Security Directory

P

Promo Impressions

promoimpressions.com

52

Promo Impressions operates as a specialized biweekly newsletter focused on promotional product decoration, delivering educational content such as technology breakdowns, printing how-tos, and expert commentary. The website targets industry professionals seeking to improve efficiency, profitability, and sustainability in product decoration. Technically, the site is built on WordPress and integrates multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and AdRoll, indicating a mature digital marketing infrastructure. However, the absence of visible privacy and cookie policies, as well as lack of WHOIS registrant data, suggests gaps in transparency and privacy compliance. Security posture is moderate with no detected security headers or explicit policies, and the site lacks direct contact information for security or business inquiries. Overall, the website presents professional content with good user experience but would benefit from enhanced privacy, security, and transparency measures.

M

Mark Spencer Hotel

markspencer.com

66

Mark Spencer Hotel is a well-established boutique hotel located in downtown Portland, Oregon, with a rich history dating back to 1907. The hotel offers upscale accommodations, including renovated guest rooms and suites, extended stay options, and event spaces. It targets business and leisure travelers seeking a stylish and arts-oriented lodging experience in the heart of the city. The website is professionally designed using WordPress and integrates modern technologies and marketing tools, including Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The presence of trust badges and active social media channels enhances its market credibility. Security posture is good with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and publishing a security policy are recommended. Overall, the website reflects a mature digital presence with strong business credibility and good privacy compliance.

Restored 316, LLC operates an e-commerce website specializing in affordable and customizable feminine WordPress themes targeted primarily at bloggers and entrepreneurs seeking unique and budget-friendly design solutions. The company has a long-standing domain registered since 2008, indicating an established presence in the niche market of WordPress theme design. The website leverages WordPress CMS with Kadence theme and blocks, enhanced by Yoast SEO Premium for search optimization. Marketing and analytics tools such as Google Analytics, Facebook Pixel, ConvertKit, and Ahrefs Analytics are integrated to support business growth and user engagement. The site is hosted with domain registration via GoDaddy and DNS managed through Cloudflare, providing a reliable infrastructure with HTTPS enabled for secure communications.

L

Leadline, Inc.

leadline.io

64

Leadline, Inc. is a US-based technology company specializing in recruiting software solutions designed to simplify talent acquisition across multiple industries including education, healthcare, hospitality, law enforcement, and staffing. Their platform offers an AI-powered assistant, applicant tracking, candidate relationship management, job marketing, automated communications, and analytics. The company is relatively new, founded in 2022, and positions itself as a modern, intuitive recruiting platform with a strong focus on user experience and industry-specific solutions. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website is built on WordPress with Bootstrap and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and others. Hosting is provided by SiteGround, and the site uses HTTPS with good SSL configuration. The site employs structured data (JSON-LD) extensively for SEO and business information. Performance and accessibility are good, though DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site follows basic best practices including HTTPS and no visible sensitive data exposure. However, it lacks published security policies, incident response contacts, vulnerability disclosure, and privacy/cookie policies, which are important for compliance and trust. The domain registration is transparent and consistent with the business claims, enhancing legitimacy. Overall, Leadline, Inc. presents a professional and credible online presence with strong business and technical foundations but would benefit from enhanced privacy and security policy disclosures to improve compliance and user trust.

Stichting v/h Rotterdamsche Tramweg Maatschappij is a Dutch non-profit foundation operating a museum dedicated to historical transportation vehicles such as trams, buses, ships, and freight wagons. Established in 2004, it serves a niche audience interested in cultural heritage and transportation history. The website supports visitor engagement through ticket sales, a merchandise shop, volunteer recruitment, and donation options. The foundation maintains an active social media presence and provides clear contact information including phone, email, and a physical address in Ouddorp, Netherlands. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, integrating booking and event management plugins. It uses Google Analytics and Facebook Pixel for tracking, with a cookie consent banner indicating basic privacy compliance. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and well-structured but could improve compliance and security transparency.

H

HERITAGE AUCTIONS - EUROPE Coöperatief U.A.

ha-europe.com

58

Heritage Auctions Europe is a reputable auction house specializing in coins, stamps, art, militaria, and collectibles. Established in 2015 and based in the Netherlands, it serves a broad international customer base of 1.8 million clients. The company offers free appraisals, expert advice, and facilitates consignments for auctions in multiple countries including the Netherlands, US, and Hong Kong. Their market position is strong within the collectibles auction sector, supported by professional experts and memberships in relevant federations. Technically, the website employs standard analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. It is hosted on TransIP infrastructure with moderate performance and good mobile optimization. The site uses HTTPS and has a clientTransferProhibited domain status, though DNSSEC is not enabled, representing a minor security gap. The website design is professional with clear navigation and multilingual support. From a security perspective, the site demonstrates good practices with HTTPS and domain transfer protection but lacks advanced security headers and a published security policy or incident response information. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR compliance indicators. No critical vulnerabilities or suspicious content were detected. Overall, Heritage Auctions Europe presents a trustworthy and professional online presence with a solid business model and moderate technical maturity. Strategic improvements in domain security and security policy transparency could further enhance their security posture and customer trust.

