Security Directory

V

Voix Céleste

voixceleste.cc

56

Voix Céleste is a small, niche e-commerce business specializing in DIY Hormone Replacement Therapy (HRT) products for transfeminine individuals who face barriers accessing conventional healthcare. The company offers lab-tested estradiol injections and sprays, positioning itself as a community-focused provider addressing a critical underserved market. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as React and jQuery. Hosting is provided by Njalla, a privacy-conscious provider. Security posture is moderate with HTTPS enforced but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie consent or explicit GDPR indicators. Business credibility is supported by clear product information, FAQ, and contact options, though no direct contact emails or phone numbers are published. Overall, the site is accessible, professionally designed, and trustworthy within its niche, but improvements in security and privacy compliance are recommended.

C

Corporation Service Company (Aust) Pty Ltd

runnersworldonline.com.au

50

Runner's World Australia and New Zealand is an established online media platform providing running news, training advice, inspiring stories, and gear reviews targeted at runners and fitness enthusiasts in Australia and New Zealand. The website leverages a WordPress CMS with a modern Newspaper theme and integrates multiple analytics and advertising technologies including Google Analytics, Google Tag Manager, Facebook Pixel, and Google AdSense. The technical infrastructure is solid with good mobile optimization and SEO practices, although performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears credible with consistent WHOIS data and professional content presentation.

The website microspinny.zip is a personal microsite belonging to an individual named Niko, known as 'micro'. The site serves as a personal branding and content sharing platform focused on programming, gaming, and social media presence. It features personal projects, daily content strings, and links to various social and federated platforms. The site is small-scale and targets a general audience interested in the individual's activities and interests. Technically, the site is built using PHP with a PostgreSQL backend and includes JavaScript for theme switching. The design is informal but functional, with basic mobile optimization and accessibility. SEO is basic with proper meta tags and Open Graph data. No CMS or major frameworks are detected. Performance is moderate, with no explicit hosting provider identified. From a security perspective, the site lacks HTTPS confirmation and security headers, which lowers its security posture. There are no privacy or cookie policies, nor incident response or vulnerability disclosure information. However, the presence of published GPG keys indicates some level of identity verification and security awareness. No forms or sensitive data collection are present, reducing attack surface. Overall, the site is safe for general audiences, with no adult or explicit content. The business credibility is moderate given the personal nature of the site and limited formal business information. Recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving mobile and accessibility features to enhance trust and security.

G

Georgia Artificial Intelligence in Manufacturing

georgiaaim.org

44

Georgia Artificial Intelligence in Manufacturing (Georgia AIM) is a state-level initiative launched in 2023 to drive AI adoption in the manufacturing sector across Georgia. The organization focuses on workforce development, education from K-12 through universities, and supporting manufacturers and innovators to leverage AI technologies. The website reflects a professional and consistent brand presence with clear messaging about its mission and projects. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools, though some security best practices like DNSSEC and security headers are missing. Privacy compliance is limited as no explicit privacy or cookie policies are found. Contact is primarily via a hosted form, with no direct emails or phone numbers published. Overall, the site is credible and well-positioned but could improve transparency and security posture.

R

Roundcube Webmail Dev Team

roundcube.net

61

Roundcube.net is the official website for Roundcube, a free and open source webmail software project established in 2004. The site provides information about the software, including features, downloads, news updates, and community resources. The project targets users and developers interested in a browser-based IMAP email client with a modern interface and extensibility via plugins. The website is well maintained with regular news updates and active GitHub and DockerHub presence, indicating a mature open source ecosystem. Technically, the website uses modern frontend technologies such as Bootstrap 5 and FontAwesome, served via CDN with Cloudflare DNS. HTTPS is enforced via client-side redirect, and the site is mobile optimized with good accessibility and SEO practices. No CMS is detected, suggesting a custom or static site approach. The site does not employ advertising or tracking services, reflecting a privacy-conscious design. From a security perspective, the site enforces HTTPS and mentions XSS protection in its features. However, no explicit security headers were detected, and there is no published security policy or incident response information. DNSSEC is not enabled, which is a recommended improvement. The domain is long-standing and consistent with the project's history, enhancing trustworthiness. Overall, roundcube.net is a professional, trustworthy, and technically sound website supporting a reputable open source project. Strategic improvements include publishing privacy and security policies, enabling DNSSEC, and adding cookie consent mechanisms to enhance compliance and user trust.

R

rtl-sdr.com

rtl-sdr.com

65

rtl-sdr.com is a specialized technology blog focused on software defined radio (SDR) news, tutorials, and product reviews. It serves a niche audience of radio enthusiasts, hobbyists, and security researchers interested in RTL-SDR and related SDR hardware. The site provides valuable content including detailed guides, hardware reviews, and community news, positioning itself as an authoritative source in the SDR community. The business model appears to rely on content publishing combined with affiliate marketing and advertising revenue streams. Technically, the site is built on WordPress with a modern theme and uses common plugins for social sharing, anti-spam, and advertising. It employs HTTPS and some security best practices but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, although the site content and activity suggest an established presence. Overall, the site is professionally maintained with good content quality but would benefit from improved privacy compliance and clearer domain registration transparency.

