Security Directory

F

Formoid

formoid.com

54

Formoid is a specialized software company offering an easy-to-use drag-and-drop form builder for web developers and businesses. The product supports multiple platforms (Windows and Mac) and provides both desktop and hosted online form solutions with responsive, retina-ready designs. The company positions itself as a niche player focusing on design quality and ease of use in the form creation market. Technically, the website uses standard web technologies including HTML5, CSS3, jQuery, and PHP for backend form handling. DNS is managed via Cloudflare, but DNSSEC is not enabled. Security posture is moderate with HTTPS enabled and Google reCaptcha integration, but lacks advanced security headers and cookie consent mechanisms. The domain is well-established since 2013, consistent with the product maturity and business claims. Contact is primarily via email support, with no phone or social media presence detected. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

8

8b Website Builder

8b.com

57

8b Website Builder is a free and simple online platform that enables users, especially those without programming knowledge, to create fast, mobile-optimized, and Google-friendly websites quickly. The service emphasizes ease of use, modern design templates, and integration with technologies like Google AMP and PWA to enhance performance and user experience. The platform supports custom domains, SSL certificates, and site export features, positioning itself as a competitive player in the website builder market. Technically, the website leverages AMP technology, Bootstrap, jQuery, and is hosted behind Cloudflare, ensuring fast loading times and mobile responsiveness. Analytics tools such as Google Analytics and Google Tag Manager are used for user tracking and marketing insights. Security posture is solid with HTTPS enforced and domain protection statuses, though some improvements like enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partially addressed with a privacy policy and terms of service available, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche.

G

Geant du web inc.

geantduweb.ca

46

Geant du web inc. is a Canadian web agency specializing in custom web design and intranet solutions for organizations and businesses. Established since 2005, the company positions itself as an experienced provider with a portfolio of hundreds of projects, targeting primarily small to medium-sized enterprises and organizations in Canada. Their key services include fully customized intranet and website development, emphasizing performance and tailored solutions. The website reflects a professional and consistent brand image with clear contact channels and social media presence. Technically, the website is built on Joomla! CMS, leveraging modern web technologies such as Bootstrap 4.6, jQuery, Google reCAPTCHA, and Google Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with some deferred loading and lazy loading techniques employed. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, which are positive indicators. However, it lacks DNSSEC, security headers, and published privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is provided, limiting transparency in security practices. Overall, the website and business demonstrate a solid and trustworthy presence with room to enhance privacy compliance and security posture. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

A

Association de Sécurité Civile du Québec (ASCQ)

ascq.org

44

The Association de Sécurité Civile du Québec (ASCQ) is a prominent non-profit organization dedicated to civil security and emergency preparedness in Quebec. It serves a diverse audience including practitioners, managers, professionals, volunteers, and risk generators. The ASCQ provides certifications, organizes training, webinars, and events, and disseminates best practices and information to enhance resilience across the province. The website reflects a well-established entity with a clear mission and strong community engagement. Technically, the website is built on WordPress using modern plugins such as Smart Slider 3, Contact Form 7, and Complianz GDPR for cookie consent management. The site is mobile-optimized, uses HTTPS, and integrates Google Analytics for visitor insights. While performance is moderate, the site maintains good SEO and accessibility standards. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable or privacy protected, which is typical for non-profit organizations and does not raise immediate concerns. Overall, the ASCQ website presents a professional, trustworthy, and compliant digital presence suitable for its sector. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

G

Gouvernement du Québec

quebec.ca

59

The website www.quebec.ca serves as the official digital portal for the Gouvernement du Québec, providing comprehensive access to government information and services across multiple sectors such as agriculture, culture, education, health, justice, and more. It targets residents, businesses, and organizations within Québec, positioning itself as a trusted and authoritative source for provincial government resources. The site is well-branded, professionally designed, and offers clear navigation primarily in French with English language options. Technically, the site is built on TYPO3 CMS and leverages modern web technologies including Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. The infrastructure supports good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms could be made. From a security perspective, the site enforces HTTPS, uses CAPTCHA for form protection, and provides a clear channel for vulnerability reporting. No critical vulnerabilities or exposed sensitive data were detected. The lack of publicly available WHOIS data is consistent with Canadian government domain privacy norms and does not detract from the site's legitimacy. Overall, the website demonstrates a strong security posture, high content quality, and solid privacy compliance, making it a reliable and professional government resource. Strategic recommendations include enhancing security headers, implementing a visible security.txt file, and improving cookie consent transparency to further strengthen trust and compliance.

