Security Directory

Ford Motor Company is a globally recognized American multinational automaker with a significant presence in Europe, as evidenced by the ford.eu website. The site serves as a country selection portal directing users to localized Ford websites across many European countries. The business model focuses on manufacturing and selling automobiles, supported by localized digital experiences tailored to regional markets. The company is well-established, founded in 1903, and operates at an enterprise scale with a strong brand identity and consistent digital branding across its European web presence. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and Akamai CDN services to ensure fast, reliable, and scalable delivery. The site is mobile optimized and incorporates performance monitoring tools such as Adobe DTM and Akamai Boomerang. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident, and no public security or incident response policies are published. The absence of WHOIS data is due to EURid privacy policies for .eu domains, but the domain usage and content strongly indicate legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and security posture. Strategic improvements could include publishing security policies, adding security headers, and providing direct contact information for security incidents to enhance trust and compliance.

The website www.ford.ch serves as the official localized landing page for Ford in Switzerland, primarily offering language selection options for German, French, and Italian users. It represents a major global automotive brand with a strong market presence and consistent branding. The site is built on modern web technologies including Adobe Experience Manager CMS and integrates advanced performance and analytics tools such as Akamai service workers and Adobe Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and privacy policies are absent on this landing page. The absence of privacy and cookie policies, as well as contact information, limits compliance and user trust aspects. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

B

Boll & Branch

bollandbranch.com

73

Boll & Branch is a premium e-commerce retailer specializing in luxury organic bedding, sheets, towels, and home textiles. The company emphasizes ethical sourcing, sustainability, and Fair Trade certification, targeting consumers who value high-quality, toxin-free organic cotton products. Their market position is that of a trusted, upscale brand in the organic bedding sector, with a direct-to-consumer business model leveraging Shopify's platform for online sales. Technically, the website is built on Shopify with modern frameworks and technologies such as React and Oxygen, ensuring fast performance, mobile responsiveness, and good SEO practices. The site includes comprehensive privacy and cookie policies with GDPR compliance and uses marketing and analytics tools like AB Tasty and OneTrust for consent management and user experience optimization. From a security perspective, the site enforces HTTPS, employs strong security headers, and avoids exposing sensitive data. However, it lacks publicly available incident response or vulnerability disclosure information, which could be improved to enhance trust. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Overall, Boll & Branch presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing security policies and incident response contacts and addressing the WHOIS data gap to improve transparency and trust.

L

Lunchgate AG

lunchgate.ch

47

Lunchgate AG operates a Swiss-focused online platform for discovering restaurants, cafés, and bars, offering users the ability to search by location, cuisine, and make online reservations. The website is professionally designed, primarily in German, and targets a general audience interested in dining options within Switzerland. The platform integrates partner services such as Foratable for reservation management and uses a consent management platform to comply with privacy regulations. Technically, the site uses modern web technologies including AngularJS and JavaScript, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though security headers and explicit security policies are absent. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the site is trustworthy and well-positioned in the hospitality sector.

Bank CIC (Schweiz) AG is a Swiss banking institution serving entrepreneurs and private individuals with complex financial needs. The website presents a professional image with a clear focus on investment, financing, corporate finance, and private banking services. The bank positions itself as a trusted partner offering tailored financial solutions supported by Swiss tradition and corporate governance. The digital infrastructure is modern, leveraging Magnolia CMS and JavaScript frameworks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a credible and trustworthy financial institution with a strong market presence in Switzerland.

AnyBrowser.org is a personal and advocacy website managed by Cari D. Burstein, hosting multiple small sites including a campaign promoting accessible web design and various archived gaming and community sites. The website targets general internet users interested in accessible web design and niche gaming communities. The business model is primarily personal and hobbyist with no evident commercial intent. The domain is well-established, having been registered since 1997, which supports the site's long-term presence and credibility. Technically, the website uses basic HTML, CSS, and JavaScript technologies, including Google Analytics for visitor tracking. It is hosted by DreamHost, LLC, a reputable hosting provider. The site shows moderate performance and basic mobile optimization, with good accessibility features. However, it lacks modern security headers and DNSSEC, which could improve its security posture. From a security perspective, the site uses HTTPS (implied by the domain and hosting provider but not explicitly confirmed in the data), but no advanced security headers are present. There is no evidence of privacy or cookie policies, GDPR compliance, or vulnerability disclosure mechanisms. The use of Google Analytics without a cookie consent mechanism indicates limited privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is safe for general audiences, with no adult or questionable content. The risk level is low, but improvements in privacy compliance, security headers, and DNS security are recommended to enhance trust and protection.

