Security Directory

B

BikeReg.com - online cycling event registration

bikereg.com

48

The website www.bikereg.com appears to be an event registration platform focused on biking events. The site integrates multiple third-party analytics and tracking technologies such as Google Analytics, Facebook Pixel, Datadog RUM, and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. The website lacks critical compliance documents such as privacy policies, cookie policies, and terms of service, which negatively impacts its privacy compliance score. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but no advanced security headers or incident response information is present. Overall, the site provides basic functionality but requires significant improvements in transparency, compliance, and trust indicators.

Tin Mountain Conservation Center is a well-established nonprofit organization focused on environmental education and conservation in New Hampshire, USA. Their website offers comprehensive information about nature programs, camps, research, and community involvement. The organization targets learners of all ages and outdoor enthusiasts, providing educational and recreational services that foster a deeper understanding of the natural world. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses a combination of FireSpring CMS, jQuery, and third-party services such as Google Analytics, Clicky, and Datadog for analytics and monitoring. Hosting appears to be managed via GoDaddy with domain privacy protection. Performance is moderate with good SEO and basic accessibility features. However, there is room for improvement in security practices, including enabling DNSSEC, implementing CSP headers, and publishing a security.txt file. Security posture is solid with HTTPS enforced and domain status protections in place, but the absence of explicit privacy and cookie policies, as well as consent mechanisms, indicates compliance gaps. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance trust and transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to align with best practices and regulatory requirements.

N

National Park Foundation

nationalparks.org

71

The National Park Foundation website serves as the official charitable partner of the National Park Service, providing resources, fundraising, and educational outreach to support national parks across the United States. The organization positions itself as a large, reputable non-profit with a clear mission to conserve landscapes, engage youth, preserve history and culture, and promote outdoor exploration. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It targets a broad audience including park enthusiasts, donors, educators, and the general public. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, analytics tools like Google Analytics and Microsoft Clarity, and uses secure HTTPS connections with appropriate security headers. The site is mobile-optimized and accessible, with good SEO practices. External domains linked include trusted social media platforms and donation processing services. From a security perspective, the site demonstrates good practices with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, there is no explicit security policy or incident response information published, and WHOIS data is privacy protected, which is common for non-profits but limits transparency. Overall, the site maintains a strong security posture. The overall risk assessment is low, with the site appearing trustworthy, legitimate, and professionally managed. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing DNSSEC deployment. These steps would further strengthen trust and compliance.

N

National Parks Conservation Association

npca.org

68

The National Parks Conservation Association (NPCA) is a well-established non-profit organization dedicated to protecting and enhancing America's National Park System. Their website reflects a strong commitment to advocacy, education, and public engagement with a professional and consistent brand presence. The organization targets a broad audience including national park visitors, environmental advocates, and the general public. NPCA operates primarily through fundraising, advocacy campaigns, and educational outreach, positioning itself as a leading voice in national park conservation. Technically, the website employs a modern technology stack including JavaScript frameworks, SVG graphics, and integrates multiple analytics and advertising services such as Google Analytics, Facebook Pixel, and Quantcast. The site is mobile-optimized, accessible, and SEO-friendly, though some opportunities exist to enhance security headers and incident response transparency. Privacy compliance is robust with clear policies and cookie consent mechanisms in place. Security posture is generally strong with HTTPS enforced and CSRF protections on forms, but lacks explicit security policy disclosures and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the presence of multiple trust indicators and professional content supports legitimacy. Overall, NPCA's website demonstrates a mature digital presence with strong business credibility and good security hygiene. Strategic improvements in security policy transparency and WHOIS data availability would further enhance trust and compliance.

M

Maine Conservation Voters

maineconservation.org

52

Maine Conservation Voters is a non-profit organization dedicated to protecting Maine's environment, climate future, and democracy through public policy advocacy, political accountability, and community engagement. The organization targets residents and supporters in Maine who are passionate about conservation and democratic participation. Their business model relies on memberships, donations, and events to support their mission. The website is professionally designed with consistent branding and clear calls to action, reflecting a medium-sized regional non-profit with a strong market position in environmental advocacy. Technically, the website is built on WordPress using Elementor, with integrations such as Google Analytics and Modern Events Calendar Lite. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be improved. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and includes important security headers, indicating a good security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection is common for non-profits and does not detract significantly from trustworthiness given the website's transparency and social media presence. Overall, the site presents a low-risk profile with strong business credibility and a good technical foundation. Strategic recommendations include implementing cookie consent, publishing terms of service and security policies, and enhancing accessibility to further improve compliance and user trust.

