Security Directory

D

DO HNÍZDA z.s.

pestouni-dohnizda.cz

42

DO HNÍZDA z.s. is a Czech Republic-based non-profit organization dedicated to foster care awareness, education, and support. The organization facilitates foster care agreements and works closely with social authorities to provide stable foster family environments for children. Their website serves as an informational and engagement platform targeting prospective foster parents, children in need, and social workers. The organization is relatively young, founded in 2021, and maintains a clear and consistent brand presence online. Technically, the website is built on WordPress using modern web technologies such as Bootstrap, jQuery, and WPBakery Page Builder. It demonstrates good mobile optimization and a moderate performance profile. However, there is room for improvement in accessibility and SEO optimization. The site uses HTTPS with a strong SSL configuration but lacks important security headers and formal security policies. From a security perspective, the site benefits from HTTPS but misses critical security headers and does not provide a vulnerability disclosure or incident response contact. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly presented, enhancing business credibility. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, the website is professionally designed and trustworthy but would benefit from enhanced privacy compliance, security hardening, and formalized policies to improve its security posture and regulatory adherence.

P

Proměny Tišnova

promenytisnova.cz

42

The website 'Proměny Tišnova' serves as an official municipal portal for the city of Tišnov, Czech Republic, focusing on investment projects, urban development, and public news. It provides residents and stakeholders with updates on ongoing and planned city projects, including detailed news articles and interactive maps. The site leverages modern front-end technologies such as Bootstrap, Google Maps API, and various JavaScript libraries to deliver a responsive and informative user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and branding strongly indicate a legitimate government entity. Security posture is moderate, with no advanced security headers detected and limited privacy compliance indicators. The site uses Google Analytics and Tag Manager for user tracking but lacks visible privacy and cookie policies, which could be improved for GDPR compliance. Overall, the site is functional and informative but would benefit from enhanced security and privacy practices to strengthen trust and compliance.

T

Tišnovská televize

tisnovskatelevize.cz

31

Tišnovská televize is a regional media outlet serving the Tišnov area in the Czech Republic, providing local news, cultural event coverage, and video content. The website targets residents and visitors interested in regional happenings and operates primarily as a content publishing platform with advertising as a revenue stream. The site is built on WordPress, leveraging common web technologies such as jQuery and Font Awesome, and demonstrates moderate digital maturity with a responsive design and basic SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the site is legitimate and consistent with its regional media role but would benefit from enhanced privacy compliance and security best practices.

M

Město Tišnov

tisnovskenoviny.cz

38

Tišnovské noviny is the official municipal news portal for the city of Tišnov, Czech Republic, providing residents and interested parties with access to local news, archives, and PDF versions of the printed newspaper. The website is managed by the city and offers a comprehensive archive dating back several years, serving as a key information resource for the local community. The business model is primarily informational and publicly funded, focusing on community engagement and transparency.

I

iDeal

ideal.lv

59

iDeal is a retail business specializing in Apple products and services, targeting consumers in Latvia. The website is built on the Magento e-commerce platform and integrates multiple third-party services for analytics, marketing, and customer support. The site demonstrates a good level of digital maturity with modern technologies and a comprehensive cookie consent mechanism via Cookiebot. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers are missing. Privacy compliance is partially met with cookie consent but lacks an explicit privacy policy page. Overall, the site is professional, trustworthy, and safe for general audiences.

W

WomenCount

womencount.org

70

WomenCount is a mission-driven non-profit organization focused on empowering women donors to support Democratic women candidates through a curated crowdfunding platform. The website offers a user-friendly interface to find and fund candidate slates, emphasizing early and direct support without intermediaries. The organization partners with the Electing Women Alliance and other groups to amplify its impact. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS and domain protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, lacking cookie consent mechanisms despite tracking scripts. Overall, the platform is credible, professional, and well-positioned in its niche, with a strong focus on women’s political empowerment.

The Centre for Foreigners JMK is a government-supported non-profit organization based in the South Moravian Region of the Czech Republic. It provides a broad range of integration services including Czech language courses, legal and social counselling, adaptation and integration courses, and multicultural activities. The organization targets foreigners, institutions, municipalities, companies, and the general public, offering free events and support to facilitate integration into Czech society. The website is professionally designed, multilingual, and well-structured, reflecting a mature digital presence. Technically, the website is built on WordPress with modern libraries such as React, Leaflet.js, and Google reCAPTCHA for security. It employs SEO best practices with Yoast SEO and includes analytics via Google Analytics and Tag Manager. The site is mobile-optimized and accessible, though accessibility could be improved further. Security posture is strong with HTTPS and form protections, but lacks some advanced security headers and published security policies. The WHOIS data is unavailable, which slightly reduces trustworthiness, but the presence of official partner logos and consistent branding supports legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear consent mechanisms. No signs of malicious content or adult material were found, making the site safe for general audiences. Overall, the Centre for Foreigners JMK website demonstrates a solid business and technical foundation with good security and privacy practices. The main risk is the lack of publicly available WHOIS data and absence of explicit security incident response information. Strategic improvements in security headers, incident response transparency, and accessibility would enhance trust and compliance.

