Security Directory

C

CZ.NIC, z. s. p. o.

jaknainternet.cz

58

Jak na Internet is an educational initiative operated by CZ.NIC, the Czech national domain registry. The website provides a comprehensive series of short educational videos and accompanying texts aimed at increasing public awareness and understanding of the Internet and its various aspects. The project targets a broad audience including educators and general users interested in Internet literacy. The site is well-structured with categorized content covering topics from Internet safety to technical explanations and social aspects. Technically, the site uses standard web technologies including jQuery and embeds YouTube videos securely with sandboxing. Analytics are handled via Piwik with cookies disabled, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not present, and no direct contact information is provided on the site. The domain WHOIS data is not publicly available, consistent with CZ.NIC's registry policies, but the domain's legitimacy is strongly supported by its association with CZ.NIC. Security headers and advanced security configurations are not detected, suggesting room for improvement in security posture.

K

Knot Resolver

knot-resolver.cz

53

Knot Resolver is an open-source caching DNS resolver designed for scalability and flexibility, targeting a broad audience from large resolver farms to home network routers. The website positions the project as a modern, modular DNS solution trusted by notable industry players such as CETIN, Cloudflare, and Whalebone. The business model revolves around free software distribution with optional professional support services. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and integrates Matomo analytics with privacy-conscious settings. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate; while no forms or sensitive data exposure is evident, the absence of security headers and explicit privacy or cookie policies indicates room for improvement. WHOIS data is unavailable due to CZ.NIC registry privacy policies, but the domain and website content appear legitimate and consistent with the business claims. Overall, the site scores well on business credibility and content quality but should enhance privacy compliance and security best practices.

K

Knot DNS

knot-dns.cz

52

Knot DNS is an open-source, high-performance authoritative DNS server project targeting network administrators and organizations requiring robust DNS infrastructure. The website presents detailed technical information about the software's features, emphasizing performance, security, and modern DNS capabilities such as DNSSEC and dynamic updates. The project is community-driven and hosted under the CZ.NIC association umbrella, indicating a credible and specialized technology offering. Technically, the website is well-structured, uses modern web technologies, and is optimized for performance and mobile devices. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement. The security posture is moderate, with no obvious vulnerabilities but missing some best practices. Overall, the domain appears legitimate despite the absence of public WHOIS data, likely due to registry privacy policies. The site is safe, professional, and focused on a niche technical audience.

C

CZ.NIC

csirt.cz

69

CSIRT.CZ is the official National Computer Security Incident Response Team of the Czech Republic, operated by CZ.NIC under a public contract with the National Cyber and Information Security Agency. The organization provides critical cybersecurity incident response, coordination, education, and proactive security services to a broad range of stakeholders including ISPs, banks, public authorities, and academic institutions within the Czech Republic. The website reflects a professional and government-affiliated entity with strong trust indicators such as accreditation by Trusted Introducer and membership in FIRST. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, is mobile optimized, and implements a cookie consent mechanism, though it lacks explicit privacy and terms of service pages. Security posture is solid with HTTPS usage and no visible vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the domain registration data aligns well with the website's claims, showing a consistent and legitimate presence since 2007.

C

CZ.NIC

datovka.cz

53

Datovka is a Czech Republic-based open source desktop application developed and maintained by CZ.NIC, providing secure access to government data mailboxes (ISDS) and local storage of data messages. The software targets users requiring reliable electronic communication with public authorities, offering features such as message sending, receiving, verification, and long-term archiving. The project is positioned as a niche government-related tool with a medium-sized user base and is supported by a reputable national internet infrastructure organization. Technically, the website employs modern web standards with JavaScript and CSS, uses Matomo for privacy-conscious analytics, and supports multiple desktop platforms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the affiliation with CZ.NIC mitigates concerns. Overall, the website and project demonstrate good professionalism, content quality, and user trustworthiness.

The website domenovyprohlizec.cz is a Czech domain browsing service established in 2013. It provides domain lookup functionalities targeting a general audience interested in domain information. The site uses modern frontend technologies such as Vue.js and PrimeVue, indicating a contemporary technical infrastructure. However, the website lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and security headers. No contact or incident response information is provided, which limits trust and transparency. The domain registration data aligns well with the website's language and purpose, supporting its legitimacy. Overall, the site is functional and safe but requires improvements in security posture and privacy compliance to enhance trustworthiness and regulatory adherence.

