Security Directory

C

Cliengo

cliengo.com

72

Cliengo is a technology company specializing in AI-powered chatbots and marketing automation tools designed to optimize customer engagement and improve sales conversion rates. Their platform integrates chatbots across multiple channels including websites, WhatsApp, Facebook, and Instagram, providing businesses with tools to capture, profile, qualify, and manage leads effectively. The company targets businesses and agencies looking to enhance their marketing ROI through automation and AI-driven conversations. Technically, the website is built on a modern stack with integrations to HubSpot, Google Tag Manager, and Facebook Pixel, hosted likely on CDN-Website.com infrastructure with good mobile optimization and performance. Security posture is solid with HTTPS and service workers, though explicit security headers and policies are not clearly published. Privacy and cookie policies are not found, indicating a compliance gap. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and active marketing presence. Overall, the site demonstrates a mature digital marketing approach but would benefit from enhanced transparency and security documentation.

J

James Cook Languages

jcl.cz

58

James Cook Languages is a well-established language education provider specializing in corporate language training, professional courses, translation, and interpreting services across Central Europe. With over 20 years of experience and a client base exceeding 600 companies, it holds a strong market position supported by its membership in the EDUA Group. The website reflects a professional and consistent brand image, targeting corporate clients seeking tailored language solutions. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the domain registration and website content align well, indicating a legitimate and credible business.

T

TVAR, výrobní družstvo Klatovy

tvar-kt.cz

50

TVAR, výrobní družstvo Klatovy, is a Czech manufacturing company specializing in furniture production primarily for educational institutions such as kindergartens and primary schools, as well as offices, hotels, and other commercial spaces. Established in 1951, the company has a long-standing market presence and offers a wide range of products including wooden chairs, tables, storage units, and specialized items like changing tables and plastic drawers from the English brand Gratnells. Their products are certified and regularly tested to meet safety and health standards. The company operates two manufacturing plants and employs nearly 60 skilled workers, providing both standard and custom furniture solutions.

S

SKOLATO

skolato.cz

50

SKOLATO is a Czech-based company specializing in the manufacture and sale of school furniture and equipment for schools, kindergartens, and municipalities. The website presents a comprehensive catalog of products including school desks, chairs, boards, specialized classrooms, and outdoor furniture. The company targets educational institutions and local government bodies, positioning itself as a specialized supplier in the Czech market. Founded in 2016, SKOLATO operates a medium-sized e-commerce platform built on PrestaShop, leveraging modern web technologies and third-party marketing tools such as Google Analytics and Facebook Pixel. The website is well-structured, mobile-optimized, and provides clear navigation and product information, although it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers could be improved. Contact information is available primarily via phone and contact forms, but no direct company emails or detailed business registration data are present on the site. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

K

Koscom

koscom.cz

52

Koscom is a well-established Czech retailer specializing in watches and related accessories, with over 30 years of market presence. The company operates a large physical store in Prague and a comprehensive e-commerce platform offering more than 9,000 products. Their business model focuses on authorized dealership, retail sales, and after-sales services such as battery replacement and watch servicing. The website reflects a professional and trustworthy brand with clear contact information and strong social media integration. Technically, the website leverages the nopCommerce platform with modern JavaScript libraries and tracking tools including Google Analytics 4 and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected. However, the absence of WHOIS data limits domain trust verification, which slightly impacts overall credibility. Overall, Koscom presents a mature digital presence suitable for its retail business, with recommendations to improve security headers and publish explicit security policies to further enhance trust and compliance.

Novesta is a European footwear brand specializing in handmade shoes, offering a variety of products including sneakers, sandals, and vegan shoes. The company targets consumers who value quality craftsmanship and European manufacturing. The website is built on the nopCommerce platform, utilizing modern web technologies such as jQuery, Swiper.js, and Font Awesome, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable concern, suggesting either privacy protection or an unregistered domain, which impacts the trustworthiness assessment. Overall, the website presents a professional e-commerce presence with good privacy compliance but would benefit from enhanced transparency and security practices.

G

Grafoman

grafoman.be

55

Grafoman is a Belgian creative communication agency specializing in branding, web design, and online marketing services tailored to client needs. The company positions itself as a trusted partner for businesses seeking impactful branding and digital growth. The website reflects a professional and consistent brand image with clear service offerings and a strong regional presence. Technically, the site is built on WordPress with modern marketing and analytics integrations, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The domain WHOIS data is privacy protected, which is typical for small agencies and does not detract from the site's legitimacy. Overall, Grafoman presents a credible and trustworthy online presence with room for technical security improvements.

