Security Directory

F

Pharmacy online store

farmacy-houses.com

40

Farmacy-houses.com is an online pharmacy store established in 2019, offering a wide range of medications and health supplements with worldwide delivery. The website targets general consumers seeking convenient access to pharmaceutical products without the need for prescriptions. The business operates primarily as an e-commerce platform with features such as user accounts, shopping cart, and live chat support. Technically, the site is built on OpenCart CMS and utilizes common web technologies including jQuery, Bootstrap, and third-party services like Google Analytics and JivoSite chat. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security and compliance measures.

#

#HalfMyDAF

halfmydaf.com

59

The #HalfMyDAF website is a non-profit initiative focused on encouraging donors with donor advised funds to increase charitable giving by offering matching grants. The site is professionally designed using the Squarespace platform and provides clear instructions and resources for both donors and nonprofits. It partners with the Amalgamated Foundation, which sponsors the matching grants and promotes the initiative. Technically, the site uses modern web technologies and is mobile optimized with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though some security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. The domain WHOIS data is missing or unavailable, which is unusual and slightly reduces trust, but the website content and partner association support legitimacy. Overall, the site is a credible and well-maintained platform serving a niche non-profit market.

M

mooncell07

mooncell07.me

56

Mooncell07 is a personal website and blog operated by an individual known as nova/mooncell07, focusing on web development learning, emulator development, network programming, gaming, and visual novels. The site serves as a platform to share open source projects and personal posts, targeting technology enthusiasts and developers. The website is built using modern frontend technology SvelteKit and hosted by Hostinger with privacy-protected domain registration, reflecting a small-scale personal project rather than a commercial enterprise. Technically, the site demonstrates a modern tech stack with good mobile optimization and basic SEO, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, and no formal privacy or cookie policies are published. Overall, the site is safe, trustworthy, and professional for its intended personal use, but lacks formal compliance and security documentation typical of commercial sites.

R

Race Roster

raceroster.com

74

Race Roster is a well-established technology company founded in 2011, specializing in providing a comprehensive SaaS platform for event organizers, timers, and fundraising coordinators globally. Their platform offers a full suite of products including registration, fundraising, timing tools, CRM, onsite applications, and virtual event management, positioning them as a key player in the event management technology sector. The website reflects a mature digital presence with professional design, clear navigation, and strong content relevance tailored to their target audience. Technically, the website is built on WordPress with modern web technologies such as jQuery, Google reCAPTCHA, and Bootstrap, hosted on Amazon AWS infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. Privacy and cookie compliance are well implemented with clear policies and user consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response information. DNSSEC is not enabled, which is a recommended improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, Race Roster presents a trustworthy and professional online presence with a strong business model and good compliance posture. Strategic improvements in security transparency and technical optimizations could further enhance their security posture and user trust.

The website 'Scrumpy System' at uwu.gal represents a small technology-focused community comprising software engineers, community managers, and web developers. The site provides a professional and visually consistent experience with clear navigation and social media integration, targeting a general audience interested in technology and software development. The business model appears to be community and service-oriented without explicit commercial transactions or e-commerce features. The domain is relatively new, created in late 2022, aligning with the site's small-scale and emerging presence. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and FontAwesome icons. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized and includes interactive elements such as clocks and a starmap iframe. However, accessibility features are basic, and SEO is adequately addressed through meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers like Content-Security-Policy. There are no published privacy, cookie, or incident response policies, which limits compliance with GDPR and other regulations. No forms or data collection mechanisms are present on the main page, reducing immediate risk but also limiting user engagement features. Overall, the website is safe and professional but would benefit from enhanced privacy and security policies, improved transparency, and additional compliance measures. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing incident response and vulnerability disclosure protocols to strengthen trust and security posture.

T

Toki Pona (official site)

tokipona.org

45

The website tokipona.org serves as the official hub for the Toki Pona constructed language, created by Sonja Lang in 2001. It offers comprehensive educational resources including books, dictionaries, community links, and multimedia content. The site targets language learners, conlang enthusiasts, and educators globally, positioning itself as the authoritative source for Toki Pona with recognition from ISO 639-3 and university usage. The business model is primarily informational with commercial elements through book and merchandise sales. Technically, the site employs modern frontend technologies such as Bootstrap 5, jQuery, Chart.js, and Google Fonts, hosted by Vodien Internet Solutions. Performance and mobile optimization are good, though accessibility and SEO are basic. The site uses HTTPS and Google Analytics for tracking but lacks advanced security headers and privacy/cookie policies, indicating room for compliance improvement. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and vulnerability disclosure policies are notable gaps. The domain is well-established since 2001, registered with a reputable registrar, and shows no suspicious patterns, supporting legitimacy. Overall, the site is professional, content-rich, and trustworthy but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