I

International Mountain Bicycling Association

imba.com

67

The International Mountain Bicycling Association (IMBA) operates a professionally designed website focused on creating, enhancing, and protecting mountain biking trails across the United States. The organization targets mountain biking communities and enthusiasts, providing services such as trail development guidance, community engagement, funding support, and educational programs. The website leverages modern technologies including Drupal 10, Google Maps API, and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforcement and CAPTCHA on login forms, though additional security headers and public security policies could enhance protection. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the website's professional content and active social media presence support its credibility. Privacy and cookie policies are not detected, indicating an area for compliance improvement.

F

Friends of Katahdin Woods and Waters

friendsofkww.org

61

Friends of Katahdin Woods and Waters is a small non-profit organization dedicated to the preservation, protection, and promotion of the Katahdin Woods and Waters National Monument. The organization focuses on conservation efforts, educational youth programs, community events, and fundraising through memberships and donations. Their market position is regional with a clear mission to engage the local and broader community in outdoor and conservation activities. Technically, the website is built on WordPress using the Organic Nonprofit theme and WooCommerce for donation processing. It employs modern web technologies including jQuery, Google Analytics, and Facebook Pixel for tracking. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure forms. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with clear contact information and social media presence. The lack of WHOIS data limits domain registration insights, but the privacy protection is justified for a non-profit. Recommendations include adding privacy and cookie policies, implementing security headers, and publishing incident response or vulnerability disclosure information to enhance security posture and compliance.

I

iRaiser Group

kentaa.nl

52

iRaiser Group operates a professional online fundraising platform targeting non-profit organizations primarily in the Netherlands and Europe. The company offers a suite of tools including donation forms, peer-to-peer fundraising, crowdfunding, event fundraising, and online collection solutions. Their market position is strong with over 900 non-profits served and more than 2.5 billion euros raised since 2012. The website is well-designed, mobile-optimized, and uses modern marketing and analytics technologies such as HubSpot CMS, Google Analytics, and Piwik PRO. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place. However, the domain WHOIS data is missing or unavailable, which slightly impacts trust but does not detract from the professional presentation and business credibility. Overall, the site is safe, GDPR compliant, and trustworthy for its target audience.

E

Expoints

expoints.nl

56

Expoints is a Dutch technology company specializing in feedback and feedforward solutions for organizations. They provide custom feedback platforms, actionable dashboards, and smart add-ons, supported by home-made software hosted in the Netherlands. The company targets businesses seeking structured customer and employee feedback mechanisms and has a solid market position with notable clients and over a decade of experience. Technically, the website is built on WordPress with modern plugins for SEO and analytics, showing moderate performance and good mobile optimization. Security posture is good with HTTPS and DNSSEC enabled, though lacking some advanced security headers and explicit security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and client testimonials enhancing credibility.

Smithsonian Books is a specialized publishing entity under the Smithsonian Institution, focusing on nonfiction and illustrated books in areas such as history, science, art, and museum collections. The website reflects a professional and consistent brand presence, leveraging the Smithsonian's authority and distributing through Penguin Random House. The technical infrastructure includes modern analytics and tracking tools, with hosting and DNS managed via Cloudflare and Smithsonian infrastructure. Security posture is solid with HTTPS and domain locks, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy policies and cookie consent mechanisms are present but basic, with no explicit GDPR compliance or incident response policies visible. Overall, the website is accessible, well-structured, and trustworthy, serving a general audience interested in educational content.

Smithsonian.com serves as the digital platform for Smithsonian Enterprises, offering a blend of retail shopping, award-winning editorial content, original television series, and travel experiences worldwide. The website targets a general audience interested in culture, education, and travel, leveraging the strong brand recognition of the Smithsonian Institution. The domain has been registered since 2001, reflecting a mature and established online presence consistent with the Smithsonian's reputation. Technically, the website employs a modern technology stack including Cloudflare for DNS and CDN services, Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and a professional design, although some SEO and accessibility features appear basic. Performance is moderate, with room for improvement in technical modernization and security hardening. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are visible in the provided content. The absence of privacy and cookie policies, as well as a consent mechanism, indicates gaps in privacy compliance. No vulnerabilities or exposed sensitive data were detected, but improvements in security transparency and compliance documentation are recommended. Overall, Smithsonian.com is a credible and professionally maintained website with a strong brand and business model. To enhance trust and compliance, it should publish clear privacy and cookie policies, implement consent mechanisms, enable DNSSEC, and adopt security best practices such as security headers and incident response disclosures.