S

State of Missouri

mo.gov

66

The website www.mo.gov serves as the official online portal for the State of Missouri, providing a comprehensive range of information and services to residents, businesses, government employees, and visitors. It functions as a centralized hub for accessing state agencies, online services such as tax filing and license renewals, public safety information, educational resources, and tourism guidance. The site is positioned as an authoritative government resource with a broad target audience encompassing various stakeholder groups within Missouri. Technically, the website is built on the WordPress CMS platform and utilizes common web technologies including jQuery, Google Fonts, RoyalSlider for interactive content, and Google Analytics for user tracking. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. The presence of HTTPS ensures secure communications, although the absence of certain security headers suggests room for improvement in hardening the site against common web threats. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a formal vulnerability disclosure policy or security incident response contact information. Privacy compliance is partially addressed with visible privacy and data policies, but no active cookie consent mechanism is implemented. The WHOIS data is incomplete, lacking registrar and registrant details, which is unusual but mitigated by the .gov domain status and the official nature of the site. Overall, the website presents a trustworthy and professional government portal with good content quality and user experience. Strategic recommendations include enhancing security headers, implementing cookie consent for privacy compliance, publishing vulnerability disclosure information, and improving accessibility features to meet modern standards.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.es

58

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturing company specializing in access technology and scaffolding solutions with over 125 years of tradition. The company operates internationally with multiple localized websites, including this Spanish version, targeting industrial and commercial customers requiring safe access systems. Their product portfolio includes standard and special aluminum solutions, safety services, and customer support. The website is professionally designed, content-rich, and consistent with the company's branding and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and jQuery. It integrates analytics and marketing tools including Matomo, Facebook Pixel, and Google Tag Manager, with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides clear navigation and multilingual support, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is unavailable due to query restrictions, but the website's professional presentation and contact information strongly indicate legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.sk

57

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access technology and occupational safety products with over 125 years of tradition. The company operates internationally with a strong brand presence and offers a broad portfolio of products and services including scaffolding, ladders, special aluminum solutions, and industrial safety training. Their website reflects a professional and consistent brand image targeting industrial and commercial customers requiring safe and innovative access solutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates analytics tools such as Matomo and Facebook Pixel, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and a published security policy are absent. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact information and multilingual support.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.ro

55

KRAUSE-Werk GmbH & Co. KG is a well-established manufacturer specializing in access technology and occupational safety products with over 125 years of tradition. The company operates internationally with a strong presence in Romania, offering innovative and high-quality solutions focused on safety, functionality, and ease of use. Their product portfolio includes access systems, scaffolding, special aluminum constructions, and safety consulting services. The website reflects a professional and consistent brand image, targeting industrial and commercial customers seeking reliable safety and access solutions. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics tools such as Matomo and Facebook Pixel, demonstrating digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit incident response policies are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting business credibility.

K

KRAUSE

krause-systems.pl

53

KRAUSE is a manufacturing company specializing in ladders, mobile scaffolding, platforms, and steps, targeting both individual users and professional customers. The company maintains a strong market position with multiple country-specific websites, indicating an international presence. Their website is built on TYPO3 CMS and incorporates modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Matomo for analytics. Privacy and compliance are well addressed with comprehensive privacy and cookie policies and GDPR-compliant consent mechanisms. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though some security headers could be improved. The absence of WHOIS data for the .pl domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, the website is professional, user-friendly, and trustworthy.

K

KRAUSE

krause-systems.hu

53

KRAUSE-Systems Hungary operates as a specialist manufacturer and supplier of equipment for working at heights, including ladders, scaffolding, and related safety technologies. The company targets industrial and professional users requiring safe and innovative solutions. The website reflects a mature digital presence with multiple language versions, indicating an international market approach. The business model focuses on manufacturing, sales, and value-added services such as training and inspections. The site content is professionally presented, with clear navigation and comprehensive legal documentation, supporting a trustworthy brand image. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel. It integrates Google Analytics, Matomo, and Google Tag Manager for analytics and marketing purposes, with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent updates but lacks explicit security headers like X-Frame-Options and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contacts and no security.txt file indicates room for improvement in transparency and readiness. Overall, the website scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. There are no critical issues or blocking mechanisms detected, making it a reliable and professional online presence for KRAUSE-Systems Hungary.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.bg

53

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access systems and scaffolding with over 125 years of tradition. The company operates internationally with localized websites, including this Bulgarian version, targeting industrial and commercial customers requiring safe and innovative access solutions. The website reflects a professional and consistent brand image, offering detailed product and service information, supported by a modern TYPO3 CMS infrastructure. The technical stack includes standard web technologies and analytics tools such as Matomo and Facebook Pixel, with a GDPR-compliant cookie consent mechanism in place. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.rs

55

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access technology and occupational safety products, with over 125 years of tradition. The company operates internationally, providing climbing systems, scaffolding, and safety services primarily targeting industrial and commercial customers. Their website, localized in Serbian, reflects a professional and consistent brand image with clear contact information and a comprehensive cookie consent mechanism, demonstrating compliance with GDPR regulations. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, and integrates analytics tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.