S

sourcehut hub

sr.ht

57

sourcehut is a technology platform focused on providing open source project hosting and collaboration tools, targeting developers and hackers. The website presents a clean, professional interface with featured projects and clear navigation, positioning itself as a niche player in the open source development ecosystem. The domain is well-established since 2015 and registered with a reputable registrar, indicating a mature and legitimate operation. Technically, the website uses standard web technologies such as HTML5, CSS3, and SVG for graphics. The hosting provider is 1API GmbH, consistent with the domain registration location. The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS indications. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks published privacy, cookie, or security policies and does not implement DNSSEC or security headers. No vulnerability disclosure or incident response information is available. The absence of these elements reduces the overall security posture and privacy compliance. However, no WAF or blocking mechanisms were detected, and the site content is safe and appropriate for general audiences. Overall, sourcehut presents a credible and professional platform for open source developers but would benefit from enhanced security practices, privacy compliance, and transparency regarding policies and contact information to improve trust and compliance.

The website romanzolotarev.com is a personal portfolio site belonging to Roman Zolotarev, focusing on TypeScript programming and shell scripting. It serves a niche audience of developers and technical enthusiasts. The site is minimalistic with basic content and limited navigation, reflecting a personal blog or hobbyist site rather than a commercial business. The domain is well-established since 2008, indicating a stable online presence. Technically, the site uses simple HTML and CSS without any detected CMS or frameworks. There is no evidence of advanced analytics, advertising, or tracking technologies. The site appears fast and mobile-optimized at a basic level but lacks SEO optimization and accessibility features. Security measures such as DNSSEC and security headers are absent, and no HTTPS status was provided, which should be verified. From a security perspective, the site has a low security posture with no privacy or cookie policies, no incident response or security policy disclosures, and no contact information for security or general inquiries. The domain registration is consistent and legitimate, but the lack of security best practices and compliance documentation limits trustworthiness. Overall, the site is low risk due to its personal nature and minimal data collection but would benefit from improved security practices, privacy compliance, and contact transparency to enhance credibility and user trust.

E

EuroBSD Foundation

eurobsdconfoundation.org

70

The EuroBSD Foundation operates as a small non-profit organization dedicated to supporting and organizing the annual EuroBSDCon conference, which focuses on BSD operating systems and related open source technologies. The foundation provides organizational support, travel grants, and resources to conference committees, targeting BSD developers and enthusiasts worldwide. The website reflects a niche community-driven entity with a clear mission and consistent branding. Technically, the website is simple and built with basic HTML and CSS without reliance on complex frameworks or CMS platforms. It is hosted under a reputable registrar with a stable domain age since 2012. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the domain benefits from clientTransferProhibited status but lacks DNSSEC and security headers, which are recommended to enhance domain and site security. The absence of privacy and cookie policies, as well as incident response information, highlights compliance gaps, particularly regarding GDPR and data protection best practices. No forms or scripts pose immediate vulnerabilities, but security posture can be improved. Overall, the website is trustworthy and professional for its purpose but would benefit from enhanced security measures and privacy compliance documentation. Strategic improvements in these areas will strengthen user trust and regulatory adherence.

T

Tarsnap

tarsnap.com

60

Tarsnap is a specialized online backup service targeting security-conscious users who operate UNIX-like systems. The company emphasizes client-side encryption, data deduplication, and transparency through open source client software. Their business model is prepaid and usage-based, charging customers only for storage and bandwidth consumed. The website content is professional and focused on technical details, with clear explanations of service benefits and recent software updates. Technically, the website is simple and efficient, using standard HTML5 and CSS without heavy frameworks or analytics scripts. The site is fast and has basic mobile optimization, though accessibility features could be improved. No CMS or hosting provider details are evident. The lack of privacy and cookie policies, as well as absence of contact information, are notable gaps. Security-wise, Tarsnap demonstrates strong principles by enforcing client-side encryption and providing open source code for auditability. A bug bounty program is present, indicating proactive vulnerability management. However, the absence of security headers and unclear SSL configuration are areas for improvement. The missing WHOIS data reduces domain trust but does not contradict the professional nature of the site. Overall, Tarsnap presents a trustworthy and technically sound service for a niche market. Strategic improvements in privacy compliance, contact transparency, and security headers would enhance their security posture and user trust.

T

The NetBSD Foundation, Inc.

netbsd.org

53

The NetBSD Project is a well-established open source initiative focused on providing a free, secure, and highly portable Unix-like operating system. Founded in 1994, the project targets a technical audience including developers, system administrators, and embedded system engineers. The project operates on a donation-supported model and maintains a strong community presence with clear documentation and development resources. The website reflects this with professional, consistent branding and a clear focus on technical content and community engagement. Technically, the website uses a straightforward HTML and CSS stack with no detected CMS or heavy frameworks, indicating a lightweight and stable infrastructure. Hosting and content delivery appear to be managed via reputable providers, including a CDN. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and good navigation clarity. From a security perspective, the site employs HTTPS and domain transfer protection, and provides signed release hashes and a PGP key for security communications, demonstrating good security hygiene. However, the absence of DNSSEC, security headers, and a comprehensive privacy policy with GDPR compliance reduces the overall security posture. No WAF or blocking mechanisms are detected, and no vulnerabilities or exposed sensitive data were found in the analysis. Overall, the NetBSD website is a credible, professional, and secure platform for its community and users. Strategic improvements in privacy compliance, DNS security, and security headers would further enhance trust and protection. The site is safe for general audiences and maintains a high level of business credibility and technical maturity.

