Medium-risk security reports

ADP Research Institute operates as a data-driven research entity focused on workforce and employment insights, leveraging extensive payroll and survey data primarily from the United States. The website presents itself as a professional and authoritative source for business leaders, economists, and HR professionals, offering detailed reports such as the National Employment Report and Today at Work series. Technically, the site is built on WordPress with modern SEO and analytics integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable anomaly but does not detract significantly from the site's apparent legitimacy given its branding and content. Overall, the site is a credible resource with room for improvement in transparency and security documentation.

The website www.1stresponse.ca is a commercial retail and informational platform focused on pregnancy tests, fertility lubricants, and pregnancy planning tools. It is branded under First Response, a trademark of Church & Dwight Co., Inc., a recognized company in the healthcare and consumer products sector. The site targets individuals planning pregnancy or seeking fertility-related products and information, offering product listings, online calculators, and educational resources. The market position is strong with cited awards and clear brand consistency. Technically, the site uses modern front-end technologies including jQuery, Slick Carousel, FontAwesome, and Google Fonts, with marketing/tracking scripts from MikMak. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS in use but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from legitimacy given the brand association. Overall, the site is professional, trustworthy, and serves its target audience effectively.

TrueLoyal is an AI-powered loyalty and rewards platform designed to help businesses increase repeat purchases, drive customer retention, and convert customers into brand advocates. The platform offers advanced features such as gamification, churn prediction, multi-region loyalty, and social commerce capabilities, positioning itself as a comprehensive B2B SaaS solution in the customer loyalty technology sector. The website demonstrates a professional digital presence with modern design and structured data, indicating a mature technical infrastructure leveraging WordPress and Elementor CMS, integrated with multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Freshsales CRM, and various tracking pixels. Security measures include HTTPS enforcement, Google reCAPTCHA for bot protection, and a detailed cookie consent mechanism, although explicit privacy and security policy pages are not evident in the provided content. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness, but the overall website quality and business focus suggest legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility compliance to strengthen trust and compliance posture.

Intelligems is a SaaS company specializing in price A/B testing and profit optimization for e-commerce businesses. Their platform enables merchants to test prices, discounts, and shipping rates to maximize margins effectively. The website is professionally designed using the Framer platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, indicating a mature digital marketing approach. However, the absence of visible privacy and cookie policies and lack of contact information reduces transparency and privacy compliance. The security posture is generally good with HTTPS enabled and asynchronous loading of tracking scripts, but security headers and explicit security policies are missing. Overall, the website presents a legitimate and focused business offering, but improvements in privacy compliance and contact transparency are recommended.

Trojan.com.mx is the official Mexican website for Trojan condoms, operated by Church & Dwight México. The site promotes sexual health and safety by offering high-quality condom products and educational content tailored to the Mexican market. It maintains a strong brand presence with integrated social media channels and a focus on user engagement. Technically, the website employs modern front-end frameworks such as Materialize CSS and Bootstrap, enhanced by analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is protected by Imperva Incapsula WAF and enforces HTTPS, reflecting a solid security posture. Privacy compliance is robust with OneTrust cookie consent management and clear privacy and terms of service pages. However, explicit contact information and security policies are not prominently displayed, which could be improved for enhanced trust and transparency.

Trojan.ca is the Canadian website for Trojan, a well-known brand specializing in sexual wellness products including condoms, lubricants, and vibrating massagers. The site is professionally designed and targets adult consumers in Canada seeking high-quality sexual health products. It is owned by Church & Dwight Co., Inc., a large enterprise with a strong market presence. The website leverages modern technologies such as Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though some security headers and explicit incident response contacts are missing. Overall, the site is legitimate, trustworthy, and compliant with privacy regulations, serving a niche adult market effectively.

