Security Directory

L

Logo.wine

logo.wine

55

Logo.wine is a niche online platform providing free downloadable brand logos in SVG vector and PNG file formats. The website targets a general audience including designers, marketers, and businesses seeking brand logos for various uses. The business model is based on offering free access to a curated collection of logos, positioning itself as a convenient resource in the digital branding space. The site demonstrates consistent branding and good content quality, supporting its market position as a specialized logo repository. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts integration and JSON-LD structured data for SEO enhancement. The site is mobile optimized with good navigation clarity and moderate performance. However, no CMS or hosting provider details are evident from the content. The technical implementation is solid but could benefit from enhanced accessibility and security headers. From a security perspective, the site enforces HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible incident response or vulnerability disclosure information, and no cookie consent mechanism is present, which may impact GDPR compliance. No exposed sensitive data or vulnerabilities were detected in the HTML content. Overall, the security posture is moderate but could be improved with standard best practices. The domain WHOIS data is unavailable or privacy protected, which is common for small online services. The website content is professional and consistent with the domain purpose, indicating legitimacy. No suspicious patterns or phishing indicators were found. The overall risk is low, but improvements in privacy compliance and security policies are recommended to enhance trust and regulatory adherence.

T

thehealthline.ca Information Network

agefriendlysarnialambton.ca

50

Age Friendly Sarnia-Lambton is a community-focused website providing a comprehensive directory of social and health-related services for residents of the Sarnia-Lambton area in Ontario, Canada. The site is operated by thehealthline.ca Information Network and serves as a resource hub for transportation, housing, mental health, healthcare, and other community supports. The website targets a general audience including seniors, caregivers, and community members seeking assistance or information about local services. The business model is non-profit and community-oriented, emphasizing accessibility and partnership with local health teams.

The MS Research Portal is a specialized non-profit website operated by the MS Society of Canada, aimed at connecting Canadian residents with multiple sclerosis research studies seeking participants. The portal supports transparency and accessibility for research initiatives funded by recognized agencies, excluding commercial or for-profit studies. The website serves both potential study participants and researchers, providing contact information and study listings sorted by province. The organization is well-established with a domain age of over a decade, reinforcing its credibility in the healthcare non-profit sector. Technically, the website employs a traditional web stack with HTML, CSS, and JavaScript, including older versions of jQuery and jQuery UI. Hosting is provided via Linode, and Google Analytics is used for visitor tracking. While the site is functional and well-structured, it lacks modern security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. Mobile optimization and accessibility are basic but adequate for the target audience. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks DNSSEC and explicit security policies or incident response information. The absence of a cookie consent mechanism is a compliance gap given the use of Google Analytics. No critical vulnerabilities or malicious content were detected, and the site maintains a high trust level appropriate for a healthcare non-profit. Overall, the MS Research Portal is a credible, professionally maintained resource with room for technical and security improvements. Strategic enhancements in security headers, library updates, and privacy compliance would strengthen its posture and user trust.

C

CLEAR8

clear8.io

59

CLEAR8 is a Canadian-based technology company specializing in content clarity and accessibility solutions. Their platform uses proprietary scoring systems to help organizations optimize complex information for readability and inclusivity, addressing a significant literacy gap in Canada. The website is professionally designed on Squarespace, with clear navigation and a focus on business clients seeking to improve communication effectiveness. Technically, the site uses modern web standards and enforces HTTPS with HSTS, though it lacks some advanced security headers and privacy policies. No WHOIS registrant data is publicly available due to privacy protection, which is common and acceptable for this business type. Overall, the site presents a credible and professional image but would benefit from enhanced privacy compliance and direct contact information.

E

EyeMed Vision Care

eyesiteonwellness.com

60

Eye Site On Wellness is an educational website affiliated with EyeMed Vision Care, providing comprehensive information on eye health, vision care, nutrition, and vision insurance. The site targets EyeMed members and individuals interested in maintaining healthy vision, serving as a resource to support EyeMed's insurance offerings. The website employs modern web technologies including Vue.js and Adobe analytics tools, indicating a moderate level of digital maturity. The design is professional, mobile-optimized, and offers clear navigation, enhancing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. Overall, the site is trustworthy for informational purposes but would benefit from improved privacy compliance and clearer domain registration details.

T

thehealthline.ca

informationlondon.ca

53

InformationLondon.ca is a community services directory focused on providing residents of London and Middlesex with access to essential services such as basic needs, government and community programs, and crisis support. The website is operated by thehealthline.ca, a small non-profit entity established in 2016. It serves as a trusted local resource with a clear business model centered on community support and information dissemination. Technically, the website employs a modern but straightforward tech stack including HTML5, CSS (LESS), JavaScript with jQuery, and the Jssor slider for UI elements. Hosting and DNS are managed via Google Domains, indicating reliable infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, indicating partial privacy compliance. Analytics are implemented via Google Tag Manager, reflecting moderate user tracking. Overall, the website is trustworthy and professionally maintained with a focus on community service. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and regulatory adherence.

