Security Directory

B

Brunch

brunch.work

60

Brunch is a Montreal-based creative agency specializing in brand identity, product design, web design and development, content strategy, and operational consulting. The company positions itself as an extension of client teams, focusing on user-centric digital solutions and operational excellence. Their market presence is regional with a focus on Montreal and surrounding areas, targeting businesses seeking creative and operational consulting services. The website reflects a professional and modern digital presence built on Next.js and hosted on Vercel, indicating a mature technical infrastructure with good performance and mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. The absence of WHOIS data limits domain trust assessment, but the professional presentation and social media presence support moderate legitimacy. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and security transparency.

S

ShowClix

showclix.com

54

ShowClix is a full-service event ticketing platform offering online ticket sales, box office solutions, and on-site event operations. It targets event organizers and ticket buyers, providing a comprehensive suite of services including marketing and analytics tools. The company is a subsidiary of Leap Event Technology, indicating a strong market position in the event technology sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, Twitter tracking, and Google Maps API for enhanced user interaction and marketing capabilities. The use of Bootstrap and jQuery indicates a standard responsive design approach, with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks visible security headers and explicit incident response contacts. The absence of a cookie consent banner despite extensive tracking scripts suggests a gap in privacy compliance. No vulnerabilities or exposed sensitive data were detected, and the site maintains a good security posture overall. Overall, ShowClix presents a trustworthy and professional online presence with minor areas for improvement in privacy compliance and security transparency. The lack of WHOIS data is a concern but is mitigated by the strong business indicators and parent company association.

The website at psvm.co currently presents no accessible content, consisting solely of an empty HTML structure. This lack of content prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered through a privacy protection service, Domains By Proxy, LLC, and is locked against transfer or modification, which is common but reduces transparency. Hosting appears to be via Amazon AWS based on DNS records. No metadata, scripts, or contact information are available, indicating the site may be inactive or under development. From a technical perspective, the absence of content and metadata means no technologies, frameworks, or CMS can be identified. No security headers or SSL information is available, and the site does not present any privacy or cookie policies, nor terms of service. This results in a very low digital maturity and security posture. Security evaluation is limited due to lack of content, but the absence of HTTPS and security headers, combined with privacy-protected WHOIS data and no visible business information, suggests a low trust level. There are no indications of vulnerabilities or malicious content, but the site’s lack of transparency and content is a risk factor. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include establishing a secure, content-rich website with clear business information, implementing HTTPS and security best practices, and publishing privacy and cookie policies to improve trust and compliance.

I

Ipregistry

ipregistry.co

73

Ipregistry is a technology company specializing in IP address data services, including geolocation and threat intelligence. Established in 2019 and based in France, it serves over 23,000 organizations globally, offering scalable API solutions for IP data enrichment, fraud prevention, and cybersecurity. The company positions itself as a reliable and accurate provider in the IP data market, supported by a strong customer base and professional branding. Technically, Ipregistry leverages modern web technologies, Cloudflare CDN for hosting and security, and provides a fast, mobile-optimized user experience. The website integrates JSON-LD structured data, uses Crisp chat for customer engagement, and employs Cloudflare analytics for performance monitoring. The technical infrastructure reflects a mature and well-maintained digital presence. From a security perspective, the site enforces HTTPS, uses Cloudflare protections, and implements secure input validation. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, Ipregistry presents a low-risk profile with a professional, trustworthy online presence. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and adding a security.txt file to enhance vulnerability disclosure transparency.

I

Immediate Media Company Limited

buysubscriptions.com

68

Buysubscriptions.com is an e-commerce platform operated by Immediate Media Company Limited, specializing in UK magazine subscriptions including official BBC magazines and other popular titles. The website offers a variety of subscription options, back issues, and gift subscriptions with worldwide shipping and secure payment. The business is positioned as a trusted official store with strong brand association and customer trust indicators such as money-back guarantees and Feefo awards. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, Microsoft Application Insights, and multiple marketing and optimization tools. The site is mobile responsive with good SEO and accessibility features, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with consent management implemented. Security posture is solid with HTTPS enforced and secure payment gateways, but lacks explicit security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is missing, which slightly reduces trustworthiness, but the overall business credibility and content quality remain high. Overall, the website is professional, secure, and compliant, serving a clear business purpose with a good user experience. Verification of domain registration status is recommended to fully confirm legitimacy.

