Security Directory

B

BoboVita

bobovita.pl

58

BoboVita is a well-established brand specializing in infant and young children's nutrition products in Poland. The website offers a comprehensive range of products, educational content, and expert support aimed at parents and caregivers. The brand maintains a strong market position with a focus on quality and developmental appropriateness of its offerings. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates analytics and marketing tools like Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence for the BoboVita brand.

B

Zadbaj o przyszłość już dziś | BebiProgram

bebiprogram.pl

58

BebiProgram is a Polish retail-focused website dedicated to infant nutrition and parenting support, prominently featuring Bebilon infant formula products. The site offers comprehensive resources for parents and expecting mothers, including pregnancy tools, expert advice, and product information. Technically, the website is built using modern frameworks such as Next.js and Material-UI, hosted on AWS infrastructure, and integrates tracking tools like Google Tag Manager and Ipresso. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. The absence of WHOIS data limits full trust evaluation, but the professional presentation and content quality suggest a legitimate commercial entity. Overall, the site is well-structured, mobile-optimized, and provides valuable content to its target audience.

N

Nutricia

bebiklub.pl

60

BebiKlub is a Polish-language website operated by Nutricia, focusing on infant and child nutrition, development, and parenting support. The site offers educational content, product information, and community engagement features such as contests and expert advice. It targets parents and caregivers of infants and young children, positioning itself as a trusted resource in the healthcare and nutrition sector in Poland. The website is professionally designed with consistent branding and good content quality, supporting Nutricia's market presence in infant nutrition. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS infrastructure, and integrates analytics and marketing tools such as Google Tag Manager and ipresso monitoring. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. WHOIS data is not publicly available due to .pl domain registry policies, but the website content and structured data indicate a legitimate business. Overall, the site is safe, family-friendly, and well-positioned for its audience, though improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

数美科技是一家专注于基于人工智能技术的在线业务风控和内容安全解决方案提供商，成立于2013年，市场占有率领先，服务全球客户。其产品矩阵涵盖智能内容检测、业务风控、AIGC风控等多个领域，支持多行业应用。技术架构现代，采用Next.js和Ant Design，托管于阿里云，性能优良且移动端优化出色。安全方面，网站启用HTTPS，未发现明显漏洞，但缺少部分安全头和隐私合规机制。整体业务信息透明，拥有多项权威认证和客户推荐，显示出较高的可信度和专业性。

Crystallize AS is a Norway-based technology company specializing in modern headless commerce solutions, subscription commerce, and product information management (PIM) powered by GraphQL APIs. The company targets developers, agencies, and product-obsessed brands seeking scalable and flexible e-commerce platforms. With a strong market position supported by over 7000 developers and teams worldwide, Crystallize offers a SaaS platform emphasizing performance, SEO, and developer freedom. The website reflects a mature digital presence with comprehensive resources, community engagement, and a consistent brand identity. Technically, the platform leverages modern frameworks such as Next.js, React, and Jamstack principles, hosted on AWS infrastructure, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies, though cookie consent mechanisms could be enhanced. Overall, Crystallize demonstrates a professional, secure, and trustworthy online presence aligned with its business goals.

D

Deutsche Postcode Lotterie GmbH & Co. KG

postcode-lotterie.de

70

The Deutsche Postcode Lotterie GmbH & Co. KG operates a socially responsible lottery platform in Germany, allowing participants to win prizes based on their postal codes while supporting charitable projects. The website is professionally designed, highly accessible, and optimized for mobile devices, reflecting a mature digital presence. Key services include monthly and daily lottery draws, with a significant portion of proceeds dedicated to social causes. The platform holds reputable certifications such as TÜV Saarland and Trusted Shops, enhancing its credibility. Technically, the website leverages modern frameworks including Next.js and Storyblok CMS, hosted on Vercel and AWS infrastructure. It employs best practices in security, including HTTPS enforcement, security headers, and content security policies. Analytics and marketing tools like Google Tag Manager and Usercentrics CMP are used with GDPR-compliant consent mechanisms. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit security policy and incident response contact details could be more visible. Privacy compliance is robust, with comprehensive privacy and cookie policies in place. The domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security policy transparency and incident response visibility to further strengthen user trust and compliance.