V

vitejs

vitejs.dev

55

Vite.dev is the official website for Vite, a next-generation frontend build tool designed to provide blazing fast development experience for web applications. The site targets web developers and frontend engineers, offering comprehensive documentation, community resources, and links to social platforms. Vite positions itself as a leading modern build tool with rich features including hot module replacement, TypeScript support, and server-side rendering capabilities. Technically, the website is built using modern web technologies such as VitePress, Rollup, and leverages ESM modules for performance. The site is well-optimized for mobile and desktop with excellent design and navigation. Security posture is strong with HTTPS enforced and modern security headers present, though privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and serves as a hub for the Vite open source ecosystem.

Y

Yarn Contributors, Inc.

yarnpkg.com

59

Yarn is a well-established open-source JavaScript package manager and project manager, serving a broad audience from individual developers to enterprise users. The website reflects a mature project with a strong community presence, offering innovative features such as workspaces, plugins, and stable reproducible installs. The business model is community-driven and independent, with no ties to a parent company. Technically, the site is built using modern frameworks like Docusaurus and React, hosted behind Cloudflare DNS and CDN services, and integrates analytics via Datadog RUM. The website is fast, mobile-optimized, and accessible, with clear navigation and professional design. From a security perspective, the site uses HTTPS and domain registration protections but lacks DNSSEC and visible security headers. There is no explicit privacy or cookie policy found, which is a compliance gap. No contact emails or phone numbers are listed on the homepage, and no vulnerability disclosure or incident response information is provided. The domain WHOIS data is consistent with the business age and shows no suspicious patterns, indicating legitimacy. Overall, the website is professional and trustworthy, with strong technical implementation and business credibility. However, improvements in privacy compliance, security headers, and transparency around data protection and incident response would enhance the security posture and user trust. The site contains no adult or questionable content and is safe for general audiences.

I

ImagiSOFT, Inc.

imagisoft.com

49

ImagiSOFT, Inc. is a specialized software company focused on providing life insurance and annuity illustration software along with financial calculators tailored for insurance carriers, agents, and financial planners. Established since the 1980s with a domain registered in 1996, the company holds a strong market position as a pioneer in universal life illustration software on PC. Their product suite addresses complex financial planning needs including IRA rollovers, RMD calculations, Roth IRA conversions, and retirement planning tools for both profit and non-profit sectors. Technically, the website is built with standard HTML5, CSS3, and JavaScript, incorporating third-party tools such as Olark live chat and Statcounter analytics. The site is mobile responsive and well-structured, though it lacks advanced CMS or modern frameworks. Hosting details are limited but domain registration is stable and long-standing. From a security perspective, the site uses HTTPS but does not implement DNSSEC or advanced HTTP security headers, which presents moderate risk. No cookie consent mechanism or explicit security policies are published, indicating room for compliance improvement. No forms are present on the main page, reducing attack surface, but incident response readiness is not documented. Overall, the website is professional, trustworthy, and content-rich with a good business credibility score. Strategic improvements in security headers, cookie consent, and published security policies would enhance compliance and trustworthiness further.

E

EyeMed Vision Care

eyemedvisioncare.com

71

EyeMed Vision Care operates a comprehensive vision benefits platform offering affordable vision insurance plans, eye exams, eyewear, and LASIK savings. The company targets a broad audience including members, employers, brokers, providers, and insurance carriers, positioning itself as a large enterprise in the healthcare sector with a strong market presence and extensive provider network. The website demonstrates a high level of professionalism with clear navigation, rich content, and multiple user portals tailored to different stakeholders. Technically, the site employs modern tracking technologies such as Google Tag Manager and Google Analytics, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and no exposed sensitive data, though additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for enterprises. Overall, the site is trustworthy, well-maintained, and aligned with industry standards.

A

Ameritas

ameritas.com

69

Ameritas is a financial services company focused on providing financial strategies, insurance, and retirement planning solutions to individuals seeking to secure a fulfilling life. The website presents a professional and consistent brand image, leveraging WordPress with the Divi theme for content management and presentation. The technical infrastructure includes modern web technologies and third-party marketing scripts, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some script-based security measures, but lacks explicit security headers and comprehensive privacy policies. The absence of WHOIS data raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

B

BRIEF

thisisbrief.com

55

BRIEF is a newly established Canadian brand studio launched in 2024, specializing in creative branding, marketing, and healthcare communication solutions. The company offers a collaborative approach with a network of specialists and an AI-supported product called Clear8 for healthcare communication. The website is built on Squarespace, featuring professional design and clear navigation, targeting brands seeking simple and effective branding services. Security posture is good with HTTPS and HSTS enabled, but lacks comprehensive privacy and cookie policies. Contact is primarily via a contact form and social media. The domain registration is consistent with the business launch and hosting platform, indicating legitimacy.

