Security Directory

C

ChitChat

union54.com

0

ChitChat is a fintech company offering a unique combination of instant messaging integrated with USD wallets and Mastercard debit cards, targeting users who need seamless communication and financial services globally. The platform supports group wallets, global remittances to multiple countries, and offers tiered subscription plans to cater to different user needs. The company is licensed by the Bank of Zambia and issues Mastercard debit cards through Union Fiftyfour Limited, ensuring regulatory compliance and trust. Technically, the website is built on a modern React and Next.js stack, hosted on Amazon AWS, and uses Prismic CMS for content management. The site is well-optimized for mobile devices, has good SEO practices, and integrates Google Tag Manager for analytics. The design is professional and consistent, providing a smooth user experience. From a security perspective, the site enforces HTTPS, uses appropriate domain status locks, and implements standard security headers. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published security policy, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, ChitChat presents a credible and professional fintech service with strong business and technical foundations. Strategic improvements in privacy compliance and security transparency would further enhance trust and regulatory adherence.

T

The Zambian Observer

zambianobserver.com

0

The Zambian Observer is a regional news media website focused on delivering the latest news from Zambia and around the world. Established in 2015, it operates on a WordPress platform hosted by InMotion Hosting and leverages popular advertising and analytics tools such as Google AdSense, Google Analytics, Taboola, and Criteo. The site targets a general audience interested in news and current affairs, providing content primarily in English. The business model centers on online news publishing with revenue generated through advertising networks. The website demonstrates good content quality, consistent branding, and a professional design optimized for mobile devices.

B

BitTorrent Chain

bt.io

0

BitTorrent Chain (BTTC) operates as a leading blockchain scaling and interoperability platform, enabling cross-chain asset transfers and providing a scalable infrastructure for Web3 developers. The platform offers a suite of services including staking, governance, developer tools, and bridges to other blockchains, positioning itself as a key player in the blockchain ecosystem. The website reflects a mature and professional digital presence with consistent branding and a focus on developer engagement. Technically, the site employs modern frameworks such as React and Ant Design, hosted via Cloudflare, and integrates analytics through Google Tag Manager. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not activated and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies, and no contact information is provided for incident response or general inquiries. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and compliance documentation.

M

Macromedia, Inc.

sun.io

0

SUN.io is a decentralized finance (DeFi) platform operating on the Tron blockchain, offering services such as token swapping, yield farming, staking, liquidity mining, and governance. The platform positions itself as a leading DeFi protocol on Tron, targeting cryptocurrency users interested in decentralized financial products and governance participation. The website is professionally designed using modern web technologies including React and Ant Design, and is optimized for mobile devices. It integrates Google Analytics and Google Tag Manager for user behavior tracking. Security-wise, the site enforces HTTPS and uses Cloudflare DNS with domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is minimal, with no direct emails or phone numbers found. Overall, the platform appears credible with a mature domain age and consistent business information, though improvements in security transparency and privacy compliance are recommended.

A

APENFT

apenft.io

0

APENFT is a blockchain-based NFT marketplace focused on connecting creative artists and collectors primarily within the Tron ecosystem. The platform offers NFT creation, trading, and decentralized storage services leveraging BTFS technology. The website presents a professional and consistent brand image with clear navigation and relevant content targeting crypto art enthusiasts and NFT collectors globally. Technically, the site is built on React with Material-UI components, hosted on AWS infrastructure, and integrates Google Analytics for user tracking. While the site uses HTTPS and has domain transfer protections, it lacks DNSSEC and important security headers, which could be improved to enhance security posture. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy.