Security Directory

Swiftask is a technology company providing a unified AI workspace platform designed to empower modern businesses with over 80 AI models and tools accessible via a single subscription. The platform emphasizes ease of use, enabling users to create and deploy AI agents without technical expertise, and focuses on security and governance to protect enterprise data. The company positions itself as a cost-effective alternative to larger AI platforms, targeting small to medium businesses and enterprises primarily in France. Technically, the website is built on modern frameworks such as React and Next.js, with integrations for analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and security headers, though some improvements are recommended in cookie consent and incident response transparency. Overall, the website is professional, well-branded, and trustworthy, with clear business credibility and good user experience.

SalamandreTV is a French subscription-based streaming platform specializing in nature and animal documentaries. It is operated by the Salamandre organization, a recognized entity in nature media, offering a curated catalog of over fifty films with weekly additions. The platform targets nature enthusiasts, families, and documentary lovers, providing a niche service in the media streaming market. Technically, the website leverages modern technologies including React and the Kinow streaming platform, with secure payment integration via Stripe and content delivery through Amazon Cloudfront CDN. The site is well-optimized for mobile and desktop with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and secure form handling, though security headers could be improved. Privacy compliance is evident with a cookie consent banner and privacy policy in French, aligned with GDPR requirements. The absence of WHOIS data limits domain trust verification but the overall digital footprint and branding consistency support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

M

Mangopay

mangopay.com

63

Mangopay is a well-established fintech company specializing in providing wallet-based payment infrastructure tailored for multi-party payment flows. Their platform supports multi-currency accounts, virtual IBANs, and flexible payment and payout solutions, targeting marketplaces, SaaS platforms, financial platforms, and other digital businesses. The company has a strong market presence with notable clients and industry recognition, positioning itself as a top-tier payment infrastructure provider. Technically, the website is built on modern frameworks such as Next.js and React, with integrations like Google Tag Manager and HubSpot forms, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site enforces HTTPS and includes some security headers but lacks DNSSEC and explicit security policies or incident response contacts. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

G

Gan Jing World - Technology for Humanity | Video & Movie Streaming

ganjing.com

65

Gan Jing World is a media and video streaming platform focused on providing users with the ability to watch, share, and create video content across desktop, mobile, and TV apps. The platform emphasizes privacy, kindness, and non-addictive algorithms, targeting a general audience interested in news, entertainment, and social interaction. The website is professionally designed with consistent branding and offers a wide range of content including news, talk shows, music, and movies. Technically, the site is built using modern web technologies such as React and Next.js, hosted on CloudOkyo infrastructure, and integrates Google Fonts and CookieYes for privacy compliance. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, though explicit security policies and incident response contacts are not publicly available. The domain WHOIS data is unavailable, which reduces transparency but the website's professional appearance and privacy compliance suggest moderate legitimacy. Overall, the site presents a good balance of content quality, technical implementation, and privacy compliance, suitable for a media streaming business.

T

Tamda Group

tamdamedia.eu

53

Tamda Media is a Vietnamese language media platform primarily serving the Vietnamese community in the Czech Republic and Europe. The website offers news articles, video content, and community information, positioning itself as a niche media outlet focused on diaspora engagement. The business is medium-sized, founded around 2020, and operated by Tamda Group. The site uses modern web technologies including Next.js and React, hosted via AWS Cloudfront CDN, and integrates Google Analytics for user tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal incident response or vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and safe for general audiences but would benefit from enhanced security and compliance measures.

D

Denník N

mnt.sk

55

Denník N operates a Slovak news media website providing fast, real-time news updates across politics, economy, culture, and sports. The platform targets a general audience interested in current affairs in Slovakia and internationally. The website uses modern web technologies including React and integrates analytics and advertising tools such as Google Tag Manager and Gemius. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are not found on the analyzed page. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the site presents professional content with good user experience and moderate technical performance.

