Security Directory

I

IT-NUM

001.africa

52

001.africa is a cloud services and domain registration provider focused on the African market, particularly offering Africanized domain names and hosting solutions. The company positions itself as a leader with 10 years of experience, targeting developers, startups, SMEs, NGOs, and larger organizations across Africa. Their key offerings include domain registration, web hosting with Plesk and Cpanel, SSL certificates, VPS servers with geolocation, e-commerce solutions, and professional email services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in French. Technical infrastructure leverages modern frontend technologies such as Vue.js and Bootstrap, with integrations for analytics and live chat support. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and published security policies. Privacy compliance is basic with cookie consent and privacy policies present but no explicit GDPR statements. Overall, the domain registration data aligns well with the business focus and geographic targeting, supporting legitimacy. The website is accessible without WAF or blocking mechanisms, and no suspicious content or vulnerabilities were detected.

M

Mapstodon.Space

mapstodon.space

65

Mapstodon.Space is a niche Mastodon instance dedicated to the cartography and geospatial community, providing a federated social networking platform based on Mastodon version 4.4.1. The platform targets enthusiasts and professionals interested in mapping and geospatial topics, fostering community engagement through user-generated content. The website is hosted in France and operated by an identified administrator, reflecting a small but active user base. Technically, the site leverages modern web technologies including React and Rails, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site demonstrates a consistent brand and trustworthy domain registration, but could improve in security and compliance transparency.

S

Shiftmove

shiftmove.com

62

Shiftmove is a business-focused platform providing integrated fleet and mobility management solutions designed to simplify vehicle and driver management while ensuring legal compliance and operational efficiency. The company positions itself as a key player in the transportation technology sector, targeting fleet operators and businesses requiring digital logbooks, GPS tracking, and connected fleet services. The website demonstrates a modern technical infrastructure built on Webflow with advanced analytics and consent management tools, reflecting a mature digital presence. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are absent, indicating room for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, but the professional content and partner ecosystem suggest a credible business. Overall, the site is well-designed and user-friendly, supporting business credibility but would benefit from enhanced transparency and security disclosures.

V

Vimcar

vimcar.com

60

Vimcar is a German-based company specializing in digital vehicle management solutions, including digital logbooks, GPS tracking, and fleet management software. The company targets self-employed individuals, fleet managers, and tax consultants, offering automated and tax-compliant vehicle documentation services. Vimcar holds reputable certifications such as TÜV and KPMG and is recommended by DATEV and DStV, positioning itself as a trusted player in the transportation software market. The website is professionally designed, mobile-optimized, and uses modern technologies like Webflow CMS, Google Tag Manager, and Usercentrics for consent management. Security posture is solid with HTTPS and data redaction enabled, though some security headers and explicit policies are missing. Overall, Vimcar demonstrates a mature digital presence with good privacy compliance and business credibility.

O

ODI Global

odi.org

70

ODI Global is a well-established independent global affairs think tank based in the United Kingdom, founded in 2001. The organization focuses on inspiring action on injustice and inequality through research, policy advice, events, and publications. It holds a strong market position within the international development and humanitarian sectors, targeting policymakers, researchers, and global development professionals. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern technologies including Google Tag Manager, Hotjar, and Cloudflare DNS/CDN services, ensuring fast performance and mobile optimization. Security best practices are observed with HTTPS enforcement and multiple security headers, although DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. The security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the absence of a public security policy, incident response page, or vulnerability disclosure reduces transparency in security incident handling. Overall, the domain registration details align well with the organization's identity, supporting high legitimacy and trustworthiness. The website is safe for general audiences, containing no adult or questionable content. Social media presence across multiple platforms and a podcast series indicate active engagement and outreach. Contact information is primarily via contact forms rather than direct emails or phone numbers visible in the HTML content.

S

SolarAid

solar-aid.org

65

SolarAid is a well-established UK-based international charity founded in 2006, focused on combating poverty and climate change through the distribution of solar lights and supporting local solar enterprises in sub-Saharan Africa. The organization operates a social enterprise model, SunnyMoney, and targets donors, supporters, and communities in Africa. The website reflects a professional and consistent brand with excellent content quality and clear navigation, emphasizing impact and sustainability. Technically, the website is built on WordPress with modern integrations including Gravity Forms, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user engagement. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS, uses domain locking statuses, and implements CAPTCHA on forms. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Privacy compliance is strong with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. No vulnerabilities or exposed sensitive data were detected. Overall, SolarAid's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements include enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

B

Belmont Forum

belmontforum.org

53

Belmont Forum is an international research collaboration organization focused on providing knowledge to understand, mitigate, and adapt to global environmental change. The website serves as a platform for knowledge sharing and coordinating research funding opportunities. The organization appears to be well-established since 2010 and targets researchers, policymakers, and environmental stakeholders. Technically, the website is built on WordPress using Elementor and Astra theme, hosted with professional infrastructure including AWS DNS and Amazon Registrar. Security posture is moderate with HTTPS enabled and reCAPTCHA v3 implemented, but lacks DNSSEC and visible security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security practices.