C

CZ.NIC z.s.p.o

test-ipv6.cz

52

The website test-ipv6.cz is a specialized technical service operated by CZ.NIC z.s.p.o, a Czech domain registry organization. It provides IPv6 connectivity testing tools that help users and network administrators verify their IPv6 readiness and diagnose potential issues. The site is positioned as a niche technical resource with a focus on IPv6 adoption and network diagnostics. The business model appears to be a free service supported by CZ.NIC and community contributions, targeting technically savvy users and ISPs. From a technical perspective, the website uses standard web technologies including JavaScript, jQuery, and Piwik analytics. The hosting provider is identified as HETZNER-AS based on IP and ISP data. The site performs moderately in performance and mobile optimization, with basic accessibility and SEO features. The technical infrastructure is functional but could benefit from modern security headers and enhanced mobile responsiveness. Security posture is moderate; the site uses HTTPS for test URLs and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, and does not publish privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms domain legitimacy with consistent registration by CZ.NIC since 2011. Overall, the website is a trustworthy and useful technical resource with good business credibility but has room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response details to enhance trust and compliance.

Yum! Brands, Inc. is a leading global quick-service restaurant company operating iconic brands such as KFC, Pizza Hut, and Taco Bell. The company targets consumers worldwide, franchisees, investors, and job seekers, operating primarily through franchising and company-operated stores. The website reflects Yum! Brands' enterprise scale and market leadership with professional branding and comprehensive content. Technically, the site leverages modern frameworks including Dojo Toolkit, Bootstrap, and Google Tag Manager, hosted on IBM WebSphere Portal, providing a solid digital infrastructure with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response information are not prominently published. The absence of WHOIS data is notable but does not detract from the site's legitimacy given the brand's global presence and professional web presence. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Taco Bell Saipan is a local fast food restaurant website representing the Taco Bell brand in the Saipan region of the Marianas. The website is minimalistic, primarily providing a logo and a link to their Facebook page, with no detailed business descriptions or contact information. The business appears to be small and focused on local hospitality services. Technically, the site uses basic HTML and CSS with Google Fonts and is hosted behind Cloudflare, providing some level of CDN and DNS security. However, the site lacks advanced technical features such as CMS, structured data, or SEO optimizations. Security posture is moderate; HTTPS is implied via Cloudflare, and domain transfer is restricted, but no security headers or privacy policies are present. Overall, the site is safe for general audiences but lacks comprehensive privacy and security compliance. The domain registration is consistent and appropriate for the business age, but registrant details are minimal. Strategic improvements in privacy, security headers, and business information transparency are recommended.

The website www.thebalancemoney.com is currently inaccessible due to a Cloudflare security challenge page, which blocks access to its content. The WHOIS lookup for the domain returned no registration data, indicating either the domain is not registered or WHOIS data is protected or unavailable. Due to these access restrictions, no meaningful business, security, or compliance information could be extracted. The lack of accessible content and metadata prevents a thorough evaluation of the website's technical infrastructure, security posture, or business credibility.

PaySimple is a payment processing and integrated payments platform focused on serving the service economy and small business owners. Founded in 2005 and now part of EverCommerce, it offers APIs, SDKs, and integrated billing solutions to simplify payment acceptance and automate billing processes. The company positions itself as a trusted partner for SaaS companies and small businesses, emphasizing customer experience and revenue growth through embedded payments. The website reflects a mature digital presence with professional design and consistent branding.

G

Guam Waterworks Authority

paygwa.com

62

The Guam Waterworks Authority website serves as the official online portal for water utility services in Guam, providing customers with account management, billing, and payment functionalities. The site targets residents and businesses in Guam, positioning itself as the primary water utility provider in the region. Key services include online bill payment, water consumption tracking, and customer support messaging. The business model is a government utility service with a focus on secure and convenient digital access. Technically, the website is built using modern JavaScript libraries including React, with additional libraries for canvas manipulation and iconography. The site is moderately performant and optimized for mobile devices, though accessibility and SEO optimizations are basic. Hosting and domain registration are managed through GoDaddy, with no DNSSEC enabled and no visible advanced security headers. From a security perspective, the site uses HTTPS and secure login forms but lacks DNSSEC and security headers that could enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and similar regulations. Contact information is clearly provided, but no incident response or vulnerability disclosure information is available. No advertising or tracking technologies are detected, contributing to minimal user tracking. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in privacy compliance, security hardening, and transparency around data protection policies are recommended to enhance user trust and regulatory adherence.

