United States security reports

F

FormAssembly Inc.

formassembly.com

74

FormAssembly Inc. is a well-established SaaS company founded in 2006, specializing in secure online form building and data collection solutions. The company targets a broad audience including businesses, educational institutions, nonprofits, healthcare organizations, government agencies, and financial services. Their market position is strong, supported by compliance certifications such as HIPAA and FedRAMP, and trusted by notable clients like Southwest Airlines, Amazon, and Harvard University. The business model focuses on subscription-based cloud services with advanced integration capabilities, particularly with Salesforce and other enterprise platforms. Technically, the website is built on WordPress with a modern tech stack including jQuery, Select2, and various marketing and analytics tools such as Google Tag Manager, Marketo, and CrazyEgg. Hosting is likely on AWS, inferred from AWS Marketplace presence. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforced, compliance with industry standards, and no visible vulnerabilities. However, explicit security headers and a public vulnerability disclosure policy are not evident, representing areas for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Business credibility is high, supported by clear contact information, professional content, and trust signals. Overall, the website and business present a low-risk profile with strong security and compliance focus. The main concern is the absence of WHOIS registration data, which slightly reduces trustworthiness but is mitigated by the company's established presence and transparency on the site.

F

Found.ee, LLC

found.ee

58

Found.ee, LLC operates a marketing platform designed to empower creators and businesses to grow their audience and engagement through advanced advertising tools, landing pages, and audience tracking. The company positions itself as a trusted partner for over 25,000 creators and is featured in reputable media outlets such as Billboard and Forbes. Their business model centers on SaaS offerings with free and paid tiers, targeting creators and marketers seeking scalable digital marketing solutions. Technically, the website leverages modern frameworks like React and Material-UI, integrates with popular marketing and analytics tools such as Google Analytics, Google Tag Manager, Intercom, and Tapfiliate, and employs tracking pixels and affiliate programs to enhance marketing effectiveness. The site demonstrates good mobile optimization and a professional design, though accessibility and SEO could be further improved. Security-wise, the site enforces HTTPS and uses reCaptcha on forms, but lacks explicit security headers and detailed security policies or incident response information. Privacy compliance is partially addressed with a privacy policy and terms of service, but cookie consent mechanisms are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

A

Allspring Global Investments

allspringglobal.com

74

Allspring Global Investments is a large, established investment management firm focused on providing asset management and financial advisory services to institutional investors and financial advisors. The company positions itself as a global investment partner emphasizing returns beyond financial gains. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site uses modern technologies including Azure Application Insights for telemetry, OneTrust for cookie consent, and Episerver CMS, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, but the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure program to enhance trust and compliance.

J

Jean-Paul Rodrigue

jeanpaulrodrigue.info

43

Jean-Paul Rodrigue's website serves as a professional academic platform showcasing his expertise in transportation, logistics, and maritime business administration. The site targets academics, students, and professionals in the maritime and transport sectors, providing access to his publications, research interests, and professional affiliations. The business model is centered on academic dissemination and education, with a strong market position supported by high citation rankings and recognized scholarly contributions. Technically, the website is built on WordPress, hosted on Bluehost, and uses common plugins such as All in One SEO Pro and Jetpack. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The technical infrastructure is modern but could benefit from enhanced security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks explicit security policies, incident response contacts, and privacy or cookie policies, which are compliance gaps. No vulnerabilities or suspicious elements were detected, but improvements in security headers and privacy compliance are recommended. Overall, the website is trustworthy, professional, and content-rich, with minimal tracking and no advertising. The domain registration is consistent with the academic nature of the site, though the domain is relatively new. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing security and incident response information to enhance trust and compliance.

T

Texas A&M University at Galveston

tamug.edu

61

Texas A&M University at Galveston is a specialized higher education institution focusing on marine and maritime studies, operating under the Texas A&M University System. The website serves a diverse audience including prospective and current students, faculty, staff, and visitors, providing comprehensive academic, research, and campus life information. The institution's market position is that of a niche educational provider with strong ties to maritime industries and marine sciences. Technically, the website employs a modern technology stack including jQuery, Foundation, Bootstrap, and multiple analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile-optimized, accessible, and well-structured, though performance is moderate. The use of asynchronous scripts and lazy loading indicates attention to performance and user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and explicit cookie consent mechanisms, which are recommended for enhanced protection and compliance. The absence of WHOIS data for the queried subdomain is noted but likely due to querying the 'www' prefix rather than the base domain. Overall, the security posture is good but could be improved with additional policies and disclosures. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the university. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and clarifying WHOIS information by querying the correct domain. These steps will enhance compliance, security, and user trust.