K

Kindful

kindful.com

58

Kindful is a specialized SaaS platform focused on providing nonprofit organizations with fundraising tools, donor management, and communication solutions. It operates as a product under the parent company Bloomerang, targeting nonprofits seeking to enhance their fundraising capabilities through integrated technology. The website demonstrates a strong market position with comprehensive content, clear branding, and a consistent message tailored to nonprofit professionals. Technically, the site is built on WordPress with a modern technology stack including multiple marketing and analytics integrations such as Google Analytics, Hotjar, Marketo, and Facebook Pixel. Hosting and DNS services are managed via Cloudflare, ensuring robust performance and security. The site is well-optimized for SEO and mobile responsiveness, providing an excellent user experience. From a security perspective, the website enforces HTTPS and employs domain transfer protections. However, DNSSEC is not enabled, and there is no explicit cookie consent mechanism visible, which could be improved for better privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a legitimate and consistent domain registration aligned with the business claims. Overall, Kindful presents a professional, trustworthy, and technically sound online presence with minor areas for improvement in privacy compliance and security policy transparency.

LCV Real Estate is a Belgian project developer specializing in commercial real estate, offering a broad portfolio of projects including KMO units, retail, logistics, and build-to-suit developments primarily in Belgium and neighboring countries. The company targets businesses seeking to purchase or rent commercial properties, positioning itself as an expert partner for real estate investments with added value. The website is professionally designed, multilingual, and provides comprehensive project information and contact options. Technically, the site uses modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Bing Ads, integrated via Google Tag Manager. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and published incident response information. WHOIS data is unavailable due to domain registration restrictions, which lowers domain trustworthiness despite the professional web presence. Overall, the site scores well on content and privacy compliance but should improve transparency and security practices.

A

Atelier Souffriau

atelier-souffriau.be

38

Atelier Souffriau is a small Belgian retail business specializing in traditional butchery and catering services, emphasizing artisanal quality and customer experience. The website reflects a well-structured digital presence with clear branding and content focused on their mission and product quality. The company targets local customers interested in authentic, high-quality meat products and catering. Technically, the site is built on WordPress with common frameworks and libraries such as Bootstrap, jQuery, and Font Awesome, and integrates marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies, indicating GDPR awareness. WHOIS data is restricted by the .be registry, limiting domain ownership transparency but the website content and professional presentation support legitimacy. Overall, the site scores well in content quality and technical implementation but could improve in security best practices and business credibility transparency.

F

Franky Fresh Food nv

bourgon.be

50

Bourgon, operated by Franky Fresh Food nv, is a Belgian company specializing in quality meat products and related food services such as food trucks and recipe sharing. The company targets both consumers and B2B clients, positioning itself as a regional player in the retail meat sector with a focus on premium products and event catering. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact information. It leverages WordPress CMS with modern technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. WHOIS data is restricted due to DNS Belgium policies, but the website's professionalism and consistent business information support its legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence.

L

Life Is Better At The Pool

lifeisbetteratthepool.be

66

Life Is Better At The Pool is a niche Belgian e-commerce retailer specializing in pool and garden lifestyle products, including pool robots, lighting, heating, and barbecue equipment. The website demonstrates a mature digital presence with a well-structured product catalog and multilingual support. The technical infrastructure is based on WordPress and WooCommerce, leveraging modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain WHOIS data is restricted, which slightly impacts trust but is common for small retail businesses. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

Willy Naessens Luxembourg SA is a prominent leader in the construction of industrial buildings in Belgium and Luxembourg, boasting over 10,000 completed projects. The company operates under the Willy Naessens Group umbrella, offering integrated vertical construction services including design, prefabricated concrete production, and turnkey solutions. Their innovative modular building system, The Circle®, exemplifies their commitment to efficiency and sustainability. The website is professionally designed, content-rich, and targets business clients in the industrial construction sector. Technically, the site employs modern tracking and analytics tools, is hosted behind Cloudflare, and uses HTTPS with good privacy controls. However, some security headers are missing, and no explicit security or incident response policies are published. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website reflects a mature digital presence with good business credibility and moderate to strong security posture.

