Security Directory

The website tague.at is a simple personal/family homepage for the Prechtl family from Altheim, Austria. It provides basic contact information including an email address and partial phone number, along with a physical address. The site is minimalistic with no advanced business or commercial content, targeting a general audience likely consisting of family, friends, or local community members. The technical infrastructure is basic, relying on static HTML with Google Adsense scripts for advertising and Cloudflare for DNS and nameservers. There is no detected CMS or modern web frameworks, and the site lacks privacy, cookie, or security policies. Security posture is minimal with no security headers or incident response information, and the domain WHOIS data is privacy protected, which is typical for personal sites. Overall, the site is functional but lacks professional or business-grade features.

G

Göta Vapenhistoriska Sällskap

gotavapen.se

45

Göta Vapenhistoriska Sällskap is a small, niche Swedish collector's association focused on historical weapons and militaria, primarily serving enthusiasts in the Götaland region. The website serves as an informational portal with minimal content, primarily in Swedish, and offers no interactive features or modern web functionalities. The business model is that of an ideell samlarförening (non-profit collector's association) with a long-standing presence since 2005, as supported by domain registration data. Technically, the website is outdated, built using Microsoft FrontPage 6.0, with no modern CMS or frameworks detected. Hosting is provided by One.com. The site lacks mobile optimization, accessibility features, and modern SEO practices, resulting in poor performance and user experience. No HTTPS enforcement or security headers were detected, indicating a weak security posture. Security evaluation reveals significant gaps including absence of HTTPS, missing security headers, and no visible privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting the ability to report security issues. The site does not collect user data via forms, reducing some risk but also limiting engagement. Overall, the website presents a low-risk profile due to its informational nature and lack of sensitive data handling but suffers from poor technical and security hygiene. Strategic improvements in security, privacy compliance, and modernization of the technical stack are recommended to enhance trust and user experience.

GIAN CARLO STROCCHI Design & Comunicazione Visiva is a small Italian design studio with over 30 years of experience specializing in graphic design and visual communication services. Their offerings include brand identity, packaging, advertising, editorial design, and multimedia content. The website reflects a traditional, static design approach with basic navigation and content presentation. Technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript without modern CMS or frameworks. Security posture is weak due to lack of HTTPS enforcement and missing security headers. Privacy compliance is limited to a basic cookie disclosure without an active consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site serves as an informational brochure for the studio but requires modernization and improved security and privacy practices.

The website singroot.com currently serves a 404 Not Found error page with minimal content describing the domain's role as a service hosted by Admiral for digital publishers. The service focuses on copyright access control, privacy consent including GDPR compliance, and supporting subscriptions and donations. The technical infrastructure is based on Google Cloud Platform with DNS hosted on AWS name servers. The site uses industry-standard encryption and certificate rotation but lacks DNSSEC and security headers. No contact information, social media links, or business details are provided, limiting the ability to assess business credibility. The site is not optimized for SEO or mobile devices and contains no tracking or advertising scripts. Security posture is moderate with good SSL but missing some best practices. Overall, the site is safe with no adult or explicit content but is functionally a placeholder error page.

M

Startseite Besucher - mcg.at

mcg.at

65

The website mcg.at serves as a local event information portal focused on Graz, Austria, providing details about concerts, fairs, shows, business, and sports events. The site targets a general audience interested in live entertainment and community happenings. The business appears to be a small local entity founded around 2019, with a clear focus on event promotion and information dissemination. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Instagram Feed Pro, and integrates Google Tag Manager for analytics and WonderPush for marketing and retargeting. The site demonstrates moderate performance and good mobile optimization, with a generally professional design and clear navigation. From a security perspective, the site uses HTTPS and some security best practices like nonce attributes in scripts. However, it lacks comprehensive security headers and does not provide visible privacy, cookie, or incident response policies, which are critical for GDPR compliance and user trust. No security.txt or vulnerability disclosure mechanisms are present, indicating room for improvement in security posture. Overall, the website is legitimate and trustworthy based on domain registration data and content alignment. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance user trust and regulatory adherence.

Race Time Radio is a Canadian niche media broadcaster specializing in live and archived motorsports content, focusing on short track racing and national series such as NASCAR Canada. Established in 2006, it serves a dedicated audience of racing enthusiasts with weekly live broadcasts and interviews. The website is basic but functional, with minimal modern web technologies and limited mobile optimization. Security posture is modest, lacking DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Contact information is available but limited. Overall, the site is trustworthy but would benefit from enhanced security and privacy practices.

K

Outlook

kishpandi.com

57

The website kishpandi.com hosts an Outlook Web Access (OWA) login page, providing users access to Microsoft Exchange email services. The domain is registered since 2011 with a reputable registrar, indicating a stable domain history. However, the website content is minimal, serving solely as a login portal without any business branding, contact information, or policy disclosures. The technical infrastructure relies on legacy Microsoft OWA technologies with basic HTML, CSS, and JavaScript, and no modern web frameworks or CMS detected. Security posture is limited with no visible security headers or HTTPS enforcement details, and no privacy or cookie policies are present. Overall, the site functions as a standard email access portal but lacks transparency and compliance features expected for public-facing business websites.