O

openmediavault

openmediavault.org

59

openmediavault is an open source network attached storage (NAS) solution based on Debian Linux, targeting small offices and home offices. It offers a modular framework with services such as SSH, FTP, SMB/CIFS, media servers, RSync, and BitTorrent client, enabling users to easily deploy and manage NAS without deep technical knowledge. The website is professionally maintained with consistent branding and active content updates, reflecting a mature project with a clear focus on its niche market. Technically, the site runs on WordPress with modern plugins and a responsive design, ensuring good user experience and SEO. Security posture is strong with HTTPS, privacy-focused analytics (Matomo), and GDPR-compliant cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the domain's WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and transparency support its legitimacy.

The Virtual Moose is a personal blog dedicated to indie games, retro gaming, and tabletop RPGs, providing game reviews, roundups, and personal commentary. The site targets niche gaming enthusiasts and operates primarily as a content publishing platform with community engagement through blog posts and optional Ko-fi donations. Technically, the site is built on WordPress with standard plugins including Google Site Kit for analytics and a Ko-fi widget for donations. The hosting appears to be managed via NameCheap with a privacy-protected domain registration. The website demonstrates good design quality, mobile optimization, and SEO practices but lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. No WAF or blocking mechanisms are detected, and the content is safe for general audiences.

C

Crime Stoppers Australia

crimestoppers.com.au

62

Crime Stoppers Australia is a well-established non-profit organization providing anonymous crime reporting services across all Australian states and territories. The website serves as a central hub linking to state-specific reporting portals and offers community awareness campaigns and support for law enforcement. The organization holds a strong market position as the nation's trusted crime reporting service, supported by government partnerships and a registered charity status. Technically, the website is built on WordPress with modern plugins such as GiveWP for donations and Elementor for page building. It uses Bootstrap for responsive design and is hosted with Melbourne IT as registrar and Cloudflare for DNS. The site demonstrates good mobile optimization, clear navigation, and decent SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and implements several security headers, but lacks DNSSEC and a published security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism. Social media and tracking pixels are used moderately. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

A

Advanced Technology Development Center

atdc.org

48

The Advanced Technology Development Center (ATDC) is a well-established technology startup incubator and accelerator based in Georgia, USA, with a domain age dating back to 1997. The organization focuses on supporting early-stage science and technology companies by providing expert coaching, access to capital, talent sourcing, industry connections, and federal funding assistance. Their market position is strong within the Southeastern United States as a key enabler of startup success. The website is built on a modern WordPress platform using Elementor and integrates various plugins and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and cookie policies exist but are basic, with no explicit GDPR compliance or incident response policies published. Overall, the website is professional, trustworthy, and serves its target audience effectively.

L

Limula SA

limula.ch

58

Limula SA is a Swiss-based company specializing in automated cell and gene therapy manufacturing solutions. Their innovative platform combines a bioreactor and centrifuge into a single closed device, aiming to simplify and scale the production of life-saving therapies. Positioned as an emerging leader in the healthcare technology sector, Limula targets biotech firms, pharmaceutical companies, and investors interested in advanced cell therapy manufacturing. The website reflects a professional and consistent brand image, emphasizing Swiss engineering excellence and strong industry partnerships. Technically, the website is built on WordPress with a modern tech stack including jQuery, MediaElement.js, and various UI plugins. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, Limula's digital presence supports its business credibility and market positioning well. The site is safe, professional, and trustworthy, with clear contact channels and partnership opportunities. However, improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

D

dominion

adminforge.de

68

adminForge is a small, Germany-based technology service operated by an individual named dominion since 2014. It provides a wide array of free, self-hosted open source services focused on privacy, data minimalism, and alternatives to mainstream platforms. The website is professionally designed with excellent content quality and clear navigation, targeting privacy-conscious users and open source enthusiasts. Technically, it runs on WordPress with modern optimizations and privacy-respecting Matomo analytics. Security posture is good with HTTPS and no visible vulnerabilities, but lacks published privacy and cookie policies, security headers, and incident response documentation. Overall, adminForge demonstrates a strong commitment to privacy and open source principles, with a trustworthy domain registration and consistent branding.