C

Canadian Hemophilia Society

hemophilia.ca

51

The Canadian Hemophilia Society website serves as a digital platform for a non-profit organization dedicated to supporting individuals affected by hemophilia and other bleeding disorders in Canada. The site provides educational resources, advocacy information, and support services aimed at patients, families, and healthcare professionals. The organization positions itself as a trusted national entity in the healthcare non-profit sector, focusing on improving quality of life through awareness and community engagement. Technically, the website is built on WordPress using the Avada theme, incorporating modern web technologies and multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with asynchronous loading of scripts to improve user experience. From a security perspective, the site enforces HTTPS and uses standard security practices but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic, with no explicit privacy or cookie policies found in the provided content, which could be improved to meet GDPR and other regulations. Overall, the website presents a professional and trustworthy front for the Canadian Hemophilia Society, with a solid business credibility score. However, improvements in privacy disclosures, security headers, and incident response transparency are recommended to enhance trust and compliance.

The Heart and Stroke Foundation of Canada is a prominent non-profit health charity dedicated to eliminating heart disease and stroke through research, advocacy, and public education. The organization operates a comprehensive website offering health information, fundraising opportunities, and volunteer engagement, targeting a broad audience including patients, health seekers, and professionals. Their market position is strong as a leading Canadian health charity with a large operational scale and consistent branding. Technically, the website is built on a modern CMS platform (Sitecore) and employs a robust tech stack including Google Tag Manager, Optimizely, Hotjar, and Facebook SDK for analytics, marketing, and user experience optimization. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure forms with reCAPTCHA, and includes privacy and cookie policies with consent mechanisms, indicating good compliance with privacy regulations such as GDPR. No critical vulnerabilities or exposed sensitive data were detected, though explicit security headers could be confirmed for enhanced security posture. Overall, the website presents a low-risk profile with strong trust indicators and professional content. The lack of WHOIS data is likely due to privacy protection, which is justified for this type of organization. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and confirming security headers to further strengthen security and trust.

The Canadian Cancer Society operates as Canada's largest national cancer charity, providing funding for cancer research, offering support services, and disseminating trusted cancer-related information. The organization targets a broad audience including patients, caregivers, researchers, and donors. Their market position is strong as a leading non-profit in the healthcare sector, with a well-established brand and extensive service offerings. Technically, the website is built on the Sitecore CMS platform, leveraging modern JavaScript libraries, Coveo search technology, and integrates multiple third-party tools for analytics, marketing, and user engagement. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses domain transfer protection, and implements a cookie consent mechanism, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy standards, though there is room for improvement in security transparency and DNS security. The domain WHOIS data is privacy protected but consistent with a legitimate, long-standing non-profit entity.

M

Maje - Paris | México

maje.mx

65

Maje - Paris | México operates a professional e-commerce website targeting fashion consumers in Mexico, offering men's and women's collections. The site is built on Shopify, leveraging modern technologies and marketing tools such as Google Analytics and Facebook Pixel. The website demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. Privacy compliance is adequate with a privacy and cookie policy present, but terms of service and direct contact details are missing. Overall, the site reflects a legitimate, established retail brand with a solid digital presence.

U

UNU TIC – AMBALAJUL PERFECT

ambalajulperfect-shop.ro

59

Ambalajul Perfect is a Romanian-based company specializing in the production and national distribution of packaging and product protection materials. The company operates an e-commerce platform hosted on Shopify, targeting businesses and consumers within Romania. The website presents a professional and consistent brand image with integrated customer review and live chat functionalities to enhance user engagement and support. Technically, the site leverages modern e-commerce technologies and third-party applications to provide volume discounts, wishlist features, and customer reviews, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though security headers and explicit privacy policies are lacking, which could be improved to enhance compliance and trust. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy and security disclosures.

M

Microsoft

nuget.org

73

NuGet.org is the official package repository and package manager platform for the .NET ecosystem, operated under the Microsoft umbrella. It serves as a central hub for developers to find, publish, and manage .NET packages, facilitating faster application development. The website is professionally designed, mobile-optimized, and provides extensive resources including documentation, package search, and community engagement through blogs and status updates. The platform targets .NET developers globally and holds a strong market position as the primary package manager for .NET technologies. Technically, the site leverages modern web technologies including HTML5, CSS3, Bootstrap, and JavaScript frameworks such as Knockout.js, integrated within the Microsoft technology stack. The infrastructure is likely hosted on Microsoft cloud services, ensuring fast performance and high availability. Accessibility and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, NuGet.org enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. While explicit security headers are not visible in the HTML, it is presumed they are implemented server-side. The site does not expose sensitive data and uses secure forms. However, there is no dedicated security policy or vulnerability disclosure page, which could enhance transparency and incident response readiness. Overall, NuGet.org demonstrates a mature digital presence with strong business credibility and security posture. The lack of WHOIS data is typical for enterprise domains using privacy protection and does not detract from the site's legitimacy. Strategic recommendations include publishing explicit security policies, adding a security.txt file, and enhancing accessibility features to maintain compliance and trust.

