Security Directory

4

404 Media

404media.co

62

404 Media is a new independent media company founded by experienced technology journalists. The company focuses on technology journalism and media publishing, targeting a general audience interested in tech news. The website is professionally designed using modern web technologies including Ghost CMS, and integrates third-party services such as Disqus for comments, Stripe for payments, and Plausible for analytics. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal privacy or cookie policies. No contact information or incident response details are provided, which limits transparency. Overall, the website is safe, trustworthy, and professionally maintained but could improve in privacy compliance and security best practices.

A

ARD Online

tagesschau.de

68

tagesschau.de is a leading German news website operated by ARD Online, providing comprehensive news coverage and information updates 24/7. It holds a prominent market position as a trusted national news source in Germany, offering multimedia content including articles and videos. The website demonstrates a mature technical infrastructure leveraging modern web technologies, Google Cloud DNS hosting, and structured data for SEO optimization. Mobile responsiveness and accessibility are well implemented, enhancing user experience across devices. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving a broad general audience with safe content.

Z

zerforschung

zerforschung.org

52

zerforschung.org is a German-based, volunteer-driven research platform specializing in reverse engineering, security research, and data breach investigations. The website publishes detailed investigative reports primarily in German, with some English content, targeting security researchers, privacy advocates, and the general public interested in data security. The platform operates on a non-profit model supported by donations through Patreon and Steady, positioning itself as a niche independent entity in the cybersecurity media space. Technically, the website is built using the Hugo static site generator, leveraging minimal JavaScript and modern web standards. The site is hosted under a domain registered with INWX GmbH, a reputable German registrar. Performance and mobile optimization are good, though accessibility is basic. The site uses HTTPS but lacks DNSSEC and explicit security headers, indicating room for improvement in security hardening. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and domain transfer protection. However, it lacks a published security policy, incident response contacts, and a vulnerability disclosure framework such as security.txt. The site uses minimal analytics via GoatCounter, respecting user privacy with no intrusive tracking or advertising. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, zerforschung.org is a trustworthy and professional platform with a strong focus on security research and public awareness. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and user trust. The site is safe for general audiences and maintains a high level of content relevance and professionalism.

The website nycdn.netbsd.org/pub/arm/ serves as an official distribution portal for NetBSD ARM bootable images, targeting developers, system administrators, and embedded system users interested in the NetBSD operating system. It provides multiple release versions and daily builds for various ARM-based boards, with cryptographic SHA512 checksums to ensure download integrity. The site is branded consistently with the NetBSD Foundation, indicating a strong alignment with the open source community and a niche market position focused on portability and security in Unix-like operating systems. Technically, the website employs standard web technologies including HTML5, Bootstrap for responsive design, and jQuery for dynamic content loading. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content relevance. However, accessibility and SEO optimizations are basic, and no CMS or advanced analytics tools are detected. Hosting appears to be managed by the NetBSD Foundation or related infrastructure, with no third-party advertising or tracking. From a security perspective, the site uses HTTPS links for downloads and provides SHA512 checksums, which are positive indicators for secure distribution. However, no HTTP security headers were detected, and no explicit privacy, cookie, or security policies are present on the site. The WHOIS data for the domain is unavailable due to a malformed request, limiting the ability to fully verify domain registration legitimacy. Despite this, the domain is a subdomain of netbsd.org, a trusted entity, which mitigates concerns. No forms or contact information for incident response or security reporting are provided, indicating room for improvement in security posture and compliance. Overall, the website is a functional and trustworthy resource for NetBSD ARM images but lacks comprehensive privacy and security disclosures. Enhancements in security headers, privacy policies, and contact information would strengthen trust and compliance. The domain's WHOIS opacity slightly reduces confidence but does not critically impact the site's legitimacy given its affiliation with the NetBSD Foundation.

M

Microsoft

skype.com

76

The website teams.live.com/free is a Microsoft Teams landing page offering free online meetings and video calls. It targets a broad audience including personal users, freelancers, educators, small businesses, and social groups. The platform provides key collaboration features such as video calls, chat, file sharing, screen sharing, live captions, and customizable backgrounds. The business model appears to be a freemium approach, providing free services with potential upsell to paid Microsoft Teams plans. The site is part of the Microsoft ecosystem, leveraging Microsoft Azure and CDN infrastructure for hosting and delivery. Technically, the website employs modern web technologies including JavaScript, Webpack, and RSPack for bundling. It is optimized for desktop and mobile devices with responsive design and accessibility considerations. The site uses secure HTTPS connections and sandboxed iframes for OAuth authentication with Microsoft identity services. Performance is fast, and SEO best practices are followed with proper meta tags and Open Graph data. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, input validation on forms, and secure iframe usage. However, explicit security headers like Content Security Policy and X-Frame-Options are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear links to Microsoft's privacy and cookie policies, including a consent banner. No direct contact information or security incident response details are provided on the page. Overall, the website is highly professional, trustworthy, and aligned with Microsoft's brand and security standards. The lack of WHOIS data for the subdomain is expected as it is part of the live.com domain owned by Microsoft. The site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact channels for security incidents.