A

Avris

avris.it

47

Avris.it is a personal website and blog operated by Andrea Vos, a full-stack software engineer and queer activist based in Italy. The site serves as a portfolio showcasing software projects, blogging on topics such as technology, society, and politics, as well as photography and writing. The website targets a general audience interested in technology and social issues, with a niche focus on queer activism and rationalism. The business model is primarily personal branding and content sharing without direct commercial transactions. Technically, the site is built on a modern stack including Symfony PHP framework, Bootstrap for UI, and uses Font Awesome and Twemoji for icons and emojis. The site is mobile optimized, accessible, and SEO friendly, with good performance and modern meta tags including Open Graph and Twitter Cards. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some security headers and formal security policies. The domain is aged since 2014 but currently shows an expired status which poses a risk to availability and trust. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site is professional and trustworthy for a personal portfolio but would benefit from improved compliance and security practices.

Meet Magento is a globally recognized event series dedicated to the Magento e-commerce ecosystem, connecting merchants, agencies, technology providers, and community members worldwide. The platform offers curated events that focus on learning, networking, and business development within the Magento community. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive event information. Technically, it is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for performance and user insights. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, supporting a medium-sized event organization with a strong community focus.

H

HexBrain

hexbrain.com

43

HexBrain is a small, specialized web development agency based in Ukraine, founded in 2013. The company focuses on Magento e-commerce development and custom PHP programming, offering a comprehensive range of services including consulting, web design, project management, and system administration. Their market position is strengthened by multiple Magento and Zend certifications and active participation in industry conferences such as Meet Magento. The website content is professional and well-structured, targeting businesses seeking tailored e-commerce solutions. Technically, the website is built on GravCMS using the Foundation framework and jQuery, with Google Analytics integrated for user tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting appears to be managed via NameCheap, consistent with the domain registrar information. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and DNSSEC is not enabled, representing areas for improvement. No privacy or cookie policies are published, indicating compliance gaps with GDPR and related regulations. Incident response and vulnerability disclosure mechanisms are absent, which could impact trust and security readiness. Overall, HexBrain presents a credible and professional online presence with solid business credibility and technical implementation. To enhance security posture and regulatory compliance, the company should implement privacy and cookie policies, add security headers, enable DNSSEC, and consider publishing security and incident response information.

D

DomRobot UG (haftungsbeschraenkt)

nibi.space

59

The website nibi.space operates as a German-language community wiki dedicated to non-binary and genderqueer topics. It serves as an educational and informational resource, providing definitions, community guides, and cultural content for non-binary individuals and allies. The site is non-commercial and maintained by a small organization, DomRobot UG, based in Germany. The content is well-structured and updated regularly, reflecting a committed community effort. Technically, the site is built on the Dokuwiki CMS platform using PHP and jQuery, hosted by INWX GmbH in Germany. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Performance and mobile optimization are basic but functional. No tracking or advertising technologies are detected, suggesting a privacy-conscious approach. From a security perspective, the site has a moderate posture with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, security.txt, and incident response contacts highlight compliance and operational gaps. The WHOIS data is transparent and consistent with the website's German focus, supporting legitimacy. Overall, the website is a trustworthy, niche educational resource with moderate technical maturity and some compliance shortcomings. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance its security posture and user trust.

J

Jump24

jump24.co.uk

55

Jump24 is a UK-based software development agency specializing in bespoke software solutions, with expertise in PHP, Laravel, and Vue.js. The company positions itself as an official Laravel partner and Vue expert, targeting businesses across the UK, Europe, and the US. Their services include UX/UI design, tech consultancy, and team augmentation, emphasizing collaboration and client relationships. Technically, the website employs modern frameworks and libraries such as Laravel, Vue.js, Tailwind CSS, and Swiper.js, with tracking via Google Analytics and Tag Manager. The site is professionally designed, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data supports legitimacy and consistency with the business claims.

F

Fedi.Tips – An Unofficial Guide to Mastodon and the Fediverse

fedi.tips

59

Fedi.Tips is a specialized informational website providing an unofficial, non-technical guide to Mastodon and the wider Fediverse. It targets general users interested in learning how to use Mastodon, offering comprehensive tutorials, accessibility advice, and server administration tips. The site is positioned as a niche educational resource within the technology sector, founded in 2022 and hosted in Great Britain. The business model is non-commercial, focusing on community education and support. Technically, the website is built on WordPress 6.8.2, using standard web technologies such as HTML5, CSS3, and JavaScript. It is hosted by Gandi SAS and employs HTTPS with a valid SSL certificate, though DNSSEC is not enabled. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced protection. There is no published security policy or incident response contact information, which could be improved to increase trust and readiness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, Fedi.Tips presents a trustworthy, well-maintained educational resource with a strong focus on user guidance and accessibility. Strategic improvements in DNS security, security policy transparency, and privacy compliance would further strengthen its security posture and user trust.