G

Guam Power Authority

paygpa.com

58

Guam Power Authority operates the PayGPA website as a secure online portal for customers to manage their power utility accounts and make payments. The site targets residential and commercial customers in Guam, offering services such as quick pay, account login, and customer support. The business is well-established with a domain age since 2005, reflecting its long-standing presence in the energy sector of Guam. The website integrates modern technologies including React and Oracle Digital Assistant for chatbot support, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and secure login forms; however, DNSSEC is not enabled and security headers are not explicitly present, representing areas for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and functional, serving its utility customer base effectively.

GuamTax.com serves as the official online portal for the Guam Department of Revenue and Taxation, providing a comprehensive suite of tax-related services including business and individual e-filing, online payments, public notices, and regulatory information. The site targets residents and businesses in Guam, positioning itself as the authoritative government resource for tax compliance and revenue collection. Key services include business privilege tax returns, real property tax inquiries, vehicle registration, and passport office information. Technically, the website employs standard web technologies such as JavaScript, Google Tag Manager for analytics, and Google Fonts for typography. The site demonstrates moderate performance and basic mobile optimization, with a structured navigation system and consistent branding. However, there is room for improvement in accessibility and SEO optimization. The absence of a detected CMS or hosting provider details suggests a custom or government-managed infrastructure. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers such as Content-Security-Policy or Strict-Transport-Security in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is notably missing, raising concerns about domain registration legitimacy, although the official government branding and content strongly indicate authenticity. Overall, GuamTax.com is a functional and trustworthy government website with solid content and service offerings. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and security posture, supporting the site's critical role in Guam's tax administration.

E

Eckerö Line

eckeroline.ee

73

Eckerö Line operates as a regional transportation company specializing in ferry line trips and day cruises between Tallinn and Helsinki, offering additional services such as car and hotel packages. The website reflects a mature digital presence built on the Magento eCommerce platform, integrating modern technologies and third-party services for analytics and marketing. The site is well-structured with good design quality and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service policies are not found in the provided content. Cookie consent is managed effectively through Cookiebot, indicating awareness of privacy compliance requirements. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

The website gogift.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This block prevents access to any actual website content, including business information, policies, or contact details. The domain is well-established, having been registered since 1998, and uses Cloudflare for DNS and security services. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. The presence of Cloudflare's security mechanisms indicates an intent to protect the site from online threats, but also restricts external analysis. Overall, the site appears to be protected but currently unavailable for detailed evaluation.

The website www.merckaccessprogram-prevymis.com appears to be a healthcare-focused site related to Merck's access program for the drug Prevymis. It targets healthcare professionals and provides information consistent with pharmaceutical access programs. The site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a moderate level of digital maturity. Privacy and cookie policies are present and appear GDPR compliant, enhancing user trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and references to official Merck privacy policies suggest the site is likely legitimate or a marketing microsite. Security posture is moderate with cookie consent mechanisms but lacks visible security headers and explicit incident response or security policies. Overall, the site is professional and safe but would benefit from improved transparency and security hardening.

M

Merck & Co., Inc.

merckaccessprogram-keytruda.com

53

The website represents The Merck Access Program for KEYTRUDA®, a pharmaceutical support initiative by Merck & Co., Inc. It targets US healthcare providers, offering enrollment, affordability, coding, and patient assistance resources. The site is professionally designed with consistent branding and clear navigation, supporting its role as a trusted resource for healthcare professionals. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, potentially indicating a staging or proxy domain, which impacts trust. Overall, the site is functional and professional but requires verification of domain legitimacy and enhanced security practices.

D

DeviantArt

deviantartsupport.com

57

The website https://www.deviantartsupport.com/kb/en/ serves as the official help center and knowledge base for DeviantArt, the world's largest online social community for artists and art lovers. It provides users with support articles and a search interface to find answers related to the platform. The site is professionally designed, mobile-optimized, and uses modern web technologies such as React and Sentry for error tracking. However, the domain WHOIS data is not available, which raises concerns about the domain's registration legitimacy. No privacy, cookie, or terms of service policies are explicitly found on the page, and contact information is limited to a support form without direct emails or phone numbers. Security headers and explicit security policies are not detected, indicating room for improvement in security posture. Overall, the site is accessible, safe for general audiences, and provides valuable support content, but the lack of WHOIS data and privacy compliance documentation lowers its trustworthiness score.

D

DeviantArt

deviantart.net

56

DeviantArt is a large, well-established online social community platform focused on artists and art enthusiasts worldwide. It provides a space for creation, sharing, and engagement with art content. The domain is long-standing, registered since 2000, and positioned as a leading platform in the media industry for creative communities. The provided HTML content is a 404 error page, indicating the requested resource is not found, limiting direct content analysis. The site branding is consistent with custom fonts and icons, reflecting a professional digital presence. Technically, the site uses custom web fonts and is hosted on AWS infrastructure as inferred from DNS records. The page is mobile optimized with responsive design elements, though the content is minimal due to the error page status. No advanced frameworks or CMS are detected in the provided HTML snippet. Security posture shows some gaps such as lack of DNSSEC and absence of visible security headers in the HTML. Privacy and cookie policies are not present on this page, indicating potential compliance gaps. Security evaluation reveals no WAF or blocking mechanisms, and no explicit vulnerabilities are visible in the HTML. The domain registration is consistent and trustworthy, with domain status flags preventing unauthorized changes. However, the lack of DNSSEC and missing security policies suggest areas for improvement. Overall, the site is safe with no adult or explicit content detected. The 404 page limits the ability to fully assess the website's content and compliance. The overall risk is moderate due to missing privacy and security policies and minimal content on this page. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and enhancing transparency around security and incident response to improve trust and compliance.

M

MSD Österreich GmbH

msdconnect.at

59

MSD Connect Austria is a professionally maintained web portal dedicated to healthcare professionals in Austria, providing comprehensive medical and scientific information, continuing education, event access, and product details. The portal is clearly branded and linked to MSD Österreich GmbH, a subsidiary of the global MSD corporation. The website leverages modern web technologies including WordPress VIP, Yoast SEO, and Google Tag Manager, ensuring a robust digital infrastructure with good performance and mobile optimization. Privacy and cookie compliance are well implemented with GDPR-aligned policies and consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response contacts are not published. Overall, the site is trustworthy and serves as a valuable resource for its target audience.

P

Podium Podcast Co.

higheredpods.com

62

HigherEdPods is a niche online directory platform focused on podcasts related to higher education, operated by Podium Podcast Co. The platform offers podcast listings, episode search, and podcast submission features targeting the higher education podcaster community. The website is relatively new, launched in late 2023, and serves a specialized audience within the education and media sectors. Technically, the site is built on the Bubble.io platform, leveraging modern web technologies and third-party libraries such as Google Fonts and Fathom Analytics. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections, but it lacks DNSSEC and important security headers. Privacy compliance is minimal with a basic privacy policy present but no cookie consent mechanism. Contact information and incident response policies are not publicly available, which limits transparency. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

L

LIT

wearelit.co

58

LIT is an influencer management agency based in India, focused on connecting creators with top brands to foster an innovative creator community. The website positions itself as a professional and modern platform for influencer marketing and brand collaborations. The business targets creators and brands, operating primarily in the media sector with a small company size profile. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, OwlCarousel, Font Awesome, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate; HTTPS is implied but no explicit security headers or advanced security policies are detected. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap. The WHOIS data is fully redacted, typical for privacy protection, and no suspicious patterns are detected, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy and security measures.

A

Alchemy Advertising Pvt. Ltd.

whatstheword.co

49

WORD is an influencer marketing agency based in India, owned by Alchemy Advertising Pvt. Ltd., a subsidiary of The Alchemy Group. The company specializes in connecting brands with social media influencers to build brand awareness and engagement through managed campaigns and a self-serve influencer marketplace. The website demonstrates a professional presence with good content quality, clear navigation, and consistent branding. The target audience includes brands seeking influencer marketing services and social media influencers looking to build their brand. Technically, the website uses modern JavaScript libraries and tracking tools, hosted on reliable infrastructure with Amazon S3 for media assets and Name.com for DNS. Security posture is good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. No direct company contact emails or phone numbers are published, relying mainly on forms and social media for contact. Overall, the website is trustworthy and legitimate with a moderate to good security and privacy posture.

Socure is a leading technology company specializing in AI-powered identity verification and fraud prevention solutions. Their platform enables businesses to streamline onboarding, reduce risk, and comply with KYC and AML regulations. The website demonstrates a strong market position with notable clients and comprehensive product offerings focused on identity certainty and fraud mitigation. Technically, the site is built on modern frameworks such as Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The lack of WHOIS data limits domain trust analysis but does not detract from the professional presentation and business credibility. Overall, the site is well-designed, content-rich, and trustworthy for its target B2B audience.

S

SentiLink

sentilink.com

77

SentiLink is a technology company specializing in identity fraud prevention solutions targeted at financial institutions. Their platform combines advanced technology and expertise to detect and stop identity theft at the application stage, positioning them as a leading provider in the finance sector. The website is professionally designed using modern web technologies such as Next.js and React, hosted likely on WPEngine, and integrates multiple marketing and analytics tools including HubSpot, Google Tag Manager, and social media pixels. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers and policies are not published. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and branding suggest a credible business. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy or terms of service pages found. Overall, the site is well-built and trustworthy from a user perspective but would benefit from improved transparency and domain registration clarity.

P

Prove

prove.com

72

Prove operates a leading digital identity verification platform trusted by over 1,000 companies globally, focusing on reducing fraud and improving consumer experiences. Their services span digital onboarding, authentication, identity management, and verified user solutions, targeting industries such as banking, fintech, healthcare, and marketplaces. The company leverages modern web technologies including Webflow CMS, Google Tag Manager, Hotjar, and ClickCease for analytics and marketing, ensuring a fast, mobile-optimized, and accessible website experience. Privacy and cookie policies are well implemented with user consent mechanisms, reflecting good compliance practices. However, explicit security policies and incident response details are not publicly available, which could be improved to enhance trust. The absence of WHOIS data limits domain registration verification, but the professional presentation and extensive developer resources indicate a legitimate and mature business. Overall, the website demonstrates strong technical maturity, good security posture, and solid business credibility, scoring an overall AI rating of 85.

M

Merck & Co., Inc.

merckformothers.com

64

MSD for Mothers is a global initiative by Merck & Co., Inc. dedicated to improving maternal health worldwide by reducing preventable pregnancy-related deaths. The website serves as a platform to showcase their programs, strategic investments, and partnerships with organizations such as UNICEF. The initiative targets global health stakeholders, healthcare providers, and the general public, positioning itself as a significant corporate social responsibility effort within the healthcare sector. The content is professionally curated, with consistent branding and clear messaging aligned with Merck's corporate identity. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Tag Manager, complemented by a OneTrust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no explicit CMS or hosting provider information is discernible. Security headers are not evident from the provided data, and SSL configuration details are unknown but presumed present given HTTPS usage. From a security perspective, the site demonstrates good practices such as consent-based analytics and cookie management but lacks visible advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain is a notable gap, raising questions about domain registration transparency, though the website content and corporate association mitigate concerns. Overall, the site presents a low-risk profile with room for security enhancements. Strategically, the website effectively communicates its mission and impact, leveraging partnerships and social media to extend reach. The lack of direct contact emails or phone numbers suggests a preference for controlled communication channels, possibly to manage inquiries efficiently. The site is safe for general audiences with no adult or questionable content detected.

The Merck Access Program website serves as a resource for healthcare professionals in the United States, providing support related to insurance coverage, reimbursement, co-pay assistance, and patient assistance programs for Merck pharmaceutical products. The site is well-branded with official Merck logos and links to authoritative prescribing information and medication guides, indicating a strong market position as part of Merck & Co., Inc. The technical infrastructure leverages modern web technologies including React and Gatsby, with integrated analytics and cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. Privacy compliance is robust with comprehensive privacy and cookie policies and user consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience, though the lack of WHOIS data for the domain is a notable anomaly that warrants further verification. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer contact information for security incidents.

C

Candid

foundationcenter.org

59

Candid is a leading nonprofit organization formed by the merger of Foundation Center and GuideStar, providing comprehensive data and resources to the social sector. Their website serves as a hub for nonprofit data, philanthropy research, and grantmaker information, targeting nonprofit professionals and grantmakers. The organization holds a strong market position as a trusted resource in the nonprofit ecosystem. Technically, the website employs a mature technology stack including jQuery, Google Tag Manager, and various UI libraries, hosted on AWS infrastructure. While the site is well-designed and mobile-optimized, some legacy JavaScript libraries present minor security concerns. Security posture is generally good with HTTPS enforced and domain protections in place, but improvements such as enabling DNSSEC and implementing Content Security Policy headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its audience effectively.

P

PayByLink

b2u.eu

59

B2U.eu, operating under the brand PayByLink, is a specialized technology company based in the Netherlands offering online payment solutions, payment links, and website security scanning services. With over 25 years of experience, the company positions itself as a practical and knowledgeable partner for businesses seeking efficient online transaction processing and enhanced website security. The website reflects a professional and consistent brand image, supported by trust indicators such as client logos and security certifications. Technically, the site is built on a modern WordPress CMS with Elementor, integrating essential tools like Google Analytics and reCAPTCHA for security and analytics. The security posture is strong with HTTPS enforced and Trust Guard certification, though there is room for improvement in HTTP security headers and incident response transparency. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the domain WHOIS data is privacy protected, which is typical for commercial entities, and no suspicious patterns were detected. The website is accessible without WAF blocking, providing a good user experience and trustworthy business presence.