N

Dobro došli na N1

n1info.com

46

N1info.com is a regional news portal serving multiple countries in the Balkans, including Serbia, Croatia, Bosnia and Herzegovina, and Slovenia. The website acts as a landing page directing users to localized news portals for each country. The business operates in the media sector with a focus on regional news delivery. The domain was registered in 2013, indicating an established presence in the market. Technically, the website uses standard HTML5 and CSS3 with Google Fonts for typography. The site is mobile responsive and provides a clean, user-friendly interface. Hosting and DNS are managed via Cloudflare, but DNSSEC is not enabled, and Google Fonts are loaded over HTTP, which could be improved for security. No advanced frameworks or CMS are detected from the provided data. From a security perspective, the website lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance given the European audience. No contact or incident response information is available on the landing page, limiting transparency and user trust. The domain registration is consistent and stable, with prohibitive domain statuses that protect against unauthorized changes. Overall, the website is functional and professionally designed but could benefit from enhanced security practices, privacy compliance measures, and more transparent contact information to improve trust and regulatory adherence.

S

Sambic AD

sambic.me

49

Sambic AD is a Montenegro-based real estate and hospitality company specializing in high-quality residential construction and property management. As a subsidiary of Savana AB, it benefits from a solid parent company backing and has a medium-sized workforce. The company has invested significantly in hotels and commercial properties, establishing a strong market presence in Montenegro. The website reflects a professional image with clear business information and contact details, targeting investors and clients in the real estate and hospitality sectors. Technically, the website uses modern web technologies including JavaScript libraries and Google reCAPTCHA for form security, but lacks some advanced security headers and privacy compliance features. The security posture is generally good with HTTPS enforced, but could be improved by adding security headers and formal privacy and cookie policies. Overall, the site is safe, trustworthy, and well-structured, though it would benefit from enhanced compliance and security best practices.

T

tfy-consult

tfy-consult.ch

53

tfy-consult is a Swiss consulting firm specializing in helping small and medium-sized enterprises (KMUs) in the energy sector maximize their operational and strategic potential. Their core offering includes a unique KMU-Checkup designed to optimize management efficiency, data-driven decision making, and communication. The company positions itself as a trusted advisor to hidden champions within the Swiss economy, focusing on overcoming common challenges faced by KMUs. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a responsive, professional user experience. Security is well implemented with HTTPS and HSTS, but the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Overall, the site reflects a credible business with room for improvement in privacy compliance and contact transparency.

C

Canonical Ltd

microstack.run

73

Canonical Ltd operates the website canonical.com/openstack, offering enterprise-grade private cloud solutions based on OpenStack technology. The company is well-established with a domain age dating back to 1996 and a strong market presence evidenced by over 10 years in the market and 500+ clouds in production. Their business model focuses on providing open source cloud infrastructure software, consulting, and support services to enterprises seeking control, compliance, and flexibility in their cloud deployments. The website is professionally designed with clear navigation and comprehensive content targeting IT professionals and enterprises interested in private cloud and AI/ML workloads. Technically, the site uses modern web technologies including lazy loading scripts and optimized fonts, with good mobile responsiveness and accessibility. Security posture is solid with HTTPS usage and no exposed sensitive data, though explicit security headers and policies are not evident. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness but could improve transparency around privacy and security policies.

C

Canonical Ltd

mir-server.io

74

Canonical Ltd operates the website canonical.com/mir, promoting Mir, a fast, open, and secure display server designed for Linux-powered devices including desktops, IoT, and embedded products. The company holds a strong market position as a leading provider of Linux-based operating systems and infrastructure solutions, with a focus on enterprise and cloud markets. The website content is professionally crafted, targeting developers, device makers, and enterprises seeking modern graphical environments. Technically, the site employs modern web technologies, responsive design, and efficient performance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and domain registration protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website demonstrates high business credibility and trustworthiness, aligned with Canonical's established brand.

L

Linux Containers

linuxcontainers.org

48

linuxcontainers.org is an established open source umbrella project founded in 2013 that provides a suite of Linux container and virtualization tools including Incus, LXC, LXCFS, and Distrobuilder. The project targets developers, system administrators, and cloud infrastructure professionals seeking flexible, vendor-neutral container solutions. The website presents comprehensive information about active and deprecated projects, community resources, and documentation links, reflecting a mature and well-maintained ecosystem. Technically, the site uses modern web technologies such as HTML5, CSS3 with the Vanilla Framework, and JavaScript libraries like jQuery, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS usage implied, but lacks DNSSEC and explicit security headers. Privacy and compliance documentation such as privacy policy and cookie consent are absent, indicating room for improvement in GDPR compliance. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the project.