F

Fedi.Garden

fedi.garden

57

Fedi.Garden is a small, human-curated directory website focused on listing well-run Mastodon and Fediverse servers that adhere to responsible moderation and reliability standards. It serves a niche audience of users seeking trustworthy Fediverse communities and provides categorized listings by language, topic, country, and other criteria. The website is built on WordPress using a classic theme, with basic but clear navigation and content relevant to its target audience. Technical infrastructure is standard for a small WordPress site, hosted under a reputable registrar, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or detailed GDPR indicators. No contact emails or phone numbers are provided, but a Mastodon social link is available for communication. The site does not employ advertising or analytics tracking, reflecting a privacy-conscious approach. Overall, the site is trustworthy and safe for general audiences, with room for improvement in security hardening and privacy compliance.

H

Heatherhornses's Amazing Cyber Site – When you're here, you're family

heatherhorns.com

43

Heatherhornses.com is a small personal or hobby website created in 2020, featuring minimal content centered around a friendly theme. The site uses WordPress CMS hosted on WebHostingHub with basic technical infrastructure. The website lacks comprehensive business information, privacy policies, and contact details, indicating it is not a commercial or enterprise-grade site. Technically, the site is functional with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The security posture is basic with no detected vulnerabilities but also no formal security or incident response policies. Overall, the site is low risk but also low in business credibility and privacy compliance.

InvoxiPlayGames is a personal and hobbyist website operated by Emma, a software developer and security researcher specializing in reverse engineering, game modding, and open source projects. The site serves as a portfolio and project hub, targeting enthusiasts in gaming, security research, and technology. The business model is informal and community-driven, focusing on sharing knowledge and software rather than commercial activities. The domain is well-established since 2015, supporting the credibility of the operator's experience and project history. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with backend and project languages spanning C#, C, C++, NodeJS, and others. Hosting is via Cloudflare, providing HTTPS and performance benefits. The site is mobile-optimized with good navigation and content structure, though accessibility and SEO are basic. No CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. However, it lacks security headers and formal privacy or cookie policies, which are recommended for compliance and enhanced security posture. The presence of a HackerOne profile indicates responsible vulnerability disclosure practices. No critical vulnerabilities or suspicious content were detected. Overall, the site is a credible, well-maintained personal project hub with moderate technical sophistication and a good security baseline. Improvements in privacy compliance and security headers would enhance trust and protection. The risk level is low given the non-commercial nature and limited data collection.

X

xmpp.work

xmpp.work

61

xmpp.work is a specialized job board platform focused on employment opportunities related to XMPP technology. Founded in 2020, it serves a niche audience of job seekers and employers in the XMPP ecosystem. The website offers job listings, job posting services, and search functionality tailored to this sector. Technically, the site is built on WordPress with common plugins and libraries such as jQuery and Select2, hosted by Hosting Concepts B.V. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the site is legitimate and trustworthy for its niche but could improve security and privacy practices.

P

Privacy service provided by Withheld for Privacy ehf

deerz.one

45

The website deerz.one is a personal site operated by an individual known as ida deerz, focusing on creative outputs such as music, blog posts, and technical resources. The site serves a niche audience interested in music production, web development, and personal insights. The business model is primarily content sharing and community engagement without commercial sales directly on the site. The domain is relatively new, registered in April 2024, and uses privacy protection services, which aligns with the personal nature of the site. Technically, the site is built on a custom content management system called Deer Text Format, utilizing standard web technologies including HTML, CSS, JavaScript, and PHP. Hosting is provided by DreamHost, and the site is served over HTTPS with a moderate performance profile. Mobile optimization and accessibility are basic but functional. SEO practices are minimal but present. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response information, indicates room for improvement in compliance and security posture. Overall, the site is safe, trustworthy, and well-maintained for a personal project, but it lacks formal privacy and security documentation. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to enhance trust and compliance.

S

Rain's slonksite

slonk.ing

54

The website 'Rain's slonksite' is a personal portfolio and blog site for an individual developer and cybersecurity enthusiast known as Rain or slonkazoid. The site showcases the developer's skills, projects, and interests, with a focus on backend web development, cybersecurity, and various programming languages including Rust and Bash. The site also offers software commissions for small projects such as webapps, bots, and mods. The target audience includes fellow developers, cybersecurity professionals, and potential clients seeking software development services. Technically, the website is a static HTML site with no JavaScript, emphasizing simplicity, accessibility, and security. The tech stack described includes modern and secure technologies such as Rust, Axum, Tokio, and PostgreSQL, running on Linux-based systems. The site is optimized for performance and accessibility, with a fast loading time and good mobile optimization. However, no CMS or hosting provider information is explicitly stated. From a security perspective, the site demonstrates good practices such as the use of SSH and PGP keys for identity verification and encrypted filesystems on the server. However, no explicit security headers or HTTPS enforcement details were found in the provided data. There is no published privacy policy, cookie policy, or terms of service, which limits privacy compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is a well-maintained personal developer site with a moderate security posture and good technical implementation. The lack of formal privacy and security policies and absence of security headers are areas for improvement. The site is safe for general audiences, contains no adult or explicit content, and is fully accessible without WAF or blocking mechanisms.