N

N1

n1info.hr

51

N1info.hr is a professional Croatian news media portal established in 2016, providing accurate and independent news coverage from Croatia and worldwide. It operates under the N1 brand with sister sites in Serbia, Bosnia and Herzegovina, and Slovenia, positioning itself as a leading regional news source. The portal offers a broad range of content including news articles, video content, live TV streaming, and specialized sports coverage via its partnership with Sport Klub. Technically, the website employs modern web technologies including Cloudflare CDN, Google Tag Manager, OneSignal push notifications, and Gemius analytics, ensuring good performance and user experience across devices. The site is mobile-optimized, accessible, and SEO-friendly with comprehensive metadata and structured data. Security-wise, the site uses HTTPS with strong SSL configuration, Cloudflare protection, and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with high content quality and trustworthiness, suitable for a broad general audience.

C

CIC

cic.fr

77

CIC (Crédit industriel et commercial) is a major French banking and insurance group offering a wide range of financial services including accounts, loans, insurance, savings, and digital banking solutions. The website targets individuals, entrepreneurs, professionals, and associations primarily in France, emphasizing proximity banking and ethical commitments as an enterprise with a mission. The digital infrastructure is modern and well-optimized for mobile and accessibility, leveraging multiple third-party services for enhanced user experience and analytics. Security posture is strong with HTTPS and secure practices, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is noted but likely due to AFNIC domain registration policies. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a large customer base effectively.

E

Euro-Information

e-i.com

75

Euro-Information is a well-established technological subsidiary of Crédit Mutuel, providing information system management and IT services to multiple banking and financial groups in France. The website reflects a mature digital presence with comprehensive content about their services, career opportunities, and corporate values. The technical infrastructure uses modern web technologies and CDNs to deliver content efficiently, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. The absence of WHOIS data is a notable anomaly but does not currently detract from the website's legitimacy given strong corporate branding and trust signals.

P

Powerful Contact Form Builder

powerfulform.com

71

Powerful Contact Form Builder is a specialized SaaS application designed for Shopify store owners to create versatile and customizable forms easily. The website presents a professional and well-structured platform with a clear focus on user engagement and integration with popular marketing and CRM tools. The business targets e-commerce merchants seeking to enhance customer interaction through forms such as contact, feedback, order, and multi-step forms. Technically, the site leverages the Shopify platform, modern JavaScript libraries, and Cloudflare DNS for hosting and performance. Security measures include HTTPS enforcement and hCaptcha integration for bot protection, although explicit security policies and DNSSEC are absent. Privacy compliance is limited by the lack of visible privacy and cookie policies. Overall, the site demonstrates a mature digital presence with good design, performance, and trust indicators but would benefit from enhanced privacy and security disclosures.

Hager is a leading manufacturer specializing in electrical distribution systems for residential, commercial, and hotel applications, operating primarily in India as part of the global Hager Group. The website presents a professional and well-structured digital presence with clear navigation and relevant content targeting electrical professionals and building sectors. Technically, the site uses standard web technologies including JavaScript, jQuery, Google Analytics, and CookieHub for cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit privacy policies, terms of service, and vulnerability disclosure mechanisms. Overall, the site is trustworthy and business credible but could enhance privacy compliance and user contact transparency.

H

Hager

hager.sg

70

Hager is a well-established company specializing in electrical products and solutions, targeting primarily B2B customers in the energy sector. The website for the Singapore market offers a comprehensive product catalog including energy distribution, main switchgear, modular devices, and energy management solutions. The company demonstrates a strong market position with a large-scale business presence and a domain registered since 1997, indicating stability and trustworthiness. Technically, the website is built on the Sitecore CMS platform, leveraging modern web technologies such as Algolia for search, Google Analytics for tracking, and CookieHub for cookie consent management. The site is hosted on Akamai infrastructure, ensuring reliable performance and security. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the analyzed content. Overall, the website is professional, user-friendly, and trustworthy, with moderate tracking and analytics usage. Recommendations include enhancing privacy disclosures, publishing security policies, and improving security header implementation to strengthen compliance and security posture.

H

Hager Ukraine

hager.ua

62

Hager Ukraine operates as a localized branch of the international Hager Group, specializing in electrical distribution systems, modular equipment, and related electrical products tailored for the Ukrainian market. The website serves primarily as a product catalog and resource portal for electrical professionals and customers, offering product information, downloads, and training resources. The business model is B2B focused, targeting installers, distributors, and industry professionals. The site demonstrates consistent branding aligned with the global Hager identity and maintains a professional online presence. From a technical perspective, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with some use of libraries such as Modernizr and Material Icons. The site appears to be custom-built or uses a proprietary CMS tailored for Hager's needs. Performance and mobile optimization are adequate, though accessibility features are basic. SEO is implemented at a basic level with meta tags and canonical links. Security posture is moderate; HTTPS is enforced as indicated by canonical URLs, and a cookie consent mechanism is implemented, reflecting some GDPR awareness. However, no privacy policy or terms of service are found, and no advanced security headers are detected in the provided data. Forms exist for user login and registration but lack visible anti-CSRF tokens or advanced protections in the snippet. No incident response or vulnerability disclosure information is published. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Key recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility and compliance documentation to strengthen trust and regulatory adherence.