Nuki Home Solutions GmbH is an Austrian technology company specializing in innovative smart lock solutions designed for easy retrofitting. The company has established a strong market position in Europe by offering a range of smart locks and accessories that integrate seamlessly with major smart home platforms. Their business model focuses on direct consumer sales and business reseller partnerships, supported by a comprehensive digital presence including mobile apps and web management tools. Technically, the website is built on modern frameworks such as Next.js and React, with robust analytics and marketing integrations, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site enforces HTTPS, employs standard security headers, and maintains good privacy compliance with clear policies and consent mechanisms. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain registration and website content are consistent and trustworthy, reflecting a mature and professional business entity.

Cockroach Labs operates the website www.cockroachlabs.com, offering CockroachDB, a distributed SQL database designed for cloud-native applications requiring high availability, scalability, and multi-region deployment. The company positions itself as a leader in distributed database technology, serving enterprise customers such as Netflix, Bose, and DoorDash. The website is professionally designed, mobile-optimized, and rich in content, including detailed product descriptions, customer testimonials, and technical documentation links. The technical infrastructure leverages modern web technologies including Next.js, React, and integrates multiple analytics and marketing tools such as Google Analytics, Datadog RUM, Segment, and Clearbit, all managed with a consent mechanism via OneTrust.

G

GoDaddy Operating Company, LLC

wiley.co

68

The website is a professional domain sales landing page hosted by Afternic, a GoDaddy-operated domain marketplace. It offers the domain wiley.co for sale with options for price inquiry via a form or direct phone contact. The platform emphasizes secure and straightforward domain transactions, leveraging GoDaddy's infrastructure and reputation. The site is well-structured, mobile-optimized, and includes trust signals such as a high Trustpilot rating. Technically, it uses modern web technologies including React and Next.js, hosted on AWS, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and secure forms with reCAPTCHA, although explicit vulnerability disclosure and incident response information are absent. Overall, the site is trustworthy and suitable for domain buyers seeking premium names.

T

Telia

telia.se

70

Telia is a leading telecommunications operator in Sweden, offering extensive 5G coverage, mobile telephony, broadband, TV, and streaming services. The company targets both consumers and businesses, positioning itself as a top-tier provider with a strong emphasis on sustainability and customer service. The website reflects a mature digital presence with modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security is robust, with HTTPS enforced and multiple security headers implemented, alongside comprehensive privacy and cookie policies that demonstrate GDPR compliance. Although WHOIS data for the www subdomain is missing, this is typical and does not detract from the site's legitimacy. Overall, Telia's website is professional, trustworthy, and well-aligned with industry best practices.

T

Telia

telia.com

70

Telia is a leading telecommunications operator in Sweden, offering a broad range of services including mobile telephony, broadband internet, TV, and streaming services. The company targets both consumers and businesses, emphasizing extensive 5G coverage and sustainability as key differentiators. The website reflects a mature digital presence with professional design and consistent branding. Technically, the site uses modern frameworks such as Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and modern security headers implemented, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent management platform in place. Overall, Telia's online presence is trustworthy and professional, supporting its enterprise market position.

B

BCIX

bcix.de

58

BCIX is a regional Internet Exchange Point based in Germany, providing essential peering and interconnection services to network operators, data centers, and enterprises. Their offerings include direct peering, bandwidth sharing via SubPeers, secure direct connections (pVLAN), private network interconnects (PNI), and connectivity to the major DE-CIX Frankfurt exchange. The company positions itself as an accessible and open peering platform, targeting a broad range of network participants. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and performance. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR. Overall, BCIX demonstrates a mature digital presence suitable for its telecommunications sector role.

A

AIM Partner AB

aimpartner.se

47

AIM Partner AB is a Swedish digital marketing agency specializing in SEO, SEM, AI-driven marketing, and GEO marketing services. Established in 2011, the company has grown to a medium-sized enterprise with over 40 employees and serves more than 10,000 clients annually. Their market position is strong within Sweden, offering tailored digital marketing solutions to businesses seeking to enhance their online presence and lead generation capabilities. The website reflects a professional and modern digital infrastructure, leveraging Next.js, React, and Prismic CMS, hosted with Cloudflare DNS and CDN services. The site is well-optimized for SEO, mobile responsiveness, and user experience, with clear navigation and comprehensive content.

