Security Directory

V

VTDigger Shop

vtdiggershop.org

59

VTDigger Shop is an e-commerce website dedicated to selling branded merchandise that supports independent journalism in Vermont. The site offers products such as tote bags, hats, t-shirts, and gift cards, targeting Vermont residents and supporters of local journalism. The business model focuses on on-demand production to reduce overproduction and promote thoughtful purchasing. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager for analytics and Typekit for fonts. The site is mobile optimized with a clear navigation structure and professional design, providing a good user experience. Security posture is strong with HTTPS and HSTS enabled, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of a privacy policy and cookie consent banner. WHOIS data is unavailable, likely due to privacy protection, but the domain and website content appear consistent with a legitimate small media-related e-commerce operation. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents.

T

Teya

teya.com

60

Teya is a technology company specializing in card payment solutions tailored for small and medium-sized businesses. Their offerings include reliable card machines and tap-to-pay technology designed to facilitate efficient transaction processing. The website is professionally designed using the Framer CMS platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Amplitude, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Overall, while the business model and technical infrastructure appear sound, the lack of compliance and transparency elements presents risks that should be addressed.

S

Shoptet Pay

shoptetpay.com

54

Shoptet Pay is a payment gateway service tailored for e-commerce shops using the Shoptet platform, primarily targeting the Czech market. The website presents a professional and consistent brand image, with clear messaging about enabling payment acceptance within 24 hours. The technical infrastructure is based on WordPress CMS, enhanced with modern SEO plugins, analytics tools like Google Analytics and Hotjar, and a comprehensive cookie consent mechanism powered by Cookiebot. Security measures include HTTPS enforcement and reCAPTCHA integration, although explicit security headers and policies are not evident. The absence of WHOIS domain registration data raises concerns about domain legitimacy, but the website's operational maturity and integration with trusted third-party services suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in transparency and security documentation.

E

EVO Payments International s.r.o.

revopayments.cz

60

REVO CZ, operated by EVO Payments International s.r.o., is a payment service provider based in the Czech Republic offering a comprehensive suite of cashless payment solutions including payment terminals, payment gateways, and mobile SoftPOS terminals. The company is positioned as a medium-sized player in the finance sector and is part of the Global Payments group, which enhances its market credibility. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content targeted at merchants and online retailers seeking payment processing solutions. Technically, the site leverages HubSpot CMS and integrates Google Tag Manager and HubSpot analytics for marketing and tracking purposes. Security posture is strong with HTTPS enforced and secure form handling, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS data is a notable concern for domain legitimacy verification but does not detract significantly from the overall trustworthiness given the business affiliations and content quality. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site reflects a mature digital presence with moderate technical sophistication and good business credibility.

E

EVO Czech Republic s.r.o.

monetaplatebnisluzby.cz

59

The website monetaplatebnisluzby.cz represents EVO Czech Republic s.r.o., a payment service provider operating in the Czech Republic and affiliated with the Global Payments group. The company offers a range of cashless payment solutions including payment terminals, payment gateways, and mobile payment terminals, targeting merchants and e-commerce businesses. The site is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form and phone number. The presence of privacy and cookie policies with consent mechanisms indicates attention to regulatory compliance. Technically, the site is built on HubSpot CMS, leveraging HubSpot forms and analytics, along with Google Tag Manager for tracking. The SSL configuration is excellent, and secure form handling is in place. However, no WHOIS data was found, which reduces transparency and trustworthiness from a domain registration perspective. No explicit security headers or incident response information were detected, suggesting areas for improvement in security posture. Overall, the site is functional, professional, and compliant but would benefit from enhanced security disclosures and WHOIS transparency.

K

KB SmartPay

payphone.cz

55

KB SmartPay operates the PayPhone service, a mobile payment terminal application that transforms smartphones into card payment terminals, targeting merchants and businesses primarily in the Czech Republic. The website presents a professional and consistent brand image, emphasizing ease of use and a free one-year offer to attract users. The business model centers on providing mobile payment solutions leveraging smartphone technology, positioning itself in the finance sector with a focus on digital payment innovation. Technically, the website is built on WordPress 6.8.1 and integrates multiple modern technologies including Google Analytics, Google Tag Manager, Cookiebot for cookie consent management, and advertising/tracking services such as Adform and Facebook Pixel. The site is mobile-optimized and uses structured data (JSON-LD) to enhance SEO and provide clear business information. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, demonstrating awareness of privacy regulations. However, the absence of visible security headers and lack of explicit privacy policy or incident response information are notable gaps. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the website is functional, professional, and compliant with basic privacy requirements but would benefit from enhanced transparency in privacy policies, improved security headers, and clearer contact information to strengthen trust and compliance posture.