A

AI Institute - vzděláváme ve světě umělé inteligence

aiinstitute.cz

70

AI Institute is an educational platform focused on providing practical knowledge and skills in artificial intelligence for business applications. The website targets professionals and entrepreneurs seeking to leverage AI to achieve their business goals. It operates primarily in the Czech Republic and offers courses and training services in AI. The platform is built on Kajabi, a modern CMS and marketing platform, indicating a moderate level of digital maturity. The site includes cookie consent mechanisms and integrates multiple third-party analytics and marketing tools, reflecting an awareness of privacy and marketing best practices. Security posture is good with HTTPS enforced and standard security headers likely in place, but lacks explicit security policies or incident response contacts. The absence of WHOIS data and privacy policy pages reduces transparency and trustworthiness somewhat. Overall, the site is professional and functional but would benefit from enhanced compliance documentation and clearer contact information.

N

National Association of REALTORS

realtorparty.realtor

62

The National Association of REALTORS operates the REALTOR Party website as a comprehensive platform for real estate advocacy, community outreach, and political engagement. The organization is a leading national entity in the real estate sector, providing extensive resources, training, and campaign services to REALTORS and affiliated associations. The website reflects a mature digital presence with a focus on promoting homeownership and property investment through coordinated advocacy efforts. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and functionality. The site is mobile optimized and incorporates multiple analytics and tracking tools, indicating a data-driven approach to user engagement and marketing. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and uses anti-spam measures like Akismet. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity, reinforcing domain legitimacy. Privacy policies and terms of service are present and comprehensive, supporting compliance with GDPR and other regulations. Overall, the website demonstrates a strong business credibility and professional online presence, with minor areas for enhancement in privacy compliance and security hardening. The risk profile is low, and the site serves as a trustworthy resource for its target audience.

G

Guamunity

guamunity.com

56

The website guamunity.com serves as a minimal informational landing page primarily announcing the availability of an app called GuamAlerts. The content is sparse, consisting mainly of images and a brief message about app store availability, with no detailed business or service information. The domain is registered since 2015 with GoDaddy and uses Cloudflare DNS, indicating a stable but basic technical setup. No privacy, cookie, or terms of service policies are present, and no contact information or forms are provided, limiting user engagement and trust signals. Technically, the site uses Bootstrap and Font Awesome for styling and icons, with Cloudflare DNS but lacks advanced security headers or DNSSEC. Mobile optimization is basic but functional. SEO and accessibility features are minimal, and no analytics or tracking technologies are detected. The security posture is weak due to missing HTTPS enforcement details and absence of security headers. Overall, the security posture is low with no evident vulnerabilities but also no advanced protections. The lack of privacy and cookie policies indicates non-compliance with common data protection regulations. The domain registration is consistent and appropriate for the business age, but the website itself lacks professionalism and completeness. Strategic recommendations include implementing HTTPS with strong SSL/TLS, adding privacy and cookie policies, providing clear contact information, enabling DNSSEC, and improving content quality and SEO to enhance trust and user experience.

G

Guam Office of Public Accountability

opaguam.org

63

The Guam Office of Public Accountability (OPA) is a government agency dedicated to ensuring public trust and good governance through independent audits and procurement appeals administration. The website serves as a comprehensive portal for audit reports, procurement appeals, announcements, and resources targeted at government officials, auditors, and the general public of Guam. It positions itself as the official auditing authority for the Government of Guam, providing transparency and accountability services. Technically, the website is built on Drupal 7 with a moderate performance profile and good mobile optimization. It uses common web technologies including jQuery, MediaElement.js, and Font Awesome, with hosting and DNS services linked to PublicDomainRegistry.com and Cloudflare. The site employs HTTPS and Google Analytics for tracking but lacks advanced security headers and DNSSEC. From a security perspective, the site demonstrates basic good practices such as HTTPS and domain transfer protection but lacks explicit security policies, incident response contacts, and privacy/cookie policies. No WAF or blocking mechanisms were detected, and the domain registration details align well with the website's government purpose, indicating legitimacy. However, improvements in security headers, privacy compliance, and incident response readiness are recommended. Overall, the site is a trustworthy government resource with good content quality and business credibility but could enhance its privacy and security posture to meet modern standards and regulatory compliance more fully.

P

Pacific Islands Small Business Development Center Network (PISBDCN)

pacificsbdc.com

60

Pacific Islands Small Business Development Center Network (PISBDCN) is a government-affiliated non-profit organization operating under the University of Guam. It provides vital business development services including training, counseling, and resource networking to small businesses across the U.S. affiliated Pacific Islands. The website reflects a mature and well-established entity with a clear mission to foster economic growth in the region. The business model is service-oriented, funded partly by the U.S. Small Business Administration, and targets small business owners and entrepreneurs in the Pacific Islands. The site offers extensive resources, event registrations, and success stories, positioning itself as a key regional economic development player. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates third-party services such as Google Analytics and Tawk.to for analytics and live chat support. The site is mobile-optimized and accessible, with good SEO practices. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. However, DNSSEC is not enabled, and there is no explicit cookie consent mechanism, which are areas for improvement. Security posture is solid with HTTPS enforced and domain transfer locked, but lacks advanced security headers like CSP and a public vulnerability disclosure policy. No incident response or security contact information is provided. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the site is trustworthy and professional, with minor gaps in privacy and security best practices. The overall risk is low, but strategic improvements in security headers, DNSSEC, and privacy compliance would enhance trust and regulatory adherence. The domain WHOIS data supports legitimacy with consistent registration details and a long operational history since 2003.

