers, and transparency. The overall risk assessment suggests a functional and legitimate business website with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing contact transparency, and establishing vulnerability disclosure mechanisms to strengthen trust and compliance.

I

InterBündnis

inter-buendnis.de

43

InterBündnis is a German non-profit political movement founded in 2016, uniting 40 organizations and 40,000 supporters against right-wing developments, fascism, war, and environmental destruction. The website serves as an information and coordination platform for progressive and revolutionary forces across Germany, promoting democratic and solidarity-based activism. The organization participates in elections through affiliated lists and campaigns against anti-communism. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted on rzone.de servers, and is mobile optimized with moderate performance. Security posture is basic with no visible security headers or published policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact is limited to email and social media channels. Overall, the site is trustworthy and safe, but improvements in security and compliance documentation are recommended.

P

People to People

people-to-people.de

58

People to People is a German-based small business specializing in socially conscious group travel, cultural products, books, and specialty goods. Their website reflects a niche market focus with offerings that combine e-commerce and travel services. The technical infrastructure is based on Shopware CMS with Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of direct contact emails and phone numbers reduces immediate customer trust signals. Overall, the website is accessible, well-structured, and professionally presented but could improve in privacy compliance and security best practices.

ALLRAD-NEWS.de is a German-language online news portal specializing in all-wheel drive vehicles, SUVs, and related automotive topics. The website provides news articles, vehicle reviews, press releases, and guides targeted at automotive enthusiasts and potential buyers interested in 4x4 and SUV vehicles. The business operates as a small content publisher with advertising partnerships and a niche market focus within the transportation and media sectors. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics for visitor tracking and a cookie consent mechanism to comply with GDPR requirements. The site is hosted on UI-DNS nameservers and uses HTTPS with a good SSL configuration. Security posture is moderate, with room for improvement in security headers and explicit incident response contact information. Privacy compliance is good, with a visible privacy policy and cookie consent banner. Overall, the website presents a professional and trustworthy appearance with consistent branding and relevant content for its target audience.

Ú

ÚZIS ČR

nzip.cz

60

The website www.nzip.cz serves as the National Health Information Portal of the Czech Republic, operated by the Ústav zdravotnických informací a statistiky České republiky (ÚZIS ČR). It provides authoritative and guaranteed information on healthy lifestyles, diseases, medical advice, and contact details for healthcare providers. The portal targets the general public seeking reliable health information. Technically, the site employs modern web technologies including JavaScript and CSS, and uses Matomo analytics hosted on a related domain, indicating a focus on privacy. The site is accessible without any WAF or blocking mechanisms and is optimized for mobile and accessibility standards. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and terms policies. WHOIS data is unavailable, which slightly reduces trust but does not detract from the site's legitimacy given its governmental affiliation. Overall, the site is professional, trustworthy, and serves an essential public health function.

F

Font Squirrel

fontsquirrel.com

69

Font Squirrel is a well-established online platform specializing in providing free, high-quality fonts licensed for commercial use. The website targets graphic designers, web developers, and businesses seeking legally free fonts, offering a curated selection alongside useful tools such as a webfont generator and font identifier. The business model relies primarily on advertising revenue and affiliate partnerships with paid font vendors like Fontspring and Creative Market. The site maintains a professional appearance with clear licensing and privacy policies, supporting a trustworthy user experience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Analytics and multiple advertising networks. The presence of a cookie consent mechanism and HTTPS enforcement indicates a mature approach to privacy and security compliance. Performance is moderate with good mobile optimization, though accessibility features are basic. No CMS or hosting provider details were explicitly detected. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security headers and documented incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces domain trust slightly, but the professional site content and policies support legitimacy. Advertising practices are transparent with multiple ad networks and tracking services disclosed. Overall, Font Squirrel presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security policies, and improving accessibility. These steps would further solidify trust and compliance in an evolving regulatory landscape.