D

DokuWiki Community

dokuwiki.org

56

DokuWiki is an established open source wiki software project founded in 2004, offering a simple, database-free wiki solution favored for its clean syntax and ease of use. It targets a broad audience including enterprises, developers, and collaborative teams, providing extensive plugin support and multi-language capabilities. The website reflects a mature community-driven project with comprehensive documentation and active user engagement channels. Technically, the site is built on PHP with jQuery libraries, uses HTTPS with anonymized Google Analytics tracking, and demonstrates good performance and mobile optimization. Security posture is solid with secure forms and no exposed sensitive data, though it lacks some advanced security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, consistent with an open source community project.

H

Hookshot Media Ltd

purexbox.com

69

Pure Xbox is a well-established media website specializing in Xbox Series X|S news, reviews, and features, operated by Hookshot Media Ltd, a UK-based company founded in 2010. The site targets Xbox gamers and enthusiasts, offering comprehensive content including news, game reviews, guides, and community forums. It holds a strong market position as a leading Xbox-focused gaming news outlet. Technically, the website employs a modern tech stack including PHP, JavaScript, jQuery, Prebid.js for advertising, and Google Tag Manager for analytics, supported by a proprietary CMS (dgpCMS). The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, the site uses HTTPS with strong SSL configuration and security headers, and implements GDPR-compliant consent management. However, it lacks explicit vulnerability disclosure and incident response policies. The WHOIS data is missing or unavailable, which is unusual but the site content and business information indicate legitimacy. Overall, Pure Xbox presents a professional, trustworthy, and content-rich platform with room for improvement in transparency around security policies.

H

Hookshot Media Ltd

pushsquare.com

69

Push Square is a well-established online media platform specializing in PlayStation news, reviews, and features, targeting PlayStation gamers and enthusiasts globally. Owned by Hookshot Media Ltd, the site maintains a strong market position as a leading PlayStation-focused news source, offering a wide range of content including news articles, game reviews, guides, and community forums. The business model primarily relies on advertising revenue, supported by multiple ad networks and tracking technologies with GDPR-compliant consent mechanisms. Technically, the website employs a modern tech stack including PHP, JavaScript, and Prebid.js for programmatic advertising, and uses dgpCMS as its content management system. The site is optimized for both desktop and mobile platforms, with good SEO and accessibility practices in place. Security posture is robust with HTTPS enforced, multiple security headers, and privacy policies clearly published, although the absence of WHOIS data reduces transparency. Overall, the website presents a professional, trustworthy, and content-rich experience for its audience.

D

Dakar Institute of Technology

dit.sn

50

Dakar Institute of Technology (DIT) is a specialized educational institution based in Senegal, focusing on Artificial Intelligence, Big Data, and digital finance education. Established in 2019, it holds government recognition and accreditation from ANAQ-SUP, positioning itself as a pioneering AI engineering school in West Africa. The institution offers a range of degree programs, certifications, and professional training designed to prepare students and professionals for the evolving technology market. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting students and professionals interested in AI and Big Data.

A

Afterlogic Corp.

afterlogic.works

50

Afterlogic.Works is a technology company specializing in reliable outsource and team augmentation services for web and mobile development projects. The company emphasizes its Eastern European developer base operating under US jurisdiction, positioning itself as a trustworthy tech partner for small to mid-size businesses, managed service providers, design agencies, and startups. Their key services include web and mobile development, outstaffing, and rescuing troubled projects, supported by client testimonials and industry badges that enhance their market credibility. Technically, the website leverages modern frameworks such as Vue.js, Nuxt.js, React, Flutter, and Node.js, indicating a mature and contemporary technology stack. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security posture.

R

Rise for Freedom

rise4freedom.org

42

Rise for Freedom is a US-based non-profit coalition focused on nationwide mass trainings to promote democracy and civic engagement. The organization offers live online and in-person training sessions, partnering with entities like the ACLU and using platforms such as Mobilize.us to coordinate events. The website reflects a grassroots movement model targeting a broad audience interested in democracy activism. Technically, the site is built on WordPress with common plugins and uses DreamHost for hosting. It employs Google Analytics with an opt-out mechanism, indicating moderate digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and explicit security headers. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and security practices.

E

Election Truth Alliance

electiontruthalliance.org

66

Election Truth Alliance is a small non-profit organization focused on exploring election fraud consequences and advocating for safeguarding the voting process to support a healthy democracy. The website serves as an informational and advocacy platform with integrated donation capabilities to support its mission. The organization maintains an active social media presence across major platforms to engage its target audience interested in election integrity. Technically, the website is built on WordPress using modern plugins and themes, with payment processing integrated via Stripe and PayPal. The site is hosted with reputable providers and uses HTTPS, but lacks DNSSEC and explicit privacy or security policies. Security posture is moderate with domain locking but could be improved with enhanced DNS security and formalized incident response documentation. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact information.