C

Creative West

wearecreativewest.org

61

Creative West is a U.S. Regional Arts Organization focused on supporting artists, culture bearers, state arts agencies, and creative organizations primarily in the western United States. The organization provides grants, advocacy, technology systems, and consulting services to build equitable creative capacity. The website reflects a professional and well-established entity with a clear mission and target audience in the arts and cultural sector. The domain registration is consistent with the organization's claims and recent rebranding, indicating legitimacy. Technically, the website is built on WordPress with modern technologies including jQuery, Yoast SEO, Google Tag Manager, and a consent management platform (Usercentrics). Hosting appears to be on AWS infrastructure. The site is mobile optimized, SEO friendly, and uses HTTPS with good SSL configuration. However, some security headers like Content-Security-Policy and DNSSEC are missing, which could be improved. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks explicit incident response or vulnerability disclosure information. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. No contact emails or phone numbers are explicitly listed, with contact primarily via forms. Overall, the website is trustworthy, professional, and safe for general audiences. It demonstrates good digital maturity but could enhance security by enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy.

T

Home | Portland's Living Room - The Square

thesquarepdx.org

56

TheSquarePDX.org is a community-focused website centered around Portland's Pioneer Courthouse Square, offering visitors the ability to search for commemorative bricks, explore the square, and purchase bricks. The site operates on a WordPress platform with WooCommerce for e-commerce capabilities, enhanced by Yoast SEO for search optimization and Google Analytics for visitor tracking. The technical infrastructure is modern and typical for small to medium community or non-profit websites, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to query failure or privacy protection, which is common for such sites but limits trust verification. Overall, the site is safe, professional, and serves a general audience with community engagement and e-commerce services.

G

Geef.nl

geef.nl

57

Geef.nl is a well-established Dutch crowdfunding and donation platform that enables individuals and charities to raise funds for personal and charitable causes. With over 23 years of operation, it serves a large community of donors and charities, positioning itself as a trusted player in the non-profit sector in the Netherlands. The platform offers campaign creation, donation processing, and comparison tools for charities, targeting individuals and organizations seeking to fundraise effectively. Technically, the website is built on Angular 8, uses Google Analytics and Tag Manager for tracking, and implements a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enforced, and trust seals are displayed, but explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

Feelingz is a Dutch company specializing in personalized corporate gifting solutions, including an online keuzecadeau platform with over 1,500 gift options, traditional kerstpakketten, and a verjaardagsservice. The company targets businesses seeking to reward and appreciate employees and relations with tailored gifts. Their market position is solid with over 10 years of experience and a medium-sized operation under the parent company Red Loyalty Concepts B.V. The website demonstrates a mature digital infrastructure with modern tracking and marketing tools, good mobile optimization, and professional design. Security posture is strong with HTTPS, cookie consent, and secure forms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site is trustworthy, professional, and user-friendly, supporting a positive business reputation.

W

Worlds Most Ethical Companies

worldsmostethicalcompanies.com

65

Worlds Most Ethical Companies is a well-established recognition platform operated under the Ethisphere Institute, celebrating organizations that demonstrate leadership in ethics, integrity, and compliance. The website serves as a comprehensive resource for companies seeking to apply for the annual recognition, providing detailed information about the application process, benefits, and testimonials from past honorees. The platform positions itself as a benchmark for ethical business practices globally, targeting medium to large enterprises committed to corporate social responsibility. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and integrates marketing and analytics tools including HubSpot forms, Google Analytics, and Google Tag Manager. The site is optimized for mobile devices, loads quickly, and follows good SEO and accessibility practices. Security is robust with HTTPS enforced, Cloudflare DNS usage, and reCAPTCHA protection on forms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms implemented via TrustArc. However, the absence of direct contact emails or phone numbers and lack of terms of service or incident response information are minor gaps. Overall, the website reflects a professional, trustworthy, and mature digital presence aligned with its mission. Strategically, the site should consider enabling DNSSEC, publishing a security.txt file, and providing clearer incident response contacts to enhance trust and compliance. These improvements would further solidify its leadership position in ethical business recognition and reassure stakeholders of its commitment to security and transparency.

P

Points of Light

pointsoflight.org

65

Points of Light is a well-established non-profit organization founded in 1990, dedicated to increasing volunteerism and civic engagement globally. The organization serves a broad audience including nonprofits, corporations, and individual volunteers, providing resources, events, and corporate partnership programs to maximize social impact. Their market position is strong as a leading entity in volunteer mobilization with a large global footprint. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and does not expose sensitive data. However, it lacks a publicly available security policy or vulnerability disclosure page, which are recommended for transparency and incident readiness. Overall, the website presents a low risk profile with strong trust indicators and professional presentation. Strategic improvements in security transparency and incident response communication would further enhance their security posture and stakeholder confidence.

D

Disability:IN

disabilityin.org

59

Disability:IN is a well-established non-profit organization founded in 2018, dedicated to advancing disability inclusion in business globally. The organization partners with leading companies to provide benchmarking tools like the Disability Index, consulting services, and programs such as the NextGen Leaders Initiatives and Supplier Inclusion certification. Their market position is strong within the non-profit sector focused on diversity and inclusion, supported by a professional and content-rich website. Technically, the website is built on WordPress using modern frameworks and plugins, with good SEO and accessibility practices. Security posture is solid with HTTPS and domain protection, though DNSSEC is not enabled and some privacy compliance aspects like cookie consent are missing. Overall, the site reflects a credible and professional entity with extensive tracking and marketing tools in use.