N

N1

n1info.si

50

N1 Slovenija is a well-established independent news portal founded in 2014, serving the Slovenian-speaking audience with up-to-date news, in-depth stories, interviews, and analyses. It operates as part of a regional network with sister sites in Serbia, Croatia, and Bosnia and Herzegovina, and maintains a partnership with CNN, enhancing its credibility and content quality. The portal offers diverse content including sports, podcasts, video, and magazine sections, targeting a broad general audience interested in current affairs and media content. Technically, the website leverages modern web technologies such as Cloudflare CDN for performance and security, OneSignal for push notifications, Google Tag Manager for analytics, and OneTrust for cookie consent management. The CMS appears to be Wagtail, a modern Python-based CMS, supporting good content management practices. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection. Cookie consent and privacy policies are implemented in compliance with GDPR. While explicit security headers are not fully confirmed, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. No WAF or blocking mechanisms interfere with content access. Overall, N1 Slovenija presents a trustworthy, professional, and user-friendly news portal with solid technical infrastructure and compliance with privacy regulations. Strategic recommendations include enhancing security headers, improving accessibility, and continuous monitoring of third-party scripts to maintain security and compliance.

O

O'Reilly Media, Inc.

oreillynet.com

81

O'Reilly Media, Inc. is a well-established technology and business training company founded in 1978. It offers a comprehensive online learning platform that empowers professionals, teams, enterprises, academic institutions, and government organizations to acquire in-demand skills in technology and business domains. The company leverages AI and machine learning to personalize learning experiences and maintains a strong market position with a broad content offering and expert community. Technically, the website employs modern web technologies including Google Tag Manager, Visual Website Optimizer, and jQuery, and supports mobile platforms via dedicated iOS and Android apps. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the website is professional, well-branded, and trustworthy, with no signs of blocking or suspicious activity.

E

EuroBSDCon Foundation

eurobsdcon.org

70

EuroBSDCon 2026 is a niche technology conference organized by the EuroBSDCon Foundation, focusing on BSD operating systems and related open source technologies. The event is scheduled to take place in Brussels, Belgium, targeting developers, users, and enthusiasts within the BSD community. The website serves as an informational portal providing event dates, committee members, sponsorship information, and travel grant details. The business model is non-profit and community-driven, emphasizing collaboration and knowledge sharing within a specialized technology sector. Technically, the website is a static site generated using ssg6, employing standard HTML and CSS without dynamic content or complex frameworks. The site is moderately optimized for mobile devices and offers clear navigation and relevant content. However, there is no evidence of advanced SEO or accessibility features, and no hosting or CMS details are discernible. Performance is expected to be moderate given the static nature. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable due to a malformed query response, limiting domain registration transparency. No HTTPS status or SSL configuration details were provided, which is a critical gap. No tracking or advertising scripts were detected, indicating minimal user data collection. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate; the site is legitimate and professional but lacks some compliance and security features expected for modern web presence. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving WHOIS transparency. These steps will enhance trust, compliance, and security culture for the EuroBSDCon community website.

O

O'Reilly Media

oreilly.com

81

O'Reilly Media is a well-established technology and business training company founded in 1978, offering a comprehensive online learning platform that serves professionals, teams, enterprises, academic institutions, and government organizations globally. The company leverages a rich community of expert practitioners and nearly 200 content providers to deliver diverse, high-quality educational resources across technology and business domains. Their platform integrates AI and machine learning to personalize learning experiences, supporting career growth and productivity. Technically, the website employs modern web technologies including Google Tag Manager and Visual Website Optimizer for analytics and marketing optimization, with mobile apps available on major platforms. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness despite strong branding and contact information. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in privacy compliance and security transparency.

The website sourceforge.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the actual content. SourceForge is a well-known software development platform with a long-established domain registered since 1999. The provided HTML content contains no business information, contact details, or policy documents, limiting the ability to perform a full security and compliance analysis. The technical infrastructure includes Cloudflare security services, but no further technology stack details or CMS information are available. Security posture cannot be fully assessed due to the blocked content, but the domain registration data indicates a legitimate and well-managed domain. Overall, the site is rated low in content quality and user experience due to inaccessibility, but the domain trustworthiness is high.

T

The PostgreSQL Global Development Group

postgresql.org

66

The PostgreSQL website represents the official online presence of The PostgreSQL Global Development Group, a large and well-established open source community focused on developing and maintaining one of the world's most advanced open source relational database systems. The site provides comprehensive resources including downloads, documentation, community engagement, and event information, targeting developers, database administrators, and organizations seeking robust database solutions. The business model centers on open source software development supported by a global community, with a strong market position as a leading database technology. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO and accessibility practices, and it loads quickly. Security is robust with HTTPS enforced and secure form handling, although explicit security headers are not visible in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. From a security perspective, the site demonstrates good practices including encrypted connections and no exposed sensitive data. However, the absence of explicit security headers and incident response contact details are areas for improvement. The WHOIS data is unavailable due to a malformed query response, limiting domain registration insights, but the website's content and branding strongly support its legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for enhancement in privacy compliance and security transparency. The risk level is low, and the site effectively supports its community and business objectives.