C

Customerly

customerly.io

68

Customerly is a technology company specializing in AI-powered customer service solutions tailored primarily for SaaS businesses and startups. Their platform integrates live chat, marketing automation, and customer satisfaction tools to help businesses acquire, support, and satisfy their customers efficiently. Positioned as a top live chat software globally, Customerly emphasizes AI to provide instant responses and seamless escalation to human agents, enhancing customer experience while reducing operational costs. The website reflects a mature digital presence with modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms. Overall, Customerly presents a professional, trustworthy, and technically sound online presence suitable for its target market.

E

Eternal Storms Software

eternalstorms.at

43

Eternal Storms Software is a small, independent software developer specializing in productivity and utility applications for the Apple ecosystem, including macOS, iOS, iPadOS, watchOS, tvOS, and visionOS. The company offers a range of apps such as DeskMat, ScreenFloat, Yoink, Transloader, and others, distributed primarily through the Mac App Store, their website, and subscription services like Setapp. The business has a consistent brand presence and a clear focus on Apple users seeking enhanced productivity tools. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and is hosted under a reputable Austrian registrar. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features. Performance is moderate, and the site uses HTTPS with a good SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data or vulnerable libraries. However, it lacks certain security headers and does not provide a public security policy or vulnerability disclosure page. Privacy compliance is partially met with a comprehensive privacy policy, but no cookie consent mechanism is present, which could be improved to better align with GDPR requirements. Overall, the website and business present a low-risk profile with a strong reputation in their niche market. Strategic improvements in security headers, privacy compliance, and incident response transparency would further enhance trust and security posture.

Brevilabs LLC operates the website 'Copilot for Obsidian', offering an advanced AI assistant plugin designed to enhance personal knowledge management within the Obsidian note-taking platform. The product targets knowledge workers, researchers, and writers seeking AI-powered assistance integrated directly into their note-taking environment. The business model includes a free tier and paid subscription plans with advanced AI features and lifetime licenses. The company maintains an active presence on GitHub and YouTube, providing transparency and community engagement. Technically, the website is built using modern web technologies including React and Next.js, hosted on Vercel, and incorporates performance and analytics tools from Vercel. The site is well-optimized for SEO, mobile responsiveness, and accessibility, providing a professional user experience. Privacy is emphasized through local data storage and no backend access to user notes, aligning with best practices for personal data protection. Security posture is generally strong with HTTPS enforced and open-source frontend code for transparency. However, the absence of explicit security headers, cookie consent mechanisms, and published security or incident response policies represent areas for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the website presents a credible and well-executed product offering with minor gaps in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and verifying domain registration details to enhance trust and compliance.

G

Google

notebooklm.google

69

Google NotebookLM is an AI-powered research tool designed to assist users in analyzing sources, simplifying complex information, and transforming content. As a product under the Google brand, it leverages Google's extensive technological infrastructure and expertise in AI and machine learning. The website presents a professional and modern interface consistent with Google's branding and design standards, targeting researchers, students, and professionals seeking AI-assisted research capabilities. Technically, the website is built using modern web technologies including Angular framework, Google Fonts, and Material Design components, hosted on Google Cloud infrastructure. It employs best practices such as HTTPS encryption, Content Security Policy with nonce, and Google Tag Manager for analytics and marketing. The site is optimized for performance and mobile responsiveness, providing a good user experience. From a security perspective, the site demonstrates a strong posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit published privacy policies, terms of service, and dedicated security or incident response contact information, which are important for compliance and user trust. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. Overall, the website is trustworthy and professionally maintained, reflecting Google's standards. The main risks relate to the absence of explicit privacy and terms documentation and lack of direct contact channels for security or business inquiries. Addressing these gaps would enhance compliance and user confidence.

O

Obsidian

obsidian.md

63

Obsidian is a technology company offering a flexible and private note-taking application designed for individuals and teams focused on knowledge management and productivity. Founded in 2020, it has established a strong market presence with a robust plugin ecosystem, secure sync services, and publishing capabilities. The website reflects a professional and consistent brand image, targeting users who value privacy and customization in their digital workspace. Technically, the site leverages modern technologies such as Tailwind CSS and Pixi.js, is hosted behind Cloudflare, and is optimized for performance and mobile responsiveness. Security practices include HTTPS enforcement and end-to-end encryption for sync services, though there is room for improvement in cookie consent and incident response transparency. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, making it a reliable platform for its user base.

P

ProtoArc

protoarc.com

70

ProtoArc operates an e-commerce platform specializing in ergonomic and foldable workspace peripherals such as keyboards, mice, and combos designed to enhance productivity and comfort. The company targets consumers and professionals who value wellness and portability in their workspace setup. The website is built on Shopify, leveraging modern web technologies and integrates multiple marketing and analytics tools to optimize user engagement and sales performance. Despite the lack of publicly available WHOIS data, the website presents a professional and trustworthy front with comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are absent, representing an area for improvement. Overall, the site is well-structured, mobile-optimized, and provides a positive user experience with clear navigation and relevant content.