Tomahawk Tourism Marketing is a New Zealand-based digital marketing agency specializing in tourism sector services including bespoke website design, digital marketing, branding, and consulting. The company targets tourism businesses primarily in New Zealand and Australia, positioning itself as a leading provider with strong industry expertise and a comprehensive service offering. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and consistent branding. Technically, the site uses modern web technologies and integrates multiple marketing and analytics platforms such as HubSpot, Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is high, supported by partner badges and awards, though direct contact emails and phone numbers are not publicly listed, relying on contact forms and social media channels.

Bluefin Technology Partners operates a specialized advertising solutions platform targeting publishers to enhance their classified advertising revenue across print, online, and mobile channels. The company leverages a hosted SaaS model to empower advertisers with tools for media placement and management, positioning itself as a key technology partner in the media industry. The website reflects a professional and consistent brand presence with clear messaging tailored to publishers and advertisers. Technically, the site is built on WordPress with the Divi theme, incorporating common web technologies and social media integrations. While the site is mobile-optimized and offers a good user experience, it lacks comprehensive privacy and cookie policies, which impacts compliance posture. Security-wise, the site uses HTTPS and domain protections but could improve by enabling DNSSEC and adding security headers. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices.

W

We Edit Podcasts

weeditpodcasts.com

55

We Edit Podcasts is a specialized B2B service provider focused on podcast production, editing, and marketing services. Established in 2015, the company has served over 4000 clients, positioning itself as a trusted partner in the media industry for businesses seeking to leverage podcasting as a growth channel. Their website reflects a mature digital presence with comprehensive service offerings, case studies, and a strong social media footprint. Technically, the site is built on WordPress with Elementor, hosted on SiteGround, and employs modern web technologies and analytics tools, indicating a solid digital infrastructure. Security posture is good with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

U

U.S. Centers for Disease Control and Prevention (CDC)

vaccines.gov

72

Vaccines.gov is an official U.S. government website operated under the Centers for Disease Control and Prevention (CDC) and the Department of Health and Human Services (HHS). It provides a public service by helping users locate pharmacies offering vaccines across the United States. The site is positioned as a trusted source for vaccine information and pharmacy locations, targeting the general public seeking vaccination services. The business model is government-funded public health information dissemination, with no commercial intent. Technically, the website employs modern web technologies including React and Next.js frameworks, with integration of Google Analytics, Google Tag Manager, and Adobe Launch for analytics and tracking. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. The use of official .gov domain and CDC/HHS branding enhances trust and authority. From a security perspective, the site enforces HTTPS and uses secure form inputs. However, explicit security headers such as Content Security Policy and HSTS are not evident in the provided HTML content. Privacy compliance is strong with a comprehensive privacy policy linked from the CDC domain and a vulnerability disclosure policy available. No contact emails or phone numbers are explicitly listed, which is typical for government sites but may limit direct user support. No suspicious or malicious content was detected, and the site is not blocked by any WAF or security challenge. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a government public health platform. Strategic improvements include adding cookie consent mechanisms, explicit security headers, and clearer contact information for incident response to further enhance security posture and user trust.

M

Merck & Co., Inc.

merckaccessprogram-keytruda.com

53

The website represents The Merck Access Program for KEYTRUDA®, a pharmaceutical support initiative by Merck & Co., Inc. It targets US healthcare providers, offering enrollment, affordability, coding, and patient assistance resources. The site is professionally designed with consistent branding and clear navigation, supporting its role as a trusted resource for healthcare professionals. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, potentially indicating a staging or proxy domain, which impacts trust. Overall, the site is functional and professional but requires verification of domain legitimacy and enhanced security practices.

S

State of Hawaiʻi

ehawaii.gov

57

The website portal.ehawaii.gov serves as the official digital gateway for the State of Hawaiʻi, providing comprehensive resources and services for government entities, residents, businesses, and visitors. It functions as a centralized platform offering access to government departments, online services such as business registration and driver records, news updates, and visitor information. The site is well-positioned as an authoritative source for state-related information and services, reflecting a large government entity with a broad target audience. From a technical perspective, the site employs modern web technologies including Google Analytics for tracking, Freshchat for user support, and Siteimprove Analytics for performance monitoring. The design is professional, mobile-optimized, and accessible, with clear navigation and consistent branding. However, no explicit CMS or hosting provider details are discernible from the source. Security-wise, the site enforces HTTPS and uses secure form submissions, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a privacy policy and terms of use, but no cookie consent mechanism or GDPR-specific indicators were found. WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces domain trustworthiness, though the site content and external references strongly support legitimacy. Overall, the site demonstrates a strong security posture and professional digital presence appropriate for a government portal, with recommendations to enhance security headers, privacy compliance, and incident response transparency to further strengthen trust and compliance.