F

Future Earth

futureearth.org

56

Future Earth is a global non-profit network dedicated to sustainability research, innovation, and collaboration. The organization operates a professionally designed WordPress website that serves as a hub for news, initiatives, publications, and networking opportunities targeting scientists, researchers, and sustainability professionals worldwide. The site demonstrates a mature digital presence with active social media integration and a cookie consent mechanism reflecting privacy awareness. Technically, the website uses modern web technologies including WPBakery Page Builder and Owl Carousel, hosted on GoDaddy infrastructure, and employs HTTPS for secure communications. However, there is room for improvement in security headers and explicit security policies. The absence of direct contact information and privacy policy links in the provided HTML limits transparency but is somewhat mitigated by the organization's established domain age and reputable presence. Overall, the website is trustworthy, well-maintained, and aligned with its mission, though enhancing security and compliance documentation would strengthen its posture.

J

Jim Warren Studios

jimwarren.com

44

Jim Warren Studios is a professional website representing Grammy Award-winning fine artist and official Disney illustrator Jim Warren. The site serves as a portfolio and e-commerce platform for art sales, targeting art collectors and fans worldwide. The business is positioned as a world-renowned artist with a strong brand presence in the fine art and illustration market. Technically, the website is built on WordPress with WooCommerce and optimized using NitroPack, indicating a modern and performance-conscious infrastructure. The site is mobile-optimized and uses standard web fonts and iconography for a professional user experience. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

T

Team Liquid

teamliquid.com

70

Team Liquid is a leading esports organization established in 2004, recognized as one of the strongest and most successful brands in competitive gaming. The website serves as a comprehensive hub for esports teams, community engagement, and content related to competitive gaming. The organization targets esports fans and gamers globally, offering team rosters, schedules, news, and merchandise. Technically, the site is built on Webflow, leveraging modern web technologies and third-party analytics and marketing pixels with user consent, ensuring a fast, mobile-optimized, and accessible experience. Security posture is strong with HTTPS, security headers, and domain registration best practices, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable and authoritative esports brand online.

M

MagicSpace Entertainment

live-at-the-eccles.com

59

Live at the Eccles is a professional entertainment venue website operated by MagicSpace Entertainment, focusing on live events such as concerts, comedy shows, and family-friendly performances primarily at the Eccles Theater in Salt Lake City, Utah. The platform offers ticketing services, event information, and community engagement through newsletters and social media. The website is well-branded and targets a general audience interested in cultural and live entertainment events. Technically, the site is built on OctoberCMS with modern front-end technologies including HTML5, CSS3, JavaScript, and popular libraries like Slick Slider. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and AdRoll, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare protections, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is basic with a privacy policy present but no dedicated cookie policy page. The site collects user data via newsletter signup forms and tracking pixels, with moderate to extensive user tracking. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy transparency. Strategic improvements in cookie consent, DNS security, and published security policies would enhance trust and compliance.

K

Kidrive

kidrive.fr

46

Kidrive is a French website offering a free platform for managing sports clubs and associations, focusing on collective sports such as basketball, volleyball, football, and handball. It targets club leaders, team managers, coaches, players, and parents, providing tools for member administration, legal guardians management, match scheduling, messaging, and collective task organization. The business operates as a small entity founded in 2017, with a niche market position in amateur sports club management in France. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4, Google Analytics, and Font Awesome, hosted by Scaleway. The site is mobile-optimized with good SEO practices but has moderate performance. Security-wise, HTTPS is enforced, and login forms use POST methods; however, the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. The security posture is moderate with no critical vulnerabilities detected but lacks advanced protections such as CSP and anti-CSRF tokens. Privacy compliance is weak due to missing policies and consent mechanisms. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the site is professional and trustworthy but should enhance privacy and security practices. Recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, improving form security, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.

A

Alphonsio

alphons.io

42

Alphonsio is an AI-based smart chatbot service designed to answer millions of questions using advanced artificial intelligence models. The website presents a clean, focused interface primarily for interacting with the chatbot, targeting a general audience interested in AI-driven question answering. The business model appears to be centered around providing AI chatbot services, though detailed business information and market positioning are not disclosed on the site. Technically, the website uses modern JavaScript and integrates Google Tag Manager for analytics. The site is served over HTTPS, ensuring secure communication. The design is responsive and mobile-friendly with good SEO meta tags. However, accessibility features are basic, and no CMS or hosting provider details are evident. Performance is moderate based on the content and scripts loaded. From a security perspective, the site benefits from HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or terms of service, which are critical for compliance and user trust. No contact information or incident response details are provided, limiting transparency and support options. Overall, the site is functional and professional in appearance but lacks comprehensive privacy, security, and business credibility disclosures. This presents moderate risk from a compliance and trust perspective. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance user trust and regulatory compliance.