The Hygiene Squad website represents a consortium of trusted oral care brands under the Church & Dwight Co., Inc. umbrella, offering a range of dental hygiene products and professional educational resources. The site targets dental professionals and their patients, providing product information, sample requests, and training programs to support oral health. The business model combines B2B and B2C elements, leveraging well-known brands such as ARM & HAMMER, Spinbrush, Therabreath, Orajel, and Waterpik. The website positions itself as a reliable partner in oral care with consistent branding and professional content. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager and Analytics for tracking, OneTrust for cookie consent management, and LiveHelpNow for live chat support. Hosting and security are supported by Imperva Incapsula, indicating a robust infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although explicit security headers are not detected. From a security perspective, the site uses HTTPS and cookie consent mechanisms compliant with GDPR. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure or security.txt file is found. The absence of WHOIS registration data for the domain is a notable anomaly, potentially due to privacy protection or proxy registration, which slightly reduces trustworthiness but does not outweigh the strong brand association and professional presentation. Overall, the website is well-designed, secure, and compliant with privacy regulations, serving its business purpose effectively. Strategic improvements include publishing explicit security policies, enhancing security headers, and clarifying domain registration details to strengthen trust and transparency.

Church & Dwight Canada Corp. operates as a manufacturer and distributor of well-known consumer household brands trusted by Canadian consumers. The website presents a professional corporate image with clear branding and a focus on product families such as ARM & HAMMER™, GRAVOL™, and others. The company targets Canadian households and emphasizes reliability and effectiveness in its product offerings. The business is a subsidiary of Church & Dwight Co., Inc., with a domain age consistent with its market presence since 2000. Technically, the website employs modern tracking and consent management technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent. The hosting is managed via MarkMonitor, a reputable provider. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, no CMS or specific frameworks were detected. From a security perspective, the site uses HTTPS and has domain status flags that prevent unauthorized transfers or updates. DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response information, which could be improved. The cookie consent mechanism is robust and GDPR compliant, reflecting good privacy practices. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The absence of direct contact emails or phone numbers is mitigated by a contact form hosted on a related domain. Recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and security posture.

ExxonMobil Germany operates as a regional branch of the global ExxonMobil Corporation, providing energy products such as natural gas, oil, lubricants, and chemical products with a focus on sustainability and low carbon solutions. The website targets a German-speaking audience including business partners, customers, and the general public interested in energy and environmental topics. The digital infrastructure is modern, leveraging Akamai CDN for hosting and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforced and cookie consent managed via OneTrust, though explicit security policies and incident response information are not publicly detailed. Overall, the site reflects a mature corporate digital presence with room for enhanced transparency in security and privacy disclosures.

Esso S.A.F., a subsidiary of ExxonMobil, operates as a major energy company in France with a history dating back to 1902. The company specializes in purchasing crude oil on the international market, refining it in its French facilities, and marketing a broad range of petroleum products. The website serves as a corporate portal providing information about the company's business model, strategic priorities, governance, and sustainability efforts. The site is well-branded and consistent with ExxonMobil's global presence, targeting both general public and business stakeholders interested in energy products and corporate affairs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, hosted via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. The lack of WHOIS data is a notable anomaly, reducing trust in domain registration transparency, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with basic privacy standards, though improvements in transparency and security documentation are recommended.

The website lubricantescolombia.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare error 525 page. This prevents access to any business content, policies, or contact information. The domain is registered since 2017 with GoDaddy and uses Cloudflare DNS, but the SSL configuration on the origin server is incompatible with Cloudflare's requirements. No metadata, structured data, or forms are present in the accessible HTML content. The site lacks privacy, cookie, and terms of service policies, as well as any contact or social media information. Overall, the website's digital presence is minimal and blocked, limiting any meaningful content or business insights.

WOGAA is a Singapore government digital analytics platform operated by the Government Technology Agency. It provides data-driven insights and monitoring services such as web analytics, uptime monitoring, site performance inspection, and user sentiment collection to support 98 government agencies. The platform aims to improve government digital services by leveraging data collected across multiple government websites. Technically, the website uses modern JavaScript frameworks and is hosted on AWS infrastructure with a strong Content-Security-Policy and HTTPS enforcement. However, DNSSEC is not enabled, and some security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. No contact emails or phone numbers are explicitly listed, which may impact user support. Overall, the site is professional, trustworthy, and well-positioned as a government service platform.

