Security Directory

C

chaos.social

chaos.social

67

chaos.social is an independent Mastodon server serving the Chaos community and broader Fediverse users. It provides a decentralized social networking platform based on the open-source Mastodon software, enabling users to participate in a federated social network. The website demonstrates a good level of technical maturity, employing modern web technologies such as Ruby on Rails and React, with proper security headers and HTTPS enforcement. The content is well-structured and accessible, though privacy compliance could be improved with explicit cookie consent and terms of service documentation. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Overall, chaos.social is a trustworthy and professionally maintained community platform with room for enhanced privacy and security policy transparency.

V

Visa

visaeurope.at

62

The website www.visaeurope.at represents Visa's digital payment services tailored for the Austrian market, showcasing their leadership in electronic and contactless payment technologies. The site emphasizes Visa's sponsorships, partnerships, and innovation in urban mobility and e-commerce solutions. The technical infrastructure leverages modern web technologies including Stencil.js and Adobe Experience Manager CMS, providing a responsive and professional user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit privacy or cookie policies in the provided content. The absence of WHOIS data limits domain trust verification, but the strong brand presence and extensive Visa network links support legitimacy. Overall, the site is well-positioned for its target audience but could improve transparency and security disclosures.

V

Visa

visa.hu

70

Visa Hungary operates as a regional branch of the global Visa payment network, providing digital and mobile payment solutions with a strong emphasis on security and innovation. The website targets both consumers and businesses, offering information on payment technologies, security features like Visa Secure, and business partnership opportunities. The site is professionally designed, mobile-optimized, and integrates modern web technologies including Stencil.js and Cloudflare services for performance and security. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, explicit security policy and incident response contacts are not published, which could be improved to enhance trust and transparency.

V

Visa

visa.co.za

69

Visa is a globally recognized leader in digital payments, offering a broad range of payment products and services to individuals, businesses, and innovators. The website www.visa.co.za serves the South African market with localized content, showcasing Visa's card products, innovative payment technologies, and embedded benefits. The site reflects Visa's strong market position and commitment to financial inclusion, security, and sustainability. Technically, the site is built on modern web technologies including Stencil.js components and is hosted with performance and security in mind, leveraging Cloudflare and Tealium for content delivery and analytics. Security posture is strong with HTTPS enforcement, security cookies, and bot management, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity, supporting Visa's brand as a secure and innovative payment network.

M

Michael Brennan

michaelbrennan.work

50

MichaelBrennan.work is a professional portfolio website representing Michael Brennan, an expert in technology, philanthropy, and organizational strategy with over 20 years of experience. The site highlights his leadership roles, including senior positions at the Ford Foundation and involvement in initiatives such as the Spyware Accountability Initiative and the Green Screen Coalition. The website targets professionals in technology and philanthropy sectors, offering insights into his expertise and contact avenues primarily via email and LinkedIn. Technically, the website employs modern web technologies including JavaScript ES modules and YouTube iframe APIs, hosted on Google Domains infrastructure. The site is mobile-optimized with good SEO practices, though it lacks some advanced accessibility features and security headers. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and domain registration protections such as clientUpdateProhibited status. However, it lacks security headers, privacy and cookie policies, and incident response information, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is professional and trustworthy, serving as a credible personal portfolio. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and providing incident response contacts to enhance compliance and security posture.

L

Letterboxd

boxd.it

71

Letterboxd is a well-established social networking platform focused on film lovers, enabling users to track, rate, review, and share films. Founded in 2009, it has a strong market position as a niche community for movie enthusiasts. The platform offers free account creation with optional Pro upgrades for enhanced features. Technically, the website employs modern JavaScript frameworks such as React, uses Google Analytics and Tag Manager for analytics, and leverages Cloudflare for DNS and likely hosting, ensuring good performance and security. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and CSRF protections but could be improved by adding security headers and publishing incident response information. Overall, the website is professional, trustworthy, and content-rich, targeting a general audience interested in films.

昇

昇腾社区

hiascend.com

61

昇腾社区 is a comprehensive AI computing infrastructure platform focused on the Ascend series processors and related software and hardware. It provides a full-stack AI ecosystem including heterogeneous computing architecture (CANN), AI frameworks like MindSpore, and development tools. The platform targets AI developers, industry professionals, and researchers, positioning itself as a key player in AI technology under the Huawei ecosystem. Technically, the website is built with modern web technologies such as Vue.js, supports responsive design, and integrates third-party SDKs for analytics and social media. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published privacy policies. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and branding strongly indicate an official enterprise presence. Overall, the site is professional, content-rich, and trustworthy but would benefit from improved transparency in privacy and security policies.