9

⛧-440729 [sophie raven]

999eagle.moe

68

The website https://999eagle.moe/ represents a personal and technical online presence for unit ⛧-440729, known by callsigns [sophie] and [raven]. This entity describes itself as a synthetic mind existing within a human-shaped biological chassis, focusing on software, cybersecurity, and open source contributions. The site serves as a hub for sharing technical musings, hosting infrastructure, and community engagement within the fediverse and open source ecosystems. The market position is niche, targeting technically inclined users and contributors. Technically, the site is built with standard HTML5 and CSS, uses HTTPS with a good SSL configuration, and is hosted on infrastructure indicated by the nameservers (Desec.io). The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. No CMS or advanced frameworks are detected, indicating a lightweight and manually maintained site. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. There is no published security policy, vulnerability disclosure, or incident response information, which limits transparency and readiness. Privacy and cookie policies are absent, impacting compliance with GDPR and related regulations. No tracking or advertising technologies are present, reflecting a privacy-conscious approach. Overall, the website is safe, professional, and trustworthy within its niche but could improve compliance and security posture by adding formal policies and security disclosures. The domain registration is stable and privacy-protected, consistent with the personal nature of the site. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance trust and compliance.

N

NamiComi - Read Comics and Manga Online

namicomi.com

72

NamiComi is an online platform dedicated to providing users with access to comics and manga for reading online. The website appears to be a small-scale content platform launched in 2021, targeting general audiences interested in digital comics and manga. The site uses modern web technologies including HTML5, CSS3 with Tailwind CSS, and custom fonts such as Poppins and Roboto. Hosting and DNS services are provided by Cloudflare, ensuring reliable uptime and HTTPS security. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. No contact information or incident response details are present, which may hinder user support and security reporting. The security posture is moderate with HTTPS enabled and domain transfer protection, but missing security headers and policies reduce overall security maturity. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security policies, and contact transparency to enhance trust and regulatory adherence.

N

Network Data Center Host, Inc.

ndchost.com

59

Network Data Center Host, Inc. operates a professional web hosting service offering a variety of hosting solutions including shared website hosting, WordPress hosting, cloud servers, dedicated servers, cPanel licensing, and SSL certificates. The company emphasizes fast, stable, and easy-to-use services with 24x7 support, targeting individuals and businesses seeking reliable hosting since 2002. Their market position is that of an established small hosting provider with a consistent brand and multiple social media channels to engage customers. Technically, the website uses modern tracking and live chat technologies such as Google Analytics, Google Tag Manager, and Tawk.to, with good mobile optimization and SEO practices. However, the absence of CMS detection and hosting provider details limits deeper infrastructure insights. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response policies are published. The lack of WHOIS data is a notable concern, reducing trustworthiness despite the professional presentation. Overall, the website is accessible, safe, and business-focused but would benefit from improved transparency and security practices.

D

DokuWiki Community

dokuwiki.org

56

DokuWiki is an established open source wiki software project founded in 2004, offering a simple, database-free wiki solution favored for its clean syntax and ease of use. It targets a broad audience including enterprises, developers, and collaborative teams, providing extensive plugin support and multi-language capabilities. The website reflects a mature community-driven project with comprehensive documentation and active user engagement channels. Technically, the site is built on PHP with jQuery libraries, uses HTTPS with anonymized Google Analytics tracking, and demonstrates good performance and mobile optimization. Security posture is solid with secure forms and no exposed sensitive data, though it lacks some advanced security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, consistent with an open source community project.

T

TeamForge.net

teamforge.net

47

TeamForge.net is a niche open source hosting platform established in 2005, providing free hosting services primarily for selected open source projects such as WinSCP and SiteBar. The website serves a specialized audience of open source developers and users seeking alternatives to larger platforms like SourceForge. The business model relies on donations and community support, with a small but consistent presence in the open source ecosystem. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking, hosted behind Cloudflare. The site performance and mobile optimization are basic but functional, with no advanced frameworks or CMS detected. Security posture is moderate; HTTPS is enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and best practices. Overall, the domain is long-established and trustworthy, with no suspicious WHOIS data or blocking mechanisms detected.

C

🌩

cloudwithlightning.net

45

The website cloudwithlightning.net appears to be a small, personal or creative project focused on interactive web content such as simple games and physics simulations. The site has minimal business information and does not disclose a company name or legal entity. The domain is registered with NameCheap since 2018 and is consistent with a small-scale personal site. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, but lacks advanced frameworks or CMS platforms. Performance is moderate with basic mobile optimization and poor accessibility features. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. There are no privacy or cookie policies, and contact information is limited to a contact page link without direct emails or phone numbers. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is safe with no adult or explicit content detected, but it lacks professional business and security practices.

Silvercruiser.vip is a personal creative website operated by an individual known as Kato. The site serves as a portfolio and hub for creative content including music, writing, and personal updates. It is a small-scale, niche site without commercial business operations or extensive market positioning. The website is hosted on DigitalOcean and registered through NameCheap with privacy protection, consistent with a personal project. Technically, the site is built with basic HTML and CSS, lacks advanced frameworks or CMS, and has moderate performance and mobile optimization. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS status was explicitly provided. The site does not employ analytics or tracking technologies, reflecting a low user tracking footprint. Overall, the site is safe for general audiences and does not contain adult or explicit content.