Willy Naessens Industriebouw is a leading industrial construction company based in Belgium, specializing in turnkey and modular industrial buildings with a strong emphasis on vertical integration. The company boasts over 10,000 projects in Belgium and Luxembourg, positioning itself as a market leader in the industrial construction sector. Their services include prefab concrete production, design & build, and turnkey delivery, targeting sectors such as KMO, logistics, retail, food, and public projects. The website reflects a professional and consistent brand image aligned with the parent Willy Naessens Group. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by One.com A/S, consistent with WHOIS data. The site is mobile-optimized with good SEO and accessibility basics, though some improvements are possible. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular user controls, demonstrating good privacy compliance. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Security headers are minimal and could be enhanced to improve protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data supports the legitimacy and longevity of the business. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen the security posture and user trust.

I

International Car Lease Holding NL

internationalcarlease.com

59

International Car Lease Holding NL operates as a major car leasing provider in the Netherlands, offering a portfolio of leasing brands under the Van Mossel Automotive Group umbrella. The company targets both business and private customers with a broad range of leasing solutions, positioning itself as a market leader with multiple industry awards. The website reflects a professional and consistent brand image, with clear navigation and multilingual support. Technically, the site is built on Silverstripe CMS and integrates modern analytics and marketing tools, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance.

K

Knight Foundation

kf.org

65

Knight Foundation is a well-established US-based non-profit organization focused on supporting journalism, arts, and community development. The foundation operates through grant funding, research, and community programs aimed at fostering informed and engaged communities essential for democracy. The website reflects a mature digital presence with professional design, clear navigation, and rich content targeting journalists, researchers, and community stakeholders. Technically, the site is built on WordPress VIP with modern analytics and tracking tools integrated, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and domain registration consistent with organizational identity, though improvements like DNSSEC and security policy publication are recommended. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness.

B

Bangor Daily News

bangordailynews.com

60

Bangor Daily News is a prominent local news media organization serving the state of Maine, providing comprehensive coverage of news, sports, politics, and obituaries. The website operates a subscription-based business model, leveraging a paywall to monetize its content. It targets residents of Maine and those interested in regional news, positioning itself as a leading news source within its market. The company appears to have been founded in 2011 and maintains a consistent brand presence across its digital platforms. Technically, the website is built on WordPress and integrates a variety of modern technologies including Google Analytics, Google Tag Manager, Pelcro SDK for subscription management, and multiple advertising networks such as PubMatic and Amazon APS. The site is mobile-optimized and employs HTTPS for secure communications. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses several tracking and advertising scripts, but lacks explicit security headers and published security policies. No critical vulnerabilities were detected in the analyzed content. However, the absence of privacy and cookie policies and the lack of WHOIS registration data for the domain raise concerns about compliance and domain legitimacy. Overall, while the website demonstrates a mature digital presence and business model, it should improve its privacy compliance and clarify domain registration details to enhance trustworthiness and regulatory adherence.

M

Main Street America

mainstreet.org

57

Main Street America is a well-established US-based non-profit organization dedicated to strengthening communities through preservation-based economic development focused on older and historic downtowns and neighborhood commercial districts. The organization operates a large national network of community coalitions and provides extensive resources, professional development, advocacy, and events to support local leaders and volunteers. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technically, the site uses modern JavaScript frameworks, HubSpot CMS, and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain registration protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is basic with a privacy policy and cookie consent banner present but no advanced GDPR indicators. Overall, the site is credible, trustworthy, and serves its target audience effectively.

V

Verlag Nürnberger Presse Druckhaus Nürnberg GmbH & Co. KG

nn.de

64

NN.de is the online portal of the Nürnberger Nachrichten, a regional news publisher serving Nürnberg, Franken, and the Oberpfalz regions in Germany. The website offers news content, subscription services including digital NN+ subscriptions, e-paper access, newsletters, and podcasts. It targets local residents and readers interested in regional and national news. The business model is primarily media publishing with revenue from subscriptions and advertising. The site is well-branded and consistent with a strong regional market position.

SiteManager is a technology company offering a no-code/low-code collaborative web design platform targeted primarily at agencies, marketing teams, and web professionals. The platform enables users to build, launch, and manage websites with a focus on collaboration among designers, developers, content creators, project managers, and web3 creators. The company positions itself as a leading cloud web design platform trusted by over 250 agencies and powering more than 2500 SME websites. Technically, the website employs modern JavaScript libraries, HubSpot marketing and analytics tools, Google Analytics, Facebook Pixel, and other tracking technologies, indicating a mature digital infrastructure. The site is well-optimized for mobile and SEO, with excellent design quality and user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. WHOIS data is unavailable due to privacy protection or query failure, but the website's professionalism and trust signals suggest legitimacy. Overall, SiteManager demonstrates a strong market presence with a robust technical and marketing setup, though it could improve transparency around security policies and incident response.

