Security Directory

Cubainformacion.tv is a Spanish-language media website focused on delivering news, videos, and political commentary related to Cuba and Latin America. It serves a niche audience interested in Cuban affairs, solidarity movements, and political developments. The site offers a mix of video content, news articles, radio broadcasts, and campaign promotions, positioning itself as a specialized media outlet in this domain. Technically, the website uses a custom CMS named Cubainformacion Publishing System, integrates modern video playback technologies such as Video.js and YouTube iframe API, and employs Google Analytics with IP anonymization for user tracking. The site is mobile-optimized and features a consistent branding approach with good content quality and navigation clarity. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain ownership verification, but the website content and technical setup appear legitimate and professional. Overall, the site is safe for general audiences and does not contain adult or explicit content.

F

Freundschaftsgesellschaft BRD-Kuba e.V.

fgbrdkuba.de

64

Freundschaftsgesellschaft BRD-Kuba e.V. is a well-established non-profit solidarity organization founded in 1974, focusing on fostering relations and support for Cuba within Germany. The website serves as an informational platform targeting individuals and groups interested in solidarity activities. Technically, the site is built on WordPress using the Divi theme and enhanced with the Rank Math SEO plugin, hosted likely by 1&1 IONOS. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy and cookie policies. Security posture is moderate with room for improvement in transparency and incident response readiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

A

Autodesk

autodesk.fr

74

Autodesk is a globally recognized leader in design and manufacturing technology, offering a comprehensive suite of software solutions for architecture, engineering, construction, manufacturing, and entertainment industries. The website reflects a mature digital presence with professional design, multilingual support, and extensive use of modern web technologies. The technical infrastructure includes advanced monitoring and analytics tools such as Dynatrace, Tealium, and Qualtrics, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security and privacy policies are not clearly presented in the provided content. Overall, Autodesk's website demonstrates a high level of professionalism and trustworthiness, consistent with its market position as an enterprise technology provider.

A

Autodesk

autodesk.de

63

Autodesk is a globally recognized leader in design and manufacturing software, serving professionals across architecture, engineering, construction, manufacturing, and entertainment sectors. The company offers a comprehensive suite of 3D design and engineering tools that empower innovators worldwide. Their market position is strong, supported by a large enterprise footprint and a history dating back to 1982. Technically, Autodesk's website demonstrates a mature digital infrastructure leveraging modern web technologies such as Adobe Experience Manager, React-based micro frontends, and advanced monitoring via Dynatrace. The site is optimized for performance, accessibility, and SEO, reflecting a high level of digital maturity. From a security perspective, Autodesk employs robust measures including HTTPS, comprehensive security headers, and compliance with industry standards like ISO 27001 and SOC 2. Incident response and vulnerability disclosure processes are publicly documented, indicating a proactive security posture. Overall, Autodesk's website and digital presence reflect a trustworthy, professional, and secure enterprise platform. The absence of WHOIS data is consistent with privacy protection practices common among large corporations. The risk profile is low, with recommendations focusing on continuous security updates and monitoring.

A

Autodesk

autodesk.co.nz

73

Autodesk is a global leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The company operates an enterprise-grade website that showcases its products and services with a professional and modern design. The website targets professionals and enterprises seeking advanced 3D design, engineering, and entertainment software solutions. Autodesk's market position is strong, supported by a comprehensive portfolio and a large global customer base. Technically, the website leverages modern web technologies including JavaScript, CSS3, and HTML5, integrated with Adobe Experience Manager CMS and advanced analytics and tag management tools such as Dynatrace and Tealium. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Autodesk employs HTTPS with strong SSL configurations, security headers, and content security policies. The site uses secure cookie attributes and third-party monitoring tools to maintain security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, Autodesk's website demonstrates a high level of professionalism, security, and compliance, consistent with its enterprise stature. The domain is longstanding and privacy protected, which is justified given the company's size and brand. Strategic recommendations include enhancing public security disclosures and maintaining vigilant updates to third-party components.

A

Autodesk

autodesk.com.au

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals and enterprises across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack, including advanced analytics and tag management tools, and a robust content management system (Adobe Experience Manager). The website reflects a mature digital infrastructure with excellent performance, mobile optimization, and accessibility. Security posture is strong, with HTTPS enforcement, comprehensive security headers, and publicly available security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and a designated Data Protection Officer. Overall, Autodesk's website and digital footprint demonstrate a high level of professionalism, trustworthiness, and business credibility.