Emerson Professional Tools operates a secure distributor portal for its RIDGID and Greenlee brands, enabling authorized distributors to access product information and place orders through a unified login system. The website reflects a mature business model focused on B2B distribution within the manufacturing sector, leveraging the strong Emerson brand. The portal is designed with modern web technologies including Vue.js and Bootstrap, ensuring a responsive and user-friendly experience. While the site uses HTTPS and standard security practices, the absence of WHOIS data and security headers suggests areas for improvement in transparency and security hardening. Privacy and cookie policies are linked to the main Emerson corporate site, indicating compliance with GDPR and related regulations. Overall, the site is professional, trustworthy, and well-positioned for its target audience, though enhanced security measures and clearer contact information would strengthen its posture.

RIDGIDGear.com operates as an official e-commerce platform specializing in RIDGID and Greenlee branded apparel and accessories, targeting trade professionals and brand enthusiasts. The site is owned by Emerson Electric Co., a large and established industrial company, which lends credibility and market presence. The website offers a structured product catalog with clear navigation and a professional design, supporting a positive user experience. Technically, the site uses standard web technologies including jQuery and Google Fonts, with a custom or proprietary e-commerce platform. Mobile optimization is good, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is implied but no advanced security headers or DNSSEC are enabled, representing an area for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and functional but could benefit from enhanced security and privacy features.

Esso Card is a UK-based provider specializing in fuel cards for businesses, fleets, and hauliers across the UK and Europe. The company positions itself as a leading provider offering fuel savings and convenient online application processes. The website is professionally designed using WordPress with modern technologies such as jQuery, Bootstrap, and Font Awesome, and is optimized for SEO with Yoast plugin integration. However, the lack of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS likely enabled but missing explicit security headers and policies. Privacy and cookie policies are not evident, which may impact compliance and user trust. Overall, the site is business-focused, safe, and functional but would benefit from enhanced transparency and security measures.

The website servicos.gov.br/editar is an official Brazilian government portal designed to allow public servants to access and edit government service information. It targets government employees and operates as a secure internal platform. The site uses HTTPS and integrates Google reCAPTCHA to protect against automated abuse. The technical infrastructure is basic but sufficient for its purpose, hosted on SERPRO servers, a trusted government IT provider. The site lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good, with secure forms and HTTPS, but could be improved by adding security headers and explicit policies. Overall, the site is trustworthy and safe, with no adult or questionable content.

The Controladoria-Geral da União (CGU) website serves as the official portal for Brazil's federal government agency responsible for public asset protection, transparency, and anti-corruption efforts. The site offers a broad range of services including auditing, citizen education, access to information, and social participation. It targets citizens, businesses, and public entities, positioning itself as a key government transparency and oversight institution. The website is well-branded, consistent, and provides comprehensive content relevant to its mission.

LifeBlock appears to be a technology service platform with a login portal built using Angular and Material Design. The website is professionally designed with good user experience and mobile optimization, but content is minimal and focused solely on authentication. The lack of visible business information, privacy policies, and contact details limits transparency and trust. Technical infrastructure uses modern frameworks but lacks visible security headers and analytics tools. The security posture is weak due to missing security best practices and no SSL/HTTPS details available. Overall, the site is functional but lacks critical compliance and trust indicators.

The website createsend.com provides email newsletter software services, targeting businesses and individuals who require tools to create and manage email marketing campaigns. Established since 2005, the company appears to be a mature player in the email marketing SaaS industry. The website content is minimal on the analyzed login page but indicates a professional service with integrated modern analytics and marketing technologies. The technical infrastructure leverages React, Sentry, Datadog, Google Analytics, Facebook Pixel, Hotjar, and Segment, reflecting a modern digital maturity level. Security posture is generally good with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled and explicit security headers are not detected. Privacy compliance is weak on this page, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact information is limited to an embedded contact form with no direct emails or phone numbers. Overall, the website is functional and moderately professional but could improve transparency and compliance documentation.