M

Michal Danko

michaldanko.com

45

Michal Danko operates as a freelance full stack web developer based in Košice, Slovakia, with over 10 years of experience. The website serves as a professional portfolio showcasing his skills in web development technologies including WordPress, WooCommerce, Laravel, and front-end frameworks. The business model is focused on freelance client engagements, targeting clients seeking custom web development and design services. The website is well-structured and presents a clear overview of services and past projects, positioning Michal as an experienced independent developer in the Slovak market. Technically, the website uses a modern tech stack with HTML5, CSS3, Bootstrap, JavaScript, PHP frameworks, and CMS platforms like WordPress and October CMS. Hosting is provided by Websupport, a Slovak hosting provider, with domain registration consistent with the business location. Google Analytics is used for visitor tracking, and Google Fonts are loaded for typography. The site is mobile optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected, which could improve security posture. There are no privacy or cookie policies present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response information is provided. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low to moderate. The site is professional and trustworthy but lacks formal privacy and cookie policies and some security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing vulnerability disclosure information to improve compliance and security maturity.

The domain damagedadvice.com currently serves as a 404 Not Found error page with no active website content. It is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The domain is hosted on Google Cloud Platform and registered via NameCheap, Inc. The technical infrastructure is basic, relying on standard web technologies such as JavaScript, HTML, and CSS, with no advanced frameworks or CMS detected. Security practices are mentioned in the page content, including encryption and certificate rotation, but no detailed security policies or vulnerability disclosures are published. The absence of privacy and cookie policies, contact information, and business details limits the website's credibility and compliance posture. Overall, the site is safe with no adult or questionable content, but the lack of substantive content and policies results in a low trust and quality score.

The website serves as a private access portal for member entities of the 'Acord Ciutadà', a local government initiative in Barcelona focused on social inclusion and reducing social inequalities. It allows members to update their organizational data, request official seals, and participate in strategic social programs. The site targets non-profit and governmental organizations involved in this agreement. The business model is membership-based, supporting collaboration and data management within a defined community. Technically, the website uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The design is functional but basic, with limited mobile optimization and accessibility features. No analytics or advertising technologies are present, indicating a focus on privacy and minimal tracking. However, the absence of HTTPS enforcement and security headers is a notable technical gap. From a security perspective, the site uses POST for login but lacks visible protections such as CSRF tokens or security headers. No privacy or cookie policies are present, which is a compliance concern under GDPR. The WHOIS data is unavailable due to .es domain restrictions, but the domain aligns with the local government context, suggesting legitimacy. Overall, the security posture is moderate but requires improvements to meet modern standards. The overall risk is moderate with recommendations to implement HTTPS, add security headers, introduce privacy and cookie policies, and enhance form security. These steps will improve trust, compliance, and protection for users accessing sensitive organizational data.

Oklahoma Press operates a straightforward website providing downloadable advertising PDFs primarily serving the Oklahoma region. The business appears to be a small regional media service provider with a focus on facilitating ad content distribution to clients. The website is minimalistic, with basic design and limited interactive features, focusing solely on the ad download functionality. The technical infrastructure is simple, relying on basic HTML, CSS, and PHP for form handling, hosted on HostGator servers. There is no evidence of advanced CMS or modern frameworks, and SEO and accessibility features are minimal. Security posture is weak, with no DNSSEC, no visible security headers, and no explicit HTTPS confirmation in the provided data. The site lacks privacy, cookie, and terms of service policies, which impacts compliance and user trust. Contact information is limited to phone numbers without email or social media presence. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and technical modernization.

The domain recessrain.com currently serves a 404 Not Found error page with no active website content or business information. The domain is registered through NameCheap, Inc. and hosted on Google Cloud Platform, with DNS managed by AWS DNS servers. The site appears to be a placeholder or under development, with content related to Admiral's copyright access control and privacy consent services. There is no direct business presence or contact information on the site. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) but lacks SEO, accessibility, and performance optimizations. Security posture is moderate due to HTTPS usage and encryption, but no advanced security headers or vulnerability disclosures are present. Overall, the site is low trust and low content quality, reflecting a new or inactive domain.

The domain fewkittens.com currently serves a 404 Not Found error page with minimal content. The page indicates that the domain is hosted by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The website lacks substantive business content, contact information, or user engagement features, suggesting it is either a placeholder or under development. The technical infrastructure is based on Google Cloud Platform with standard web technologies (JavaScript, HTML, CSS) and employs industry-standard encryption with frequent certificate rotation. Security posture is reasonable given the lack of executable content and continuous scanning, but the absence of security headers and DNSSEC represents areas for improvement. Privacy compliance is basic with mention of GDPR and no third-party cookies, but no explicit consent mechanism is implemented. Overall, the site’s risk is low due to minimal content and no suspicious elements, but the lack of business and contact information limits trust and credibility.