A

Autodesk

autodesk.co.uk

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack including Adobe Experience Manager CMS, advanced analytics, and performance monitoring tools. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting Autodesk's enterprise-grade digital maturity. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Autodesk's website reflects a high level of professionalism, trustworthiness, and business credibility consistent with its market position.

Č

Česká pošta

kredit-ds.cz

59

The website kredit-ds.cz/payment is an official service portal operated by Česká pošta, the Czech postal service, providing a platform for users to top up credit for their data mailboxes. The site targets Czech individuals and businesses who use electronic government communication services. It offers payment options including payment by card and domestic bank transfer, with clear instructions and official branding. The website is well-structured, mobile-optimized, and provides essential contact information, enhancing user trust and accessibility. Technically, the site is built using modern web technologies including React and Material-UI, ensuring a responsive and user-friendly interface. While performance is moderate, the site lacks some advanced SEO and accessibility features. Security practices include HTTPS and form validation, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. From a security perspective, no critical vulnerabilities or malware indicators were found. However, the lack of WHOIS data due to privacy protection limits domain registration transparency. The site aligns with GDPR requirements through its privacy policy, but cookie consent is missing. Overall, the site demonstrates a solid security posture for a government service but should enhance transparency and compliance features. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to strengthen user trust and regulatory compliance. The site’s legitimacy is high given its association with Česká pošta and consistent branding.

Č

Česká pošta, s.p.

datovy-trezor.cz

65

Česká pošta, s.p. operates the Datový trezor service, a supplementary digital mailbox capacity service for existing data mailboxes in the Czech Republic. The website provides a secure, government-backed platform for ordering and managing this service, targeting both individual and business users who require secure digital communication. The site is well-branded with official logos and provides clear contact information, terms, and privacy policies, reflecting a mature digital service offering from a national postal authority. Technically, the site leverages modern web technologies including React and Liferay, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though some improvements in vulnerability disclosure and incident response transparency could be made. Overall, the site is trustworthy and professional, though the lack of WHOIS data limits domain registration trust analysis.

Oneplay is a Czech Republic-based streaming service offering a wide range of entertainment content including movies, series, sports, exclusive content, and live TV with replay and recording features. The platform targets a general audience interested in online video entertainment and positions itself as a regional player in the media streaming market. The website demonstrates a modern technical infrastructure utilizing JavaScript frameworks, Google Tag Manager for analytics, and privacy SDKs to manage user consent. However, the absence of publicly available WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and privacy compliance. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but missing security headers and incident response information suggest room for improvement. Overall, the site is functional and professional but would benefit from enhanced compliance and trust signals to improve business credibility and user confidence.

F

Flying Bisons

flyingbisons.com

71

Flying Bisons is a well-established digital consulting and delivery firm founded in 2015, specializing in helping businesses drive digital transformation and accelerate growth through a broad range of services including UX research, digital strategy, product design, branding, development, and data analytics. The company targets ambitious brands and startups seeking to create world-class digital products and experiences. Their market position is strong, supported by a high Clutch rating and a portfolio of notable clients such as KFC, IKEA, and Burger King. Technically, the website is built with modern web technologies, uses Cloudflare DNS, and integrates advanced tracking and analytics tools like Google Tag Manager and Sentry for error monitoring. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and some security best practices in place, though DNSSEC is not enabled and some security headers are not explicitly found. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.

P

Panattoni Development Europe sp .z o.o.

panattoni.sa

56

Panattoni Development Europe sp .z o.o. is a leading global industrial real estate developer, recognized as the largest logistics developer in Europe since 2017. The company has expanded its operations to the Middle East, establishing a presence in Riyadh, Saudi Arabia. Their business model focuses on development, capital deployment, and providing comprehensive real estate services with a strong emphasis on sustainability and green-certified industrial spaces. The website reflects a professional and well-structured digital presence, targeting investors and industrial real estate clients with clear navigation and rich content.