B

BSDCan

bsdcan.org

51

BSDCan is a well-established technical conference focused on BSD Unix systems, held annually in Ottawa, Canada. It serves a niche but important community of BSD developers, administrators, and users, positioning itself as North America's largest BSD conference. The website provides comprehensive information about the upcoming 2026 event, including dates, location, social events, call for papers, and sponsorship opportunities. The business model revolves around event organization, sponsorship, and community engagement. Technically, the website uses standard HTML5, CSS, and JavaScript with a clean and accessible design. It is mobile-optimized and provides good navigation and content relevance. However, there is no evidence of advanced frameworks or CMS usage, and hosting details are not disclosed. Performance is moderate with no detected tracking or advertising scripts, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the provided data, which suggests room for improvement. The WHOIS data is unavailable due to a malformed query response, limiting domain registration transparency. No forms collect sensitive data, and no vulnerabilities were detected in the content. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, BSDCan's website is professional, trustworthy, and safe for general audiences. The main risks relate to incomplete WHOIS data and limited visible security controls. Strategic improvements in security headers, HTTPS enforcement, and privacy compliance would enhance trust and resilience.

L

La Française

la-francaise.com

74

La Française is a large, professional asset management group based in France, offering a broad range of investment solutions including equity, fixed income, diversified, alternative, and real estate management. The company operates multiple subsidiaries and is part of the Crédit Mutuel Alliance Fédérale asset management division. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting institutional investors, distributors, and individual clients. Technically, the site uses modern web technologies and provides a responsive experience, though accessibility compliance is basic. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed incident response contacts. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trustworthiness.

T

Tolomeo Capital AG

tolomeo-capital.com

59

Tolomeo Capital AG is a Swiss-based systematic asset management firm specializing in quantitative, technology-driven investing strategies. Founded in 2011, the company manages its own fund with a fully audited track record since 2012 and holds a license from the Swiss Financial Market Supervisory Authority (FINMA). Positioned uniquely between high-frequency and long-term asset managers, Tolomeo leverages scientific and technological expertise to deliver market-neutral, uncorrelated returns to professional and institutional investors. Their offerings include proprietary funds, systematic investment strategies, advisory services, and risk management tools.

F

FINANZ

finanz-ch.ch

65

FINANZ is a leading B2B event organizer in the Swiss financial industry, hosting a major congress featuring around 100 expert lectures, panels, and roundtables on current financial topics. The event provides a platform for professional networking and knowledge exchange in an exclusive atmosphere. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image. Technical infrastructure is modern and supports mobile optimization, though SEO and accessibility could be improved. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

L

LOUIS INTERNET

louis.info

71

LOUIS INTERNET is a German digital agency specializing in TYPO3-based corporate websites and online shops, with over 20 years of experience and a client base exceeding 140 customers. The company offers comprehensive digital solutions including web development, e-commerce, SEO, and SEA services, targeting businesses seeking tailored digital experiences. Their website reflects a professional and modern digital presence, emphasizing strategic, technological, and creative expertise. Technically, the site is built on TYPO3 CMS, employs modern JavaScript and CSS, and integrates advanced analytics tools such as Google Analytics 4, Matomo, and Microsoft Clarity, demonstrating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data, though it lacks some advanced security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, with room for improvement in explicit security disclosures and header configurations.

A

AITO Ukraine

aitoukraine.org

53

AITO Ukraine is a small non-profit organization based in Kyiv, Ukraine, focused on community engagement and information dissemination. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The site presents basic content with consistent branding and moderate technical maturity. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks important security headers and formal privacy or cookie policies. WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the website is functional and safe but requires improvements in privacy compliance and contact transparency to enhance trust and security.

The Fedora Infrastructure Status website serves as an official status page for the Fedora Project's infrastructure, providing real-time updates on outages and operational status. Sponsored by Red Hat, it targets Fedora Linux users and contributors, offering transparency and communication about infrastructure health. The site is well-branded and consistent with Fedora's open source community ethos. Technically, the site uses modern web standards including HTML5, Bootstrap CSS framework, and Font Awesome icons. It is mobile-optimized and provides a clean, navigable interface. However, it lacks advanced security headers and explicit privacy or cookie consent mechanisms. No forms or data collection points are present, reducing attack surface but also limiting user interaction. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The absence of WHOIS data due to a malformed query limits domain trust signals, but the domain's association with Fedora and Red Hat strongly supports legitimacy. No vulnerabilities or malicious content were detected. Privacy compliance is partially met through linked legal documentation, though cookie consent is missing. Overall, the site presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy notices, and WHOIS transparency would enhance trust and compliance.