J

James Hardie

jameshardie.com

63

James Hardie is a leading manufacturer of fiber cement siding and related building products, targeting homeowners, contractors, and building professionals. The company positions itself as a market leader with a strong focus on durability and design. The website is professionally designed, mobile-optimized, and rich in content, providing extensive product catalogs, project resources, and design guidance tools. Technically, the site leverages modern frameworks such as Next.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or recent domain registration, which slightly impacts trust assessment. Overall, the site demonstrates high professionalism and trustworthiness with room for improvement in transparency around security and privacy practices.

H

Hubwayz

innstantconnect.com

44

Hubwayz is a newly founded (2024) technology company specializing in providing a comprehensive travel technology platform for travel companies such as wholesalers, bed banks, OTAs, and DMCs. Their platform offers a wide range of services including hotel API aggregation, marketplace, payment solutions, and profit growth tools, positioning them as a competitive player in the travel technology sector. The website is professionally designed using WordPress and hosted on AWS infrastructure, leveraging modern JavaScript libraries and marketing tools such as HubSpot and Cookiebot for analytics and compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and security headers are not explicitly observed. The domain registration is consistent with the business claims, registered transparently via Amazon Registrar in 2024. Overall, the website demonstrates a solid technical foundation and business credibility but lacks visible privacy and terms of service policies, which are recommended for compliance and trust.

HealthySonographer.com is an educational website sponsored by Canon Medical Systems, USA, focused on promoting ultrasound ergonomics to reduce musculoskeletal injuries among sonographers. The site offers video content, articles, and event information targeting healthcare professionals in the ultrasound field. Technically, the website uses modern frameworks such as Bootstrap, jQuery, and Brightcove for video delivery, with Google Analytics and reCAPTCHA integrated for analytics and security. The site is hosted with GoDaddy and uses HTTPS with a good SSL configuration, though DNSSEC is not enabled and security headers are missing. Privacy compliance is limited as no privacy or cookie policies are present. Business credibility is strong due to sponsorship by a reputable medical systems company and consistent domain registration data. Overall, the website is professional, content-rich, and trustworthy but would benefit from improved privacy compliance and enhanced security headers.

A

AppleMagazine

applemagazine.com

65

AppleMagazine is a specialized online media publication focused on delivering real-time breaking news and in-depth coverage related to Apple products and the broader technology industry. Established in 2003, it serves a niche audience of Apple users and technology enthusiasts primarily in the United States. The website offers news articles, product updates, and technology insights, positioning itself as a trusted source within its market segment. The business model revolves around content publication supported by advertising and analytics integrations.

USA Rugby is the official national governing body for rugby union in the United States, providing governance, membership services, event management, and community engagement for rugby players and fans. The organization operates as a non-profit entity focused on growing and supporting rugby at all levels across the country. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at rugby stakeholders in the USA. Technically, the site leverages modern web technologies including Next.js, React, and Video.js, with integration of Google services such as Maps API, Tag Manager, and reCAPTCHA for enhanced functionality and security. The site is hosted with a reputable registrar and uses CDN services for content delivery, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is trustworthy and well-maintained but could improve in privacy and security transparency.

G

GumGum

gumgum.com

73

GumGum is an established enterprise-level advertising technology company founded in 2004, specializing in AI-powered contextual intelligence and high-impact advertising solutions across display, video, and connected TV formats. The company positions itself as a leader in brand-safe advertising with a strong focus on delivering relevant and personalized ad experiences. Their platform integrates advanced AI to analyze audience mindset and attention metrics, serving a diverse clientele including major global brands and agencies. Technically, the website is built on Webflow CMS, hosted on AWS infrastructure, and employs modern web technologies such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, with multilingual support via Weglot. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, GumGum demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in privacy policy transparency and security header implementation are recommended.

J

JEAN-PAUL RODRIGUE

porteconomicsmanagement.org

54

Port Economics, Management and Policy is an academic website dedicated to providing comprehensive analysis and educational content on the port industry, authored primarily by Jean-Paul Rodrigue and collaborators. The site supports a published book and offers extensive resources including chapters, case studies, and media elements targeting academics, port professionals, and students. Technically, the website is built on a modern WordPress platform hosted by Bluehost, employing SEO and analytics tools, and is mobile optimized with good accessibility. Security posture is solid with HTTPS and domain protections, though lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

A

Andy Chung

andychung.me

58

Andy Chung's website is a personal portfolio showcasing design projects primarily focused on creative and digital design work. The site highlights various projects from 2016 to 2024, emphasizing a design-centric business model targeting a general audience interested in design and creative portfolios. The website is hosted on the Read.cv platform with media assets served via Cloudinary, indicating a modern but simple technical infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design quality. However, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is moderate with no detected security headers and DNSSEC not enabled, suggesting room for improvement in technical security controls. Overall, the domain registration is privacy protected but consistent with the site’s purpose and age, indicating legitimacy. Strategic recommendations include adding privacy and cookie policies, improving security headers, and providing contact information to enhance trust and compliance.