Orell Füssli operates as a well-established Swiss retail bookstore with a strong online presence offering books, eBooks, films, and games. The website targets a general audience with a professional e-commerce model that supports home delivery and in-store pickup. The company appears to be a significant player in the Swiss retail book market, leveraging partnerships with related Thalia domains. Technically, the website employs modern JavaScript frameworks, a custom CMS, and integrates advanced consent management via Usercentrics, alongside Google Analytics and Cloudflare security features. The site is well-optimized for performance, mobile use, and accessibility, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and captcha protections, though explicit security headers and published security policies are absent. Privacy compliance is supported by a consent mechanism but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy, professional, and safe for general audiences.

Thalia.at is a professional e-commerce platform specializing in books, eBooks, media, toys, and stationery primarily serving the Austrian market. It operates as a large retail business with both online and physical store presence, offering services such as home delivery and in-store pickup. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, consent management via Usercentrics, and integration of Google Analytics and Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement, CAPTCHA protection on login forms, and CSRF tokens, indicating a solid security posture. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, represent compliance and trust gaps. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly reduces transparency. Overall, the site is professionally designed, user-friendly, and safe for general audiences.

Thalia operates a large-scale e-commerce platform specializing in books, eBooks, toys, and stationery, serving primarily the German-speaking market. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, consent management via Usercentrics, and integration of Google Analytics and Tag Manager for marketing and analytics. Hosting and DNS are managed through Cloudflare, providing robust security and performance benefits. The site includes secure login forms with CSRF protection and CAPTCHA challenges, indicating attention to user security. However, explicit privacy policy and terms of service pages were not detected in the provided content, which may affect compliance perception. Overall, the platform is professionally designed, well-structured, and optimized for SEO and accessibility, targeting a broad general audience.

P

Pinterest

pinterest.de

73

Pinterest is a leading global visual discovery platform that enables users to find and save ideas such as recipes, home decor, and style inspiration. The German localized site reflects Pinterest's strong market presence in Europe, offering a comprehensive and user-friendly experience tailored to German-speaking users. The platform operates primarily on an advertising-based business model, leveraging user-generated content and visual search technologies to engage a broad audience. Technically, the website employs modern web technologies including React, modular JavaScript, and robust content delivery via Amazon AWS, ensuring fast performance and excellent mobile optimization. Security is well-managed with enforced HTTPS, a strict Content Security Policy, and bot protection via reCAPTCHA and Arkose Labs. Privacy compliance is strong, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, Pinterest demonstrates a mature digital infrastructure and a high level of professionalism and trustworthiness.

F

Fosstodon

fosstodon.org

68

Fosstodon.org operates as an invite-only Mastodon instance catering to technology enthusiasts, particularly those interested in free and open source software. It provides a federated social networking platform within the fediverse, leveraging the Mastodon software version 4.4.5. The platform emphasizes community participation without ads or algorithms, targeting a niche audience focused on technology and open source culture. Technically, the website employs modern web technologies including React and ES modules, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, Fosstodon.org presents a trustworthy and professional platform with room for enhanced security and compliance maturity.

L

Letterboxd • Social film discovery.

letterboxd.com

70

Letterboxd is a mature and reputable social networking platform dedicated to film lovers, enabling users to track, review, rate, and share films. Founded in 2009, it has established a strong niche presence in the media industry with a focus on community-driven film discovery. The website demonstrates a modern technical infrastructure leveraging React, ES modules, and integrates with major analytics and advertising platforms such as Google Analytics and DoubleClick. DNS and hosting are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforcement and CSRF protections, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

B

Bazaar

bazaar-london.com

68

Bazaar London is a premium e-commerce retailer specializing in unique, customisable contemporary furniture designed for exclusive addresses. The company emphasizes exceptional craftsmanship and sustainability, supported by its B-Corp certification. The website targets high-end consumers, interior designers, and trade customers, offering bespoke furniture and interior design services. Bazaar operates under the parent company Accouter Group of Companies, indicating a structured business foundation. Technically, the website is built on the Shopify platform, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Klarna for payments. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and secure payment processing, although a dedicated security policy and vulnerability disclosure are absent. Overall, Bazaar London presents a trustworthy, professional online presence with a solid business and technical foundation.