K

KRAUSE Systems

krause-systems.co.uk

52

KRAUSE Systems is a well-established manufacturer specializing in access technology and occupational safety products. The company offers a broad range of ladders, steps, scaffolds, and customized solutions targeting craftsmen, industry professionals, and general consumers. Their international presence is supported by multiple localized websites and comprehensive product and service information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site demonstrates good digital maturity with responsive design, clear navigation, and privacy compliance mechanisms including cookie consent. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness from a domain legitimacy perspective. Overall, the website is professional, secure, and compliant, representing a credible business entity.

R

Race Space Ltd

racespace.com

58

Race Space Ltd operates an online race event management platform targeting race directors and endurance athletes. The company offers a SaaS solution for race entry, event management, and registration technology, positioning itself as a niche technology provider in the endurance sports sector. The website branding is consistent and professional, with a clear focus on inspiring a new generation of athletes and supporting race organizers with growth tools like the Race Space Accelerator. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Bootstrap, alongside Facebook SDK and Google Tag Manager for marketing and analytics. The site is mobile-optimized with asynchronous script loading to enhance performance. However, some accessibility features could be improved, and explicit security headers are not detected in the HTML source. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, relying instead on a contact form. The absence of WHOIS data for the domain is a concern, as it suggests either privacy protection or a registration anomaly, which impacts trustworthiness. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and privacy compliance would enhance trust and security posture.

C

Computacenter

computacenter.com

81

Computacenter is a leading independent technology and services provider focused on delivering IT infrastructure, cloud, security, and managed services to large corporate and public sector clients. The company emphasizes sustainability, customer-centricity, and long-term value creation, supported by numerous industry awards and partnerships with major technology vendors. The website demonstrates a mature digital presence with modern technologies, responsive design, and rich content including customer stories and news updates. Security posture is strong with HTTPS and bot protection, though explicit security headers and policies are not evident in the provided data. Privacy compliance documentation such as privacy and cookie policies are not clearly found, which is a gap for regulatory adherence. WHOIS data is unavailable, possibly due to privacy or registry restrictions, but the website's professional presentation and trust signals support legitimacy. Overall, the site is well-structured and trustworthy, serving an enterprise audience effectively.

citeq is a municipal IT service provider for the city of Münster and surrounding public sector entities. The organization offers comprehensive IT services including consulting, system operation, application development, and network infrastructure support. Positioned as a key digitalization partner for local government and public institutions, citeq supports a broad range of clients including schools and neighboring municipalities. The website reflects a professional and consistent brand image aligned with public sector standards. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, citeq demonstrates a mature digital presence suitable for a government IT provider.

B

brain-SCC GmbH

brain-scc.de

56

brain-SCC GmbH is a German company specializing in digital administration and e-government solutions, targeting public sector entities and administrations. Their key offerings include the VOIS-Vorgangsraum software component and the EfA - Digitale Baugenehmigung service, which streamline administrative processes such as building permits. The company holds recognized certifications like ISO9001:2015 and TSA, indicating a commitment to quality and security. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence.

U

University of California, Los Angeles

ucla.edu

64

The University of California, Los Angeles (UCLA) is a prestigious public university recognized for its excellence in education and research. The website serves as a comprehensive portal for students, faculty, alumni, and the public, offering detailed information on academics, research, campus life, events, and news. UCLA holds a top market position as a leading public university in the United States, supported by strong branding and trust indicators such as Nobel laureates and extensive social media presence. Technically, the website employs a modern technology stack including Google Custom Search, various analytics and tracking tools (Google Tag Manager, Facebook Pixel, TikTok Analytics, Twitter Tag), and popular JavaScript libraries like jQuery and FancyBox. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate likely due to the rich content and third-party integrations. From a security perspective, the site uses HTTPS with good SSL configuration and no visible exposed sensitive data. However, security headers are not explicitly detected, and no dedicated security policy or incident response contacts are published. The WHOIS data is unavailable, which is common for .edu domains, but the site’s legitimacy is supported by consistent branding and institutional content. Overall, UCLA’s website demonstrates a mature digital presence with strong business credibility and privacy compliance. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

U

University of California San Diego

ucsd.edu

52

University of California San Diego (UCSD) is a leading public research university located in La Jolla, California. The website serves a diverse audience including prospective and current students, faculty, researchers, and the general public. UCSD offers a broad range of academic programs, research initiatives, and student life services, positioning itself as a top-tier institution with a strong emphasis on innovation and community engagement. The site reflects a mature digital presence with comprehensive content and consistent branding aligned with the university's mission and values. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely on university-managed infrastructure. The use of Cascade CMS is inferred, supporting content management needs. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs standard security headers, though DNSSEC is not enabled, representing a minor security gap. No explicit security policy or incident response contacts are published, which could be improved. The site uses multiple third-party scripts for analytics and marketing, with moderate user tracking levels. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, UCSD's website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for an enterprise educational institution. Strategic improvements in privacy compliance and domain security would enhance its security posture and user trust.