S

Sun Run

sunrun.com.au

49

Sun Run is a community-focused event website promoting the annual Sun Run race presented by Bioglan in Northern Beaches, Australia. The site serves as an information hub for participants and supporters, providing event details, fundraising opportunities, race results, and partner acknowledgments. The business model centers on event organization and charity fundraising, targeting runners and local community members. The website demonstrates a good level of digital maturity with modern web technologies such as Webflow CMS, Google Tag Manager, and Facebook Pixel integrated for analytics and marketing purposes. From a security perspective, the website benefits from HTTPS encryption and does not expose sensitive data in its HTML content. However, it lacks several security headers and visible privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is minimal and privacy-protected, which is common for community event sites but limits transparency. No security incidents or vulnerabilities were detected in the content or scripts. Overall, the website is well-designed, user-friendly, and safe for general audiences. It effectively supports its business goals but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

U

USM Events Pty Ltd

city2surf.com.au

63

Voltaren City2Surf is a well-established, large-scale annual fun run event based in Sydney, Australia, with a strong focus on community participation and charity fundraising. The event attracts tens of thousands of participants globally and has raised significant funds for various charities since 2008. The website reflects a professional and consistent brand image, supported by a robust technical infrastructure leveraging modern web technologies and third-party integrations for analytics, marketing, and fundraising. Technically, the site uses Bootstrap for responsive design, integrates Google Tag Manager, Hotjar, and Google Optimize for analytics and optimization, and employs Cloudflare services for hosting and security. The website is mobile-optimized and SEO-friendly, with good performance indicators. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Security posture is good with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are not clearly present. WHOIS data confirms the legitimacy of the domain and its alignment with the business entity, USM Events Pty Ltd, based in Australia. No critical vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a mature digital presence with strong business credibility and good privacy compliance, suitable for its role as a major charity event platform.

T

The Onion

theonion.com

67

The Onion is a leading satirical news media company established in 1995, delivering humorous and satirical news content primarily to a general audience in the United States. The website serves as a digital platform for articles, videos, and newsletters, monetized mainly through advertising. Technically, the site is built on WordPress with modern technologies such as Gutenberg blocks, Yoast SEO, and integrates advertising and consent management tools. The infrastructure includes reputable hosting and CDN services, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Decolonize Palestine

decolonizepalestine.com

55

Decolonize Palestine is a small educational resource website founded in 2021, focused on providing information and resources about Palestine. The site uses WordPress with the Divi theme and integrates Google Analytics for visitor tracking. The technical infrastructure is modern and hosted on Nexcess, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal privacy or cookie policies. No contact or incident response information is provided, limiting transparency and compliance. Overall, the website is safe, professional, and serves a niche educational purpose but would benefit from enhanced privacy and security measures to improve trust and compliance.

Jets Pizza Retail operates an e-commerce storefront dedicated to selling Jets Pizza branded merchandise. The website is built using modern web technologies including Angular and the InkSoft storefront platform, with integrated payment processing via Stripe and analytics via New Relic. The site is relatively new, with domain registration dating back to 2022, consistent with the business launch timeline. However, the website content is minimal, primarily serving as a container for the storefront application, with limited textual business information or contact details visible. Security measures include HTTPS and a Content Security Policy, though the CSP is permissive, allowing unsafe inline scripts which could pose risks. No explicit privacy, cookie, or terms of service policies are present, and no contact or incident response information is publicly available, indicating gaps in compliance and transparency.

A

AToken

atoken.com

55

AToken is an online informational platform specializing in reviews and guides for Bitcoin casinos in the UK market for 2025. The website targets crypto gambling enthusiasts by providing detailed content on casino options, bonuses, games, and responsible gambling practices. It operates primarily as an affiliate or informational site rather than a direct gambling operator. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Yoast SEO for optimization. The site is mobile-friendly and well-structured, offering a good user experience with rich, relevant content. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit security policies, which could be improved. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy perceptions. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security transparency.

A

ATLAS DATA STORAGE

atlasds.com

59

Atlas Data Storage is a small technology company specializing in end-to-end DNA data storage solutions. The website presents a focused business model targeting enterprises and organizations interested in advanced data storage technologies. The company appears to be emerging in the DNA data storage market with limited public business information and no visible parent or subsidiary companies. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS with HSTS, but lacks additional security headers and published security policies. The absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. Contact information is limited to email addresses without phone or physical address details.