M

Günstige Unterkünfte für Monteure und Reisende | Monteurzimmer.de

monteurzimmer.de

9

Monteurzimmer.de is a German-based online platform offering affordable accommodations primarily targeted at workers and travelers. The website provides a large inventory of over 20,000 listings with direct contact options and free mediation services. The platform positions itself as a significant player in the hospitality sector for budget-conscious travelers and professionals. Technically, the site leverages modern web technologies including JavaScript, Google Maps API, and Google Tag Manager, hosted on Amazon AWS infrastructure. The site is mobile optimized and offers multi-language support, enhancing accessibility for a diverse user base. Security posture is adequate with HTTPS enabled and basic security practices, though there is room for improvement in security headers and incident response transparency. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and contact transparency to improve trust and compliance.

H

High Five GmbH

iamstudent.de

59

iamstudent.de is a German online platform operated by High Five GmbH that provides students with access to exclusive discounts, coupons, and sweepstakes tailored to their needs. The platform is well-positioned in the student discount market in Germany and extends its services to Austria and Switzerland through related domains. The website offers a user-friendly experience with a focus on student engagement and brand partnerships. Technically, the site leverages modern web technologies including AngularJS, consent management platforms, and analytics tools, hosted on Amazon AWS infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security policies and incident response contacts are not prominently displayed. Overall, the site demonstrates a professional and trustworthy presence with good privacy practices and a clear business focus on education and retail sectors.

D

Günstige Unterkünfte für die Zwischenzeit | DeinZimmer.de

deinzimmer.de

68

DeinZimmer.de is an online platform specializing in affordable temporary accommodations in Germany, targeting students and individuals seeking short-term housing solutions such as student rooms, shared apartments, and apartments. The platform offers over 5,000 listings with a focus on ease of search, free mediation, and direct contact between renters and landlords. Technically, the website leverages modern JavaScript, Google Maps API for location services, and Google Tag Manager for analytics, hosted on Amazon AWS infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. Overall, the website is legitimate and professional but would benefit from enhanced privacy compliance and security best practices.

R

RVB Books

rvb-books.com

65

RVB Books is an independent publisher and gallery specializing in fine arts books, operating primarily through an e-commerce Shopify platform. The company has a niche market position targeting art enthusiasts and collectors, offering curated collections of art books and exhibitions. The website is professionally designed with a clear catalog and artist listings, supporting a small business model founded in 2011 in France. Technically, the site leverages Shopify's robust infrastructure, modern JavaScript libraries, and GDPR cookie consent mechanisms, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced, domain status protections, and form protection via hCaptcha, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the site is trustworthy, safe, and compliant with basic privacy requirements, though improvements in transparency and security documentation are recommended.

G

Gransy, s.r.o.

mapy.cz

63

Mapy.com is a well-established online mapping portal operated by Gransy, s.r.o., offering detailed global maps with specialized features such as hiking and cycling trails, route planning, and aerial/3D views. The platform targets tourists, outdoor enthusiasts, and general users seeking comprehensive map services. The website demonstrates a mature digital infrastructure leveraging modern JavaScript APIs, asynchronous loading, and integration with Seznam.cz services. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though additional security headers and formal security policies could enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is professional, user-friendly, and trustworthy with a strong market position in the transportation and mapping sector.

T

Transmatico GmbH

transmatico.com

54

Transmatico GmbH is a German-based company specializing in sustainable local crossmedia advertising solutions for newspapers, magazines, and advertising papers. Their offerings include digital native advertising content preparation, landing pages, traffic management with SEO, and sales training. The company has a strong market presence with over 200 successful integrations and multiple industry awards, positioning them as a reputable player in the media advertising sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about their products and client successes. Technically, the site runs on WordPress with Elementor and uses modern analytics tools like Matomo and Google Analytics, alongside a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS and security headers in place, though the absence of a public security policy and incident response contacts is noted. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website and business appear legitimate and professional, but the domain registration inconsistency slightly reduces trustworthiness.

P

Domain Default page

pm-srv-15.de

32

The analyzed website pm-srv-15.de currently serves as a default placeholder page generated by the Plesk hosting control panel. It contains no active business content, contact information, or privacy and security policies. The page primarily targets IT specialists or website owners managing hosting environments, providing links to Plesk resources. The domain appears to be hosted by Host Europe with DNS partly managed by GoDaddy. The lack of HTTPS enforcement and absence of security headers indicate a low security posture. No analytics or tracking mechanisms are present, and the site does not collect user data. Overall, the website is inactive and does not represent an operational business or service at this time.