The website jtw.io currently serves as a minimal redirect page with obfuscated JavaScript code that appears to route visitors to external domains related to ad or traffic management. The domain is registered through NameCheap with privacy protection enabled, and the WHOIS data indicates a creation date in 2017 with expiration in 2026. There is no visible business information, contact details, or user-facing content on the landing page, which limits the ability to assess the company's market position or services. The technical infrastructure suggests use of JavaScript for redirection and ad overlay detection, hosted via ParkLogic nameservers. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and privacy policies. The site likely employs some form of WAF or security challenge, as indicated by the minimal content and redirect behavior. Overall, the website appears to be used primarily for traffic monetization or ad routing rather than a traditional business presence.

V

Valero Energy Corp.

investorvalero.com

60

Valero Energy Corp. operates a comprehensive and professional investor relations website that supports its position as a leading energy company. The site provides extensive financial data, SEC filings, news updates, and investor presentations, targeting investors and stakeholders in the energy sector. The business model focuses on refining and renewable energy production, with a strong emphasis on transparency and regulatory compliance. The website is built on the Q4 Inc investor relations platform, leveraging modern web technologies and providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and domain protection mechanisms, though there is room for improvement in security headers and published policies. Overall, the site reflects a mature digital presence aligned with enterprise-level corporate standards.

B

Blockscout Limited

storyscan.xyz

60

The website www.storyscan.io is an open-source blockchain explorer platform focused on the Story blockchain network, powered by Blockscout Limited technology. It provides users with tools to search transactions, verify smart contracts, analyze addresses, and track network activity. The platform targets blockchain users, developers, and analysts seeking comprehensive blockchain data and APIs. The business model is centered on providing free and open-source blockchain exploration services, positioning itself as a niche technology provider in the blockchain analytics space. Technically, the website leverages modern web technologies including React, Next.js, and Chakra UI, ensuring a responsive and moderately performant user experience. The site is mobile-optimized and structured with good navigation clarity, though content quality is basic with some loading skeleton placeholders visible. SEO and accessibility are implemented at a basic to good level. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and privacy disclosures such as privacy and cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable due to privacy protection or malformed WHOIS responses, which is common in blockchain-related domains but reduces transparency. Overall, the website is functional and trustworthy for its intended purpose but would benefit from enhanced privacy compliance, security headers, and contact information to improve its security posture and business credibility. The risk level is moderate with no critical vulnerabilities detected.

C

Clerk

clerk.com

69

Clerk is a technology company specializing in providing authentication and user management solutions tailored for modern web applications built with React, Next.js, and Remix. Their platform offers a comprehensive suite of UI components and APIs that enable developers to implement sign-in, sign-up, user profile management, organization management, and billing functionalities quickly and efficiently. Positioned as a developer-friendly SaaS solution, Clerk targets businesses and developers seeking to streamline user authentication and management processes. Technically, Clerk's website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks such as React and Next.js. The site is well-optimized for performance and mobile responsiveness, with a clean, professional design that enhances user experience. The use of a dedicated JavaScript SDK and integration with analytics tools indicates a focus on developer usability and data-driven insights. From a security perspective, Clerk employs HTTPS and domain registration protections like clientDeleteProhibited and clientTransferProhibited statuses, which enhance domain security. However, the absence of DNSSEC and security headers represents areas for improvement. The website lacks explicit privacy and cookie policies, which may impact compliance with regulations such as GDPR. No direct contact or incident response information is provided, limiting transparency in security governance. Overall, Clerk presents as a credible and professional service provider with a strong technical foundation and market positioning. To enhance trust and compliance, it is recommended that Clerk publish comprehensive privacy and cookie policies, implement DNSSEC, and adopt standard security headers. These steps will improve their security posture and regulatory compliance, further solidifying their reputation in the authentication services market.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that serves as a placeholder or offline page within the Chrome browser. It includes embedded JavaScript and HTML for the Chrome offline dinosaur game, which activates when there is no internet connectivity. There is no evidence of a public-facing business website, commercial content, or corporate information. The page lacks any privacy, cookie, or terms of service policies, and no contact or security information is provided. Technically, the page uses standard web technologies such as JavaScript, HTML5 Canvas, and Web Audio API, optimized for fast performance and mobile responsiveness within the browser environment. However, as this is not a public website, no hosting or CMS details are applicable. Security posture cannot be fully assessed due to the nature of the content, but no vulnerabilities or sensitive data exposure were detected. Overall, this is not a legitimate business website but an internal browser error page with embedded game code, and thus it scores very low on business credibility, privacy compliance, and content quality.

U

Unify

unifygtm.com

71

Unify is a technology company specializing in sales and marketing automation solutions that leverage AI and intent data to optimize outbound engagement. Their platform offers tools such as intent signal capture, AI agents for lead research, personalized outbound sequences, and analytics dashboards. Positioned as a growth platform for B2B sales and marketing professionals, Unify aims to transform growth into a science through data-driven workflows. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management technologies, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but overall, the site presents a credible and trustworthy business front.