S

Senior Games Rotterdam

seniorgamesrotterdam.nl

53

Senior Games Rotterdam is a local community-focused organization dedicated to promoting physical activity and sports among seniors in Rotterdam, Netherlands. The website serves as an informational platform showcasing events, videos, and contact details to engage its target audience of elderly individuals interested in active lifestyles. The business operates primarily as an event organizer collaborating with local partners and municipal entities. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, leveraging modern web technologies and structured data for SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and employs some JavaScript security measures but lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the website is legitimate, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

Paměť národa

behpropametnaroda.cz

47

Běh pro Paměť národa is a Czech non-profit organization that organizes a nationwide commemorative running event to honor those who resisted totalitarian regimes and to support educational and memorial projects. The website reflects a well-established event with significant participation, reputable partners, and media sponsorships. The business model relies on participant fees, donations, and sponsorships to fund activities such as filming witness stories and educational programs. The target audience includes the general public interested in history and social causes. Technically, the website is built on WordPress and uses common libraries such as jQuery and Leaflet.js for interactive maps. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes, and employs the Complianz GDPR plugin to manage cookie consent, demonstrating a good level of digital maturity. The site is mobile-optimized and presents a professional design with clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers which could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is strong with clear links to privacy policies and cookie management. However, WHOIS data is unavailable, likely due to privacy protection, which is acceptable for this type of non-profit entity. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include adding security headers, publishing explicit security policies if applicable, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

P

Post Bellum

pribehy20stoleti.cz

47

The website 'Příběhy 20. století' serves as an archival media platform focused on preserving and sharing stories from the 20th century, primarily targeting a Czech-speaking general audience interested in historical narratives. It operates under the umbrella of Post Bellum, a reputable organization in the media and cultural heritage sector, and collaborates with established partners such as Český rozhlas and Česká televize. The site offers radio broadcasts, an archive of stories, and related book sales, positioning itself as a niche cultural media outlet. Technically, the site is built on WordPress 6.8.2 with standard web technologies including jQuery and integrates marketing and analytics tools like Facebook Pixel and Google Site Kit. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. The absence of security headers and explicit incident response contacts are areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the site’s association with Post Bellum and partner organizations supports its legitimacy. Overall, the website is a professionally maintained cultural media platform with moderate technical maturity and a solid security posture, though it would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

S

Spark Plugin

sparkplugin.com

63

Spark Plugin is a specialized technology company offering a design toolkit plugin for Squarespace users, enabling code-free, one-click customizations to create unique websites. The company targets designers, creatives, and small businesses seeking enhanced design flexibility within the Squarespace platform. The website is professionally designed, mobile-optimized, and integrates modern analytics and tracking tools such as Mixpanel and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and HSTS enabled, though explicit security policies and incident response documentation are absent. Privacy compliance is addressed with a privacy policy and cookie consent banner, but terms of service and vulnerability disclosure mechanisms are missing. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration legitimacy, which impacts overall trustworthiness. Despite this, the website presents strong trust indicators including a high Trustpilot rating and active social media presence. Overall, the site scores well on content quality, technical implementation, and security, but business credibility and privacy compliance could be improved.

K

Kognic

kognic.com

66

Kognic operates a specialized B2B SaaS platform focused on sensor-fusion data annotation to accelerate AI development, particularly in autonomous vehicles and embodied AI. The company positions itself as a technology leader with a strong client base including major industry players such as Qualcomm, Bosch, and Volvo Group. Their platform offers advanced annotation tools, auto-labeling co-pilots, and management of multi-sensor datasets, targeting AI developers and transportation industry leaders. Technically, the website is built on HubSpot CMS with modern analytics and marketing integrations, providing a professional and responsive user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. The absence of WHOIS domain registration data is a notable anomaly that warrants further verification. Overall, the website is professional and trustworthy, but business credibility could be enhanced by publishing more detailed contact and security information.