ConversionRuler is a specialized SaaS provider offering subscription-based PPC and online marketing campaign tracking and ROI measurement services. Established in 2002, the company targets SEO, SEM, and PPC professionals as well as ecommerce businesses seeking detailed insights into their marketing effectiveness. The website presents a clear business model with transparent pricing and a focus on usability and integration with various online marketing channels. Technically, the site uses standard web technologies with AWS DNS infrastructure, but lacks modern CMS or advanced frameworks. The design is professional though somewhat dated, with basic mobile optimization and accessibility features. Security posture is moderate; while domain registration is stable and protected against unauthorized changes, the absence of DNSSEC and security headers, as well as missing cookie consent mechanisms, indicate areas for improvement. No explicit privacy or incident response policies are published, which may affect compliance with GDPR and other regulations. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

M

Max Planck Institute for Security and Privacy

mpi-sp.org

63

The Max Planck Institute for Security and Privacy is a research institute founded in 2019 and affiliated with the Max Planck Society in Germany. It focuses on advancing security and privacy technologies through foundational research, systems development, and societal impact. The website serves academics, researchers, students, and professionals interested in security and privacy research, offering information about research areas, people, career opportunities, and contact details. The business model is centered on academic research and education within the technology sector, positioning itself as a leading institution in its field. Technically, the website is built on the JustRelate CX Cloud CMS platform, utilizing modern JavaScript libraries such as RequireJS and Slick Carousel for UI components. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate with deferred loading of styles and scripts. Security is well implemented with HTTPS enforced and CSRF protection on forms, though explicit security headers are not detected. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Security posture is strong overall with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in adding security headers, publishing a security policy, and providing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly, but the strong affiliation with the Max Planck Society and professional website design mitigate concerns. No advertising or tracking services are detected, supporting user privacy. Overall, the website is safe, professional, and trustworthy, serving its academic audience effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response and vulnerability disclosure information, and improving accessibility features to further strengthen compliance and user trust.

H

Hochschule Bochum

hochschule-bochum.de

64

Hochschule Bochum is a large public University of Applied Sciences in Germany offering a wide range of bachelor and master degree programs across disciplines such as construction, economics, technology, health, computer science, and sustainability. The website is professionally designed, content-rich, and well-structured to serve students, prospective students, and academic stakeholders. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance documentation. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

B

Bochum Marketing GmbH

bochum-tourismus.de

52

Bochum Marketing GmbH operates the official tourism website for the city of Bochum, Germany, providing comprehensive information on local attractions, events, accommodations, and cultural highlights. The website serves as a key digital platform to promote tourism and local engagement, targeting visitors and residents interested in exploring Bochum's offerings. The site is built on TYPO3 CMS and employs modern web technologies, including responsive design and accessibility features, ensuring a positive user experience across devices. While the site is well-branded and professionally maintained, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal incident response contacts. Overall, the website is a reliable and authoritative source for tourism information in Bochum, with room for enhancement in privacy and security transparency.

I

Integrovaná doprava Středočeského kraje, p.o.

idsk.cz

58

Integrovaná doprava Středočeského kraje (IDSK) is a public organization focused on managing and developing an integrated transport system for the Central Bohemian Region and Prague. Established in 2017, it plays a key role in coordinating rail and bus transport services, economic administration, quality standards, and marketing efforts in the region. The website reflects a professional and consistent brand presence with clear information targeting residents and travelers in the region. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and uses an outdated JavaScript library. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible, supported by official contact details and partner links.

W

Webstudio

webstudio.team

49

Webstudio is a specialized service provider focused on bringing healthcare data to the web through interactive visualizations, graphic design, editorial work, and web development. Their market position is niche, serving state and academic sectors in the Czech Republic with a focus on healthcare and medical education projects. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics and Microsoft Clarity integrated for analytics and user behavior insights. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are not publicly available. Overall, the domain and website appear legitimate and trustworthy, with privacy-protected WHOIS data typical for small specialized businesses.

T

TOPlist s.r.o.

toplist.cz

58

TOPlist s.r.o. operates a Czech web analytics and visitor counting service, providing online traffic auditing and advertising listings primarily targeting website owners and businesses interested in monitoring their web traffic. The company has a long-standing presence since 1997, positioning itself as a trusted local provider in the web analytics niche. The website is professionally designed with clear navigation and a focus on delivering relevant content and services. Technically, the site employs modern frontend technologies including Bootstrap, FontAwesome, jQuery, and the Ace Admin Template, ensuring a responsive and user-friendly experience. However, some technical aspects such as security headers and privacy compliance require improvement. Security posture is moderate with HTTPS enabled and obfuscated email addresses, but lacks explicit security policies and headers. Overall, the site is safe, trustworthy, and well-maintained but would benefit from enhanced privacy and security practices to align with modern compliance standards.