Rambøll Group A/S is a large international consultancy specializing in sustainable architectural, engineering, and consulting solutions across multiple sectors including buildings, transport, energy, environment, health, water, management consulting, and landscape. The company has a strong market position and a well-established brand dating back to 1945. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting a global audience. Technically, the site is built on modern frameworks such as Next.js and Chakra UI, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact, which are areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces trust but does not detract significantly from the overall legitimacy given the strong corporate branding and social media presence. Overall, Ramboll's digital footprint is professional and trustworthy, with room to enhance security transparency and WHOIS data availability.

Tork is a leading global brand specializing in professional hygiene products and services, targeting businesses across various sectors such as offices, hospitality, and manufacturing. The website presents a professional and consistent brand image, reflecting its position as part of the Essity group. The digital infrastructure leverages modern technologies including React and Next.js, with integrations for analytics and consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms, although explicit incident response and vulnerability disclosure information are absent. Overall, the website is trustworthy and well-maintained, but the absence of WHOIS data introduces a minor trust concern that should be investigated further.

H

Hoši děkujem - Vytvoř si fanouškovské video! #hosidekujem

hosidekujem.cz

8

The website hosidekujem.cz is a non-commercial fan engagement platform focused on celebrating the Czech hockey world champions of 2024 by allowing users to create personalized fan videos. The site targets a general audience, primarily hockey fans, and offers a simple, interactive experience without commercial intent. The technical infrastructure is modern, built on React and Next.js frameworks, and includes Google Analytics for visitor tracking. The site is mobile-optimized and presents a good user experience with clear navigation and consistent branding. However, there is a lack of visible security headers and no explicit privacy or cookie policies, which limits its privacy compliance posture. The absence of WHOIS data reduces the ability to verify domain legitimacy fully, though the site content and technology suggest a legitimate fan project. Overall, the security posture is moderate with room for improvement in transparency and data protection practices.

L

James Bond: The Final Mission

lastbond.com

49

The website www.lastbond.com is an interactive media experience themed around the James Bond franchise, specifically titled 'James Bond: The Final Mission'. It offers users the ability to watch a video revealing the new secret agent successor and create their own customized content. The site targets general audiences interested in entertainment and fan engagement. Technically, the site is built using modern web technologies including React and Next.js, with Google Tag Manager integrated for analytics. The design is visually consistent and mobile optimized, providing a good user experience. However, the site lacks critical business and security information such as WHOIS registration data, privacy and cookie policies, contact details, and security headers. This absence impacts the trustworthiness and compliance posture of the site. Overall, the site appears to be a small-scale media project or fan engagement platform rather than a formal commercial business.

Ramboll is a prominent international consultancy firm specializing in architecture, engineering, and advisory services, with a strong focus on sustainable development. The website reflects a professional and well-established business entity targeting corporate and public sector clients. The content is comprehensive and well-structured, emphasizing their commitment to creating sustainable societies where people and nature thrive. Technically, the site is built using modern frameworks such as Next.js and React, with Chakra UI for styling, indicating a mature digital infrastructure. The presence of Cookiebot and Google Tag Manager shows attention to privacy and analytics integration. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains good privacy compliance with GDPR. Overall, Ramboll's website demonstrates a high level of professionalism, technical maturity, and security awareness, supporting its market position as a leading consultancy firm.

T

Tilastokeskus

stat.fi

65

Tilastokeskus is the official Finnish government statistics agency responsible for producing reliable and impartial official statistics about Finnish society. It leads and develops the state statistical system, serving a broad audience including policymakers, researchers, and the general public. The website demonstrates a mature digital presence with a modern Next.js and React-based infrastructure, hosted on Azure CDN, ensuring fast and mobile-optimized access. Security is robust with HTTPS, multiple security headers, and a clear cookie consent mechanism, although DNSSEC is not implemented. Privacy policies and terms of service are comprehensive and GDPR compliant, reflecting strong governance. Overall, the site is trustworthy, professional, and well-maintained, supporting the agency's mission effectively.