P

Petr Staníček

pixy.cz

43

The website pixy.cz is a well-established personal and professional homepage of Petr Staníček, a seasoned web architect, UX designer, frontend developer, and author based in the Czech Republic. The site showcases his extensive experience, portfolio, publications, and personal projects, targeting potential clients and collaborators interested in web design and development services. The business model is primarily freelance and consulting, supported by a strong personal brand and a long domain history dating back to 2002. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript frameworks such as React, Redux, Vue, and Angular, and backend technologies like PHP and Nette. The site is well-structured, mobile-optimized, and uses minimal tracking via plausible.io, reflecting a privacy-conscious approach. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms, reducing attack vectors. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, which are areas for improvement to enhance compliance and security posture. Overall, the website is professional, trustworthy, and content-rich, with a high business credibility score. The main risks relate to privacy compliance and security best practices, which if addressed, would further strengthen the site's standing and user trust.

C

Cineville

cineville.fr

51

Cineville is a regional cinema chain operating multiple cinema locations across France, focusing on providing movie screening services and cinema programs to a general audience. The website leverages modern web technologies such as Next.js and React, integrating analytics tools like Microsoft Clarity and Facebook Pixel to monitor user engagement. The site is mobile-optimized and presents a professional design with clear navigation, although it lacks explicit privacy and cookie policies which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and no visible incident response or security policy information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and structure suggest a legitimate business. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security.

V

vshosting~

vshosting.cz

63

vshosting~ is a Czech-based managed cloud and dedicated server provider established in 2006, offering high-performance enterprise cloud solutions tailored to client needs. They provide a broad range of services including GPU servers, private cloud, managed servers, and CDN, supported by 24/7 senior certified administrators. The company positions itself as a leading European provider with infrastructure supporting over 40,000 projects, emphasizing security, availability, and scalability. Their technical infrastructure leverages modern web technologies such as Next.js and React, with strong SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and technically mature organization with a strong market presence in the technology sector.

M

Monext

payline.com

71

Monext is a French payment solutions provider offering a comprehensive suite of services including online, in-store, and omnichannel payment processing, as well as card issuance and acquisition services. The company targets businesses across various sectors such as retail, travel, events, and mobility, positioning itself as a reliable and customer-centric partner in the European payment ecosystem. The website reflects a mature digital presence with professional design, detailed product offerings, and customer success stories that reinforce its market position. Technically, the website is built on modern frameworks like Next.js and React, leveraging Prismic CMS for content management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility could be improved further. Performance is moderate, with efficient use of resources and lazy loading of images. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a strong baseline security posture. However, explicit security policies, incident response plans, and vulnerability disclosure mechanisms are not publicly documented, representing areas for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website and business appear legitimate and professional, though the absence of WHOIS data and direct contact information slightly reduce trust signals. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and providing clearer contact channels to improve user trust and compliance.

T

Tamda Foods

tamda.eu

53

Tamda Foods is a subsidiary of the TAMDA Group, operating primarily in the retail and e-commerce sectors focused on food products for Vietnamese-speaking consumers in Europe. The website presents a professional and consistent brand image with clear navigation, membership programs, and promotional campaigns. The business model revolves around retail sales, promotions, and customer engagement through membership and store locator services. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by OVH SAS, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible GDPR consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

L

Lopesan Hotel Group

lopesan.com

66

Lopesan Hotel Group operates a well-established hospitality business focused on providing hotel and resort accommodations primarily in Spain. The website serves as the official online presence for the group, offering booking capabilities and showcasing their unique destinations and services. The company has a strong market position with a domain age of over 25 years, indicating stability and trustworthiness. Technically, the website leverages modern web technologies including React and Liferay CMS, ensuring a robust and scalable platform. The site is mobile optimized and performs moderately well, with good SEO practices in place. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and suitable for its target audience of travelers and tourists.

M

Mon Restau Responsable®

monrestauresponsable.org

59

Mon Restau Responsable® is a French initiative focused on promoting sustainable and healthy collective catering through a participative and free self-assessment platform. It targets collective restaurants in schools, universities, companies, and medico-social sectors, helping them improve ecological and social practices. The website is well-positioned in the French market with over 2300 engaged restaurants and strong partnerships with recognized organizations such as FNH and Restau'Co. Technically, the site uses modern frameworks like Next.js and Chakra UI, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly reducing domain trust. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust further.