D

Liam's Portfolio

duckwithsunglasses.com

56

The website duckwithsunglasses.com is a personal portfolio for Liam, a multimedia designer from the UK specializing in graphic design, brand identity, and motion graphics. The site showcases his skills and work samples and includes a link to resources sold via Gumroad. The business model is freelance and resource sales, targeting potential clients and employers interested in multimedia design. The site is small scale and recently established in 2022. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, WebGL shaders, and Google Fonts. It is hosted behind Cloudflare DNS and CDN services, ensuring good SSL configuration and moderate performance. The site is mobile optimized with good design and navigation but lacks advanced accessibility features and SEO optimization. From a security perspective, the site enforces HTTPS and has domain transfer protection but lacks visible security headers and privacy or cookie policies. No contact information or incident response policies are disclosed, and no vulnerability disclosure mechanisms are present. Tracking is minimal, limited to Cloudflare Insights. Overall, the security posture is moderate but could be improved with standard security headers and compliance documentation. The overall risk is low given the nature of the site as a personal portfolio with no sensitive data collection or e-commerce. Strategic recommendations include adding privacy and cookie policies, security headers, and contact information to improve trust and compliance. Enhancing accessibility and SEO would also benefit the site's reach and professionalism.

T

Turnip

turnip.gg

55

Turnip is a technology company focused on empowering gaming communities through a platform that enables users to build, join, and interact within gaming clubs and livestream mobile games with ease. The company offers mobile applications available on both Google Play and the Apple App Store, positioning itself as a niche player in the gaming community engagement and livestreaming market. The website content is professionally designed and clearly communicates the business purpose and key services, targeting gamers and content creators seeking interactive community experiences. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts and jQuery. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. Hosting is provided by Webflow, ensuring reliable uptime and SSL encryption. However, there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not publish a security policy or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a moderate security posture with good business credibility and technical implementation. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security maturity.

Y

Yac

yac.com

68

Yac is a technology company providing asynchronous communication tools including voice messaging, screen sharing, and asynchronous meetings designed primarily for remote teams. The company positions itself as a productivity enhancer by reducing the need for synchronous meetings, supported by reputable customers such as Spotify and HubSpot. The website is professionally designed, built on modern web technologies including Webflow CMS, Google Tag Manager, and Segment Analytics, and hosted with Cloudflare DNS services. The technical infrastructure supports good performance and mobile optimization, although accessibility features are basic. Security posture is solid with HTTPS enforced and domain registration protections in place, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and safe for general audiences.

R

Relay Commerce

peelinsights.com

70

Peel Insights is a SaaS company specializing in automated ecommerce analytics tailored for Shopify and other ecommerce platforms. Their software aggregates data from multiple sources such as Shopify, Amazon, and Walmart to provide actionable insights on customer lifetime value, retention, and subscription analytics. The company positions itself as a trusted analytics partner for DTC brands, offering unique reports and AI-driven segmentation to optimize marketing and sales strategies. The website is professionally designed, mobile-optimized, and rich in content including testimonials, case studies, and detailed product descriptions, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Mixpanel, Microsoft Clarity, HubSpot, Intercom, and FullStory for analytics, marketing automation, and user engagement. The site is hosted on a CDN with HTTPS enforced, ensuring good performance and security. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Peel Insights presents a professional and trustworthy ecommerce analytics platform with strong technical and marketing infrastructure. The main risk lies in the missing WHOIS data, which should be addressed to improve domain trust and compliance. Strategic recommendations include enhancing security transparency, publishing incident response details, and verifying domain registration information.

X

Xeno

getxeno.com

64

Xeno is a technology company offering a next-generation AI-powered CRM solution tailored for the retail industry. Their platform focuses on maximizing repeat revenue through personalized marketing communications across multiple channels including SMS, Email, Whatsapp, and Instagram. The website positions Xeno as an innovative player in the retail CRM market with key services including customer engagement, loyalty programs, and offer management. The digital presence is built on modern web technologies such as Webflow CMS, Google Analytics, and Facebook Pixel, indicating a mature digital marketing infrastructure. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is adequate with HTTPS enabled and secure forms, but lacks important security headers and visible privacy compliance documentation. Overall, the website is professional and well-designed, targeting retail businesses seeking advanced CRM solutions.

T

Taxwire

taxwire.co

63

Taxwire is a technology-driven company specializing in automating global sales tax compliance for businesses. Their platform integrates with finance and commerce systems to provide accurate tax calculations, registrations, filings, and audit support, targeting companies that require comprehensive sales tax solutions. The website demonstrates a strong market position with detailed service offerings and customer testimonials, supported by a small but expert team. Technically, the site is built on Webflow with modern JavaScript libraries and uses Google Tag Manager for analytics and tracking. The site is well-optimized for performance, mobile, and SEO, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and business credibility. Overall, Taxwire presents as a trustworthy SaaS provider in the tax compliance niche with room for enhanced privacy and security transparency.

