Security Directory

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

gapao.de

60

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V. (GAPAO) is a small non-profit organization based in Germany focused on the interdisciplinary field of architecture psychology and oncology. The website serves as an educational platform offering training, symposiums, and research projects targeted at professionals in architecture, psychology, and healthcare. The organization collaborates with universities and professional chambers, positioning itself as a niche leader in this specialized domain. Technically, the website is built on Webflow, uses modern web fonts, and includes cookie consent mechanisms, but has a misconfigured Google reCAPTCHA which could expose it to spam risks. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, accessible, and trustworthy with room for improvement in security and compliance details.

H

Hessische Krebsgesellschaft e.V.

hessische-krebsgesellschaft.de

56

Hessische Krebsgesellschaft e.V. is a regional non-profit organization based in Frankfurt am Main, Germany, dedicated to providing cancer information, counseling, prevention, and support services. The website serves patients, their families, and healthcare professionals with comprehensive resources including cancer counseling centers across Hessen, prevention initiatives, and educational events. The organization maintains a strong market position within the healthcare non-profit sector in Germany, emphasizing social and economic support for cancer-affected individuals. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO for search optimization, Modern Events Calendar Lite for event management, and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with mobile optimization, accessibility features, and moderate performance. Analytics are implemented via Koko Analytics with minimal user tracking, respecting privacy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a consistent domain registration aligned with the organization's identity, hosted on agency servers common for non-profits. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a safe and informative experience for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.

The Deutsche Arbeitsgemeinschaft für Psychosoziale Onkologie e.V. (dapo e.V.) is a German non-profit professional society dedicated to psychosocial oncology. It brings together diverse healthcare professionals involved in medical, psychotherapeutic, psychosocial, and pastoral care for cancer patients and their families, as well as researchers in psychooncology. The organization focuses on fostering interdisciplinary exchange, strengthening collaboration, and supporting scientific work in this specialized field. The website serves as an information hub for members and interested professionals, offering news, event details, and a newsletter subscription.

MONKS Vertriebsges. mbH is a specialized web and media agency based in Munich, Germany, focusing on web development, design, smartphone applications, and virtual training primarily for the medical sector. Their offerings include telemedicine expert consultations, certified online medical training, and practice apps with video consultation capabilities. The company positions itself as a niche provider serving healthcare professionals and institutions, leveraging digital technologies to enhance medical services and education. Technically, the website is built on the TYPO3 CMS platform, a mature and widely used open-source content management system. The site employs HTTPS with a good SSL configuration and includes a cookie consent mechanism that respects user privacy by limiting cookies to strictly necessary ones and avoiding tracking cookies. However, the site lacks advanced security headers and visible analytics or advertising scripts, indicating a focus on privacy and minimal tracking. From a security perspective, the website demonstrates a moderate security posture with HTTPS enforcement and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the business claims, showing consistent registration information and no privacy protection, which supports legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a specialized audience with relevant content. Recommendations include enhancing security headers, publishing security policies, and improving mobile optimization and accessibility to further strengthen the site's security and user experience.

The website securehost.de/login/ serves as a login portal for users likely accessing hosting or domain management services. The site is minimalistic, providing only essential login functionality with username and password fields and a password reset link. The business appears to target existing customers or users of securehost.de services, focusing on secure authentication. The market position and company details are not disclosed on this page, limiting business insight. Technically, the site uses older versions of Bootstrap and jQuery, with external resources loaded from vmcdn.de CDN. The site lacks modern SEO and accessibility features and shows only basic mobile optimization. Security-wise, the site uses POST for login forms and masks password input but lacks visible security headers and advanced protections. WHOIS data is limited due to DENIC policy, with no registrar or creation/expiry dates disclosed, which reduces trust but is typical for .de domains. No WAF or blocking mechanisms were detected, and the content is safe with no adult or explicit material. Overall, the site scores moderately on AI evaluation, with recommendations to improve security headers, privacy policies, and technical modernization.

O

Outroll

outroll.com

66

Outroll is a software holding company, venture builder, and managed services provider that manages, builds, and acquires software companies. The company positions itself as a permanent home for software, targeting software businesses and investors. The website reflects a professional and modern digital presence with a focus on technology and software industry services. The domain is mature, created in 2009, supporting the company's established presence. Technically, the website uses modern frameworks such as Nuxt.js and Tailwind CSS, hosted via Cloudflare, and integrates Google Tag Manager for analytics. The site is mobile optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks published security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

R

RTI International

rti.org

70

RTI International is a well-established independent scientific research institute focused on improving the human condition through diverse research and consulting services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting government agencies, academic institutions, and industry partners. The technical infrastructure is modern, leveraging Drupal 10 CMS and standard web technologies, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and credible digital front for RTI International.