S

Shen Yun Zuo Pin Inc.

shenyuncreations.com

59

Shen Yun Creations operates as a specialized streaming platform offering premium performing arts content centered on Shen Yun's dance and music productions. The platform targets a culturally interested audience seeking on-demand access to traditional Chinese performing arts, masterclasses, and behind-the-scenes content. The business model is subscription-based with options for individual video purchases, positioning itself in a niche cultural media market. Technically, the website leverages modern web technologies including React and Next.js, with cloud-based media hosting and integration of Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. However, the absence of WHOIS registration data raises concerns about domain legitimacy, suggesting either a new registration or privacy protection. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and additional security headers.

Z

zirk.us

zirk.us

65

zirk.us operates as an independent Mastodon social network server focused on the arts and humanities community, providing a platform for readers, writers, and academics to engage in cultural and intellectual discussions. The website leverages the Mastodon open-source platform, utilizing modern web technologies such as React and JavaScript ES modules to deliver a responsive and user-friendly experience. The domain is well-established, registered since 2004, and managed via GoDaddy with protective domain status flags, enhancing trustworthiness. However, the domain predates the Mastodon platform, indicating repurposing of the domain for this service. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is functional, trustworthy, and serves a niche community with good content quality and technical implementation.

G

GoDaddy Operating Company, LLC

cea.tech

11

The website is a domain sales landing page for the domain cea.tech, operated by GoDaddy Operating Company, LLC, a leading global domain registrar and marketplace. The platform offers multiple purchasing options including buy now, lease to own, and making an offer, targeting businesses and individuals seeking premium domain names. The site leverages modern web technologies such as React and Next.js, hosted on GoDaddy infrastructure, providing a fast and responsive user experience. Security is robust with HTTPS enforced, security headers present, and secure payment assurances. Privacy and cookie policies are available through GoDaddy's main site, indicating compliance with GDPR and other regulations. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

F

Film at Lincoln Center

filmlinc.org

63

Film at Lincoln Center (FLC) is a well-established nonprofit organization founded in 1969 dedicated to celebrating cinema as an essential art form and fostering a vibrant film culture. The organization operates a professional website that provides detailed information about film screenings, festivals such as the New York Film Festival (NYFF), membership programs, and cultural events. The site targets cinema enthusiasts and the broader film community, offering ticket sales and membership benefits to sustain its nonprofit mission. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted likely on Vercel with Cloudflare CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. Security best practices are observed with HTTPS enforcement and multiple security headers, and privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is unavailable due to a malformed response, which limits domain registration insights. Despite this, the website's professional presentation, consistent branding, and presence of trust indicators support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, FLC's website represents a mature digital presence for a nonprofit cultural institution with strong security and privacy practices. Strategic recommendations include publishing a vulnerability disclosure policy and incident response contacts to further enhance trust and security transparency.

P

PPF a.s.

ppf.cz

72

PPF Group is a well-established international investment group founded in 1991 in the Czech Republic, operating in 25 countries across Europe, North America, and Asia. The company manages a diversified portfolio spanning telecommunications, media, financial services, e-commerce, real estate, biotechnology, and mobility sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting investors, partners, and the public. Technically, the site uses modern frameworks such as Next.js and React, supported by DatoCMS, and integrates Google Tag Manager and reCAPTCHA Enterprise for analytics and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is privacy protected, consistent with European domain registration norms, and the website content aligns with the company's stated business profile. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

M

Mailmojo AS

mailmojo.no

51

Mailmojo AS is a Norwegian technology company specializing in email newsletter and SMS marketing solutions. With 19 years of experience and over 1100 paying customers, it holds a strong position in the Norwegian digital marketing sector. The company offers a SaaS platform that enables businesses to create, segment, and automate marketing campaigns with a focus on local data storage and GDPR compliance. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting Norwegian businesses seeking effective communication tools. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced analytics tools like Segment, PostHog, and Piwik Pro, and uses Sanity CMS for content management. The platform demonstrates good performance, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with local data hosting in Norway enhancing privacy assurances. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response information, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Business credibility is supported by transparent contact details, customer testimonials from reputable organizations, and consistent branding. Overall, Mailmojo presents a trustworthy, professional, and secure online presence suitable for its target market. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure guidelines to further enhance trust and compliance.