The domain givevacation.com currently serves a 404 Not Found error page with no accessible website content. The domain is registered with NameCheap, Inc. since March 2023 and is used by Admiral (getadmiral.com) to provide copyright access control and privacy consent services for digital publishers. The page content describes the service but lacks any privacy policy, cookie policy, terms of service, or contact information. Technically, the site uses industry-standard encryption and is hosted on Google Cloud Platform, but no advanced security headers or SEO optimizations are present. The security posture is good in terms of encryption and content scanning, but the lack of policies and contact details reduces compliance and trust. Overall, the site is not accessible for normal user interaction and scores low on content quality and business credibility.

The domain haplessland.com is currently serving a 404 Not Found error page with content indicating it is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The website content is minimal and primarily informational about the service's role in copyright compliance and GDPR privacy support. The technical infrastructure is hosted on Google Cloud Platform, with DNS managed via AWS name servers, but DNSSEC is not enabled. Security practices mentioned include encryption and frequent certificate rotation, with no executable files hosted, indicating a focus on secure content delivery. However, the lack of visible security headers and cookie consent mechanisms are areas for improvement. Overall, the site is accessible but provides limited business or user-facing content, impacting its content quality and business credibility scores.

ZUMA Press is a photography agency specializing in assignment, editorial, and archive photography services. Founded in 2016 by Scott Mc Kiernan, it serves media professionals and editorial clients with a broad network of photographers. The website presents a basic but functional interface with search capabilities and a large photographer directory, indicating a medium-sized operation in the media industry. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DreamHost, a reputable provider. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response channels are visible, which may impact user trust and regulatory compliance. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

SDC Ship Design & Consult GmbH is a specialized consultancy firm focused on the maritime shipping industry, offering ship design, engineering, and consultancy services. Their expertise spans various ship types including tankers, container ships, yachts, and research vessels, with services covering feasibility studies, steel design, mechanical engineering, and consultancy on alternative fuels and efficiency optimization. The company targets shipping industry professionals and ship owners, positioning itself as a niche player in maritime consultancy. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS. The hosting is provided by kasserver.com, a professional hosting provider. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are detected. Performance is moderate with a fixed-width layout and minimal dynamic content. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, which are critical for protecting user data and ensuring trust. There is no visible privacy or cookie consent mechanism, and no incident response or security policy information is provided. The WHOIS data is consistent and indicates a legitimate domain registration with no privacy protection, appropriate for the business type. Overall, the website is functional but basic, with room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in HTTPS implementation, security headers, mobile responsiveness, and privacy mechanisms would significantly improve trust and compliance.

The domain cardmethod.com currently serves a 404 Not Found error page with no accessible business content. The page content indicates that the domain is used by Admiral (getadmiral.com) to provide copyright access control and privacy consent services for digital publishers. There is no direct business information, contact details, or policies available on the site. The technical infrastructure is hosted on Google Cloud Platform in Europe, with basic use of JavaScript, HTML, and CSS. Security practices are mentioned in the error page content, including encryption and certificate rotation, but no explicit security headers or policies are published. Overall, the site lacks content, business credibility, and privacy compliance indicators, resulting in a low trust and quality score.

The domain scaredslip.com is currently serving a 404 Not Found error page with minimal content. The page indicates that the domain is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The domain is newly registered in October 2023 and hosted on Google Cloud Platform in Europe. The website lacks any business-specific content, contact information, or user interaction elements, limiting its utility as a standalone site. Technically, the site uses standard web technologies (JavaScript, HTML, CSS) and enforces encryption with frequent certificate rotation, but lacks advanced security headers and DNSSEC. Privacy compliance is basic but present, with no third-party cookies or cross-site tracking. Overall, the site functions as a service endpoint rather than a full business website.

The domain cloudguppy.com currently serves a 404 Not Found error page with content indicating it is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The website lacks substantive content, contact information, or business details, limiting its utility as a standalone business site. Technically, the domain is hosted on Google Cloud Platform with industry-standard encryption and certificate rotation, but lacks DNSSEC and security headers. The security posture is moderate due to these controls, but the absence of explicit security headers and contact information for incident response reduces overall trust. Privacy compliance is basic, with no cookie consent mechanism but clear statements about GDPR compliance and no third-party tracking. Overall, the site appears to be a service endpoint rather than a customer-facing website, resulting in a low AI score and limited business credibility.

V

Vulti Holdings Limited

vultisig.com

61

Vultisig is a newly launched cryptocurrency wallet provider specializing in multi-factor, seedless security using Threshold Signature Scheme (TSS) technology. The company, operating under Vulti Holdings Limited based in the British Virgin Islands, offers a multi-chain wallet supporting over 30 blockchains including Bitcoin and Ethereum. Their product targets crypto users seeking enhanced security without the traditional risks of seed phrase management. The website presents a professional and modern interface with clear messaging about security and usability. Technically, the site uses modern web technologies such as Next.js and Cloudflare DNS, and supports multiple platforms including web, Android, iOS, and Windows. Security posture is strong with HTTPS, multi-factor authentication, and domain protection status flags, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned for its niche but should improve transparency on privacy and security policies.