U

U.S. Department of Labor, Employment and Training Administration

onetcodeconnector.org

65

The O*NET Code Connector website is a government-sponsored platform developed and maintained by the U.S. Department of Labor's Employment and Training Administration. It serves as an authoritative tool for workforce professionals to identify and match O*NET-SOC occupational codes for job orders, applicants, and unemployment insurance claimants. The site integrates key data from the O*NET database and provides a user-friendly interface for occupation search and job family browsing. The target audience primarily includes workforce professionals and job seekers within the United States labor market. Technically, the website employs legacy JavaScript libraries such as jQuery 3.5.1 and Fancybox 2.1.7, combined with custom CSS and JavaScript. While the site is functional and well-structured, it shows room for modernization, particularly in mobile optimization and accessibility. The site does not appear to use a modern CMS or advanced frameworks, and performance is moderate. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is incomplete or malformed, which slightly reduces trustworthiness, but the official branding and government affiliation strongly support legitimacy. Privacy compliance is partial, with a privacy policy present but no cookie banner or GDPR-specific indicators. Overall, the website is a reliable and professional government resource with good content quality and business credibility. Improvements in security headers, privacy compliance, and technical modernization would enhance its posture and user trust. The domain's WHOIS data gap is a concern but does not outweigh the strong trust signals from the content and affiliations.

U

U.S. Department of Labor, Employment and Training Administration

miproximopaso.org

66

Mi Próximo Paso is a Spanish-language career exploration website sponsored by the U.S. Department of Labor's Employment and Training Administration. It provides optimized career search tools, interest assessments, and access to education and job opportunities, targeting Spanish-speaking students and job seekers. The site is well-positioned as an official government resource with a strong focus on career guidance and workforce development. Technically, the website employs a modern tech stack including Bootstrap 5, jQuery, Font Awesome, and various JavaScript libraries for UI and data visualization. The site is mobile responsive, accessible, and well-structured, offering a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness, though improvements in security headers, privacy compliance, and transparency around incident response would enhance its posture. The lack of WHOIS data is mitigated by clear government affiliation and branding.

U

U.S. Department of Labor, Employment and Training Administration

mynextmove.org

66

My Next Move is a government-sponsored career exploration platform developed by the U.S. Department of Labor's Employment and Training Administration and the National Center for O*NET Development. It provides streamlined career search tools, including keyword search, industry browsing, and interest assessments, targeting students and job seekers. The platform offers easy-to-understand career reports and access to apprenticeship opportunities, positioning itself as an authoritative resource in the U.S. labor market. Technically, the website employs a modern and robust technology stack including Bootstrap 5, jQuery, Font Awesome 7, and AnyChart for interactive visualizations. The site is mobile-optimized, accessible, and performs well with fast loading times. It uses secure forms and HTTPS, though explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is adequate with a comprehensive privacy policy, but cookie consent is missing. Overall, the website is trustworthy, professional, and well-maintained, reflecting its government affiliation. The lack of WHOIS data is likely due to privacy or registry restrictions, which is reasonable for this type of site. Strategic improvements in security headers, privacy consent, and contact transparency would enhance its security posture and user trust.

N

National Center for O*NET Development

onetcenter.org

68

The National Center for O*NET Development operates the O*NET Resource Center, a U.S. Department of Labor sponsored website providing comprehensive occupational data, tools, and research resources for workforce professionals, developers, and researchers. The site serves as an authoritative portal for accessing current and archived occupational data files, web services, and related career exploration tools. It maintains a strong market position as a trusted government resource with consistent branding and official social media presence. Technically, the website employs a modern technology stack including Bootstrap 5, jQuery, Font Awesome, and AnyChart, ensuring responsive design and good accessibility. The site is mobile optimized and features clear navigation and professional content presentation. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism. Contact information is available primarily via email and contact forms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility consistent with a government-sponsored entity. The lack of WHOIS data is likely due to privacy protection, which is justified for this type of organization. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing cookie consent to improve privacy compliance.

A

ACTIVE Network

activenetwork.com

71

ACTIVE Network operates as a provider of comprehensive race, activity, and event management software solutions targeting organizations such as parks and recreation departments, YMCAs, swim and endurance event organizers, camps, and class providers. The company positions itself as an established player in the SaaS event management market, offering integrated tools to streamline event operations. The website reflects a mature digital presence with professional branding and a focus on user engagement through multiple marketing and analytics integrations. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, and advanced analytics platforms such as Visual Website Optimizer and Microsoft Clarity, indicating a commitment to performance and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed privacy documentation are not evident in the provided data. The absence of WHOIS registration details raises concerns about domain transparency, though the website content and branding suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and clearer contact information.