R

Ruth van Beek

ruthvanbeek.com

45

Ruth van Beek's website serves as a professional portfolio for the artist based in the Netherlands, showcasing her art and related book publications. The site targets art enthusiasts and potential gallery visitors, positioning itself as a niche artist platform with gallery representation and book sales. The business model revolves around art promotion and sales through galleries and publications. Technically, the website is built on the ProcessWire CMS with custom JavaScript and CSS, delivering a visually appealing and moderately performant experience with good mobile optimization. However, accessibility features are basic and could be improved. Security posture is moderate with HTTPS enabled and email obfuscation implemented, but lacks security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible GDPR compliance mechanisms. Overall, the website is trustworthy and professional but would benefit from improved security and privacy practices.

H

Harvey Lloyd Screens

harveylloydscreens.co.uk

55

Harvey Lloyd Screens is a small, established UK-based business specializing in bespoke screen printing services for artists, illustrators, and graphic designers. The company has a long history dating back to 1976 and operates an e-commerce platform hosted on Shopify, targeting creative professionals seeking high-quality screen printing solutions. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern Shopify infrastructure and scripts, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers are minimal. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the WHOIS data for the domain is unavailable due to domain naming rules errors, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced security headers and clearer business contact information.

T

TINYCC

tiny.cc

66

Tiny.cc is a well-established URL shortening service operating since 2006, offering free and premium plans to general internet users and businesses. The service provides core features such as URL shortening, link editing, click statistics, QR code generation, and custom domains. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. The presence of a cookie consent banner and privacy policy indicates awareness of privacy compliance requirements. Technically, the site uses modern JavaScript libraries and third-party advertising and sharing tools, with HTTPS enforced ensuring secure communications. However, security headers and explicit security policies are not published, representing an area for improvement. WHOIS data confirms the domain's legitimacy and consistent registration details, supporting trustworthiness. Overall, the site is functional, secure, and credible with room for enhanced security transparency and contact information.

.

.EC DOMINIOS ECUADOR S.A.S

dominiosecuador.ec

49

The website dominiosecuador.ec represents .EC DOMINIOS ECUADOR S.A.S, a small Ecuadorian company specializing in domain registration, hosting, email, SSL certificates, and web design services. The site targets Ecuadorian businesses and entrepreneurs seeking digital presence solutions. The company positions itself as a local provider with a focus on .EC domains and related services. Technically, the website is built on the WHMCS platform using the Lagom template, incorporating modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and provides a user-friendly experience with clear navigation and active customer support chat integration. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, though GDPR compliance is not clearly demonstrated. WHOIS data confirms the legitimacy of the domain registration, matching the business claims and showing no suspicious patterns. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security policies and technical SEO could enhance its posture.

DIGITALECUADOR CIA LTDA is a small Ecuadorian technology company specializing in domain registration, web hosting, DNS server management, and web design services. The website targets individuals and businesses within Ecuador, offering localized services primarily through a WHMCS-powered platform. The business model focuses on providing essential internet infrastructure and web presence solutions to its regional market. The website content is primarily in Spanish with options for English and Portuguese, indicating a regional multilingual approach. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, FontAwesome icons, and Google Fonts. The use of WHMCS indicates a mature client management and e-commerce platform. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include CSRF tokens and Google reCAPTCHA integration, but no advanced security headers or explicit SSL/TLS configuration details were found in the provided content. From a security perspective, the site demonstrates basic protections but lacks published privacy, cookie, or terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is available. WHOIS data aligns well with the website's business identity, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the security posture is moderate but could be improved with enhanced policies, security headers, and transparency. The overall risk assessment suggests a functional and legitimate business website with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing contact transparency, and establishing vulnerability disclosure mechanisms to strengthen trust and compliance.

The website revistaidentidad.ec is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information. The site appears to be protected by a JavaScript challenge typical of Cloudflare, indicating a security posture that prioritizes bot mitigation but limits external analysis. Without access to actual site content, no metadata, forms, or external links can be analyzed. The lack of visible security headers or SSL configuration data further limits security assessment. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.