A

AngelList

angellist.com

70

AngelList is a prominent platform specializing in private fund management and venture capital services. It offers a comprehensive suite of tools for investors and innovators to raise capital, manage portfolios, and streamline fund administration. The platform targets venture funds, SPVs, scout funds, and digital subscription workflows, positioning itself as a leader in the private finance technology sector. The website reflects a mature digital presence with professional design and clear navigation, catering to a sophisticated audience of investors and fund managers. Technically, AngelList employs a modern technology stack including React and Next.js, supported by marketing and analytics integrations such as Marketo, Segment, and Clearbit. The site is optimized for performance and mobile responsiveness, with good accessibility and SEO practices. Security is robust with HTTPS enforced and multiple security headers implemented, alongside a cookie consent mechanism ensuring privacy compliance. While the website demonstrates strong security posture and privacy compliance, it lacks explicit published security policies, incident response procedures, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. The WHOIS data is incomplete or unavailable, which slightly impacts trustworthiness but does not detract significantly given the overall professional presentation and business legitimacy. Overall, AngelList presents a secure, compliant, and user-friendly platform with a strong market position in the finance and technology sectors. Strategic improvements in security transparency and WHOIS data availability would further strengthen its credibility and trust.

V

Vexve

vexve.com

62

Vexve is a Finnish company specializing in manufacturing valves and providing solutions for district heating and cooling networks, industrial applications, and energy production. The company targets industrial clients and energy sector professionals, positioning itself as a reliable B2B provider of high-quality valve products and energy system solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built using modern frameworks such as Next.js and React, and it employs Cookiebot for cookie consent management, ensuring compliance with privacy regulations like GDPR. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in hosting and speed optimizations. From a security perspective, the website enforces HTTPS and includes important security headers, contributing to a strong security posture. However, the absence of a security.txt file, incident response contacts, and vulnerability disclosure mechanisms indicates areas for enhancement in security transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, but the lack of publicly available WHOIS data for the domain www.vexve.com raises questions about domain registration transparency. This should be investigated further to ensure full legitimacy. Strategic recommendations include publishing security policies and contact information for incident response, improving domain registration visibility, and enhancing performance metrics.

Region Sjælland operates as a regional government entity providing healthcare, psychiatric, social services, and regional development functions within Denmark. The website serves as an information portal for hospitals, emergency services, social institutions, and regional infrastructure. It targets residents, patients, and partners within the region. The digital presence is built on modern web technologies including Next.js and React, hosted on Microsoft Azure, indicating a mature technical infrastructure. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and a comprehensive cookie consent mechanism ensuring GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies are clearly linked and detailed, supporting compliance with data protection regulations. However, WHOIS data is unavailable, limiting domain registration trust verification. Overall, the website demonstrates a professional and trustworthy digital presence suitable for a public healthcare authority. Recommendations include adding explicit contact information for security and privacy concerns, publishing a security.txt file for vulnerability disclosures, and maintaining regular security audits of third-party scripts.

Dineout.hr is an online platform focused on restaurant discovery and reservation services in Croatia. It offers users the ability to find excellent restaurants, book tables, and purchase tickets for culinary events and tasting menus. The platform targets a general audience interested in dining experiences and culinary events, positioning itself as a regional player in the hospitality sector. The website is built using modern web technologies such as React and Next.js and is hosted on DigitalOcean, indicating a contemporary and scalable technical infrastructure. The site includes standard marketing and analytics tools like Facebook Pixel and Google Tag Manager, supporting data-driven business decisions. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. Overall, the website is professional and functional with moderate security posture and privacy compliance, suitable for a small-sized hospitality business.

M

MANDARIN

mandarin.digital

58

MANDARIN is a German one-stop agency specializing in marketing, digital transformation, employer branding, and IT services. The company positions itself as a holistic partner for change and transformation, targeting businesses seeking to improve their digital presence and internal processes. The website reflects a mature digital infrastructure using modern technologies such as Next.js and React, with excellent mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism. Privacy compliance is well addressed with a detailed privacy policy and GDPR-aligned cookie consent. The WHOIS data is privacy protected, which is common for agencies, and does not raise immediate concerns. Overall, MANDARIN presents as a professional and trustworthy digital agency with a solid market position and a broad service portfolio.