U

US Center for Safe Sport

uscenterforsafesport.org

58

The U.S. Center for SafeSport is a reputable nonprofit organization dedicated to preventing and addressing abuse in sports within the U.S. Olympic and Paralympic Movement. Their website offers comprehensive resources including training courses, reporting mechanisms, and educational toolkits aimed at athletes, coaches, and sport organizations. The organization maintains a strong market position as a leading authority on athlete safety and abuse prevention. Technically, the website is built on WordPress with Elementor and integrates multiple modern analytics and marketing tools such as Google Analytics, HubSpot, Hotjar, and TikTok Pixel. The site is well-optimized for mobile devices, has good SEO practices, and uses Cloudflare for DNS and domain registration, enhancing performance and security. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and has domain transfer protections. However, DNSSEC is not enabled, and some security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security posture.

N

Ninja Test Kitchen

ninjatestkitchen.com

60

Ninja Test Kitchen is a branded content website focused on providing recipes, cooking tips, and product-related culinary content for users of Ninja kitchen appliances. The site serves as a content marketing platform supporting the Ninja brand, offering categorized recipes, collections, and contributor features. The website is built on WordPress and leverages modern web technologies including jQuery, Tiny Slider, and Google Tag Manager for analytics and marketing. Media assets are hosted on AWS S3, and DNS is managed via Cloudflare, ensuring reliable performance and security. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile-optimized with a clear navigation structure. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers could be improved. Privacy and cookie policies are comprehensive and linked to the main Ninja domain, indicating GDPR compliance. No direct contact emails or phone numbers are listed, which is typical for content marketing sites. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Shark® US

sharkclean.com

71

Shark® US operates a comprehensive e-commerce website offering a wide range of home cleaning appliances including vacuum cleaners, steam mops, robot vacuums, air purifiers, and hair care products. The company is positioned as a leading brand in the retail sector for home and personal care appliances, supported by a strong brand identity and consistent professional content. The website leverages modern web technologies such as Angular, New Relic, and Riskified to ensure performance monitoring and fraud prevention. The presence of detailed privacy, cookie, and terms policies indicates a mature approach to compliance and user trust. Security posture is strong with HTTPS enforced and vulnerability disclosure policies publicly available, although some security headers could be explicitly implemented for enhanced protection. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the alignment with SharkNinja corporate branding and external references supports the site's authenticity. Overall, the website demonstrates a high level of digital maturity and business credibility.

V

Vollrath Manufacturing Services

vollrathmanufacturing.com

66

Vollrath Manufacturing Services is a well-established B2B manufacturing company specializing in deep draw stamping, progressive metal stamping, and complementary metal fabrication services. Founded in 2014 and operating under the parent company The Vollrath Company, LLC, it serves industrial and OEM clients primarily in the United States. The company positions itself as an industry leader with a comprehensive suite of manufacturing capabilities and engineering consulting services. The website reflects a professional and consistent brand image with clear navigation and multiple contact options, including phone and interactive chat forms. Technically, the site leverages modern web technologies including Kentico CMS, AWS hosting, and integrates marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Bing UET, while maintaining GDPR and cookie compliance through OneTrust. Security posture is strong with HTTPS, domain status locks, and form protections via reCAPTCHA, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is trustworthy, well-maintained, and suitable for its target industrial audience.

S

Sport:80 USA Inc.

sport80.com

75

Sport:80 USA Inc. operates a market-leading cloud-based sports management platform designed specifically for National Governing Bodies and sports organizations. Their platform offers comprehensive features including membership management, certification tracking, event registration, CRM, compliance, and finance management. The company positions itself as an innovator in sports technology with a strong client base of over 80 NGBs and sports organizations, primarily in the USA and UK. The website reflects a professional and consistent brand image with extensive content and client testimonials supporting their market position. Technically, the site uses modern JavaScript libraries and integrates multiple analytics and marketing tools, ensuring good digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of visible security headers and a vulnerability disclosure page suggests room for improvement. The lack of WHOIS data is a concern but is mitigated by the presence of certifications and transparent contact information. Overall, the site is trustworthy, well-designed, and business-focused, with a moderate to high security and privacy compliance level.