M

Modular DS

modulards.com

69

Modular DS is a Spanish-based technology company founded in 2021 that offers a SaaS platform focused on centralized management and automation of WordPress websites. Their platform provides key services such as automated maintenance, backups, uptime monitoring, vulnerability analysis, and reporting, targeting WordPress site managers, agencies, and freelancers. The website is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress CMS, WP Rocket for performance, and Google Analytics for tracking. Security posture is good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is basic with a cookie policy and consent mechanism present, but no explicit privacy policy or terms of service pages were found. Overall, the domain registration data is consistent and legitimate, supporting the business credibility. The site is free from adult or questionable content and is safe for general audiences.

P

People to People

people-to-people.de

58

People to People is a German-based small business specializing in socially conscious group travel, cultural products, books, and specialty goods. Their website reflects a niche market focus with offerings that combine e-commerce and travel services. The technical infrastructure is based on Shopware CMS with Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of direct contact emails and phone numbers reduces immediate customer trust signals. Overall, the website is accessible, well-structured, and professionally presented but could improve in privacy compliance and security best practices.

T

Tito

ti.to

53

Tito is a technology company specializing in simple and powerful event registration software, offering SaaS solutions for event organizers to sell tickets and manage check-ins efficiently. The website demonstrates a modern technical infrastructure built on Vue.js and BootstrapVue frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie management, though explicit privacy and terms of service pages are absent. Overall, the site is professional and trustworthy, targeting event organizers and attendees with clear business focus and minimal tracking.

ALLRAD-NEWS.de is a German-language online news portal specializing in all-wheel drive vehicles, SUVs, and related automotive topics. The website provides news articles, vehicle reviews, press releases, and guides targeted at automotive enthusiasts and potential buyers interested in 4x4 and SUV vehicles. The business operates as a small content publisher with advertising partnerships and a niche market focus within the transportation and media sectors. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics for visitor tracking and a cookie consent mechanism to comply with GDPR requirements. The site is hosted on UI-DNS nameservers and uses HTTPS with a good SSL configuration. Security posture is moderate, with room for improvement in security headers and explicit incident response contact information. Privacy compliance is good, with a visible privacy policy and cookie consent banner. Overall, the website presents a professional and trustworthy appearance with consistent branding and relevant content for its target audience.

Z

Zavis Inc.

zavis.ai

59

Zavis Inc. operates a professional and modern website offering AI-powered business automation solutions focused on WhatsApp Business, AI cloud call centers, and omnichannel customer engagement. The company targets businesses seeking to scale customer interactions efficiently using advanced AI technologies. Their market position is that of a specialized SaaS provider delivering full-stack AI solutions for customer communication and engagement across multiple platforms including WhatsApp, Instagram, and voice calls. The website demonstrates a high level of digital maturity with a modern React/Next.js tech stack, embedded multimedia content, and integration of multiple analytics and marketing tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not clearly presented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting a positive business credibility profile.

S

Shop Houzz

shophouzz.com

72

Shop Houzz operates as an e-commerce platform specializing in home furniture, lighting, and decor products. The website is built on the Shopify platform, leveraging a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for product reviews. The site targets consumers looking for home essentials and offers a broad product catalog with clear navigation and a professional design. The business model is retail-focused, serving the US market primarily. Technically, the site is well-structured with good mobile optimization and moderate performance, hosted on Shopify's CDN infrastructure. Security posture is adequate with HTTPS enforced and use of fraud prevention services, though explicit security headers and dedicated security policies are not visible. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security best practices.

M

Mutual Aid LA Network

mutualaidla.org

58

Mutual Aid LA Network is a small non-profit organization serving as a connector and information hub for mutual aid efforts across Los Angeles. The website provides information about their projects, resource directories, and community engagement opportunities. Their market position is focused on local community solidarity and abolitionist principles, supporting mutual aid groups and individuals through various projects and donations. Technically, the website is built on WordPress.com using Jetpack and Gutenberg, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain registrar locks but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and safe for general audiences but could improve in privacy and security transparency.