U

Unencumbered by Facts – Taking unsubstantiation to new levels

unencumberedbyfacts.com

59

Unencumbered by Facts is a personal technology blog primarily focused on open source webmail client development and related software topics. The site is authored by Jason Munro and hosted on WordPress.com, leveraging standard WordPress technologies such as PHP, JavaScript, and CSS. The blog features detailed posts about software projects, personal anecdotes, and technical insights, targeting developers and technology enthusiasts interested in open source email clients and related protocols. The website has a consistent branding and good content quality, though it lacks formal business contact information and privacy policies.

H

Hookshot Media Ltd

timeextension.com

67

Time Extension is a UK-based niche media website specializing in retro gaming news, reviews, and features. Owned by Hookshot Media Ltd, it serves a dedicated audience of retro gaming enthusiasts with high-quality content and a comprehensive game database. The site demonstrates a mature digital infrastructure with a custom CMS, modern JavaScript libraries, and strong SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant consent mechanisms, though some security headers could be improved. Advertising is integrated via multiple reputable ad networks, balanced with privacy considerations. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

H

Hookshot Media Ltd

hookshot.media

64

Hookshot Media Ltd is a UK-based digital media company specializing in publishing popular video game content through multiple well-known brands including Nintendo Life, Push Square, Pure Xbox, Time Extension, and Nintendo News. The company targets a global audience of video game enthusiasts and operates as a medium-sized business with a strong market position in the gaming media sector. Their business model focuses on content creation, community engagement, and digital publishing across multiple platforms. Technically, the website is built on a custom CMS (dgpCMS) using PHP and JavaScript, hosted via Cloudflare DNS services. The site demonstrates modern web practices including responsive design, fast performance, and SEO optimization. Google Analytics is used for visitor tracking, and the site employs HTTPS with good SSL configuration. However, DNSSEC is not enabled, and some security headers are not explicitly detected. From a security perspective, the website follows good practices such as HTTPS enforcement and domain transfer protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partially addressed with published privacy and cookie policies, though no explicit cookie consent mechanism is present. Incident response and security policy information are not published, representing an area for improvement. Overall, Hookshot Media presents a professional, trustworthy, and well-maintained digital presence with strong business credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing security and incident response policies to improve compliance and trust further.

T

The Congressional Award

congressionalaward.org

58

The Congressional Award website represents a prestigious non-profit organization recognized as the United States Congress' highest honor for youth civilians. It focuses on recognizing initiative, service, and achievement among American youth. The site targets youth participants, educators, and community leaders, providing information about award programs and encouraging community service. The organization maintains a strong market position as an official government-endorsed entity with a clear mission and trusted brand identity. Technically, the website is built on WordPress with Elementor and uses modern web technologies including Google reCAPTCHA for form security and Google Analytics for traffic analysis. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some security headers could be improved. Performance is moderate, with a well-structured and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of some security headers like Content-Security-Policy and X-Frame-Options suggests room for enhancement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Contact information is readily available, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with its non-profit mission. The lack of WHOIS data due to privacy protection does not detract from its legitimacy given the official nature of the organization. Strategic recommendations include enhancing security headers, conducting regular security audits, and maintaining up-to-date software to ensure continued trust and compliance.

A

AfterLogic Corp.

afterlogic.com

58

AfterLogic Corp. is a well-established technology company specializing in email and telecommunications software components and platforms since 2002. Their product portfolio includes .NET and ActiveX email components, webmail clients for PHP and ASP.NET, groupware solutions, and mail server software. The company serves a broad audience including developers, businesses, and telecom providers, with a strong market position evidenced by a client list featuring major corporations and government entities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as jQuery and FlexSlider, supporting both Windows and Linux platforms. The site uses HTTPS and implements cookie consent mechanisms, though some security best practices like DNSSEC and security headers are missing. Performance and mobile optimization are moderate to good, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism is present. Tracking is done via Google Analytics and Tag Manager with moderate user tracking levels. Overall, the security posture is adequate but could be enhanced with additional measures. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing a vulnerability disclosure program to strengthen trust and compliance.

T

The SquirrelMail Project Team

squirrelmail.org

55

SquirrelMail.org is the official website for the SquirrelMail open source webmail project, providing a PHP-based webmail client and related plugins. The project has a long history dating back to 1999 and maintains a modest but consistent presence with announcements, plugin updates, and security advisories. The website targets system administrators and users seeking a lightweight, open source webmail solution. Technically, the site is basic, using standard HTML, CSS, and PHP, with no modern frameworks or CMS detected. Hosting is supported by Cloudflare DNS but lacks advanced security headers and DNSSEC. Security posture is moderate, with some security fixes and clickjacking protections noted, but no formal security.txt or vulnerability disclosure policy is published. Privacy and cookie policies are absent, and no direct contact information or social media presence is provided, limiting user engagement and compliance transparency. Overall, the site is functional and trustworthy but could benefit from modernization and improved compliance documentation.

C

Cypht

cypht.org

61

Cypht is an open source webmail client designed to aggregate multiple email accounts and RSS feeds into a single, modular interface. It targets users such as ISPs, schools, businesses, and individuals seeking a lightweight and flexible email solution. The website presents clear information about the product's features, modular architecture, and open source licensing, supported by an active GitHub repository and community chat on Gitter. Technically, the site is built using PHP and JavaScript with Bootstrap and jQuery for frontend components, and uses the Cecil static site generator for content management. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the site encourages responsible vulnerability disclosure but lacks formal policies and contact details, and does not implement common security headers. WHOIS data is unavailable, likely due to privacy protection, but the domain appears legitimate based on content and community presence. Overall, the site scores well on content quality and business credibility but has room for improvement in privacy compliance and security posture.

H

Hikosoft

hiko.link

47

HIKO Software is a small Taiwan-based company specializing in a Shopify social login app designed to simplify user authentication for e-commerce merchants. The website serves as a marketing platform built on WordPress, showcasing the app's features and linking to the Shopify app store and a demo site. The technical infrastructure is modern and stable, leveraging AWS hosting and HTTPS encryption, with a clean and responsive design optimized for mobile users. However, the site lacks some privacy compliance features such as a cookie policy and consent mechanism, and does not provide explicit contact information or security policies. The WHOIS data is consistent with the business profile, indicating legitimacy and domain age appropriate for the company's founding date in 2020. Overall, the website demonstrates a moderate security posture with room for improvement in security headers and privacy compliance.

T

The Beaverton

thebeaverton.com

70

The Beaverton is a Canadian satirical news media website established in 2010, offering humorous news articles, quizzes, workshops, and merchandise. It targets a general audience interested in satire and current events, positioning itself as a trusted source for comedic news content in North America. The website is built on WordPress CMS with Visual Composer and integrates multiple third-party advertising and tracking services, including Google Analytics, Facebook Pixel, and Taboola. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and advanced security headers like CSP. Privacy compliance is weak due to absence of visible privacy and cookie policies, which is a notable gap given the extensive use of tracking technologies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy transparency and security hardening would enhance trust and compliance.

E

ETEC

envisiontec.com

62

ETEC, a brand under Desktop Metal, specializes in professional-grade 3D printers targeting medical, professional, and industrial markets. The company is recognized for delivering precision, surface quality, and speed in additive manufacturing solutions. Their product portfolio includes desktop, professional, and industrial 3D printers, supported by a range of materials and applications tailored for mass production and specialized industries such as healthcare and aerospace. The website reflects a mature digital presence with comprehensive product information and industry-specific solutions, positioning ETEC as a key player in the additive manufacturing sector. Technically, the website is built on WordPress with integrations of modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and HubSpot. The site is mobile-optimized, SEO-friendly, and employs security best practices including HTTPS, security headers, and reCAPTCHA on forms. The infrastructure supports a professional user experience with fast loading times and accessibility considerations. From a security standpoint, the site demonstrates a solid posture with no evident vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and readiness. Privacy and cookie policies are present and indicate GDPR compliance, supporting responsible data handling. Overall, the risk assessment for ETEC's website is low, with strong business credibility and technical implementation. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and providing clear incident response contacts to further strengthen trust and compliance.

D

Desktop Health

desktophealth.com

64

Desktop Health is a specialized business unit under Desktop Metal focused on delivering advanced 3D printing solutions for medical and dental applications. With over 20 years of research and development, the company offers high-accuracy 3D printers and FDA-cleared biocompatible materials designed to improve patient care. Their product portfolio includes dental and medical 3D printers, materials, and workflows, supported by extensive research publications and patents. The company targets healthcare professionals, dental specialists, and medical device manufacturers, positioning itself as a trusted leader in healthcare additive manufacturing technology. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot analytics, Google Tag Manager, and various marketing pixels. The site is well-optimized for SEO and mobile devices, featuring rich multimedia content and structured data for enhanced search visibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are not clearly found in the provided content, indicating an area for compliance enhancement. Overall, the domain and website are legitimate and consistent with the Desktop Metal brand. The WHOIS data for the subdomain is not available, which is normal for subdomains. The site demonstrates a high level of professionalism, trustworthiness, and technical maturity, with moderate user tracking and marketing integrations. Strategic recommendations include adding explicit privacy and cookie policies, improving security headers, and providing clear contact information for incident response. This assessment indicates a mature, credible healthcare technology business with a solid digital presence and good security hygiene, suitable for its target audience and market position.