E

Elevar

getelevar.com

69

Elevar is a technology company specializing in conversion tracking and analytics solutions for eCommerce brands, particularly those using Shopify. The company offers a SaaS platform that enables marketers and analysts to deploy data layers, connect to over 40 marketing channels, and ensure accurate conversion tracking with server-side tagging. Positioned as a trusted solution by over 6,500 direct-to-consumer (D2C) brands, Elevar focuses on improving marketing performance through enhanced data accuracy and integration capabilities. Technically, the website is built on WordPress with Visual Composer and integrates modern web technologies including Google Tag Manager, HubSpot analytics, and Cloudflare DNS services. The platform demonstrates good mobile optimization and SEO practices, although performance is moderate. Security measures include HTTPS, invisible Google reCAPTCHA, and domain status protections, but could be enhanced by enabling DNSSEC and implementing additional security headers. From a security and compliance perspective, the site lacks explicit privacy and cookie policies, as well as incident response and security policy disclosures. No contact emails or phone numbers are directly provided, which may impact user trust and compliance with privacy regulations. The domain WHOIS data is consistent with the business claims, showing a mature registration since 2016 without privacy protection, indicating transparency. Overall, Elevar presents a professional and credible online presence with strong business credibility and technical infrastructure. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

M

Mention Me

mention-me.com

74

Mention Me is a UK-based AI-powered SaaS platform specializing in referral and micro-influencer marketing to help businesses acquire high-quality customers and maximize customer lifetime value. The company positions itself as a leader in AI-first customer acquisition solutions, targeting marketers and enterprises seeking organic growth through trusted customer advocacy. The website is professionally designed, mobile-optimized, and built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and Apollo tracking. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional web presence and business focus. Overall, the site demonstrates a mature digital infrastructure and a solid security baseline, suitable for its business model and audience.

Ordersify is a small, Vietnam-based company specializing in developing Shopify apps focused on order automation and logistics. Their product suite includes tools such as Order Printer, Automation Tags, Product Alerts, and others, serving over 12,000 merchants globally. The company positions itself as a niche SaaS provider within the e-commerce ecosystem, leveraging Shopify's platform to deliver value-added services that help merchants automate order management and increase sales through notifications and integrations with marketing platforms. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various analytics and customer support tools like Google Analytics, Hotjar, and HelpScout Beacon. The site is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic with a privacy policy and cookie consent modal present, but no advanced GDPR indicators or data protection officer information. Overall, the website is professional, well-branded, and trustworthy with clear business information and social media presence. Recommendations include enhancing DNS security, publishing security policies, and improving privacy compliance transparency.

G

Gifyu

gifyu.com

65

Gifyu is a niche technology company providing free, fast, and anonymous image hosting services. Founded in 2014, it targets general internet users who need quick image uploads without account creation. The platform offers additional features such as video to GIF conversion and premium plans for enhanced capabilities. The website is built on the Chevereto CMS platform and leverages Cloudflare for DNS and registrar services, ensuring reliable hosting and domain management. The technical infrastructure is modern and optimized for performance and mobile use, with integration of popular libraries like jQuery and Font Awesome. Security posture is adequate with HTTPS enforced and reCAPTCHA enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy and cookie consent banner present, but no detailed GDPR compliance indicators or incident response information. Overall, the site is accessible, professional, and safe for general audiences, with moderate user tracking via Google Analytics.

T

Texas Department of Licensing and Regulation

texaslottery.com

62

The Texas Lottery website serves as the official online presence for the Texas Department of Licensing and Regulation's lottery operations. It provides comprehensive information about various lottery games, including Powerball, Mega Millions, Lotto Texas, and scratch tickets, targeting adult residents of Texas. The site supports responsible gambling initiatives and offers resources for players, retailers, and the media. The website is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence for a government entity. Technically, the site employs modern web technologies such as jQuery and the Foundation CSS framework, with content management facilitated by OpenCMS. While the site demonstrates good accessibility and SEO practices, there is room for improvement in security headers and explicit cookie consent mechanisms. The absence of WHOIS data is notable and should be investigated to ensure domain registration transparency. From a security perspective, the site uses HTTPS and sanitizes user inputs on forms, but lacks visible security policies, incident response contacts, and vulnerability disclosure programs. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the site presents a moderate to strong security posture suitable for a government-operated lottery platform. Strategically, the Texas Lottery website is a trusted source for lottery information in Texas, with strong branding and official government backing. However, enhancing transparency in domain registration and security policies would further strengthen trust and compliance.