N

Neocities

neocities.org

64

Neocities is a technology platform founded in 2013 that offers free static web hosting and tools to empower individuals to create and share personal websites. It positions itself as a community-driven alternative to large cloud hosting providers by focusing on creativity, zero advertising, and open source transparency. The platform supports over 1.1 million websites and is funded by supporter accounts and donations, emphasizing privacy and user control. Technically, Neocities uses a modern but simple tech stack including HTML5, CSS, JavaScript, and jQuery, with hCaptcha integration for bot protection. The site is well optimized for performance and mobile use, with fast loading times and good SEO practices. Security posture is solid with HTTPS enforced and client transfer prohibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration is privacy protected but consistent with the business age and nature, indicating legitimacy.

The website https://scoliwings.com/ serves as a personal portfolio for animator Lymon Thorn, showcasing animated shorts and a demo reel. The site targets a general audience interested in animation and creative media. It operates as a small-scale personal business model focused on creative display rather than commercial transactions. The market position is niche, catering to animation enthusiasts or potential collaborators. Technically, the website is built with standard HTML5, CSS3, and JavaScript, embedding Vimeo videos for media content. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Hosting and DNS are managed via Porkbun LLC, with no CMS or advanced frameworks detected. Performance is moderate with no evident technical debt but lacks advanced modern web technologies. From a security perspective, the site uses HTTPS as indicated by the og:url but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is provided, which limits compliance and trust. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is safe with no adult or explicit content, but it lacks formal privacy and security policies. The domain registration is consistent and appropriate for the business type. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies, adding security headers, and providing contact information to improve trust and compliance.

The website roxie.nyc serves as a personal portfolio and creative showcase for an individual named Roxie Mika. It features links to social media profiles, galleries for original characters and photography, and a minimalistic design focused on personal branding. The site is hosted on DigitalOcean and uses HTTPS, indicating a basic but secure technical infrastructure. However, it lacks common compliance and security features such as privacy policies, cookie consent mechanisms, and security headers. No contact information or business details are provided, which limits its business credibility and user trust. The content is safe for general audiences and does not contain any adult or explicit material.

I

InvisibleUp

invisibleup.com

39

InvisibleUp is a small-scale personal or creative website established in 2019, offering articles, doodles, projects, and curated links. The site brands itself as 'your friendly internet ghost,' indicating a focus on privacy or anonymity themes, though no explicit privacy policies are present. The website is hosted on DigitalOcean and uses modern web technologies including SVG graphics and responsive design for mobile users. The technical infrastructure is basic but functional, with no detected CMS or advanced frameworks. Security posture is moderate; the domain is registered with a reputable registrar and protected against unauthorized transfers, but lacks DNSSEC and security headers. No privacy or cookie policies are found, and contact information is limited to a generic Outlook email address. Overall, the site is trustworthy but could improve compliance and security practices.

N

Nintendo News

nintendonews.com

62

NintendoNews.com is a specialized media website focused on aggregating and publishing the latest news related to Nintendo gaming platforms such as the Switch, 3DS, and eShop. The site curates content from multiple reputable external sources, providing timely updates and featured deals to its audience of Nintendo enthusiasts. Founded in 2013, the website has established itself as a niche news aggregator with consistent branding and good content quality. The business model centers on content aggregation and advertising, supported by newsletter subscriptions and affiliate deals. Technically, the site uses a custom CMS and relies on jQuery and Google Analytics for functionality and tracking. Hosting and DNS services are provided by Cloudflare, ensuring reliable uptime and basic security. The website is mobile-optimized with good SEO practices but lacks advanced accessibility features.

H

Hookshot Media Ltd

purexbox.com

69

Pure Xbox is a well-established media website specializing in Xbox Series X|S news, reviews, and features, operated by Hookshot Media Ltd, a UK-based company founded in 2010. The site targets Xbox gamers and enthusiasts, offering comprehensive content including news, game reviews, guides, and community forums. It holds a strong market position as a leading Xbox-focused gaming news outlet. Technically, the website employs a modern tech stack including PHP, JavaScript, jQuery, Prebid.js for advertising, and Google Tag Manager for analytics, supported by a proprietary CMS (dgpCMS). The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, the site uses HTTPS with strong SSL configuration and security headers, and implements GDPR-compliant consent management. However, it lacks explicit vulnerability disclosure and incident response policies. The WHOIS data is missing or unavailable, which is unusual but the site content and business information indicate legitimacy. Overall, Pure Xbox presents a professional, trustworthy, and content-rich platform with room for improvement in transparency around security policies.