V

Veho Group Oy Ab

veho.fi

64

Veho Group Oy Ab is a well-established Finnish automotive company specializing in the sales, leasing, and servicing of Mercedes-Benz, smart, and BYD vehicles, including passenger cars and commercial vehicles. The company holds a strong market position as an authorized dealer and service provider in Finland, targeting both private consumers and professional clients. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is hosted on reliable infrastructure with Elisa Oyj as the domain reseller and nameserver provider. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be verified further. Privacy compliance is robust, featuring detailed privacy and cookie policies with GDPR adherence. Overall, the website and domain registration data align well, indicating a trustworthy and legitimate business with a high level of professionalism and digital maturity.

S

Savonia-AMK

savonia.fi

63

Savonia-AMK is a Finnish international university of applied sciences focused on education, research, development, and innovation. The institution offers degree programs (AMK and YAMK), continuing education, and services for companies, positioning itself as a significant regional educational entity with a strong workplace culture, evidenced by its Great Place To Work certification. The website is professionally designed, accessible, and well-structured, targeting students, professionals, and business partners. Technically, the site leverages WordPress CMS with modern analytics and consent management tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security and incident response policies are not published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration data aligns with the website's claims, supporting legitimacy and trustworthiness.

H

Helsingin seudun opiskelija-asuntosäätiö

hoas.fi

69

Helsingin seudun opiskelija-asuntosäätiö (Hoas) is a well-established non-profit foundation providing affordable student rental housing in the Helsinki metropolitan area, including Helsinki, Espoo, Vantaa, and Kauniainen. With over 10,000 apartments, Hoas serves a large student population and collaborates with multiple student unions. The website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation tailored to students seeking housing solutions. Technically, the site is built on WordPress and leverages modern tools such as Google Tag Manager, Cookiebot for consent management, and Giosg live chat for customer interaction. Security posture is strong with HTTPS enforcement and standard security headers, though DNSSEC is not implemented. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns perfectly with the business claims, supporting high legitimacy and trust.

F

Fiksuruoka.fi

fiksuruoka.fi

62

Fiksuruoka.fi is a Finnish e-commerce platform specializing in offering discounted food products, primarily surplus or near-expiry items, aiming to reduce food waste while providing significant savings to consumers. Founded in 2016, the company positions itself as a sustainable alternative to traditional grocery shopping, delivering products nationwide in Finland with free shipping over a certain order value. The website features a modern technical infrastructure built on Nuxt.js, integrating advanced search capabilities via Algolia and employing Google reCAPTCHA Enterprise for bot protection. Analytics are handled through Snowplow, and advertising is managed via Bing Ads, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the site is professionally designed, mobile-optimized, and provides clear product information with discount and expiry details, enhancing user trust and experience.

W

WWF Suomi

wwf.fi

68

WWF Suomi is a well-established non-profit environmental organization focused on nature conservation and sustainable coexistence between humans and nature in Finland and globally. The website serves as a comprehensive platform for education, awareness, live nature broadcasts, and fundraising activities. It holds a strong market position as a leading environmental NGO in Finland, supported by a large audience of donors and environmental supporters. Technically, the website is built on WordPress with modern technologies such as WooCommerce for e-commerce, Cookiebot for privacy compliance, and Google Tag Manager for analytics. The site is hosted with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations, making it a reliable and credible digital presence for WWF Suomi.

Q

Quorum

govpredict.com

63

Quorum is a technology company specializing in AI-powered public affairs software designed to help organizations map, track, and influence policy landscapes at federal, state, local, and international levels. Their platform offers comprehensive legislative tracking, grassroots advocacy tools, stakeholder engagement, PAC management, and AI-driven policy analysis. Positioned as a leading SaaS provider in the government affairs and public policy sector, Quorum serves public affairs professionals and advocacy groups with a unified, data-driven approach. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Marketo, Osano for consent management, and various analytics and marketing tools. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates reputable third-party services. However, explicit security headers and incident response contacts are not publicly evident, and no vulnerability disclosure policy is found. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content indicate a legitimate and professionally maintained business. Overall, Quorum's website reflects a high level of professionalism, security awareness, and compliance with privacy regulations, making it a trustworthy platform for its target audience.

H

Hawaii Tourism Authority

gohawaii.com

63

The website www.gohawaii.com serves as the official tourism portal for the Hawaiian Islands, managed by the Hawaii Tourism Authority. It provides comprehensive travel information, cultural insights, and vacation planning resources targeting tourists and travelers interested in Hawaii. The site is well-branded, multilingual, and offers detailed content on islands, experiences, culture, and planning. Technically, it is built on Drupal 10 CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, TikTok Analytics, and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, while HTTPS is implied and no critical vulnerabilities are evident, the absence of explicit security headers and privacy policies suggests room for improvement. WHOIS data is unavailable, likely due to privacy or registry policies, but the website's government affiliation and content quality strongly indicate legitimacy. Overall, the site is professional, trustworthy, and authoritative in its domain.