Podium is a leading AI-powered lead generation and customer interaction platform designed to help businesses convert more leads and increase revenue. The platform integrates multiple communication channels including calls, texts, web chats, emails, and social media into a unified AI-powered inbox, enabling businesses to automate customer interactions and improve responsiveness. With over 100,000 businesses using Podium, it holds a strong market position in the SaaS technology sector focused on sales and marketing automation. Technically, the website is built using modern web technologies such as React and Next.js, with integrations of advanced analytics and marketing tools like Google Analytics, Marketo, FullStory, and Sentry. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. The use of security headers and HTTPS indicates a strong security posture, although explicit security policies and incident response information are not publicly available. From a security perspective, the website employs best practices including HTTPS enforcement and security headers, with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data is a notable anomaly that slightly reduces domain trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. Overall, Podium presents a professional, secure, and well-structured online presence with strong business credibility. The main risk lies in the missing WHOIS data, which should be investigated further to ensure domain legitimacy. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and continuous monitoring of third-party scripts to maintain security and compliance.

S

Southern California Eagles

seahorsesoccer.com

60

Southern California Eagles is a small, Christian-focused non-profit soccer organization established in 1983, offering youth and competitive soccer programs, camps, and international outreach. The website is built on Squarespace, featuring modern design and good mobile responsiveness, but lacks comprehensive privacy and cookie policies. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and incident response information are absent. The missing WHOIS data raises concerns about domain registration legitimacy, but the active social media presence and consistent branding support the organization's credibility. Strategic improvements include adding privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

L

Legacy Hotel

imglegacyhotel.com

50

Legacy Hotel at IMG Academy is a boutique luxury hotel located in Bradenton, Florida, catering primarily to visitors of IMG Academy and the surrounding coastal areas. The hotel offers modern accommodations, event hosting, dining, wellness, and recreational amenities designed to support an active lifestyle. It positions itself as a premier hospitality option with convenient access to local airports and beaches. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and multiple marketing and analytics tools. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is generally good with HTTPS enforced, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises some legitimacy questions, but the professional presentation and business details support credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.

S

Stoelting Foodservice

stoeltingfoodservice.com

62

Stoelting Foodservice is a specialized manufacturer of frozen dessert machines, including soft-serve ice cream, frozen yogurt, custard, gelato, and beverage dispensers. The company operates as a brand under the larger Vollrath Companies umbrella, positioning itself as a reputable provider in the foodservice equipment manufacturing sector. Their website reflects a professional and consistent brand image, targeting commercial foodservice operators such as restaurants, convenience stores, and amusement parks. Technically, the site is built on the Kentico CMS platform, employs modern web technologies, and integrates privacy and analytics tools such as OneTrust, Google Analytics, and Microsoft Clarity. Security posture is strong with HTTPS and security headers properly configured, although explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly reduces domain trustworthiness. Overall, the website is well-designed, compliant with privacy regulations, and serves its business purpose effectively.

T

The Vollrath Company, LLC

vollrathcompany.com

62

The Vollrath Company, LLC is a well-established manufacturing business with a history dating back to 1874. It specializes in commercial cooking and serving equipment, OEM manufacturing solutions, medical products, and cleaning products. The company operates multiple subsidiaries and brands, positioning itself as a leader in the commercial foodservice and manufacturing sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at commercial clients and partners. Technically, the website uses modern web technologies including JavaScript frameworks, Google Tag Manager, Microsoft Clarity for analytics, and OneTrust for cookie consent management. It is hosted with Amazon Registrar and uses AWS DNS services. The site is mobile optimized and has good SEO and accessibility basics, though some improvements could be made. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks published privacy policies, terms of service, security policies, and incident response contacts. No critical vulnerabilities or suspicious patterns were detected, but adding these compliance and security documents would improve trust and regulatory adherence. Overall, the website is professional and trustworthy with moderate technical maturity and a solid business foundation. Strategic improvements in privacy and security documentation would enhance compliance and user trust.

T

The Vollrath Company, LLC

vollrathfoodservice.com

62

The Vollrath Foodservice website represents a large, established company specializing in commercial kitchen equipment and foodservice supplies. The company offers a broad product range and maintains multiple subsidiaries and partner companies, positioning itself as a leader in the hospitality sector. The website is professionally designed with comprehensive content targeting commercial foodservice businesses, dealers, and consultants. Technically, the site uses modern web technologies including Kentico CMS, Google Tag Manager, and OneTrust for privacy compliance, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and a formal security policy is absent. The lack of WHOIS data for the domain is a notable concern, potentially indicating a subdomain or registration anomaly, but the overall site content and branding suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to strengthen trust.