G

GreenBizTracker

greenbiztracker.org

59

GreenBizTracker is a specialized web-based platform designed to support Green Business certification programs by providing tools for environmental metrics tracking and reporting. The platform targets states and organizations running green business initiatives, helping businesses adopt sustainable practices and measure their environmental impact. The website presents a professional and consistent brand image with clear navigation and relevant content focused on sustainability and green business facilitation. Technically, the website is built using modern React technology and hosted on Netlify, leveraging Google Tag Manager and Google Analytics for user tracking and marketing insights. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO could be further improved. Security-wise, HTTPS is enforced, but the absence of security headers and visible privacy or cookie policies indicates room for enhancement in compliance and protection. The WHOIS data is incomplete, with no registrar or registrant information available, which reduces domain trustworthiness despite the professional appearance of the site. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site is safe, with no adult or questionable content, and serves a niche market in environmental sustainability tracking. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, improving accessibility and SEO, and enhancing transparency around domain registration to boost trust and compliance.

M

mdf commerce

mdfcommerce.com

52

mdf commerce is a North American SaaS provider specializing in ecommerce and eprocurement solutions that facilitate commercial transactions between buyers and sellers. The company offers platforms that enable businesses to generate billions in annual transactions, targeting organizations seeking efficient, transparent procurement methods. The website reflects a professional digital presence with clear branding and content tailored to business clients. Technically, the site is built on WordPress using the Divi theme and integrates common web technologies such as jQuery, Google Analytics, and multilingual support. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. The lack of WHOIS data reduces domain trustworthiness, but the overall site quality and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

G

Granicus

openforms.com

73

Granicus is an established enterprise technology company specializing in digital government solutions, particularly focused on transforming paper-based processes into digital workflows and online services for local and regional governments. Their market position is strong, supported by a broad portfolio of government experience cloud products and trusted by over 170 government agencies worldwide. The website content is professional, well-structured, and targeted at public sector organizations, reflecting a mature business model centered on B2G SaaS offerings. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, New Relic monitoring, and Typekit fonts. Hosting is managed via AWS DNS infrastructure. The site demonstrates good SEO practices, mobile optimization, and accessibility features, although performance is moderate and could be improved. Security posture is solid with HTTPS enforced and domain transfer protections, but there is room for enhancement by enabling DNSSEC and publishing more explicit security policies. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident with accessible privacy and cookie policies and GDPR considerations. However, incident response and vulnerability disclosure information are not prominently available, suggesting an area for improvement. Overall, the site is trustworthy and professional, with a high legitimacy score based on domain age and WHOIS consistency. Strategic recommendations include enabling DNSSEC, publishing detailed security and incident response policies, adding security headers, and implementing a vulnerability disclosure program to further enhance trust and security posture.

The domain hostcompliance.com currently resolves to a Squarespace placeholder page indicating that the domain has been mapped but not claimed by any website owner. As such, no actual business content, branding, or services are presented on the site. The domain was registered in 2015 with GoDaddy Corporate Domains, LLC and is currently active with a valid registration status but lacks DNSSEC protection. The technical infrastructure is minimal, relying on Squarespace's platform and Cloudflare nameservers, but no active website content or security headers are present. From a security perspective, the site shows no evidence of HTTPS enforcement or security best practices, and no privacy or cookie policies are published. This results in a very low security posture and poor privacy compliance. Overall, the website is inaccessible for meaningful analysis beyond the placeholder content, leading to a low AI score and limited business credibility.

G

Granicus

granicus.com

73

Granicus is an established enterprise technology company founded in 1999, specializing in digital government solutions and citizen experience platforms. Their offerings include cloud-based SaaS products such as Government Experience Cloud, Service Cloud, Engagement Cloud, and AI-powered digital agents, targeting government organizations and public sector entities. The company positions itself as a leader in transforming government service delivery and engagement through technology, connecting millions of citizens and thousands of government organizations worldwide. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency.