U

Unum Życie Towarzystwo Ubezpieczeń i Reasekuracji Spółka Akcyjna

unum.pl

71

Unum Życie Towarzystwo Ubezpieczeń i Reasekuracji S.A. is a well-established Polish insurance company specializing in individual and group life insurance products. The company targets individuals, families, and businesses, offering comprehensive insurance solutions including health, retirement, and business protection. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site is built on WordPress and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and SalesManago, ensuring data-driven insights and customer engagement. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although additional security headers could enhance the posture further. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting Unum's market position as a leading insurance provider in Poland.

Colonial Life & Accident Insurance Company operates a comprehensive website offering supplemental health insurance products including life, accident, disability, cancer, and critical illness insurance. The company targets individuals, employers, and brokers, positioning itself as a large, established player in the US healthcare insurance market. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It leverages modern marketing and analytics technologies such as Google Analytics, Facebook Pixel, Marketo, and HubSpot, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though security headers and explicit security policies are not publicly found. The WHOIS data is unavailable from the raw output, but the website's trust signals and association with parent company Unum support legitimacy. Overall, the site is safe, professional, and well-optimized for user experience and marketing.

M

MEDiVET S.A.

medivet.pl

45

MEDiVET S.A. is a well-established Polish company specializing in veterinary healthcare products and services. The company operates a professional website providing information about its offerings, including veterinary products, equipment, and an online ordering platform. The site targets veterinary professionals and partners within Poland, reflecting a medium-sized business with a solid market presence since 1999. The website content is relevant and professionally presented, supporting the company's credibility in the veterinary sector. Technically, the website is built on Drupal CMS with standard modules and uses jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Hosting and domain registration are consistent with the business claims, with the domain registered through home.pl S.A. since 1999. From a security perspective, the website uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. Cookie consent mechanisms are implemented in compliance with EU regulations, but no explicit privacy policy or security incident response information is prominently available. Suspicious hidden external links in the footer suggest possible injected spam content, which should be addressed to maintain trust. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, DNS security, and removal of suspicious links would strengthen the site's trustworthiness and compliance.

C

Covetrus

covetrus.co.uk

62

Covetrus is a well-established global animal-health technology and services company focused on supporting veterinary markets including companion, equine, and large-animal sectors. The UK website presents a comprehensive portfolio of veterinary pharmaceuticals, consumables, equipment, pet nutrition, and business consultancy services. The company positions itself as a trusted partner to veterinary practices, offering extensive product selection and dedicated customer support. Technically, the website is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, cookie consent, and some security best practices, though explicit security headers and incident response information could be improved. The WHOIS data is unavailable due to domain naming rules, but external signals and content indicate legitimacy. Overall, the website is professional, user-friendly, and trustworthy, serving its target audience effectively.

S

sa Covetrus nv

covetrus.be

58

Covetrus nv is a leading veterinary wholesaler and distributor in Belgium, specializing in veterinary medicines, animal nutrition, medical devices, and instruments. The company operates a customer login portal called NetOrder for online ordering, targeting veterinary professionals and businesses within Belgium. The website is primarily in Dutch with a French language option, reflecting its Belgian market focus. The business model centers on wholesale distribution with a strong market position as the largest supplier in its sector in Belgium. Technically, the website is built on ASP.NET Web Forms and uses legacy jQuery 1.10.0 along with Google Tag Manager and Google Analytics for tracking. The site is moderately optimized with basic mobile responsiveness and accessibility features. However, the use of outdated JavaScript libraries and lack of visible security headers indicate areas for technical improvement. From a security perspective, the site uses HTTPS and has secure login forms but lacks explicit security policies, incident response contacts, and modern security headers. The WHOIS data is restricted due to registry policies, but the domain and website content are consistent with a legitimate business. Privacy and cookie policies are present, supporting GDPR compliance. Overall, the security posture is moderate but could be enhanced by updating libraries, adding security headers, and publishing security policies. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include modernizing the tech stack, improving security configurations, and enhancing transparency around security and incident response to build greater trust and compliance.

P

Pet Wellness Plans & Programs | Covetrus Care Plans

careplans.vet

62

Covetrus Care Plans operates a professional website focused on providing pet wellness plans and programs, targeting veterinary professionals and pet owners. The business is positioned within the healthcare sector, specifically veterinary wellness, and is a part of the larger Covetrus organization. The website presents a consistent brand image with good content quality and a clear focus on its services. Technically, the site is built on WordPress using Elementor and integrates several marketing and analytics tools such as Pardot and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is safe, professional, and trustworthy, but could enhance privacy compliance and security posture to better align with industry best practices.