MemberSpace is a technology company providing a SaaS membership platform that enables entrepreneurs, business owners, and creators to monetize their websites by selling memberships and digital products such as content libraries, online courses, and newsletters. The platform integrates with Stripe for payment processing and offers flexible pricing models including subscriptions and payment plans. The website demonstrates a mature technical infrastructure built on WordPress with Elementor and Yoast SEO, supported by modern analytics and marketing tools such as Google Tag Manager, Hotjar, and Fathom Analytics. Security measures include HTTPS enforcement, Cloudflare bot management, Google reCAPTCHA, and a comprehensive cookie consent mechanism. However, the absence of publicly available WHOIS data and lack of visible contact information or Terms of Service slightly reduce transparency. Overall, MemberSpace presents a professional and trustworthy online presence with strong compliance and user experience, suitable for its target market of digital content creators and entrepreneurs.

Memberful LLC operates a mature and well-established membership software platform designed to empower independent creators, publishers, and media companies. Founded in 2010 and now a Patreon company, Memberful offers a comprehensive suite of tools for building membership websites, publishing exclusive content, managing members, and monetizing recurring revenue streams. The website reflects a strong market position with over one million members worldwide and trusted partnerships such as Stripe. Technically, the site leverages modern web technologies including Cloudflare for DNS and bot management, Google Analytics, Intercom for customer support, and CookieYes for cookie consent management. The site is fast, mobile-optimized, and accessible, with excellent design and user experience. Security posture is strong with HTTPS enforced, domain transfer lock, and bot management, though DNSSEC is not enabled and incident response contacts are not explicitly provided. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy business with a high level of digital maturity.

PlayOnContent S.L. operates the PlayOncenter platform, an online video platform and multimedia content aggregator aimed at providing innovative solutions for audience targeting and content management. The website analyzed is an administrative login portal designed for authorized users to access platform management features. The business appears to be a small technology company focused on niche online video services. The website content is minimal but functional, primarily serving as a secure entry point for administrators. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Modernizr for feature detection. The site enforces HTTPS on its login form, but lacks advanced security headers and visible modern frameworks or CMS platforms. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site has a moderate posture with HTTPS enabled but lacks important security headers such as Content-Security-Policy and HSTS. The login form collects username and password but does not show additional protections like CAPTCHA or multi-factor authentication. No privacy or cookie policies are present, which is a compliance gap. WHOIS data is unavailable or missing, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional but lacks comprehensive security and privacy measures. The absence of WHOIS data and privacy policies reduces trustworthiness. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance the platform's credibility and protect user data.

The website motormania.com.mx is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. As a result, no business information, contact details, or policies are available for analysis. The site lacks metadata, structured data, forms, or any interactive elements. The technical infrastructure cannot be assessed due to the blocked content. Security posture is poor with no visible HTTPS or security headers. Overall, the website is not operational for public access, severely limiting trust and credibility assessments.

IDC Online is a Mexican digital media platform specializing in providing articles, indicators, tools, and calculators to assist professionals and businesses with fiscal, legal, labor, social security, and foreign trade compliance. The site offers a digital magazine, seminars, and subscription services, positioning itself as a trusted resource in its niche market. The website demonstrates a professional design with consistent branding and regularly updated content authored by named contributors. Technically, the site uses a modern tech stack including Bootstrap, Google Analytics, Taboola, and Marfeel SDK, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks published privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms, which are areas for improvement. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is a reliable resource for its target audience but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

Openrevista.com is a Spanish-language digital media platform operated under Grupo Medios, a medium-sized media company based in Mexico. The website focuses on social issues, innovation, environmental topics, and entertainment, targeting a general audience interested in contemporary cultural and social conversations. The business model centers on digital magazine publishing supported primarily by advertising revenue, with multiple sister sites reinforcing its market presence. The site offers downloadable digital magazines and promotes advertising opportunities for small and medium enterprises.

Wine & Food Festival is a niche event organizer based in Mexico, specializing in high-end gastronomic festivals and culinary experiences that showcase Mexican and international cuisine. The website presents a professional and visually appealing platform built on WordPress with Elementor and WooCommerce, supporting event promotion and ticket sales. The technical infrastructure is modern and includes analytics and marketing tools, though hosting details are not explicit. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its market segment but should improve compliance and security transparency.