G

Global Payments s.r.o.

globalpayments.cz

65

Global Payments s.r.o. operates as a leading payment technology service provider in the Czech Republic, offering a comprehensive portfolio including payment terminals, payment gateways for e-commerce, and mobile payment terminal applications. Their market position is strong, targeting both small and large businesses seeking reliable and innovative payment solutions. The website reflects a mature digital presence with clear navigation, professional design, and localized content in Czech. Technically, the site employs modern tracking and consent technologies such as Google Analytics, Google Tag Manager, and OneTrust cookie consent, indicating a good level of digital maturity. Security posture is robust with HTTPS enforced, security headers present, and use of reCAPTCHA to protect forms, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces transparency. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and providing clear data protection officer contact details.

D

Dotypay

dotypay.com

54

Dotypay is a Czech Republic based company specializing in modern payment terminal devices with extensive connectivity and multifunctional capabilities. Founded in 2018, the company targets businesses requiring advanced payment solutions, offering both sales and rental models. Their website is professionally designed using WordPress with Elementor and Astra theme, featuring comprehensive content about their products and services. The company maintains active social media presence on Facebook and LinkedIn, enhancing their market visibility. Technically, the website employs modern technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, Dotypay presents a trustworthy and professional online presence with room for enhanced security policies and incident response transparency.

BNO (Beroepsorganisatie Nederlandse Ontwerpers) is a well-established Dutch professional association for designers and design agencies, boasting a history of over 100 years. It serves as the largest community of designers in the Netherlands, offering a broad range of services including advice, training, coaching, events, publications, and mentoring. The website reflects a mature organization with a clear market position and a strong focus on supporting and promoting the design sector in the Netherlands. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is solid with HTTPS enforced, CSRF protection, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

D

Darwin CX

darwin.cx

73

Darwin CX is a technology company offering a comprehensive SaaS platform focused on real-time customer insights, campaign management, fulfillment, financial reporting, and customer support tailored for recurring revenue businesses. The website positions Darwin CX as a key player in providing integrated solutions to businesses seeking to optimize customer experience and revenue management. The platform targets businesses with subscription or recurring revenue models, emphasizing operational efficiency and customer engagement. Technically, the website leverages modern web technologies including Webflow for site building, HubSpot for marketing and form management, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses secure form submissions via HubSpot. Cookie consent is managed through OneTrust, indicating awareness of privacy compliance. However, the absence of explicit security headers and lack of published privacy and terms of service pages represent gaps in security posture. No WHOIS data is publicly available for the domain, which reduces transparency and trustworthiness, although the professional site and use of reputable third-party services mitigate some concerns. Overall, Darwin CX presents a solid digital presence with a good security baseline but would benefit from enhanced transparency through published policies and improved security headers. The lack of WHOIS data is a notable concern that should be addressed to improve trust and legitimacy perception.

C

C. Bechstein Pianoforte GmbH

bechstein.com

56

C. Bechstein Pianoforte GmbH is a prestigious German manufacturer of grand and upright pianos, with a heritage dating back to 1853. The company offers premium handcrafted instruments targeting professional musicians and discerning customers worldwide. Their business model includes manufacturing, authorized dealer networks, service, and restoration. The website reflects a mature digital presence built on TYPO3 CMS, with multilingual support and comprehensive product and company information. Privacy and cookie compliance are well implemented, including consent management and GDPR-aligned policies. Security posture is good with HTTPS and CAPTCHA on forms, though some HTTP security headers are missing. WHOIS data is unavailable publicly, which slightly impacts trust but is not uncommon for premium brands. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

L

Lebkuchen-Schmidt.com

lebkuchen-schmidt.com

58

Lebkuchen-Schmidt.com is an established German e-commerce retailer specializing in traditional Nürnberger Lebkuchen and related confectionery products. The website presents a professional and well-structured online shop with a strong emphasis on product quality and customer trust, evidenced by a high Trusted Shops rating and a long-standing business history since 1927. The target audience primarily includes consumers interested in authentic German baked goods and sweets, both domestically and internationally. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and a consent management platform to ensure compliance with privacy regulations. The website is mobile-optimized and offers a good user experience with clear navigation and product categorization. Security-wise, the site uses HTTPS and consent mechanisms but lacks visible security headers and explicit security policies. The absence of WHOIS registrant data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts the trust assessment. Overall, the site is credible and functional but would benefit from enhanced transparency in domain registration and explicit contact information.