I

Cabinet infirmier de Faye d'Anjou | Bellevigne-en-Layon

infirmiers.site

46

The website represents a small local healthcare provider specializing in nursing services in Faye d'Anjou, France. It offers a range of nursing care including injections, dressings, blood tests, sutures, and hygiene care both at home and at the cabinet. The business is conventioned with French health insurance entities and accepts third-party payment, targeting residents in Bellevigne-en-Layon and surrounding communes. The website is professionally designed with responsive layout and clear navigation, though it lacks privacy and cookie policies which are important for compliance. Technically, it uses modern frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate but can be improved by enabling DNSSEC, adding security headers, and enforcing HTTPS. Contact information is clearly presented, but no email or social media presence is visible. Overall, the site is functional and trustworthy for its local healthcare niche but requires enhancements in privacy and security compliance.

Lulu's blog is a personal technical blog authored by Philippe Lucidarme, focusing on robotics, computer science, Arduino, Linux, sensors, actuators, and web development. The site serves a niche audience of technology enthusiasts, students, and hobbyists seeking educational content and practical tutorials. The business model is primarily content publishing supported by donations via PayPal and Tipeee. The website is hosted by Scaleway SAS and uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Hotjar for analytics and user behavior tracking. Consent management for GDPR is implemented via InMobi's CMP, although explicit privacy and cookie policies are not published. Security posture is good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Overall, the site is trustworthy, professionally maintained, and provides high-quality content with moderate tracking and advertising.

L

Little Bride Book Ltd.

littlebridebookltd.com

63

Little Bride Book Ltd. operates a niche online wedding planning and lifestyle resource focused on Trinidad and Tobago. The website offers free vendor listings and event planning resources targeting DIY brides, wedding planners, and destination wedding seekers. The company is small, founded in 2019, and maintains an active social media presence. Technically, the website is built on Squarespace with modern fonts and tracking technologies such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and HSTS headers. Privacy compliance is limited due to absence of privacy and terms of service pages, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security best practices.

A

AnsWiki

ans.wiki

59

AnsWiki is a small-scale question and answer wiki platform that enables users to ask questions and contribute answers. The website targets a general audience interested in knowledge sharing and community-driven content. The business model revolves around user-generated content with monetization likely through advertising networks such as InMobi and TheMoneytizer. The site maintains a niche position in the Q&A wiki space with basic content quality and consistent branding. Technically, the website employs modern frontend technologies including Bootstrap 5.1.3 for responsive design, Google Analytics and Tag Manager for analytics, and InMobi for consent management and advertising. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. The absence of a CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site enforces HTTPS and includes GDPR consent mechanisms, which are positive indicators. However, the lack of security headers, privacy policy, terms of service, and vulnerability disclosure mechanisms represent gaps in security posture and compliance. The missing WHOIS data reduces transparency and trustworthiness, though no direct vulnerabilities or malicious indicators were found in the content or scripts. Overall, AnsWiki presents a functional and moderately secure platform with room for improvement in privacy compliance, security best practices, and business transparency. The domain's privacy-protected WHOIS status and lack of registrant data warrant cautious trust but do not indicate immediate risk. Strategic enhancements in security headers, legal disclosures, and contact information would strengthen the site's credibility and compliance standing.

A

Astorg Partners

astorg.com

65

Astorg Partners is a well-established private equity firm specializing in investments across technology, healthcare, business services, and industrial sectors. The firm emphasizes a unique approach centered on listening and alignment with management teams to unlock value. With €23 billion in assets under management and over 26 years of investment experience, Astorg holds a strong market position in Europe and the US. The website reflects a professional and trustworthy image, providing detailed information about investments, team, and sustainability efforts. Technically, the site employs modern JavaScript libraries, multimedia content, and analytics tools, hosted on a performant CDN infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent mechanisms and clear policies. Overall, the site demonstrates high professionalism and business credibility, though the lack of WHOIS data slightly impacts trust assessment.