F

Fight Chat Control

fightchatcontrol.eu

57

Fight Chat Control is a citizen-led advocacy platform focused on opposing the EU's Chat Control proposal, which mandates scanning of all private digital communications including encrypted messages and photos. The website serves as an informational resource and a tool for EU citizens to contact their representatives to protect digital privacy and encryption rights. The platform positions itself as a non-profit entity advocating for fundamental privacy rights within the European Union. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, without reliance on a CMS or complex frameworks. The site is mobile-optimized and accessible, with a clear navigation structure and multilingual support. However, there is no evidence of advanced analytics, tracking, or advertising technologies, reflecting a privacy-conscious design. From a security perspective, the site lacks explicit security headers and published security policies or incident response contacts. No cookie consent mechanism is present, which may impact compliance with EU regulations. The absence of contact information and vulnerability disclosure policies limits transparency. Nevertheless, the site is served over HTTPS and does not exhibit signs of WAF blocking or malicious content. Overall, the website presents a low-risk profile with a focus on advocacy and information dissemination. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and providing clear contact information to improve trust and compliance.

T

The FreeBSD Project

freebsd.org

67

The FreeBSD Project is a well-established open source operating system initiative powering servers, desktops, and embedded platforms globally. With over thirty years of continuous development by a large community, it holds a strong market position in the technology sector, particularly among developers and system administrators. The project is supported by the FreeBSD Foundation, which facilitates funding and community engagement. The website reflects a mature digital presence with comprehensive documentation, community resources, and regular security advisories. Technically, the site is built using modern static site generation (Hugo), employs HTTPS, and uses minimal tracking analytics, indicating a privacy-conscious approach. Security posture is strong with no visible vulnerabilities, though some security headers could be added to enhance protection. The absence of WHOIS data limits domain registration trust verification but does not detract from the evident legitimacy and professionalism of the project. Overall, the FreeBSD website demonstrates high quality, trustworthiness, and a strong community focus.

C

Codeberg e.V.

codeberg.org

59

Codeberg e.V. operates a non-profit, community-driven platform providing free Git hosting and related services to support free and open source software projects. Founded in 2018 and based in Berlin, Germany, Codeberg positions itself as a privacy-respecting alternative to commercial code hosting platforms, emphasizing no tracking, no third-party cookies, and user data protection. The platform is powered by Forgejo, a fork of Gitea, with custom modifications to suit community needs. Technically, the website demonstrates a modern and performant infrastructure using open source technologies such as Forgejo, JavaScript, and SVG graphics. The site is mobile optimized, accessible, and SEO friendly, with fast load times and a clean design. The domain registration is consistent with the organization's history and location, and the site uses HTTPS with a valid SSL configuration. However, DNSSEC is not enabled, and some security headers are missing, which could be improved. From a security perspective, Codeberg shows a strong commitment to privacy and security best practices, including CSRF protection and client transfer domain lock. There is no evidence of tracking or advertising, and the site provides clear channels for abuse reporting. While no formal security policy or vulnerability disclosure page is found, the organization maintains transparency and community engagement. Overall, Codeberg presents a trustworthy, professional, and privacy-conscious platform with a solid technical foundation and a clear mission to support the open source community. Strategic improvements in security headers, DNSSEC, and formal security documentation would further enhance its security posture and compliance.

Luigi's Box is a technology company specializing in secure parcel delivery and collection solutions, primarily serving residential and commercial customers in the United Kingdom. Their business model focuses on providing smart parcel lockers to improve last-mile delivery efficiency and security. The website presents a professional and modern digital presence, leveraging WordPress with performance optimizations and standard tracking tools such as Google Analytics and Tag Manager. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in CSP policies and incident response transparency. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall website quality and business information suggest a legitimate and trustworthy operation. Strategic recommendations include enhancing security policies, adding vulnerability disclosure mechanisms, and clarifying domain registration details to improve trust.

D

die Mobiliar

mobiliar.ch

74

Die Mobiliar is a leading Swiss insurance and pension company, established in 1826, serving both private individuals and businesses. The company holds a strong market position, insuring approximately one-third of Swiss households and enterprises. Their website offers comprehensive online services including premium calculators and damage reporting, reflecting a mature digital presence. The site is professionally designed, mobile-optimized, and provides clear navigation and contact options, supporting a high level of user trust and engagement. Technically, the site is built on Angular 20.1.0 with modern web standards, leveraging CDNs and analytics tools such as Google Analytics and Tealium for performance and marketing insights.

P

Luxury Patek Philippe Replica Watches | Swiss Made, Buy Online

patekphilippereplica.io

59

The website www.patekphilippereplica.io operates as an e-commerce platform specializing in the sale of replica Patek Philippe luxury watches. It targets consumers interested in affordable luxury watch replicas, offering a broad catalog with multi-language support and a modern user interface. The business model is focused on direct online sales with no visible physical presence or detailed company information. Technically, the site employs a modern JavaScript framework (Vue.js) with supporting libraries such as Axios and Element UI, ensuring a responsive and user-friendly experience across devices. The site is secured with HTTPS and implements several security headers, indicating a good baseline security posture. However, the absence of WHOIS transparency and lack of explicit contact information reduce the overall trustworthiness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and professionally designed but lacks some critical trust and compliance elements.