P

Parlons Poulet

parlonspoulet.ca

53

Parlons Poulet is an informational and educational website representing the Canadian chicken producers industry. It provides comprehensive content about poultry farming, animal care, antibiotic use, environmental impact, and consumer FAQs. The site targets Canadian consumers interested in understanding chicken production and animal welfare. The business operates primarily as an educational platform under the parent organization Producteurs de poulet du Canada, with content available in French and English via a partner domain. Technically, the website is built on WordPress with a custom theme and uses modern web technologies including Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. No incident response or security policy information is published, and no cookie consent mechanism is present, indicating partial privacy compliance. No contact emails or phone numbers are provided, which may impact user trust and support. Overall, the website is professional, trustworthy, and serves its educational purpose well. However, improvements in security headers, privacy compliance, and contact transparency are recommended to enhance user trust and regulatory adherence.

D

A Division by Zer0 – A bug in the code of the universe

dbzer0.com

44

The website dbzer0.com operates as a personal blog and project hub primarily focused on sociopolitical commentary, cyberculture, and developments in AI technology, particularly around the AI Horde project. It serves a niche audience of technology enthusiasts, open source advocates, and members of the fediverse community. The site is built on WordPress with modern plugins enabling federation and community interaction. Hosting is provided by a reputable provider with a domain registered since 2006, indicating a stable and long-term presence. The site actively engages its audience through blog posts, federated social media, and Patreon support.

U

UNSICAR Awards 2023

evenimenteunsicar.ro

49

The website evenimenteunsicar.ro represents the official online presence for the UNSICAR Awards 2024, an event dedicated to recognizing excellence in the Romanian insurance and brokerage industry. The site provides detailed information about the event, award categories, timelines, and the organizing body. The business is positioned as an important player in the insurance event sector, targeting professionals, companies, and stakeholders within the Romanian insurance market. Technically, the site is built on WordPress with Elementor, hosted likely by Romarg SRL, and employs modern web technologies and SEO best practices. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, although some security headers could be improved. The domain is newly registered in late 2023, consistent with the event's timeline, and WHOIS data shows no suspicious patterns. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Financial Intelligence is a Romanian media organization specializing in financial, business, and economic news and analysis. Established in 2018, it serves a professional audience including investors, policymakers, and business stakeholders. The website offers subscription services and hosts events, positioning itself as a reputable source of financial intelligence in Romania. Technically, the site is built on WordPress with integrations for analytics (Matomo, Google Analytics, Gemius), marketing (OneSignal, AddToAny), and advertising (Google DoubleClick). The hosting provider is Hosterion, and the site uses HTTPS with good security headers, though DNSSEC is not enabled. The site is mobile-optimized and has a professional design with clear navigation. Security posture is solid with no major vulnerabilities detected, but the absence of explicit privacy and security policies is a gap. Overall, the site is trustworthy and well-positioned in its market niche.

S

St. Marys Healthcare Foundation

stmaryshealthcare.foundation

52

St. Marys Healthcare Foundation is a Canadian non-profit organization dedicated to supporting healthcare services and equipment at St. Marys Memorial Hospital through community fundraising and events. The foundation targets local community members and donors, providing multiple donation options and organizing events such as golf tournaments and lotteries to raise funds. The website is professionally designed using WordPress and Elementor, with a focus on clear navigation and community engagement. Technical infrastructure includes modern CMS, JavaScript libraries, and Matomo analytics for user tracking. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks some advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and credible, with clear business information and active social media presence.

E

European Financial Certification Organisation (eficert) e.V.

eficert.org

55

Eficert is a European non-profit organization focused on unifying educational standards and certifications within the European insurance industry. It operates as a network of insurance education institutions, providing certification services to facilitate workforce mobility across Europe. The organization hosts annual conferences and advocates for quality standards in insurance education. The website is professionally designed using the Neos CMS and Flow PHP framework, reflecting a moderate to good level of digital maturity. It is mobile-optimized and provides clear navigation and relevant content for its target audience of insurance education professionals and institutions. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and professional front for eficert's mission and services.

U

UNSICAR

unsicar.ro

45

UNSICAR is a Romanian professional association representing insurance intermediaries and consultants, advocating for insurance brokers and their clients nationally. The website provides comprehensive information about the association's statutes, ethical codes, events, legislation, and membership. The digital infrastructure is based on WordPress with common plugins, offering a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies. However, no explicit security policy or incident response information is published, and WHOIS data is privacy protected as per ROTLD policies. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively.

U

Uniunea Națională a Societăților de Asigurare și Reasigurare din România

unsar.ro

39

UNSAR is a well-established Romanian national union representing insurance and reinsurance companies, with a significant market share. The website serves as an information hub providing press releases, campaigns, and resources for the insurance sector. Technically, the site is built on WordPress with common plugins and frameworks, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy/cookie policies. The domain is legitimate and consistent with the business claims, having been registered since 2000. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.