S

Starday Foods

stardayfoods.com

60

Starday Foods is a technology-driven company focused on AI-powered food innovation, partnering with major retailers and CPG brands to leverage data science for product development and market insights. Their platform offers tools such as consumer data segmentation, trend tracking, proposal generation, and retail product databases to empower clients in making confident product decisions and maintaining competitive advantage. The website is professionally designed on the Squarespace platform, featuring integration with Google Analytics and social media presence primarily on LinkedIn. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking advanced security headers. Privacy and cookie policies are not present, indicating compliance gaps. Overall, the site presents a credible business front but would benefit from enhanced transparency and security improvements.

L

Light Labs

lightlabs.com

56

Light Labs operates as a modern laboratory testing and compliance platform focused on ensuring ingredient transparency and product purity for mission-driven brands, manufacturers, and supplement companies. The company offers ISO 17025 accredited laboratory testing services combined with a software platform that manages testing workflows, compliance reporting, and product insight panels. Their market position is strengthened by trusted partnerships and client testimonials, positioning them as a reliable provider in the food safety and supplement testing industry. Technically, the website is built on Webflow with modern JavaScript libraries such as Swiper.js and MixItUp, and integrates analytics via PostHog and marketing optimization through Intellimize. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and a formal security policy or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises some legitimacy concerns, though the website content and client references support its authenticity. Overall, Light Labs presents a professional and trustworthy online presence with room for improvement in security best practices and privacy compliance. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

A

Affiliate.com

affiliate.com

61

Affiliate.com is a technology-driven affiliate commerce platform focused on powering the future of AI and traditional commerce. It serves publishers, networks, merchants, and brands by providing structured, real-time product data and analytics to optimize affiliate marketing strategies. The platform emphasizes normalized data from over 20,000 merchant programs and offers API and web platform access to its customers. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information including privacy and terms of service policies. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear consistent and trustworthy. Technically, the site is built on Webflow CMS, uses modern web technologies including Google Tag Manager and HubSpot for analytics and marketing, and is hosted on a reliable infrastructure likely supported by Cloudflare. The site loads quickly and is optimized for mobile devices. Security posture is good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. No direct contact emails or phone numbers are found, which may impact user trust and support accessibility. From a security perspective, the site shows good practices such as no exposed sensitive data and controlled script loading. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The missing WHOIS data is a notable risk factor for domain trustworthiness. Overall, the site is safe, professional, and business-focused with moderate risk due to incomplete domain registration transparency. Strategic recommendations include improving security headers, implementing cookie consent for GDPR compliance, publishing security and incident response policies, and verifying domain registration details to enhance trust and credibility.

R

Replicated

replicated.com

70

Replicated operates as a commercial software distribution platform targeting enterprise customers with complex deployment environments including air-gapped and on-premises solutions. The company offers a comprehensive suite of services covering the software distribution lifecycle, licensing, compatibility, and embedded Kubernetes solutions. Their market position is focused on enabling software vendors to securely distribute and manage their software in challenging enterprise contexts. Technically, the website is built on a modern Webflow CMS infrastructure, leveraging multiple analytics and marketing tools such as Google Analytics, Smartlook, Bizible, and Reddit Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses asynchronous loading of scripts to minimize performance impact. However, there is a lack of explicit security policies, vulnerability disclosure mechanisms, and WHOIS transparency, which introduces some risk factors. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and published security documentation.

V

VINYL

vinyl.vc

44

VINYL is a formation stage venture capital fund specializing in commerce infrastructure, focusing on early-stage startups that build the systems and solutions powering the future economy. The website presents a curated portfolio of companies, many of which are pre-revenue and pre-product, emphasizing a niche investment approach. The site branding is consistent and professional, targeting commerce startups and investors interested in foundational commerce technologies. Technically, the website uses modern JavaScript modules, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized with a visually engaging design but lacks advanced accessibility features and comprehensive SEO optimizations. No CMS or hosting provider details are evident from the content. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy, cookie, or terms of service policies. There are no forms or data collection points, reducing immediate risk exposure. However, the absence of privacy compliance mechanisms and incident response contacts indicates room for improvement in regulatory adherence and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory alignment.