E

Excelsior Foundation

excelsiorfoundation.nl

47

Excelsior Foundation is a non-profit organization acting as the social heart of the Excelsior Rotterdam football club. It focuses on improving the social, economic, and sporting conditions in the Rotterdam region through various community projects such as sport participation, education, reintegration, health, and safety. The foundation leverages the brand and community presence of the football club to engage local partners, donors, and volunteers. The website is well-structured, professionally designed, and provides clear information about the foundation's mission, projects, and partnerships. Technically, the website is built on WordPress and uses common web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and performs moderately well. Security-wise, the site uses HTTPS with DNSSEC enabled, but lacks some security headers and a cookie consent mechanism, which are areas for improvement. No forms are present on the homepage, reducing immediate data collection risks. Overall, the security posture is solid but could be enhanced with additional headers and privacy compliance features. The domain registration is consistent with the foundation's history and business claims, showing no suspicious patterns. The foundation maintains a transparent presence with clear contact details and social media engagement, supporting trustworthiness and credibility.

V

Verlag Nürnberger Presse Druckhaus Nürnberg GmbH & Co. KG

nordbayern.de

66

Nordbayern.de is a professional regional news portal operated by Verlag Nürnberger Presse Druckhaus Nürnberg GmbH & Co. KG, serving northern Bavaria and broader German-speaking audiences. The site offers comprehensive news coverage including politics, sports, economy, and culture, supported by subscription and advertising revenue models. The company maintains a strong market position as a leading regional media outlet with a clear focus on local and national news. Technically, the website employs a modern tech stack including Piano.io for subscription management, Google Tag Manager, Facebook Pixel, and Chartbeat for analytics, alongside robust consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS enforcement, secure login forms, and privacy-conscious tracking. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Overall, nordbayern.de demonstrates a mature digital presence with good security and privacy practices, though it could enhance incident response transparency and security header implementation.

W

Word In Black

wordinblack.com

62

Word In Black is a specialized digital media platform dedicated to providing news, insights, and research focused on Black America. Established in 2020, it offers a variety of content categories including health, education, politics, and culture, targeting the Black American community and those interested in related issues. The platform operates primarily through digital publishing, newsletter subscriptions, and donation support, positioning itself as a trusted niche media source. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO Premium, Google Analytics, and Google Tag Manager, ensuring good digital maturity and performance. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks visible security policies and DNSSEC, indicating room for improvement in security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and trustworthy with moderate risk, suitable for its audience and business model.

I

Illinois Answers Project

illinoisanswers.org

62

Illinois Answers Project is a nonprofit investigative and solutions journalism organization focused on Illinois state issues. It operates under the parent organization Better Government Association and targets Illinois residents, civic leaders, and public officials. The website offers investigative reports, newsletters, podcasts, and databases to inform and engage its audience. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO Premium, Google Analytics, and social media integrations. The site is mobile-optimized and has a professional design with clear navigation. Security posture is good with HTTPS enabled and use of security plugins, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. No explicit incident response or vulnerability disclosure information is available. Overall, the site is trustworthy and professionally maintained but could improve privacy and security transparency.

N

National Trust for Historic Preservation

savingplaces.org

60

The National Trust for Historic Preservation operates savingplaces.org as a digital platform to promote historic preservation across the United States. The organization is a well-established non-profit with a large presence and a broad target audience including donors, preservation professionals, and the general public interested in heritage conservation. The website offers extensive resources, advocacy tools, and calls to action for donations and memberships, reflecting a mature business model reliant on community support and grants. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and Bing Ads for analytics and marketing, and appears to be built on a Ruby on Rails framework. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and CSRF protections in place, but lacks visible security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy or terms of service pages detected in the provided content. Overall, the domain registration is privacy protected but consistent with the organization's profile and history, indicating legitimacy.