Ford Motor Company operates a comprehensive and professionally designed website showcasing its extensive lineup of vehicles including hybrid, electric, SUVs, trucks, and commercial vehicles. The site targets consumers and commercial buyers in the automotive sector, providing detailed product information, pricing, and dealer location services. The company is a major player in the global automotive market with a strong brand presence and consistent messaging. Technically, the website leverages modern web technologies including Adobe Experience Manager, Adobe Target, and Akamai CDN, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not prominently published. WHOIS data for the domain is unavailable, likely due to registry restrictions, but the website's legitimacy is supported by strong brand signals and professional content. Overall, the site reflects a mature digital presence with good security and privacy practices, suitable for a large enterprise in the transportation industry.

Ford Motor Company is a globally recognized American multinational automaker with a significant presence in Europe, as evidenced by the ford.eu website. The site serves as a country selection portal directing users to localized Ford websites across many European countries. The business model focuses on manufacturing and selling automobiles, supported by localized digital experiences tailored to regional markets. The company is well-established, founded in 1903, and operates at an enterprise scale with a strong brand identity and consistent digital branding across its European web presence. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and Akamai CDN services to ensure fast, reliable, and scalable delivery. The site is mobile optimized and incorporates performance monitoring tools such as Adobe DTM and Akamai Boomerang. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident, and no public security or incident response policies are published. The absence of WHOIS data is due to EURid privacy policies for .eu domains, but the domain usage and content strongly indicate legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and security posture. Strategic improvements could include publishing security policies, adding security headers, and providing direct contact information for security incidents to enhance trust and compliance.

The website www.ford.ch serves as the official localized landing page for Ford in Switzerland, primarily offering language selection options for German, French, and Italian users. It represents a major global automotive brand with a strong market presence and consistent branding. The site is built on modern web technologies including Adobe Experience Manager CMS and integrates advanced performance and analytics tools such as Akamai service workers and Adobe Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and privacy policies are absent on this landing page. The absence of privacy and cookie policies, as well as contact information, limits compliance and user trust aspects. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

H

Hager Group

hager.com

65

Hager Group operates a professional corporate website serving as a global platform for their electrical installation solutions targeted primarily at B2B customers. The company is positioned as a leading provider in the energy sector with a strong international presence, supported by multi-language and regional site versions. The website is built on a modern technical stack including Sitecore CMS, Akamai CDN, and integrates Google Analytics and CookieHub for analytics and privacy compliance respectively. Security posture is adequate with HTTPS and domain transfer protections, though lacks visible security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service documents found in the provided content. Overall, the site is professional, well-branded, and trustworthy with a domain age consistent with an established enterprise. Recommendations include enhancing transparency with published privacy and security policies, enabling DNSSEC, and improving security headers.

A

Aftonbladet AB

aftonbladet.se

77

Aftonbladet AB operates one of Sweden's largest and most engaging news websites, providing comprehensive news coverage, video journalism, and podcasts. The company has a long history dating back to 1830 and is a major player in the Swedish media landscape, owned by the Schibsted group. The website demonstrates a mature digital infrastructure with modern web technologies and a strong focus on user experience and mobile optimization. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy policies and cookie consent mechanisms are present and indicate GDPR compliance. The absence of WHOIS data for the queried subdomain suggests a need for further domain registration verification but does not detract from the site's legitimacy given its established brand presence. Overall, the site is professional, trustworthy, and well-positioned in its market.

The website at freshly.com/lander currently serves a minimal placeholder or parking page with no substantive content related to the Freshly meal delivery business. The domain WHOIS data is consistent with the expected registrant information for Freshly, indicating legitimacy. However, the lack of accessible content, privacy policies, contact information, and security headers severely limits the ability to assess the website's security posture and compliance. The technical infrastructure appears to rely on basic JavaScript and external scripts from a parking service and Google Adsense, with no visible CMS or advanced frameworks. Overall, the site is currently not serving its intended business content, resulting in a low AI score and limited trustworthiness.

C

Current

current.com

71

Current is a well-established fintech company founded in 1997, providing innovative mobile banking solutions to over 6 million members. Their services include paycheck advances, fee-free overdraft, credit building cards, savings with competitive interest rates, crypto trading without fees, and teen banking debit cards. The company partners with FDIC member banks Choice Financial Group and Cross River Bank to deliver banking services, ensuring regulatory compliance and customer trust. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers seeking modern, app-based financial products.