R

RevenueHunt

revenuehunt.com

60

RevenueHunt is a specialized SaaS provider offering product recommendation quizzes tailored for eCommerce merchants across platforms like Shopify, WooCommerce, and BigCommerce. The company has established a solid market presence with over 15,000 active shops and significant revenue generation for its clients. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern web technologies including WordPress CMS, Bootstrap framework, and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and domain registration consistent with business claims, though improvements are needed in security headers and published policies. Privacy compliance is a notable gap due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned but should address compliance and security best practices to enhance risk management.

S

Schramm GmbH

schramm-gmbh.de

55

Schramm GmbH is a medium-sized German manufacturing company specializing in control cabinet systems, explosion-proof heating systems, temperature measurement technology, and sheet metal processing. Founded in 1947, it serves industrial sectors such as oil, gas, chemical, machinery, medical, pharmaceutical, transport, and steel industries. The company maintains a strong market position as a certified supplier with a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the company's credibility and business operations.

H

Hartmann Holzbau GmbH & Co. KG

hartmann-holzbau-hessen.de

48

Hartmann Holzbau GmbH & Co. KG is a well-established family-owned company specializing in ecological timber construction with over 100 years of tradition in the Hessen region of Germany. The company offers a range of services including house building, timber construction, renovations, and engineering timber works, focusing on sustainable and regional building practices. Their website reflects a professional and consistent brand image with clear contact information and multiple certifications that reinforce their market credibility. Technically, the website is built on TYPO3 CMS with modern front-end libraries such as jQuery, Owl Carousel, and Bootstrap, providing a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although some accessibility features could be improved. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no visible incident response or vulnerability disclosure information, which could be improved to strengthen trust and preparedness. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security policies would further enhance their security posture and regulatory adherence.

A

Animals' Angels

animals-angels.de

53

Animals' Angels is a German-based non-profit organization dedicated to the welfare of farmed animals, with a particular focus on protecting animals during transport. The organization operates internationally, advocating for improved animal welfare laws and raising public awareness through reports, publications, and monitoring activities. Their website is professionally designed using TYPO3 CMS, featuring clear navigation, multilingual support, and integration with privacy compliance tools such as Usercentrics. The organization maintains active social media channels and provides transparent contact information, enhancing trust and engagement with supporters. Technically, the website employs modern frameworks and analytics tools like Matomo, ensuring good performance and privacy-conscious tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, Animals' Angels presents a credible, well-maintained digital presence aligned with its mission and audience.

K

KRAUSE-Systems GmbH

krause-systems.de

58

KRAUSE-Systems GmbH is a well-established German manufacturer specializing in climbing technology and related occupational safety equipment. The company offers a broad portfolio of products including ladders, steps, scaffolding, and safety gear, complemented by services such as training seminars, product testing, and customer support. Their website reflects a strong market position with comprehensive product information and a professional presentation targeting both industrial professionals and private users. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and includes a robust cookie consent mechanism compliant with GDPR requirements. Hosting is managed through a reputable provider, and performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and integrates consent management for tracking technologies such as Facebook Pixel and Google Tag Manager. However, explicit security policies and incident response contacts are not published, and some security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the provided content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic improvements in security policy transparency and header implementation could further enhance their security posture.

H

Home for Kids e.V.

homeforkids.de

49

Home for Kids e.V. is a German non-profit organization dedicated to supporting children and adolescents who have experienced psychological trauma. The organization funds and promotes psychosocial care projects and initiatives aimed at helping young people recover and lead normal lives. Their website is professionally designed, multilingual, and optimized for SEO, featuring clear navigation and a donation system integrated with PayPal. The organization maintains a transparent presence with comprehensive contact information and social media links. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and privacy compliance via Usercentrics. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and credible non-profit entity with a clear mission and effective digital presence.

P

PHILIPPI Reisen

philippi-reisen.de

48

PHILIPPI Reisen is a German travel company specializing in bus tours, flights, cruises, and various travel experiences. The company operates multiple physical offices and offers a broad range of travel services to a general audience. Their website is built on TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. From a security perspective, the website enforces HTTPS and employs privacy-respecting analytics, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website content and hosting provider, supporting legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, PHILIPPI Reisen demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic improvements could include publishing a formal security policy and enhancing security headers to further strengthen their security posture.

H

Howard Development & Consulting, LLC

understrap.com

60

Understrap is a well-established open-source WordPress theme framework combining the Underscores starter theme with Bootstrap 4 for front-end styling. Maintained by Howard Development & Consulting, a small but experienced web development firm, Understrap targets custom WordPress developers and agencies seeking a flexible, mobile-first theme foundation. The website demonstrates strong market positioning with over 100,000 users and endorsements from notable organizations. Technically, the site is built on WordPress with modern technologies including jQuery, Google Fonts, and Autoptimize for performance optimization. Hosting and DNS are managed via Cloudflare, ensuring good availability and security. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or detailed GDPR indicators. Contact information is minimal, with no direct emails or phone numbers found on the main page. Overall, the site is professional, trustworthy, and well-optimized for its audience.