Bridge Michigan is a nonprofit, nonpartisan news organization focused on delivering original, fact-driven reporting and analysis on Michigan state issues including politics, environment, education, and quality of life. The website serves Michigan residents and stakeholders seeking trustworthy local news and insights. The business model relies on donations, memberships, and sponsorships, positioning Bridge Michigan as a respected regional media entity with a strong digital presence and community engagement. Technically, the site is built on Drupal 10, leveraging modern analytics and advertising technologies such as Google Tag Manager, Adsense, and Facebook Pixel. The site is mobile optimized, accessible, and SEO friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's credibility given its nonprofit status and professional presentation. Overall, Bridge Michigan demonstrates a mature digital infrastructure and trustworthy content delivery, with room for improvement in security transparency and WHOIS data clarity.

S

Signal Akron

signalakron.org

62

Signal Akron is a nonprofit newsroom dedicated to providing local news for the Akron, Ohio community. Founded in 2023, it operates as part of a network of Signal Newsrooms, focusing on community engagement, local government, public safety, and cultural reporting. The organization relies on donations and reader support, offering newsletter subscriptions and opportunities for community members to contribute as documenters. Technically, the website is built on WordPress with integrations including Gravity Forms, HubSpot, Fundraise Up, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and employs modern SEO practices but lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled and domain registration protected by privacy services, though DNSSEC is not enabled and security headers are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

G

Gates Family Foundation

gatesfamilyfoundation.org

58

The Gates Family Foundation is a well-established philanthropic organization focused on improving quality of life in Colorado through strategic philanthropy and mission-forward investing. Their website clearly communicates their strategic priorities including education, natural resources, community development, and informed communities. The foundation operates primarily as a non-profit entity, providing capital and strategic grants, impact investments, and fellowship programs. Their market position is strong within the Colorado philanthropic sector, supported by a domain registered since 2002 and consistent branding and messaging. Technically, the website is built on WordPress using the Divi theme, enhanced with modern tools such as FontAwesome Pro, HubSpot analytics, Google Tag Manager, and Facebook Pixel for marketing and tracking. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Performance is moderate, with caching and optimization plugins like WP Rocket in use. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is limited as no privacy or cookie policies were found, and no consent mechanisms are evident. Overall, the website is professional, trustworthy, and credible, with minor gaps in privacy compliance and security best practices. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. No WAF or blocking mechanisms interfere with content access, allowing full analysis.

C

Colorado Media Project

coloradomediaproject.com

57

Colorado Media Project is a small non-profit organization focused on researching and testing new ideas and digital tools to strengthen the civic fabric of Colorado, particularly the local news ecosystem. The organization targets Coloradans interested in local news and civic engagement, positioning itself as a niche player in the non-profit media sector. The website is built on the Squarespace platform, leveraging modern web technologies including Facebook Pixel for analytics and marketing. The site is professionally designed with good mobile optimization and clear navigation, though it lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Overall, the website demonstrates moderate digital maturity and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

T

Teya

teya.com

60

Teya is a technology company specializing in card payment solutions tailored for small and medium-sized businesses. Their offerings include reliable card machines and tap-to-pay technology designed to facilitate efficient transaction processing. The website is professionally designed using the Framer CMS platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Amplitude, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Overall, while the business model and technical infrastructure appear sound, the lack of compliance and transparency elements presents risks that should be addressed.

D

Dotypay

dotypay.com

54

Dotypay is a Czech Republic based company specializing in modern payment terminal devices with extensive connectivity and multifunctional capabilities. Founded in 2018, the company targets businesses requiring advanced payment solutions, offering both sales and rental models. Their website is professionally designed using WordPress with Elementor and Astra theme, featuring comprehensive content about their products and services. The company maintains active social media presence on Facebook and LinkedIn, enhancing their market visibility. Technically, the website employs modern technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, Dotypay presents a trustworthy and professional online presence with room for enhanced security policies and incident response transparency.

W

Willem II

willem-ii.nl

65

Willem II is a Dutch football club operating an official website that serves as a hub for fans and stakeholders to access club news, ticketing, and merchandising information. The website is built on Drupal 10, indicating a modern and maintainable technical infrastructure. The site integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag, demonstrating a mature digital marketing approach. The presence of a comprehensive cookie consent mechanism compliant with GDPR reflects a strong commitment to privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and terms of service pages suggests areas for improvement in transparency and compliance documentation. Overall, the website presents a professional and trustworthy digital presence aligned with the club's brand and audience expectations.