Ask4web, operated by Marek Hejl, is a small Czech Republic-based business currently presenting a placeholder website indicating a forthcoming new web presentation. The site provides basic contact information including email, phone, and physical address but lacks substantive content or detailed business descriptions. The technical infrastructure is minimal, with no detected CMS or advanced technologies, and no evidence of HTTPS or security headers, indicating a low digital maturity level. Security posture is weak due to absence of HTTPS, privacy policies, and security best practices. The domain WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is in an early stage of development with significant room for improvement in content, security, and compliance.

The website web-soul.cz serves primarily as an administrative login portal for the WebSOUL system, with minimal public-facing content. It lacks any visible business descriptions, contact information, or user engagement features. The site is in Czech and appears targeted at internal users or administrators. The domain is registered since 2009 with a Czech registrar, indicating a stable and legitimate presence, but the lack of public business information limits external trust. Technically, the site is very basic, built with simple HTML and CSS, without modern frameworks or CMS detected. There is no evidence of HTTPS enforcement or security headers, which poses security risks especially for a login page. The site does not implement privacy or cookie policies, nor does it provide any compliance information. No analytics or advertising technologies are present, indicating minimal tracking. From a security perspective, the absence of HTTPS, security headers, and CSRF protections on the login form are significant vulnerabilities. The site does not provide any incident response or security policy information. The WHOIS data is consistent and public, supporting legitimacy but does not compensate for the lack of security best practices. Overall, the website scores low on content quality, security posture, and privacy compliance. It is recommended to implement HTTPS, add security headers, provide privacy and cookie policies, and improve transparency with contact and business information to enhance trust and security.

American Proofreading Company is a small business specializing in proofreading, marketing assistance, print materials, and web design services. The company operates through a network of freelancers and has a history of receiving national APEX Awards of Excellence since 1994. The website content is basic but relevant, targeting businesses and organizations seeking professional communication services. The business model leverages freelance talent rather than full-time employees, positioning itself as a niche service provider with a long-standing market presence. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site appears static and somewhat outdated, with limited mobile optimization and accessibility features. Hosting is inferred to be through GoDaddy.com, LLC based on registrar data. Performance is moderate but could benefit from modernization and improved SEO practices. From a security perspective, the site lacks HTTPS enforcement, security headers, and privacy or cookie policies, indicating a low security maturity level. No incident response or vulnerability disclosure mechanisms are present. The absence of analytics or tracking scripts suggests minimal user data collection, but also a lack of modern marketing tools. The domain WHOIS data is consistent and indicates a legitimate, long-established business. Overall, the website is functional but basic, with significant opportunities for security, privacy, and technical improvements to enhance trust and compliance. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and adopting security best practices to protect user data and improve professional credibility.

WebX.cz is a Czech-based web hosting and domain registration service provider established in 2001. The company offers Linux-based web hosting with support for PHP, SQL databases, SSL certificates, and domain registrations across multiple TLDs, primarily targeting Czech and European customers. The website presents a basic but functional online self-service platform for managing hosting services, domains, and email. The market position is that of a small but established player with a significant number of hosted domains and a focus on reliability and user convenience. Technically, the website uses legacy HTML standards and lacks modern frameworks or analytics tools, indicating a need for modernization. Security posture is moderate, with SSL encryption and daily backups, but lacks published security policies, incident response contacts, and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy but would benefit from enhanced privacy, security, and technical improvements.

W

World Sweeper

worldsweeper.com

9

World Sweeper is a specialized online resource dedicated to the power sweeping and street sweeping industry, providing comprehensive news, educational content, contractor listings, and product information. Established in 2000, it holds a strong market position as a trusted industry resource with a consistent brand and recognized awards. The website infrastructure is primarily static HTML with JavaScript enhancements, leveraging third-party tools such as Google Analytics and Jotform for feedback. While the site offers rich content and good business credibility, it lacks modern privacy and security compliance features such as privacy policies, cookie consent mechanisms, and security headers. The domain registration data aligns well with the business claims, indicating legitimacy and operational stability.

S

Stormballet – Taneční škola

stormballet.com

43

Stormballet.com is the website of a Czech dance school established in 2004, offering dance education services primarily to a local audience. The website is built on WordPress using the Visual Composer plugin, indicating a moderate level of digital maturity. The site design and content are basic but functional, with no advanced SEO or accessibility features detected. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information and business certifications are not visible, which may affect user trust. Overall, the site represents a small local business with a basic online presence.