V

ville-fr.ch | 526: Invalid SSL certificate

ville-fr.ch

48

The website ville-fr.ch is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by the Cloudflare Error 526 page. This prevents any meaningful content or business information from being accessed or analyzed. The site appears to be protected by Cloudflare, which is correctly functioning, but the origin server's SSL misconfiguration results in a complete block of the website content. No privacy, cookie, or terms of service policies are present, and no contact or business details are available on the error page. This severely limits the ability to assess the business or security posture beyond the SSL issue. From a technical perspective, the site relies on Cloudflare as a CDN and security provider, but the lack of a valid SSL certificate on the origin server is a critical vulnerability that must be addressed immediately. No additional technologies, scripts, or tracking mechanisms are detected due to the blocked content. The absence of security headers and policies further indicates a low maturity level in security and compliance. Overall, the security posture is poor due to the SSL failure, and the business credibility is low given the lack of accessible information. The domain appears to use privacy protection for WHOIS data, which is common but reduces transparency. Without resolving the SSL issue and providing accessible content, the site cannot be properly evaluated or trusted. Strategic recommendations include promptly installing a valid SSL certificate on the origin server, implementing standard security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

The website www.privacy-regulation.eu is a specialized platform providing a readable and annotated version of the EU General Data Protection Regulation (GDPR) text. It targets businesses and individuals seeking to understand and implement GDPR compliance, offering tools such as cross-references, corrections, and a dossier functionality under the PrivazyPlan® brand. The business operates as a small entity based in Germany, with clear contact information and a focused niche in GDPR compliance support. Technically, the site is built on simple HTML and CSS without modern JavaScript frameworks or CMS detected. The performance and mobile optimization are basic but functional. SEO is adequately addressed through meta tags and multilingual support. However, there is no evidence of advanced security headers or HTTPS status from the provided data, indicating room for improvement in technical security measures. From a security perspective, the site lacks visible security headers, cookie consent mechanisms, and incident response information. The WHOIS data is privacy protected, which is reasonable given the business focus, but limits transparency. No vulnerabilities or tracking technologies were detected, and the content is safe for general audiences. Overall, the site demonstrates moderate security posture but would benefit from enhanced HTTPS implementation and privacy compliance features. The overall risk assessment is moderate with a legitimacy score of 75. Strategic recommendations include implementing HTTPS, adding security headers, publishing a cookie consent banner, and providing incident response contacts to improve trust and compliance.

T

Telesoft Project

telesoft.bg

50

Telesoft Project is a Bulgaria-based software development company specializing in bespoke software and web applications tailored to client needs globally. Their offerings include custom software development, business software integration, software testing, quality assurance, and web design services. The company targets businesses requiring tailored IT solutions and positions itself as a niche regional provider with international reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good design and navigation but lacks advanced accessibility features. Security posture is moderate; while no critical vulnerabilities are evident, the absence of HTTPS confirmation and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the business location, though WHOIS data is limited by GDPR privacy restrictions. Strategic recommendations include enhancing security headers, implementing HTTPS, publishing privacy policies, and improving accessibility to strengthen trust and compliance.

The website at accessplanit.com is currently inaccessible, returning a standard HTTP 404 Not Found error page with no content, metadata, or business information available. This prevents any meaningful analysis of the company's online presence, services, or compliance posture. The domain is registered with IONOS SE since 2003, indicating a mature domain age, but the lack of website content significantly reduces trust and credibility. From a technical perspective, no technologies, scripts, or security headers are detectable due to the absence of content. There is no evidence of HTTPS usage or security best practices implemented on the site. The lack of privacy, cookie, or terms of service policies indicates non-compliance with common data protection regulations such as GDPR. Security posture is weak due to the absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is available. The domain registration is consistent and legitimate, but the website's non-operational status is a critical issue. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include restoring website content with proper HTTPS configuration, implementing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

I

Input Objects GmbH

inputobjects.eu

57

Input Objects GmbH is a small technology company based in Berlin, Germany, specializing in SaaS product development and bespoke software consulting services. Their website presents a professional image with clear branding and a focus on delivering innovative software solutions to business clients. The company emphasizes long-term partnerships and continuous improvement in their offerings. Technically, the website is built using modern frameworks such as Nuxt.js and PrimeVue, with Tailwind CSS for styling, resulting in a fast and mobile-optimized user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is partially addressed via an external privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its target audience of businesses seeking software development expertise.

Organic Formula Shop is a small e-commerce business specializing in selling organic European baby formulas to customers primarily in the United States. The website is built on the Shopify platform, leveraging a modern tech stack including jQuery, Fancybox, Slick Carousel, and various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Bing UET, Klaviyo, and Okendo Reviews. The site offers free express shipping and dedicated customer support, positioning itself as a reliable source for organic baby formula products. The content is professionally presented with clear navigation and product categorization, targeting parents and caregivers seeking organic baby nutrition products. However, the site lacks visible privacy, cookie, and terms of service policies, which impacts its privacy compliance score.