K

key | communication

keycommunication.lt

38

key | communication is a Lithuanian digital marketing agency specializing in planning and executing digital advertising campaigns for both B2C and B2B clients domestically and internationally. The company also has expertise in traditional media planning dating back to 2005, providing a broad market perspective. Their services include campaign management, interactive reporting, and daily campaign monitoring, with occasional 24/7 support for specific cases. The website is built on WordPress using WPBakery Page Builder and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear business messaging in Lithuanian. However, it lacks explicit privacy, cookie, and terms of service policies, as well as visible contact emails or phone numbers.

O

Onehub

onehub.com

75

Onehub is a technology company specializing in secure cloud storage, file sharing, and virtual data room services tailored for businesses. The company positions itself as a trusted provider with over one million users, including notable enterprise clients such as Starbucks and Dell. Their platform emphasizes security, role-based access controls, and customizable client portals to enhance collaboration and data protection. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, hCaptcha for bot protection, and Olark for live chat support. The site is hosted on Amazon Cloudfront CDN, ensuring fast performance and global availability. The site is mobile-optimized and accessible, with comprehensive SEO and privacy compliance features such as cookie consent management. From a security perspective, Onehub demonstrates strong practices including HTTPS enforcement, secure forms with CAPTCHA, detailed privacy and security policies, and audit trails for sensitive data rooms. However, the absence of explicit incident response and vulnerability disclosure information, as well as missing WHOIS domain registration data, represent areas for improvement. Overall, Onehub presents a professional and trustworthy online presence with robust security and privacy measures. The main risk factor is the lack of transparent domain registration data, which should be addressed to enhance trustworthiness and compliance.

Q

QUORiON Data Systems GmbH

quorion.de

51

QUORiON Data Systems GmbH is a German-based manufacturer specializing in Android-based cash register systems and POS software, serving over 650,000 businesses worldwide across retail and hospitality sectors. The company positions itself as a leading provider with a strong focus on customization, scalability, and compliance with fiscal regulations. Their website reflects a mature digital presence with comprehensive product information, dealer support, and customer testimonials. Technically, the site is built on WordPress with modern optimization tools like WP Rocket and integrates Google Analytics 4 for tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates professionalism, good privacy compliance, and a trustworthy business image.

E

Excelsior Rotterdam

excelsiorrotterdam.nl

68

Excelsior Rotterdam is a professional football club based in the Netherlands, operating a comprehensive website that serves fans, business partners, and the local community. The site offers detailed team information, match schedules, news updates, and e-commerce functionality through its fanshop. The club maintains a strong market position within Dutch football, supported by active business partnerships and community engagement. Technically, the website is built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Tag Manager and Quantcast. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid, featuring HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers could further enhance protection. Privacy compliance is well addressed with clear policies and consent management. Overall, the website reflects a professional and trustworthy digital presence aligned with the club's brand and business objectives.

R

RKC Waalwijk

rkcwaalwijk.nl

67

RKC Waalwijk is a professional Dutch football club with a well-established online presence. The website serves as a hub for fans and stakeholders, offering news, ticket sales, merchandise, and community engagement through its foundation. The club maintains a consistent brand image and provides a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on TYPO3 CMS and integrates modern analytics and advertising technologies, ensuring good performance and SEO. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site reflects a mature digital infrastructure aligned with the club's business objectives.

D

DRP

bureaudrp.nl

45

DRP is a well-established creative design agency based in Assen, Netherlands, specializing in graphic design, website creation, branding, and digital communication solutions. With over 25 years of experience, the company serves a diverse clientele including government, businesses, and organizations. Their website reflects a professional and consistent brand image, offering clear navigation and comprehensive service descriptions. Technically, the site is built on Joomla CMS with modern web technologies such as Gridbox, FontAwesome, and Google Analytics integration, ensuring a good user experience and mobile responsiveness. Security posture is strong with HTTPS enforced, DNSSEC enabled, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR adherence. Overall, DRP demonstrates a credible and trustworthy online presence with solid business and technical foundations.