O

O2 CZ

o2.cz

66

O2 CZ is a major telecommunications provider in the Czech Republic offering a wide range of services including mobile tariffs, internet, digital TV (Oneplay), and device sales. The website reflects a strong market position with comprehensive service offerings and a clear focus on consumer and business segments. The company is part of the PPF Group, a significant parent company, which adds to its credibility and market strength. The website is professionally designed, mobile-optimized, and provides rich content about its products and services, targeting a broad audience in the Czech Republic. Technically, the website employs modern web technologies including JavaScript frameworks, Adobe DTM for tag management, Exponea for marketing automation, and Google Tag Manager for analytics. The site is well-structured with good SEO and accessibility features, ensuring a positive user experience across devices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and avoids exposing sensitive data in its HTML content. However, the absence of WHOIS data is unusual and reduces transparency, though the website's branding and external references strongly support its legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

E

EKOFRUKT Slaný, spol. s r.o.

ekofrukt.cz

51

EKOFRUKT Slaný, spol. s r.o. is a Czech-based manufacturer specializing in the production and development of cereal bars, including protein, muesli, nut, fruit, flapjack, and cereal bars. The company emphasizes private label manufacturing with over 30 years of tradition and exports to more than 20 countries in Europe. Their product portfolio is supported by multiple certifications such as IFS Food, Kosher, BIO, HACCP, FSC, and Rain Forest Alliance, underscoring their commitment to quality and sustainability. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and certifications.

Q

Quantyoo GmbH & Co. KG

quantyoo.de

57

Quantyoo GmbH & Co. KG is a specialized data analytics and marketing services provider based in Munich, Germany. Founded in 2019, the company focuses on enabling businesses to leverage data for product development, research, and marketing through advanced tools and AI-driven solutions. Their market position is that of a trusted data specialist serving media and related sectors, with a clear emphasis on data-driven decision-making and customer insights. The website presents a professional, well-structured, and content-rich digital presence that effectively communicates their value proposition and services. Technically, the website is built with modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js, hosted on Amazon AWS infrastructure. The site is fast, mobile-optimized, and accessible, with good SEO practices. Security measures include HTTPS enforcement and CAPTCHA on forms, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are published. The security posture is solid with encrypted data storage claims and password security guidance, but could be improved by adding security headers and formal policies. Privacy compliance is strong with a comprehensive GDPR policy, but lacks a cookie consent mechanism. Business credibility is high, supported by detailed contact information, customer testimonials, and professional branding. Overall, Quantyoo presents a trustworthy and professional online presence with a strong focus on data-driven business solutions. Strategic improvements in security policies and privacy mechanisms would further enhance their trust and compliance standing.

WITTMANN MEDIA LTD is a small media and digital marketing company specializing in SEO consulting, content marketing, responsive web design, and programming services. The company presents a professional portfolio of online magazine projects and targets businesses seeking to improve their online presence. The website is well-structured with good design quality and clear navigation, optimized for mobile devices. Technically, the site uses modern web technologies including HTML5, CSS3, PHP, Bootstrap, and Google Analytics, but lacks a CMS and advanced accessibility features. Security posture is moderate with no visible vulnerabilities but missing security headers and unclear SSL configuration. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance measures.

Autoankauf Schumacher is a German-based small business specializing in the purchase and export of vehicles including used cars, accident vehicles, and damaged cars. The company offers fast, reliable, and fair vehicle evaluations with direct cash payments and free vehicle pickup services across Germany. Their market position is supported by over 15 years of experience and a network of partner sites, focusing on ease and trust for customers selling vehicles. Technically, the website is built using HTML5, CSS3, and JavaScript with jQuery 1.9.1, hosted on Goneo servers, and uses the Nicepage framework. The site is mobile optimized and SEO friendly but uses an outdated jQuery version and lacks advanced security headers. Security posture is moderate with basic spam protection on forms but no visible incident response or security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve security and privacy practices.

A

Autoankauf Fix

autoankauf-fix.de

46

Autoankauf Fix is a German vehicle purchasing service specializing in buying cars, trucks, and other vehicles across Germany with free pickup. The company operates multiple city-specific locations, indicating a national presence. Their website is built on WordPress using the Astra theme and includes a multi-step form for vehicle sale inquiries. The business targets car owners in Germany seeking quick and convenient vehicle sales. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices but lacks advanced security headers and privacy policies. Security posture is adequate with HTTPS and nonce usage in forms but could be improved with better headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