A

Antagus

antagus.de

47

Antagus is a German-based company specializing in domain reseller services, cloud and V-Server hosting, server rental, and server housing. Established since 1996, it operates multiple data centers and partners with companies like Vautron Rechenzentrum AG and NetBeat to provide infrastructure and end-customer services. The website targets business customers such as domain resellers and web hosting providers, offering competitive pricing and a range of hosting solutions. The company demonstrates trustworthiness through ISO/IEC 27001 certification and positive customer references. Technically, the website uses standard web technologies with Matomo analytics for privacy-conscious tracking. Security posture is moderate, with room for improvement in security headers and explicit security policies. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional and trustworthy, though technical modernization and enhanced security practices are recommended.

The Schiffbautechnische Gesellschaft e.V. (STG) is a historic non-profit organization founded in 1899 in Berlin, serving professionals and organizations in the shipbuilding, marine technology, and shipping sectors. The website acts as a knowledge and networking platform offering event information, publications, and member services. The organization maintains a professional online presence with a member login area and detailed event archives, primarily targeting German-speaking maritime industry stakeholders. Technically, the website is built on the onTEAM CMS platform with standard HTML, CSS, and JavaScript. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security practices include HTTPS usage and a login form with session tokens; however, the absence of security headers and CSRF protections indicates room for improvement. The security posture is moderate with no detected blocking or WAF mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, limiting domain trust verification, but the website content and professional presentation support legitimacy. Overall, the site is a credible and professional resource for the maritime community but would benefit from enhanced security controls, privacy compliance improvements, and WHOIS transparency to strengthen trust and resilience.

Gundi.com is a small-scale artist website showcasing and selling unique handcrafted glass sculptures. The business focuses on artistic glass creations including vases, bowls, and wearable art, targeting art collectors and enthusiasts. The website content is basic and primarily informational, with a testimonial to support trust. The site uses very outdated technology (Microsoft FrontPage Express 2.0) and lacks modern web features such as mobile optimization and accessibility enhancements. Technically, the site is hosted on Nexicom's DNS infrastructure but does not demonstrate HTTPS usage or security headers, indicating a weak security posture. No privacy or cookie policies are present, and no contact emails or phone numbers are explicitly listed, limiting user engagement and compliance with privacy regulations. Overall, the site appears legitimate and consistent with the domain age but requires significant modernization and security improvements.

C

Corporation for National Research Initiatives

handle.net

61

The Handle.Net Registry website represents the Corporation for National Research Initiatives (CNRI), a non-profit organization managing the Handle System's global registry services. The site provides information about prefix allotment, software downloads, and performance testing related to persistent digital identifiers. The organization holds a strong market position as a key administrator within the digital object architecture ecosystem, serving organizations requiring persistent identifiers. Technically, the website is simple and primarily informational, built with basic HTML and CSS, hosted via Cloudflare. It lacks modern web frameworks or CMS platforms and does not implement advanced SEO or accessibility features. Performance is moderate, and mobile optimization is basic. No analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from domain transfer protections and Cloudflare's registrar services but lacks DNSSEC and security headers. No explicit security policies or incident response contacts are published, which could be improved. The site uses HTTPS, but SSL configuration details are unknown. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with clear contact information and a long-established domain. However, improvements in security practices, privacy compliance, and technical modernization would enhance its posture and user experience.

4

4Ws Netdesign GbR

4ws-netdesign.de

51

4Ws Netdesign GbR is a small, established internet agency based in Oberried near Freiburg, Germany, specializing in custom web design, CMS development, and comprehensive internet solutions. With over 19 years of experience and more than 1000 customers, the company offers tailored services including their proprietary CMS "Private Section" and various web management tools. The website is professionally designed with clear navigation and relevant content targeting a broad audience including businesses and private users. Technically, the site uses older JavaScript libraries such as Prototype.js and Scriptaculous, which may require modernization to improve security and performance. The site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. Contact information is clearly provided with a physical address and obfuscated email to reduce spam. Overall, the website is functional, trustworthy, and reflects a credible business presence in the regional technology services market.

RetroFest.cz is a small-scale, niche event website dedicated to a 2015 retro computing conference organized by students of the Czech Technical University in Prague under the Silicon Hill club. The site serves primarily as an informational portal for event details, partner acknowledgments, and archival content such as lecture recordings. The business model revolves around community engagement and educational event hosting within the technology and education sectors. The website's market position is limited to a specialized audience interested in retro hardware and software history. Technically, the website is a simple static HTML site with basic CSS and JavaScript, including Google Analytics for visitor tracking. The hosting is provided by ACTIVE 24, and the domain is registered consistently with the academic affiliation. However, the site lacks modern web standards such as HTTPS, security headers, and mobile optimization, which limits its technical maturity and security posture. From a security perspective, the absence of HTTPS and security headers, along with loading external scripts over HTTP, exposes the site to potential man-in-the-middle attacks and data interception risks. No privacy or cookie policies are present, which is a compliance gap under GDPR. The site does not collect user data via forms, reducing some risk, but the use of Google Analytics without consent mechanisms is a privacy concern. Overall, the website is functional for its intended purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user safety. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and adopting security best practices.