S

Sunski

sunski.com

70

Sunski is an established e-commerce retailer specializing in polarized sunglasses for men and women, combining modern style with outdoor performance. The company leverages advanced digital technologies such as virtual try-on and integrates multiple marketing and analytics platforms to enhance customer engagement and conversion. The website is built on Shopify, ensuring a robust and scalable infrastructure with fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and domain locking, though there is room for improvement in explicit cookie consent and published security policies. Overall, Sunski presents a professional and trustworthy online presence with a mature domain and consistent branding.

Pix is a French public service platform dedicated to evaluating, developing, and certifying digital skills for individuals throughout their lives. Established as a non-profit group of public interest, Pix collaborates with various public actors in education and training. The platform serves a broad audience including citizens, educators, public employment services, and employers, positioning itself as a key player in digital skills certification recognized by the French government and professional sectors. Technically, Pix leverages modern web technologies such as Nuxt.js and Prismic CMS, ensuring a fast, mobile-optimized, and user-friendly experience. The website demonstrates excellent content quality and professional design, with clear navigation and consistent branding. Security posture is solid with HTTPS enforcement and domain protection, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. Overall, Pix presents a trustworthy, well-maintained digital platform with strong business credibility and public trust.

M

MadKudu Inc.

madkudu.com

65

MadKudu Inc. is a technology company specializing in AI-driven sales intelligence solutions that empower revenue teams to optimize prospecting and seller workflows. Their platform integrates with popular sales tools such as Salesforce, Gong, and Outreach to provide aggregated signals and insights that enhance sales effectiveness. Recently acquired by HG Insights, MadKudu holds a strong market position with a medium-sized business profile and a focus on B2B SaaS offerings. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern JavaScript libraries and analytics tools including Segment and Amplitude, hosted on AWS infrastructure. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and domain locks in place, but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service clearly linked. Overall, MadKudu's website demonstrates a solid digital maturity level with room for improvement in security transparency and privacy documentation. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence.

This website is a Salesforce OAuth2 authorization login page, primarily serving as an authentication gateway for Salesforce digital services. It leverages Okta for identity management and OneTrust for cookie consent, reflecting a mature and enterprise-grade technical infrastructure. The page is branded consistently with Salesforce's corporate identity and is designed for business users and enterprise customers. The technical stack includes modern JavaScript modules and cloud-hosted resources, indicating a well-maintained platform. Security posture is strong with HTTPS and OAuth2 protocols in place, though explicit security headers are not evident in the provided data. Privacy compliance is partially addressed via cookie consent, but no privacy policy or terms of service links are present on this login page. Overall, the site is trustworthy and professional, with no signs of malicious activity or content safety concerns.

S

Salesforce

trailhead.com

75

Trailhead by Salesforce is a comprehensive online learning platform designed to educate users, administrators, and developers on Salesforce technologies. Positioned as a leading educational resource within the Salesforce ecosystem, it offers a variety of trails and modules to enhance skills and prepare for certifications. The platform targets a broad audience ranging from beginners to advanced professionals seeking to deepen their Salesforce expertise. Technically, the website leverages modern JavaScript frameworks such as Turbo Rails and StimulusJS, integrates advanced monitoring via New Relic, and employs OneTrust for privacy and cookie consent management. The infrastructure reflects a mature, enterprise-grade deployment with strong performance and mobile optimization. Security posture is robust, with HTTPS enforced, multiple security headers, and CSRF protections, although explicit security policy and incident response information are not publicly disclosed. Overall, the domain and website exhibit high legitimacy and trustworthiness consistent with Salesforce's enterprise standards.

C

cyberpunk.lol

cyberpunk.lol

62

cyberpunk.lol is a small independent Mastodon social media instance launched in late 2023, focused on fostering a cyberpunk-themed community within the Fediverse. It offers decentralized social networking services powered by the Glitch-soc fork of Mastodon, emphasizing community moderation, content warnings, and inclusivity. The platform targets adult users, enforcing an 18+ age restriction and detailed content policies to maintain a safe environment. Technically, the site uses modern web technologies including React and ES modules, hosted by fedi.monster, a known Fediverse hosting provider. While performance and mobile optimization are good, accessibility and SEO are basic. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent or terms of service. Overall, the site demonstrates a credible and community-focused operation with room for improvement in security and compliance.