B

Boll & Branch

bollandbranch.com

73

Boll & Branch is a premium e-commerce retailer specializing in luxury organic bedding, sheets, towels, and home textiles. The company emphasizes ethical sourcing, sustainability, and Fair Trade certification, targeting consumers who value high-quality, toxin-free organic cotton products. Their market position is that of a trusted, upscale brand in the organic bedding sector, with a direct-to-consumer business model leveraging Shopify's platform for online sales. Technically, the website is built on Shopify with modern frameworks and technologies such as React and Oxygen, ensuring fast performance, mobile responsiveness, and good SEO practices. The site includes comprehensive privacy and cookie policies with GDPR compliance and uses marketing and analytics tools like AB Tasty and OneTrust for consent management and user experience optimization. From a security perspective, the site enforces HTTPS, employs strong security headers, and avoids exposing sensitive data. However, it lacks publicly available incident response or vulnerability disclosure information, which could be improved to enhance trust. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Overall, Boll & Branch presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing security policies and incident response contacts and addressing the WHOIS data gap to improve transparency and trust.

B

Bloom & Wild

bloomandwild.com

71

Bloom & Wild is a prominent UK-based e-commerce company specializing in flower delivery services, including letterbox flowers, plants, and gifts. The company targets consumers seeking convenient and reliable floral gifting solutions, positioning itself as a leading online flower delivery brand in the UK market. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, supporting a positive user experience and high trustworthiness. Technically, the website leverages modern web technologies such as Angular, integrates advanced monitoring tools like Datadog RUM, and employs A/B testing via Optimizely. It demonstrates good mobile optimization, accessibility, and SEO practices, contributing to fast performance and broad user reach. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy page, incident response contact details, and a vulnerability disclosure program, which are areas for improvement. The absence of WHOIS registration data slightly reduces trust but does not significantly impact the overall legitimacy given the professional site presentation and security posture. Overall, Bloom & Wild presents a secure, compliant, and user-friendly platform with minor gaps in transparency around security policies and domain registration. Strategic enhancements in these areas would further strengthen its risk profile and stakeholder confidence.

L

Lunchgate AG

lunchgate.ch

47

Lunchgate AG operates a Swiss-focused online platform for discovering restaurants, cafés, and bars, offering users the ability to search by location, cuisine, and make online reservations. The website is professionally designed, primarily in German, and targets a general audience interested in dining options within Switzerland. The platform integrates partner services such as Foratable for reservation management and uses a consent management platform to comply with privacy regulations. Technically, the site uses modern web technologies including AngularJS and JavaScript, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though security headers and explicit security policies are absent. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the site is trustworthy and well-positioned in the hospitality sector.

Bank CIC (Schweiz) AG is a Swiss banking institution serving entrepreneurs and private individuals with complex financial needs. The website presents a professional image with a clear focus on investment, financing, corporate finance, and private banking services. The bank positions itself as a trusted partner offering tailored financial solutions supported by Swiss tradition and corporate governance. The digital infrastructure is modern, leveraging Magnolia CMS and JavaScript frameworks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a credible and trustworthy financial institution with a strong market presence in Switzerland.

A

adbodmer AG

adbodmer.ch

52

adbodmer AG is a Swiss investment group specializing in providing private capital and strategic support to medium-sized companies with growth ambitions, primarily in the DACH region. With approximately 20 years of experience, the company positions itself as a supportive and future-oriented partner for entrepreneurial ventures. The website reflects a professional and consistent brand image, targeting medium-sized enterprises seeking growth capital and expertise. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, leveraging modern web technologies including JavaScript and CSS. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent mechanisms are implemented, ensuring compliance with privacy regulations. From a security perspective, the website enforces HTTPS and employs cookie consent for user privacy. However, it lacks visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen the security posture and user trust.

B

BB Biotech AG

bbbiotech.ch

51

BB Biotech AG is a leading investment company specializing in the biotechnology sector, with over 30 years of experience and a strong market presence on the SIX Swiss Exchange and Frankfurt Stock Exchange. The company focuses on investing in listed biotech companies developing innovative drugs addressing unmet medical needs. The website reflects a mature digital infrastructure built on the Neos CMS and Flow PHP framework, employing modern JavaScript libraries and analytics tools to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism, transparency, and compliance with privacy regulations, supporting BB Biotech's credibility as a trustworthy investment entity.