P

PMT Water Engineering

watereng.com.au

44

PMT Water Engineering is an Australian-based manufacturer and facilitator specializing in prefabricated steel water tanks and packaged water treatment systems. The company serves commercial, industrial, and export markets with over 20 years of experience, operating under the parent company Asia Pacific Tanks Pty Ltd. Their website presents a professional image with clear contact information and service descriptions, targeting industrial clients and remote locations both domestically and internationally. Technically, the website is built on WordPress using the Divi theme, incorporating modern technologies such as Google reCAPTCHA v3 for spam protection. Hosting is provided by HostYourServices in Australia, ensuring regional alignment with the business. Security posture is moderate with HTTPS enforced and spam protection active; however, the absence of security headers and published security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

P

Your links and products in one place | Your links and products in one place

petshopprince.com

58

Linklist.bio is a technology SaaS platform specializing in providing users with a comprehensive digital presence solution that includes link in bio management, digital catalogs, link shortening, and QR code generation. The platform targets individuals and businesses seeking to consolidate their online links and products in one accessible place, enhancing brand visibility and e-commerce capabilities. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Vuetify, along with Google Fonts and tracking technologies like Google Tag Manager and Facebook Pixel. The site is optimized for mobile devices and demonstrates good performance and SEO practices. Security is well implemented with HTTPS, multiple security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and visible contact information slightly reduces privacy compliance and business credibility scores. The security posture is strong, with enforced HTTPS and security headers, but lacks explicit security policies and incident response contacts. The WHOIS data is limited due to TLD restrictions or privacy protection, which is common for SaaS platforms and does not raise immediate concerns. Overall, the website presents a low risk profile with good security and technical maturity. Strategic recommendations include implementing a cookie consent banner to enhance GDPR compliance, publishing clear security policies and incident response contacts, and providing visible company contact information to improve business credibility and user trust.

B

bigescapegames.com

bigescapegames.com

56

BigEscapeGames.com is a niche online portal offering free escape games and video walkthroughs to a general audience. The site targets casual gamers interested in adventure and puzzle games, providing daily updated content. The business model appears ad-supported, leveraging Google Adsense and other ad networks to monetize traffic. The website uses modern frontend technologies such as Bootstrap and jQuery, with integrated video players and ad management scripts, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is basic, with no evident security headers or privacy policies, and the site lacks contact information and compliance documentation. Overall, the site is functional and content-rich but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

S

SEPOS, spol. s r. o.

sepos.cz

47

SEPOS, spol. s r. o. is a Czech family-owned company specializing in the manufacturing and retail of interior and entrance doors, door frames, and fittings. With over 30 years of experience, the company serves a diverse clientele including investors, architects, construction firms, and end customers. Their business model combines retail and wholesale sales with comprehensive services such as professional advice, certified installation, and delivery. The company maintains a strong market position in the Czech Republic with multiple design stores nationwide. Technically, the website is built on the INT - JET CMS platform and uses modern web technologies including Foundation CSS framework, jQuery, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Snowplow Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy, incident response contacts, and security.txt file. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the company's stated history. Overall, SEPOS.cz presents a professional and trustworthy online presence with solid business credibility and moderate technical maturity. Strategic improvements in security transparency and accessibility would further strengthen their posture.

M.L.G. is a specialized Italian company focused on high-quality custom perfume production for third parties, operating primarily in the manufacturing sector with a B2B business model. The company emphasizes craftsmanship and tailored services, offering full-service perfume production including packaging and filling. The website reflects a professional and consistent brand image targeting businesses seeking private label perfume manufacturing. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and GDPR compliance tools, integrating Google Analytics and reCAPTCHA for analytics and security. The site is mobile optimized and SEO friendly but uses an outdated jQuery version and lacks some security headers. Security posture is good with HTTPS and DNSSEC enabled, but improvements are recommended in security headers and updating libraries. Privacy compliance is adequate with a privacy policy and cookie consent, though the cookie banner is noted as obsolete. Contact is primarily via a secured contact form. Overall, the site is trustworthy but has minor technical and compliance gaps.

P

PCAM

pcam.co.uk

52

PCAM is a professional society representing producers and composers of applied music. The website serves as an informational and membership platform targeting music industry professionals. The site is built on WordPress using the Divi theme and incorporates membership management plugins and Mailchimp for marketing communications. The technical infrastructure is standard for small to medium-sized organizations with moderate performance and basic mobile optimization. Security posture is moderate but lacks important security headers and privacy compliance documentation. The domain WHOIS data is unavailable due to a naming rules violation, raising concerns about domain legitimacy. Overall, the website is functional but requires improvements in security, privacy compliance, and domain registration legitimacy to enhance trust and credibility.

P

Parco Commerciale Le Fontane

parcocommercialelefontane.it

53

Parco Commerciale Le Fontane is a retail shopping center located in Catanzaro, Italy, offering a variety of shopping, entertainment, and relaxation services. The website positions the business as a local/regional destination with key offerings including retail stores, events, expo spaces, and a cinema. The site is built on WordPress using the Enfold theme and integrates modern web technologies such as jQuery and Google Fonts. Cookie consent is managed via CookieYes, ensuring GDPR compliance. Social media integration is robust, spanning major platforms like Instagram, Facebook, TikTok, YouTube, and Twitter. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. Overall, the website is professional, user-friendly, and trustworthy, supporting the business's market presence effectively.