G

Grief and Hope Los Angeles

griefandhopela.com

59

Grief and Hope Los Angeles is a small non-profit volunteer organization focused on raising funds to support artists and art workers affected by the Los Angeles fires in January 2025. The website is hosted on Squarespace and uses a clean, professional design with clear calls to action directing visitors to donate via GoFundMe. The technical infrastructure is modern and secure, with HTTPS and HSTS enabled, but lacks advanced security headers and privacy compliance features. No contact information or privacy policies are present, which limits trust and compliance. The domain WHOIS data is unavailable, raising questions about domain registration status and legitimacy, though the website content and hosting suggest a genuine community effort.

R

rauminhalt

rauminhalt.com

50

The website www.rauminhalt.com represents an art gallery platform named Rauminhalt_Harald Bichler, focusing on contemporary art at the intersection of art and design. The business appears to be a small-scale gallery based in Austria, targeting art enthusiasts and professionals interested in interdisciplinary art forms. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of technical maturity. The website design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of privacy, cookie, and terms of service policies, as well as missing contact information, limits the site's compliance and business credibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible and safe but requires improvements in compliance, security best practices, and business transparency.

A

Autodesk, Inc.

spacemaker.ai

73

Autodesk, Inc. is a leading global provider of design and engineering software solutions, with a strong market position in the Architecture, Engineering, and Construction (AEC) sector. The Forma Site Design product is a cloud-based software offering AI-powered tools for concept and schematic design, targeting professionals in the AEC industry. The website is hosted on the official Autodesk domain, featuring a professional design and comprehensive product information, supporting a SaaS subscription business model. The company is well-established, founded in 1982, and operates at an enterprise scale. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and advanced monitoring and analytics tools such as Dynatrace and Adobe Target. The site demonstrates excellent performance, mobile optimization, and accessibility, with strong SEO practices. Security is robust with HTTPS enforced, comprehensive security headers, and monitoring in place, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. However, explicit contact information such as emails or phone numbers was not found on this page, which is typical for large enterprise sites that centralize contact through support portals. WHOIS data is unavailable, likely due to privacy protection or registrar restrictions, but the domain's legitimacy is supported by the official Autodesk branding and infrastructure. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. Strategic recommendations include maintaining up-to-date security audits, monitoring third-party scripts, and enhancing direct contact availability for improved user support.

A

Autodesk

autodesk.eu

72

Autodesk is a globally recognized leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The website reflects a mature enterprise-grade digital presence with strong branding and internationalization support. The technical infrastructure leverages modern web technologies, Adobe Experience Manager CMS, and advanced monitoring via Dynatrace, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and monitoring in place, though explicit security policies and vulnerability disclosures are not publicly visible. Privacy compliance appears limited in the provided content, lacking clear privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve transparency on privacy and security policies.

A

Autodesk, Inc.

plangrid.com

69

Autodesk Construction Cloud's PlanGrid product is a leading construction productivity software that provides real-time access to project plans, issues, photos, and forms for general contractors, subcontractors, and owners. It is integrated into the broader Autodesk Construction Cloud ecosystem, offering a comprehensive SaaS solution for construction management. The website demonstrates a high level of professionalism, with clear navigation, mobile optimization, and extensive content relevant to its target audience. Technically, the site leverages modern frameworks such as React and Next.js, and integrates multiple marketing and analytics tools including Marketo, Tealium, and 6sense. Security posture is strong with HTTPS enforced and use of secure cookies, though explicit security headers could be more visible. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence consistent with an enterprise-level technology provider.

Ú

ÚZIS ČR

nzip.cz

60

The website www.nzip.cz serves as the National Health Information Portal of the Czech Republic, operated by the Ústav zdravotnických informací a statistiky České republiky (ÚZIS ČR). It provides authoritative and guaranteed information on healthy lifestyles, diseases, medical advice, and contact details for healthcare providers. The portal targets the general public seeking reliable health information. Technically, the site employs modern web technologies including JavaScript and CSS, and uses Matomo analytics hosted on a related domain, indicating a focus on privacy. The site is accessible without any WAF or blocking mechanisms and is optimized for mobile and accessibility standards. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and terms policies. WHOIS data is unavailable, which slightly reduces trust but does not detract from the site's legitimacy given its governmental affiliation. Overall, the site is professional, trustworthy, and serves an essential public health function.