V

Verlag Neuer Weg

neuerweg.de

60

Verlag Neuer Weg is a specialized German publishing company focusing on progressive, antifascist, and Marxist-Leninist literature and media. Established in 1972 and part of Mediengruppe Neuer Weg, it serves a niche audience interested in socialist and internationalist content. The website is built on the Plone CMS platform, featuring a moderate technical infrastructure with standard web technologies and a functional but basic mobile and accessibility experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

Team Tito Limited is a small software company based in Dublin, Ireland, specializing in event management software products including Tito, a ticket selling platform; IO, a bespoke RSVP platform currently in private beta; and Vito, a privacy-focused community and event platform. Their market position is that of a niche player with a focus on simplicity, flexibility, and privacy. The company presents itself professionally with clear branding and active product offerings. Technically, the website is built using modern web technologies including Hotwired Turbo and external CSS frameworks, hosted on AWS infrastructure. The site is fast, mobile-optimized, and uses HTTPS with CSRF protections, indicating a mature digital infrastructure. However, some security best practices such as DNSSEC and security headers are not implemented. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks published privacy and cookie policies, security headers, and vulnerability disclosure information. Analytics are handled via privacy-conscious Fathom Analytics, indicating some attention to user privacy. The WHOIS data is consistent with the business claims, showing a legitimate and transparent registration. Overall, the website is professional and trustworthy with a good security posture but would benefit from enhanced privacy compliance documentation and additional security headers. The risk level is moderate with no critical vulnerabilities detected.

É

Équipement De Vie

equipementdevie.com

70

Équipement De Vie is a small UK-based e-commerce business specializing in high-performance sailing shoes designed for both sea and land use. The company operates a professionally designed Shopify storefront with a clear brand identity and product focus. Their market position is niche, targeting sailing enthusiasts and customers seeking premium deck shoes. The website features essential e-commerce functionalities including product listings, customization options, and ambassador programs. Technically, the site leverages modern web technologies and Shopify's Broadcast theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. However, explicit contact information and security policies are not prominently available. Overall, the website is trustworthy and professionally maintained, suitable for its business model and audience.

A

Acronym Finder

acronymattic.com

61

Acronym Attic is a website providing a large collection of unverified abbreviations and acronyms, serving as a secondary resource linked to the more authoritative Acronym Finder. The business model is primarily advertising-supported, targeting a general audience seeking abbreviation definitions. The website is modest in size and scope, with a founding date consistent with its domain registration in 2005. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, hosted via Cloudflare with HTTPS enforced, and is mobile optimized. However, it lacks advanced security headers and explicit privacy or security policies on the site itself. Security posture is moderate with room for improvement, especially in DNS security and policy transparency. No contact information or incident response details are published, limiting direct communication channels. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy compliance measures.

H

Houzz

houzz.com

78

Houzz is a leading platform serving both construction and design professionals as well as homeowners seeking inspiration and services for home improvement projects. The company offers a comprehensive suite of software tools for professionals including 3D floor plans, project management, estimates, invoicing, and client dashboards. The website is well-branded, professionally designed, and targets a large audience in the real estate and home remodeling sectors. Technically, the site uses modern web technologies and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit incident response information are not publicly visible. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be improved. The absence of WHOIS data in the raw output is unusual but does not detract significantly from the site's legitimacy given its market presence and content quality. Overall, Houzz presents a trustworthy and professional online presence with room for minor security and privacy enhancements.

C

Catched

catched.com

62

Catched is a specialized platform offering domain backordering and expired domain auction services, targeting domain investors and businesses seeking premium domains. The company has been established since 2003, indicating a mature presence in the domain marketplace niche. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages Cloudflare for DNS and likely CDN services, and integrates third-party tools such as Tawk.to for live chat, OneSignal for push notifications, and Microsoft Clarity for analytics, reflecting a modern digital infrastructure. Security posture is adequate with HTTPS enabled and CSRF tokens present, but could be improved by enabling DNSSEC and implementing security headers. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

D

DIE ZEIT

zeit.de

62

DIE ZEIT is a well-established German media organization providing comprehensive news, commentary, and analysis across politics, economy, society, culture, and sports. The website serves a broad general audience with high-quality content and multiple subsidiary services including job markets, games, travel, and e-commerce. The business model combines subscription and advertising revenue, supported by a strong brand and consistent digital presence. Technically, the site employs modern web technologies including React, advanced consent management via Piano.io and Sourcepoint, and integrates multiple advertising and analytics platforms with GDPR compliance. Security posture is strong with HTTPS enforced, consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The domain registration data aligns with the business claims, indicating a trustworthy and legitimate operation. Overall, the website demonstrates a mature digital infrastructure, professional content delivery, and robust privacy and security practices.