T

Techstars

techstars.com

72

Techstars is a globally recognized startup accelerator founded in 2006, focused on helping early-stage founders succeed through mentorship-driven programs, capital investment, and access to a powerful network. The company positions itself as a leader in the technology accelerator space, supporting thousands of mentors and startups worldwide, including several unicorn companies with valuations exceeding $1 billion. The website reflects a mature digital presence with professional design, clear navigation, and rich multimedia content. Technically, the site leverages modern web technologies including Next.js, React, Material-UI, and integrates multiple third-party marketing and analytics tools such as HubSpot, Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and performs well, with a strong focus on user experience and SEO best practices. Contentful is used as the CMS, indicating a scalable content management approach. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA Enterprise for form protection. However, explicit security headers and published security policies are not detected, and there is no public vulnerability disclosure or incident response information. The domain WHOIS data is consistent with the business claims, showing a long-established registration aligned with the company’s founding date, supporting legitimacy. Overall, Techstars demonstrates a strong business and technical foundation with good security hygiene but could improve transparency around privacy, security policies, and incident response to enhance trust and compliance posture.

M

Middlebury Institute of International Studies at Monterey

miis.edu

75

The Middlebury Institute of International Studies at Monterey is a graduate school affiliated with Middlebury College, specializing in international studies, global security, sustainability, development, education, and language services. The website presents a professional and comprehensive digital presence targeting prospective graduate students worldwide. It offers detailed program information, career services, and rich multimedia content to engage its audience. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and social media pixels, all integrated with a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard security practices, though explicit security headers and a public security policy are not evident. The absence of WHOIS data is notable but likely due to .edu domain registration policies rather than malicious intent. Overall, the site demonstrates a strong security posture with room for improvement in transparency and incident response readiness. The risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clear security incident contacts to further strengthen trust and compliance.

K

Knock

knock.com

72

Knock is a real estate financing company specializing in bridge loans that enable homebuyers to purchase their next home before selling their current one. The company partners with lenders and real estate agents to provide cash flow solutions, enhancing certainty and convenience for buyers. The website is professionally designed, mobile-optimized, and uses modern web technologies including SvelteKit and various analytics and marketing tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The domain WHOIS data is missing or unavailable, which slightly reduces trust but the overall website professionalism and security practices indicate a legitimate business. Strategic recommendations include publishing detailed security and incident response policies and adding vulnerability disclosure information to enhance transparency and trust.

H

Hyly.AI

hyly.ai

63

Hyly.AI is a technology company specializing in AI-driven solutions for the multifamily real estate sector. Their platform integrates artificial intelligence, business intelligence, and human intelligence to automate property management operations, provide actionable insights, and empower property management teams. The company positions itself as an innovative player in the real estate technology market, focusing on improving operational efficiency and decision-making for multifamily properties. The website reflects a mature digital presence with professional design and clear navigation, targeting B2B customers in the real estate industry. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries such as React, Swiper.js, and AOS for animations. It integrates Google Analytics 4 and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Hosting and CDN services are provided by HubSpot, ensuring reliable performance and security. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy policies and cookie consent mechanisms are present and appear comprehensive, indicating good privacy compliance. The use of WHOIS privacy protection is justified and consistent with the business profile. Overall, Hyly.AI presents a low-risk profile with a solid technical foundation and professional business presence. Strategic recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and establishing a vulnerability disclosure program to enhance trust and security posture.

A

Aladdin Theater

aladdin-theater.com

53

Aladdin Theater is a medium-sized live event venue based in Portland, Oregon, specializing in concerts, comedy, and other live performances. The website serves as a platform for event promotion, ticket sales (via a third-party provider), venue rental information, and merchandise sales. The business targets local and regional live event attendees and entertainment fans. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and Hive SDK for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and event information. Security posture is moderate with HTTPS enabled but lacks some recommended security headers. Privacy compliance is limited as no explicit privacy or cookie policies are found. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

W

Woodland Park Zoo

zoo.org

67

Woodland Park Zoo is a non-profit organization dedicated to wildlife conservation, education, and providing engaging visitor experiences in Seattle, Washington. The website reflects a professional and consistent brand presence focused on these core missions. Technically, the site is built on ASP.NET WebForms and leverages modern JavaScript libraries and third-party marketing and analytics tools, including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and TikTok Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not evident in the provided content, indicating room for compliance improvement. WHOIS data is unavailable due to malformed responses, limiting domain trust assessment. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security transparency.

P

PDX Live

pdx-live.com

58

PDX Live is a small, regionally focused live event promoter specializing in music concerts in Portland, Oregon. The company operates primarily through partnerships with well-known local venues and provides a digital platform for event announcements, ticketing information, and audience engagement. The website is built on WordPress with a modern tech stack including jQuery and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is limited, with no visible cookie consent or comprehensive privacy policy. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

W

WisconsinMade Artisan Collective

wisconsinmade.com

65

WisconsinMade Artisan Collective operates an e-commerce platform specializing in artisan products from Wisconsin, including food items, apparel, and gifts. The business targets consumers interested in local and regional artisan goods, positioning itself as a niche marketplace for Badger State products. The website is built on the BigCommerce platform, leveraging modern web technologies and multiple third-party analytics and marketing tools to optimize user experience and sales performance. Privacy and cookie policies are comprehensive and include consent mechanisms, reflecting a commitment to regulatory compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is generally strong with HTTPS and security headers implemented, but the lack of a public security policy and incident response information suggests room for improvement in security communication and preparedness. Overall, the website presents a professional and trustworthy front for its business, but the domain registration anomaly should be investigated further.