T

TakeCare Insurance Company, Inc.

veiovis.com

48

Veiovis.com represents the digital presence of TakeCare Insurance Company, Inc., a healthcare insurance provider selected by the U.S. Federal Employee Health Benefit Program as the sole Guam-based provider. The company offers a range of healthcare services including medical management, wellness programs, and global access healthcare options. The website reflects a medium-sized healthcare business with a focus on patient-centered care and sustainable healthcare business practices. The market position is strong within Guam and extends globally through its Veiovis brand. Technically, the website is built on Drupal CMS with modern front-end libraries such as jQuery, Bootstrap, and Slick Slider. It uses Google Analytics and Google Tag Manager for analytics with IP anonymization enabled, indicating some privacy consideration. The site is mobile optimized and includes accessibility features via the UserWay widget. Hosting appears to be through GoDaddy, consistent with the domain registrar. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. No vulnerability disclosure or incident response information is published. The domain registration is consistent and long-standing, supporting legitimacy. However, cookie consent mechanisms and GDPR compliance indicators are minimal, suggesting room for improvement in privacy compliance. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance.

M

MageeWP

mageewp.com

54

MageeWP is a small technology company specializing in the development and sale of professional WordPress themes and plugins. Their offerings include both free and premium products designed to enhance website design and functionality, with compatibility for WooCommerce to support e-commerce storefronts. The company targets WordPress users and developers seeking flexible and customizable themes. The website presents a professional design with clear navigation and a consistent brand image, including a logo prominently displayed in the header. From a technical perspective, MageeWP's website is built on the WordPress platform, utilizing common libraries and frameworks such as jQuery, Bootstrap, Font Awesome, and Owl Carousel. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is adequate with proper meta tags and structured data in JSON-LD format. Security posture is moderate but could be improved. While HTTPS is implied by the canonical URL, no explicit security headers were detected in the provided HTML content. There is no visible privacy or cookie policy, which presents compliance risks, especially under GDPR. No contact information or incident response channels are provided, limiting transparency and user trust. No forms or analytics scripts were detected, suggesting minimal data collection but also limited user engagement tracking. Overall, MageeWP's website is functional and professional but lacks critical privacy and security disclosures. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and reduce risk.

D

Divadlo Oskara Nedbala Tábor

divadlotabor.cz

46

Divadlo Oskara Nedbala Tábor is a well-established cultural institution in the Czech Republic offering a diverse range of theatrical, musical, and dance performances, as well as exhibitions and educational programs. It serves a broad audience with over 60,000 visitors annually, positioning itself as a key regional player in the cultural media sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site employs modern web technologies including Google Analytics, reCAPTCHA, and Google Maps API, ensuring a functional and moderately performant user experience with good mobile optimization. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection but lacks visible security headers and formal privacy and cookie policies, indicating areas for improvement in compliance and security posture. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is safe, professional, and user-friendly but would benefit from enhanced transparency and security practices.

S

Supplier.io

supplierone.co

76

SupplierOne is a supplier registration portal operated by Supplier.io, a leading supplier intelligence platform serving over 1,000 corporate buyers. The platform enables suppliers to create profiles, showcase capabilities, and connect with procurement teams seeking diverse and small business suppliers. The website is professionally designed with a clear business focus and good user experience. Technically, it leverages modern JavaScript libraries, Bootstrap, and integrates marketing and analytics tools such as HubSpot and Clicky. Security posture is solid with HTTPS, anti-CSRF tokens, and Cloudflare protection, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

T

TakeCare Insurance and FHP Health Center

takecareasia.com

10

TakeCare Insurance and FHP Health Center is a well-established healthcare insurance provider and medical clinic based in Guam, offering a comprehensive range of health insurance plans and direct healthcare services including medical, dental, vision, pharmacy, and wellness programs. The company targets residents and employers in Guam and nearby regions, positioning itself as a trusted local leader with over 19 years of domain presence and multiple industry certifications. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on Drupal CMS with modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and AOS for animations. It is hosted via GoDaddy.com, LLC and uses HTTPS with a good SSL configuration. The site is mobile optimized and includes accessibility features, though some improvements are possible. Analytics are implemented via Google Analytics, indicating moderate user tracking. From a security perspective, the website employs domain status locks to prevent unauthorized changes and uses HTTPS. However, DNSSEC is not enabled, and no advanced security headers were detected, representing areas for improvement. Privacy compliance is partially addressed with comprehensive privacy and terms of service documents, but lacks a cookie consent mechanism. No incident response or vulnerability disclosure policies were found. Overall, the website is trustworthy and professional with a solid business foundation and technical infrastructure. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance.