A

AION CS, s.r.o.

zakonyprolidi.cz

54

Zákony pro lidi is a Czech legal information portal operated by AION CS, s.r.o., providing free and premium access to the consolidated collection of Czech laws, regulations, international treaties, EU law, and court decisions. The platform targets legal professionals, students, and the general public seeking reliable legal texts and tools. It operates a freemium business model with a paid subscription offering advanced features and ad-free experience. The website is well-established, with a professional design and consistent branding, positioning itself as a leading resource in the Czech legal information market. Technically, the website uses ASP.NET Web Forms with modern JavaScript libraries such as jQuery 3.5.1, and employs responsive design techniques for good mobile optimization. The site includes SEO best practices and accessibility features, although some security headers are not explicitly detected in the HTML content. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and published incident response contacts. No vulnerabilities or malware indicators were found. The absence of WHOIS data reduces trust slightly but does not indicate illegitimacy given the professional nature of the site and its clear business information. Overall, the website presents a low risk profile with strong content quality and business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to improve security posture and trust.

F

Font Squirrel

fontsquirrel.com

69

Font Squirrel is a well-established online platform specializing in providing free, high-quality fonts licensed for commercial use. The website targets graphic designers, web developers, and businesses seeking legally free fonts, offering a curated selection alongside useful tools such as a webfont generator and font identifier. The business model relies primarily on advertising revenue and affiliate partnerships with paid font vendors like Fontspring and Creative Market. The site maintains a professional appearance with clear licensing and privacy policies, supporting a trustworthy user experience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Analytics and multiple advertising networks. The presence of a cookie consent mechanism and HTTPS enforcement indicates a mature approach to privacy and security compliance. Performance is moderate with good mobile optimization, though accessibility features are basic. No CMS or hosting provider details were explicitly detected. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security headers and documented incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces domain trust slightly, but the professional site content and policies support legitimacy. Advertising practices are transparent with multiple ad networks and tracking services disclosed. Overall, Font Squirrel presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security policies, and improving accessibility. These steps would further solidify trust and compliance in an evolving regulatory landscape.

N

Nadace O2

o2chytraskola.cz

41

O2 Chytrá škola is a well-established educational project by Nadace O2 focused on promoting safe and responsible use of technology and the internet among children, parents, and teachers in the Czech Republic. The website offers a rich variety of educational content including articles, videos, podcasts, quizzes, and grant programs, positioning itself as a trusted resource in the education and non-profit sectors. The project benefits from clear branding, consistent messaging, and a strong social media presence, enhancing its outreach and engagement with its target audience. Technically, the website employs modern web technologies such as Alpine.js for interactivity, Google Tag Manager and Exponea for analytics and marketing, and Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly, with a custom or framework-based backend likely using Nette. The performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, integrates a consent management platform for GDPR compliance, and uses secure forms with validation. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be added to enhance security posture. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with relevant regulations. It serves its educational mission effectively while maintaining a secure and user-friendly environment.

O

O2 CZ

o2.cz

66

O2 CZ is a major telecommunications provider in the Czech Republic offering a wide range of services including mobile tariffs, internet, digital TV (Oneplay), and device sales. The website reflects a strong market position with comprehensive service offerings and a clear focus on consumer and business segments. The company is part of the PPF Group, a significant parent company, which adds to its credibility and market strength. The website is professionally designed, mobile-optimized, and provides rich content about its products and services, targeting a broad audience in the Czech Republic. Technically, the website employs modern web technologies including JavaScript frameworks, Adobe DTM for tag management, Exponea for marketing automation, and Google Tag Manager for analytics. The site is well-structured with good SEO and accessibility features, ensuring a positive user experience across devices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and avoids exposing sensitive data in its HTML content. However, the absence of WHOIS data is unusual and reduces transparency, though the website's branding and external references strongly support its legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

P

Panattoni

panattoni.in

61

Panattoni India is a regional branch of Panattoni Development Company, a globally recognized leader in real estate development specializing in industrial, logistics, office, retail, and mixed-use projects. The company boasts a significant market presence with over 60 million sqm developed worldwide and is recognized as the largest logistics developer in Europe. Their business model focuses on providing end-to-end real estate development and investment services, targeting institutional investors and clients seeking industrial space in India and beyond. The website reflects a professional and consistent brand image with comprehensive content tailored to investors and business clients. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, Sentry for error monitoring, and Iubenda for cookie compliance, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. However, explicit CMS or hosting details are not evident. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and a published security policy or incident response contact suggests room for improvement. Overall, the site demonstrates a strong security posture but could enhance transparency and incident readiness. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include implementing additional security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.