Č

Česko platí kartou

ceskoplatikartou.cz

57

Česko platí kartou is a Czech program aimed at facilitating merchants' adoption of card payment acceptance by providing access to free terminals and payment gateways for an initial period. The website positions itself as a trusted intermediary connecting merchants with multiple payment providers, promoting cashless payments to increase sales and customer convenience. The program targets small and medium-sized businesses in Czechia, emphasizing ease of use and modern payment technologies including mobile terminals and online payment gateways. Technically, the website employs modern web technologies such as Bootstrap and Google Tag Manager, hosted behind Cloudflare, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are missing, representing compliance gaps. The absence of WHOIS data limits domain legitimacy verification, but the presence of multiple reputable payment partners and clear business messaging supports trust. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security transparency.

The Washington Monthly is a well-established independent media organization focused on political and educational journalism, with a strong emphasis on government accountability and policy analysis. The website serves a target audience interested in in-depth political commentary, education issues, and public affairs, supported by subscription and donations. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit cookie consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness with a long domain history and consistent WHOIS data.

M

Montana Free Press

montanafreepress.org

65

Montana Free Press is an independent nonprofit digital newsroom providing fact-based statewide news coverage focused on Montana. It operates with a reader-supported business model emphasizing transparency, ethics, and community engagement. The organization is positioned as a leading source of independent journalism in Montana, offering news, newsletters, special projects, and events. The website is professionally designed with excellent content quality and clear navigation targeting Montana residents and stakeholders interested in local affairs. Technically, the site is built on WordPress with a modern tech stack including WooCommerce for e-commerce, Fundraise Up for donations, and Google Analytics for tracking. Hosting is via WordPress.com nameservers, ensuring reliable infrastructure. The site is mobile-optimized, fast loading, and accessible with good SEO practices. Security posture is strong with HTTPS, multiple security headers, and use of Google reCAPTCHA on forms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and GDPR considerations, though cookie consent mechanisms and terms of service are missing. Contact information is available primarily via email and contact forms. Overall, the website presents a trustworthy, professional, and secure platform for nonprofit journalism. Strategic recommendations include implementing cookie consent banners, publishing terms of service, and adding vulnerability disclosure and incident response information to enhance transparency and compliance.

T

The Colorado News Conservancy

coloradonewsconservancy.com

42

The Colorado News Conservancy is a nonprofit collaboration launched in 2021 by the National Trust for Local News and The Colorado Sun to maintain community ownership of 24 local newspapers in Colorado. The organization positions itself as an innovative alternative to national media consolidation, focusing on local journalism and community engagement. The website reflects this mission with clear content, partnership references, and a call to support the initiative. Technically, the site uses modern React technology, is hosted on Glitch, and integrates Google Tag Manager and Mailchimp for analytics and marketing. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is strong given the reputable partners and consistent WHOIS data. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

Mirror Indy is a small nonprofit media organization dedicated to community-oriented news reporting in Indianapolis. The website serves as a platform to engage local residents with relevant news, events, and community stories. The organization relies on donations and subscriptions to support its mission. Technically, the site is built on WordPress using the Newspack theme, integrating modern analytics and advertising tools such as Google Analytics, Google Tag Manager, and DoubleClick. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks DNSSEC and some recommended security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent with nonprofit use, employing privacy protection appropriately. The site is trustworthy and professionally maintained, with room for security and privacy enhancements.

Capital B News is a nonprofit news organization dedicated to reporting on stories about Black Americans at local and national levels. Founded in 2020, it operates with regional branches such as Capital B Atlanta and Capital B Gary, focusing on investigative journalism and accessible news content. The organization relies on donations and memberships to sustain its operations, emphasizing free access to important information. Technically, the website is built on WordPress using the Newspack theme and plugins, optimized for SEO and performance with integrations like Google Analytics and Google Tag Manager. Security posture is solid with HTTPS enabled and use of reCAPTCHA on forms, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site presents a professional and trustworthy image but would benefit from enhanced privacy and security disclosures.