H

Hookshot Media Ltd

pushsquare.com

69

Push Square is a well-established online media platform specializing in PlayStation news, reviews, and features, targeting PlayStation gamers and enthusiasts globally. Owned by Hookshot Media Ltd, the site maintains a strong market position as a leading PlayStation-focused news source, offering a wide range of content including news articles, game reviews, guides, and community forums. The business model primarily relies on advertising revenue, supported by multiple ad networks and tracking technologies with GDPR-compliant consent mechanisms. Technically, the website employs a modern tech stack including PHP, JavaScript, and Prebid.js for programmatic advertising, and uses dgpCMS as its content management system. The site is optimized for both desktop and mobile platforms, with good SEO and accessibility practices in place. Security posture is robust with HTTPS enforced, multiple security headers, and privacy policies clearly published, although the absence of WHOIS data reduces transparency. Overall, the website presents a professional, trustworthy, and content-rich experience for its audience.

Computer Tyme is a small, niche web hosting provider specializing in free speech hosting and advanced spam and virus filtering services. The company targets politically sensitive and consumer rights websites, emphasizing legal expertise and a commitment to free expression. Their business model includes various email hosting options and front-end spam filtering solutions. Technically, the website and services rely on a traditional Linux-based stack with Apache, MySQL, PHP4, and open-source spam and virus filtering tools. However, the website lacks modern security features such as HTTPS and security headers, and it does not provide privacy or cookie policies, which impacts compliance and trust. The WHOIS data for the domain is missing, raising concerns about domain registration status despite the website's claims of long operational history. Overall, the security posture is weak, and the site would benefit from modernization and improved compliance documentation.

pkgsrc.pub is a small technology-focused website operated by SkyLime, providing services related to the pkgsrc open source package management system. The site offers mirrors of binary packages for multiple operating systems, a searchable index of all pkgsrc packages, and a work-in-progress search over distfiles. The business targets developers and system administrators who rely on pkgsrc for software distribution. The domain has been registered since 2014, indicating a mature presence in its niche. Technically, the website is minimalistic, built with basic HTML and CSS, and hosted with DNS services provided by core.io domains. There is no evidence of a CMS or advanced frameworks. The site lacks modern security features such as DNSSEC and security headers, and no SSL/TLS configuration details were provided. The website is moderately optimized for mobile and accessibility but lacks advanced SEO and analytics tools. From a security perspective, the site does not present any immediate red flags such as malware or phishing indicators. However, the absence of privacy policies, cookie consent mechanisms, and incident response information indicates a low maturity in compliance and security posture. The domain registration is consistent and legitimate, but improvements in DNS security and published policies are recommended. Overall, pkgsrc.pub is a niche technical service with moderate trustworthiness and basic web presence. Strategic improvements in security, privacy compliance, and transparency would enhance its credibility and user trust.

NetBSD.se is a well-established Swedish community website dedicated to the NetBSD operating system, providing extensive technical guides, tutorials, news, and community engagement resources. Founded in 2003, it serves developers, system administrators, and enthusiasts interested in NetBSD's portability, security, and diverse applications. The website demonstrates a high level of content quality, professional design, and clear navigation, making it a valuable resource for its target audience. Technically, the site employs modern web standards including HTML5, CSS3, and JavaScript, with syntax highlighting via Prism.js and iconography from Font Awesome. It is hosted behind Cloudflare DNS services, indicating reliable infrastructure. The site is mobile-optimized and performs well, with no detected CMS or heavy frameworks, reflecting a lightweight and efficient implementation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. The domain registration is consistent with the website's history and purpose, enhancing trustworthiness. Overall, NetBSD.se is a credible, professional, and secure community platform with excellent content and user experience. Strategic enhancements in privacy compliance and security headers would further strengthen its posture and compliance with modern standards.

G

Generations Beyond

generationsbeyond.com

64

Generations Beyond is a specialized marketing and web design agency focused on supporting challenger brands to achieve leadership positions. The company offers proactive web design, management, and marketing strategy services, positioning itself as a no-homework agency that handles technical and strategic tasks behind the scenes. The business is small-sized, US-based, and founded in 2000, with a mature domain presence and consistent branding. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Tag Manager and LinkedIn Insight. Security posture is adequate with HTTPS enabled and regular updates mentioned, but lacks explicit security headers and DNSSEC. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy, but could improve in privacy transparency and security best practices.