V

VTDigger

vtdigger.org

63

VTDigger is a well-established, member-supported news organization focused on Vermont, providing comprehensive coverage of business, politics, environment, and public policy since 2009. The website demonstrates a strong market position as Vermont's largest newsroom, with a professional and consistent brand presence. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms, WooCommerce, and Google Analytics, hosted with reputable providers and using Cloudflare DNS. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security posture is solid with HTTPS and domain protections, though it lacks some advanced security headers and explicit security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the site is credible and trustworthy with room for improvement in privacy and security transparency.

S

Signal Cleveland

signalcleveland.org

61

Signal Cleveland is a nonprofit newsroom dedicated to serving the Greater Cleveland community with local news and resources. Founded recently in 2022, it operates with a mission to provide accessible, community-focused journalism covering government, housing, education, and public safety. The organization relies on donations and community support, as evidenced by donation appeals and fundraising campaigns on the website. The site is well-branded and maintains consistent messaging aligned with its nonprofit media identity. Technically, the website is built on WordPress using the Newspack theme, leveraging modern tools such as Gravity Forms for data collection, Yoast SEO for search optimization, and integrations with HubSpot, Fundraise Up, and Parsely for marketing and analytics. Hosting is provided by Automattic Inc., consistent with WordPress.com infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers such as CSP or HSTS. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. Tracking and advertising scripts are present, including Google Analytics and Facebook Pixel, with moderate user tracking. Overall, Signal Cleveland presents a credible and professional nonprofit media presence with solid technical foundations but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

F

Flint Beat

flintbeat.com

62

Flint Beat is a small, community-focused non-profit media organization dedicated to providing rigorous, evidence-based local news coverage for Flint, Michigan. The website serves as a platform for community engagement, local news dissemination, and fundraising through donations and newsletter subscriptions. Technically, the site is built on WordPress using the Newspack theme and plugins, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Broadstreet Ads for monetization and audience insights. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security best practices.

B

Berkeleyside

berkeleyside.org

47

Berkeleyside is a nonprofit local news organization focused on delivering comprehensive news coverage for Berkeley, California. It holds a strong market position as the leading local news source, offering services such as breaking news, public safety updates, political coverage, food and real estate news, and community events. The website is well-branded and targets residents and community members interested in local affairs. Technically, the site is built on WordPress using the Newspack theme, integrating modern technologies like Gravity Forms, WooCommerce, Google Analytics, and Facebook Pixel. Hosting leverages Amazon S3 for media assets, ensuring fast content delivery. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness, though privacy compliance disclosures and cookie consent mechanisms are areas for enhancement.

O

Oakland news | The Oaklandside

oaklandside.org

50

The Oaklandside is a small media outlet focused on delivering local news and community journalism related to Oakland, California. The website is built on the WordPress platform and hosted by Automattic Inc., leveraging common plugins such as Gravity Forms and Yoast SEO to manage content and optimize search engine presence. The site targets residents and stakeholders interested in Oakland's local affairs, positioning itself as a community-focused news source. Technically, the website demonstrates moderate performance and good mobile optimization, with a modern tech stack and SEO best practices in place. However, the security posture shows room for improvement, lacking advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the domain registration is consistent and legitimate, with no blocking or WAF detected, indicating accessible and functional content.

N

North Carolina Longform Magazine Inc.

theassemblync.com

62

The Assembly NC is a specialized digital magazine focused on delivering in-depth news and investigative journalism about North Carolina. It targets readers interested in local politics, culture, environment, and business, offering subscription-based newsletters and sponsored content. The website is professionally designed with excellent content quality and consistent branding, positioning itself as a trusted regional media outlet. Technically, the site is built on WordPress with modern SEO and performance optimizations, including AMP support and integration of analytics and advertising platforms. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit privacy and cookie policies are absent, representing a compliance gap. The lack of WHOIS data is a notable concern for domain legitimacy, but the active content and social presence suggest a legitimate operation. Overall, the site scores well on content and technical implementation but should improve privacy compliance and domain transparency.

M

Marketing Drenthe

marketingdrenthe.nl

55

Marketing Drenthe is a small, specialized regional marketing organization focused on promoting the Dutch province of Drenthe as a leisure and tourism destination. The organization operates with support from the Province of Drenthe and targets leisure visitors, tourism entrepreneurs, and partners to stimulate sustainable tourism development. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity, embedded within a responsive and accessible design. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy documentation. Overall, the site is trustworthy and well-positioned within its niche, but would benefit from enhanced privacy and security disclosures.