N

Ninja® US

ninjakitchen.com

72

Ninja Kitchen operates as a direct-to-consumer e-commerce platform specializing in innovative kitchen and outdoor appliances, including air fryers, blenders, grills, and kitchenware. The brand is well-established with a domain age since 2008 and is part of the SharkNinja Operating, LLC family, indicating a strong market position in the retail kitchen appliance sector. The website targets consumers seeking quality kitchen appliances with exclusive offers and collaborations, supported by comprehensive product information and customer support services. Technically, the site leverages modern web technologies such as Angular, Cloudflare CDN, and integrates advanced analytics and fraud prevention tools like Google Tag Manager and Riskified, ensuring a performant and secure user experience. Security posture is robust with HTTPS enforcement, domain transfer protections, and a public vulnerability disclosure policy, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the website presents a professional, trustworthy, and user-friendly platform with strong branding and market credibility.

F

F-Prime Capital

fprimecapital.com

67

F-Prime Capital is a well-established global venture capital firm specializing in investments across life sciences, technology, healthtech + services, and crypto sectors. The company leverages a seasoned team of experts to support scalable growth for portfolio companies. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting entrepreneurs seeking venture capital. The firm maintains a strong market position with a heritage spanning four decades and affiliations with FMR LLC and its subsidiaries. Technically, the website is built on WordPress with modern plugins and libraries, offering good performance and mobile optimization. Security posture is solid with HTTPS and some security best practices, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is partially addressed with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

P

ProofNoMore - The Sober Superstore for Non-Alcoholic & Alc-Free Drinks

proofnomore.com

65

ProofNoMore is an e-commerce retailer specializing in non-alcoholic and alcohol-free craft beverages, targeting consumers interested in mindful drinking and sober lifestyles. The website offers a curated selection of NA-beers, alcohol-free wines, zero-proof spirits, non-alcoholic ciders, mocktails, and mixers. Positioned as a niche sober superstore, it serves a growing market segment focused on alcohol alternatives. The business was founded in 2021 and operates primarily in the US market. Technically, the site is built on Shopify using the Empire theme, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Klaviyo, indicating a mature digital marketing approach. Hosting is provided by DreamHost, LLC, with SSL enabled and moderate performance and mobile optimization. Security posture is adequate with HTTPS but lacks DNSSEC and security headers, and no explicit security or privacy policies are published on the site. User tracking is extensive, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is professionally designed and functional but would benefit from enhanced privacy and security transparency.

G

Green Marine

green-marine.org

68

Green Marine operates as a leading environmental certification program focused on the North American maritime industry, promoting voluntary environmental performance improvements beyond regulatory requirements. The organization emphasizes collaboration with industry, governments, academia, and environmental groups to address key environmental issues such as biodiversity protection and pollution control. The website reflects a mature and professional digital presence with clear navigation, comprehensive content, and active engagement through news, events, and social media channels. Technically, the site employs modern web technologies, including Google Tag Manager for analytics and TermsFeed for cookie consent management, hosted via GoDaddy registrar services. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Overall, the domain's long registration history and consistent branding support a high legitimacy score. No critical vulnerabilities or compliance gaps were detected, and the site maintains good privacy compliance with GDPR indicators. The business model centers on voluntary certification and continual improvement, targeting maritime industry stakeholders and environmental advocates.

The website groundup.studio is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to the actual content. As a result, no business description, contact information, or policies are visible. The domain is registered with privacy protection via Domains By Proxy, LLC in the US, created in 2020, which is consistent with a small business or studio but lacks transparency. The technical infrastructure includes Cloudflare protection and standard web technologies, but no CMS or frameworks are detectable. Security posture cannot be fully assessed due to lack of content and security headers. Overall, the site appears to be protected by a WAF, limiting analysis and reducing trust signals. Strategic recommendations include enabling public access to business information, publishing privacy and cookie policies, and improving security headers and transparency.

L

Libbey

libbey.com

66

Libbey is a well-established company specializing in the manufacturing and retail of durable and aesthetically pleasing tableware products for both home and professional foodservice markets. With a history spanning over 200 years, Libbey positions itself as a trusted brand offering quality products designed to last a lifetime. The website reflects a mature digital presence with clear segmentation for home and foodservice customers, supported by regional domains for Latin America and China. Technically, the site leverages modern web technologies including React, Next.js, and Builder.io CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and published policies. Privacy compliance is addressed with a comprehensive privacy policy, but cookie consent mechanisms could be enhanced. Overall, the website demonstrates high professionalism and trustworthiness, though the lack of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security transparency and cookie consent to further strengthen compliance and user trust.