K

kode24.no / Aller X (Aller Media)

kodejobb.no

62

kodejobb.no is a Norwegian job listing portal focused on developer jobs, operated by Aller Media through its Aller X division. The site leverages a modern technical infrastructure built on Next.js and Sanity CMS, delivering a fast, mobile-optimized, and accessible user experience. It serves a niche audience of developers in Norway, providing curated job listings, salary calculators, and career advice content. The website demonstrates strong business credibility with clear contact information, professional design, and partnerships with reputable companies. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is good, with comprehensive privacy and cookie policies linked, and minimal user tracking via Plausible Analytics. Overall, kodejobb.no is a trustworthy and professionally managed platform with a clear market position in Norwegian developer recruitment.

Le Pot Commun is a French fintech platform operated by Unty, specializing in online collective money pooling for occasions such as birthdays, departures, and solidarity causes. The platform offers a user-friendly, secure, and free-to-use service with optional fees on certain payment methods. It holds regulatory registration as an Intermédiaire en Financement Participatif (IFP) under ORIAS, enhancing its legitimacy. Technically, the website leverages modern frameworks like React and Next.js, integrates multiple analytics and marketing tools, and enforces strong security practices including HTTPS and 3D Secure payments. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. No blocking or WAF challenges were detected, and the site demonstrates excellent design, navigation, and trust indicators. However, no public vulnerability disclosure or incident response contacts were found, which could be improved for transparency and security readiness.

M

Mondelēz International, Inc.

mondelezinternational.com

66

Mondelēz International, Inc. is a leading global snacks company operating in over 150 countries, specializing in manufacturing and marketing cookies, crackers, gum, chocolate, and candy. The company holds a strong market position as one of the largest snack producers worldwide, targeting consumers, retailers, and investors. Their business model focuses on global manufacturing and distribution of snack foods with a well-established brand presence. The website reflects a mature digital infrastructure built on modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS data introduces some uncertainty in domain registration legitimacy, though the overall business credibility remains high due to strong branding and trust signals.

S

Starfish Barometer

starfishbarometer.org

67

Starfish Barometer is a newly launched non-profit initiative focused on providing an annual, science-based snapshot of the ocean's health and its critical connection to humanity. The platform aims to raise awareness about ocean sustainability, climate regulation, biodiversity, and societal impacts through accessible reports and resources. The website is professionally designed with a clear focus on environmental education and scientific communication, targeting a broad audience including policymakers, scientists, and the general public. Technically, the site leverages modern web technologies such as React and JSON-LD structured data, hosted on a platform called inwink, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust, but the domain age aligns with the recent launch date. Overall, the site presents a credible and trustworthy resource for ocean health information with room for improvement in transparency and security best practices.

D

dacia

dacia.ma

71

The website www.dacia.ma serves as the official Moroccan portal for the Dacia automotive brand, part of the Renault Group. It provides comprehensive information on vehicle models, pricing, financing options, after-sales services, and dealer locations. The site targets consumers in Morocco interested in purchasing new or used Dacia vehicles, offering a user-friendly interface with vehicle configurators and test drive booking features. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Google Analytics, ensuring a responsive and well-structured user experience. Security measures such as HTTPS and security headers are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, reducing trust scores despite the professional presentation and strong brand alignment. Overall, the site is well-designed and functional, with room for improvement in transparency and direct contact information to enhance trust and compliance.

S

Storck

dickmanns-gewinnspiel.de

67

The website www.dickmanns-gewinnspiel.de is a promotional campaign platform for Storck's Super Dickmann's confectionery product, offering consumers in Germany a chance to win cashback and free products through a contest mechanism. The site is professionally designed with consistent branding and clear navigation, targeting retail consumers interested in confectionery promotions. Technically, the site is built on a modern Next.js framework with React, ensuring good mobile optimization and moderate performance. Security posture is adequate with cookie consent mechanisms and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent banners. Overall, the domain appears legitimate with brand protection via Brandshelter nameservers, and the site links to multiple official Storck partner domains. No adult or questionable content is present, making it safe for general audiences.

D

Display Europe

displayeurope.eu

61

Display Europe is a European media platform that aggregates news and media content from various European sources, targeting media professionals, researchers, and the general public interested in European affairs. The platform offers search and filtering capabilities to access a wide range of media articles from partner sources. Technically, the website is built using modern web technologies including React and Next.js, with Apollo GraphQL for data management and Matomo for analytics. The site demonstrates good digital maturity with responsive design and moderate performance. Security-wise, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website is trustworthy and professionally maintained, with a strong European identity and co-funding from the European Union.