W

Wellworthy

wellworthy.com

45

Wellworthy is a health and wellness media platform established in 2006, focused on helping consumers discover top brands and products to achieve their health, wellness, and fitness goals. The site offers curated content, product reviews, and a subscription newsletter targeting health-conscious consumers. Technically, the website is built on WordPress with modern SEO practices, Google Analytics, Facebook Pixel, and CleanTalk anti-spam integration, hosted likely via GoDaddy. The site is mobile optimized with good navigation and content quality. Security posture is solid with HTTPS, domain locking, and anti-spam measures, but lacks DNSSEC and formal privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved for better compliance and trust. Overall, the site is professional and trustworthy with moderate tracking and marketing tools in use.

G

Grupo Pacífico

pacifico-meetings.com

74

Grupo Pacífico is a well-established Spanish company specializing in event management, communication, and technology services with over 40 years of experience. Their market position is strong in organizing national and international congresses, corporate incentives, and providing integrated marketing and communication solutions. The website reflects a professional and consistent brand image targeting corporate clients and event organizers. Technically, the site is built on a modern React/Next.js stack with good mobile optimization and SEO practices, hosted partially on Google Cloud Storage for media content. Security posture is adequate with HTTPS and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and alignment with business claims. Overall, the site is trustworthy and professionally maintained.

L

Linktree Pty Ltd

odesli.co

63

Songlink/Odesli is a technology service operated by Linktree Pty Ltd, specializing in automated, on-demand smart links for songs, albums, podcasts, and related media content. The platform targets artists and fans, providing a free service that aggregates links across major platforms to facilitate sharing and promotion. The business operates from Australia and was founded in 2019, positioning itself as a niche player in the music and podcast link aggregation market. The website demonstrates consistent branding and a clear business description, supporting its market position. Technically, the website is built using modern web technologies including React and Next.js, hosted on AWS infrastructure. The site is performant, mobile-optimized, and includes SEO best practices such as meta tags and Open Graph data. Accessibility is basic but present. No CMS is explicitly detected, indicating a custom or framework-based implementation. The technical stack and hosting choices reflect a mature digital infrastructure suitable for scalable web services. From a security perspective, the site enforces HTTPS and has domain registration protections enabled. However, it lacks DNSSEC and does not publish privacy, cookie, or security policies on the main page, which are important for compliance and user trust. No security headers were detected in the HTML content, and no incident response or vulnerability disclosure information is provided. No tracking or advertising scripts were found, indicating a privacy-conscious approach but also a lack of transparency on data collection. Overall, the website is safe, professional, and functional with a moderate trustworthiness rating. The absence of explicit privacy and cookie policies and security disclosures lowers compliance scores. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency would enhance the site's credibility and user trust.

Fundacja Trans-Fuzja is a Polish non-profit organization dedicated to supporting transgender, non-binary, intersex, and gender non-conforming individuals through advocacy, psychological and legal support, and education. Established in 2008, it is the first organization of its kind in Poland and operates primarily as a community-driven foundation. The website is hosted on Google Sites, leveraging Google Fonts and APIs, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, limiting domain trust verification. Overall, the site presents a professional and trustworthy front for a small non-profit entity focused on social advocacy.

W

Wing

wing.com

63

Wing is a pioneering company in the drone delivery sector, offering innovative technology to provide fast and convenient delivery services directly to customers' doorsteps. The website reflects a modern and professional digital presence built using Framer, hosted on Google infrastructure, indicating a mature technical setup. However, the site lacks critical privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. Overall, Wing presents as a credible and established business with room for improvement in privacy compliance and security transparency.

A

Adhvai Deepak Menon

adhvai.com

64

The website represents a personal portfolio for Adhvai Deepak Menon, a student with interests and talents in art, poetry, writing, philosophy, and athletics. The site is hosted on Google Sites, leveraging Google's infrastructure and fonts, indicating a basic but reliable technical foundation. The content is well-structured and relevant to the individual's personal branding but lacks comprehensive business or organizational information. Security posture is adequate with HTTPS enabled, but the absence of security headers and privacy policies limits compliance and trust. The domain WHOIS data is unavailable, which raises questions about domain registration legitimacy, although the site content is accessible and benign. Overall, the site serves as a personal showcase rather than a commercial business platform.

Lulu Press, Inc. operates a leading online self-publishing and print-on-demand platform that enables authors and publishers to create, print, and sell books globally. The company offers a comprehensive suite of services including custom book printing, ebook creation, ecommerce integrations with platforms like Shopify, Wix, and WooCommerce, and global retail distribution reaching over 40,000 retailers. Their business model focuses on eliminating inventory risk through print-on-demand technology, catering primarily to self-publishers, small publishers, and businesses. Technically, the website is built using modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. The site is well-structured with comprehensive metadata, Open Graph tags, and JSON-LD structured data enhancing discoverability and social sharing. Accessibility and user experience are strong, with clear navigation and professional design. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a visible cookie consent mechanism and explicit security or incident response policies represent minor compliance gaps. The WHOIS data confirms the legitimacy of the domain with consistent registration details matching the business identity. Overall, Lulu.com presents a trustworthy, professional, and technically sound platform with a strong market position in the self-publishing industry. Strategic improvements in privacy compliance and security transparency would further enhance trust and regulatory adherence.