KFC Saipan Marianas operates as a local franchise offering KFC and Taco Bell fast food services with a focus on take-out and contactless delivery in the Mariana Islands region. The website provides clear business information, including phone contact and physical location, and promotes safe food delivery options. The business is positioned as a trusted local quick service restaurant with a small operational scale and a founding date consistent with domain registration in 2020. Technically, the website is built on Drupal 10 with modern web technologies and integrates Google Analytics for user tracking. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No forms are present on the homepage, reducing direct data collection risks. Overall, the site is professional, trustworthy, and safe for general audiences.

GuamPayments is a Guam-based payment solutions provider specializing in credit card merchant accounts, online payments, and integrated billing systems tailored for Guam's market. Founded in 2020 and operated by the parent company 1-A GuamWEBZ, the company leverages global partnerships with major payment processors to deliver secure and convenient payment options for businesses, government entities, non-profits, and other sectors. The website presents a professional and user-friendly interface with clear contact channels and a focus on local support. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, with Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and clientTransferProhibited domain status, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche but could improve security and compliance aspects.

G

GuamWEBZ

guamalerts.com

62

GuamWEBZ is a well-established technology company based in Guam, specializing in comprehensive web design, development, digital marketing, and software solutions. With over 21 years of experience, they serve a diverse clientele including government agencies, non-profits, and private sector businesses. Their service portfolio is extensive, covering website and mobile app development, e-commerce, CRM solutions, and tourism destination marketing. Technically, the website is built on Drupal CMS with modern JavaScript libraries and is mobile optimized, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and client-side validation, but lacks some advanced security headers and explicit privacy and cookie policies. The absence of WHOIS data is a notable anomaly, though the website's content and client references support its legitimacy. Overall, GuamWEBZ presents as a credible and professional digital solutions provider with room for improvement in transparency and security best practices.

S

State of Hawaiʻi

hawaii.gov

57

The website portal.ehawaii.gov serves as the official digital gateway for the State of Hawaiʻi, providing comprehensive resources and services for government entities, residents, businesses, and visitors. It functions as a centralized hub for accessing government departments, online services such as business registration and driver records, and up-to-date news and alerts. The site is positioned as a trusted and authoritative source, reinforced by consistent branding with the state seal and multiple industry awards. From a technical perspective, the site employs modern web technologies including Google Analytics for traffic analysis, Freshchat for user engagement, and Siteimprove Analytics for quality assurance. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. However, some improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a published security policy or incident response contacts. The absence of a vulnerability disclosure program and cookie consent banner indicates areas for compliance enhancement, particularly with privacy regulations. Overall, the site maintains a strong security baseline appropriate for a government portal. The overall risk assessment is low, given the official nature, consistent branding, and absence of suspicious content or vulnerabilities. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security policies, and enhancing transparency with vulnerability disclosure mechanisms to further strengthen trust and compliance.

G

Guam Council on the Arts and Humanities Agency

guamcaha.org

63

The Guam Council on the Arts and Humanities Agency (CAHA) is an official government entity dedicated to promoting and supporting the arts and humanities in Guam. Established in 1967, CAHA provides grants, organizes exhibitions, and fosters cultural education to enrich the community. The website serves as a comprehensive portal for residents, artists, and stakeholders to access information about programs, events, and resources. Technically, the site is built on Drupal CMS with a moderate tech stack including jQuery, Bootstrap, and Google services. It is mobile-optimized and includes accessibility features, though some libraries are outdated. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves its government function effectively.

Applied Materials is a global leader in materials engineering solutions, primarily serving the semiconductor and advanced display industries. The company partners strategically with customers across Europe and worldwide to deliver innovative technologies and services that enable next-generation microchips and devices. Their business model focuses on B2B technology and manufacturing solutions, positioning them as a market leader with a comprehensive product and service portfolio including semiconductor technologies, display solutions, automation software, and supply chain services. The website reflects a mature enterprise with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and performance monitoring tools. It is well-optimized for mobile and accessibility, with strong SEO practices. Security posture is robust with HTTPS, Content Security Policy, and cookie consent mechanisms, although additional security headers and a public security policy could enhance trust further. No critical vulnerabilities or suspicious content were detected. The WHOIS data is unavailable publicly, likely due to privacy protection, which is common for large enterprises. Overall, the website demonstrates high professionalism, security awareness, and compliance with privacy regulations, making it a trustworthy digital presence for Applied Materials. Strategic recommendations include enhancing security headers, publishing a dedicated security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

Y

Yomedia

pinetech.vn

57

Yomedia is a Vietnam-based integrated marketing agency specializing in programmatic advertising solutions, including DSP, SSP, and DMP technologies. The company positions itself as a strategic marketing partner with a strong focus on brand safety and audience targeting, leveraging technologies such as Integral Ad Science. The website reflects a medium-sized business with a professional digital presence and a clear target audience of advertisers and publishers. Technically, the site uses modern front-end frameworks and libraries, including Bootstrap, jQuery, and various carousel and animation plugins, along with tracking tools like HubSpot and Heatmap.it. While the site is mobile-optimized and well-structured, it lacks key privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with HTTPS implied but no visible security headers or vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