1

1-700 Digital S.A.

1700digital.com

50

1-700 Digital S.A. operates an established e-commerce and physical retail business in Ecuador specializing in computer hardware, laptops, PC parts, peripherals, and electronics. Founded in 2006, the company serves both individual consumers and businesses, positioning itself as a recognized local distributor of major technology brands. The website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and a CDN for performance. While the site is well-structured and mobile-optimized, it lacks some privacy compliance features such as cookie consent banners and explicit GDPR indicators. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and some security headers. Marketing relies on Facebook Pixel tracking. Overall, the domain registration and website content are consistent and trustworthy, supporting a credible business presence in Ecuador.

S

S.J. & G. Fazul Ellahie (Pvt) Limited

sjggroup.com

56

S.J. & G. Fazul Ellahie (Pvt) Limited, operating as SJG Group, is a well-established pharmaceutical manufacturer and distributor based in Pakistan with a legacy dating back to 1889. The company positions itself as a pioneer in the pharmaceutical industry, offering innovative healthcare solutions and maintaining a strong commitment to quality and sustainability. Their market presence extends internationally, supported by a robust logistics and supply chain infrastructure. The website reflects a professional digital presence built on WordPress with modern design elements and clear branding. Technically, the website leverages popular CMS and page builder technologies such as WordPress and Elementor, alongside Slider Revolution for dynamic content. The site is hosted with Cloudflare DNS services and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices appear solid with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks published privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms, which are important for compliance and trust. Security headers could be enhanced to improve protection against common web threats. No WAF or blocking mechanisms interfere with content access. Overall, the website is credible and professional but would benefit from improved privacy compliance and security transparency to align with best practices and regulatory requirements.

U

Universidade Federal do Rio de Janeiro

ufrj.br

58

Universidade Federal do Rio de Janeiro (UFRJ) is a prestigious public university in Brazil with a long history dating back to the 19th century. It is recognized as one of the top universities in Brazil and Latin America, offering a wide range of undergraduate and graduate programs, as well as extensive research and extension activities. The university maintains strong international partnerships and exchange programs, targeting students, researchers, and academic collaborators worldwide. The website reflects a professional academic institution with clear branding and comprehensive content about its offerings and history. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Analytics for tracking. It incorporates accessibility features such as the VLibras widget for sign language translation. The site is mobile-optimized and performs moderately well, with good SEO and accessibility standards. However, there is room for improvement in security headers and explicit privacy and cookie policies. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data. WHOIS data is transparent and consistent with the university's identity, enhancing trustworthiness. Incident response contacts are provided in WHOIS, but the website lacks a dedicated security policy or vulnerability disclosure page. Overall, the security posture is solid but could be enhanced with additional headers and policies. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include publishing clear privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

H

KEMBANGTOTO - Bandar Resmi Situs Toto 4D Penyedia Slot Togel Toto Hiburan Menarik

hog-roast.com

48

The website hog-roast.com operates as an online gambling platform branded as Kembangtoto, offering toto 4D and slot togel games primarily targeting Indonesian players. The business claims a long history dating back to 2003, positioning itself as a trusted bandar (agent) in the gambling niche. The site integrates modern tracking and analytics technologies primarily from Alibaba and Lazada ecosystems, indicating a moderate level of digital maturity. However, the website lacks critical compliance elements such as privacy and cookie policies, terms of service, and visible contact information, which undermines its credibility and user trust. Security posture is weak with no visible security headers or DNSSEC enabled, and no HTTPS enforcement details were found in the provided data. The domain is well aged and registered with GoDaddy, which supports legitimacy but lacks transparency due to missing registrant details. Overall, the site presents moderate business viability but requires significant improvements in compliance, security, and transparency to enhance trust and reduce risk.

S

Sociedade de Pediatria de São Paulo - SPSP

spsp.org.br

56

Sociedade de Pediatria de São Paulo (SPSP) is a well-established non-profit professional association serving pediatricians and healthcare professionals in São Paulo, Brazil. It operates as the pediatric department of the Associação Paulista de Medicina (APM) and is affiliated with the Sociedade Brasileira de Pediatria (SBP). The website provides educational resources, event information, publications, and membership services, targeting medical professionals and members of the pediatric community. The organization maintains a credible market position as a regional leader in pediatric healthcare education and advocacy. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized, SEO-friendly, and integrates multiple Google tracking and analytics tools. Performance is moderate, with good design quality and user experience. Privacy and cookie policies are present, though GDPR compliance is basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit advanced security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or malicious content were detected. The presence of multiple tracking scripts suggests moderate user tracking, which could be improved for privacy compliance. Overall, SPSP's website is professional, trustworthy, and serves its audience well, with room for improvement in security policies and privacy transparency to enhance user trust and compliance.