V

VITA healthcare solutions ltd

vitagroup.services

47

Vita healthcare solutions ltd is a newly founded UK-based company specializing in healthcare innovation adoption, education, and business scaling services. Their website positions them as leaders in healthcare innovations, offering Masters-level educational programmes, accelerator programmes, and consulting services to governments, investors, and multinational firms. The company leverages real-world experience from senior experts to guide innovators through the adoption process. Technically, the website is built on WordPress using Elementor, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security practices.

L

Limula SA

limula.ch

58

Limula SA is a Swiss-based company specializing in automated cell and gene therapy manufacturing solutions. Their innovative platform combines a bioreactor and centrifuge into a single closed device, aiming to simplify and scale the production of life-saving therapies. Positioned as an emerging leader in the healthcare technology sector, Limula targets biotech firms, pharmaceutical companies, and investors interested in advanced cell therapy manufacturing. The website reflects a professional and consistent brand image, emphasizing Swiss engineering excellence and strong industry partnerships. Technically, the website is built on WordPress with a modern tech stack including jQuery, MediaElement.js, and various UI plugins. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, Limula's digital presence supports its business credibility and market positioning well. The site is safe, professional, and trustworthy, with clear contact channels and partnership opportunities. However, improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

C

Century Health

century.health

58

Century Health is a healthcare-focused company specializing in AI-powered real-world evidence analytics to accelerate treatment development. Their website presents a professional image emphasizing support for the research community and patient privacy. The technical infrastructure is built using Framer with integration of Google Analytics for user tracking. The site is mobile optimized and well-designed, though it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website reflects a credible small healthcare technology business with room for improvement in privacy and security transparency.

M

Monomer Bio, Inc.

monomerbio.com

61

Monomer Bio, Inc. is a specialized technology company focused on laboratory automation solutions for cell biology research. Their platform integrates software and hardware to automate cell culture workflows, enabling researchers to monitor, record, interpret, and act on cell data efficiently. The company targets research labs and biotech organizations aiming to accelerate biological discoveries through automation. The website presents a professional and modern digital presence, leveraging Webflow CMS and Google Tag Manager for analytics. It is well-structured, mobile-optimized, and rich in relevant content, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and privacy policies published, though some improvements are recommended such as adding cookie consent and explicit security headers. The absence of WHOIS data is a notable gap, raising questions about domain registration transparency, but the overall business credibility is supported by trusted client logos and clear contact information. Strategic recommendations include enhancing security headers, implementing GDPR cookie consent, and publishing incident response contacts to strengthen trust and compliance.

L

Life Extension Ventures

lifex.vc

68

Life Extension Ventures (LifeX) is a specialized venture capital firm focusing on investments in AI, longevity, climate, and health technology startups. The company positions itself as a partner to scientists and entrepreneurs aiming to extend life and improve the planet. The website reflects a professional and modern digital presence, leveraging Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance. The content is rich, well-structured, and targeted at tech-savvy investors and founders. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and business credibility.

C

Call me by my gender

callmebymygender.top

54

The website 'Call me by my gender' is a small educational platform focused on promoting respectful and inclusive language regarding gender identity. It provides detailed explanations on why certain terms like “female” or “male” can be problematic and offers alternatives for respectful communication. The site targets a general audience interested in gender inclusivity and language sensitivity. The business model is informational without commercial transactions or services. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted with DNS services provided by Cloudflare and uses Plausible Analytics for privacy-conscious visitor tracking. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate with no CMS detected. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options, which are recommended for enhanced security. There are no privacy or cookie policies present, representing compliance gaps. The domain registration is recent (2023) and privacy protected, which is reasonable for this type of small educational site. Overall, the website is safe, professional, and trustworthy for its niche educational purpose. Key recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and considering a vulnerability disclosure policy to improve security posture and compliance.