I

Immunefi

immunefi.com

70

Immunefi is a leading Web3 security platform established in 2020, specializing in onchain security operations including bug bounty programs, audits, and AI-powered threat detection. The company serves blockchain projects and security researchers, positioning itself as a trusted intermediary to prevent hacks and secure digital asset treasuries. Their platform integrates multiple security tools and partners, providing a unified command center for security operations. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and employs Google Tag Manager and Sentry for analytics and error tracking. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS, domain protection statuses, and SOC 2 Type II certification, though DNSSEC is not enabled and no security.txt file is published. Overall, Immunefi demonstrates a mature security and compliance stance with room for minor improvements in incident response transparency and DNS security.

R

reown inc.

reown.com

71

Reown Inc. is a technology company specializing in providing infrastructure and developer tools for onchain finance applications, including DeFi, payments, and enterprise solutions. Positioned as a connectivity layer for the financial internet, Reown offers SDKs and analytics to enable secure, user-friendly, and scalable digital ownership experiences. The company targets developers and teams building blockchain-based financial products, emphasizing growth and security. Technically, the website is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and integrates HubSpot for forms and PostHog for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and domain registration protections, though DNSSEC is not enabled and no security.txt file is published. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism, technical maturity, and business credibility, with minor recommendations for enhanced DNS security and incident response transparency.

Delhaize is a leading Belgian supermarket chain offering comprehensive online grocery shopping services including home delivery and in-store pickup. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, integrated with advanced marketing and analytics tools like Adobe DTM, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforcement and appropriate security headers, although WHOIS data is unavailable due to registry restrictions, which is common for .be domains. The site maintains good privacy and cookie policies aligned with GDPR requirements. Overall, the platform is professional, user-friendly, and trustworthy, serving a broad consumer base in Belgium.

W

WalletConnect Foundation

walletconnect.com

11

WalletConnect Foundation operates a leading decentralized connectivity layer for the financial internet, enabling seamless interaction between wallets and onchain applications. The platform supports a vast ecosystem including over 700 wallets, 70,000 apps, and millions of users, positioning itself as a critical infrastructure provider in the blockchain and decentralized finance space. Their business model leverages a native token (WCT) for network security, staking, and governance, reflecting a mature decentralized governance approach. Technically, the website is built on modern frameworks such as React and Next.js, hosted on Cloudflare, and integrates analytics and cookie consent tools to ensure compliance and performance. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, WalletConnect presents a professional, trustworthy, and technically sound digital presence with a clear focus on developer and institutional audiences.

ApeCoin is a cryptocurrency token project officially associated with the Bored Ape Yacht Club NFT community. It supports decentralized governance, digital asset marketplaces, and community proposals, targeting Web3 enthusiasts, gamers, and digital artists. The website is well designed, mobile optimized, and uses modern technologies such as React and Next.js hosted on Cloudflare infrastructure. Security posture is strong with HTTPS enforcement, security headers, and a bug bounty program, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partially met with a clear privacy policy and terms of service but lacks a cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the project.

M

MANDARIN

mandarin-medien.de

58

MANDARIN is a German-based one-stop agency specializing in marketing, digital transformation, IT services, and employer branding. The company positions itself as a holistic partner for change and transformation, targeting businesses seeking to improve their digital presence and internal processes. The website showcases a professional design with rich multimedia content, including videos and client references, indicating a mature digital infrastructure. Technically, the site is built on modern frameworks such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms integrated with Google Consent Mode. However, no explicit security policy or incident response information is published, which could be improved. The WHOIS data is privacy protected, common for agencies, and does not raise immediate concerns. Overall, the site reflects a credible and professional digital agency with a solid market presence.

Bored Ape Yacht Club (BAYC) is a leading NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and MAYC collections, providing member login and information about unique intellectual property rights. The business is positioned as a major player in the NFT and blockchain technology space, targeting digital art collectors and crypto enthusiasts. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The site demonstrates excellent design quality, mobile optimization, and user experience. Security posture is strong with HTTPS and domain registration protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