F

FLOSS.social

floss.social

71

FLOSS.social is an independent Mastodon server launched in 2018, dedicated to the Free, Libre, and Open Source Software (FLOSS) community. It provides a decentralized social media platform encouraging open discussion primarily in English, with a strong emphasis on community guidelines and inclusivity. The platform is supported financially through a supporter program using Liberapay and is hosted on infrastructure provided by Masto.Host and OVH, with additional services from BunnyCDN and SparkPost. The website is well-structured, with clear policies and contact information, reflecting a mature community-focused service. Technically, FLOSS.social leverages Mastodon and a customized TangerineUI frontend, employing modern JavaScript modules and CDN resources. Hosting and infrastructure choices indicate a reliable and scalable setup. The website demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and maintains a comprehensive community code of conduct with clear enforcement and incident reporting channels. However, explicit security headers and a formal vulnerability disclosure policy are absent, representing areas for enhancement. The WHOIS data is privacy-protected but consistent with the site's legitimate community focus. Overall, FLOSS.social presents a trustworthy, community-driven social media platform with solid technical foundations and a positive security posture. Strategic improvements in security policy transparency and cookie consent would further strengthen its compliance and user trust.

V

Volkswagen Financial Services Schweiz AG

skoda-versicherung.ch

59

Volkswagen Financial Services Schweiz AG operates a specialized insurance website offering comprehensive car insurance solutions tailored for Škoda vehicle owners in Switzerland. The site emphasizes partnership with Zurich Versicherungs-Gesellschaft AG and provides flexible insurance packages, premium calculation tools, and dedicated customer support. The business targets Škoda customers seeking reliable and brand-aligned insurance coverage. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized with good performance and SEO practices. Security posture is solid with HTTPS and secure form handling, though explicit security headers and cookie consent mechanisms are recommended to enhance compliance and protection. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate and professional insurance service.

K

Knight Frank

knightfrank.co.uk

71

Knight Frank is a well-established UK-based real estate company specializing in residential and luxury property sales and lettings, with a global presence spanning over 50 countries. The website reflects a mature digital infrastructure using modern technologies such as EPiServer CMS, JavaScript ES modules, and Azure Application Insights for analytics. The site is professionally designed, mobile-optimized, and provides comprehensive property search and service information. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Overall, the site is trustworthy and professionally maintained, though WHOIS data for the 'www' subdomain is unavailable due to domain naming rules, which does not impact the legitimacy of the main domain.

B

Behance

behance.net

72

Behance is a leading global creative network platform owned by Adobe, providing a space for creative professionals to showcase and discover creative work including photos, videos, logos, illustrations, and branding projects. The platform targets creative professionals such as designers, artists, and photographers, offering portfolio hosting and community networking services. Behance holds a strong market position as a trusted and widely used platform in the creative industry. Technically, the website employs modern web technologies including Vue.js, JavaScript ES modules, Adobe Fonts, and New Relic monitoring for performance and error tracking. The site is well-optimized for performance and mobile responsiveness, with good accessibility and SEO practices in place. The use of multiple Adobe-related domains and third-party services indicates a mature and integrated technical infrastructure. From a security perspective, Behance enforces HTTPS and implements security best practices such as Content Security Policy and monitoring for security events. While explicit security policy and incident response information are not publicly disclosed, the platform demonstrates a strong security posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Behance presents a high level of business credibility, technical maturity, and security awareness. The lack of WHOIS data is mitigated by the platform's ownership by Adobe and its established reputation. Strategic recommendations include publishing explicit security and incident response policies and implementing a vulnerability disclosure program to further enhance trust and security transparency.

U

Usercentrics

usercentrics.eu

71

Usercentrics is an established enterprise software company founded in 2013, specializing in data privacy and regulatory compliance solutions. Their core offering is a Consent Management Platform (CMP) that helps businesses meet privacy requirements, manage user consent, and secure monetization. The company positions itself as a leader in the data privacy technology market, targeting businesses that require compliance with GDPR and other regulations. The website reflects a mature SaaS business model with a focus on privacy and compliance technology. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager and Usercentrics' own CMP scripts. The site is well optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, although some improvements such as enabling DNSSEC and adding security headers could enhance security further. Privacy compliance is good but could be improved by explicitly linking privacy policies and terms of service. Overall, the website and domain registration data indicate a trustworthy and professional enterprise with a strong market presence in the privacy compliance sector.