I

International Volcanic Health Hazard Network (IVHHN)

ivhhn.org

58

The International Volcanic Health Hazard Network (IVHHN) is a specialized academic and public health organization focused on researching and disseminating information about volcanic health hazards. Affiliated with the University of Cambridge and recognized as an IAVCEI Commission, IVHHN provides scientific protocols, public information resources, a comprehensive academic library, and crisis management briefings. The website serves researchers, public health officials, and the general public interested in volcanic hazards. Technically, the site is built on Drupal 8 with Bootstrap and uses Cloudflare for DNS and hosting services. It integrates Google Analytics with IP anonymization and Google Translate for multilingual support. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Business credibility is high given the academic affiliation and long domain age. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security policies.

S

State of Hawaii, Department of Health

hawaiicovid19.com

62

The website is an official government resource provided by the State of Hawaii Department of Health, specifically the Disease Outbreak Control Division. It offers comprehensive information on respiratory viruses including COVID-19, influenza, RSV, and others, targeting the general public, healthcare providers, and vulnerable populations. The site serves as a trusted source for disease reporting, prevention guidance, and public health updates in Hawaii. Technically, the site is built on WordPress using the Divi theme, incorporates modern web technologies such as jQuery and Google Tag Manager, and embeds Power BI dashboards for live data visualization. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though some security headers are missing and no explicit cookie consent mechanism was detected. WHOIS data is minimal and privacy protected, typical for government domains, but the .gov TLD and consistent authoritative content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving an essential public health function.

S

State of Hawaiʻi

ehawaii.gov

57

The website portal.ehawaii.gov serves as the official digital gateway for the State of Hawaiʻi, providing comprehensive resources and services for government entities, residents, businesses, and visitors. It functions as a centralized platform offering access to government departments, online services such as business registration and driver records, news updates, and visitor information. The site is well-positioned as an authoritative source for state-related information and services, reflecting a large government entity with a broad target audience. From a technical perspective, the site employs modern web technologies including Google Analytics for tracking, Freshchat for user support, and Siteimprove Analytics for performance monitoring. The design is professional, mobile-optimized, and accessible, with clear navigation and consistent branding. However, no explicit CMS or hosting provider details are discernible from the source. Security-wise, the site enforces HTTPS and uses secure form submissions, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a privacy policy and terms of use, but no cookie consent mechanism or GDPR-specific indicators were found. WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces domain trustworthiness, though the site content and external references strongly support legitimacy. Overall, the site demonstrates a strong security posture and professional digital presence appropriate for a government portal, with recommendations to enhance security headers, privacy compliance, and incident response transparency to further strengthen trust and compliance.

U

Utah 211

211utah.org

62

Utah 211 is a well-established non-profit organization that serves as the primary resource network connecting Utah residents with vital health and human services. Supported by United Ways of Utah, it offers free and confidential assistance through multiple channels including phone, chat, text, and email. The website provides comprehensive resource search capabilities, community data insights via 211 Counts, and partnership opportunities for providers and caseworkers. The organization holds a strong market position as the leading state resource network in Utah, targeting individuals seeking social support services. Technically, the website is built on WordPress using the Bricks theme and leverages modern SEO and translation plugins. Hosting is provided by Bluehost with DNS managed via Cloudflare. The site is mobile optimized and performs moderately well, with good SEO practices and accessibility features. The use of structured data enhances search engine understanding. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. No critical vulnerabilities or exposed sensitive data were detected. The absence of DNSSEC and security headers like CSP or HSTS are noted gaps. Privacy compliance is partial, with a privacy policy present but no cookie consent banner or explicit GDPR compliance indicators. Contact information is clearly provided, enhancing trust. Overall, Utah 211 presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security hardening and privacy compliance would further strengthen its posture and user trust.

V

Visit Utah

visitutah.com

66

Visit Utah is the official state tourism website providing comprehensive travel and visitor information for Utah. It offers detailed guides, event listings, and trip planning resources targeting tourists interested in Utah's attractions, national parks, and outdoor activities. The site is well-branded and positioned as an authoritative source backed by the State of Utah. Technically, the website employs a modern tech stack including Kentico CMS, Google Analytics, Azure Application Insights, and various marketing and tracking tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protections, which slightly impacts trust but is common for government-affiliated sites. Overall, the site is professional, trustworthy, and safe for general audiences.