N

n-tv NACHRICHTEN

n-tv.de

65

n-tv.de is a major German news media website providing a wide range of news articles, videos, live TV streaming, stock market data, and weather forecasts. The site targets a general audience interested in current affairs, politics, economy, sports, and entertainment. It operates a business model based on advertising and subscription services, including a PUR-Abo subscription. The website is well-branded and professionally designed, reflecting its position as an established media outlet in Germany. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Sourcepoint for GDPR consent management, and Kameleoon for A/B testing. It is hosted with EuroDNS nameservers and enforces HTTPS with a Content-Security-Policy header. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site has a good posture with HTTPS and some security headers but lacks additional headers like X-Frame-Options or Strict-Transport-Security. No vulnerabilities or exposed sensitive data were detected. GDPR compliance is partially implemented with consent management but lacks explicit privacy policy and terms of service links in the provided content. Overall, the site is safe, professional, and trustworthy with no adult or questionable content. Strategic improvements include publishing explicit privacy and security policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

J

junge Welt

jungewelt.de

46

junge Welt is a German left-wing daily newspaper established in 1947, operating as a cooperative with over 3000 members. The website offers comprehensive news coverage with a focus on political and social issues, supported by subscription services, newsletters, and event information. Technically, the site uses a custom CMS (KONTEXT-CMS), Bootstrap, jQuery, and Piwik analytics, providing a modern and mobile-optimized experience. Security posture is moderate with HTTPS implied but lacks explicit security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, but a login form and contact pages exist. Overall, the site is professional, content-rich, and trustworthy, serving a niche audience interested in leftist political news.

D

DNStination Inc.

polyfill-fastly.io

63

The website 'Fastly Polyfill' provides a specialized service that dynamically delivers only the necessary JavaScript polyfills required by a user's browser, optimizing web application compatibility and performance. The service is targeted primarily at web developers and technology users who need to ensure cross-browser functionality. The business is relatively new, founded in 2024, and operates under DNStination Inc., a US-based organization. The website branding and content are consistent and professional, with clear navigation and a modern design using Pico CSS. The presence of links to Fastly's corporate privacy and terms pages suggests affiliation or infrastructure usage by Fastly, a recognized CDN provider. Technically, the site employs modern web standards and technologies, including JavaScript and a lightweight CSS framework, ensuring good performance and mobile optimization. The domain is hosted likely on Fastly's infrastructure, contributing to fast load times and reliable service delivery. The site includes interactive forms allowing users to customize polyfill bundles, reflecting a mature technical implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are areas for improvement. Privacy compliance is partial; while a privacy policy is linked, there is no cookie consent mechanism implemented. No direct contact information such as emails or phone numbers are provided on the site, which may impact user trust. Overall, the website presents a low-risk profile with a solid technical foundation and clear business purpose. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and providing direct contact information to improve trust and compliance.

A

Acronym Finder

acronymfinder.com

63

Acronym Finder operates as a comprehensive online dictionary specializing in acronyms, abbreviations, and initialisms with over 4 million entries and more than 1 million human-edited definitions. The website serves a broad audience including professionals, students, and the general public seeking to decode acronyms across various sectors such as technology, government, business, science, and pop culture. It maintains a strong market position as the largest and most trusted resource in its niche, supported by a long domain history dating back to 1998 and notable press coverage. Technically, the website employs a modern tech stack including Bootstrap for responsive design, JavaScript libraries, and is hosted via Cloudflare, ensuring good performance and mobile optimization. Advertising is integrated through Google Adsense and Amazon Ads, with tracking via Cloudflare Insights and Facebook SDK. SEO and accessibility are adequately addressed, though some improvements could be made in security headers and GDPR compliance. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and explicit security policies. No incident response or vulnerability disclosure information is publicly available, and cookie consent mechanisms are absent, indicating partial privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, Acronym Finder presents a professional, trustworthy, and content-rich platform with moderate technical maturity and a solid security baseline. Strategic enhancements in privacy compliance and security policies would further strengthen its posture.