P

Parallel Lifestyle

parallellifestyle.com

62

Parallel Lifestyle is a social enterprise and disability lifestyle brand focused on promoting disability inclusion and 'no limits living'. The organization hosts award-winning events such as Parallel Windsor and Purple Sock Day, aiming to support disabled, D/deaf, and neurodiverse individuals to live fully integrated lives in mainstream society. Their market position is that of a niche, socially driven entity with strong community and partner engagement. Technically, the website is built on Webflow with modern technologies including Google Tag Manager, jQuery, and accessibility tools like UserWay. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit security policies. WHOIS data is unavailable, which reduces domain transparency and trust from a registration perspective. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could improve in security policy transparency and domain registration clarity.

F

Foremost Partners

thenewamsterdamgroup.com

51

Foremost Partners operates as a specialized institutional investment firm focusing on private markets including private equity, private credit, and real assets. The company targets institutional investors seeking tailored, enduring investment partnerships. The website reflects a professional and consistent brand presence with clear business descriptions and SEO optimization, though it lacks explicit contact details and formal privacy or terms of service pages. Technically, the site is built on WordPress using the Avada theme, leveraging common analytics tools such as Google Analytics and Burst Statistics. The infrastructure is moderate in performance with good mobile optimization but could benefit from enhanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or GDPR compliance statements. Overall, the site is legitimate and professional but could improve transparency and security documentation.

C

Climate Angels

climateangels.in

61

Climate Angels is a SEBI-registered investment fund specializing in early-stage climate technology startups in India. The website presents a professional and well-structured platform targeting investors and founders interested in sustainable innovation. The technical infrastructure is based on WordPress with Elementor, leveraging common JavaScript libraries and ensuring mobile responsiveness and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies, representing areas for improvement. Overall, the site is trustworthy and aligns well with its business objectives, though privacy and compliance documentation should be enhanced.

Nishith Desai Associates is an established international law firm specializing in legal, tax, regulatory, and cross-border advisory services with offices in multiple global locations including India, Singapore, Munich, and Silicon Valley. The firm targets corporate clients and international businesses, positioning itself as a research-based and strategic legal advisor. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a traditional tech stack including jQuery and Google Analytics, with moderate performance and basic mobile optimization. Hosting and domain registration are stable and consistent with the firm's long history. However, the site lacks advanced security headers and DNSSEC, which are recommended for improved security posture. From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks explicit privacy, cookie, and security policies. There is no visible incident response or vulnerability disclosure information. Tracking scripts are present, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the website is trustworthy and professional but would benefit from enhanced security configurations and privacy compliance improvements to align with modern standards and regulations.

S

SME Futures

smefutures.com

69

SMEFutures.com is an Indian niche media website dedicated to providing news, insights, and updates about the Small and Medium Enterprises (SME) and Micro, Small and Medium Enterprises (MSME) sectors in India. The website offers a variety of content types including news articles, opinion pieces, interviews, videos, and web stories, targeting entrepreneurs, business professionals, and stakeholders in the Indian SME ecosystem. The business operates primarily as an online media publication with a focus on SME-related developments and policy updates. Technically, the website is built on WordPress CMS using Elementor for page building and Yoast SEO for search engine optimization. It employs modern web technologies including jQuery and integrates Google Adsense for monetization and Google Analytics for visitor tracking. The domain is registered with GoDaddy.com, LLC since 2016 and uses Cloudflare for DNS services, indicating a stable and mature digital infrastructure. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain locking statuses to prevent unauthorized changes. However, it lacks DNSSEC, security.txt, and explicit privacy or cookie policies, which are important for compliance and security transparency. The site collects user data via Google Analytics and FingerprintJS but does not provide clear privacy or cookie consent mechanisms, indicating gaps in privacy compliance. Overall, SMEFutures.com presents a professional and content-rich platform with moderate technical and security maturity. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, enable DNSSEC, and publish vulnerability disclosure information. These improvements will strengthen its security posture and regulatory adherence, supporting its role as a credible SME news source in India.