Ε

Επικοινωνίες Κρήτης Ε.Π.Ε.

promexpo.gr

46

The website www.promexpo.gr serves as the official platform for the 8th Pancretan Exhibition of Local Products and Services held in Thessaloniki in 2017. It focuses on promoting Cretan products, tourism, culture, and services, targeting exhibitors, commercial visitors, and the general public interested in authentic regional offerings. The business operates primarily as an event organizer with partnerships across media and local government entities, positioning itself as a key regional promoter of Cretan culture and commerce. Technically, the site is built on Joomla CMS, utilizing common web technologies such as Bootstrap, jQuery, and Google Fonts. While the site is moderately optimized for mobile and SEO, it lacks advanced accessibility features and modern security implementations. The presence of Google Analytics and remarketing tags indicates moderate user tracking, but privacy and cookie policies are absent, which is a compliance gap. From a security perspective, the site does not enforce HTTPS visibly in the provided content, nor does it include security headers, which lowers its security posture. No incident response or vulnerability disclosure information is available, and no forms are present to assess input security. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, the site is functional and serves its business purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.

The website cretablog.gr currently serves as a parked domain landing page with minimal content, primarily advertising the domain for sale. There is no active business presence, no contact information, and no substantive content describing any services or products. The technical infrastructure relies on third-party ad networks and tracking scripts, with no detected CMS or advanced frameworks. Security posture is weak, lacking HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy linked via a popup. Overall, the site does not present a professional or trustworthy business front and is likely intended for domain resale rather than active operation.

R

Riot

tryriot.com

76

Riot is a cybersecurity technology company specializing in employee security posture management. Founded in 2019, it offers a SaaS platform that helps organizations protect their workforce from evolving cyber threats, including AI-powered attacks. The company positions itself as a leader in this niche, serving thousands of leading companies globally with a suite of products such as awareness training, phishing simulations, permission drift prevention, and real-time breach detection. The website reflects a mature digital presence with modern technologies, strong branding, and comprehensive content aimed at cybersecurity teams and enterprises. Technically, the site uses Nuxt.js with Tailwind CSS, is hosted behind Cloudflare, and integrates Piwik PRO analytics and HubSpot marketing tools. Security posture is strong with HTTPS, SOC 2 Type 2 certification, GDPR compliance, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and SEO.

C

Cyberhaven

cyberhaven.com

59

Cyberhaven is a technology company specializing in advanced data security solutions focused on tracing data lineage to prevent insider risks and data exfiltration. Positioned as an innovative leader in the data loss prevention and insider risk management market, Cyberhaven offers AI-driven services tailored for enterprise clients. Their website demonstrates a mature digital presence with comprehensive resources, customer testimonials, and a strong emphasis on trust and compliance. The technical infrastructure leverages modern web technologies including Webflow CMS, HubSpot marketing tools, and multiple analytics platforms, ensuring fast performance and good user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms including GDPR-aligned policies and cookie consent. No critical vulnerabilities or suspicious indicators were found, supporting a high trust level. Overall, Cyberhaven presents a professional, secure, and compliant online presence aligned with its business objectives.

N

Neko Health

nekohealth.com

68

Neko Health operates as a preventive healthcare provider offering advanced body scanning services combined with doctor consultations. Their innovative Neko Body Scan technology enables rapid, non-invasive health checks focusing on multiple health indicators such as skin moles, heart and artery health, blood sugar, and cholesterol levels. The company maintains physical clinics in London and Stockholm, targeting health-conscious individuals seeking early detection and monitoring of health risks. The website demonstrates a high level of digital maturity, utilizing modern web technologies like Next.js and React, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and comprehensive security headers, though explicit security policies and incident response details are not publicly available. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but does not detract from the professional presentation and business legitimacy. Overall, Neko Health presents a trustworthy and professional online presence with room for improvement in transparency around security and privacy governance.

C

Cognition

cognition.ai

65

Cognition is an applied AI lab specializing in building advanced AI software engineering tools, notably their flagship product Devin, an AI software engineer designed to assist ambitious engineering teams. The company positions itself as an innovative technology leader focused on enterprise AI solutions and applied research. Their website reflects a high level of professionalism, with excellent design, clear navigation, and relevant content targeted at software developers and enterprises. Technically, the site leverages modern frameworks such as Astro, is hosted on Vercel, and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website and domain WHOIS data align well, supporting the legitimacy and credibility of the business.

P

poolside

poolside.ai

66

Poolside.ai is a specialized AI research lab focused on building advanced AI models tailored for software engineering. The company positions itself as a leader in enterprise AI solutions, emphasizing proprietary foundation models developed from first principles. Their target audience is primarily enterprises and software development teams seeking AI integration to accelerate software delivery and innovation. Technically, the website is built using modern frameworks like SvelteKit, hosted with Cloudflare DNS, and employs Google Analytics for user tracking. The site is well-designed, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site uses HTTPS and shows no immediate vulnerabilities, but lacks comprehensive security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the domain registration is privacy protected but consistent with a legitimate tech startup founded in 2020. Strategic recommendations include enhancing privacy and security disclosures, enabling DNSSEC, and publishing incident response information to improve trust and compliance.