Gourmet de México is a well-established Mexican media outlet specializing in gourmet gastronomy, beverages, travel, and lifestyle content. The website serves a mature audience interested in culinary experiences and cultural exploration, positioning itself as a key player in Mexico's gourmet media landscape. It offers diverse content including articles, videos, downloadable magazines, and restaurant guides, monetized primarily through advertising partnerships and sponsored content. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced advertising technologies such as Prebid.js, Amazon APS, and Google Ad Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced, standard security headers, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Privacy compliance is good with GDPR indicators and a cookie policy, but contact information for privacy or security concerns is not directly provided. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience, with room for improvement in transparency and security documentation.

Somos News is a Mexican regional news website delivering content in Spanish focused on current affairs, sports, entertainment, and lifestyle. The site targets a general audience interested in diverse news topics relevant to Mexico. It operates as a small media entity with a digital-first business model relying on advertising revenue through multiple ad networks and tracking services. Technically, the website is built on WordPress with modern frameworks like Bootstrap 5 and uses popular analytics and advertising technologies such as Google Analytics, Google Tag Manager, Taboola, and Criteo. The site is mobile-optimized and employs structured data for SEO enhancement. Security posture is moderate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is legitimate and consistent with its business claims but would benefit from improved privacy and security practices.

Ezassi is a technology company specializing in innovation management software and open innovation platforms. Their offerings include AI-powered ideation platforms, technology scouting, and innovation research reports, targeting corporate innovation teams and R&D departments. The company has a well-structured website with professional design and clear navigation, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and Astra theme, integrating modern analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. Security posture is good with HTTPS enabled and domain registration transparency, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the website presents a credible and professional business image with moderate to good security and privacy practices.

Church & Dwight Co., Inc. operates an innovation portal website focused on encouraging submissions of new product ideas and innovations. The site supports their established consumer product brands and serves as a platform for employees and external innovators to contribute. The business is positioned as a large manufacturing and retail company with a strong brand presence in the consumer goods market. Technically, the website is built on WordPress with common plugins and uses Google Analytics for tracking. The site is mobile optimized and has good navigation and content quality. Security posture is moderate with HTTPS enabled and domain registration protections, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy linked but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

Open Subscription Platforms is a niche informational and advocacy website focused on promoting open subscription platforms that empower independent businesses to own and control their subscription and payment data. The platform provides detailed comparisons between open and closed subscription services, highlighting the importance of data portability and customer ownership. The website targets independent content creators, small businesses, and subscription entrepreneurs seeking transparency and control over their customer data. Technically, the site is built using the Hugo static site generator, hosted and registered via Cloudflare, and employs Plausible Analytics for privacy-conscious visitor tracking. The site is performant, mobile-optimized, and well-structured, though it lacks explicit privacy and cookie policies, which are important for compliance. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of security headers and incident response information are areas for improvement. Overall, the website is trustworthy and professional, serving as a valuable resource for its target audience.

NodeCMSGuide is a specialized online platform that provides a leaderboard and ranking system for Node.js content management systems. It targets developers and technical decision-makers interested in evaluating and selecting Node.js CMS solutions. The website offers filtering and sorting capabilities for various CMS projects, linking directly to their repositories and project pages. The platform positions itself as a niche resource within the broader technology industry, focusing on open source and closed source Node.js CMS projects. Technically, the site is built using modern JavaScript frameworks such as React and Styled Components, delivering a responsive and well-structured user experience. However, it lacks comprehensive privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security-wise, the site enforces HTTPS but does not implement additional security headers, which could be improved to enhance protection. Overall, the domain registration is privacy protected, which is common for small technical sites, and no suspicious patterns were detected. The website is accessible without WAF or blocking mechanisms, allowing full content analysis.