Restored 316, LLC operates an e-commerce website specializing in affordable and customizable feminine WordPress themes targeted primarily at bloggers and entrepreneurs. The company has an established market presence since 2008, offering niche digital products that cater to a specific audience seeking budget-friendly and unique website designs. The website is professionally designed using WordPress with Kadence theme and blocks, integrating SEO and marketing tools to enhance visibility and customer engagement. Technically, the site employs modern web technologies and analytics platforms, ensuring a functional and responsive user experience across devices. Security posture is adequate with HTTPS enabled and domain protections in place, though the absence of security headers and published security policies indicates room for improvement. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which could expose the business to regulatory risks. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security transparency to strengthen user trust and compliance.

S

Smithsonian Journeys

smithsonianjourneys.org

65

Smithsonian Journeys is a reputable travel company affiliated with the Smithsonian Institution, offering culturally immersive and educational travel experiences worldwide. Their market position leverages the Smithsonian brand to provide unique land journeys, river and ocean cruises, and tailor-made trips targeting culturally curious travelers. The website demonstrates a mature digital infrastructure with extensive use of modern analytics and marketing tools, good mobile optimization, and strong content quality. Security posture is solid with HTTPS and security headers, though public security policies and incident response information are not disclosed. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

C

Cooper Hewitt, Smithsonian Design Museum

cooperhewitt.org

61

Cooper Hewitt, Smithsonian Design Museum is a well-established non-profit cultural institution located in New York City, affiliated with the Smithsonian Institution. The museum offers a variety of services including exhibitions, educational programs, memberships, donations, and a retail shop. The website reflects a professional and polished digital presence, targeting a broad audience including design enthusiasts, educators, students, and families. The business model is focused on cultural education and community engagement, supported by memberships and donations. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google Analytics, Facebook Pixel, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The technical infrastructure supports a secure HTTPS connection, but some security headers could be improved. From a security perspective, the site enforces HTTPS and uses reputable analytics and marketing tools. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. The WHOIS data is unavailable or blocked, which limits domain registration trust analysis, but the Smithsonian affiliation and website professionalism strongly support legitimacy. Overall, the website is a trustworthy and authoritative source for museum visitors and stakeholders, with recommendations to enhance security headers, implement cookie consent, and publish security policies to further strengthen compliance and trust.

R

Rode Kruis

actievoorrodekruis.nl

67

The website www.actievoorrodekruis.nl serves as a fundraising and community engagement platform for the Dutch Red Cross (Rode Kruis). It encourages individuals and groups to organize actions such as sponsor runs and other activities to support people in need. The site is well-branded with consistent Red Cross imagery and messaging, targeting a general audience interested in charitable activities. The business model is non-profit, focusing on fundraising and volunteer mobilization within the Netherlands. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, Hotjar, and VWO, all managed with a robust cookie consent mechanism via Cookiebot. The site is hosted likely behind Cloudflare, ensuring good performance and security. The CMS appears to be Kentaa, a platform commonly used for fundraising and non-profit websites. The site is mobile-optimized and includes accessibility basics, though there is room for improvement. From a security perspective, the site enforces HTTPS and uses standard security headers, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present on the site, which could be improved to enhance trust and compliance. Privacy compliance is well-handled through Cookiebot, but a dedicated privacy policy page was not detected in the provided HTML content. Overall, the website presents a professional and trustworthy front for the Dutch Red Cross fundraising efforts, with moderate technical maturity and good security posture. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and enhancing accessibility features to meet higher compliance standards.

T

The Boston Globe

bostonglobe.com

74

The Boston Globe is a leading regional media company providing comprehensive news, sports, opinion, and entertainment coverage primarily focused on New England. The website serves a broad audience interested in timely and investigative journalism, leveraging a subscription and advertising-based business model. The site demonstrates a mature digital presence with modern technologies such as React, Adobe Analytics, and robust consent management via OneTrust, ensuring compliance with GDPR and CCPA regulations. Advertising and tracking are managed through reputable networks including Amazon APS and Pubmatic, balanced with user privacy controls. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given its established brand and content quality. Overall, the site is professional, secure, and compliant, serving as a trusted news source.