C

Crédit Mutuel Impact

creditmutuelimpact.fr

66

Crédit Mutuel Impact is a specialized asset management company operating under Crédit Mutuel Alliance Fédérale, focusing on sustainable and impact investments primarily in infrastructure and private equity sectors. The company targets investors interested in long-term environmental and societal impact, managing funds that support renewable energy, electric mobility, and decarbonization projects. The website reflects a professional and consistent brand image aligned with its parent company, offering clear information about its investment philosophy and regulatory compliance. Technically, the site uses modern web technologies including jQuery and YouTube API, with a responsive design and good accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by the strong brand presence and regulatory adherence. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

C

Crédit Mutuel Asset Management

creditmutuel-am.eu

65

Crédit Mutuel Asset Management (CMAM) is a prominent asset management company operating primarily in France and Europe, offering a comprehensive range of investment funds focused on simplicity, transparency, performance, and risk management. The company emphasizes responsible and sustainable finance as part of its core business model. The website reflects a professional and consistent brand image aligned with its parent company, Crédit Mutuel. The target audience includes both professional and non-professional investors across multiple European countries. CMAM's market position is that of a significant player in the financial services sector, leveraging its parent group's reputation and resources. Technically, the website employs modern web technologies including jQuery and YouTube's widget API, with analytics powered by Piano Analytics. The site is served over HTTPS with cookie consent mechanisms that comply with GDPR requirements, offering users granular control over tracking preferences. While the site demonstrates good mobile optimization and SEO practices, accessibility compliance is partial, indicating room for improvement. No CMS or hosting provider details were explicitly identified. From a security perspective, the site benefits from HTTPS encryption and a cookie consent banner, alongside a published vulnerability disclosure policy, indicating a mature security posture. However, explicit security headers such as Content Security Policy or HSTS are not evident, and no direct incident response contacts are provided. The WHOIS data is privacy protected by EURid, which is common for European domains, and does not raise immediate concerns given the professional nature of the site and its alignment with a reputable financial institution. Overall, the security posture is solid but could be enhanced by adding more explicit security policies and headers.

N

Numberly

1000mercis.com

65

Numberly is a well-established marketing technology company based in France, founded in 2005 and operating as a subsidiary of 1000mercis. The company specializes in data-driven marketing solutions including people-based marketing, programmatic advertising, CRM, and big data analytics. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content aimed at business clients seeking advanced marketing technology services. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and is hosted with reputable providers including OVH and AWS DNS services. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position in the marketing technology sector.

The website abtatravelmoney.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks access to actual site content. This prevents extraction of business, contact, or policy information. The domain is relatively new, registered in 2022 via Easyspace Limited without privacy protection, indicating transparency but limited business history. The technical infrastructure leverages Cloudflare's security services, including WAF and Turnstile captcha, indicating a focus on protecting the site from automated abuse or attacks. However, the lack of accessible content and absence of privacy, cookie, or terms policies limit the ability to assess compliance and business credibility. Security posture is partially observable through the use of HTTPS and Cloudflare protection, but no security headers or best practices are visible due to content blocking. Overall, the site appears legitimate but immature and currently inaccessible for detailed analysis.

S

Slonik Events Canada

pgconf.dev

59

PGConf.dev 2026 is a specialized technology conference focused on PostgreSQL development and community growth, organized by Slonik Events Canada. The event is scheduled for May 19–22, 2026, at Simon Fraser University in Vancouver, Canada. The website serves as an informational portal for attendees, sponsors, and contributors, emphasizing community engagement and technical advancement in the PostgreSQL ecosystem. The target audience includes PostgreSQL users, developers, and community organizers. Technically, the website is built using modern web technologies including Svelte and SvelteKit, ensuring fast performance and good mobile optimization. The site structure is clear and professional, with SVG graphics and modular JavaScript loading. However, there is no evidence of a CMS or advanced hosting details. SEO and accessibility are basic but adequate for the site’s purpose. From a security perspective, the site uses HTTPS as indicated by the URL, but no explicit security headers were detected in the provided data. There are no visible forms or data collection points, reducing attack surface, but also no published privacy or cookie policies, which is a compliance gap. The WHOIS data shows privacy protection for the domain registrant, which is common and justified for event sites. No vulnerabilities or suspicious patterns were found. Overall, the website is a credible and professional platform for the PGConf.dev 2026 event but would benefit from enhanced privacy compliance, explicit security headers, and published policies to improve trust and regulatory adherence.

KKTIX is a well-established online event registration and ticketing platform primarily serving Taiwan and Hong Kong markets. Founded in 2013, it offers event organizers tools to create customized event pages, manage ticket sales, and streamline attendee registration with e-tickets. The platform also serves event seekers by providing event discovery and ticket management services. The website demonstrates a mature digital presence with a modern tech stack including React, Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a focus on user experience and data-driven insights. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism despite extensive tracking scripts. Overall, the site is professional, trustworthy, and well-positioned in the event ticketing industry.

H

HackMD

hackmd.io

75

HackMD is a collaborative Markdown editor platform founded in 2015 and based in Taiwan. It offers real-time document editing and sharing capabilities targeted at teams, developers, researchers, educators, and communities. The platform supports integrations such as GitHub and provides features like templates, book mode, and UML graph visualization, positioning itself as a versatile tool for knowledge sharing and collaboration. The business model is primarily freemium SaaS with paid tiers for teams and enterprises, serving a global user base including notable organizations like the Ethereum Foundation. Technically, HackMD employs modern web technologies including React and Next.js, hosted on AWS infrastructure. The website demonstrates excellent performance, mobile optimization, and SEO practices. Security is robust with HTTPS enforcement, CSRF protections, and domain transfer restrictions, although DNSSEC is not enabled. Privacy and terms policies are comprehensive and GDPR compliant, with active use of analytics tools such as Google Tag Manager and Plausible Analytics. Security posture is strong with no detected vulnerabilities or exposed sensitive data. However, explicit incident response contacts and vulnerability disclosure mechanisms are not publicly evident, representing an area for improvement. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy and trustworthiness. Overall, HackMD presents a professional, secure, and user-friendly platform with a strong market position in collaborative documentation tools. Strategic recommendations include enabling DNSSEC, publishing explicit security headers, and establishing clear incident response and vulnerability disclosure channels to further enhance security and trust.