F

fairkom

fairmove.net

70

fairmove.net is a Mastodon instance operated by fairkom, providing a federated social networking platform focused on 'fair moves' and community engagement. The platform is part of the fairapps.net open source cloud portfolio and integrates SingleSignOn capabilities. Hosting is located in the EU, aligning with data protection expectations. The website serves a niche audience interested in decentralized social media and open source technologies. Technically, the site runs Mastodon version 4.4.2 with a modern tech stack including Ruby on Rails and React, delivering a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Business credibility is supported by transparent WHOIS data consistent with the website's claims and a clear administrative contact. Overall, the site is safe, professional, and trustworthy within its niche, but could enhance security and compliance features to improve user trust and regulatory adherence.

T

Toot Café

toot.cafe

60

Toot Café is an independent Mastodon instance primarily serving a community interested in web design and development. It operates as a social networking platform within the fediverse, leveraging the open-source Mastodon software (version 4.4.7). The site provides features such as trending posts, hashtags, and a profiles directory, targeting users who seek decentralized social networking without ads or algorithms. The platform is administered by an individual named Nolan Lawson, indicating a small-scale community-driven operation. Technically, the website employs modern web technologies including React, JavaScript ES modules, and WebSockets for real-time streaming. The presence of a manifest file suggests support for progressive web app features. While the site appears to be mobile-optimized and has a good design quality, accessibility and SEO optimizations are basic. Performance is moderate, with no major issues detected in the HTML structure or resource loading. From a security perspective, HTTPS is implied and WebSocket connections use secure protocols. However, no explicit security headers were detected in the provided data, and there is no visible cookie consent mechanism or published terms of service. WHOIS data is unavailable due to unsupported TLD WHOIS queries, which slightly reduces trustworthiness. No contact information or incident response channels are published, limiting transparency. No advertising or tracking technologies were found, indicating a privacy-conscious approach. Overall, Toot Café presents as a legitimate, community-focused Mastodon instance with good technical foundations but some gaps in security best practices and compliance documentation. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and resilience.

B

Be Bouncy

bebouncy.com

9

Be Bouncy is an AI-driven social media management platform designed to simplify and optimize social media growth for creators, SMBs, and agencies. The platform offers a suite of tools including smart scheduling, analytics, automated moderation, and gamified team management, all powered by its AI agent Nimbus. The website demonstrates a modern technical infrastructure built on React and Next.js, providing a responsive and user-friendly experience. However, the absence of WHOIS registration data and some minor issues such as a suspicious YouTube link domain and lack of cookie consent mechanisms slightly reduce trustworthiness. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the platform presents a professional and promising solution in the social media SaaS market, but domain legitimacy verification and enhanced privacy compliance are recommended.

R

Reacteev

reacteev.com

9

Reacteev is a technology company specializing in product management, agile methodologies, and AI-powered organizational tools. The website presents a professional and modern interface built on React and Gatsby, indicating a mature digital infrastructure. The business appears to target organizations looking to enhance their product and agile processes through AI solutions. The domain registration data supports the legitimacy and stability of the business, with a domain age consistent with the company's founding year of 2015. However, the website lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its compliance and trustworthiness scores. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures.

Rijksdienst voor Ondernemend Nederland (RVO) is a Dutch government agency dedicated to supporting sustainable and strong economic development. The agency provides a wide range of services including information dissemination, advisory support, financing options, and networking opportunities to entrepreneurs, individuals, governments, and knowledge institutions. The website reflects a mature digital presence with comprehensive content tailored to its diverse audience, emphasizing sustainability, innovation, and international business growth. The agency's market position is that of a key national facilitator for economic and environmental initiatives in the Netherlands.

K

kode24-dagen

kode24-dagen.no

58

kode24-dagen is a Norwegian developer conference focused on web developers, scheduled for March 27, 2025, in Oslo. The event offers keynote talks, networking, and evening entertainment, targeting the Norwegian web development community. The website is professionally designed, mobile-optimized, and uses modern web technologies including Next.js and Sanity CMS, hosted on Vercel. The presence of reputable sponsors such as Telenor and Gjensidige enhances its credibility. However, the site lacks visible privacy and cookie policies, and no WHOIS data is available due to privacy protection or registry restrictions. Security headers are not explicitly detected, suggesting room for improvement in security posture.