S

Signal Cleveland

signalcleveland.org

61

Signal Cleveland is a nonprofit newsroom dedicated to serving the Greater Cleveland community with local news and resources. Founded recently in 2022, it operates with a mission to provide accessible, community-focused journalism covering government, housing, education, and public safety. The organization relies on donations and community support, as evidenced by donation appeals and fundraising campaigns on the website. The site is well-branded and maintains consistent messaging aligned with its nonprofit media identity. Technically, the website is built on WordPress using the Newspack theme, leveraging modern tools such as Gravity Forms for data collection, Yoast SEO for search optimization, and integrations with HubSpot, Fundraise Up, and Parsely for marketing and analytics. Hosting is provided by Automattic Inc., consistent with WordPress.com infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers such as CSP or HSTS. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. Tracking and advertising scripts are present, including Google Analytics and Facebook Pixel, with moderate user tracking. Overall, Signal Cleveland presents a credible and professional nonprofit media presence with solid technical foundations but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

Lookout Santa Cruz

lookout.co

55

Lookout Santa Cruz is a well-established local news media organization founded in 2010, serving Santa Cruz County with daily news, opinion, and community resources. The website is professionally designed using WordPress CMS and integrates modern technologies such as WooCommerce, Google Tag Manager, and Broadstreet Ads for monetization and analytics. The site demonstrates good content quality and user experience, targeting local residents and community members. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and credible with room for improvement in privacy and security transparency.

T

The Black Wall Street Times

theblackwallsttimes.com

64

The Black Wall Street Times is a small, niche national news publication focused on delivering news from Black perspectives, headquartered in Tulsa's historic Greenwood District. The website is built on WordPress and leverages a modern technology stack including Yoast SEO, WooCommerce, Jetpack, and various advertising and analytics tools. The site demonstrates good content quality, consistent branding, and a professional design optimized for both desktop and mobile users. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and implementing security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures to improve user trust and regulatory compliance.

T

The Haitian Times

haitiantimes.com

59

The Haitian Times is a well-established online news media outlet focused on delivering news and information about Haiti and the Haitian diaspora globally. Founded in 1998, it serves as an authoritative voice for the Haitian community with a broad range of content including news articles, videos, and special reports. The website targets the Haitian diaspora and those interested in Haitian affairs, operating primarily as an advertising-supported media platform with subscription and donation options. The brand is consistent and professional, with a strong social media presence and a clear market position within its niche. Technically, the site is built on WordPress using the Newspack theme and associated plugins, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and OneSignal for push notifications. The site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, ensuring secure communications. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented through Yoast SEO and structured data. From a security perspective, the site follows best practices such as HTTPS enforcement and domain transfer protection. However, DNSSEC is not enabled, and there is a lack of published security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms, which could expose the site to regulatory risks. Overall, The Haitian Times presents a credible and professional online presence with solid technical infrastructure but should improve privacy compliance and DNS security to enhance trust and regulatory adherence.

B

Bridge Detroit

bridgedetroit.com

57

BridgeDetroit is a nonprofit news media organization dedicated to providing original, community-driven reporting focused on Detroit's local issues including health, education, jobs, and neighborhoods. The website serves Detroit residents and stakeholders by delivering relevant news, analysis, and community engagement through multiple channels such as newsletters and podcasts. The organization is grant-funded by reputable foundations, emphasizing its nonprofit and community-oriented mission. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and AMP partial implementation, ensuring good performance, mobile optimization, and SEO effectiveness. Security posture is strong with HTTPS, security headers, and secure forms using reCAPTCHA, though privacy compliance could be improved by adding a cookie consent mechanism and publishing more explicit security policies. The absence of public WHOIS data slightly reduces trust but the professional content and transparency in business information mitigate this concern. Overall, BridgeDetroit presents a trustworthy, well-maintained digital presence aligned with its nonprofit mission.

F

Flint Beat

flintbeat.com

62

Flint Beat is a small, community-focused non-profit media organization dedicated to providing rigorous, evidence-based local news coverage for Flint, Michigan. The website serves as a platform for community engagement, local news dissemination, and fundraising through donations and newsletter subscriptions. Technically, the site is built on WordPress using the Newspack theme and plugins, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Broadstreet Ads for monetization and audience insights. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security best practices.

B

Black Voice News

blackvoicenews.com

62

Black Voice News is a niche media organization focused on serving the Black community in California through advocacy and data-driven journalism. The website offers news content, community engagement via newsletters, and donation-based funding. Technically, the site is built on WordPress with a modern plugin ecosystem supporting e-commerce, events, and marketing integrations. The site is mobile-optimized and SEO-friendly, with good content quality and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with a legitimate, long-standing media entity.