M

Mastodon

mastodon.world

65

Mastodon.world operates as a generic, independent Mastodon server providing federated social networking services to a broad audience. It positions itself as an open platform for anyone to join the fediverse, with a moderate active user base and no commercial advertising. The website leverages modern web technologies including React and WebSockets, hosted with cloud storage for media assets, delivering a fast and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and privacy compliance mechanisms like cookie consent are missing. The domain WHOIS data is privacy protected, which is typical for such community-driven platforms, and does not raise immediate trust concerns. Overall, Mastodon.world presents as a legitimate, well-maintained social platform with room for improvement in privacy and security transparency.

Mastercard.fi is the Finnish localized website of Mastercard, a global leader in payment technology and services. The site offers information about Mastercard's digital payment solutions, travel rewards, and security features targeted at Finnish consumers and businesses. The website is professionally designed with consistent branding and uses modern web technologies including Adobe Experience Manager and OneTrust for cookie consent management. The technical infrastructure leverages Akamai CDN and Adobe Launch for analytics and marketing tag management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers like Content-Security-Policy could be improved. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service links were not found in the provided HTML snippet. Overall, the site reflects a mature digital presence consistent with Mastercard's enterprise stature.

V

Volkswagen Group

vw-mms.de

68

The website analyzed is a secure login portal for Volkswagen Group users, specifically designed for multi-factor authentication (MFA) under the 'kums-mfa' realm. It serves as an identity provider (IdP) interface for internal or partner authentication workflows. The site uses modern frontend technologies including Keycloak for identity management and PatternFly for UI components, indicating a mature technical infrastructure. The portal is well-branded with Volkswagen Group identity elements and provides a professional user experience focused on secure access. Security posture is solid with HTTPS enforced and MFA enabled, though explicit security headers and cookie consent mechanisms are absent. The lack of WHOIS data for the subdomain is consistent with internal corporate use rather than public registration. Overall, the site is trustworthy and fits the needs of an enterprise authentication portal.

N

Netcetera AG

netcetera.com

64

Netcetera AG is a well-established Swiss technology company specializing in tailored software solutions for sectors including banking, payments, healthcare, mobility, and publishing. The company positions itself as a trusted partner with over 25 years of industry experience and a strong client base including major financial institutions. Their business model focuses on B2B software development, AI integration, and cloud services, emphasizing security and user experience. Technically, the website employs modern web technologies such as Google Tag Manager, Matomo Analytics, and Usercentrics for consent management, with responsive design and accessibility features. The site demonstrates good SEO practices and a professional user experience. However, some security best practices like explicit security headers and published security policies are missing. From a security perspective, the site uses HTTPS and secure forms but lacks visible incident response contacts and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trustworthiness despite the professional web presence. Overall, the website is high quality and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen its risk posture and compliance standing.

I

iJUG Interessenverbund der Java User Groups e.V.

ijug.social

64

The website ijug.social serves as a decentralized social network platform powered by Mastodon, specifically targeting the Java User Groups community under the non-profit organization iJUG Interessenverbund der Java User Groups e.V. It provides a niche social networking service within the fediverse, fostering community engagement and collaboration among Java enthusiasts. The platform is administered by the iJUG e.V. infrastructure team, with clear contact information and a professional presentation. Technically, the site leverages Mastodon version 4.4.5 with modern web technologies including React and ES modules, offering a responsive and user-friendly experience. Security posture is moderate, with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a clear privacy policy, though terms of service and cookie policies are absent. Overall, the domain registration is privacy protected but consistent with the organization's identity, indicating legitimacy. The site is free from adult or questionable content, targeting a general audience of technology professionals and enthusiasts.

J

Jaguar Land Rover Limited

landrover.com

59

Jaguar Land Rover Limited operates the Land Rover brand website, providing a global market selector to guide users to region-specific content. The company is a well-established premium automotive manufacturer with a strong global presence. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager CMS, Adobe Target for marketing personalization, and Google Tag Manager for analytics. The technical implementation is modern and performant, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and consent-based cookie management, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, which is common for large brands. Overall, the site is professional, trustworthy, and aligned with Jaguar Land Rover's brand identity.