The website safefoodaustralia.com.au currently serves a 404 Not Found error page, indicating that the site content is inaccessible or not configured. There is no visible business information, metadata, or structured data to analyze. The domain is registered through a reputable registrar, Tucows (Australia) Pty Ltd trading as OpenSRS, with standard domain status prohibitions but lacks DNSSEC. The absence of website content and policies severely limits the ability to assess the business, technical infrastructure, or security posture. No security headers or SSL configuration details are available, and no contact or compliance information is present. Overall, the site appears inactive or improperly maintained, resulting in a low trust and credibility score.

U

UK Wing Chun Assoc.

ukwingchun.com

49

The UK Wing Chun Association operates as a small, specialized martial arts organization focused on Wing Chun Kung Fu training and community building within the United Kingdom. Founded in 1985 by Master James Sinclair, it holds a respected position in the martial arts community and offers classes, instructor resources, and merchandise through its website. The digital presence is built on a modern WordPress platform utilizing WooCommerce for e-commerce and Elementor for design, indicating a moderate level of digital maturity. The website is well-structured, mobile-optimized, and integrates social media and payment processing via PayPal, supporting a seamless user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and employs Facebook Pixel for marketing and analytics. However, the absence of explicit security headers and a visible privacy policy or terms of service page indicates room for improvement in compliance and security posture. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and trustworthiness, despite the professional appearance and established business history claimed on the site. Overall, the website presents a professional and trustworthy front for its target audience but should address privacy compliance and domain registration transparency to enhance trust and security. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and verifying domain registration details to align with best practices and regulatory requirements.

A

ARO Inc.

aro.ca

46

ARO Inc. is a Canadian accounts receivable management company established in 1993, providing debt collection and payment solutions primarily to Canadian consumers and businesses. The company maintains a professional online presence with clear contact information and multiple office locations, positioning itself as a reliable service provider in the finance sector. The website is built using modern web technologies including Vue.js and Google Fonts, offering a responsive and user-friendly experience. However, the site lacks key compliance documents such as privacy and cookie policies, which are critical for regulatory adherence and user trust. Security posture is generally good with HTTPS enforced, but could be improved by enabling DNSSEC and adding security headers. No incident response or vulnerability disclosure information is published, indicating room for maturity in security governance. Overall, the domain registration is consistent with the business claims, supporting the legitimacy of the company. Strategic improvements in privacy compliance and security transparency would enhance trust and reduce risk.

K

Kichwa.net

kichwa.net

59

Kichwa.net is a small educational website dedicated to providing free, self-directed learning materials focused on the Kichwa language and culture. It offers online courses, dictionaries, grammar guides, and cultural articles primarily targeting Spanish-speaking learners interested in indigenous Andean languages. The website is built on WordPress with common SEO and contact plugins, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and social media presence suggest a legitimate educational initiative. Overall, the site is functional, trustworthy for educational purposes, but would benefit from enhanced privacy compliance and security hardening.

A

Axxis

axxisconsulting.com.mx

48

Axxis is a Mexico-based technology consulting firm specializing in business process management, robotic process automation, and digital transformation solutions. Established in 2004, the company positions itself as a leader in intelligent process automation, serving medium to large enterprises with services including BPM, RPA, cloud optimization, and digital marketing consulting. The website reflects a mature digital presence built on WordPress with modern plugins and a professional design. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled, but could benefit from enhanced security headers and published incident response policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

R

Russell Certified Home Inspections

rchi.ca

58

Russell Certified Home Inspections is a small, professional home inspection service provider based in Kemptville, Ontario, Canada. The company offers a comprehensive range of inspection services including pre-purchase, new home warranty, WETT, BGRS, maintenance inspections, thermal imaging, and drone services. Led by Lucas Russell, an InterNACHI certified master inspector with over 10 years of experience, the business positions itself as a market leader in the local real estate inspection sector. The website reflects a professional image with detailed service descriptions and strong customer testimonials, supporting its credibility and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, Owl Carousel, and Google Maps integration. SEO is enhanced by the Yoast SEO plugin and structured data markup. The site is mobile optimized and provides a good user experience. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to strengthen security posture. Security-wise, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers. There is no visible privacy policy or cookie consent mechanism, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure information are absent, indicating room for improvement in security transparency and readiness. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure policy.