P

Prison Journalism Project

prisonjournalismproject.org

59

Prison Journalism Project is a US-based nonprofit organization established in 2019 that trains incarcerated individuals to become journalists and publishes their stories. It occupies a unique niche in the nonprofit media sector focused on criminal justice reform and prison-related storytelling. The organization operates a professionally designed WordPress website with rich content, including articles, educational resources, and special projects. The site actively engages its audience through newsletters, social media, and donation campaigns. Technically, the website uses modern WordPress plugins and SEO tools, is hosted with Cloudflare, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. However, DNSSEC is not enabled, and privacy compliance could be improved with explicit cookie consent and GDPR details. No critical security vulnerabilities were detected, but the absence of published security and incident response policies suggests room for improvement in formal security governance. Overall, the website demonstrates high professionalism, trustworthiness, and a solid security posture suitable for its nonprofit mission.

E

Epicenter NYC

epicenter-nyc.com

58

Epicenter NYC is a digital media platform focused on connecting New Yorkers with local news, information, arts, politics, and community events. Founded in 2020, it operates as a small media business with a strong local focus, offering news articles, newsletters, podcasts, advertising, membership, and an e-commerce shop. The website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and domain registration protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

B

Berkeleyside

berkeleyside.org

47

Berkeleyside is a nonprofit local news organization focused on delivering comprehensive news coverage for Berkeley, California. It holds a strong market position as the leading local news source, offering services such as breaking news, public safety updates, political coverage, food and real estate news, and community events. The website is well-branded and targets residents and community members interested in local affairs. Technically, the site is built on WordPress using the Newspack theme, integrating modern technologies like Gravity Forms, WooCommerce, Google Analytics, and Facebook Pixel. Hosting leverages Amazon S3 for media assets, ensuring fast content delivery. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness, though privacy compliance disclosures and cookie consent mechanisms are areas for enhancement.

N

North Carolina Longform Magazine Inc.

theassemblync.com

62

The Assembly NC is a specialized digital magazine focused on delivering in-depth news and investigative journalism about North Carolina. It targets readers interested in local politics, culture, environment, and business, offering subscription-based newsletters and sponsored content. The website is professionally designed with excellent content quality and consistent branding, positioning itself as a trusted regional media outlet. Technically, the site is built on WordPress with modern SEO and performance optimizations, including AMP support and integration of analytics and advertising platforms. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit privacy and cookie policies are absent, representing a compliance gap. The lack of WHOIS data is a notable concern for domain legitimacy, but the active content and social presence suggest a legitimate operation. Overall, the site scores well on content and technical implementation but should improve privacy compliance and domain transparency.

M

Marketing Drenthe

marketingdrenthe.nl

55

Marketing Drenthe is a small, specialized regional marketing organization focused on promoting the Dutch province of Drenthe as a leisure and tourism destination. The organization operates with support from the Province of Drenthe and targets leisure visitors, tourism entrepreneurs, and partners to stimulate sustainable tourism development. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity, embedded within a responsive and accessible design. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy documentation. Overall, the site is trustworthy and well-positioned within its niche, but would benefit from enhanced privacy and security disclosures.

M

Marketing Drenthe

besuchdrenthe.de

66

The website www.besuchdrenthe.de is a regional tourism promotion platform focused on the Drenthe region in the Netherlands, targeting German-speaking tourists. It provides comprehensive information about holidays, nature, culture, accommodations, and activities in Drenthe. The site is professionally designed with good content quality and consistent branding, offering a positive user experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies including Cloudflare DNS, Google Tag Manager, Google Analytics, Facebook Pixel, and video embeds from Vimeo. The site is served over HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit terms of service, security policies, incident response information, and contact details such as emails or phone numbers. The WHOIS data shows Cloudflare nameservers with limited registrant information, which is typical for privacy but reduces transparency. Overall, the website demonstrates a good security posture with no visible vulnerabilities or blocking mechanisms. Strategic improvements include adding terms of service, security policies, and clear contact information to enhance trust and compliance.

S

Stichting Marketing Drenthe

visitdrenthe.com

65

The website www.visitdrenthe.com serves as a regional tourism promotion platform for the province of Drenthe in the Netherlands, operated by Stichting Marketing Drenthe. It provides comprehensive information about natural parks, cultural heritage, accommodations, and activities targeting tourists and visitors interested in leisure and nature experiences. The site is professionally designed with good navigation, mobile optimization, and relevant content tailored to its audience. Technically, the site employs modern web technologies including Google Tag Manager, Vimeo video embeds, and a carousel library, ensuring a moderate to good performance and accessibility. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism with granular controls, but lacks visible security headers and explicit security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional appearance and content quality. Overall, the site is trustworthy and functional but would benefit from improved transparency in domain registration and enhanced security headers.