E

Ecole Supérieure Multinationale des Télécommunications

esmt.sn

47

ESMT (Ecole Supérieure Multinationale des Télécommunications) is a regional educational institution based in Senegal, specializing in telecommunications and related fields. It offers a variety of educational programs including initial training cycles, continuing education, certifications such as AWS Cloud Foundations, and masters programs both online and in evening formats. The institution is recognized by regional bodies such as CAMES and maintains partnerships with several organizations, enhancing its market position in education and telecommunications sectors. Technically, the website is built on Drupal CMS with Bootstrap and jQuery frameworks, integrating Google Maps and Google Analytics for user tracking and location services. While the site is mobile responsive and well-structured, it uses an outdated jQuery version and lacks advanced security headers, which could pose risks. Performance is moderate with good content quality and navigation. Security posture is basic with HTTPS enabled and IP anonymization in analytics, but missing DNSSEC and security headers reduce the overall security score. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and privacy compliance to improve user trust and regulatory adherence.

U

USSEIN - Université du Sine Saloum El-Hâdj Ibrahima NIASS

ussein.sn

31

The website www.ussein.sn represents the Union des Syndicats des Enseignants du Sénégal (USSEIN), a teachers' union in Senegal focused on labor rights and education advocacy. The site targets education professionals within Senegal and serves as a platform for union-related information and activities. The market position is that of an important national union, though the website content and design are basic and primarily in French. Technically, the website is built on WordPress with common plugins such as LayerSlider and uses Google Fonts and Google Maps API. It employs Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS but does not implement advanced security headers or provide security policies or incident response information. No vulnerability disclosure or data protection officer details are found. The security posture is moderate but could be improved with better headers and formal policies. Overall, the website is safe for general audiences, with no adult or explicit content detected. However, the absence of privacy and cookie policies and limited contact information reduce privacy compliance and business credibility scores. Strategic improvements in security and compliance documentation are recommended.

D

Dakar Institute of Technology

dit.sn

50

Dakar Institute of Technology (DIT) is a specialized educational institution based in Senegal, focusing on Artificial Intelligence, Big Data, and digital finance education. Established in 2019, it holds government recognition and accreditation from ANAQ-SUP, positioning itself as a pioneering AI engineering school in West Africa. The institution offers a range of degree programs, certifications, and professional training designed to prepare students and professionals for the evolving technology market. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting students and professionals interested in AI and Big Data.

X

XCG Consulting

xcg-consulting.fr

50

XCG Consulting, a subsidiary brand under Orbeet, specializes in ERP software integration and consulting services, with a strong focus on the Odoo platform. Founded in 2008, the company offers tailored software solutions to improve business processes for enterprises seeking comprehensive management systems. The website presents a professional and clear depiction of their services, targeting businesses in France and potentially broader markets. Technically, the site employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices, though some security enhancements are recommended. Security posture is moderate, with HTTPS enforced but lacking DNSSEC and explicit security headers. Privacy compliance is basic, with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site is trustworthy and credible, with transparent WHOIS data aligning with the business entity. Strategic improvements in security and privacy policies would enhance the company's digital maturity and trustworthiness.

I

Institut Pasteur Dakar

institutpasteurdakar.sn

51

Institut Pasteur Dakar (IPD) is a well-established healthcare and research institution focused on accelerating equitable, sustainable, and affordable access to healthcare in Senegal, Africa, and globally. The website reflects a strong market position with over 100 years of history, offering key services such as vaccine production, sentinel surveillance, reference laboratories including WHO collaborations, and academic programs. The target audience includes healthcare professionals, researchers, and public health stakeholders. The business model is non-profit, emphasizing public health impact and research excellence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with integration of Google Analytics via Google Site Kit. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and transparency. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security policy disclosures, and contact information transparency to improve user trust and regulatory adherence.

W

Western Washington University

wwuvikings.com

63

Western Washington University Athletics operates an official website serving as the primary digital platform for university sports teams, schedules, news, and ticketing. The site targets students, athletes, and sports fans, providing comprehensive coverage of NCAA Division II athletics. The business model centers on supporting university athletics through information dissemination and fan engagement. Technically, the site leverages modern JavaScript frameworks such as Knockout.js and RequireJS, hosted on AWS Cloudfront with DNS managed by Rackspace, ensuring a robust and scalable infrastructure. The use of Google Tag Manager and analytics services indicates a mature approach to user engagement and data collection. Security posture is solid with HTTPS enforced and domain-level protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is addressed with linked policies and consent mechanisms, though terms of service and incident response details are absent. Overall, the website is professional, trustworthy, and well-aligned with its educational and athletic mission.

U

U.S. Capitol Visitor Center

visitthecapitol.gov

68

The U.S. Capitol Visitor Center website serves as the official digital portal for visitor information, educational programs, and event scheduling related to the U.S. Capitol. It targets a broad audience including tourists, educators, and the general public, providing comprehensive resources and services such as tour bookings and a gift shop. The site is positioned as a key government resource with a strong brand presence and consistent messaging. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Tag Manager and Google Analytics for performance monitoring and user insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs standard best practices, though it lacks some advanced security headers and a published security policy or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low risk profile with high trustworthiness, supported by its .gov domain and official government content. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response information, and maintaining transparency in data protection practices.