Wholesale 4 Inc. operates an e-commerce platform specializing in residential and commercial hardware products, locksmith supplies, and specialty locks. The company offers a broad catalog of hardware items from multiple well-known brands, targeting hardware retailers, locksmiths, and commercial and residential customers. The business model is primarily retail and wholesale via an online store, with an established domain since 2003 indicating a mature presence in the hardware retail sector. The website is built on WordPress with WooCommerce, leveraging popular plugins and technologies such as WPBakery Page Builder and Slider Revolution to deliver a functional and visually consistent user experience. Mobile optimization and navigation are good, supporting usability across devices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the business to regulatory risks. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy practices.

Т

Тіса меблі

tisa-mebli.com

55

The website 'Тіса меблі' represents a Ukrainian furniture manufacturing company established in 2003, offering a broad range of furniture products including beds, cabinets, tables, and children's furniture. The site serves as an online catalog and sales platform, targeting general consumers seeking quality and affordable furniture. Technically, the site is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, hosted by Hosting Ukraine LLC. The website is accessible, mobile-optimized, and professionally designed, though performance is moderate. From a security perspective, the site uses HTTPS but lacks advanced security headers and policies such as privacy and cookie notices, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The WHOIS data indicates a consistent and legitimate domain registration with no privacy protection, aligning with the business claims and history. Overall, the website demonstrates a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

I

Indian Association of Preventive and Social Medicine

iapsm.org

43

The Indian Association of Preventive and Social Medicine (IAPSM) is a well-established non-profit professional organization founded in 1974, focused on advancing public health in India through education, research, advocacy, and community medicine programs. The website serves as a portal for members and the public to access information about events, publications, membership, and educational resources. The organization targets healthcare professionals, epidemiologists, and medical students in India, positioning itself as a key player in the public health sector. Technically, the website employs legacy JavaScript libraries such as jQuery 1.12.4 and plugins like bxSlider and jcarousel for UI components. Hosting appears to be via a shared hosting provider linked to PublicDomainRegistry.com. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. SEO and accessibility features are basic, with room for improvement. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas of concern. There is no explicit HTTPS enforcement information available, and no privacy or cookie policies are present, indicating compliance gaps. The domain registration is consistent and legitimate, with a long registration period and transfer protections in place. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and modernization of its technical stack to improve performance, security, and user trust.

K

KONSEPSI

konsepsi.org

50

KONSEPSI is a non-profit consortium established in 2001 in Mataram, Nusa Tenggara Barat, Indonesia, focusing on social transformation, disaster risk reduction, and climate change adaptation. The organization targets vulnerable rural and urban households to build resilience through community-based programs. The website serves as a platform to disseminate information, publications, and program details to stakeholders and the public. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, hosted by HOSTINGER and utilizing Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

C

Centro de Administraciones Tributarias Subnacionales (CeATS)

ceats.org

44

Centro de Administraciones Tributarias Subnacionales (CeATS) is a well-established non-profit organization based in Argentina, focused on subnational tax administration collaboration, training, and research. The website reflects a professional presence with clear navigation, relevant content, and active engagement through events and educational programs. The organization partners with universities and government tax agencies, reinforcing its credibility and market position in the government and education sectors. Technically, the website uses a modern but standard technology stack including Bootstrap, jQuery, and various carousel and slider libraries. Hosting is stable with a reputable registrar, and the site is mobile optimized with moderate performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

C

Castorani

castorani.it

49

Castorani is a small Italian wine producer and retailer with a well-established online presence since 2002. The website offers e-commerce capabilities for purchasing wines, along with hospitality services such as tastings and vineyard tours. The company targets wine enthusiasts and tourists interested in authentic Italian wine experiences. Technically, the site is built on PrestaShop, uses modern web technologies, and integrates Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

C

Camping de Rozenhof

campingrozenhof.com

49

Camping de Rozenhof is a family-oriented camping and rental business located in Zeeland, Netherlands, offering various camping pitches and rental accommodations such as chalets and houses. The website targets families and beach lovers seeking a tranquil vacation experience. The business operates a small-scale hospitality model with a regional market focus. Technically, the website is built on Joomla CMS with modern JavaScript libraries including jQuery, Bootstrap, and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found, indicating compliance gaps. Suspicious external links embedded in the HTML may pose reputational risks. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

O

Outlet das Tintas

outletdastintas.com.br

59

Outlet das Tintas is a Brazilian retail network specializing in paint products, primarily offering Tintas Coral directly from the factory with special discounts. The company operates a multi-location franchise model with city-specific subdomains, facilitating easy ordering via Whatsapp and rapid delivery. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Cookie Law Info to enhance SEO and privacy compliance. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the site presents a professional and trustworthy retail presence in the Brazilian paint market.