I

Indexa GmbH

indexa-online.de

39

Indexa GmbH is a German-based company specializing in wireless security technology products such as alarm systems, video surveillance, and smoke detectors, targeting small to medium-sized businesses and residential customers. The company has over 25 years of experience and offers modular, affordable, and certified security solutions. Their product range includes GSM cameras, digital wireless video door intercoms, and various safety sensors. The website provides detailed product information and downloadable catalogs but lacks modern web features and comprehensive privacy or security policies. Technically, the site is built with legacy tools and hosted on German servers, with no visible HTTPS enforcement or security headers, indicating room for improvement in security posture. Social media presence is active on major platforms, enhancing brand visibility. Overall, the site is functional but requires modernization and enhanced compliance to improve trust and security.

Y

YGG-Workgroups

solutionondemand.com

39

SolutionOnDemand is a German-based small business offering a proprietary Content Management System (CMS) tailored for compact and professional websites, alongside professional web design services. The company, identified as YGG-Workgroups, has been operating since at least 2003, with a stable domain registration consistent with its business history. The website content is primarily in German and targets a broad audience interested in CMS solutions and web design. The business model focuses on software product sales and related web design services, positioning itself as a niche CMS provider in the German market. Technically, the website relies on legacy technologies including Flash (via SWFObject), which is deprecated and poses security and accessibility challenges. The site uses basic HTML and CSS with no modern frameworks detected. Hosting and domain registration are managed through German providers, but there is no evidence of HTTPS enforcement or modern security headers, which impacts the site's security posture. The website lacks mobile optimization and accessibility features, and SEO practices are basic. From a security perspective, the site shows several weaknesses: absence of HTTPS enforcement, no DNSSEC, no security headers, and use of deprecated Flash content. Privacy compliance is minimal, with a privacy policy page present but lacking GDPR compliance indicators and no cookie consent mechanism. No contact emails, phone numbers, or incident response contacts are visible, limiting transparency and trust. The WHOIS data is consistent and legitimate, with no suspicious patterns. Overall, the website scores moderately low on AI evaluation due to outdated technology, weak security posture, and limited privacy compliance. Strategic improvements in security, privacy, and modernization of technology stack are recommended to enhance trustworthiness and compliance.

YGG-Workgroups Medienagentur is a small German full-service media agency specializing in internet presence, software development, multimedia, and graphic design. Their website content is primarily in German and targets a general audience seeking media and web services. The agency uses a proprietary CMS platform named SolutionOnDemand and hosts their website on servers associated with kasserver.com. The site design and navigation are basic but functional, reflecting a small local business profile. From a technical perspective, the website employs standard HTML and CSS without modern JavaScript frameworks or advanced technologies. There is no evidence of advanced performance optimization or mobile responsiveness beyond basic levels. The absence of visible scripts or analytics tools suggests limited digital marketing or tracking capabilities. Security posture is weak, with no detected HTTPS/SSL configuration or security headers. There is no cookie consent mechanism or explicit privacy compliance indicators beyond a basic privacy policy page. The WHOIS data is consistent with the website's business claims and hosting provider, indicating legitimacy. However, the lack of contact information and security best practices reduces trustworthiness. Overall, the website presents a low to moderate risk profile but requires improvements in security, privacy compliance, and contact transparency to enhance business credibility and user trust.

E

Elektro-Duschl GmbH

duschl-elektro.de

57

Elektro-Duschl GmbH is a small, regional German company specializing in electrical installation services in the Rosenheim and Kolbermoor area near Munich. The company offers a broad range of services including electrical installations, alarm and brandmeldeanlagen (fire alarm systems), and network services. It holds recognized certifications such as VdS for fire alarm systems and ISO 9001:2015 for quality management, positioning it as a trusted local service provider. The website content is primarily in German and targets local private and commercial customers. Technically, the website is built with basic HTML, CSS, and JavaScript without modern CMS or frameworks, resulting in moderate performance and basic mobile optimization. Security posture is average with HTTPS assumed but lacking security headers and cookie consent mechanisms. No advanced tracking or analytics tools are detected, indicating minimal user tracking. Overall, the site is functional and professional but could benefit from technical and compliance improvements.

W

Wohnbau Stadt Coburg GmbH

wohnen-coburg.de

51

Wohnbau Stadt Coburg GmbH operates as a real estate company providing housing and property management services primarily in Coburg, Germany. The website is built on WordPress using the Divi theme and incorporates Cookiebot for cookie consent management, indicating awareness of privacy compliance requirements. The technical infrastructure is standard for a medium-sized local business, hosted on German nameservers with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies suggests room for improvement. Contact information and incident response details are not clearly presented, which may impact user trust and compliance. Overall, the website is professional and safe, targeting local residents and tenants, but would benefit from enhanced transparency and security practices.