West Virginia University (WVU) is a large, established public university in the United States offering a wide range of undergraduate, graduate, and online educational programs. The institution positions itself as a family of distinctive campuses united by a mission to provide quality and affordable education. The website reflects a professional and consistent brand image, targeting prospective and current students, faculty, staff, alumni, and families. WVU's business model centers on education, research, and community engagement, supported by extensive program offerings and student services. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Microsoft Clarity, New Relic, and other analytics and marketing tools. The site is built on a CMS platform likely Contentful, with good performance, mobile optimization, and accessibility features. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks explicit visible security headers and cookie consent mechanisms. No vulnerability disclosure or incident response information is publicly available. The WHOIS data is unavailable, which is typical for .edu domains but reduces transparency. Overall, the security posture is good but could be improved with clearer policies and disclosures. The overall risk assessment is low with a high degree of trustworthiness based on content quality, business credibility, and technical implementation. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies and incident response contacts, and improving WHOIS transparency where possible.

T

Tecnavia

eclipping.org

62

Tecnavia is a specialized provider of digital publishing solutions targeting media professionals, clipping bureaus, and press associations. Their offerings include digital replica editions, press review tools, and advanced marketplace services. The website is built on WordPress using the Enfold theme and integrates modern technologies such as Cookiebot for cookie consent and Google Analytics for traffic analysis. The site demonstrates good content quality and professional design with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness and should be investigated further. Overall, the website presents a credible business presence with room for improvement in security and compliance documentation.

T

The Rochester Voice LLC

therochestervoice.com

53

The Rochester Voice LLC operates an online local newspaper serving Rochester, New Hampshire and surrounding communities. The website provides news, opinion, business, lifestyle, and community event coverage, positioning itself as the fastest growing online newspaper in New Hampshire and Rochester's only hometown newspaper. The business model relies on advertising revenue and paid memberships, targeting local residents and community members interested in regional news and events. The company was established in 2012 and maintains a small but focused media presence. Technically, the website uses a combination of older and modern web technologies including jQuery 1.7.2, Bootstrap, Google Analytics, and Google Adsense for advertising. The CMS powering the site is Bondware News Publishing Software. The site shows moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. The presence of outdated JavaScript libraries introduces potential vulnerabilities. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and reduces trustworthiness. Overall, the website is functional and provides valuable local content but requires significant improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and protect user data.

N

New Hampshire Public Television

nhpbs.org

60

New Hampshire Public Television operates the official website for New Hampshire PBS, the state's only statewide locally owned and operated public television network. The organization provides a broad range of services including television broadcasting, online video streaming, educational resources, and community engagement events. The website reflects a mature media entity with a clear focus on serving the New Hampshire community and PBS viewers. The business model relies on donations, corporate sponsorships, and federal funding, positioning it as a key media and educational resource in the region. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, Google Analytics, Google Tag Manager, and Microsoft Clarity for analytics and user behavior tracking. The site is mobile optimized with good SEO practices and a professional design. However, some accessibility features are basic, and there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with HTTPS enforced and domain transfer protections in place. However, the absence of DNSSEC, lack of a Content Security Policy, and missing cookie consent mechanisms indicate areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity and domain age, supporting legitimacy. Overall, the website is a trustworthy, professional public broadcasting platform with moderate tracking and analytics usage. Strategic improvements in privacy compliance and security headers would enhance its security and regulatory posture, further strengthening user trust and compliance.

I

InsideSources, LLC

nhjournal.com

62

NH Journal is a regional news publication focused on New Hampshire, providing news, opinions, and event coverage primarily in politics, energy, technology, finance, education, and healthcare sectors. It operates under the parent company InsideSources, LLC, and maintains a consistent brand presence with sister publications. The website leverages WordPress CMS with common SEO and analytics tools, including Google Analytics and Google Tag Manager, and monetizes through advertising networks such as Google AdSense and Media.net. The content is professionally presented, targeting residents and stakeholders interested in New Hampshire news. Technically, the site is moderately performant with good mobile optimization but lacks advanced security headers and DNSSEC implementation. Privacy compliance is basic, with a privacy policy linked on the parent site but no explicit cookie consent mechanism detected. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

T

The Nashua Telegraph

nashuatelegraph.com

62

The Nashua Telegraph is a regional news media organization providing local, regional, national, and international news coverage, sports, obituaries, classifieds, and subscription services primarily targeting residents of Nashua and the greater New England area. The website is built on WordPress with a modern technology stack including Google Tag Manager, Google Analytics, and Amazon Publisher Services for advertising and analytics. The site demonstrates good technical maturity with HTTPS enforcement, security headers, and responsive design. However, the absence of WHOIS registration data raises transparency concerns, though the website content and structure appear professional and trustworthy. Privacy and cookie policies are present but basic, with room for improvement in GDPR compliance and security policy disclosures. Overall, the site is a credible local news source with moderate technical and security posture.