The website versary.town is a personal creative portfolio and blog site owned by Annie, who identifies as a gay girl interested in music and programming. The site features personal blogs, recipes, resources, and links to social media and code repositories. The business is small and niche, targeting a general audience interested in personal creative content. The domain is registered to Private by Design, LLC in the US, consistent with the website's content and timeline. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted with DNS services from Porkbun LLC, with moderate performance and good mobile optimization. However, there is no CMS detected, and no advanced frameworks are used. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which reduces its security posture. There are no visible privacy, cookie, or security policies, and no incident response or vulnerability disclosure mechanisms. No analytics or tracking scripts are present, indicating minimal user tracking. The site content is safe for general audiences with no adult or explicit material. Overall, the site is a legitimate personal project with moderate technical and security maturity. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and considering vulnerability disclosure to enhance trust and compliance.

P

Private by Design, LLC

shuga.co

63

Shuga.co is a personal portfolio website representing an individual named Shuga, who is a developer, graphic designer, and video editor. The site showcases various projects, blog posts, and social media presence, targeting developers and tech enthusiasts. The business model is primarily personal branding and open source project sharing, with a small-scale operation based in the US. The website is well-structured with good content quality and consistent branding. Technically, it uses standard web technologies including HTML5, CSS3, FontAwesome, and Google Fonts, hosted with Cloudflare DNS and registered via Porkbun. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, with no suspicious patterns detected. The site is safe for general audiences with no adult or questionable content.

C

Cooperativa “Consejo de Lenguaje Neutro”

pronombr.es

20

Pronombr.es is a community-driven cooperative project dedicated to promoting inclusive language and the correct use of personal pronouns. It offers educational resources, personalized pronoun cards, and fosters a supportive environment for the queer community and allies. The project is open source and supported by a small but active team, with a strong emphasis on respect, freedom, and inclusivity in language use. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN services for performance and Shopify for merchandise sales. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS and public key cryptography, though it lacks some formal policies like a security.txt and cookie consent mechanisms. Overall, the site is trustworthy, professional, and serves a niche but important community function.

S

Society of British Neurological Surgeons

sbns.org.uk

60

The Society of British Neurological Surgeons (SBNS) operates as a professional society dedicated to advancing neurosurgery in the United Kingdom. Their website provides comprehensive resources including membership information, scientific meetings, publications, educational materials, and research support. The organization targets neurosurgeons, medical students, researchers, and healthcare professionals interested in neurosurgery. The site reflects a medium-sized, established healthcare society with a strong focus on professional development and community engagement. Technically, the website is built on a modern stack including jQuery, Bootstrap, and Preside CMS, with good mobile optimization and accessibility features. While performance is moderate, the site is well-structured with clear navigation and SEO-friendly metadata. However, explicit privacy and cookie policies are not found, and security headers are not visibly implemented, indicating areas for improvement in compliance and security posture. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks visible security headers and formal security policies. The WHOIS lookup failed due to domain naming rules, limiting domain registration insights, but the website content and professional presentation suggest legitimacy. Overall, the site scores well on business credibility and content quality but needs enhancements in privacy compliance and security best practices. Strategically, SBNS should prioritize publishing clear privacy and cookie policies, implementing security headers, and establishing incident response and vulnerability disclosure mechanisms to strengthen trust and compliance. These steps will enhance their security posture and align with regulatory requirements, supporting their role as a trusted professional society.

H

Hypervision Surgical Ltd

hypervisionsurgical.com

69

Hypervision Surgical Ltd is a UK-based medical technology company spun out from King's College London, specializing in AI-powered hyperspectral imaging to enhance surgical precision and patient safety. Their flagship product integrates real-time, non-invasive tissue characterization into surgical workflows, targeting clinicians and healthcare providers. The company is positioned as an innovative early-stage MedTech player with strong academic and industry partnerships, supported by certifications such as ISO 13485, UKCA marking, and FDA clearance. Technically, the website is built using modern frameworks like Bootstrap and Hugo CMS, hosted behind Cloudflare DNS, and optimized for mobile and performance. The site employs lazy loading and standard web technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security headers are recommended. From a security and compliance perspective, the site provides comprehensive privacy, cookie, and terms of service policies with GDPR compliance indicators. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No phone contact is provided, only email and physical address. No tracking or analytics scripts were detected, indicating a privacy-conscious approach. Overall, the website and business present a high level of professionalism, trustworthiness, and technical maturity with minor areas for security enhancement. The risk profile is low, and the company demonstrates credible market positioning in the healthcare technology sector.

The Surgery CDT website represents the EPSRC Centre for Doctoral Training in Advanced Engineering for Personalised Surgery & Intervention, affiliated with King's College London and funded by EPSRC. It serves as an academic and research platform targeting doctoral students and researchers in personalised surgery and intervention. The website provides information about projects, teams, cohorts, partners, and application procedures, reflecting a specialized educational and research focus. Technically, the site is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured data. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers are absent and could be improved. Privacy and cookie policies are missing, which is a compliance gap. The WHOIS data is notably absent, which raises concerns about domain registration legitimacy despite the professional and trustworthy content. Overall, the site is functional, professional, and safe for general audiences but would benefit from enhanced privacy compliance and security best practices.