SciSpace by Typeset is an AI-powered academic research platform established in 2006, offering a comprehensive suite of tools including literature review, PDF chat, AI writing assistance, citation generation, and data extraction. It serves over one million researchers globally and is positioned as a leading solution in the education technology sector. The platform is hosted on Amazon AWS and built using modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The website demonstrates strong branding consistency and trust indicators, including partnerships with prestigious universities and positive user testimonials. However, the site lacks published privacy and cookie policies, as well as formal security and incident response documentation, which are critical for compliance and user trust. The domain registration data is consistent and indicates a legitimate and mature business presence.

L

Life Changing Energy

lifechangingenergy.com

71

Life Changing Energy operates as a niche e-commerce retailer specializing in holistic health and metaphysical products such as crystal healing tools, sound therapy instruments, and chakra balancing accessories. The company also offers educational courses and books, targeting individuals interested in energy healing and wellness. The website is built on the Shopify platform, leveraging a variety of modern marketing and analytics tools to support its digital presence. The business appears to be a small-sized entity with a focused market position in the wellness and metaphysical retail sector. Technically, the website demonstrates a moderate level of digital maturity with a solid tech stack including Shopify, jQuery, and various third-party integrations for marketing, analytics, and customer engagement. Performance and mobile optimization are adequate, though accessibility features could be enhanced. The site uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. However, there is no explicit security policy or incident response information available, which could be improved to enhance trust. From a security and compliance perspective, the site maintains privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the overall website content and security practices suggest a legitimate business. No critical vulnerabilities or exposed sensitive data were detected. The site employs multiple tracking and advertising pixels, reflecting a moderate level of user tracking consistent with e-commerce operations. Overall, Life Changing Energy presents as a professional and trustworthy online retailer within its niche, with room for improvement in transparency around security policies and domain registration details. Strategic enhancements in accessibility and incident response readiness would further strengthen its security posture and customer trust.

B

Bounce, Inc.

bounce.com

65

Bounce, Inc. operates a global luggage storage platform connecting travelers with local businesses offering secure storage spaces. With over 23,000 locations worldwide and a highly rated service, Bounce positions itself as a leading player in the travel convenience sector. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing its accessibility and user experience. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and scalability. Security practices include HTTPS enforcement and secure payment processing, though some security headers could be more explicitly implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Bounce demonstrates a mature digital presence with strong business credibility and customer trust.

P

ProxyEmpire

proxyempire.io

73

ProxyEmpire is a technology company specializing in providing residential, mobile, and datacenter proxy services aimed at businesses and developers engaged in web scraping and data gathering. Founded in 2022, the company offers access to a large pool of IPs across over 170 countries, positioning itself as an affordable and reliable proxy provider in the market. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Rank Math plugin. The technical infrastructure includes modern JavaScript libraries, live chat support, and analytics integration, hosted likely on DigitalOcean with Cloudflare DNS management. Security posture is solid with HTTPS enforced and standard security headers, although DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism powered by Cookiebot. Overall, the website demonstrates a good level of professionalism, technical maturity, and trustworthiness suitable for its business domain.

H

hidemy.name

hdmn.org

62

hidemy.name is a VPN service provider offering secure, anonymous, and unrestricted internet access across multiple platforms including Windows, Android, macOS, iOS, Linux, and routers. The company emphasizes privacy protection, encryption, and user anonymity with a 30-day money-back guarantee and a free trial period. Their market position is supported by nearly two decades of experience and a broad global server network. Technically, the website employs modern JavaScript libraries and integrates Google Tag Manager for analytics, hosted with Cloudflare DNS but lacks DNSSEC. Security posture is generally good with HTTPS and clientTransferProhibited domain status, though improvements are needed in DNS security and HTTP headers. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-structured, targeting general users seeking VPN services.

F

Flock Social

flocksocial.com

67

Flock Social is a technology company specializing in organic Instagram growth services, targeting brands, agencies, and influencers seeking authentic follower engagement. The company operates a subscription-based model and has established a credible market presence since its domain registration in 2017. The website is built on WordPress using Elementor, with good SEO and user experience design. Security posture is solid with HTTPS and clientTransferProhibited domain status, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a professional and trustworthy front with moderate technical sophistication and marketing integration.

S

saas.group Inc.

scraperapi.com

67

ScraperAPI is a specialized technology company providing a scalable web scraping API service designed for developers and enterprises. Their platform automates complex tasks such as proxy rotation, CAPTCHA solving, and JavaScript rendering, enabling clients to collect structured data efficiently from public websites. Positioned as a leading provider in the web scraping space, ScraperAPI targets businesses requiring reliable data extraction at scale. The website reflects a mature digital presence with professional design, comprehensive service descriptions, and integration of advanced marketing and analytics tools. Security posture is solid with HTTPS and consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in privacy and security transparency.