AnyBrowser.org is a personal and advocacy website managed by Cari D. Burstein, hosting multiple small sites including a campaign promoting accessible web design and various archived gaming and community sites. The website targets general internet users interested in accessible web design and niche gaming communities. The business model is primarily personal and hobbyist with no evident commercial intent. The domain is well-established, having been registered since 1997, which supports the site's long-term presence and credibility. Technically, the website uses basic HTML, CSS, and JavaScript technologies, including Google Analytics for visitor tracking. It is hosted by DreamHost, LLC, a reputable hosting provider. The site shows moderate performance and basic mobile optimization, with good accessibility features. However, it lacks modern security headers and DNSSEC, which could improve its security posture. From a security perspective, the site uses HTTPS (implied by the domain and hosting provider but not explicitly confirmed in the data), but no advanced security headers are present. There is no evidence of privacy or cookie policies, GDPR compliance, or vulnerability disclosure mechanisms. The use of Google Analytics without a cookie consent mechanism indicates limited privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is safe for general audiences, with no adult or questionable content. The risk level is low, but improvements in privacy compliance, security headers, and DNS security are recommended to enhance trust and protection.

MySQL.com is the official website for MySQL, the world's most popular open source database, owned and operated by Oracle Corporation. The site offers comprehensive information about MySQL products including MySQL HeatWave, Enterprise Edition, OEM/ISV solutions, and Cluster CGE, targeting developers, enterprises, and OEM partners. The website is professionally designed with clear navigation, rich content, and strong branding consistent with Oracle's corporate identity. Technically, the site employs modern JavaScript libraries, Oracle Infinity analytics, and TrustArc consent management, hosted on Oracle infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security policies and vulnerability disclosure pages are not found. WHOIS data is unavailable or inaccessible, which is unusual but likely due to domain management practices by Oracle. Overall, the site is trustworthy, professional, and compliant with privacy regulations, serving as a key resource for MySQL users and customers.

T

The PHP Group

php.net

68

The PHP.net website represents The PHP Group, the steward of the PHP programming language, a widely used open-source scripting language for web development. The site provides comprehensive resources including downloads, documentation, news, and community engagement. It serves a global developer audience and maintains a strong position as a leading technology resource in its domain. Technically, the website employs modern web technologies, including Matomo for privacy-conscious analytics, and delivers content with good performance and mobile optimization. Security-wise, the site enforces HTTPS and disables tracking cookies in analytics, reflecting a privacy-aware posture. However, it lacks some security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. The absence of WHOIS data is noted but does not detract from the site's legitimacy given its recognized brand and active community presence. Overall, the site is professional, trustworthy, and well-maintained, with room for minor improvements in security and privacy disclosures.

B

Brevo

brevo.com

71

Brevo is a large technology company providing an all-in-one AI-enabled marketing platform that integrates email marketing, SMS, WhatsApp, CRM, and automation tools. It serves over 500,000 customers globally, positioning itself as a competitive player in the marketing automation and CRM SaaS market. The platform emphasizes multichannel communication and AI-driven features to enhance marketing efficiency and customer engagement. Technically, the website is built on modern web technologies including React with Next.js framework, and integrates multiple analytics and marketing tools such as Google Tag Manager, AB Tasty, and Albacross. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard security headers, indicating a good security posture. However, the absence of publicly available WHOIS data and lack of explicit security policies or incident response information slightly reduce transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, Brevo presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in WHOIS transparency and security policy disclosures would further enhance trust and compliance.

S

Stack Exchange Inc.

stackoverflow.co

56

Stack Overflow, operated by Stack Exchange Inc., is a leading technology platform founded in 2008 that empowers developers and technologists worldwide to share knowledge and collaborate. The company offers a public Q&A platform, enterprise solutions such as Stack Overflow for Teams, advertising services, and data licensing for AI development. It holds a strong market position as the go-to resource for developer knowledge sharing and community engagement. The website reflects a mature digital infrastructure with modern technologies like Vue.js, Google Tag Manager, and OneTrust for privacy compliance, delivering excellent performance and user experience across devices. Security posture is robust with HTTPS enforcement and comprehensive security headers, although explicit security policy and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, supported by consistent WHOIS data and recognized industry partnerships.