M

MCH Group AG

swissbau.ch

73

Swissbau is a leading trade fair platform in Switzerland for the construction and real estate industry, operated by MCH Group AG. It serves as a major event connecting industry professionals, exhibitors, and partners to showcase innovations and trends. The website demonstrates a mature digital presence with good content quality, professional design, and clear navigation. Technically, it employs modern web technologies, security best practices including HTTPS and security headers, and integrates multiple analytics and marketing tools with user consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, and no vulnerability disclosure program is evident. Overall, the site is trustworthy, GDPR compliant, and well-positioned in its market segment.

T

TOI TOI AG

toitoi.ch

65

TOI TOI AG is a leading Swiss company specializing in the rental of mobile sanitation solutions including portable toilets, sanitary containers, and related accessories. Positioned as the market leader in Switzerland, the company serves both business and private customers with a comprehensive product range and a customer portal for enhanced service. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in multiple languages tailored for the Swiss market. Technically, the site is built on the Shopware CMS platform, leveraging modern web technologies and Google Tag Manager for analytics and marketing, with appropriate consent mechanisms in place. Security posture is strong with HTTPS enforcement, secure forms, and standard security headers, although incident response contact details and vulnerability disclosure information are not explicitly provided. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

G

Giardina Society

giardina.ch

61

Giardina Society operates a prominent garden living event in Switzerland, recognized as the largest and most important in its sector. The website serves as an information and registration platform for exhibitors and visitors, showcasing event details, images, and related content. The technical infrastructure employs modern web technologies including JavaScript frameworks, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are missing. Overall, the site is professional, well-branded, and trustworthy, targeting garden enthusiasts and industry participants.

C

Canonical, Ltd.

netplan.io

71

Canonical Netplan is a specialized utility developed by Canonical, Ltd. for simplifying network configuration on Linux systems through YAML-based abstraction. Positioned as part of the Ubuntu ecosystem, Netplan targets system administrators and cloud deployment professionals seeking streamlined network setup. The website reflects a professional and consistent brand image aligned with Canonical's reputation. Technically, the site employs modern web standards with JavaScript and CSS, and integrates Google Tag Manager for analytics. While the site is accessible and well-structured, it lacks explicit privacy and terms of service policies, and does not expose contact information or security policies. Security posture is moderate with HTTPS implied but missing security headers and DNSSEC. Overall, the domain registration is consistent and trustworthy, reinforcing the legitimacy of the business and website.

C

Canonical Ltd

charmed-kubeflow.io

74

Canonical Ltd operates the website canonical.com, providing enterprise-ready MLOps solutions centered around Charmed Kubeflow, a fully supported AI and machine learning platform deployable on any cloud or infrastructure. The company is a well-established leader in open source Linux and cloud infrastructure, with a strong market position and a comprehensive portfolio of services including security subscriptions and consulting. The website demonstrates a mature technical infrastructure with modern web technologies, fast performance, and excellent mobile optimization. Security posture is strong with HTTPS enforcement and domain locking, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is limited on this page, lacking visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Canonical Ltd

microcloud.is

74

Canonical Ltd is a well-established technology company specializing in open source cloud infrastructure solutions, prominently featuring their MicroCloud product which offers lightweight, scalable cloud deployments for edge and private cloud environments. The company holds a strong market position with a comprehensive portfolio including Ubuntu OS, OpenStack, Kubernetes, and enterprise-grade support services. Their website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to enterprise customers seeking scalable cloud infrastructure solutions. Technically, the site employs modern web technologies, optimized for performance and mobile responsiveness, though some security enhancements such as DNSSEC and explicit security headers could be improved. Security posture is solid with HTTPS and domain protection statuses, but lacks visible incident response and vulnerability disclosure information. Overall, the website demonstrates high business credibility and trustworthiness, though privacy compliance could be enhanced by adding explicit privacy and cookie policies. Strategic recommendations include improving privacy transparency, enabling DNSSEC, and publishing security policies to further strengthen trust and compliance.

I

Infopro Digital Schweiz GmbH

infopro-digital.ch

54

Infopro Digital Schweiz GmbH is a Swiss-based B2B media and data solutions provider specializing in the construction industry. The company offers a range of services including media publications, marketing platforms, and a comprehensive construction project database, positioning itself as a leading information provider in the Swiss construction sector. The website is professionally designed, targeting industry professionals and businesses within Switzerland. Technically, the site employs modern JavaScript libraries, Google Analytics, and Google Tag Manager for tracking, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partially met with a privacy policy page but lacks visible cookie consent mechanisms. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

I

Infopro Digital Schweiz GmbH

docu.ch

54

Infopro Digital Schweiz GmbH is a Swiss-based B2B media and data solutions provider specializing in the construction industry. The company offers media, marketing, and data solutions tailored to the Swiss construction sector, positioning itself as a leading information provider with extensive reach and a large construction project database. The website reflects a professional and consistent brand image targeting business customers in the construction industry. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the website.