S

SocialGrowth LLC FZ

nitreo.com

60

Nitreo is a technology-driven Instagram growth service operated by SocialGrowth LLC FZ, based in Dubai, UAE. The company offers subscription-based plans to help Instagram users, including creators, businesses, and agencies, grow their followers organically through automated engagement such as follows, likes, and story views. The website is professionally designed with clear navigation, multiple calls to action, and strong trust signals including customer testimonials and industry awards. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, hosted with DNS managed by Cloudflare and domain registered via NameCheap. Security posture is good with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not enabled and some security headers are not explicitly visible. Privacy compliance is partial, with a clear privacy policy but no visible cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and targets a broad audience interested in Instagram growth services.

P

Proxy-Seller

proxy-seller.com

70

Proxy-Seller is an online proxy service provider specializing in residential, ISP, datacenter IPv4/6, and rotating 4G/5G proxies. The company targets individuals and businesses requiring private and fast proxy servers, offering SOCKS5 and HTTP(s) protocols. Their market position is that of a competitive and established proxy provider with a clear focus on proxy-related services. Technically, the website is built on Bitrix CMS with Bootstrap framework, integrating Cookiebot for consent management and Google Tag Manager for analytics. The site demonstrates moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and comprehensive security headers. No critical vulnerabilities were detected in the visible content. Overall, the website is professional and trustworthy, though it could improve transparency by publishing security and incident response policies.

M

Media Mister

mediamister.com

67

Media Mister is a well-established social media marketing service provider operating since 2012, offering a broad range of engagement products such as followers, likes, views, and comments across major social platforms including Instagram, TikTok, YouTube, Facebook, and Spotify. The company targets social media users and marketers seeking to enhance their online presence and social proof through authentic and manual engagement services. Their market position is strong, supported by over 280,000 satisfied customers worldwide and a presence in nearly 200 countries. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Klaviyo, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and secure payment processing via Stripe and CoinPayments, although explicit security headers and policies are not publicly detailed. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

K

Kicksta

kicksta.co

65

Kicksta is a US-based technology company specializing in organic Instagram follower growth services powered by AI and machine learning. The company offers subscription-based plans targeting influencers, digital marketing agencies, and brands seeking to grow their Instagram presence authentically. Positioned as a leading service in the Instagram marketing space, Kicksta emphasizes real followers, targeted growth pods, and engagement analytics to deliver measurable results. The website is professionally designed with rich multimedia content, testimonials, and clear pricing models, reflecting a mature digital presence. Technically, the website employs modern front-end technologies including Tailwind CSS, Alpine.js, and Swiper.js, alongside integrations with Google Tag Manager and Calendly for analytics and scheduling. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security best practices are observed with HTTPS enforcement and security headers, though privacy and cookie policies are notably absent, representing a compliance gap. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the lack of explicit privacy and cookie policies, terms of service, and incident response contacts reduces privacy compliance scores. WHOIS data confirms domain legitimacy with consistent registration details and domain age matching the company's founding year. Overall, Kicksta presents a trustworthy and professional online presence with room for improvement in privacy compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, establishing terms of service and security policies, implementing a vulnerability disclosure program, and enhancing incident response contact visibility to strengthen trust and compliance.

V

Vidnoz

vidnoz.com

68

Vidnoz operates as a leading AI-powered video creation platform offering a comprehensive suite of tools including AI avatars, voice cloning, video templates, and translation services. The platform targets content creators, businesses, educators, and marketers seeking to produce professional-quality videos efficiently and cost-effectively. Vidnoz positions itself strongly in the AI video generation market with a free-to-use model complemented by scalable business plans. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and various AI-related JavaScript libraries. The site is well-optimized for mobile devices, features clear navigation, and integrates multiple language versions to serve a global audience. The use of HTTPS and claims of ISO 27001 certification indicate a mature security posture. Security-wise, Vidnoz demonstrates strong commitment to data protection through adherence to ISO/IEC 27001:2022 standards, multi-layered server security, and single sign-on capabilities. However, explicit security headers are not visibly declared, and no public incident response or vulnerability disclosure policies were found, suggesting areas for improvement. Overall, the website is professional, trustworthy, and content-rich, though the absence of WHOIS domain registration data introduces some transparency concerns. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and improving domain registration visibility to bolster trust.

G

Geonix

proxy-sale.com

68

Geonix is a proxy service provider offering a variety of proxy types including private datacenter IPv4, IPv6, residential, mobile, and ISP proxies. The company targets businesses and individuals requiring proxy services globally, boasting IP pools across 200+ countries and 24/7 support. The website is professionally designed, mobile-optimized, and uses modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is managed via Cloudflare DNS, enhancing performance and security. The domain is well-established, created in 1999, indicating a mature business presence. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear cookie and privacy policies and GDPR adherence. However, the absence of explicit contact information and terms of service pages slightly reduces business credibility. Overall, the site is functional, secure, and compliant, suitable for its target audience.