I

Internet Archive

archive.org

63

Internet Archive is a well-established non-profit digital library founded in 1995, providing free universal access to a vast collection of texts, movies, music, and archived web pages through its Wayback Machine. It holds a leading position in the digital archive space, serving a general audience with a mission to preserve digital content for public access. The website's business model is donation-supported, as evidenced by the donation iframe embedded in the homepage. Technically, the website employs modern web technologies including JavaScript frameworks such as Lit and React, and uses web components for modular UI. The presence of Cloudflare secondary DNS servers suggests a robust DNS infrastructure, although DNSSEC is not enabled. The site is mobile optimized and SEO friendly, with Google site verification meta tags confirming ownership. Performance is moderate, with no critical technical debt observed in the snapshot. From a security perspective, the site uses HTTPS and domain status flags to protect domain integrity. However, no explicit security headers were detected in the HTML content, and DNSSEC is not enabled, representing areas for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is limited as no privacy or cookie policies were found in the provided content, which is a gap for GDPR and other regulations. Overall, the Internet Archive website is trustworthy, professional, and technically sound, with a strong business credibility score. Strategic recommendations include publishing clear privacy and cookie policies, enabling DNSSEC, and adding security headers to enhance security posture and compliance.

Amazon.ca is the Canadian regional e-commerce platform operated by Amazon.com, Inc. It serves Canadian consumers by providing a wide range of products through direct sales and third-party marketplace sellers. The website is a key part of Amazon's global retail presence and is positioned as a leading online retailer in Canada. The site uses Amazon's proprietary UI frameworks and scripts, hosted on Amazon's infrastructure, ensuring scalability and reliability. However, the current content is blocked behind a captcha challenge, limiting direct content access and analysis. Security measures such as captcha indicate a strong security posture to prevent automated abuse. Privacy and terms of service links are present and appear comprehensive, supporting compliance with regulations such as GDPR. The lack of publicly available WHOIS data is consistent with privacy protection practices for large enterprises. Overall, the site demonstrates a high level of business credibility but is currently inaccessible for full technical and content evaluation due to security controls.

G

Giant Rabbit LLC

giantrabbit.com

62

Giant Rabbit LLC is a specialized digital agency focused on developing and supporting websites and data systems for nonprofit organizations. Established in 2003, the company offers a comprehensive suite of services including strategy, design, development, CRM selection and data migration, fundraising analytics, Drupal upgrades, project rescues, managed hosting, support, maintenance, and security. Their market position is niche, targeting nonprofits with pragmatic and mission-focused digital solutions. The website reflects a professional and consistent brand with clear service offerings and contact information. Technically, the website is built on Drupal 10, leveraging modern JavaScript and integrates Google Analytics and Google Tag Manager for tracking. Hosting and DNS services are provided via Amazon AWS infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The absence of DNSSEC and security headers indicates room for improvement in security hardening. From a security perspective, the site uses HTTPS and domain registration protections but lacks published security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is moderate but could be enhanced with additional policies and technical controls. The overall risk assessment is low with recommendations to enable DNSSEC, implement cookie consent, publish security and incident response policies, and add security headers. These steps will improve compliance, user trust, and reduce potential attack surface.

R

Rakuten Viki

viki.com

62

Rakuten Viki is a well-established video streaming platform specializing in Asian dramas and movies, offering free and subscription-based content with English subtitles. It operates under the Rakuten brand, leveraging a strong market position in niche media streaming. The platform supports community contributions and interactive features such as Watch Parties, enhancing user engagement. Technically, the website is built on modern frameworks like Next.js and integrates multiple analytics and privacy management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, nonce-based CSP, and privacy consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include publishing security policies, vulnerability disclosure programs, and enhancing transparency on data protection roles.

F

Föreningen Kontakta

kontakta.se

49

Kontakta is a Swedish industry and interest organization dedicated to promoting ethical customer service and telephone sales practices. The organization provides membership services, guidelines, quality certifications, educational programs, and hosts an annual event to support companies in the customer service and telemarketing sectors. The website is professionally designed, targeting Swedish businesses and organizations involved in these industries. Technically, the site uses modern web technologies including Typekit fonts, Font Awesome icons, and Google Tag Manager for analytics. The site is mobile-optimized and includes a cookie consent mechanism, demonstrating awareness of privacy compliance. Security posture is moderate with HTTPS implied and no visible security headers, and no explicit security policies published. WHOIS data for the www subdomain is missing, but this does not impact the legitimacy of the main domain kontakta.se. Overall, the website presents a trustworthy and professional image suitable for its industry association role.

S

Spelinspektionen

spelinspektionen.se

59

Spelinspektionen is the Swedish government authority responsible for regulating and supervising gambling activities within Sweden. Their mission is to ensure that lotteries, casino games, and other gambling operations are conducted legally, safely, and reliably, while protecting consumer interests and mitigating social harms related to gambling. The website serves as a comprehensive portal for licensing, regulatory decisions, player information, and public communication. Technically, the site is built on a modern CMS platform (likely Episerver), hosted with OVH Cloud services, and integrates various third-party services such as YouTube, ReachMee, and Screen9 for video content and recruitment. Security posture is strong with HTTPS, Content-Security-Policy headers, and cookie consent mechanisms, although some additional security headers and incident response disclosures could improve the security maturity. The WHOIS data for the exact subdomain is unavailable, which is typical for government subdomains, but the website content and contact information strongly affirm its legitimacy. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use.