H

Happy Horizon

webber.nl

67

Happy Horizon is a full service marketing bureau based in the Netherlands, established in 2004. The company offers a comprehensive suite of services including online marketing, branding, web development, and data analytics, positioning itself as a creative digital agency. The website reflects a medium-sized business with a consistent brand presence and a focus on serving businesses seeking end-to-end marketing solutions. Technically, the website is built on WordPress and integrates modern marketing and analytics tools such as HubSpot and Google Tag Manager, with a cookie consent mechanism implemented via Cookiebot. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS with a good SSL configuration and employs Google reCAPTCHA to mitigate bot traffic. However, there is room for improvement in security headers and publishing explicit security policies. Privacy compliance is partially addressed through cookie consent, but lacks a visible privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

C

CM.com

robinhq.com

69

CM.com is a technology company offering customer service software solutions, notably through its Mobile Service Cloud platform following the acquisition of ROBINHQ. The website presents a professional and consistent brand image, targeting businesses seeking advanced customer service and mobile communication solutions. The technical infrastructure includes modern web technologies, with analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and CSRF tokens present, though some security headers are not explicitly detected. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy on the analyzed page. The absence of WHOIS data for the domain queried limits the ability to fully verify domain legitimacy, but the website content and branding align with a reputable enterprise. Overall, the site demonstrates good digital maturity and security hygiene but would benefit from enhanced transparency in privacy and security policies.

S

Spotler

sooqr.com

65

Spotler is a medium-sized technology company founded in 2014, specializing in data driven marketing software solutions aimed at optimizing website search results to enhance conversions and shopping experiences. The company maintains a professional and consistent brand presence with multi-language support and a focus on marketing automation tools. Technically, the website is built on WordPress, leveraging modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting and DNS are managed via Cloudflare, providing good performance and security. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some advanced security headers could be added. No direct contact or security incident response information is published on the analyzed page, which could be improved for transparency. Overall, the website is well-structured, SEO optimized, and compliant with GDPR, reflecting a trustworthy and professional business presence.

A

Analytics SEO Limited (t/a Authoritas)

linkdex.com

52

Linkdex is a UK-based technology company operating under Analytics SEO Limited (t/a Authoritas), providing a comprehensive SEO platform tailored for professional marketers, agency teams, and in-house SEO teams. The platform offers extensive SEO data, content marketing insights, outreach strategy tools, ranking intelligence, and project management capabilities. The company positions itself as a trusted partner for global agencies and enterprises, supported by a professional website with strong branding and client endorsements. Technically, the website is built on WordPress with modern frameworks such as React and Bootstrap, integrating key marketing and analytics tools like Google Analytics, Google Tag Manager, and Intercom. The site demonstrates good mobile optimization, SEO practices, and user experience, though performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and employs secure forms but lacks visible security headers and explicit cookie consent mechanisms, indicating areas for improvement in compliance and security hardening. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not negate the professional presence and business legitimacy evident on the site. Overall, Linkdex presents a solid business and technical profile with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen its market position and trustworthiness.

2

26 Digital Agency

26-agency.com

69

26 Digital Agency is a UK-based digital marketing firm specializing in digital experience and performance marketing services. Positioned as a leading agency for ambitious brands, it offers services that connect brands with customers through market-leading technology. The company operates under the parent company MSQ and maintains multiple subsidiary domains for its specialized services. The website is modern, built on Next.js, and optimized for performance and mobile devices. It employs reputable third-party tools such as Google Analytics, Hubspot, and Cookiebot for analytics and compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. The domain registration is transparent and consistent with the company's age and business claims. Overall, the website presents a professional and trustworthy digital presence.

S

Simmer Oy

teamsimmer.com

65

Simmer Oy operates a professional online education platform specializing in technical marketing courses. The website offers a variety of paid and free courses, skill tests, and a technical marketing handbook, targeting digital marketers and professionals seeking to enhance their technical marketing skills. The company positions itself as a niche leader in technical marketing education with a strong community focus. Technically, the site is built on WordPress with LearnDash LMS and WooCommerce, leveraging modern plugins and SEO best practices. The site is well-designed, mobile-optimized, and accessible, with good performance and security configurations including HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding are consistent and professional. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages. Overall, the site demonstrates a mature digital presence but would benefit from enhanced transparency and compliance documentation.