S

Systems Engineering

systemsengineering.com

75

Systems Engineering is a well-established managed services provider specializing in IT, cybersecurity, and compliance services primarily targeting small and medium-sized businesses. With over 35 years of experience and a team of 190+ U.S.-based employees, the company offers a comprehensive portfolio of services including managed IT, consulting, software development, cloud services, and security frameworks such as their Adaptive Cybersecurity Framework (aCSF). The website reflects a professional and consistent brand image with strong digital marketing and SEO practices. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, accessible, and performs moderately well. However, some security best practices like explicit security headers are missing, and there is no public security policy or incident response information. The security posture is generally strong with HTTPS enforced and secure form handling via HubSpot. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is good with a comprehensive privacy policy and cookie consent mechanisms in place. The WHOIS data is missing or privacy protected, which introduces some uncertainty about domain registration legitimacy, but the website content and business information strongly indicate a legitimate enterprise. Overall, the website presents a trustworthy and professional digital presence for Systems Engineering, though improvements in transparency around security policies and domain registration details are recommended.

B

Bangor Savings Bank

bangor.com

66

Bangor Savings Bank is a well-established regional financial institution serving individuals and businesses primarily in Northern New England, with a focus on Maine and New Hampshire. The bank offers a comprehensive suite of services including personal and business banking, wealth management, credit cards, and payroll solutions. The website reflects a mature business with strong community involvement and multiple industry recognitions such as FDIC insurance, J.D. Power awards, and Forbes listings. The digital presence is professional, user-friendly, and optimized for mobile users, supporting a broad customer base with secure online banking portals. Technically, the website leverages modern technologies including Kentico CMS, Google Tag Manager, HubSpot, and Facebook Pixel for analytics and marketing. The site implements strong security practices such as HTTPS enforcement, security headers, and secure login forms. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with data protection regulations. However, the absence of publicly available WHOIS registration data and lack of a vulnerability disclosure page are notable gaps. Security posture is strong overall, with no visible vulnerabilities or exposed sensitive data. The site uses multiple third-party integrations which should be regularly audited for security. The lack of explicit incident response contacts and security framework references suggests room for improvement in transparency and readiness. Overall, the site is trustworthy and professional but would benefit from enhanced security disclosures and WHOIS transparency. The risk assessment is moderate due to missing WHOIS data and limited public security disclosures, but the strong branding, comprehensive services, and secure technical implementation mitigate major concerns. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response visibility, and verifying domain registration details to improve trust and compliance.

Unum Group operates a comprehensive insurance and employee benefits website offering a wide range of financial protection products including disability, life, accident, critical illness, hospital, dental, vision, and pet insurance. The company targets employers, employees, brokers, and plan administrators, positioning itself as a leader in the employee benefits insurance market with a strong emphasis on modern HR technology solutions and seamless platform integrations. The website reflects a mature enterprise with extensive experience and a broad market presence. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Marketo, and various analytics and marketing tools. The site is well-optimized for mobile devices, has good SEO practices, and demonstrates solid accessibility features. Performance is moderate with room for optimization. The site uses HTTPS with strong SSL configuration and includes multiple security best practices, although explicit security headers are not fully confirmed. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly visible security policy or incident response contact information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. The absence of WHOIS data limits domain registration transparency but does not detract from the overall legitimacy given the professional presentation and market presence. Overall, the website is professional, secure, and compliant, supporting Unum's position as a trusted insurance provider. Strategic recommendations include enhancing security header implementation, publishing a dedicated security policy, and improving transparency around incident response and data protection officer contacts.

P

ProSearch Inc

prosearchmaine.com

62

ProSearch Inc operates as a premier recruiting and staffing agency primarily serving Maine and surrounding regions. The company specializes in connecting job seekers with employers through services including temporary staffing, job recruitment, and IT consulting. The website positions ProSearch as a trusted regional leader with a history dating back to 1994, supported by partner logos and positive testimonials. The digital presence is built on WordPress with modern web technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. The absence of WHOIS data reduces transparency but does not negate the legitimacy indicated by the website content and business operations. Overall, ProSearch demonstrates a mature digital infrastructure suitable for its business model but should enhance privacy and security disclosures to strengthen trust and compliance.

N

NASTY Magazine

nastymagazine.com

45

NASTY Magazine is an online media publication specializing in arts, fashion, music, photography, and lifestyle content with a radical and artistic approach. The website targets creatives, artists, and culture enthusiasts, offering exclusive editorials, interviews, and showcases. Technically, the site is built on WordPress using modern web technologies including jQuery, Google Fonts, and integrates social media and video content effectively. SEO is well implemented with structured data and meta tags. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit privacy/cookie policies. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in content and design but would benefit from improved transparency and security practices.