P

PubNation - Enterprise-Scale Ad Management Solutions by Mediavine

pubnation.com

58

PubNation is a specialized ad management platform targeting elite digital content creators and publishers, offering enterprise-scale monetization strategies and white-labeled technology. Founded by Mediavine, a recognized leader in ad tech since 2013, PubNation positions itself as a premium partner for top-earning publishers. The website reflects a professional and consistent brand image with clear messaging about its services and target audience. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA, ConsentManager for GDPR compliance, and HubSpot for customer engagement, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent-based tracking, though explicit security headers and published security policies are absent, representing areas for improvement. The absence of WHOIS registration data reduces domain trust slightly, but the strong brand association with Mediavine mitigates this concern. Overall, the site is well-structured, compliant, and trustworthy for its business purpose.

S

Sellers.guide

sellers.guide

67

Sellers.guide is a specialized technology platform focused on enhancing transparency and management of ads.txt and sellers.json files within the digital advertising ecosystem. It offers automated tools such as domain analysis, a clean-up wizard, and validation services to help publishers and buyers ensure authenticity and optimize their ad inventory. The platform is positioned as a niche player under the parent company Primis, targeting publishers and programmatic advertising stakeholders. Technically, the website leverages modern JavaScript frameworks (AngularJS), integrates multiple analytics and marketing tools, and is hosted on AWS infrastructure. The site demonstrates good SEO and mobile optimization practices, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses domain status protections but lacks DNSSEC and explicit security headers like CSP. Privacy compliance is well addressed with clear cookie and privacy policies, including consent mechanisms. Overall, the site is professional, trustworthy, and business-focused with no adult or questionable content detected.

C

Canadian Football League

cfl.ca

62

The Canadian Football League's official website, CFL.ca, serves as the primary digital platform for delivering news, opinions, video highlights, schedules, scores, and statistics related to Canadian football. Positioned as the authoritative source for CFL content, the site targets sports fans and media consumers interested in Canadian football. The business model centers on media content delivery and fan engagement, leveraging digital channels to maintain and grow its audience. Technically, the website is built on WordPress CMS and incorporates a modern technology stack including jQuery, Materialize CSS, Google Tag Manager, and various analytics and advertising scripts. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a cookie consent mechanism compliant with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of an explicit privacy policy and terms of service pages, as well as lack of visible contact information for security or business inquiries, represent areas for improvement. Overall, the website is trustworthy and professional, with strong branding consistency and relevant content. The missing WHOIS data suggests privacy protection, which is reasonable for a high-profile sports league domain. Strategic recommendations include publishing clear privacy and terms policies, enhancing accessibility, and providing explicit contact channels to strengthen compliance and user trust.

The website www.ticketmaster.ca is a regional domain for Ticketmaster, a globally recognized ticket sales and distribution company. The accessible content is blocked by a security challenge page designed to detect bots and unusual browsing activity, which prevents full content and metadata analysis. The site employs advanced bot detection technologies such as Google reCAPTCHA Enterprise and multiple Google Tag Manager containers, indicating a mature technical infrastructure focused on security and user verification. However, the lack of accessible content, privacy policies, and WHOIS data limits the ability to fully assess the website's compliance and trustworthiness. Overall, the site appears to be a legitimate enterprise-level e-commerce platform for ticket sales, but the security challenge restricts detailed evaluation.

T

Trialfire

trialfire.com

60

Trialfire operates a web-based measurement platform accessible via a login portal at app.trialfire.com. The platform appears to target business users requiring analytics or measurement tools, delivered as a SaaS solution. The website uses AngularJS and custom JavaScript for functionality and tracking. The login page is minimalistic, focusing on user authentication without additional content or policies visible. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not indicate risk. Overall, the site is functional but could improve transparency and compliance disclosures.

The domain sc07.group is registered to Private by Design, LLC, a US-based entity established in 2021. The website currently returns a 502 Bad Gateway error, indicating server-side issues preventing access to any content. Due to the lack of accessible website content, no business description, services, or market positioning can be determined. The technical infrastructure appears to use nginx as the web server and is hosted on Highway Host as indicated by the nameservers. No metadata, scripts, or security headers are available for analysis. The security posture cannot be fully assessed but the absence of DNSSEC and security headers suggests room for improvement. The domain registration is consistent and not privacy protected, which supports legitimacy, but the lack of website content severely limits trust and credibility. Overall, the site is currently non-functional and requires immediate technical remediation to restore service and enable further analysis.