OLDstars is a Czech student theater group that organizes theatrical performances, festivals, and acting courses primarily in Prague and surrounding regions. Their website showcases a rich program of upcoming performances, news, and educational opportunities, targeting students and theater enthusiasts. The site is built on modern web technologies such as Next.js and React, providing a responsive and user-friendly experience. Security posture is good with HTTPS and some security best practices, though some HTTP security headers could be improved. Privacy and cookie policies are not clearly presented, which is a compliance gap. WHOIS data is unavailable, which reduces domain trust but the professional content and social media presence support legitimacy. Overall, the site is a well-maintained cultural platform with room for enhanced privacy and security transparency.

R

RESPEKT

respekt.cz

60

RESPEKT.cz is a Czech independent weekly news magazine focusing on current domestic and international politics, economy, culture, and social issues. It offers a subscription-based business model with rich multimedia content including articles, podcasts, photo galleries, and newsletters. The website is professionally designed, mobile-optimized, and targets Czech-speaking audiences interested in in-depth news and commentary. Technically, the site uses modern frameworks such as React and Next.js, with good performance and SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not clearly found in the content. WHOIS data is unavailable, which slightly impacts trust but the overall presentation and content quality indicate a legitimate media entity. Strategic recommendations include publishing clear privacy and cookie policies, providing contact information for security incidents, and enhancing transparency on data protection.

S

SNCF Group

groupe-sncf.com

58

SNCF Group is a leading global player in low-carbon mobility, specializing in passenger transport and freight logistics. The company operates internationally with a large workforce and a diversified portfolio of subsidiaries including SNCF SA, Keolis, and GEODIS. Their business model focuses on sustainable transportation solutions and mass transit services, positioning them as a world leader in their sector. The website reflects a mature digital presence with comprehensive content targeting various stakeholders such as job seekers, investors, journalists, suppliers, and travelers. Technically, the site leverages modern frameworks like Next.js and React, integrates advanced consent management and bot protection, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS and bot mitigation, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability for trust enhancement.

N

Not explicitly stated

pombilitiopfolda.com

64

The website provides detailed information about POMBILITI® (cipaglucosidase alfa-atga) + OPFOLDA® (miglustat), an FDA-approved two-component therapy for adults with Pompe disease. It serves as an educational and support platform targeting patients and healthcare providers, offering clinical trial results and resources. The site is built using modern web technologies including React and Gatsby, with a focus on accessibility and mobile responsiveness. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and aligned with healthcare industry standards.

E

Patriot Program | Akce - Koncerty - Divadla - Výstavy - Gastronomie - Sport

eprogram.cz

54

Patriot Program is a regional Czech media platform focused on providing a calendar and search engine for cultural, sports, and social events primarily in the Moravskoslezský kraj region. The website offers event listings, articles, and downloadable magazines targeting a broad audience including families, seniors, and general public interested in local happenings. Technically, the site is built using modern web technologies such as React and Next.js, hosted on DigitalOcean Spaces for media content, and optimized for fast performance and mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy disclosures. The absence of WHOIS data limits transparency but the website content and social media presence support legitimacy. Overall, the platform serves as a useful regional event and cultural information resource with room for improvement in privacy and security compliance.

P

Postscript

postscript.io

66

Postscript is a specialized SaaS company providing SMS marketing and sales solutions primarily targeting Shopify ecommerce merchants. Their platform leverages AI to enhance customer engagement and drive revenue through conversational SMS and RCS messaging. The company positions itself as a leader in ecommerce SMS marketing with a strong focus on delivering measurable ROI and innovative features such as AI-powered message testing and a 1:1 AI shopping assistant. Technically, the website is built on a modern React/Next.js stack, hosted on AWS, and integrates multiple third-party analytics and marketing tools, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses domain locking statuses, and implements cookie consent mechanisms, but lacks explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, with no signs of blocking or malicious activity.