Point S Italia Srl Unipersonale operates as part of the global Point S Group, providing automotive tire and maintenance services in Italy since 2015. The company holds a strong market position as the largest independent network of tire dealers worldwide, offering a wide range of vehicle maintenance services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to vehicle owners in Italy. Technically, the site is built on Drupal 10, integrates multiple analytics and marketing tools, and employs a robust consent management system to ensure GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

RI-VIS is a European Union Horizon 2020 funded research infrastructure project aimed at fostering international cooperation, mapping partnerships, and ensuring the sustainability of research infrastructures across Europe. The website serves as a hub for information dissemination, event announcements, and collaboration resources targeted at European research institutions and stakeholders. The project is positioned as a niche, non-profit initiative with strong EU backing and partnerships such as Instruct-ERIC. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Matomo analytics, with Keycloak for authentication, indicating a mature digital infrastructure. Security posture is solid with HTTPS and authentication mechanisms, though improvements are recommended in security headers and privacy compliance, particularly cookie consent. Overall, the site is professional, trustworthy, and well-aligned with its academic and governmental audience.

Instruct-ERIC is a pan-European non-profit research infrastructure specializing in structural biology, providing access to advanced technologies, training, and collaborative services to researchers primarily in Europe but also worldwide. The organization is affiliated with the University of Oxford and operates a well-structured website that supports proposal submissions, training events, and scientific dissemination. The platform is positioned as a leading entity in its niche, supported by multiple EU-funded projects and partnerships. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, RequireJS, and analytics via Matomo, with security features such as HTTPS and Google reCAPTCHA. The site is mobile-optimized and offers good user experience and navigation clarity. However, there are areas for improvement including enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site demonstrates a moderate security posture with enforced HTTPS and domain transfer protections but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration and ownership. Overall, Instruct-ERIC presents a credible, professional, and secure online presence suitable for its research infrastructure role, with recommendations to strengthen privacy and security practices further.

MIRRI-ERIC is a pan-European research infrastructure dedicated to microbial resource preservation, investigation, and provision. It aggregates over 50 microbial Biological Resource Centres across ten European countries, serving bioscience and bioindustry sectors with access to microbial strains, data, and services. The organization focuses on domains such as Health & Food, Agro-Food, and Environment & Energy, contributing to life sciences research and sustainable bioeconomy development. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is solid with HTTPS and reCAPTCHA, though it lacks some security headers and explicit privacy/cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of entity. Overall, the site is professional and trustworthy but could improve compliance transparency and security headers.

Instruct-ERIC is a pan-European research infrastructure hosted by The University of Oxford, specializing in structural biology. It provides high-end technologies, services, and training to researchers across Europe and globally. The organization holds a strong market position as a leading scientific infrastructure with a comprehensive catalogue of services, training programs, and collaborative projects. The website reflects a professional and well-maintained digital presence, supporting its mission to facilitate scientific research and collaboration. Technically, the website employs a modern technology stack including JavaScript frameworks, Bootstrap, and analytics tools like Matomo. It uses HTTPS with good SSL configuration and integrates security features such as Google reCAPTCHA. However, there is room for improvement in DNS security and security headers. The site is mobile-optimized and offers good accessibility and SEO practices. From a security perspective, the site demonstrates solid practices with encrypted connections and domain transfer protections. The absence of DNSSEC and explicit security policies are noted gaps. Privacy compliance is mostly addressed with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, Instruct-ERIC's website is a trustworthy, professional platform supporting a reputable research infrastructure. Strategic improvements in security policies and privacy mechanisms would further strengthen its posture and compliance.

The Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq) is a Brazilian government agency dedicated to promoting scientific and technological development. The website serves as an official portal providing information on research funding, scholarships, scientific dissemination, and public access to government programs. It targets researchers, students, and the general public interested in science and technology within Brazil. The site is part of the gov.br ecosystem and is hosted on government infrastructure, ensuring authenticity and trustworthiness. Technically, the website employs modern web technologies including Plone CMS, jQuery, Swiper.js for carousels, and Font Awesome for icons. It integrates Google Tag Manager for analytics and uses security best practices such as HTTPS enforcement and security headers. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site demonstrates a strong posture with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently available, which could be improved to enhance transparency and trust. Overall, the website is a professional, secure, and reliable government portal with comprehensive content relevant to its audience. It maintains high legitimacy and aligns well with Brazilian government digital standards.