MHedia.de is a small German technology business specializing in smart web solutions, operated by Marcel Hifinger. The website is minimalistic, providing basic contact information and a clear indication of the business focus on web solutions. The market position appears local and small scale, targeting a general audience in Germany. The business model is service-oriented, likely offering web development or consulting services. Technically, the website is a simple static HTML/CSS site hosted on kasserver.com with no detected CMS or advanced frameworks. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are present. The absence of HTTPS and security headers suggests a basic technical infrastructure with room for improvement in security and performance. From a security perspective, the site does not display privacy, cookie, or terms of service policies, nor any incident response or vulnerability disclosure information. No security best practices such as HTTPS or security headers are evident, which lowers the security posture. However, no critical vulnerabilities or suspicious elements were detected. The domain WHOIS data aligns with the website content and hosting provider, supporting legitimacy. Overall, the website is functional but basic, with moderate trustworthiness. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

pixeldiversity GmbH operates a technology-focused website offering cloud hosting, Plesk administration, R & RStudio environments, newsletter distribution, and mail discussion services. The website serves primarily as a portal linking to various internal and related service domains. The business appears to target technology professionals and organizations requiring specialized hosting and software environments. However, the website content is minimal and lacks comprehensive business or contact information, which limits its professional presentation. From a technical perspective, the site uses basic HTML and CSS without detectable modern frameworks or CMS platforms. There is no evidence of HTTPS enforcement or security headers, which indicates a low maturity level in security implementation. The absence of privacy, cookie, and terms of service policies further highlights compliance gaps. The site is accessible without WAF or security challenges but lacks SEO optimization and mobile responsiveness. Security posture is weak due to missing HTTPS, lack of security headers, and no visible incident response or vulnerability disclosure mechanisms. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and transparency. No contact emails, phone numbers, or social media links are provided, reducing trust and business credibility. Overall, the website presents a low-risk content profile but suffers from significant security, compliance, and transparency deficiencies. Strategic improvements in security infrastructure, privacy compliance, and business information disclosure are recommended to enhance trustworthiness and operational resilience.

M

Museen der Stadt Aschaffenburg

stiftsschatz.de

38

The website represents the Stiftsschatz exhibition of the Museen der Stadt Aschaffenburg, a cultural institution showcasing medieval treasures. It serves a local/regional audience interested in historical and religious artifacts. The site provides basic information and navigation in multiple languages but lacks comprehensive contact and policy information. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics for visitor tracking. The security posture is moderate with IP anonymization in analytics but lacks visible security headers and privacy compliance documentation. Overall, the site is functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

C

contrast. nicolefleischer

contrastagentur.de

38

Contrastagentur.de is a small creative advertising agency based in Pegnitz, Germany, led by Nicole Fleischer. The company offers services including advertising, flyers, posters, logos, and web design, targeting businesses and individuals seeking creative marketing solutions. The website content is minimal but clearly communicates the core services and contact information. The market position appears to be local and small-scale with a focus on creative advertising. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS detected. Hosting is provided by greatnet.de as indicated by the nameservers. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are present. Performance is likely moderate given the simple structure. From a security perspective, the site does not show evidence of HTTPS usage or security headers, which is a significant concern. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. No incident response or security policies are disclosed. The WHOIS data is consistent with the website domain and business type, supporting legitimacy. Overall, the security posture is weak, and privacy compliance is lacking. The overall risk is moderate due to the lack of security best practices and privacy compliance, but no critical vulnerabilities or malicious content were detected. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.

Colloquium Historicum Wirsbergense is a well-established non-profit historical society based in Lichtenfels, Germany, with a focus on Franconian history. Founded in 1924, it serves a large membership base of over 1900 members organized in 19 groups. The organization offers lectures, guided tours, online events, publications, and maintains a media library, positioning itself as a significant cultural institution in the region. The website reflects this mission with relevant content and a clear structure but lacks advanced technical features and modern design elements. Technically, the website is built with basic HTML and CSS without detectable CMS or modern frameworks. Hosting is provided by greatnet.de, a German hosting provider, consistent with the organization's location. The site shows moderate performance and basic mobile optimization but lacks accessibility features and SEO enhancements. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the website does not demonstrate strong security posture. There is no evidence of HTTPS enforcement or security headers, no privacy or cookie policies, and no incident response or vulnerability disclosure information. These gaps present compliance and security risks, especially under GDPR regulations. The WHOIS data aligns with the organization's legitimacy, showing no privacy protection and consistent domain registration. Overall, the website is functional and trustworthy for its cultural and educational purpose but requires improvements in security, privacy compliance, and technical modernization to enhance user trust and regulatory adherence.