V

VisitIQ

visitiq.io

58

VisitIQ is a US-based technology company founded in 2022, offering an AI-driven identity intelligence and activation platform tailored for marketers, agencies, and enterprise marketing teams. Their platform enables identification of anonymous digital traffic, definition of ideal customer profiles (ICPs), audience expansion, and campaign activation leveraging AI and geo-targeting. The company positions itself as a modern B2B SaaS provider with a focus on marketing intelligence and activation solutions. The website is professionally designed, built on WordPress with modern plugins and hosted on WordPress.com infrastructure, indicating a mature digital presence. Multiple marketing and analytics tools are integrated, including Microsoft Clarity, LinkedIn Insight, Facebook Pixel, and Google Tag Manager, reflecting extensive user tracking and data collection capabilities. Security posture is solid with HTTPS enforced and use of hCaptcha for form protection, though some security best practices like DNSSEC and security headers could be improved. Privacy compliance is limited as no explicit privacy or cookie policies were found, which is a notable gap for GDPR and other regulations. Contact information is available only via web forms, with no direct emails or phone numbers published. WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security policies.

S

Sports Illustrated

si.com

72

Sports Illustrated is a well-established sports media brand providing comprehensive sports news, expert analysis, and multimedia content focused on major sports leagues and events. The website serves a broad audience of sports fans and enthusiasts with a business model that includes advertising, subscription services, and e-commerce offerings such as merchandise and ticket sales. The brand enjoys a strong market position as a leading sports media outlet in the United States. Technically, the website employs a modern technology stack including React, Google Tag Manager, Adobe Typekit fonts, and various third-party widgets and ad networks. The site is mobile optimized and implements good SEO and accessibility practices, though accessibility could be enhanced further. Performance is moderate with a well-structured front-end and use of content delivery networks. From a security perspective, the site enforces HTTPS, uses security headers such as CSP and HSTS, and incorporates cookie consent mechanisms compliant with GDPR. However, no explicit public security policy or incident response contact information is found, which could be improved to enhance transparency and trust. The WHOIS data is unavailable or protected, which is common for large brands but slightly reduces domain trustworthiness. Overall, Sports Illustrated's website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for users. Strategic improvements in security transparency and accessibility would further strengthen its posture.

I

InMoment

inmoment.com

70

InMoment is an established enterprise-level company founded in 2003, specializing in integrated customer experience solutions powered by AI. The company offers a comprehensive CX platform and services targeting various industries including retail, financial services, healthcare, transportation, and more. Their market position is strong, supported by a recent acquisition by Press Ganey Forsta, enhancing their industry footprint. The website demonstrates a mature technical infrastructure built on WordPress with modern performance and SEO optimizations, including the use of Google Tag Manager, OneTrust for cookie consent, and WP Rocket for caching and optimization. Security posture is good with HTTPS enforced and some security headers present, though improvements are recommended in DNSSEC and CSP implementation. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service detected in the provided content. Overall, the website is professional, trustworthy, and well-branded, with clear business focus and consistent messaging.

T

TradeCentric

punchout2go.com

65

TradeCentric is a well-established B2B eCommerce integration company founded in 2008, specializing in connecting trading partners through eCommerce and eProcurement solutions. Their market position is solid within the B2B automation space, offering a suite of services including PunchOut catalogs, PO Automation, Invoice Automation, and more. The website reflects a professional and consistent brand image targeting B2B buyers and suppliers. Technically, the site is built on WordPress, hosted on AWS infrastructure, and leverages modern marketing and analytics tools such as HubSpot, Google Analytics, and Drift chat. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

T

TradeCentric

tradecentric.com

65

TradeCentric is a well-established B2B technology company specializing in eCommerce and eProcurement integration solutions. Founded in 2008, it offers a comprehensive suite of services including PunchOut Catalogs, Purchase Order Automation, Invoice Automation, and more, targeting B2B buyers and suppliers. The company positions itself as a leader in streamlining complex B2B transactions through a fully-managed integration platform, enhancing operational efficiency and profitability for its clients. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to its audience. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in implementing advanced security headers and publishing explicit security policies. Privacy compliance is well addressed with GDPR-aligned cookie consent mechanisms and privacy policies. Overall, TradeCentric presents a trustworthy and credible business profile with a strong market position in the B2B eCommerce integration space.

G

Genesys

mypurecloud.com.au

73

Genesys is a leading enterprise technology company specializing in cloud-based contact center and customer experience orchestration solutions. Their flagship product, Genesys Cloud CX, leverages AI to empower businesses to deliver exceptional customer service across multiple channels. The company targets large enterprises and businesses seeking scalable, AI-powered customer engagement platforms. The website reflects a mature, professional digital presence with comprehensive content and strong branding consistency. Technically, the site uses modern frameworks such as Bootstrap and WordPress, with integrations like Intellimize for marketing optimization. Performance and mobile responsiveness are excellent, supporting a seamless user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security and incident response policies are not prominently published. Overall, the site demonstrates a high level of digital maturity and business credibility, though WHOIS data is unavailable likely due to privacy protection, which is common for enterprises. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.