F

FIN (Vereniging van Fondsen in Nederland)

fondseninnederland.nl

50

FIN (Vereniging van Fondsen in Nederland) is a Dutch non-profit association representing over 365 philanthropic funds and foundations dedicated to societal improvement. The organization provides advocacy, quality enhancement, knowledge exchange, and governance standards to its members. The website reflects a professional and consistent brand presence targeting philanthropic organizations and stakeholders in the Netherlands. Technically, the site is built on a Laravel framework with Livewire components, uses modern web technologies, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, DNSSEC, CSRF protections, and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its business purpose.

D

DOEN Participaties B.V.

doenventures.com

67

DOEN Ventures operates as the impact-first investment arm of the DOEN Foundation, focusing on sustainable and social startups that contribute positively to society. The company provides convertible loans and equity investments primarily in early-stage ventures within sectors such as sustainable consumer products, circular business models, and the blue economy. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern technologies and SEO optimizations. Privacy and cookie policies are clearly stated and GDPR compliant, with user consent mechanisms in place. Security posture is solid with HTTPS enabled and domain protections, though some enhancements like DNSSEC and security headers could improve resilience. The domain WHOIS data shows an unusual future creation date, likely a data anomaly, but overall domain registration details align with a legitimate entity. Contact is primarily via a support page with a contact form, and social media presence is established on LinkedIn. Overall, the website and business demonstrate a mature digital footprint with a strong focus on impact investing and sustainability.

The website is a secure authentication portal for the National Association of Realtors, leveraging Auth0's OAuth2-based authentication platform. It serves as a login gateway for real estate professionals to access member services. The technical infrastructure is modern, utilizing industry-standard security protocols such as OAuth2 with PKCE and HTTPS encryption. Multiple third-party analytics and marketing tools are integrated, indicating a mature digital marketing approach but with limited visible privacy compliance on this page. Security posture is strong in terms of authentication mechanisms but lacks explicit security headers and privacy disclosures. Overall, the site is functional and trustworthy for its purpose but could improve transparency and compliance aspects.

M

mmsi

mmsi2.com

58

The website gommsi.com represents a business named 'mmsi' offering a membership and accounting system tailored specifically for REALTOR associations and MLSs. The business appears to operate a software-as-a-service model focusing on membership management and accounting solutions. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard Wix scripts, indicating a moderate level of technical infrastructure and digital maturity. The website design is professional and mobile-optimized, but lacks comprehensive privacy, cookie, and contact information, which impacts user trust and compliance. Security posture shows some good practices such as HTTPS usage and script hardening, but lacks explicit security headers and incident response contacts. The domain WHOIS data is missing or unavailable, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional and business-focused but requires improvements in privacy compliance, security transparency, and domain registration clarity.

A

Accrisoft Corporation

accrisoft.com

66

Accrisoft Corporation operates a professional SaaS platform named Accrisoft Freedom, targeting non-profit organizations such as chambers of commerce, REALTOR associations, and community centers. The company provides a comprehensive suite of cloud-based software solutions including website design, membership management, event registration, finance, sales, and marketing applications. Their market position is specialized and focused on delivering industry-specific expertise to help organizations grow and thrive. Technically, the website employs a mature technology stack with jQuery, Flickity, Fancybox, Google reCAPTCHA, Hotjar, HubSpot, and other modern tools. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Analytics and marketing tools are extensively used, indicating a data-driven approach to customer engagement. From a security perspective, the site enforces HTTPS and uses bot protection and accessibility compliance tools. However, it lacks visible HTTP security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance and content of the website. Overall, Accrisoft presents a credible and professional online presence with strong business and technical foundations. Addressing WHOIS transparency and enhancing security disclosures would further strengthen their trust profile and compliance posture.

A

Arizona Commerce Authority

azcommerce.com

65

The Arizona Commerce Authority website serves as the official digital presence of the state-level economic development agency focused on supporting business recruitment, growth, and creation within Arizona. The site highlights key industries such as aerospace, technology, manufacturing, healthcare, and energy, providing resources like industry databases, asset maps, and newsletters to engage stakeholders. The business model centers on government-driven economic development with a broad target audience including businesses and investors interested in Arizona's economic landscape. Technically, the site employs a mature technology stack including AngularJS, Bootstrap, Umbraco CMS, and integrates multiple third-party analytics and marketing tools. The website is mobile optimized with good navigation and content quality, though accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks explicit security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website's branding and contact information strongly suggest an official entity. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.