ANID is a Chilean government agency dedicated to providing funding to students, researchers, institutions, and entrepreneurial ventures focused on science, technology, and innovation. The website reflects its official status with consistent branding and a professional design. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on AWS infrastructure, ensuring reliable performance and good mobile optimization. Security posture is adequate with HTTPS enforced and safe external link handling, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is minimal, with no visible privacy or cookie policies, which is an area for improvement. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy government entity.

The Consiglio Nazionale delle Ricerche (CNR) is Italy's national public research council, operating across multiple scientific and technological domains including biomedicine, chemistry, environment, ICT, physics, and humanities. The website serves as a comprehensive portal for research activities, organizational information, news, events, and services targeting researchers, businesses, citizens, schools, journalists, and administrative personnel. It holds a strong market position as a key national research institution with international relevance. Technically, the website is built on Drupal 7 CMS with jQuery 1.9 and Bootstrap frameworks, supplemented by Font Awesome icons and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, though the use of outdated CMS and libraries poses potential security risks. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, HTTPS is enforced, and some security best practices are observed, including disabling cookies in analytics. However, the outdated Drupal version and jQuery library represent vulnerabilities. The site lacks advanced security headers and publicly available incident response or vulnerability disclosure policies. Privacy compliance is strong with comprehensive privacy and cookie policies, though no explicit cookie consent mechanism is detected. Overall, the website is professional, trustworthy, and content-rich, reflecting the stature of a national research institution. Strategic improvements in CMS modernization, security header implementation, and enhanced privacy consent mechanisms would further strengthen its security posture and compliance.

The Deutsches Zentrum für Luft- und Raumfahrt (DLR) is Germany's national research center for aerospace, energy, transportation, and security. It operates as a large, government-affiliated research institution with a strong market position in engineering sciences. The website reflects a mature digital presence with comprehensive content, modern technology stack including React and Plone CMS, and good mobile and accessibility features. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, serving a broad audience including researchers, industry partners, and the public.

EquipHotel is an international trade show and event organizer specializing in the hospitality sector, targeting professionals in hotel, restaurant, and collective services. The website positions itself as a key reference event in Paris, France, with a strong brand presence and professional content tailored to industry stakeholders. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, React frameworks, and integrates Google Tag Manager and Adobe Helix for analytics and performance monitoring. Privacy compliance is partially addressed through a cookie consent mechanism, although explicit privacy and terms of service pages were not detected. Security posture is moderate with HTTPS usage and OAuth2 PKCE authentication, but lacks visible security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and security documentation.

RIDGID is a well-established brand specializing in manufacturing rugged, professional-grade tools primarily for trades such as plumbing, electrical, and welding. The website reflects a mature digital presence with comprehensive product catalogs, support services, and a strong connection to its parent company, Emerson Electric Co. The technical infrastructure leverages modern JavaScript frameworks, analytics, and marketing tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and standard security practices, though some enhancements in security headers and incident response visibility could improve resilience. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Gustav Klauke GmbH is a well-established German manufacturer specializing in electrical connection technology and professional tools such as pressing, cutting, and hydraulic safety tools. The company operates globally and is part of the Emerson Electric Co. portfolio, which includes subsidiaries like Greenlee and RIDGID. Their product range exceeds 10,000 items, targeting industrial, commercial, and renewable energy sectors. The website is professionally designed, mobile-optimized, and rich in content, supporting a strong brand presence and customer engagement through multiple channels including social media and detailed product catalogs. Technically, the website employs modern JavaScript frameworks including AngularJS and Vue.js, uses Google Analytics and Tag Manager for tracking, and is built on Orchard CMS. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not found. Privacy compliance is robust, with clear links to privacy and cookie policies hosted on the parent company's domain. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS lookup failed to retrieve domain registration details, which is unusual and lowers the domain legitimacy score. Despite this, the association with Emerson and the professional website content strongly support the site's authenticity. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online presence for Klauke.