H

Horse Music Herald

horsemusicherald.com

62

Horse Music Herald is a niche media website dedicated to music related to horses and the brony fandom. It provides music reviews, artist spotlights, and curated playlists targeting the brony community and horse enthusiasts. The site operates on WordPress.com hosting with Jetpack plugins, leveraging managed infrastructure for performance and security. Advertising is integrated via WordAds and Google DoubleClick, supporting the site's business model. The website demonstrates consistent branding and good content quality, with active social media engagement on Twitter, Tumblr, and YouTube. However, explicit privacy and terms of service pages are not found, though a cookie consent mechanism is implemented. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. The domain is well maintained since 2016, consistent with the site's history and content.

The website timafei.dev is a personal academic portfolio for Timafei Hushchyn, a master's student in computer science at the University of Massachusetts Amherst. The site primarily serves as a professional and academic profile showcasing Tim's research interests in algorithms, distributed systems, and social computing, along with personal interests. It targets academic peers, potential collaborators, and personal contacts rather than commercial customers. The business model is non-commercial, focusing on information sharing and networking. Technically, the site is built with basic HTML, CSS, and JavaScript, including Google Fonts for typography. It lacks advanced frameworks or CMS platforms and appears to be self-hosted or hosted on a simple platform. Performance is moderate with basic mobile optimization and accessibility features. SEO is minimal but sufficient for a personal site. From a security perspective, the site does not implement common security headers and lacks privacy and cookie policies, which are important for compliance and user trust. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The WHOIS data is consistent with the website content and owner identity, indicating legitimacy. No WAF or blocking mechanisms were detected. Overall, the site is low risk but could benefit from improved security practices, privacy compliance, and enhanced technical features to improve user experience and trustworthiness.

C

CAI4CAI Research Group

cai4cai.ml

58

CAI4CAI is an academic research group embedded within King's College London, focusing on contextual artificial intelligence for computer-assisted interventions in healthcare. The group specializes in surgical assistance, machine learning, medical imaging, and translational research with strong industry collaborations and open research culture. Their website reflects a professional academic presence with detailed information on projects, team members, publications, and open positions.

G

Gender Census

gendercensus.com

43

Gender Census is a niche annual survey project focused on collecting data about language used by people outside the traditional gender binary. The website serves as a platform for survey participation, results publication, and community engagement. The project is small-scale, non-profit oriented, and supported by donations and sponsorships. Technically, the site is built on WordPress with common web technologies and demonstrates moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data is a notable anomaly that reduces trustworthiness. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency.

V

VERTIGOAWAY MAINSYS

vertigoaway.space

61

VERTIGOAWAY MAINSYS is an independent music artist focusing on experimental and electronic music projects. The website serves as a centralized hub for the artist's releases, news, and social media presence, targeting fans of niche audio content. The business model revolves around content distribution primarily through Bandcamp and streaming platforms, with a small-scale operation based in Iceland. Technically, the site is built using Nicepage CMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. However, the site lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or HTTPS enforcement details, and no privacy or cookie policies are present, indicating low compliance with privacy regulations. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is functional and safe but would benefit from enhanced security and privacy compliance measures.

S

Squarepusher

squarepusher.net

61

Squarepusher.net is the official website and e-commerce platform for the electronic music artist Squarepusher, offering remastered music releases, merchandise, and related projects. The site targets fans and collectors of electronic music, providing digital and physical formats for purchase. The business operates a niche direct-to-consumer model with a focus on official releases and limited editions, positioning itself as a trusted source for Squarepusher's content. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Cloudflare DNS, with a proprietary or custom e-commerce platform likely based on Bleep. The site is moderately performant and mobile-optimized but lacks some accessibility features. Security posture is good with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Contact information and incident response details are absent, limiting transparency. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

Machine Girl Online

machin3gir1.com

69

Machine Girl Online is an e-commerce platform specializing in official merchandise and music sales for the band Machine Girl. The website targets fans and customers interested in purchasing branded apparel, music, and accessing tour information. The business operates primarily in the United Kingdom and was established in 2022, positioning itself as a niche player in the music merchandise market. The site leverages Shopify's robust e-commerce infrastructure, ensuring a professional and consistent user experience with good mobile optimization and clear navigation. The presence of cookie consent and privacy policies indicates a baseline compliance with data protection regulations.