P

Pinterest, Inc.

pinterest.ch

74

Pinterest, Inc. operates a leading visual discovery platform that enables users to find and curate ideas such as recipes, home decor, and style inspiration. The company holds a strong market position as a major social media and e-commerce platform, leveraging advertising and content curation as its primary business model. The website demonstrates a high level of digital maturity, employing modern web technologies including React, advanced bot mitigation via ReCAPTCHA Enterprise, Arkose Labs, and fraud detection through Sardine.ai. Hosting is managed through Amazon AWS infrastructure, ensuring scalability and performance. Security posture is robust with HTTPS enforcement, comprehensive Content Security Policy, and multiple security integrations, reflecting a mature security culture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations and user consent mechanisms. Overall, the website is professional, trustworthy, and optimized for performance and accessibility.

P

Plus que pro

plus-que-pro.fr

63

Plus que pro is a French online platform specializing in providing verified customer reviews to help consumers identify and select trustworthy professional service providers. The website positions itself as a network for qualitative business recommendations, targeting French consumers seeking reliable companies. The platform offers services centered around controlled customer feedback and professional search capabilities, establishing a solid market presence in France. Technically, the website employs modern web technologies including Google Tag Manager and the Didomi Consent Management Platform, ensuring compliance with privacy regulations and enabling effective user tracking and analytics. The site is mobile-optimized with good SEO practices and a professional design, contributing to a positive user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy, although the website content and business model suggest a legitimate operation. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

H

Heli GmbH

helikopterflug.ch

69

Heli GmbH operates a specialized e-commerce platform offering helicopter flight experiences, including sightseeing tours, pilot experiences, and VIP taxi flights primarily in Switzerland. The company targets general consumers interested in unique aerial experiences and gifts. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools to provide a professional and user-friendly experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the website is trustworthy, well-maintained, and suitable for its niche market.

M

Movetia

movetia.ch

59

Movetia is a Swiss national agency dedicated to promoting exchange and mobility in the education sector. It operates on behalf of the Swiss federal and cantonal governments to finance and support educational exchange projects, including class exchanges, internships, and cooperation projects. The website targets educational institutions, youth, and professionals involved in education and mobility. It offers funding opportunities, advisory services, event information, and project management portals. The agency maintains a strong market position as a trusted government-related entity in Switzerland's education ecosystem. Technically, the website employs modern web technologies including ES modules, Vite build tools, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, with structured data enhancing SEO. The content is professionally designed, multilingual, and rich in relevant information. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain and its alignment with the agency's identity. Overall, Movetia's website demonstrates a high level of professionalism, security, and compliance suitable for a government-affiliated educational agency. Strategic improvements could include adding explicit security headers, publishing a security policy, and enhancing incident response transparency.

K

Kellerhals Carrard

kellerhals-carrard.ch

58

Kellerhals Carrard is a prominent Swiss law firm offering high-quality legal and industry-specific services across multiple Swiss cities and international desks. The firm emphasizes a unique business culture founded on collaboration, passion, and client-focused legal support. Their website reflects a strong market position with comprehensive content, multiple office locations, and active social media engagement on professional platforms such as LinkedIn and Twitter. Technically, the website is built using modern JavaScript frameworks (Vue.js) and employs Typekit fonts, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with the firm's business identity.

S

Swisscom AG

blue.ch

67

Swisscom AG operates a comprehensive and professional website offering blue TV subscriptions, streaming services, and telecommunications products primarily targeting residential customers in Switzerland. The company is a market leader in Swiss TV and telecommunications, providing a wide range of channels, sports, films, and series with additional streaming packages. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager CMS, modern JavaScript frameworks, and advanced video streaming technologies. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Contact information is clear, supporting customer engagement. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

S

Swisscom AG

swisscom.ch

71

Swisscom AG is the leading telecommunications provider in Switzerland, offering a comprehensive range of services including mobile, internet, and TV subscriptions targeted at residential customers. The company operates an enterprise-grade website with excellent content quality, clear navigation, and strong branding consistency. Their digital infrastructure leverages modern technologies such as Adobe Experience Manager, web components, and advanced tag management systems, reflecting a mature and well-maintained technical environment. Security posture is robust, with HTTPS enforced, modern security headers, and publicly available security policies and incident response contacts. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Overall, Swisscom demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and domain legitimacy.