W

WOW Slider

wowslider.com

56

WOW Slider is a specialized software provider offering a jQuery-based image slider and slideshow creation tool that emphasizes ease of use, customization, and compatibility across devices and browsers. The company targets web developers, designers, and non-technical users who need visually appealing and responsive sliders without coding. Their product supports integration with popular CMS platforms like WordPress and Joomla and includes features such as video slides, drag-and-drop creation, and FTP publishing. Technically, the website is built on modern web standards including HTML5, CSS3, and JavaScript with jQuery, and is hosted with Cloudflare DNS services. The site is fast, mobile-optimized, and SEO-friendly, with a professional design and clear navigation. Security posture is moderate; HTTPS is enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is high due to long domain age, consistent WHOIS data, and clear product offerings. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

L

La Grande Secousse du Québec

grandesecousse.org

51

La Grande Secousse du Québec is a non-profit organization dedicated to earthquake preparedness and education in Quebec. It organizes the Great ShakeOut, the largest earthquake simulation exercise in the world, engaging tens of thousands of participants annually. The website serves as an information hub for registration, educational resources, news, and events related to earthquake safety. The organization partners with government bodies and civil security associations to promote resilience and preparedness among Quebec residents, schools, and organizations. Technically, the website is built on Joomla CMS with modern JavaScript modules, Bootstrap 5, and uses CDN-hosted resources for fonts and scripts. It is hosted by WHC Online Solutions Inc. and employs HTTPS with a valid SSL certificate. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing and DNSSEC is not enabled, representing minor security gaps. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The domain registration is consistent with the organization's history and shows no suspicious patterns. Overall, the site demonstrates a good security posture suitable for its public safety mission. The overall risk is low, with recommendations to enhance DNS security, implement security headers, and publish security and incident response policies to further strengthen trust and compliance.

C

Central United States Earthquake Consortium

cusec.org

50

The Central United States Earthquake Consortium (CUSEC) operates as a regional non-profit partnership focused on earthquake risk mitigation and disaster preparedness in the central United States. The website serves as an information hub offering earthquake safety education, risk data, emergency management tools, and event information. It targets government agencies, emergency responders, educators, and the general public within the region. The organization is well-established, with a domain registered since 1997, and maintains partnerships with federal agencies such as FEMA and USGS. Technically, the website is built on WordPress using the Genesis Framework, enhanced with UIkit and Widgetkit for UI components. It employs modern web technologies including jQuery and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting and domain registration are consistent with the organization's profile. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and HTTP security headers, which are recommended to enhance security posture. There is no cookie consent mechanism despite the use of tracking scripts, which may impact privacy compliance. The site publishes comprehensive privacy, terms, and security policies, indicating a mature approach to governance. Overall, the website is trustworthy, professional, and serves its mission effectively. Strategic improvements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security and compliance stance.

E

Earthquake Engineering Research Institute

eeri.org

57

The Earthquake Engineering Research Institute (EERI) is a well-established non-profit organization dedicated to advancing earthquake resilience through multidisciplinary professional collaboration. The organization offers a variety of services including research publications, educational resources, professional development, and advocacy efforts. Their market position is strong as a leader in earthquake investigations and risk reduction information dissemination, targeting professionals and organizations in the earthquake engineering sector. The website reflects a mature digital presence with a membership portal and active social media engagement. Technically, the website is built on Joomla CMS with modern frameworks such as Helix Ultimate and Bootstrap 5, incorporating common libraries like jQuery and Font Awesome. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Hosting and domain registration are consistent with a legitimate, long-standing organization. From a security perspective, the site enforces HTTPS and uses domain status locks to protect domain integrity. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved with additional best practices. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for GDPR compliance, and publishing security policies to enhance trust and compliance.

G

Gizmodo

gizmodo.com

66

Gizmodo is a well-established digital media company specializing in technology news, reviews, science, and entertainment content. The website targets technology enthusiasts and the general public interested in the latest tech trends. It operates on an advertising-supported business model and maintains a strong market position as a reputable source of tech information. The site is built on WordPress CMS and leverages modern web technologies including Google Tag Manager, DoubleClick ads, and various ad SDKs, indicating a mature digital infrastructure. The hosting and DNS services are provided by OVH sas and Cloudflare respectively, ensuring reliable performance and security. Security posture is generally good with HTTPS enforced and domain registration protections in place, although DNSSEC is not enabled. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which is a notable gap for GDPR and other regulations. The site uses extensive third-party advertising and tracking services, which may impact user privacy. Overall, the website is professional, trustworthy, and content-rich, but could improve transparency and compliance by publishing privacy and security policies.