M

Marketing Drenthe

besuchdrenthe.de

66

The website www.besuchdrenthe.de is a regional tourism promotion platform focused on the Drenthe region in the Netherlands, targeting German-speaking tourists. It provides comprehensive information about holidays, nature, culture, accommodations, and activities in Drenthe. The site is professionally designed with good content quality and consistent branding, offering a positive user experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies including Cloudflare DNS, Google Tag Manager, Google Analytics, Facebook Pixel, and video embeds from Vimeo. The site is served over HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit terms of service, security policies, incident response information, and contact details such as emails or phone numbers. The WHOIS data shows Cloudflare nameservers with limited registrant information, which is typical for privacy but reduces transparency. Overall, the website demonstrates a good security posture with no visible vulnerabilities or blocking mechanisms. Strategic improvements include adding terms of service, security policies, and clear contact information to enhance trust and compliance.

R

Re:signal

resignal.com

62

Re:signal is a UK-based award-winning ecommerce SEO agency specializing in driving organic search growth for ambitious ecommerce brands. Established in 2009, the company has a strong market position with a focus on SEO consulting and services tailored to ecommerce businesses. Their website reflects a professional and modern digital presence, leveraging WordPress with Elementor and advanced SEO tools such as Yoast SEO Premium. The technical infrastructure includes integrations with Google Analytics, Facebook Pixel, HubSpot, and Microsoft Clarity, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though there is room for improvement in DNSSEC and security headers. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the website and domain registration data align well, supporting the legitimacy and credibility of the business.

M

Mobile Moxie

mobilemoxie.com

60

Mobile Moxie is a specialized technology company providing mobile-focused business intelligence and digital marketing tools, primarily targeting brands, agencies, and analysts seeking to optimize mobile SEO and app store presence. Founded in 2008 and operating under MobileMoxie, LLC, the company offers SaaS tools that enable real-time and historical tracking of search results, landing pages, and app rankings across multiple devices and geographies. Their market position is that of a niche provider with a strong emphasis on mobile and digital marketing analytics. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and various analytics and tracking services, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy disclosures and DNS security.

J

JobMatcher

job-matcher.com

65

JobMatcher is a small, multilingual job matching platform primarily targeting Dutch, Polish, and Romanian speaking job seekers and employers. The website offers categorized job listings and recruitment services. The business appears to be relatively new, founded in 2021, and operates on a WordPress CMS with common plugins and tracking technologies such as Google Analytics and Facebook Pixel. The technical infrastructure is standard for small business websites, with Cloudflare DNS and HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent banner and a privacy policy page, but no visible terms of service or detailed security policies. Contact information is not explicitly provided on the main pages, which may impact user trust. Overall, the site is accessible and functional but could benefit from enhanced security and compliance transparency.

W

WooCamp

woocamp.com

57

WooCamp is a specialized online media platform providing news, insights, and resources for WooCommerce store owners. Established in 2015, it serves a niche audience focused on e-commerce solutions, offering content on hosting, plugins, themes, speed optimization, and growth strategies. The website leverages WordPress with WooCommerce and AMP technologies to deliver a mobile-optimized and SEO-friendly experience. Advertising through Google AdSense and affiliate marketing is integrated to support its business model. Technically, the site is hosted likely on Pressable, uses modern plugins, and includes tracking via Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled and domain registration protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is not directly available on the homepage, which may affect user trust. Overall, WooCamp presents a professional and focused resource for WooCommerce users but could improve in security and privacy transparency.

S

Stichting Marketing Drenthe

drenthe.nl

70

The website www.drenthe.nl serves as the official regional marketing and informational portal for the province of Drenthe in the Netherlands. It provides comprehensive information about tourism, events, living, and working in Drenthe, targeting tourists, residents, and local businesses. The site is operated by Stichting Marketing Drenthe, a recognized entity responsible for promoting the region. The content is primarily in Dutch with alternate language versions available, supporting a broad audience including international visitors. Technically, the website employs modern JavaScript frameworks and libraries such as Splide.js for carousels, Vimeo for video content, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with good SEO practices including structured data (JSON-LD) and meta tags. Performance is moderate, with asynchronous loading of scripts and optimized images. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with granular user choices, reflecting good privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no dedicated security policy or incident response contact information published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a strong business credibility and technical maturity suitable for its role as a regional marketing platform. Recommendations include enhancing security headers, publishing a formal security policy, and providing clear contact channels for security incidents to further strengthen trust and compliance.