De Big BV is a small Dutch company specializing in property clearance and professional cleaning services after death or in cases of heavily cluttered or contaminated homes. The company targets individuals and families in the Rotterdam area who require assistance with these sensitive and demanding tasks. Their business model focuses on providing relief to families by handling difficult cleaning and clearance tasks professionally. The website content is basic but relevant, providing clear descriptions of services and contact options. Technically, the site uses older JavaScript libraries and is hosted via Strato with DNSSEC enabled, indicating a reasonable level of technical infrastructure but with room for modernization. Security posture is moderate with HTTPS and DNSSEC but lacks explicit security headers and updated libraries, which could pose risks. Privacy compliance is weak due to absence of privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the site is functional and trustworthy for its scale but would benefit from improved security and compliance measures.

T

The Artistic Design Studio

theartisticdesignstudio.nl

32

The Artistic Design Studio is a small creative design business based in the Netherlands, founded in 2022. The company offers personalized and professional design services including branding, graphic design, photography, and website development. The website is built on WordPress using Elementor and integrates Google Analytics via Google Tag Manager. The technical infrastructure is modern and the site is mobile optimized with good SEO practices. Security posture is solid with HTTPS and DNSSEC enabled, but lacks security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact is primarily via a web form with no explicit emails or phone numbers displayed. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

RKCA

rkca.com

47

RKCA is a specialized investment banking firm providing comprehensive advisory and financing services to companies at various stages, with a strong focus on the middle market. Established in 1986, the firm positions itself as a trusted advisor with proven strategies and diverse experience, supported by client testimonials and regulatory compliance as a registered broker-dealer and member of FINRA/SIPC. The website reflects a professional and consistent brand image targeting businesses seeking investment banking expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, incorporating modern web technologies and third-party analytics tools such as HubSpot. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and secure forms, but lacks some advanced security headers and explicit incident response information. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but GDPR compliance details could be enhanced. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the website content and trust signals mitigate this concern. Strategic recommendations include improving security headers, publishing vulnerability disclosure policies, and enhancing privacy transparency.

P

PROSOPO LIMITED (UK)

prosopo.io

63

Prosopo Limited is a UK-based technology company specializing in advanced CAPTCHA and bot protection solutions. Their flagship product, Procaptcha, offers a dynamic, proof-of-work CAPTCHA system designed to provide superior bot defense while maintaining user privacy and GDPR compliance. Positioned as a cost-effective alternative to Google reCAPTCHA and hCaptcha, Prosopo targets businesses and website owners seeking robust security with minimal user friction. The company emphasizes ease of integration, customizable difficulty levels, and a privacy-first approach with no centralized data storage or user tracking. Technically, the website is built using modern web technologies including Eleventy static site generation, JavaScript libraries like PrismJS and Font Awesome, and is hosted with Cloudflare DNS services. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Security measures include HTTPS enforcement and a Content Security Policy, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. From a security posture perspective, Prosopo shows strong adherence to best practices with encrypted communications and privacy compliance. However, the absence of a dedicated security policy or incident response page and lack of DNSSEC are areas for improvement. The company maintains a transparent pricing model and provides extensive documentation, customer testimonials, and trust signals enhancing business credibility. Overall, Prosopo presents a mature, professional, and trustworthy service in the cybersecurity space with a strong focus on privacy and user experience. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

C

Commonwealth Media Solutions

commonwealthmediasolutions.com

57

Commonwealth Media Solutions is a Virginia-based media solutions company with a long-standing history since 1954, specializing in tailored media campaigns, multi-channel strategies, and data-driven analytics. The company targets businesses, organizations, government agencies, and ad agencies seeking to expand their reach and visibility primarily within Virginia but with national capabilities. Their services include media research, strategy, placement, creative services, and performance analytics. The website is professionally designed using WordPress and modern plugins, hosted likely on Kinsta, and optimized for SEO and mobile use. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. The domain is newly registered in 2024, which contrasts with the company's claimed founding year, suggesting a recent domain acquisition or rebranding. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

N

New Hampshire Public Television

nhpbs.org

60

New Hampshire Public Television operates the official website for New Hampshire PBS, the state's only statewide locally owned and operated public television network. The organization provides a broad range of services including television broadcasting, online video streaming, educational resources, and community engagement events. The website reflects a mature media entity with a clear focus on serving the New Hampshire community and PBS viewers. The business model relies on donations, corporate sponsorships, and federal funding, positioning it as a key media and educational resource in the region. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, Google Analytics, Google Tag Manager, and Microsoft Clarity for analytics and user behavior tracking. The site is mobile optimized with good SEO practices and a professional design. However, some accessibility features are basic, and there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with HTTPS enforced and domain transfer protections in place. However, the absence of DNSSEC, lack of a Content Security Policy, and missing cookie consent mechanisms indicate areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity and domain age, supporting legitimacy. Overall, the website is a trustworthy, professional public broadcasting platform with moderate tracking and analytics usage. Strategic improvements in privacy compliance and security headers would enhance its security and regulatory posture, further strengthening user trust and compliance.