M

Mutual of Omaha

mutualofomaha.com

75

Mutual of Omaha is a well-established insurance and financial services company offering Medicare Supplement Insurance, Life Insurance, financial products, and mortgages. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting individuals seeking insurance and financial solutions. The company positions itself as a trusted provider in the finance and healthcare sectors within the United States. Technically, the site employs modern technologies including Google Tag Manager, Facebook Pixel, and Optimizely for marketing and analytics, ensuring a robust infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable transparency gap but does not detract significantly from the overall trustworthiness given the brand's reputation and website quality. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure mechanisms to enhance trust and compliance.

C

Công ty Cổ phần truyền thông VietNamNet

2sao.vn

58

2Sao.vn is a Vietnamese entertainment news website operated by Công ty Cổ phần truyền thông VietNamNet. It provides up-to-date news on showbiz, music, film, fashion, and related entertainment topics targeting a general audience interested in Vietnamese and international celebrity news. The site is well-established with a consistent brand presence and clear business registration, positioning itself as a popular media outlet in Vietnam. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and multiple advertising and tracking services to monetize and analyze user engagement. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is adequate with HTTPS and some security meta tags, but lacks comprehensive security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WTMD 89.7

wtmd.org

59

WTMD 89.7 is a well-established public radio station focused on music discovery and community engagement, operating under Baltimore Public Media. The website offers live streaming, playlists, event information, and donation options, targeting music enthusiasts and public radio supporters. Technically, the site is built on WordPress with modern plugins and integrates analytics and advertising tools from Google and Facebook. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and terms of service. The WHOIS data is privacy protected, which is typical for non-profit media entities. Overall, WTMD presents a professional and trustworthy online presence with good content quality and user experience.

C

Clarifai

clarifai.com

69

Clarifai is a leading AI compute orchestration platform founded in 2013, providing scalable and efficient AI model deployment solutions across cloud, on-premise, and edge environments. The company targets developers, enterprises, and public sector organizations, offering a robust platform with pre-trained models and dynamic compute management. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive business information. Technically, the site leverages modern technologies including HubSpot CMS, multiple analytics and tracking tools, and implements strong security practices such as HTTPS and security headers. However, the absence of WHOIS data and explicit security policies slightly reduces transparency. Overall, Clarifai demonstrates a strong market position and trustworthy online presence.

H

HT Media

htmedia.in

72

HT Media is a leading Indian media company with a rich history dating back to 1924. It operates a diversified portfolio of 25+ brands across print, digital, and radio platforms, serving a broad audience including news consumers and advertisers. The company offers advertising solutions, brand studio creative services, and audience data insights, positioning itself as a trusted and award-winning media house in India. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Tag Manager, HubSpot, and social media pixels, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit incident response policies are absent, indicating room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

C

Chromatic

chromatic.com

75

Chromatic is a SaaS company specializing in visual testing and UI review tools designed to help software development teams catch visual and functional bugs across browsers before release. Their platform integrates with popular developer tools like Storybook, Playwright, and Cypress, offering automated visual, accessibility, and interaction testing. The company targets developers, designers, product managers, and stakeholders seeking streamlined UI testing and review workflows. Chromatic is positioned as a trusted solution, evidenced by its adoption by major brands such as BBC, Dior, and Adobe. Technically, the website is built using modern frameworks including React and Next.js, hosted on Amazon CloudFront CDN, and employs multiple analytics and marketing tools such as Segment, Google Analytics 4, Facebook Pixel, and Intercom. The site is well-optimized for performance, mobile responsiveness, and accessibility, with appropriate security headers and HTTPS enforced. From a security perspective, Chromatic demonstrates strong practices including the use of security headers and consent management for GDPR compliance. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly detracts from its overall trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, Chromatic presents a professional, secure, and mature digital presence with minor gaps in privacy transparency and domain registration visibility. Strategic recommendations include publishing comprehensive privacy and terms documents, adding vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

R

Rapsody Yachts

rapsody.nl

60

Rapsody Yachts is a Dutch luxury yacht manufacturer established in 1999, specializing in high-end yachts characterized by Dutch craftsmanship and signature service. The company targets affluent yacht buyers and enthusiasts, positioning itself in a premium niche within the transportation sector. Their website reflects a professional and consistent brand image, supported by active social media channels and a clear presentation of contact information. Technically, the site is built on WordPress with modern tracking and marketing tools such as Google Analytics, Facebook Pixel, and Klaviyo, indicating a moderate level of digital maturity. Security posture is solid with HTTPS and DNSSEC enabled, and use of reCAPTCHA for forms, though it lacks some security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

Amber is a full-service global game development company established in 2008, operating as an integrated hub with multidisciplinary global locations. The company targets game developers, publishers, and clients seeking comprehensive game development services. Their market position is that of an established mid-sized player in the technology sector, focusing on delivering high-quality game production services. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Microsoft Azure DNS infrastructure, and employs multiple analytics and marketing tools including Google Tag Manager, Hotjar, and Apollo.io. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses domain locking mechanisms but lacks explicit published security policies or incident response contacts. Privacy compliance is basic, with a cookie consent mechanism in place but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy, with room for improvement in transparency and security documentation.