Richie.education is an open source content management system designed to help educators and educational institutions create rich, multilingual online learning portals and course catalogs. The platform integrates with multiple LMS systems such as Open edX and Moodle, providing a centralized portal for course discovery and management. The website demonstrates a clear focus on education technology with a modern technical stack including Django CMS, Django, and React. The site is well-structured, mobile-optimized, and provides comprehensive documentation and community engagement channels, including GitHub and Slack. However, the website lacks published privacy, cookie, and security policies, and does not provide direct contact information, which impacts its privacy compliance and trustworthiness scores. No forms or data collection mechanisms are present, reducing immediate security risks but also limiting user engagement options. Overall, Richie.education presents a credible and professional open source educational platform with room for improvement in privacy and security transparency.

D

Data For Good

dataforgood.fr

39

Data For Good is a French non-profit organization established in 2015, dedicated to leveraging technology for social and environmental good. The organization focuses on building citizen-driven tech counterpowers addressing climate change, social justice, and democratic transparency. Their website showcases multiple projects, volunteer engagement opportunities, and donation campaigns, positioning them as a reputable entity in the civic tech and non-profit sector in France. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Scaleway cloud infrastructure, and employs good security practices including HTTPS and security headers. However, the site lacks explicit privacy and cookie policies, which impacts its privacy compliance score. No direct contact emails or phone numbers are provided, with communication primarily via web forms. Overall, the site is professional, trustworthy, and well-structured but could improve in privacy transparency and direct contact availability.

R

renault

renault.dz

74

Renault Algeria operates an official regional website dedicated to showcasing and selling new Renault vehicles, as well as providing after-sales services including maintenance, warranty, and service appointments. The website targets the general Algerian public interested in Renault automobiles and related services. It reflects the brand's strong market position as a major automotive player in Algeria, supported by the global Renault Group. The site offers vehicle configurators, distributor locators, and promotional offers, enhancing customer engagement and service accessibility. Technically, the website employs modern web technologies such as React, integrates Google Analytics and Tag Manager for tracking, and uses OneTrust for cookie consent management. The site is responsive and optimized for mobile devices, with good SEO and accessibility basics. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly visible security policies or incident response information. Privacy compliance is partially addressed through cookie consent, but explicit privacy and terms of service documents are not found. Overall, the website is professional, trustworthy, and well-branded, though it could improve transparency by publishing detailed privacy and security policies and providing clear contact information. The domain registration details align well with the Renault brand, confirming legitimacy and consistency.

R

renault

renault.lu

69

Renault Luxembourg operates as the official regional website for Renault in Luxembourg, providing comprehensive information on new vehicles including electric and hybrid models. The site targets consumers interested in purchasing Renault vehicles and offers configurators and promotional content. Technically, the site is built using modern React frameworks and integrates privacy compliance tools such as OneTrust for cookie consent, alongside Google Analytics for user tracking. The security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment, but the professional branding and content strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and compliant with GDPR, making it a reliable source for Renault vehicle information in Luxembourg.

R

renault

renault.ma

70

Renault Maroc operates a professional and comprehensive automotive website targeting the Moroccan market, offering new vehicles including electric, hybrid, and utility models. The site provides extensive information on financing, insurance, after-sales services, and vehicle accessories, positioning Renault as a major automotive brand in Morocco. Technically, the website is built on modern frameworks like React, uses optimized media formats, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trustworthiness, but the overall site professionalism and branding consistency support legitimacy. Strategic recommendations include publishing security policies and improving transparency on contact information to enhance trust and compliance.

L

Les-Tilleuls.coop

vulcain.rocks

58

Vulcain.rocks is a technology-focused website promoting the Vulcain protocol, which leverages HTTP/2 features such as preload hints, Early Hints, and Server Push to create fast, client-driven REST APIs. The site is supported by Les-Tilleuls.coop, which offers professional services including web development, training, and consulting around this technology. The website targets developers and API providers seeking to optimize API performance and usability. Technically, the site is built with modern frameworks including Next.js and Material-UI, and integrates Google Analytics and Tag Manager for user tracking. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain appears legitimate though WHOIS data is privacy protected and incomplete.

S

Shoptet

shoptet.sk

69

Shoptet is a Slovak-based e-commerce platform provider offering SaaS solutions to entrepreneurs and businesses seeking to establish online stores. The website promotes a 30-day free trial to attract new users and showcases a modern, professional design with good user experience and mobile optimization. The technical infrastructure leverages modern frameworks such as React and Next.js, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and contact information limits transparency. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is credible and trustworthy, serving a medium-sized business audience in the e-commerce sector.