O

Oregon Arts Commission

oregonartscommission.org

68

The Oregon Arts Commission website serves as an official state government platform dedicated to supporting arts and culture within Oregon. It provides information about grant programs, advocacy efforts, and cultural development initiatives aimed at artists and arts organizations. The site is positioned as a government agency under Business Oregon, targeting a regional audience interested in arts funding and support. Technically, the website employs standard web technologies including Google Tag Manager for analytics and Font Awesome for iconography. The site is accessible, uses HTTPS, and demonstrates moderate performance and mobile optimization. However, there is room for improvement in security headers and privacy compliance documentation. From a security perspective, the site benefits from HTTPS encryption but lacks visible security headers and explicit privacy or cookie policies in the provided content. No vulnerabilities or suspicious elements were detected, and the domain's .gov status strongly supports its legitimacy. The absence of WHOIS data is likely due to privacy protections common for government domains. Overall, the website presents a trustworthy and professional front for the Oregon Arts Commission, though enhancements in privacy transparency and security best practices would further strengthen its posture. The risk level is low given the nature of the content and domain, but ongoing security hygiene is recommended.

P

PD Recruiting

pdrecruiting.com

50

PD Recruiting, operating under the brand Epic Recruiting, is a well-established police recruiting agency specializing in comprehensive law enforcement recruitment solutions. With over 20 years of experience, the company offers integrated services including recruitment strategy, video production, website development, and digital recruiting. Their market position as a leading national agency is supported by professional content, client testimonials, and a strong social media presence. Technically, the website is built on WordPress with Elementor and uses modern analytics and marketing tools, though performance is moderate and accessibility is basic. Security posture is good with HTTPS and domain protections, but lacks DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy but should improve privacy and security transparency to enhance compliance and user trust.

W

WEX Asia

wexasia.com

68

WEX Asia operates as a global leader in corporate payment solutions, providing services such as fuel cards, virtual payments, and travel payment solutions. The company targets corporate clients across multiple sectors including transportation, finance, and energy. The website reflects a mature business with a large employee base and a history dating back to 1983, although domain WHOIS data is missing which raises some questions about domain registration transparency. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Tag Manager. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and public security policies. The site includes privacy and cookie policies with consent mechanisms, indicating GDPR compliance. However, no incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data reduces domain trustworthiness, suggesting a need for further verification of domain legitimacy. Overall, the website is professional and trustworthy in content and design, but domain registration opacity and limited security policy disclosures present moderate risk factors. Strategic improvements in security transparency and domain verification are recommended.

P

Purr Design, LLC

purrdesign.com

54

Purr Design, LLC operates a website focused on creative design services, branding itself with the tagline 'Design Good Enough to Eat.' The company appears to be a small-sized entity founded around 2015, targeting a general audience interested in design. The website is built on WordPress, utilizing popular plugins such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The technical infrastructure is standard for small businesses, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is professional but would benefit from enhanced privacy compliance and clearer business contact details.

Y

Yomedia

yomedia.vn

44

Yomedia is a Vietnam-based integrated marketing agency specializing in programmatic advertising solutions, including DSP, SSP, and DMP technologies. The company positions itself as a leading digital marketing agency with a focus on brand safety and audience targeting, serving advertisers and publishers. The website reflects a professional digital presence with modern front-end technologies and marketing tools such as HubSpot and Heatmap tracking. However, the absence of privacy and cookie policies and lack of explicit security headers indicate compliance and security gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible and well-structured but would benefit from improved privacy compliance and security hardening.

N

Northeastern University

northeastern.edu

83

Northeastern University is a well-established global research and experiential learning institution founded in 1898, serving a broad academic audience including students and researchers. The website reflects a mature digital presence with modern technologies such as React and WordPress CMS, enhanced by SEO tools like Yoast SEO Premium and analytics via Google Analytics. The site is professionally designed, mobile-optimized, and accessible, providing a high-quality user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are absent in the provided content. WHOIS data for the subdomain 'www.northeastern.edu' was not found, which is likely due to querying a subdomain rather than the root domain, but this limits domain registration trust analysis. Overall, the site is credible and trustworthy, representing a major educational institution with strong branding and social media presence.

N

New Hampshire Press Association

pressnh.org

34

The New Hampshire Press Association operates as a non-profit organization dedicated to serving the media and journalism community within New Hampshire. The website provides news aggregation from multiple local news sources, membership information, journalism awards, and educational resources. It targets journalists, media professionals, and the general public interested in regional news and press activities. The business model centers on membership services and community engagement rather than commercial revenue streams. Technically, the website is built on WordPress 6.8.2, hosted on SiteGround, and uses common web technologies such as jQuery, Font Awesome, and Jetpack. The site is mobile-optimized with good navigation and content relevance. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC, security headers, and explicit privacy or cookie policies, which are important for compliance and security posture. No vulnerability disclosure or incident response information is provided, which limits transparency in security matters. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to privacy compliance and security best practices, which could be enhanced to improve user trust and regulatory adherence.