G

Gravity Team

gravityteam.co

65

Gravity Team is a specialized crypto market making and liquidity provider operating since 2017. They serve a broad range of clients including crypto projects, exchanges, and venture capital firms, offering proprietary quantitative trading software that provides liquidity across over 1,200 crypto-asset pairs on more than 25 exchanges. The company positions itself as a top player in the crypto liquidity market with strong partnerships and a significant trading volume. Technically, the website is built on WordPress with modern tools such as Google Analytics, HubSpot, and GSAP for animations, ensuring a fast, mobile-optimized, and SEO-friendly experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism. Overall, the site reflects a professional and trustworthy business with good digital maturity.

E

EventBeacon

eventbeacon.com

64

EventBeacon is a specialized technology platform designed to streamline the collegiate athletic recruiting process by providing college coaches with mobile access to event schedules, athlete profiles, and evaluation tools. The platform integrates with CRM systems to facilitate data sharing among coaching staff. The website is professionally designed, mobile-optimized, and leverages modern web technologies including Webflow CMS and HubSpot marketing tools. The business is positioned as a niche service within the education and sports technology sectors, supported by IMG Academy as the parent organization. Security posture is solid with HTTPS and privacy management tools in place, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

J

JazzHR

theresumator.com

75

JazzHR is a technology company specializing in AI-powered recruitment software tailored for small to medium-sized businesses. Their platform streamlines the hiring process, enabling companies to find and hire talent efficiently. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong branding supported by industry awards and customer testimonials. Technically, the site leverages WordPress CMS with modern analytics and marketing integrations, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall business credibility remains high based on website professionalism and external trust signals.

I

IMG Academy

imgacademy.com

65

IMG Academy is a well-established sports and education institution offering athletic training and educational programs on a large, world-class campus. The website reflects a mature digital presence built on Drupal 10 with integrations for analytics, video content, and payment processing. The site is professionally designed, mobile-optimized, and provides a rich user experience. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with room for enhancement in headers and explicit policies. Overall, the site is trustworthy but would benefit from better compliance documentation and domain registration clarity.

K

Krause+

krauseplus.com

49

Krause+ is a real estate development and property management company operating primarily in Des Moines, Iowa, and Northern Italy. Their portfolio spans hospitality, athletics, commercial, retail, and residential properties, focusing on revitalizing underutilized real estate into vibrant communities. The website reflects a medium-sized regional business with a professional digital presence, targeting businesses, residents, and investors interested in real estate opportunities and community development. Technically, the website is built on WordPress using modern themes and plugins such as WPBakery and Salient, with integration of Google Analytics via Google Site Kit. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data for the domain is a notable concern, as it is inconsistent with the active and professional website presence. This gap reduces trustworthiness and suggests the need for further verification. Overall, the site is well-structured and trustworthy from a content and business perspective but requires improvements in transparency and security best practices.

D

Des Moines Menace Soccer

menacesoccer.com

59

Des Moines Menace Soccer operates as a regional premier soccer team based in Iowa, offering ticket sales, merchandise, youth programs, and community engagement activities. The website is built on the SportsEngine CMS platform and integrates modern web technologies including AngularJS, jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience for soccer fans and local community members. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not published. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Strategic recommendations include publishing security and incident response policies, adding clear contact information, and verifying domain registration details to enhance business credibility and trust.

L

Lexington Eagles

lexingtoneagles.com

58

Lexington Eagles is a small, faith-based non-profit soccer program launched in 2024, operating as a division of Missionary Athletes International. The organization focuses on empowering players of all ages and backgrounds through soccer and leadership development, offering programs such as urban ministry, school programs, international tours, and volunteer opportunities. The website is professionally designed using Squarespace, featuring good navigation and mobile optimization. However, the absence of privacy and cookie policies and missing WHOIS domain registration data present compliance and trust concerns. Security posture is strong with HTTPS and HSTS enabled, but additional security headers and policies are recommended. Overall, the site is functional and trustworthy from a content perspective but requires improvements in privacy compliance and domain legitimacy transparency.

D

Del Val Eagles

delvaleagles.com

57

Del Val Eagles is a small non-profit organization focused on providing soccer programs and camps primarily for youth and adults, with a faith-based community orientation. The organization is affiliated with Missionary Athletes International, a recognized non-profit entity. The website is professionally designed using Squarespace, featuring good navigation and mobile optimization, but lacks key privacy and cookie policies. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could improve protection. The absence of WHOIS data reduces domain trustworthiness, but the website content and affiliations provide reasonable credibility. Contact information is limited to an email address and Instagram social media link, with no phone or physical address provided.