M

Mobile Moxie

mobilemoxie.com

60

Mobile Moxie is a specialized technology company providing mobile-focused business intelligence and digital marketing tools, primarily targeting brands, agencies, and analysts seeking to optimize mobile SEO and app store presence. Founded in 2008 and operating under MobileMoxie, LLC, the company offers SaaS tools that enable real-time and historical tracking of search results, landing pages, and app rankings across multiple devices and geographies. Their market position is that of a niche provider with a strong emphasis on mobile and digital marketing analytics. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and various analytics and tracking services, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy disclosures and DNS security.

J

JobMatcher

job-matcher.com

65

JobMatcher is a small, multilingual job matching platform primarily targeting Dutch, Polish, and Romanian speaking job seekers and employers. The website offers categorized job listings and recruitment services. The business appears to be relatively new, founded in 2021, and operates on a WordPress CMS with common plugins and tracking technologies such as Google Analytics and Facebook Pixel. The technical infrastructure is standard for small business websites, with Cloudflare DNS and HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent banner and a privacy policy page, but no visible terms of service or detailed security policies. Contact information is not explicitly provided on the main pages, which may impact user trust. Overall, the site is accessible and functional but could benefit from enhanced security and compliance transparency.

스

스윙투앱

swing2app.co.kr

61

스윙투앱은 한국 기반의 노코드 모바일 앱 제작 플랫폼으로, 사용자가 별도의 코딩 지식 없이도 안드로이드, 아이폰, 모바일 웹용 앱을 제작할 수 있도록 지원합니다. 주요 서비스로는 웹사이트를 앱으로 전환하는 웹뷰 앱 제작, 다양한 템플릿을 활용한 프로토타입 앱 제작, 맞춤형 주문제작 서비스, 그리고 앱스토어 및 플레이스토어 유지보수 서비스가 포함되어 있습니다. 국내 시장에서 1위의 모바일 앱 제작 빌더로 자리매김하고 있으며, 누적 14만 개 이상의 앱 제작 실적을 보유하고 있습니다. 고객층은 개인 사용자부터 중소기업까지 다양하며, 플랫폼 기반 SaaS 비즈니스 모델을 운영합니다. 기술적으로는 Vue.js 프레임워크를 기반으로 하며, Google Analytics, Google Tag Manager, LiveChat 등 다양한 디지털 마케팅 및 고객지원 도구를 활용하고 있습니다.

V

Voices.com

voices.com

71

Voices.com operates as a leading global online marketplace specializing in connecting clients with professional voice actors. The platform facilitates quick and easy hiring processes, allowing users to post jobs, receive auditions, and obtain quotes efficiently. The website demonstrates a strong market position within the media sector, targeting businesses and individuals seeking voice over talent. Technically, the site is built on WordPress with performance optimizations such as NitroPack and employs modern web technologies including Google Tag Manager and Font Awesome. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly impacting domain trust assessment.

Enterprise Rent-A-Car Armenia, operated by J.M.S. LLC, is a well-established car rental and leasing service provider in Armenia, affiliated with the global Enterprise Rent-A-Car brand. The company offers a broad range of services including short-term rentals, long-term leases, one-way rentals, luxury vehicles, and chauffeur-driven rentals, primarily targeting both individual and corporate customers within Armenia. Their market position is strong due to brand recognition, a comprehensive fleet, and convenient locations such as Yerevan and Zvartnots Airport. Technically, the website is built using modern web technologies including React and Next.js, ensuring a responsive and user-friendly experience. The site integrates analytics tools like Yandex Metrica and Google Tag Manager for performance and user behavior tracking. The technical implementation is solid with good SEO practices and mobile optimization, although accessibility features are basic. From a security perspective, the site enforces HTTPS and follows several best practices, but lacks explicit security headers and detailed security or incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security policy transparency. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, and publishing detailed security and incident response policies to strengthen trust and compliance.

CruiseTMK (주)투어마케팅코리아 is a South Korean travel marketing company specializing in cruise travel services. The company offers booking and marketing services for major cruise lines such as Royal Caribbean, Celebrity Cruises, and Disney Cruises, targeting Korean-speaking cruise travelers and travel agents. The website is professionally designed with a modern technical stack including Vue.js components and common JavaScript libraries, hosted likely on AWS infrastructure. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and transparent, supporting business legitimacy.