R

Registry Services, LLC

steam.tv

63

SteamTV is a digital streaming platform focused on broadcasting esports events, particularly for the game CS:GO, integrated within the Steam ecosystem. Operated under Valve Corporation, it leverages Akamai CDN for content delivery and provides community interaction features such as chat. The platform targets gamers and esports enthusiasts, offering live event streaming and integration with Steam user accounts. The website content is minimal, primarily embedding login and chat functionality, with limited visible business or policy information. Technically, the site uses modern web technologies including JavaScript, HTML5, and CSS3, served via Akamai CDN ensuring fast performance and global availability. The platform is optimized for Windows and web browsers with basic mobile responsiveness and accessibility. However, SEO and content richness are limited due to minimal visible content and metadata. From a security perspective, the site enforces HTTPS and domain registration includes protective domain status flags. However, it lacks DNSSEC, security headers, and visible security or privacy policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies impacts compliance posture. Overall, SteamTV presents a moderately trustworthy and technically sound platform for esports streaming but would benefit from enhanced transparency in privacy, security policies, and user communication to improve compliance and user trust.

V

Valve Corporation

steamgames.com

68

Valve Corporation operates Steam, a leading digital distribution platform for video games and software. The website serves a global audience of gamers and developers, offering game sales, community features, and hardware products like the Steam Deck. The platform is well-established with a strong market position and a comprehensive service offering. Technically, the site uses modern web technologies, including jQuery and Akamai CDN, ensuring fast performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, though visible cookie consent and explicit security policies could be improved. Overall, the site demonstrates high professionalism and trustworthiness, supporting a large enterprise-scale operation.

O

openSUSE Contributors

opensuse.org

63

openSUSE is a well-established open source community project that develops free Linux operating systems for desktops, servers, and containers. The website reflects a mature and professional presence with comprehensive resources, community engagement, and industry sponsorship. The target audience includes Linux users, developers, and IT professionals seeking stable and rolling release Linux distributions. The business model is community-driven with sponsorship support, emphasizing open source principles and free software availability. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, providing a positive user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. The WHOIS data is unavailable or privacy-protected, which is typical for open source projects and does not raise immediate concerns given the strong trust signals on the site. Overall, openSUSE.org presents a trustworthy, professional, and community-focused platform with good technical implementation and moderate security posture. Strategic improvements in security policy publication and privacy compliance mechanisms would further strengthen its position.

G

Gentoo Foundation, Inc.

gentoo.org

63

Gentoo Linux is a well-established open source Linux distribution project known for its flexibility and source-based package management. The website serves as a hub for the community, providing downloads, documentation, security advisories, and forums. The project is supported by various partners and sponsors, including the Oregon State University Open Source Lab, which hosts critical infrastructure. Technically, the website uses modern web technologies such as Bootstrap and jQuery, with a responsive design and good SEO practices. Security-wise, HTTPS is enabled and security advisories are actively published, but the site lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable or malformed, which limits domain registration trust analysis but does not detract from the strong community and brand presence. Overall, the site is professional, trustworthy, and serves its target audience effectively.

F

FreshPorts -- The Place For Ports - Most recent commits

freshports.org

69

FreshPorts.org is a specialized online portal dedicated to tracking and displaying the most recent commits to the FreeBSD ports tree. It serves the FreeBSD community, including developers and system administrators, by providing detailed commit information, package updates, and links to official FreeBSD repositories. The site also includes affiliate marketing through Amazon Associates and solicits donations to support its operations. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor tracking. The site is accessible without any WAF or blocking mechanisms, indicating open availability to users. Security-wise, the site uses HTTPS and links to official FreeBSD resources, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is malformed and incomplete, limiting the ability to fully verify domain legitimacy, though the content and commit links strongly suggest a legitimate community resource. Overall, the site is functional and relevant to its niche audience but would benefit from enhanced privacy compliance and security best practices.

R

Read the Docs, Inc

readthedocs.org

60

Read the Docs, Inc operates a documentation building and hosting platform primarily targeting developers. The platform offers versioned documentation, integrated search, and pull request previews, positioning itself as a key player in developer documentation services. The website is built using the Pelican static site generator and employs professional design elements including Font Awesome Pro icons, indicating a mature technical infrastructure. However, the absence of WHOIS data for the subdomain is expected and does not detract from the legitimacy of the main domain. Security posture is moderate with no explicit security headers or policies detected in the provided content, and privacy compliance is low due to missing privacy and cookie policies. Overall, the site is professional and safe for general audiences but would benefit from enhanced security and privacy disclosures.