C

Celestial AI

celestial.ai

60

Celestial AI is a technology company specializing in developing advanced AI computing platforms that enhance performance, energy efficiency, and economic benefits for their customers. Their market position is that of an innovative AI platform provider targeting businesses and developers seeking cutting-edge AI hardware and software solutions. The website is professionally designed using Squarespace, featuring modern technologies such as HubSpot analytics and Typekit fonts, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and privacy policies indicates room for improvement. Overall, the website presents a credible business presence with consistent branding and clear contact information, though privacy compliance and security practices could be enhanced.

T

Together AI

together.ai

66

Together AI operates a sophisticated AI acceleration cloud platform that enables AI pioneers and enterprises to train, fine-tune, and deploy generative AI models at scale using scalable GPU clusters. The company positions itself as a leader in open-source AI infrastructure, offering a range of services including serverless inference, dedicated endpoints, fine-tuning, and large-scale GPU cloud clusters. Their platform is designed for developers and enterprises seeking high-performance AI infrastructure with enterprise-grade compliance such as SOC 2 Type 2. Technically, the website is built on modern frameworks like Webflow, integrates advanced analytics tools such as Amplitude and Google Tag Manager, and employs security measures including HTTPS and CAPTCHA to protect against abuse. The security posture is strong, with no evident vulnerabilities or exposed sensitive data, though explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the website is professional, well-branded, and trustworthy, though the absence of a public privacy policy and detailed security documentation slightly reduces privacy compliance scores.

V

Valero Energy Corporation

valero.com

66

Valero Energy Corporation operates a comprehensive website showcasing its position as a leading global independent refiner and the largest U.S. producer of renewable fuels. The site provides detailed information on its business segments including petroleum refining, renewable diesel, and ethanol production, targeting investors, customers, and job seekers. The website is professionally designed with clear navigation, mobile optimization, and rich content emphasizing corporate responsibility and sustainability. Technically, the site is built on Drupal 10, integrates Google Analytics and Tag Manager with privacy-conscious settings, and shows good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response disclosures could be improved. WHOIS data is missing, which is unusual but the website's branding and linked investor domain support legitimacy. Overall, the site reflects a mature digital presence aligned with a large enterprise energy company.

B

Bruyère Innovation

bruyereinnovation.ca

54

Bruyère Innovation presents a professional but minimal web presence hosted on the Wix platform, branded clearly with its name but lacking detailed business descriptions or contact information. The technical infrastructure is modern and leverages Wix's Thunderbolt framework, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy or terms policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. Overall, the website serves as a basic informational portal but requires enhancements in transparency, compliance, and security to improve credibility and user trust.

The website safevisit.online appears to be a recently registered domain (2022) with privacy-protected WHOIS information. The site content is minimal and consists almost entirely of JavaScript code related to user tracking, advertising pixels, and analytics integrations. There is no visible business information, user-facing content, or contact details. The technical infrastructure relies heavily on third-party ad networks and tracking services such as Neustar, The Trade Desk, Resonate, LiveIntent, and AiMedia's Matomo analytics. No privacy or cookie policies are present, and no consent mechanisms are implemented. Security posture is weak due to lack of visible security headers and no DNSSEC enabled. Overall, the site lacks transparency and trust indicators, making it difficult to assess its legitimacy or business purpose.

The website gingertech.net is a well-established personal technical blog authored by 'silvia', focusing on WebRTC, HTML5, digital media, and related open source technologies. The content is rich with detailed articles, plugin announcements, and technical insights, targeting developers and technology enthusiasts. The site uses WordPress CMS with common plugins such as Jetpack and All in One SEO, hosted on infrastructure likely provided by Amazon AWS. The technical implementation is solid with good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies, which could pose regulatory risks. Contact is available only via a contact form, with no direct emails or phone numbers disclosed. Overall, the site is trustworthy as a personal blog with a long domain history consistent with the content.

V

Valeurs mobilières Desjardins inc.

disnat.com

65

Desjardins Courtage en ligne, operating under the brand Disnat, is a well-established Canadian discount brokerage service affiliated with the Fédération des caisses Desjardins du Québec. The website offers comprehensive online trading platforms, mobile applications, real-time market data, and investor education resources targeting retail investors in Canada. The business model focuses on providing accessible and technologically advanced brokerage services with a strong emphasis on customer education and market transparency. The site demonstrates consistent branding aligned with its parent company and regulatory memberships, reinforcing its market position as a trusted financial services provider. Technically, the website employs modern web technologies including Bootstrap 3, JavaScript libraries, and integrates third-party analytics and consent management tools such as Google Tag Manager and Qualtrics. The site is mobile-optimized, accessible, and structured for good SEO performance. Security measures include HTTPS enforcement, secure login forms with anti-CSRF tokens, and cookie consent mechanisms, although some security headers are not explicitly detected and could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a public incident response contact or vulnerability disclosure policy is a gap. The WHOIS data is notably missing or protected, which reduces transparency but does not necessarily indicate illegitimacy given the strong brand presence and regulatory affiliations. Overall, the site is secure, professional, and compliant with privacy regulations including GDPR. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response information, and improve WHOIS transparency to further strengthen trust. The website is suitable for its target audience and maintains a high level of professionalism and security appropriate for a financial services platform.