Greenlee is a well-established manufacturer and distributor of professional tools, primarily serving electricians, utility workers, and contractors. With over 150 years of history and as a subsidiary of Emerson Electric Co., Greenlee holds a strong market position in the manufacturing sector, offering a broad portfolio of products and services including tool manufacturing, product support, and training. The website reflects a mature digital presence with professional branding, comprehensive product information, and integration with parent and partner brands. Technically, the site uses modern web technologies such as jQuery, Materialize CSS, and AngularJS, and is built on Orchard CMS. It is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the strong corporate affiliation and professional presentation.

MOTOR Information Systems, a division of Hearst Business Publishing, operates as a global leader in automotive data solutions, offering a comprehensive suite of software applications, data products, data services, manuals, and insights tailored for various automotive industry segments including service providers, OEMs, parts suppliers, fleets, and technology providers. The company has a long-standing history dating back to 1903 and serves a large client base with a strong market position. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Analytics, HubSpot, and CookieYes for privacy compliance. The site demonstrates excellent design, mobile optimization, and accessibility, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and employs standard security headers, but lacks a publicly available security policy or incident response information, which could be improved. The absence of WHOIS registration data is a notable anomaly but does not significantly detract from the overall legitimacy given the strong branding and association with Hearst. Overall, the website is professional, secure, and privacy-conscious, with room for enhanced transparency in security governance.

The website at dotdigital-pages.com currently serves only a 404 error page indicating that the intended content is missing or the page never existed. There is no visible business information, contact details, or policies available on the site. The domain is registered with 1API GmbH since 2018 and is valid until 2028, showing a consistent registration history. However, the lack of active content and absence of security or privacy policies significantly limit the ability to assess the business or security posture. Technically, the site does not show signs of a WAF or security challenge but lacks modern web features and optimization. Security posture is weak due to missing HTTPS and security headers information. Overall, the site is non-functional in its current state and requires restoration of content and implementation of standard security and compliance measures.

Mobil™ India, a subsidiary of ExxonMobil, operates a comprehensive website offering synthetic and mineral engine oils, lubricants for various vehicles, and industrial applications. The site targets both individual motorists and businesses, positioning itself as a leading lubricant brand in India with strong global backing. The website demonstrates a mature digital infrastructure with modern technologies, including Sitecore CMS, AWS hosting, and advanced analytics and marketing tools. Security posture is robust with HTTPS, strong security headers, and a comprehensive cookie consent mechanism via OneTrust. Privacy policies are detailed and GDPR compliant, reflecting a strong commitment to data protection. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

Ontraport is a mature SaaS company founded in 2010, providing an enterprise-level CRM and marketing automation platform tailored for mid-sized businesses. The platform integrates marketing, sales, payments, and customer support into a unified system, enabling businesses to scale efficiently without the complexity and cost of larger enterprise solutions. The website reflects a professional and consistent brand with clear messaging targeting marketing, sales, operations, and support teams. Technically, the site uses a proprietary CMS (Ontraport Pages v3) hosted on AWS infrastructure, integrating multiple modern analytics and marketing tools such as Google Analytics, TikTok Pixel, and LinkedIn Insight. The site is mobile-optimized and designed for good user experience and SEO. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy and professionally maintained, suitable for its target audience.

Go To Brno is the official tourism portal for the city of Brno, operated by TIC BRNO, a public organization. The website serves as a comprehensive guide offering information on cultural events, gastronomy, sightseeing, and practical visitor information. It targets tourists, residents, and visitors interested in exploring Brno's authentic atmosphere and attractions. The portal is well-positioned as the authoritative source for Brno tourism, providing key services such as event calendars, interactive maps, and tourist cards. Technically, the website is built on WordPress and leverages modern JavaScript libraries including jQuery, Leaflet for maps, and Algolia for search functionality. It integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, all managed with user consent via the Complianz GDPR plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration insights, but the official nature of the site and consistent branding support its legitimacy. Overall, Go To Brno presents a professional, secure, and privacy-compliant tourism portal with strong business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.