V

Verband für landwirtschaftliche nutztierartige Haltung von Wild e.V.

wildhalterverband-bw.de

60

The Verband für landwirtschaftliche nutztierartige Haltung von Wild e.V. in Baden-Württemberg is a regional association focused on agricultural wild animal husbandry. The website serves as an information hub for members and interested parties, providing resources such as training, recipes, regulations, and marketing materials. The business model centers on membership services and regional support within Baden-Württemberg, Germany. The site is primarily in German and targets agricultural stakeholders and members of the association. Technically, the website is hosted on Hetzner servers and uses a custom or proprietary CMS. It employs standard web technologies including HTML, CSS, and JavaScript, with Klaro used for cookie consent management. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The presence of a member login area and search functionality indicates interactive elements, though some modern security best practices like CSRF tokens are not evident. From a security perspective, the site enforces HTTPS and implements cookie consent, which supports GDPR compliance. However, no explicit security headers were detected, and the login form lacks visible CSRF protection. There is no public incident response or vulnerability disclosure policy. The domain registration data aligns well with the website's regional and organizational claims, supporting legitimacy. Overall, the security posture is moderate but could be improved with additional headers and form protections. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing security headers, implementing CSRF tokens, improving mobile responsiveness, and expanding privacy and security policies. These steps will strengthen trust, compliance, and user experience for members and visitors.

I

Izodom 2000 Polska

izodom2000polska.com

47

Izodom 2000 Polska is a well-established Polish company specializing in the production of styrofoam blocks and complete building systems for energy-efficient and passive houses. With over 20 years of market presence, the company offers a proprietary technology that supports quick and affordable construction. Their target audience includes construction contractors, architects, and individuals interested in modern, energy-saving building solutions. The website reflects a medium-sized business with consistent branding and a good level of content quality.

A

Apollo21

apollo21.online

59

Apollo21 is a small online marketing agency based in Slovakia, founded in 2022. The company offers digital marketing services targeting businesses seeking to improve their online presence. The website is built on WordPress using the Divi theme and incorporates Yoast SEO for search engine optimization. The technical infrastructure is modern but lacks advanced security configurations such as DNSSEC and security headers. The website content is professional and relevant, with good design and mobile optimization, but lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is basic with no incident response or vulnerability disclosure information available. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

The Betroffenenbeirat Bamberg is a small non-profit advisory board dedicated to supporting victims of sexual, spiritual, and violent abuse within the Archdiocese of Bamberg. The organization provides information, advocacy, and coordination with abuse studies and commissions, targeting victims and the church community. The website content is informational and supportive but technically outdated, generated from Microsoft Word HTML export, resulting in poor design and accessibility. The technical infrastructure is basic, hosted on German servers with no detected CMS or modern frameworks. Security posture is weak due to lack of HTTPS information and missing security headers, though privacy compliance is adequate with a GDPR-compliant privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, with no adult or explicit content, but improvements in technical implementation and security are recommended.

J

Jana Chmelařová

jacha.cz

40

The website www.jacha.cz represents a small Czech design studio operated by Jana Chmelařová, offering graphic design, painting, drawing, and corporate material services. The site is structured with clear navigation and presents a portfolio of current projects, targeting a general audience interested in creative and promotional materials. The business model is service-oriented, focusing on bespoke design solutions for local clients. The market position appears to be that of a small, independent creative studio with a localized presence. Technically, the website uses basic HTML, CSS, and JavaScript technologies, including Google Analytics for visitor tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility features. Performance is moderate, with no advanced technical infrastructure detected. The absence of HTTPS and security headers indicates a need for improved security practices. From a security perspective, the site does not implement key security headers or HTTPS, which exposes visitors to potential risks. No privacy or cookie policies are present, and no contact information for security or incident response is provided. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. However, the website content is professional and consistent with a small design business. Overall, the website presents moderate risk due to missing security and privacy controls and lack of domain registration transparency. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving contact information visibility, and enhancing security headers to protect users and improve trust.

F

Startseite | Find das Bild

find-das-bild.de

42

Find-das-bild.de is a German child-friendly image search engine designed to provide children with free and safe photos for use. The website is powered by TYPO3 CMS and targets an educational niche audience, focusing on providing accessible visual content for children. The platform maintains a clean and professional design with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web standards but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but could be improved by adding security policies and incident response contacts. Overall, the site is safe, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security features.

D

Demetec GmbH

demetec.net

31

Demetec GmbH is a well-established software development company based in Eupen, Belgium, with a subsidiary in Lisbon, Portugal. With over 22 years of experience, the company specializes in web-based software solutions focusing on digitalization and customer-oriented internet applications for medium-sized enterprises. Their key services include application development, web and app development, project consulting, and digital transformation. The company targets medium-sized businesses primarily in Belgium and Portugal, leveraging a skilled international team. The website reflects a professional and consistent brand image with detailed job offerings and clear contact information, supporting their market position as a reliable technology service provider. Technically, the website uses a modern Microsoft .NET technology stack with popular frontend frameworks and libraries such as Angular, React, Vue, and jQuery. The site is mobile-optimized and offers a good user experience, though some SEO and accessibility improvements are possible. Security-wise, the domain is protected with clientTransferProhibited status, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could enhance security and privacy practices to align with best standards.