K

KIC InnoEnergy SE

innoenergy.com

68

KIC InnoEnergy SE operates as a key industrial player in the clean technology and energy sector, focusing on industrialising innovation for a net zero economy. The company invests in startups and builds industrial value chains, positioning itself as a vital enabler of sustainable energy solutions. The website reflects a professional and consistent brand image, targeting startups, investors, and industry partners within the clean tech ecosystem. Founded in 2005, the company has an established market presence with a medium-sized operational scale. Technically, the website leverages modern web technologies including Next.js (React framework), HubSpot for marketing and forms, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Facebook Pixel. Hosting is provided by OVH sas, a reputable provider, and the domain is well aged and secured with domain lock statuses. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized domain transfers or deletions. Cookie consent is managed via Cookiebot, ensuring GDPR compliance with detailed cookie categorization and opt-in mechanisms. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, with strong compliance to privacy regulations and a solid security posture. Recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing accessibility compliance to further strengthen the site's security and user trust.

O

Oregon Cultural Trust

culturaltrust.org

10

The Oregon Cultural Trust is a well-established non-profit organization dedicated to supporting arts, heritage, and humanities nonprofits across Oregon. It operates a unique cultural tax credit program that enables donors to match their donations and supports over 1,600 nonprofits statewide. The website reflects a mature digital presence with comprehensive content, multimedia resources, and clear calls to action for donations and grant applications. The organization maintains strong partnerships with state government and cultural institutions, reinforcing its market position as a key cultural funding entity in Oregon. Technically, the website is built on WordPress with modern web technologies including jQuery, MediaElement.js, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Reddit Pixel. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO and Typekit fonts for branding consistency. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and official branding indicate legitimacy. Overall, the Oregon Cultural Trust website presents a trustworthy and professional digital front for a non-profit cultural funding organization. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing a security policy with incident response contacts to further strengthen trust and compliance.

T

The Oregon Community Foundation

oregoncf.org

11

The Oregon Community Foundation is a well-established non-profit organization dedicated to improving lives across Oregon through philanthropy. The foundation facilitates charitable giving via donor advised funds, grants, scholarships, and philanthropic advising. It has a strong market position as a trusted community foundation since 1973, serving a broad audience including donors, volunteers, professional advisors, and community members. The website reflects this with comprehensive content, clear navigation, and multiple regional offices to serve the state. Technically, the website is built on Silverstripe CMS and leverages modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adroll. Hosting is provided via Cloudflare, ensuring good performance and security. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is solid with HTTPS and domain transfer protections, but could benefit from additional security headers and DNSSEC. Security-wise, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic improvements in security headers, DNSSEC, and transparency around security policies would further strengthen its posture and user trust.

T

TrueWest

truewestpresents.com

56

TrueWest is a small, regionally focused live event promoter specializing in music concerts and festivals primarily in Portland, Oregon. The company operates a professional website built on WordPress that provides event listings, ticket sales, and promotional content targeting music fans and live event attendees. The site demonstrates good digital maturity with modern technologies such as jQuery, Yoast SEO, and integration with ticketing platforms. Social media presence on Facebook, Instagram, and Twitter supports their marketing efforts. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, supporting the company's business model effectively.

R

Revolution Hall

revolutionhall.com

61

Revolution Hall is a well-established music venue located in Portland, Oregon, operating since 2014 in a historic building. The venue offers live music events, private event hosting, and food and beverage services including a show bar, cafe, and roof deck. It targets music fans and local community members, positioning itself as a key player in Portland's live entertainment and hospitality sector. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It integrates ticketing services via Etix and maintains active social media channels, enhancing its market presence. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Google Tag Manager, and Facebook Pixel. It uses jQuery and other JavaScript libraries for interactive features. The site is mobile optimized and accessible, though performance is moderate. HTTPS is enforced, ensuring secure communications. However, security headers are not explicitly detected, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates good practices like secure form handling and no visible sensitive data exposure. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website's operational legitimacy is supported by its content and external integrations. No explicit security policies or incident response contacts are published, which could be enhanced to improve trust and compliance. Overall, Revolution Hall's website is a professional, content-rich platform supporting its business operations effectively. Strategic improvements in privacy compliance, security headers, and domain registration transparency would strengthen its security posture and trustworthiness.