F

Faraway

faraway.com

61

Faraway is a game studio specializing in the development and publishing of open economy games with blockchain and crypto integration. Their portfolio includes titles such as Dookey Dash: Unclogged, Serum City, Legends of the Mara, and Mini Royale: Nations. The company targets gamers interested in Web3 and blockchain gaming, positioning itself in a niche market focused on innovative game economies. The domain registration dating back to 2003 supports a long-standing presence in the industry, although the website content is currently inaccessible due to a client-side application error. Technically, the website employs modern technologies including Next.js and React, hosted behind Cloudflare with tracking integrations such as Google Tag Manager and Cloudflare Insights. However, the site lacks visible security headers and DNSSEC is not enabled, indicating room for improvement in security hardening. The website's performance and mobile optimization are moderate to basic, with limited accessibility and SEO optimization. From a security perspective, the absence of privacy and cookie policies, lack of contact information, and the presence of a client-side error reduce the site's trustworthiness and compliance posture. The domain registration is consistent and legitimate, but the website itself requires remediation to restore full functionality and improve user trust. Overall, the website scores low to moderate on content quality, technical implementation, security posture, and privacy compliance, resulting in an overall AI score of 48. Strategic improvements in error resolution, policy publication, security headers, and contact transparency are recommended to enhance the site's credibility and security.

Y

Yuga Labs

otherside.xyz

47

Otherside.xyz is a web3-enabled metaverse platform developed by Yuga Labs, blending MMORPG mechanics with blockchain technology and NFT integration. The platform targets NFT holders and gamers interested in immersive, interoperable virtual worlds where players own land and characters. The business model leverages ApeCoin as the in-game currency and offers an SDK for creators to build and monetize content. Technically, the site uses modern web frameworks like Next.js and React, with Cloudflare DNS and wallet integrations for user authentication. However, the current website displays a client-side application error, limiting user experience and content accessibility. Security posture is generally good with HTTPS and domain locking, but lacks DNSSEC and security.txt disclosures. Privacy and cookie policies are absent, impacting compliance. Overall, the site is moderately professional but requires fixes to improve user trust and compliance.

The website https://www.snagged.market/loyalty currently serves a 404 error page indicating the requested content is not found. The site uses modern web technologies such as React and Next.js, and integrates third-party services like Stripe and Google Analytics. However, the lack of accessible content, absence of privacy, cookie, and terms policies, and missing contact information significantly limit the ability to assess the business or security posture. The WHOIS data is malformed and does not provide any registrar or registrant details, further reducing trust and transparency. Overall, the site appears incomplete or under development, with minimal digital maturity and poor user experience.

I

Iskon

iskon.hr

54

Iskon.hr is the official website of Iskon, a Croatian telecommunications provider offering fixed internet, television (Iskon.Play TV), and other telecom services for residential and business customers. The website presents a professional and modern design built with React and Next.js frameworks, utilizing Ant Design components. The content is relevant and targeted primarily at Croatian consumers and businesses seeking telecom solutions. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS likely enabled but missing key security headers and no visible incident response or vulnerability disclosure information. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security transparency.

M

Marles Montažne hiše

marles.com

68

Marles Montažne hiše is a Slovenian company specializing in the design and construction of prefabricated low-energy houses, with a long-standing tradition dating back to 1899. The company targets home buyers and construction clients primarily in Slovenia and neighboring countries, offering innovative and energy-efficient housing solutions. Their market position is strong regionally, supported by a professional and multilingual website that reflects their heritage and expertise. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates advanced analytics and marketing tools including HubSpot, Google Tag Manager, and Facebook Pixel. The site demonstrates excellent performance, mobile optimization, and SEO practices, indicating a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a professional and trustworthy front for the business, but the missing domain registration information and limited security disclosures suggest a moderate risk profile. Strategic enhancements in transparency and security governance would strengthen their trustworthiness and compliance posture.

Bored Ape Yacht Club (BAYC) is a prominent NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and its related collections, providing members with login access and information about unique intellectual property rights and benefits. The brand holds a leading position in the NFT space with a large, engaged audience of crypto enthusiasts and digital art collectors. Technically, the website is built on a modern React and Next.js framework, hosted via Cloudflare with robust DNS and SSL configurations. It integrates multiple analytics and marketing tools such as Google Tag Manager and Plausible Analytics, ensuring good performance and mobile optimization. The site demonstrates excellent design quality, clear navigation, and consistent branding, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and explicit security headers. There is no visible incident response or vulnerability disclosure policy, and cookie consent mechanisms are absent despite tracking scripts. These gaps suggest room for improvement in compliance and security transparency. Overall, the website is trustworthy and professional, with strong business credibility and technical maturity. Strategic enhancements in privacy compliance, security policies, and DNS security would further strengthen its posture and user trust.