A

Arkansas Press Association

arkansaspress.org

48

The Arkansas Press Association is a well-established non-profit organization founded in 1998, serving the newspaper and media industry within Arkansas. The website provides information about membership benefits, marketing services, publications, public notices, and a foundation supporting the industry. The target audience primarily includes newspaper publishers and media professionals in Arkansas. The business model revolves around membership services, marketing, and fundraising activities. Technically, the website is built on WordPress with WooCommerce integration for e-commerce capabilities such as donations and a shop. It uses common web technologies including jQuery, Bootstrap, and Font Awesome. Hosting appears to be managed via Network Solutions. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps. Tracking is minimal, limited to WordPress.com stats. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust.

Global Trading Ltd operates as a specialized provider in international trade finance and commodity trading, offering services such as letters of credit, export and import finance, and risk mitigation solutions. Their market position is that of a niche B2B service provider catering to businesses engaged in global trade across multiple commodity sectors including energy, agriculture, metals, and chemicals. The website is well-structured with good content quality and consistent branding, targeting businesses seeking secure and efficient trade finance solutions. Technically, the website employs modern web technologies including jQuery, Font Awesome, Google Fonts, and Google Analytics, hosted under a reputable registrar. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. The absence of a CMS suggests a custom or static site architecture. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Tracking scripts are present, but privacy compliance is minimal. Overall, the website presents a moderate risk profile with no critical security issues detected but with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response information to enhance trust and compliance.

Devpost is a well-established technology platform founded in 2006 that serves as a central hub for hackathons, enabling developers to participate in public and private coding competitions. The platform supports both virtual and in-person events, providing tools for project showcasing and community engagement. Devpost holds a strong market position as a leading hackathon platform with a medium-sized business profile and a focus on developer ecosystems. Technically, the website employs a modern tech stack including JavaScript, Google Maps API, Font Awesome, and integrates advanced monitoring and analytics tools such as New Relic, Mixpanel, Microsoft Clarity, and Google Tag Manager. Hosting is via AWS Cloudfront CDN, ensuring fast performance and good mobile optimization. The site uses HTTPS with domain locking but lacks DNSSEC, which is a minor security enhancement opportunity. Security posture is solid with enforced HTTPS, domain status protections, and AWS WAF integration. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly found, indicating room for improvement in transparency and compliance. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service links on the homepage. Overall, Devpost presents a professional, trustworthy, and secure platform with good digital maturity. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing accessibility and compliance disclosures to further strengthen trust and regulatory adherence.

B

Bookshop Santa Cruz

bookshopsantacruz.com

72

Bookshop Santa Cruz is a well-established independent bookstore located in downtown Santa Cruz, California, operating since 1966. The business offers a wide range of new and used books, magazines, gifts, and toys, alongside a robust author event series that engages both local and national authors. The website reflects a medium-sized retail operation with a strong community presence and a focus on intellectual and cultural engagement. Technically, the site is built on Drupal 10 with Commerce 3, leveraging modern web technologies and analytics tools such as Google Analytics and Tag Manager. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the website is professional, trustworthy, and content-rich, serving a general audience interested in books and related cultural events.

W

Wax On bv

assistonline.eu

57

Assistonline.eu is a specialized SaaS platform developed by Wax On bv, targeting non-profit organizations such as vzw's, federations, and local governments in Belgium. The platform offers comprehensive online management tools for administration, bookkeeping, GDPR compliance, event management, and member management. The website is professionally designed with a clear focus on its niche market and demonstrates consistent branding and trust signals through partner logos and cookie consent mechanisms. Technically, the site employs modern frontend technologies including Bootstrap 5, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though formal security policies and incident response contacts are not publicly documented. Overall, the site presents a trustworthy and professional digital presence suitable for its target audience.

Raiola Networks SL is a Spanish technology company specializing in web hosting, domain registration, and VPS cloud services. The company offers a broad portfolio of hosting products including SSD hosting, reseller hosting, and specialized VPS servers, targeting individuals and businesses seeking reliable internet infrastructure solutions. Their market position is that of an established hosting provider with their own data center and a professional online presence. Technically, the website is built on a modern stack including WHMCS for client management, uses HTTPS, and integrates multiple tracking and marketing pixels. The site is mobile optimized and provides clear navigation, although some SEO and accessibility features could be improved. Security-wise, the website uses HTTPS and CSRF tokens but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to improve compliance and trust.

P

PageSuite

pagesuite.com

53

PageSuite is a technology company specializing in market-leading digital publishing solutions targeted at newspaper and magazine publishers worldwide. The website presents a professional and modern digital presence, leveraging WordPress CMS with a robust tech stack including Bootstrap, jQuery, and Google Analytics. The company positions itself as a leader in digital publishing, offering comprehensive services to media publishers. Technically, the website is well-structured, mobile-optimized, and SEO-friendly, though some accessibility features could be enhanced. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration transparency, impacting trust from a compliance perspective. Overall, the site is safe, professional, and business-focused, but would benefit from improved privacy disclosures and domain registration transparency.