M

Mississippi Studios

mississippistudios.com

53

Mississippi Studios is a well-established music venue and bar located in Portland, Oregon, operating since 2002. The venue hosts a variety of nationally and internationally touring acts alongside local favorites, and also operates a bar named Bar Bar. The business model includes live event hosting, food and beverage sales, merchandise, and gift cards, targeting music fans and adults in the local community. The website reflects a professional and consistent brand presence with good content quality and active event listings. Technically, the site is built on WordPress with common web technologies and integrates multiple analytics and advertising tools. Security posture is adequate with HTTPS enabled and domain registration locks in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is functional and credible but would benefit from enhanced privacy and security practices.

H

Hyly.AI

hy.ly

62

Hyly.AI is a technology company specializing in AI-driven solutions for the multifamily real estate sector, offering products that integrate artificial intelligence, business intelligence, and human intelligence to automate property management operations. The company positions itself as a provider of smarter, faster, and stress-free property management tools, targeting multifamily property management teams and stakeholders. Their product suite includes Hayley AI Fabric and Halo Data Fabric, which offer marketing automation, agentic AI, owner insights, and advertising maximization. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript frameworks and libraries such as React, Swiper.js, and AOS for animations, with integrations for Google Analytics 4 and Facebook Pixel for marketing and analytics. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain registration privacy protection, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and credible but would benefit from enhanced privacy disclosures and security transparency.

T

Table22

table22.com

65

Table22 is a U.S.-based platform focused on helping hospitality businesses such as restaurants, wine shops, and specialty food producers expand their revenue streams through subscription management and customer loyalty solutions. The company has established a solid market presence since its founding in 2015, serving thousands of operators with tailored playbooks and digital tools. The website is built on the Squarespace platform, integrating multiple analytics and marketing technologies to support business growth and customer engagement. Security posture is adequate with HTTPS and domain registrar protections, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to the absence of explicit privacy and terms of service pages. Overall, the site is professional, well-branded, and safe for general audiences.

S

Scout Books

scoutbooks.com

59

Scout Books is a niche e-commerce business specializing in custom and blank pocket-sized notebooks, operating under Pinball Publishing Inc. The company has a long-established domain since 2000, indicating a mature presence in the market. Their website is professionally designed using WordPress and WooCommerce, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. Privacy and cookie policies are well implemented via Iubenda, reflecting good compliance with GDPR standards. However, direct contact emails and phone numbers are not prominently displayed, relying primarily on contact forms and social media channels for communication. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC and security headers could be improved. Overall, the website presents a trustworthy and professional front for their retail business.

Raiola Networks SL is a Spanish technology company specializing in web hosting, domain registration, and VPS cloud services. The company offers a broad portfolio of hosting products including SSD hosting, reseller hosting, and specialized VPS servers, targeting individuals and businesses seeking reliable internet infrastructure solutions. Their market position is that of an established hosting provider with their own data center and a professional online presence. Technically, the website is built on a modern stack including WHMCS for client management, uses HTTPS, and integrates multiple tracking and marketing pixels. The site is mobile optimized and provides clear navigation, although some SEO and accessibility features could be improved. Security-wise, the website uses HTTPS and CSRF tokens but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to improve compliance and trust.

A

Agorify

agorify.com

71

Agorify is a technology platform focused on powering and enhancing event experiences through a suite of event management tools and services. Founded in 2018, the company targets event organizers and businesses seeking to optimize event engagement and management. The website reflects a modern, professional digital presence built on Next.js and React frameworks, integrating advanced marketing and analytics tools such as Hubspot, Google Analytics, and Facebook Pixel. Cookie consent is managed comprehensively via Cookiebot, demonstrating a commitment to privacy compliance and GDPR adherence. Security posture is solid with HTTPS enforced and standard security practices observed, though some improvements like enabling DNSSEC and publishing security policies are recommended. Overall, the domain registration and technical infrastructure support the legitimacy and professionalism of the business.

N

National Mortgage News

nationalmortgagenews.com

66

National Mortgage News is a digital media platform providing news analysis and perspectives for the residential mortgage industry. It operates under the parent company Arizent and offers a comprehensive suite of services including news articles, research, events, and podcasts. The website targets mortgage industry professionals and stakeholders, positioning itself as an established and award-winning resource. Technically, the site uses a modern tech stack with multiple third-party integrations for analytics, marketing, and subscription management, powered by Brightspot CMS. The site is mobile optimized and employs HTTPS with good security practices, although explicit privacy and cookie policies are not detected in the provided content. The WHOIS data is unavailable, which slightly reduces domain trust but the brand and content quality support legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in privacy transparency and security header implementation.