M

Mt Washington Valley Vibe

mwvvibe.com

44

Mt Washington Valley Vibe is a small regional media company providing a quarterly print publication and online content focused on the Mt Washington Valley community, local businesses, events, and outdoor recreation. The website is built on WordPress using the Extra theme and integrates popular SEO and analytics plugins such as Yoast SEO, ExactMetrics, and MonsterInsights. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Contact information is primarily via a contact form and social media channels, with no direct emails or phone numbers found. Overall, the website is professional and trustworthy for its niche audience but would benefit from improved privacy and security practices.

L

Londonderry Times

londonderrytimes.net

53

The Londonderry Times is a well-established local news media outlet serving Rockingham County and surrounding communities. The website provides trusted hometown news, sports, and community information, supported by a business model focused on advertising revenue. The company has a consistent brand presence and a domain registered since 2013, supporting its legitimacy and market position as a local news source. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Analytics, and Microsoft Clarity, hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and additional HTTP security headers could be implemented. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security or incident response policies are found. Overall, the website is professional, trustworthy, and safe for general audiences.

F

Foster's Daily Democrat

fosters.com

69

Foster's Daily Democrat is a regional news media outlet serving Fosters, ME, and surrounding areas, operating under the Gannett media network. The website provides local news, sports, entertainment, and obituary content, targeting local residents and readers interested in community affairs. The business model relies on digital advertising and subscription services, positioning itself as a trusted local news source with consistent branding and professional content quality. Technically, the site employs modern web technologies including Polymer, web components, and integrates multiple advertising and analytics platforms such as Google Analytics, Adobe Audience Manager, and various ad networks. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforcement, cookie consent management via OneTrust, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates a mature digital presence with good business credibility and security hygiene.

P

Portsmouth Herald

seacoastonline.com

69

Seacoastonline.com is a regional news website serving Portsmouth, New Hampshire, and surrounding areas. It provides local news, sports, entertainment, and obituaries, operating under the Portsmouth Herald brand, which is part of the Gannett media network. The site targets local residents and readers interested in regional news and events. The business model is primarily advertising-driven with subscription options for premium content access. The website maintains a consistent and professional brand presence aligned with the USA Today Network. Technically, the site employs modern web technologies including Polymer and Web Components, supported by a robust advertising and analytics infrastructure featuring multiple ad networks and tracking services such as Google Analytics, Adobe Audience Manager, and Taboola. The site is hosted on Gannett's CDN infrastructure, optimized for mobile devices, and implements cookie consent management via OneTrust, indicating a mature digital presence. From a security perspective, the website enforces HTTPS, uses standard security headers, and does not expose sensitive data in its HTML content. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. The privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, Seacoastonline.com presents a trustworthy and professionally managed local news platform with a solid technical foundation and good security hygiene. Strategic improvements in security transparency and accessibility could further strengthen its posture and user trust.

The Conway Daily Sun website for the Berlin Sun edition is currently inaccessible due to a legal restriction indicated by HTTP status 451, citing GDPR enforcement for visitors from the European Economic Area. The site appears to be a local news media outlet serving the Berlin, New Hampshire area, operating under the BLOX-CMS platform and utilizing multiple analytics tools such as Google Analytics and Segment. However, the lack of accessible content, privacy policies, and WHOIS registration data significantly limits the ability to fully assess the website's business and security posture. Contact information is minimal but includes a company email and phone number. The site’s security posture cannot be fully evaluated due to the blocked content and missing security headers information.

M

Monadnock Ledger-Transcript

ledgertranscript.com

57

Monadnock Ledger-Transcript is a well-established local news media outlet serving Central New Hampshire, providing daily news, sports, opinion, arts, and community event coverage. The website supports a subscription-based business model with integrated paywall technology and offers advertising and newsletter services. The company is part of the Newspapers of New England family, indicating a solid market position in regional media. The website demonstrates good content quality and professional design, targeting local residents and community members interested in regional news and events. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple third-party analytics and marketing tools, including Google Analytics, Chartbeat, and ActiveCampaign. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though there is room for improvement in DNS security and security headers. Overall, the website is trustworthy, with consistent WHOIS data and no signs of suspicious activity or adult content.