N

NCSFest

ncsfest.com

35

NCSFest is an online festival celebrating comics and cartoon art worldwide, with a focus on the 2020 virtual event. The website presents basic event information but lacks detailed business or organizational data. The technical infrastructure includes common web technologies such as WordPress CMS, Google Analytics, Google Tag Manager, and Font Awesome for icons. The site is accessible without WAF or security challenges, but it lacks comprehensive privacy, cookie, and security policies. No contact information or incident response details are provided, which limits trust and compliance assurances. The security posture is minimal with no detected security headers or advanced protections. Overall, the site serves as an informational event page with moderate technical implementation but requires improvements in privacy, security, and business transparency to enhance credibility and compliance.

N

National Cartoonists Society Foundation

cartoonistfoundation.org

47

The National Cartoonists Society Foundation is a small US-based non-profit organization dedicated to supporting cartoonists through charitable programs and scholarships. Established in 2005, it operates as the charitable arm of the National Cartoonists Society, providing educational opportunities and financial aid to students in the cartooning arts. The website reflects this mission with clear scholarship information, donation options, and educational content targeted at cartoonists and supporters. Technically, the website is built on WordPress and uses modern front-end technologies such as the Foundation CSS framework, jQuery, and Google reCAPTCHA v3 for form security. Hosting is provided by SiteGround, a reputable provider. The site is mobile-optimized with good navigation and design quality, although accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from spam. However, it lacks DNSSEC and important security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

R

Rattle Foundation

rattle.com

62

Rattle.com is the official website of Rattle Poetry, an independent poetry magazine published by the Rattle Foundation, a 501(c)3 non-profit organization. Established in 1995, it serves the poetry community by offering literary content, poetry contests, chapbook publications, workshops, and community engagement. The website targets poets, poetry readers, educators, and literary enthusiasts, positioning itself as a respected and long-standing publication in the poetry media sector. Technically, the website employs a modern tech stack including React and Next.js for the frontend, with WordPress as the backend CMS and WooCommerce for e-commerce functionalities. Hosting and DNS are managed via Vercel and Network Solutions respectively. The site is well-optimized for mobile devices, has good SEO practices, and delivers fast performance with a professional design and clear navigation. From a security perspective, the site uses HTTPS with a domain status that prevents unauthorized transfers, but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which are areas for improvement. The WHOIS data confirms the domain's legitimacy and long-term operation, consistent with the organization's claims. Overall, Rattle.com is a credible, professional, and content-rich website serving a niche literary audience. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

T

The New York Public Library

nypl.org

63

The New York Public Library (NYPL) is a large, well-established non-profit educational institution providing free access to books, research resources, educational programs, and cultural events primarily serving New Yorkers and the general public. The website reflects a mature digital presence with a modern tech stack including React, Next.js, and Chakra UI, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room to improve transparency by publishing a dedicated security policy and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Overall, the site demonstrates high professionalism, trustworthiness, and community engagement.

E

Emerson College

pshares.org

70

Ploughshares is a well-established literary journal operated under Emerson College, with a domain registered since 1998. The website serves literary readers, writers, and educators by publishing literary content and offering subscription services. Technically, the site is built on WordPress with popular plugins such as WooCommerce and Gravity Forms, and uses the Kadence theme, indicating a modern and maintainable infrastructure. The site employs HTTPS and integrates analytics tools like Google Analytics and Silktide, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure information. Overall, the website is professional and trustworthy but could improve transparency and compliance aspects.

S

Studio Luce | Artist Residency in El Paredon, Guatemala | Villa Rosa

studioluceguatemala.com

53

The website www.studioluceguatemala.com appears to be a small business site likely related to photography or a studio service based in Guatemala, built on the Wix platform. However, the site content is minimal with no clear business description, contact information, or policies, which limits its professional presentation and trustworthiness. Technically, the site uses modern web technologies provided by Wix and includes error monitoring via Sentry, but lacks important security headers and privacy compliance features. The domain WHOIS data is missing, indicating the domain may be unregistered, very new, or privacy-protected, which raises concerns about legitimacy. Overall, the site has a low security posture and poor privacy compliance, with limited business credibility.

C

Cascadia Poetics LAB

cascadiapoeticslab.org

48

Cascadia Poetics LAB is a small non-profit organization based in Seattle focused on poetry and place-based cultural activities in the Cascadia region. Their offerings include community events such as the Poetry Postcard Fest, a podcast series, online workshops, a poetry festival, and related publications. The organization targets poetry enthusiasts and regional community members, operating primarily as a cultural and educational non-profit entity. Technically, the website is built on WordPress using the Divi theme, hosted by InMotion Hosting. It integrates modern web technologies including Google Fonts, reCAPTCHA for form security, and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and employs reCAPTCHA to protect forms. However, it lacks DNSSEC, security headers like Content-Security-Policy, and a published security or vulnerability disclosure policy. The domain registration is privacy-protected but consistent with the organization's profile and age. Overall, the website is professionally presented and trustworthy for its niche audience but would benefit from enhanced privacy compliance and security practices to improve user trust and regulatory adherence.