E

EnableMe Foundation

safe-space.io

61

SafeSpace is a digital B2B tool developed by the EnableMe Foundation in collaboration with the University of St. Gallen's Competence Center for Diversity, Disability and Inclusion. It supports employees with non-visible health impairments in making informed decisions about disclosing their conditions at the workplace, aiming to foster inclusion and improve employee satisfaction and productivity. The service is positioned as a niche non-profit offering with strong academic backing and a clear social mission. Technically, the website leverages modern frontend technologies such as Vue.js and PrimeVue, hosted on Hetzner infrastructure, with good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers and policies could be improved. Privacy and cookie policies are present with consent mechanisms, but no terms of service or explicit security policies were found. WHOIS data shows privacy protection typical for non-profit projects, with no suspicious indicators. Overall, the website is professional, trustworthy, and well-aligned with its mission.

S

Swisscom AG

swisscom.com

68

Swisscom AG is a leading telecommunications provider in Switzerland offering a wide range of residential services including mobile, internet, and TV subscriptions. The website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. The technical infrastructure leverages modern web technologies such as Adobe Experience Manager and JavaScript ES modules, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism and trustworthiness.

American Fire Cache operates as a specialized retailer and training provider focused on wildland firefighting gear and equipment. The company targets firefighting professionals and departments, offering both ecommerce sales and NWCG training services. The website presents a professional and consistent brand image with clear contact information and business hours, supporting its niche market position. Technically, the site uses modern JavaScript modules, a Vue.js framework, and Craft CMS with CSRF protections, indicating a moderate level of digital maturity and security awareness. However, the absence of explicit privacy, cookie, and terms of service policies, combined with missing WHOIS registration data, introduces concerns regarding compliance and domain legitimacy. Overall, the site is functional, secure in transport, and well-structured but would benefit from enhanced transparency and policy disclosures.

E

Extinction Rebellion

rebellion.global

70

Extinction Rebellion is a globally recognized environmental activist movement focused on combating climate and ecological collapse through non-violent direct action. The organization operates in 88 countries with nearly 1,000 groups and organizes numerous events worldwide. Their website serves as a hub for information, activism resources, and global coordination. Technically, the site employs modern web technologies including Matomo analytics for privacy-conscious tracking, and is well-optimized for mobile and accessibility. Security posture is solid with HTTPS enforced and captcha integration, though improvements could be made by adding security headers and explicit cookie consent mechanisms. The WHOIS data is privacy protected, which aligns with the activist nature of the organization. Overall, the website is professional, trustworthy, and effectively supports the organization's mission.

W

WELT

welt.de

71

WELT is a leading German news media organization providing comprehensive news coverage, commentaries, live tickers, videos, and streams across various topics including politics, economy, finance, sports, culture, and travel. The website is professionally designed, highly accessible, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern JavaScript modules, asynchronous script loading, and a robust CDN infrastructure via Akamai, ensuring fast performance and scalability. Security measures include HTTPS enforcement and a strict Content Security Policy to block mixed content, contributing to a strong security posture. However, the absence of explicit privacy and terms of service pages, as well as limited visible contact information, indicates areas for improvement in privacy compliance and transparency. Overall, WELT demonstrates a high level of professionalism and trustworthiness as a major media outlet.

C

Cascade Fire Equipment

cascadefire.com

66

Cascade Fire Equipment is a well-established US-based manufacturer and distributor of firefighting gear and equipment, with over 40 years of history. The company targets firefighters, emergency services, and government agencies, offering a wide range of products including PPE, apparatus, tools, and accessories. The website is built on the Shopify platform, leveraging modern e-commerce technologies and a professional design that supports good user experience and navigation. The technical infrastructure includes Shopify's Empire theme, CDN hosting, and integration with analytics and marketing tools such as Google Analytics and Meta Pixel. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and use of hCaptcha for form protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

R

reichelt elektronik GmbH

reichelt.de

65

reichelt elektronik GmbH operates a large-scale German e-commerce platform specializing in electronics and technology products. The website offers a broad catalog of over 150,000 items targeting both private consumers and business customers, including educational institutions. The company maintains a professional online presence with multi-language support and a user-friendly interface. Technically, the site employs modern JavaScript modules, lazy loading, and Matomo analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and secure login forms, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professionally maintained, and suitable for general audiences.