Creative Fabrica B.V. operates a leading e-commerce platform specializing in crafting resources including fonts, graphics, embroidery designs, and digital crafting tools. The company targets hobbyists, designers, and small businesses with a subscription-based model offering access to a vast library of premium digital assets. Their market position is strong within the crafting niche, supported by a professional and content-rich website. Technically, the site leverages modern frameworks such as Next.js and React, with CDN hosting via Amazon Cloudfront ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure form handling, although explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of content blocking or security challenges.

M

Mohammad Younes

alertifyjs.com

54

AlertifyJS is an open source JavaScript framework designed to provide developers with customizable and visually appealing browser dialogs and notifications. Founded in 2014 by Mohammad Younes, the project targets web developers seeking an extensible and themeable dialog solution. The website serves as the primary distribution and documentation portal, featuring examples, tutorials, and GitHub integration. The business model is based on open source licensing under GPLv3, with no direct commercial offerings evident on the site. Technically, the website leverages a modern JavaScript stack including jQuery, Semantic UI, Font Awesome, and Google Fonts, with DocPad as the CMS. The site is moderately optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. External dependencies include Google Analytics for tracking and Carbon Ads for monetization. Hosting is inferred to be via NameCheap based on WHOIS data. From a security perspective, the site uses HTTPS (implied by external resource URLs), but lacks explicit security headers and DNSSEC is not enabled, representing moderate security posture. No forms or sensitive data collection mechanisms are present, reducing attack surface. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact and incident response information are not provided, limiting transparency. Overall, the website is a well-maintained open source project site with good content quality and technical implementation but has room for improvement in security hardening and privacy compliance. The domain registration is consistent and transparent, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response channels to enhance trust and compliance.

S

Stein

steinias.com

64

Stein is a specialized B2B brand-to-demand experience agency focused on helping businesses build strong, demanded B2B brands. The company positions itself as a leading full-service advertising agency in the B2B sector, targeting businesses seeking comprehensive brand and demand generation solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrating marketing and analytics tools like Hubspot, Hotjar, and Cookiebot for consent management and user tracking. Security posture is solid with HTTPS enabled and domain lock status flags, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. However, contact information and terms of service pages are not clearly found, which could impact user trust and compliance completeness. Overall, the website is well designed, user-friendly, and trustworthy for its target B2B audience.

N

Netza&CO

netzaeco.com.br

57

Netza&CO is a Brazilian marketing company specializing in integrated marketing solutions, positioning itself as a reference in the marketing sector. The website presents a professional design with clear branding and content focused on marketing services. The technical infrastructure is built on modern web technologies including Readymag platform, Google Tag Manager for analytics, and uses popular web fonts to enhance user experience. Mobile optimization is good, and the site loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

N

Nedbank Ltd

nedbank.co.za

73

Nedbank Ltd operates a comprehensive personal banking website offering a wide range of financial products and services including loans, credit cards, accounts, investments, and insurance. The site targets personal banking customers primarily in South Africa and positions itself as a trusted financial partner with competitive offerings and clear guidance. The website is professionally designed with consistent branding and clear navigation, reflecting the enterprise scale and market position of Nedbank as a major South African financial institution. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Adobe Launch, Google Tag Manager, TikTok Pixel, and Facebook Pixel. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers are not explicitly detected in the provided data. Privacy and cookie policies are present with consent mechanisms, and incident reporting contacts are clearly provided, demonstrating good compliance and transparency. WHOIS data is unavailable, which is common for .za domains but reduces domain registration transparency. Overall, the website is trustworthy and professionally maintained, supporting Nedbank's brand reputation.

M

Mead Johnson Nutrition Company

meadjohnson.com

60

Mead Johnson Nutrition Company operates as a healthcare-focused business specializing in pediatric nutrition products. The company is a subsidiary of Reckitt Benckiser Group plc since 2017, positioning it strongly within the consumer health market. The website serves as a corporate portal providing brand information, supplier resources, and links to related brands such as Enfamil. The target audience includes healthcare professionals, parents, and suppliers. The business model centers on manufacturing and distributing specialized nutrition products with a large enterprise scale and a history dating back to 1996. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, AddThis social sharing, and Google Maps API. The CMS appears to be Drupal, inferred from URL and theme structure. The site demonstrates moderate performance and good mobile optimization but has basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard analytics and marketing scripts. However, no explicit security policy or incident response contacts are publicly available. Security headers are not explicitly detected in the provided data, and there is room for improvement in security best practices such as adding CSP and X-Frame-Options headers. No vulnerabilities or exposed sensitive data were observed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR, supported by a comprehensive privacy policy and cookie consent mechanism. The domain WHOIS data aligns well with the business claims, confirming legitimacy. No adult or questionable content is present, making the site safe for general audiences. The AI score reflects a strong overall quality with minor areas for improvement in security transparency and accessibility.