N

New Hampshire Center for Public Interest Journalism

indepthnh.org

63

InDepthNH.org is a nonprofit investigative news organization dedicated to public interest journalism in New Hampshire. Established in 2015, it provides in-depth reporting on government accountability, social issues, and community affairs. The website serves a targeted audience of New Hampshire residents and stakeholders interested in transparent and ethical journalism. It operates on a donation and underwriting business model, emphasizing independent and watchdog reporting. The site is well-branded, with consistent messaging and trust signals such as testimonials and membership in the Institute for Nonprofit News.

UnionLeader.com is a regional news media website serving primarily the New Hampshire area, offering news, opinion, sports, and local event information. The site operates on a subscription and advertising business model, targeting a general audience interested in local and regional news. The website is professionally designed with consistent branding and good content quality, supported by a modern technical infrastructure including TownNews CMS, Bootstrap, and various advertising and analytics technologies. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given the professional content and infrastructure. Overall, the site presents a trustworthy and well-maintained digital presence for a regional news publisher.

N

New Hampshire Bulletin

newhampshirebulletin.com

65

New Hampshire Bulletin is an independent, nonprofit news organization focused on providing state and local news coverage with an emphasis on government accountability. As part of the larger States Newsroom network, it leverages nonprofit funding models including subscriptions and donations to sustain its journalism. The website is well-branded and targets residents of New Hampshire seeking reliable news and commentary. Technically, the site is built on WordPress using a Genesis child theme and Bootstrap for responsive design, hosted by Bluehost with Cloudflare DNS services. It employs Google Analytics, Google Tag Manager, and New Relic for performance monitoring and analytics. Security posture is good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers like Content Security Policy. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche.

C

Column

column.us

61

Column is a technology company providing a SaaS platform specialized in public notice compliance software. Their platform serves media companies, governments, law firms, businesses, and individuals by automating and streamlining the publication of legal notices, obituaries, and classifieds. The company positions itself as a trusted software partner with a significant number of publication partners and advertisers, emphasizing efficiency and compliance in the public notice process. The website content is professional, well-structured, and targets a broad audience involved in legal and governmental publishing workflows. Technically, the website is built on WordPress using popular page builders like Elementor and WPBakery, hosted likely on WPEngine, and integrates marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile-optimized and SEO-friendly with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and formal security policies are absent. The WHOIS data is missing, which is a concern for domain trustworthiness, but the website's professional presentation and business focus mitigate some risk. Overall, the site is safe, business-focused, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency.

K

Kansas Press Association

kspress.com

65

Kansas Press Association is a well-established membership organization serving Kansas newspapers and media professionals, with a history spanning over 150 years. The website provides key services including advertising, public notices, contests, conventions, and member resources. The organization targets media entities within Kansas and operates a membership-based business model. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

D

Downey | McElroy

downeymcelroy.com

41

Downey | McElroy is a small, established legal services firm specializing in probate, trust, fiduciary litigation, estate planning, and mediation. The firm emphasizes advocacy for clients and community stewardship, with roots dating back to the 1940s. Their website reflects a professional presence targeting individuals and entities requiring specialized legal services in estate and trust matters. Technically, the website is built on WordPress with common SEO and analytics tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy and registration consistency, which impacts overall trustworthiness. No adult or questionable content is present, and no WAF or blocking mechanisms interfere with content access.

C

Colorado Press Association | Network

coloradopressassociation.com

49

The Colorado Press Association is a well-established regional media association serving Colorado's print and online media professionals, including journalists and investigative reporters. The organization provides membership benefits, advocacy, events, and advertising services, positioning itself as a key player in the Colorado media landscape. The website reflects a professional and consistent brand with clear navigation and relevant content tailored to its target audience of media professionals and members. Technically, the site is built on a modern WordPress CMS with popular plugins such as WooCommerce and Elementor, hosted on SiteGround, and integrates Google Analytics and Tag Manager for tracking. While the site is mobile-optimized and SEO-friendly, there are minor gaps in privacy compliance, such as the absence of a cookie consent mechanism and limited GDPR indicators. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but could be improved by enabling DNSSEC and implementing security headers and incident response policies. Overall, the site is trustworthy and credible, with a domain age consistent with its business history and no signs of suspicious activity.

W

WHITE Digital Agency

white.nl

73

WHITE Digital Agency is a specialized digital agency based in the Netherlands, focusing on Craft CMS and e-commerce solutions. Established in 2000, it holds a strong market position as an Enterprise Verified partner for Craft CMS and Craft Commerce, offering custom corporate websites, bespoke webshops, and ERP integrations. The agency targets businesses seeking advanced and flexible online platforms. Technically, the website employs modern web technologies including JavaScript, SVG graphics, Bootstrap framework, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Security-wise, the site uses HTTPS and DNSSEC, but lacks visible security headers and formal security policies, indicating room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with strong business credibility but moderate privacy and security posture.