M

Meier Tobler AG

meiertobler.ch

66

Meier Tobler AG is a well-established Swiss company specializing in heating, climate, ventilation, and sanitary technology products and services. With over 80 years of experience and a large network of 400 service technicians nationwide, it holds a leading position in the Swiss energy and building technology market. The company targets both consumers and professionals, offering comprehensive solutions including heating system renewals, service, and maintenance. The website reflects a professional and trustworthy brand with consistent messaging and strong digital presence including social media and e-commerce integration. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, and CookiePro for consent management, hosted on Netlify ensuring fast performance and good mobile optimization. Structured data is well implemented for SEO and business information. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are absent. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site could improve by publishing dedicated security policies and incident response contacts. Overall, the site is secure, performant, and compliant with privacy regulations, supporting the company's credibility and customer trust. The risk assessment is low with no critical issues detected. Strategic recommendations include enhancing transparency around security policies and incident response, and continuous monitoring of third-party scripts for vulnerabilities.

S

stranger.social

stranger.social

68

Stranger.social is an independent Mastodon instance providing a federated social networking platform where users can engage in microblogging and community interaction. The platform positions itself as a friendly and welcoming community open to everyone, leveraging the open-source Mastodon software to participate in the fediverse. The website demonstrates a moderate level of digital maturity with a modern tech stack including React and Ruby on Rails, hosted likely on Linode infrastructure. The user interface is well-structured, mobile-optimized, and provides active user statistics and administrative transparency through visible admin accounts. Security posture is adequate with HTTPS implied, but lacks explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent or terms of service pages. WHOIS data is privacy protected, which is common for such platforms but limits transparency. Overall, stranger.social is a legitimate, small-scale social platform with room for improvement in privacy and security disclosures.

NameSilo, LLC operates a mature and reputable domain registration and web hosting platform, offering affordable domain names, hosting, SSL certificates, and email services. The company is positioned as a cost-effective registrar with a strong market presence managing over 5 million active domains. Their website demonstrates a high level of digital maturity, leveraging modern SPA frameworks (Vue.js), Cloudflare for security and performance, and integrates marketing and analytics tools such as Google Tag Manager and Trustpilot for customer trust. Security posture is strong with HTTPS enforced, Cloudflare protection, and secure form handling, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service links. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

B

Bundesportal

bund.de

65

The website verwaltung.bund.de is an official German federal government portal providing centralized access to administrative services and information. It targets the general public and businesses within Germany, serving as a gateway to federal government services. The portal uses modern web technologies such as JavaScript ES modules and web components, with a focus on modular and scalable frontend architecture. The technical infrastructure appears to be hosted under the German Research Network (DFN), indicating a reliable and government-aligned hosting environment. Security posture is moderate, with HTTPS implied and Google site verification present, but lacking explicit security headers and visible privacy or cookie policies. No contact or incident response information is provided in the analyzed content, which limits transparency and user trust. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

L

likumuizsekotajs.lv

likumuizsekotajs.lv

53

Likumu izsekotājs is a Latvian-focused legal technology service that automates the tracking of legislative changes, specifically targeting decisions made by the Cabinet of Ministers and Saeima sessions. The platform leverages artificial intelligence to match user-defined topics with relevant government decisions, streamlining the monitoring process for organizations such as banks, law firms, and municipalities. The service is currently in a pilot phase, inviting large organizations to participate and provide feedback before public release. Technically, the website employs modern frontend technologies including Vue.js and ES modules, delivering a responsive and user-friendly experience. While the site demonstrates good design and content quality, there is room for improvement in security posture, particularly in implementing security headers and cookie consent mechanisms. The absence of explicit contact emails and phone numbers limits direct communication channels, relying instead on a contact form. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks several best practices such as security headers and vulnerability disclosure information. The WHOIS data indicates a Latvian natural person as registrant, consistent with the website's regional focus, though detailed organizational information is not provided. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but with opportunities to enhance trust and compliance. Strategically, the company should prioritize strengthening its security framework, enhancing privacy compliance, and expanding contact options to build greater trust with its target enterprise audience. These improvements will support its positioning as a reliable legal-tech solution in the Latvian market.