G

Governikus GmbH & Co. KG

governikus.de

68

Governikus GmbH & Co. KG is a medium-sized German company specializing in IT security software solutions for digital administration and e-government. Founded in 1999, the company provides secure identity management, communication, and data solutions primarily targeting public sector entities such as government agencies and the judiciary. Their market position is strong within the German public sector, supported by partnerships with notable organizations like Bundesdruckerei and Bank-Verlag. The website reflects a professional and comprehensive presentation of their services and products, emphasizing digital transformation and security in public administration. Technically, the website is built on WordPress with modern plugins such as WooCommerce for e-commerce, Yoast SEO for search optimization, and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. No critical vulnerabilities or suspicious activities were detected in the website content or WHOIS data. Overall, Governikus demonstrates a mature digital presence with a focus on compliance and security, suitable for its government clientele. The absence of direct contact emails and phone numbers on the main site suggests a controlled communication approach, likely via contact forms. The domain registration data aligns well with the company's history and identity, reinforcing legitimacy. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

A

A1 Telekom Austria AG

a1.net

74

A1.net is the official website of A1 Telekom Austria AG, a leading telecommunications provider in Austria offering a comprehensive range of services including mobile telephony, fixed-line telephony, internet, and TV. The website targets both residential and business customers, providing detailed product offerings, service options, and customer support resources. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent management. The site demonstrates good performance and accessibility standards, with proper SEO and metadata implementation. Security best practices are observed, including HTTPS enforcement and security headers, although no explicit public security policy or incident response contact is prominently available. From a security perspective, the site shows a strong posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR requirements. However, the absence of WHOIS registration data for the domain www.a1.net is a notable anomaly that slightly reduces domain trustworthiness, though the website content and branding strongly support legitimacy. Overall, A1.net presents a professional, secure, and user-friendly platform for telecommunications services in Austria. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response contact visibility, and maintaining regular security audits to sustain and improve the security posture.

B

Bundesverband Deutscher Omnibusunternehmer e.V.

diebusunternehmen.de

51

The website 'Die deutschen Busunternehmen' is a professional platform operated by the Bundesverband Deutscher Omnibusunternehmer e.V., focused on recruitment and information dissemination for medium-sized bus companies across Germany. It targets prospective bus drivers, employers, and trainees, providing job listings, training information, and regional employer searches. The platform holds a solid market position as a representative voice for the German bus industry, founded around 2020. Technically, the site is built on WordPress with modern libraries such as jQuery and Plyr for video playback, and employs Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, with moderate tracking via Google Tag Manager and TikTok Pixel. No blocking or WAF interference was detected, allowing full content access.

W

WBO

tag-des-busses.de

33

The website 'Tag des Busses' is an event-focused platform organized by WBO, dedicated to promoting bus mobility and careers in the bus transportation sector in Germany. It provides event listings and opportunities for the public to engage with the bus industry, including hands-on experiences such as sitting in the driver's seat. The site targets a general audience interested in transportation and career opportunities within this niche. Technically, the site is built on WordPress using the Astra theme and several plugins including Yoast SEO and WP Event Manager, with integration of Google Maps API for event location filtering. The site is hosted on servers associated with kasserver.com and uses HTTPS, ensuring secure communication. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with consistent branding and professional content but lacks explicit contact information and certifications. Overall, the site is safe, well-structured, and serves its niche purpose effectively but would benefit from enhanced privacy and security disclosures.

T

team digital GmbH

team-digital.de

54

team digital GmbH is a well-established full-service marketing agency based in Lauterbach, Hessen, Germany, with over 25 years of experience. The company offers a broad range of services including web design, online marketing, print design, branding, and public relations, targeting small and medium-sized enterprises primarily in Hessen and across Germany. Their market position is strong regionally, supported by a loyal client base and a comprehensive portfolio showcasing diverse projects. The website reflects a professional and consistent brand image with detailed team and service information.

E

European Ropes Course Association (ERCA)

erca.cc

45

The European Ropes Course Association (ERCA) operates a professional website focused on the ropes course industry, providing training syllabi, certification information, events, and industry standards. The association targets professionals such as trainers, inspectors, builders, and operators, as well as non-professionals interested in ropes courses. The website is built on Joomla CMS and uses common web technologies like jQuery and Nivo Slider. It is served over HTTPS with a cookie consent mechanism, indicating a reasonable level of privacy compliance. However, no explicit contact emails or phone numbers are found on the homepage, and no security.txt or incident response information is provided. The WHOIS lookup for the domain 'www.erca.uk' failed due to a naming rules violation, suggesting the domain may be misconfigured or the WHOIS query was made on an invalid subdomain. This reduces trust in domain registration legitimacy but does not detract from the professional content and services offered. Overall, the site is well-structured, informative, and safe for general audiences.

Busy Rooms Limited operates a cloud-based Central Reservation System (CRS) and related hospitality technology solutions targeting hotel groups, independent hotels, resorts, vacation rental companies, and destination organizations globally. The company positions itself as a scalable, adaptable, and brandable platform that integrates multiple hospitality functions including booking engines, channel management, revenue management, and property management. Their market presence spans over 80 countries with partnerships with major industry players such as Expedia, Hotelbeds, Oracle Opera, and Infor. Technically, the website is built on modern frameworks including October CMS and Bootstrap, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though HTTP security headers and explicit security policies are absent. WHOIS data is unavailable, which slightly reduces trustworthiness but the overall business credibility remains high due to transparent contact information and industry partnerships.