G

GreenBook

greenbook.org

64

GreenBook is a comprehensive online platform dedicated to market research, insights, and analytics. It serves as a resource hub offering a directory of over 1000 verified companies, thousands of articles, reports, podcasts, webinars, and global events. The platform targets market research professionals and organizations seeking trusted partners and industry knowledge. Technically, the website is built using modern frameworks such as Next.js and React, hosted likely on Vercel, and integrates multiple analytics and marketing tools including Google Analytics, Amplitude, Microsoft Clarity, and LinkedIn Insight Tag. The site is well-optimized for performance and mobile devices, providing an excellent user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA v3 for bot protection, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to query failure or privacy protection, slightly reducing trust but not undermining the site's legitimacy given its professional content and market presence. Overall, GreenBook is a high-quality, trustworthy platform with strong business credibility but could enhance privacy compliance and security transparency.

É

Éditions Françaises de Guides

facilities.fr

65

Facilities.fr is a specialized French website dedicated to facility management, targeting professionals responsible for general services and non-production procurement. The site offers a comprehensive directory of service providers, practical information, market trends, and a printed guide, positioning itself as a niche leader in the facility management information sector in France. The business model revolves around content provision, advertising, and subscription services such as newsletters and guides. Technically, the site is built on WordPress with modern libraries like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and vulnerability disclosure practices could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a medium-sized business audience effectively.

D

Décideurs Magazine - Accédez à toute l’actualité de la vie des affaires : politique, stratégie, finance, RH, innovation - DECIDEURS MAGAZINE - Accédez à toute l’actualité de la vie des affaires : stratégie, finance, RH, innovation

decideurs-magazine.com

60

Décideurs Magazine is a French business media publication providing comprehensive news and analysis across multiple sectors including politics, strategy, finance, human resources, and innovation. The website serves a professional French-speaking audience with a broad range of content including articles, rankings, events, and e-commerce for magazine sales. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, and integrates multiple analytics and advertising platforms such as Matomo, Google Tag Manager, Quantcast, and Smart AdServer. Security posture is moderate with HTTPS enforced and CSRF protections in forms, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the site content and branding indicate a legitimate media entity. Overall, the site is professional and content-rich but would benefit from improved transparency and security practices.

E

EcoRéseau Business

ecoreseau.fr

42

ÉcoRéseau Business is a French media company focused on delivering news and analysis related to entrepreneurship, innovation, and environmental topics. The website positions itself as a niche media outlet serving entrepreneurs and innovators with relevant digital and societal updates. The business model revolves around content publishing and possibly membership services, as indicated by the use of MemberPress plugin. The company appears to be relatively new, founded around 2022, and targets a specialized audience in France. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, various marketing and event plugins, and integration with Google Tag Manager and Brevo for marketing automation. The site is mobile optimized and has good SEO practices implemented via Yoast SEO. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected in the content. However, the absence of security headers and lack of published privacy or cookie policies indicate areas for improvement. The WHOIS data is missing or unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional and safe for general audiences but would benefit from enhanced privacy compliance and clearer contact information.

L

Le nouvel Econnomiste

lenouveleconomiste.fr

49

Le nouvel Economiste is a French media company specializing in economic, political, and management news and analysis. It operates a professional news website offering subscription-based digital and print content, podcasts, and advertising services. The site targets professionals, business leaders, and policy makers interested in in-depth economic and political coverage. The company maintains a consistent brand presence with active social media channels and partner services such as legal formalities and event listings. Technically, the website is built on WordPress with modern technologies including jQuery, Yoast SEO, and push notification services. It demonstrates good SEO, mobile optimization, and accessibility standards. Security posture is solid with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. WHOIS data is not publicly available due to AFNIC policies, but the domain is active and professionally maintained, indicating legitimacy.

D

Test de sécurité / Security check...

digitalcmo.fr

30

The website digitalcmo.fr is currently inaccessible due to a Web Application Firewall (WAF) security challenge page served by Tiger Protect WAF on the o2switch hosting platform. This challenge page blocks access to the actual website content, preventing any meaningful analysis of the business, services, or compliance information. The domain is registered with GANDI since 2011, indicating a mature and legitimate domain age consistent with a stable business presence. However, no business or contact information, privacy policies, or terms of service are accessible on the page. The technical infrastructure includes common JavaScript libraries such as jQuery and CryptoJS, but no CMS or marketing technologies are detectable due to the blocked content. Security posture cannot be fully assessed, but the presence of a WAF indicates some level of security protection. Overall, the site’s content quality, privacy compliance, and business credibility cannot be evaluated beyond the WAF challenge.