I

Independent Español

independentespanol.com

62

Independent Español is an online Spanish-language news media outlet providing high-quality news content across various categories including politics, sports, entertainment, and health. The website targets Spanish-speaking audiences and appears to be a Spanish edition of The Independent, leveraging consistent branding and structured data to enhance SEO and user experience. The business model is typical of digital news media, relying on advertising and content delivery. Technically, the site uses modern web technologies such as React, Google Analytics, and a GDPR consent management platform, indicating a mature digital infrastructure. The site is mobile-optimized and accessible with good SEO practices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with cookie consent implemented but lacking a clear privacy policy and terms of service. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the site. Overall, the site is functional, professional, and trustworthy but would benefit from improved transparency and security documentation.

I

indy100

indy100.com

76

Indy100 is an online media and news platform focusing on breaking news, politics, viral content, and video news primarily sourced from YouTube and TikTok. The website targets a general audience interested in current events and trending topics. It operates as a digital media outlet with a content publishing business model, leveraging social media and video content to engage users. The site demonstrates a moderate level of digital maturity with a modern tech stack including JavaScript frameworks, Google Tag Manager, and advertising integrations such as Taboola and DoubleClick. From a security perspective, the website uses HTTPS and registers a service worker, indicating some modern security practices. However, there is a lack of visible security headers and no explicit privacy or cookie policies found in the content, which are critical for compliance and user trust. The WHOIS data is unavailable, raising concerns about domain registration transparency and legitimacy. The site extensively uses third-party advertising and tracking services, which increases the risk of privacy issues. Overall, Indy100 presents as a professional media website with good content quality and technical implementation but has gaps in privacy compliance and domain registration transparency. Strategic improvements in security headers, privacy policies, and domain registration disclosure are recommended to enhance trust and compliance.

D

DedicatedNOW

dedicatednow.com

77

DedicatedNOW is a well-established managed hosting provider with over two decades of experience, offering managed cloud servers, complex hosting, and reseller hosting services. The company targets businesses and resellers seeking reliable, high-performance hosting solutions backed by 24/7 award-winning support. Their market position is strengthened by multiple industry awards and a strong emphasis on customer satisfaction. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with a fast, mobile-optimized, and SEO-friendly design. Security posture is robust with HTTPS, managed firewalls, and free SSL certificates, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Afterlogic Corp.

afterlogic.works

50

Afterlogic.Works is a technology company specializing in reliable outsource and team augmentation services for web and mobile development projects. The company emphasizes its Eastern European developer base operating under US jurisdiction, positioning itself as a trustworthy tech partner for small to mid-size businesses, managed service providers, design agencies, and startups. Their key services include web and mobile development, outstaffing, and rescuing troubled projects, supported by client testimonials and industry badges that enhance their market credibility. Technically, the website leverages modern frameworks such as Vue.js, Nuxt.js, React, Flutter, and Node.js, indicating a mature and contemporary technology stack. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security posture.

K

KPN

overons.kpn

73

KPN is a leading telecommunications company in the Netherlands, providing comprehensive fixed and mobile network services. The company is recognized for its reliable infrastructure, innovation, sustainability efforts, and security focus. The website reflects a mature digital presence with modern technologies such as SvelteKit and integrates key marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, KPN's website demonstrates a professional, secure, and user-friendly platform aligned with its enterprise market position.

Y

YoungCapital

youngcapital.nl

68

YoungCapital is a well-established Dutch recruitment agency specializing in job placement for students, starters, and young professionals. Founded in 2000, it holds a strong market position in the Netherlands with a comprehensive online platform offering thousands of vacancies, traineeships, and employer services. The website reflects a mature digital presence with modern technologies, responsive design, and clear navigation tailored to its target audience. The company demonstrates good compliance with privacy regulations, including GDPR, and provides transparent contact and policy information. Security posture is solid with HTTPS, CSRF protection, and cookie consent, though some security headers could be enhanced. Overall, YoungCapital presents a trustworthy and professional brand with strong business credibility.

R

Randstad

randstad.nl

70

Randstad is a leading staffing agency in the Netherlands, providing a platform for job seekers to find vacancies and employment opportunities. The website is professionally designed, targeting a broad audience seeking employment. It leverages modern technologies including Google Analytics, Tag Manager, and reCaptcha to enhance user experience and security. The site is built on the Hippo CMS platform, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website presents a trustworthy and professional front for Randstad's staffing services.