O

Orlando Eagles

orlandoeaglessoccer.com

60

Orlando Eagles is a small community-focused soccer organization launched in 2023, aiming to use soccer as a tool for youth development and community impact in Orlando, US. The website is built on the Squarespace platform, featuring modern design elements and multimedia content such as videos and images. While the site is visually appealing and mobile-optimized, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its overall trustworthiness and compliance posture. Security-wise, the site enforces HTTPS and HSTS, but could benefit from additional security headers and formal incident response details. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content aligns with a legitimate community sports organization. Strategic improvements in privacy compliance, contact transparency, and security best practices are recommended to enhance trust and regulatory adherence.

I

Imago Dei Soccer

imagodeisoccer.com

57

Imago Dei Soccer is a small non-profit organization focused on providing soccer training and community programs in the greater Triad, North Carolina area. Their offerings include year-round soccer programs, seasonal camps, private training, and outreach initiatives aimed at youth development. The organization positions itself as a community-driven entity dedicated to helping players reach their potential both on and off the field. The website is professionally designed using Squarespace, featuring clear navigation, social media integration, and a newsletter signup to engage their audience. Technically, the website leverages Squarespace's platform with embedded Typekit fonts and social media SDKs for Facebook and Pinterest. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, it lacks some security headers and formal privacy and terms of service pages, which are important for compliance and trust. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and social presence suggest a legitimate local organization. From a security perspective, the site enforces HTTPS and uses secure forms but could improve by adding security headers and publishing a privacy policy. No vulnerabilities or exposed sensitive data were detected. The overall risk is moderate, with recommendations to enhance compliance and security posture. The website content is safe for general audiences, with no adult or questionable material. Strategically, Imago Dei Soccer should verify and update domain registration details, implement comprehensive privacy and cookie policies with consent mechanisms, and strengthen security headers to improve trust and compliance. These steps will enhance their digital maturity and protect their community-focused mission online.

S

Southern California Eagles

thesocaleagles.com

60

Southern California Eagles is a small, established non-profit sports organization focused on youth and adult soccer development with a Christian missionary emphasis. The website is professionally designed using the Squarespace platform, featuring clear navigation and good mobile optimization. The organization has an active social media presence and offers various soccer programs and camps. However, the lack of domain WHOIS data and absence of privacy and cookie policies reduce trust and compliance posture. Security is well implemented with HTTPS and HSTS, but additional security headers and policies are recommended. Overall, the website presents a credible and professional image but would benefit from improved privacy compliance and domain registration transparency.

P

Phoenix Eagles

phoenixeagles.com

60

Phoenix Eagles is a community-focused non-profit organization dedicated to soccer programs for youth and adults. Their offerings include various age-specific leagues and international tours, emphasizing player development beyond just the sport. The website is professionally designed using Squarespace, featuring modern multimedia elements such as video backgrounds and responsive layouts. Technically, the site employs standard web technologies and integrates third-party services like Google Maps and Weglot for translation. Security posture is strong with HTTPS and HSTS enabled, though some security headers are missing and privacy compliance is minimal due to the absence of privacy and cookie policies. The WHOIS data for the domain is missing or unavailable, which slightly reduces trust but does not negate the legitimacy of the site given its professional presentation and active social media presence. Overall, the site is suitable for its target audience and maintains a moderate level of trust and security.

A

Athens United Merch Hub

athensunitedmerchhub.com

64

Athens United Merch Hub operates as a specialized e-commerce platform focused on selling branded merchandise for the Athens United sports club or brand. The website offers a range of products including apparel, headwear, accessories, and drinkware, targeting fans and supporters. The business model is retail-oriented, leveraging Shopify's platform for online sales. The site presents a professional and consistent brand image with clear navigation and product categorization, positioning itself as a niche merchandise provider in the sports retail sector. Technically, the website is built on Shopify using the Dawn theme, hosted likely on Google Cloud infrastructure. It employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for multiple payment methods such as Shopify Payments, Apple Pay, PayPal, and Venmo. Performance and mobile optimization are adequate, with basic accessibility features implemented. SEO practices are good, supported by proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and no advanced security headers are detected. There is no published security policy or incident response information, and no direct contact emails or phone numbers are provided. The WHOIS data raises concerns due to a domain creation date set in the future and lack of registrant details, which impacts trustworthiness. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is functional and professionally presented but has gaps in privacy compliance and domain registration transparency. Strategic improvements in security policies, contact information availability, and domain registration legitimacy would enhance trust and compliance.