W

Wix.com Ltd.

wixstats.com

10

Wix.com Ltd. operates a leading platform in website creation, offering a drag and drop website builder with customizable templates for businesses, portfolios, online stores, and blogs. The company holds a strong market position as a technology enterprise with a global user base. The website demonstrates a mature technical infrastructure built on proprietary Wix technologies, React, and modern JavaScript polyfills, hosted on Wix's own infrastructure. Security posture is robust with HTTPS enforcement, hardened fetch and XHR requests, and secure cookie handling, although explicit privacy and cookie policies are not present in the analyzed content. Overall, the site is professional and trustworthy but could improve transparency around privacy and compliance.

H

Hoop Corporate Services SA

hoop.swiss

48

Hoop Corporate Services SA operates a fully digital platform specialized in company formations and modifications within Switzerland. Targeting fiduciary firms, law offices, notaries, and corporate legal departments, Hoop streamlines traditionally complex and time-consuming processes by offering a 100% digital workflow including rapid capital deposit account setup via Yapeal. The company positions itself as a unique Swiss solution combining technology with compliance and efficiency. Technically, the website leverages modern frameworks such as Next.js and React, integrates analytics tools like Matomo and Google Analytics, and is hosted on a Swiss cloud infrastructure certified to ISO 27001 standards. Security posture is strong with HTTPS enforcement and secure cloud storage, though explicit security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, Hoop demonstrates a mature digital presence with strong business credibility and technical sophistication.

R

Recreation.gov

recreation.gov

69

Recreation.gov is a U.S. government-operated platform providing centralized trip-planning and reservation services for federal recreation sites across the country. It serves as a one-stop shop for camping, cabins, RV rentals, permits, passes, and tours, supporting 14 federal agencies and thousands of recreation locations. The platform is managed by a dedicated government team with technical support from Booz Allen Hamilton, funded primarily through reservation fees rather than Congressional appropriations. The website is well-designed, mobile-optimized, and rich in content, targeting outdoor enthusiasts and the general public interested in federal lands visitation. Technically, the site employs modern web technologies including React and Mapbox GL JS, integrates Google Tag Manager and analytics services, and demonstrates good performance and accessibility. While HTTPS is enforced and bot mitigation strategies are described, explicit security headers are not visible in the HTML content, and no cookie consent mechanism was detected, indicating areas for improvement in security and privacy compliance. The security posture is strong overall, with no evident vulnerabilities or exposed sensitive data. The presence of a responsible disclosure page and contact mechanisms for security issues further supports a mature security culture. However, incomplete WHOIS data and missing registrar and registrant details reduce trust somewhat, though the government affiliation and operational maturity mitigate concerns. Overall, Recreation.gov presents a trustworthy, professional, and user-friendly service with a solid security foundation. Strategic recommendations include adding explicit security headers, implementing a visible cookie consent banner, and publishing a security.txt file to enhance transparency and compliance.

P

Poool

poool.fr

74

Poool is a technology company specializing in SaaS solutions for digital media publishers, focusing on subscription and audience engagement tools. Their platform offers dynamic journey builders, paywalls, registration walls, and engagement widgets to help publishers increase consumer revenue efficiently. The company serves over 150 publishers worldwide, including notable media brands, positioning itself as a trusted partner in the digital publishing ecosystem. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and incorporates advanced consent management and bot protection technologies. Security posture is strong with HTTPS, security headers, and privacy compliance evident, though explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious activity or content blocking.

S

STEEZY, s.r.o.

steezy.studio

10

STEEZY Studio is a creative agency based in the Czech Republic specializing in branding, video production, motion design, campaigns, web design, and spatial design. They serve world-renowned brands such as Adidas, Nike, Vans, and Honeywell, positioning themselves as a trusted partner for both global and local clients. Their business model focuses on delivering comprehensive visual solutions and creative content, supported by a modern digital infrastructure including Next.js and Shopify for e-commerce. The website demonstrates excellent design quality, mobile optimization, and user experience, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data transparency slightly reduces trust but does not detract from the professional appearance and business credibility. Overall, the site is safe, professional, and well-structured, targeting a general audience of businesses seeking creative services.