The domain searchranktraffic.live currently serves only a 404 Not Found error page with no accessible content or metadata. There is no visible business information, contact details, or any form of user engagement elements. The WHOIS data for this domain is unavailable due to unsupported TLD, providing no registrar, creation, expiry, or registrant details. This lack of information severely limits the ability to assess the legitimacy or business operations behind the domain. Technically, the site is served by nginx 1.24.0 but lacks HTTPS and security headers, indicating a minimal or non-existent security posture. Overall, the domain appears inactive or improperly configured, posing a high risk for trust and usability.

The website socketapiupdates.com currently presents minimal content consisting solely of placeholder text ('Lorem Ipsum'), indicating it is either under development or abandoned. The domain WHOIS data is suspicious due to a future creation date (July 1, 2025), which is inconsistent with the current timeline and raises legitimacy concerns. No business information, contact details, or policies are present on the site, limiting its credibility and trustworthiness. Technically, the site lacks metadata, security headers, and advanced configurations, and no CMS or frameworks are detected. The absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. Overall, the site exhibits a very low security posture and poor digital maturity.

S

Square, Inc.

square.site

72

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants and sellers. The website reflects a mature, enterprise-level digital presence with a focus on usability and brand consistency. The technical infrastructure leverages modern web technologies and AWS hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though minor improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the site is professional and trustworthy, supporting Square's market position as a major player in financial technology services.

S

Simployer

infotjenester.no

65

Simployer is a Nordic HR software provider offering a comprehensive suite of HR management tools and services designed to streamline the entire employee lifecycle from recruitment to offboarding. With over 12,000 companies as customers, Simployer holds a strong market position in the Nordic region, supported by localized expertise and a broad product portfolio including HRM systems, employee surveys, legal expert support, salary mapping, learning solutions, and handbooks. The company operates under the Simployer Group umbrella with regional subsidiaries in Denmark, Poland, and Sweden. Technically, the website is built on the HubSpot CMS platform, leveraging modern frameworks like Bootstrap 5 and integrating multiple marketing and analytics tools such as Google Tag Manager, LinkedIn Insight, and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some legacy technologies like an older jQuery version are still in use. Performance is moderate, with a well-structured and professional design enhancing user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, alongside a consent management platform for GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The WHOIS data for the domain is notably absent, which raises some concerns about domain registration transparency, although the website content and external references strongly indicate a legitimate and established business. Overall, Simployer presents a professional and trustworthy digital presence with strong business credibility and compliance posture, but should address transparency in domain registration and enhance security policy disclosures to further strengthen trust and security assurance.

A

Agenda Logística

agendamaritima.cl

57

Agenda Logística is a specialized Chilean media outlet delivering news and analysis focused on logistics, maritime-port operations, international trade, and related sectors. The website serves industry professionals and stakeholders by providing timely articles, interviews, event calendars, and advertising opportunities. It is affiliated with Oceanspace Media, a parent company managing multiple maritime and logistics media brands, enhancing its market credibility and reach. Technically, the website employs modern JavaScript libraries, integrates third-party analytics and advertising networks, and uses HTTPS with a strict Content-Security-Policy header, reflecting a solid security foundation. However, the absence of visible privacy and cookie policies indicates gaps in privacy compliance. The WHOIS query for the domain failed due to an invalid query format, leaving domain registration details unknown, which slightly impacts trust assessment. Overall, the site is professional, content-rich, and well-branded, but could improve transparency and compliance aspects.

A

Altaposten

altaposten.no

59

Altaposten is a regional Norwegian media company serving the Finnmark area, including Alta, Kautokeino, and Loppa. It operates a digital news platform, a bi-weekly print newspaper, and local radio and TV stations. The company is part of Polaris Media, a significant media group in Norway. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and PolarisWeb CMS, and integrates multimedia content effectively. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit security policies. Overall, Altaposten presents a trustworthy and professional media outlet with good content quality and user experience.

A

Adresseavisen AS

adresseavisen.no

63

Adresseavisen AS operates the website adressa.no, serving as the largest regional newspaper for Midt-Norge and Trondheim. The company provides comprehensive news coverage including domestic, international, sports, and cultural content. It operates under the parent company Polaris Media, a publicly listed media group. The website supports digital subscriptions, advertising, and offers an e-paper edition, targeting a broad regional audience. Technically, the site employs modern JavaScript frameworks such as Vue.js and PolarisWeb, with integrations for video streaming and consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, GDPR compliance, and use of consent management platforms. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a professional, trustworthy media presence with good technical and security practices.