Vijesti is the largest and most read independent news portal in Montenegro, providing comprehensive coverage of local and international news, sports, entertainment, and opinion columns. The website targets a broad general audience primarily in Montenegro and the surrounding region. It operates on an advertising-based business model, leveraging multiple ad networks and analytics platforms to monetize content. The site demonstrates a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting a large volume of diverse content.

S

Sambic AD

sambic.me

49

Sambic AD is a Montenegro-based real estate and hospitality company specializing in high-quality residential construction and property management. As a subsidiary of Savana AB, it benefits from a solid parent company backing and has a medium-sized workforce. The company has invested significantly in hotels and commercial properties, establishing a strong market presence in Montenegro. The website reflects a professional image with clear business information and contact details, targeting investors and clients in the real estate and hospitality sectors. Technically, the website uses modern web technologies including JavaScript libraries and Google reCAPTCHA for form security, but lacks some advanced security headers and privacy compliance features. The security posture is generally good with HTTPS enforced, but could be improved by adding security headers and formal privacy and cookie policies. Overall, the site is safe, trustworthy, and well-structured, though it would benefit from enhanced compliance and security best practices.

U

University of St.Gallen

hsg.ch

75

The University of St.Gallen is a prestigious Swiss educational institution specializing in management, economics, law, social sciences, international affairs, and computer science. The website serves a diverse audience including students, academics, and business partners, offering comprehensive information about academic programs and research activities. The university holds a strong market position as a leading Swiss university with international recognition. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and jQuery. It integrates multiple third-party analytics and marketing tools, including Google Analytics, Crazy Egg, and various advertising pixels, all managed through a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the website enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. The domain registration data aligns well with the website's identity, reinforcing its legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, with minor recommendations to enhance transparency around security policies and vulnerability disclosures.

T

tfy-consult

tfy-consult.ch

53

tfy-consult is a Swiss consulting firm specializing in helping small and medium-sized enterprises (KMUs) in the energy sector maximize their operational and strategic potential. Their core offering includes a unique KMU-Checkup designed to optimize management efficiency, data-driven decision making, and communication. The company positions itself as a trusted advisor to hidden champions within the Swiss economy, focusing on overcoming common challenges faced by KMUs. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a responsive, professional user experience. Security is well implemented with HTTPS and HSTS, but the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Overall, the site reflects a credible business with room for improvement in privacy compliance and contact transparency.

C

Canonical Ltd

microstack.run

73

Canonical Ltd operates the website canonical.com/openstack, offering enterprise-grade private cloud solutions based on OpenStack technology. The company is well-established with a domain age dating back to 1996 and a strong market presence evidenced by over 10 years in the market and 500+ clouds in production. Their business model focuses on providing open source cloud infrastructure software, consulting, and support services to enterprises seeking control, compliance, and flexibility in their cloud deployments. The website is professionally designed with clear navigation and comprehensive content targeting IT professionals and enterprises interested in private cloud and AI/ML workloads. Technically, the site uses modern web technologies including lazy loading scripts and optimized fonts, with good mobile responsiveness and accessibility. Security posture is solid with HTTPS usage and no exposed sensitive data, though explicit security headers and policies are not evident. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness but could improve transparency around privacy and security policies.

C

Canonical Ltd

mir-server.io

74

Canonical Ltd operates the website canonical.com/mir, promoting Mir, a fast, open, and secure display server designed for Linux-powered devices including desktops, IoT, and embedded products. The company holds a strong market position as a leading provider of Linux-based operating systems and infrastructure solutions, with a focus on enterprise and cloud markets. The website content is professionally crafted, targeting developers, device makers, and enterprises seeking modern graphical environments. Technically, the site employs modern web technologies, responsive design, and efficient performance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and domain registration protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website demonstrates high business credibility and trustworthiness, aligned with Canonical's established brand.

L

Linux Containers

linuxcontainers.org

48

linuxcontainers.org is an established open source umbrella project founded in 2013 that provides a suite of Linux container and virtualization tools including Incus, LXC, LXCFS, and Distrobuilder. The project targets developers, system administrators, and cloud infrastructure professionals seeking flexible, vendor-neutral container solutions. The website presents comprehensive information about active and deprecated projects, community resources, and documentation links, reflecting a mature and well-maintained ecosystem. Technically, the site uses modern web technologies such as HTML5, CSS3 with the Vanilla Framework, and JavaScript libraries like jQuery, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS usage implied, but lacks DNSSEC and explicit security headers. Privacy and compliance documentation such as privacy policy and cookie consent are absent, indicating room for improvement in GDPR compliance. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the project.