O

Oregon Historical Society

oregonencyclopedia.org

58

The Oregon Encyclopedia is a non-profit educational project managed by the Oregon Historical Society in partnership with Portland State University. It provides authoritative, accessible information about Oregon's history and culture through a comprehensive online encyclopedia, educational resources, and digital exhibits. The website targets educators, researchers, and the general public interested in Oregon history. Technically, the site uses modern web technologies including Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is mobile optimized and well-structured, offering a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used but no advanced security headers or explicit privacy and cookie policies are found. WHOIS data is unavailable, limiting domain trust assessment, but the site's affiliations and content quality indicate legitimacy. Overall, the site is a valuable educational resource with room for improvement in privacy compliance and security transparency.

M

Mark Spencer Hotel

markspencer.com

66

Mark Spencer Hotel is a well-established boutique hotel located in downtown Portland, Oregon, with a rich history dating back to 1907. The hotel offers upscale accommodations, including renovated guest rooms and suites, extended stay options, and event spaces. It targets business and leisure travelers seeking a stylish and arts-oriented lodging experience in the heart of the city. The website is professionally designed using WordPress and integrates modern technologies and marketing tools, including Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The presence of trust badges and active social media channels enhances its market credibility. Security posture is good with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and publishing a security policy are recommended. Overall, the website reflects a mature digital presence with strong business credibility and good privacy compliance.

A

Autzen Foundation

autzenfoundation.org

55

The Autzen Foundation is a non-profit organization focused on supporting charitable work within Oregon, primarily through awarding grants to small non-profit organizations in social services, arts and culture, education, environmental initiatives, and youth-centered missions. The website serves as an informational and application portal for grant seekers, hosted on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and analytics integration. Security posture is basic with HTTPS enabled but lacks advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website appears legitimate and professionally presented but would benefit from enhanced transparency and security practices.

N

Neon One

arts-people.com

67

Neon One operates as a provider of ticketing, reporting, and fundraising software solutions tailored for nonprofit organizations, particularly in the performing arts sector. The company offers a SaaS platform designed to streamline nonprofit event ticketing and donor management, positioning itself as a specialized technology provider in the nonprofit software market. The website content and structured data confirm a professional and focused business model with a medium-sized organizational footprint founded in 2016. Technically, the website is built on WordPress and leverages a modern technology stack including Google Analytics, Google Tag Manager, and Visual Website Optimizer, indicating a mature digital infrastructure with integrated marketing and analytics capabilities. Security posture is adequate with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found on the analyzed page. Overall, the website is professional, trustworthy, and well-positioned in its niche, though it would benefit from enhanced transparency and security hardening.

Restored 316, LLC operates an e-commerce website specializing in affordable and customizable feminine WordPress themes targeted primarily at bloggers and entrepreneurs seeking unique and budget-friendly design solutions. The company has a long-standing domain registered since 2008, indicating an established presence in the niche market of WordPress theme design. The website leverages WordPress CMS with Kadence theme and blocks, enhanced by Yoast SEO Premium for search optimization. Marketing and analytics tools such as Google Analytics, Facebook Pixel, ConvertKit, and Ahrefs Analytics are integrated to support business growth and user engagement. The site is hosted with domain registration via GoDaddy and DNS managed through Cloudflare, providing a reliable infrastructure with HTTPS enabled for secure communications.

V

Visit Hood River

visithoodriver.com

66

Visit Hood River operates as a regional tourism promotion website dedicated to showcasing the attractions, accommodations, events, and cultural offerings of Hood River, Oregon. The site serves as a comprehensive visitor guide, targeting tourists and travelers interested in exploring the Pacific Northwest region. It provides curated play lists, event calendars, and integrated booking widgets to facilitate travel planning and local engagement. The business model centers on tourism promotion and visitor services, positioning itself as a key resource for the Hood River community and visitors alike. Technically, the website is built on WordPress 6.8.2 with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, Microsoft Clarity, and Mailchimp for marketing automation. Hosting is provided by GoDaddy.com, LLC, with domain registration dating back to 2013, indicating a mature and stable online presence. The site demonstrates good mobile optimization, SEO practices, and user experience, though accessibility features are basic. From a security perspective, the site benefits from HTTPS encryption and domain status protections but lacks DNSSEC and advanced HTTP security headers. Cookie consent mechanisms are implemented, reflecting some privacy compliance efforts, though no explicit privacy policy or terms of service pages were detected. The use of multiple third-party analytics and advertising tools introduces moderate user tracking, which is disclosed via cookie consent but could be enhanced with clearer privacy documentation. Overall, Visit Hood River presents a trustworthy and professional tourism portal with solid business credibility and technical infrastructure. To improve, the site should implement DNSSEC, publish comprehensive privacy and security policies, and enhance security headers. These steps will strengthen compliance, user trust, and resilience against emerging threats.