APECHAIN is a blockchain technology platform that serves as a hub for decentralized applications, NFT marketplaces, gaming, and DeFi services on the ApeChain blockchain. It offers a diverse ecosystem including developer tools, bridges, and swap services, targeting web3 developers, gamers, and NFT enthusiasts. The platform integrates multiple partner applications, enhancing its market position as a comprehensive web3 ecosystem. Technically, the website is built using modern web technologies such as React and Next.js, hosted on Cloudflare with Contentful CMS for content management. The site demonstrates good performance and mobile optimization, with proper security headers and HTTPS enforcement. However, there is room for improvement in accessibility and SEO features. From a security perspective, the site employs strong HTTPS and security headers, but lacks DNSSEC and a public vulnerability disclosure policy. No privacy or cookie policies were found, indicating compliance gaps. Contact information is not explicitly provided, which may affect user trust and incident response readiness. Overall, the website is professional and functional with a moderate security posture. Strategic improvements in privacy compliance, security transparency, and user contact channels are recommended to enhance trust and regulatory adherence.

W

Wind Service Offshore GmbH

predixxion.com

11

Predixxion is a specialized AI-powered platform focused on optimizing wind farm performance through predictive analytics and machine learning. The company, operating under Wind Service Offshore GmbH, offers advanced solutions for risk-based operations and maintenance management, targeting wind farm owners and operators. Their platform enhances turbine uptime, reduces costs, and extends asset lifetimes, positioning them as an innovative player in the renewable energy sector. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on Vercel, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The missing WHOIS registration data is a notable concern but does not detract significantly from the overall trustworthiness given the professional presentation and business transparency. Strategic recommendations include publishing detailed security and incident response policies and verifying domain registration details to enhance trust.

A

ATG Entertainment

atgentertainment.de

70

ATG Entertainment is a globally recognized leader in live theater entertainment, producing musicals and shows, operating theaters, and organizing tours primarily in Germany. The company boasts a large scale operation with over 18 million visitors annually and 72 theaters worldwide. Their digital presence is modern and professional, leveraging Next.js and Vercel hosting, with strong mobile optimization and accessibility. Security posture is solid with HTTPS, Cloudflare DNS, and comprehensive cookie consent management via Cookiebot, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with GDPR-aligned cookie management and privacy policy. Overall, the website reflects a mature and trustworthy entertainment business with room for enhanced transparency in security and contact information.

D

Deutsche Postcode Lotterie

deutschepostcode-lotterie.de

70

The Deutsche Postcode Lotterie operates a socially responsible lottery platform in Germany, allowing participants to win prizes based on their postal codes. The website is professionally designed, mobile-optimized, and provides comprehensive information about participation, prizes, and social impact. The platform is TÜV Saarland certified and regulated by the German gambling authority, enhancing its trustworthiness. Technically, the site uses modern frameworks such as Next.js and Storyblok CMS, hosted on Vercel, ensuring fast performance and good accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a consent management platform. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, the site presents a trustworthy and professional digital presence for a large non-profit lottery business.

E

EnerCo Solutions

enercosolutions.cz

10

EnerCo Solutions is a Czech-based company specializing in the development of advanced software solutions leveraging machine learning algorithms to optimize community energy systems and enhance the efficiency of renewable energy sources. Founded in 2023, the company targets businesses, apartment buildings, and municipalities with tailored energy optimization services and a proprietary software product named EnerCa. Their market position is that of a niche provider focused on community energy optimization, supported by a network of industry partners. Technically, the website is built on a modern React and Next.js stack, hosted likely with Wedos, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the company presents a professional and trustworthy digital presence with clear contact channels and partner affiliations.

Silicagame.com is the official website for Silica, a sci-fi hybrid RTS/FPS game developed under Bohemia Interactive's incubator program. The site targets gamers interested in immersive strategy and shooter experiences, offering digital sales via Steam and Bohemia Store. The website is built on modern web technologies including Next.js and React, with integrations for analytics and marketing tools such as Google Analytics, Microsoft Clarity, Matomo, and CookieHub for cookie consent management. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site is safe for general audiences with no adult content detected.