A

AIC Visser

visser-assen.nl

46

AIC Visser operates a professional e-commerce platform specializing in construction materials, measurement instruments, and related equipment primarily serving the Dutch construction and infrastructure sectors. The website demonstrates a solid market position with a broad product catalog and clear navigation targeting construction professionals and contractors. The business model focuses on B2B and B2C sales with an emphasis on quality and variety of construction-related products. Technically, the site is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries and integrations such as Google Tag Manager, Facebook Pixel, and Trustpilot for marketing and analytics. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security posture is adequate with HTTPS enforced and some security best practices observed; however, the absence of explicit security headers, privacy policy, and incident response contacts indicates room for improvement. Privacy compliance is limited due to missing privacy and terms of service pages, though a cookie consent mechanism is implemented. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

T

Ticketpoint

ticketpoint.nl

62

Ticketpoint is a well-established Dutch ticket sales platform operating since 2003 under the legal entity Superior B.V. The company specializes in selling tickets for concerts, sports events, festivals, and theater performances, targeting event attendees primarily in the Netherlands. The website is multilingual, supporting Dutch, English, and German, and offers a comprehensive event catalog with direct ticket purchasing options. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO, WPML for multilingual support, and various JavaScript libraries for UI and calendar functionalities. The site employs HTTPS with good SSL configuration and integrates privacy compliance tools such as Cookiebot and reCAPTCHA for form security. Security badges and trust signals are prominently displayed, enhancing user confidence. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a solid security posture, good privacy compliance, and a professional digital presence.

AUTOUNIT Ν. ΠΟΥΛΑΚΗΣ ΑΕΒΕ is a well-established Greek automotive company specializing in the sale of new and used cars, automotive parts, and comprehensive vehicle services including maintenance, bodywork, and painting. With over 30 years of experience and an authorized Renault-Dacia dealership, the company holds a strong market position in Greece's transportation sector. Their business model combines retail and service offerings targeting automotive customers seeking quality vehicles and parts. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel, ensuring a responsive and user-friendly experience. Integration of Google Tag Manager and Facebook Pixel indicates moderate user tracking for marketing purposes. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit published security policies or incident response contacts, and security headers are not detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is solid but could be improved by adding formal security documentation and enhancing HTTP security headers. The overall risk assessment is low, with the website demonstrating good business credibility, privacy compliance, and technical implementation. Strategic recommendations include publishing security policies, adding incident response contacts, and implementing additional security headers to further strengthen the security posture and trustworthiness.

C

Contivus

piguskonteineris.lt

31

PigusKonteineris.lt is a Lithuanian-based company specializing in the sale and rental of marine and modular containers. The company positions itself as a market leader offering competitive pricing and direct sales without intermediaries. Their services include container sales, rentals, and delivery across Lithuania, supported by a professional team with industry experience. The website is well-structured and optimized for user engagement, featuring customer testimonials and Google reviews that enhance trust. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by a reputable provider. Security measures include HTTPS and reCAPTCHA, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the company demonstrates a solid digital presence with room to enhance compliance and security transparency.

S

Skuodo skelbimai

skuodoskelbimai.lt

40

SkuodoSkelbimai.lt is a Lithuanian local classifieds website targeting residents of the Klaipėda region and surrounding localities. It offers a platform for users to post and search classified ads across multiple categories such as transport, real estate, services, technology, leisure, and more. The site positions itself as a convenient and efficient classifieds portal for the local community. The business model is based on user-generated ads with possible monetization through advertising placements. The website is small in scale and focused on a regional audience. Technically, the website employs a traditional web stack with jQuery 1.10.2, Google Analytics, Google Tag Manager, Facebook Pixel, and Google Adsense for analytics and advertising. The site uses HTTPS with no visible SSL issues and implements a cookie consent banner with granular consent options, indicating a basic level of privacy compliance. The site is mobile-optimized and has good navigation and content relevance, though some technical improvements are possible such as updating jQuery and adding security headers. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the WHOIS data for the domain is unavailable or invalid, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. Overall, the website is functional and serves its local classifieds purpose well but would benefit from improved security practices and transparency regarding domain registration and company information. Strategic recommendations include implementing security headers, updating outdated libraries, and publishing clear security and incident response policies to enhance trust and compliance.