D

DigiDojo

digidojo.gr

43

DigiDojo is a Greece-based digital services company specializing in comprehensive internet solutions including website and e-shop development, SEO, digital advertising, content management, and social media management. The company positions itself as a turnkey provider enabling businesses to focus on their core operations while DigiDojo manages their digital presence. Their client portfolio and testimonials indicate a trusted local market presence with a focus on quality and timely delivery. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent management, though explicit security policies and incident response contacts are not published. Overall, DigiDojo demonstrates a mature digital infrastructure and a professional online presence with good privacy compliance and security posture.

S

Storyist Software

storyist.com

51

Storyist Software operates a niche writing software business targeting novelists and screenwriters with products for macOS and iOS. The company offers a specialized writing environment that supports manuscript formatting, story organization, and cloud accessibility. The website reflects a mature, small-sized technology company with a consistent brand and positive trust signals such as testimonials and social media presence. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate with some gaps such as lack of DNSSEC and missing security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

C

Centre canadien sur les dépendances et l’usage de substances

cemusc.ca

52

The website cemusc.ca is a professionally designed, bilingual French-English platform dedicated to providing comprehensive data and resources on the costs and harms of substance use in Canada. It is affiliated with the Centre canadien sur les dépendances et l’usage de substances (CCSA) and the University of Victoria's CISUR research center, positioning it as an authoritative source in the public health and research sector. The site offers interactive data visualization tools, detailed reports, and infographics aimed at researchers, policymakers, and the general public interested in substance use impacts. Technically, the site employs modern web technologies including Bootstrap for responsive design, FontAwesome for icons, and jQuery for scripting. The site is mobile-optimized and accessible, with a moderate performance profile. While no CMS is explicitly detected, the site is well-structured and includes accessibility features and cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy notice and cookie consent banner, though no terms of service or security policy pages were found. Overall, cemusc.ca presents a trustworthy, well-maintained resource with a strong focus on public health research. Strategic improvements in security headers and DNSSEC implementation would further strengthen its security posture. The absence of direct contact emails or phone numbers is mitigated by a contact form. The site is safe for general audiences and free from adult or explicit content.

Fastkets is a website representing an architectural firm named Études, which offers innovative and sustainable architectural solutions including renovation, consulting, project management, and app access for collaboration. The company targets homeowners, commercial developers, and architects, positioning itself as a creative and functional service provider in the architecture sector. The website is built on WordPress with a modern, responsive design and good accessibility features. However, it lacks critical compliance elements such as privacy and cookie policies, contact information, and security incident response details. The security posture is basic with HTTPS enabled but missing important security headers. No WHOIS registrant data is available due to ROTLD privacy restrictions, which limits trust assessment. Overall, the site is professional but could improve transparency and compliance.

S

Stockdio

stockdio.com

63

Stockdio is a specialized technology company offering financial market analytics and charting services primarily targeted at developers, financial consultants, bloggers, and project managers. The platform emphasizes ease of integration, scalability, and customization, providing REST APIs and embeddable charts with included market data from multiple international exchanges. The website reflects a professional and consistent brand image, supported by a small but focused business entity founded in 2015 and associated with parent company Software FX. Technically, the site uses modern web technologies including jQuery, Foundation CSS, Google Fonts, and Google Tag Manager, hosted on AWS infrastructure. Performance and mobile optimization are adequate, with good SEO practices in place. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite use of tracking and advertising scripts. Contact information is limited to an email address and contact form, with no phone or physical address provided. Overall, the site is trustworthy and functional but could improve in privacy and security transparency.

V

VRIFY

vrify.com

69

VRIFY is a specialized technology company offering an AI-assisted mineral discovery platform designed to transform large geospatial datasets into actionable insights for mineral exploration. Their platform leverages proprietary AI and deep learning models to help mining companies, geologists, and investors identify high-potential mineralization areas efficiently. The company positions itself as an innovator in the energy sector with a focus on integrating AI with traditional geological expertise. The website is professionally designed using modern Webflow CMS technology, with integrations for analytics and marketing tools such as Google Tag Manager, LinkedIn Insight, and HubSpot forms. While the site is well-structured and mobile-optimized, it lacks some privacy compliance features such as a cookie consent mechanism and explicit GDPR indicators. Security posture is generally good with HTTPS enforced and domain registrar locks in place, but could be improved by enabling DNSSEC and adding security headers. Overall, VRIFY presents a credible and professional digital presence aligned with its business focus in AI-driven mineral exploration.