A

ARKANCE USA

arkance.us

70

ARKANCE USA is a technology and consulting company specializing in providing software solutions, training, and professional services to the Architecture, Engineering, and Construction (AEC) industry. They position themselves as a trusted partner delivering digital transformation through global expertise combined with local presence. Their offerings include Autodesk, Bluebeam, and FM software solutions, BIM services, consulting, and support contracts. The company serves a broad audience including architects, engineers, contractors, government agencies, and facilities managers. Technically, the website is built on modern frameworks like Next.js and React, with integrations for marketing and analytics tools such as Marketo, LinkedIn Insight, and Google Tag Manager. The site is well-optimized for performance, mobile, and SEO, with strong branding and professional content. Security posture is strong with HTTPS and security headers, though some policy pages like incident response are missing. WHOIS data is not publicly available, likely due to privacy protection, which is justified for this business type. Overall, the website reflects a mature, credible business with a solid digital presence and good security hygiene.

K

Kubota Canada Ltd.

kubota.ca

72

Kubota Canada Ltd. is a well-established manufacturer and distributor of agricultural and construction equipment in Canada, serving farmers, construction professionals, and landscaping businesses. The website presents a professional and consistent brand image, offering a comprehensive range of products including farm equipment, construction machinery, mowers, and UTVs. The company provides financing options, promotions, and a dealer locator service to support its customers. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager and Facebook Pixel. Hosting is provided by Primus, and the site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, security headers, and error monitoring, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent management. Overall, the website is trustworthy, safe, and professionally maintained, reflecting the company's large-scale operations and market presence in Canada.

OVER HOLDING S.R.L. operates the website overthereality.ai, a leading global platform specializing in 3D mapping datasets and spatial intelligence technologies. The company provides advanced AI-powered services including Large Geospatial Models, Visual Positioning System (VPS) for robotic navigation, and Generative AR content creation tools. Their platform targets developers, enterprises, and creators in the augmented reality and robotics sectors, positioning itself as a pioneer in Physical AI and spatial computing. The business model leverages digital land ownership, token incentives, and a comprehensive ecosystem of tools and marketplaces to drive engagement and revenue.

M

MemeCore

memecore.com

59

MemeCore operates as a niche blockchain platform specializing in meme coins and decentralized applications, targeting crypto enthusiasts and meme communities. The website presents a modern, playful branding with a focus on connecting creators and communities through its Layer 1 blockchain. The technical infrastructure leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, with integrated analytics tools such as Google Tag Manager and Hotjar. While the site is accessible and well-structured, it lacks critical privacy and security policy disclosures, as well as contact information, which impacts its overall trustworthiness and compliance posture. Security practices are basic, with HTTPS enabled but missing DNSSEC and security headers, and no published incident response or vulnerability disclosure information. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

F

Fiqus

farox.coop

46

Farox is a cooperative software development company based in Argentina, specializing in professional services related to Data Science, Machine Learning, high concurrency systems, and full-stack development. The company positions itself as a tech leader in the cooperative sector with over a decade of experience. Their website showcases key services such as product development, software consultancy, and team extension, targeting businesses seeking expert technology partners. The digital infrastructure is modern, leveraging React and Next.js frameworks hosted on AWS, with a professional and mobile-optimized website design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is limited due to absence of explicit policies and consent mechanisms. Overall, the website is trustworthy and professional, though improvements in privacy and security disclosures are recommended.

P

Piton Labs

pitonlabs.com

55

Piton Labs is a technology-focused startup development agency founded in 2021, specializing in helping early-stage companies and entrepreneurs rapidly build and launch MVPs. Their services include product strategy, expert software development, and team assembly to ensure long-term success. The website reflects a professional and consistent brand with clear messaging targeted at startups seeking reliable development partners. Technically, the site uses modern frameworks such as Next.js and React, with Tailwind CSS for styling, indicating a contemporary and maintainable tech stack. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is implied, but no security headers or DNSSEC are enabled, and no explicit security or privacy policies are published, which are areas for improvement. The domain registration is consistent with the business profile, showing legitimacy and no suspicious patterns. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

M

Mubs Inc

mubs.inc

64

Mubs Inc is a small digital product studio founded in 2021 and operated by Mubashar Iqbal, focusing on AI, web3, and blockchain product development. The website presents a professional and modern design built on Next.js and React, optimized for mobile and fast loading. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide contact information, which limits trust and transparency. The domain is privacy protected but registered with a reputable registrar, consistent with a small technology business. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is safe and suitable for a general audience with no adult content.