Security Directory

S

Sveriges lantbruksuniversitet

slu.se

59

Sveriges lantbruksuniversitet (SLU) is a large, internationally recognized Swedish university specializing in education, research, and environmental analysis focused on sustainable use of biological natural resources. The website presents comprehensive educational programs, research catalogs, and environmental data services targeting students, researchers, and collaborators. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates analytics and cookie consent tools, with a CMS likely Episerver. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and cookie consent, though explicit security policies and headers could be improved. WHOIS data is missing due to querying a subdomain rather than the root domain, but the site’s legitimacy is supported by consistent branding and official social media presence. Overall, the site is professional, trustworthy, and compliant with GDPR.

V

Veepee

veepee.com

68

Veepee is a prominent French e-commerce platform specializing in private sales of branded products and travel offers at discounted prices. The website presents a professional and modern interface with clear navigation and multiple sales campaigns targeting French consumers. The technical infrastructure leverages modern JavaScript frameworks such as Next.js and React, with integrations for user behavior analytics and accessibility tools. Security posture is solid with HTTPS enforcement and standard security headers, complemented by a comprehensive privacy and cookie policy with consent management. However, the absence of WHOIS registration data and explicit security incident response contacts slightly reduce trustworthiness. Overall, Veepee demonstrates a mature digital presence suitable for a large e-commerce business.

R

Red Bull

win.gs

66

Red Bull is a globally recognized energy drink brand with a strong digital presence, particularly localized here for the Finnish market. The website focuses on brand marketing, product promotion, and lifestyle content targeting consumers interested in energy drinks and active lifestyles. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, web fonts, and a global CDN (Akamai) to ensure fast and responsive user experience across devices. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit privacy and cookie policies were not detected in the provided content, indicating room for improvement in privacy compliance. WHOIS data is unavailable, likely due to registry restrictions or privacy, but this does not detract from the brand's legitimacy given its global recognition. Overall, the website is professional, secure, and well-optimized, serving its business goals effectively.

Red Bull Powertrains operates as a specialized engineering company focused on the development and manufacturing of powertrain systems for motorsport, particularly Formula 1. The company leverages the strong Red Bull brand and targets professional motorsport teams and automotive technology sectors. The website demonstrates a modern, responsive design with a robust technical infrastructure, including advanced web fonts and optimized loading strategies. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, which impacts compliance. The lack of WHOIS data raises some concerns about domain legitimacy, but the professional presentation and brand association mitigate this risk. Overall, the site is well-positioned but would benefit from enhanced transparency and compliance documentation.

The website www.ft.com represents the Financial Times, a globally recognized media organization specializing in business and financial news. The site is positioned as a leading international news publisher with a subscription-based business model offering news articles and business analysis. However, the provided HTML content is a security challenge page served by Fastly CDN, blocking access to the full website content and limiting detailed analysis. From a technical perspective, the site uses standard web technologies such as JavaScript, CSS, and HTML5, and is hosted or proxied via Fastly CDN. The presence of a Content-Security-Policy header indicates some security best practices, but the lack of additional security headers and visible SSL configuration details limits the security assessment. No analytics, advertising, or tracking scripts were detected in the provided snippet. Security posture is moderate given the CSP header and HTTPS implied by the domain, but the inability to access full content and lack of WHOIS data reduces confidence. No privacy, cookie, or terms of service policies were found in the provided content, and no contact or incident response information is visible. The domain WHOIS data is unavailable from the .com registry, which is unusual for a major brand and suggests privacy protection or proxy registration. Overall, the site appears legitimate and safe with no adult or explicit content detected. However, the security challenge page and missing WHOIS data limit the depth of analysis. Strategic recommendations include improving transparency of security and privacy policies, ensuring WHOIS data availability or clarity, and enhancing security headers and incident response information.

B

Büro am Draht

dasburo.com

42

Büro am Draht is a German-based digital business solutions provider specializing in developing custom digital platforms that scale with client businesses. Established since 1996, the company leverages over 25 years of experience and a team of 50+ experts to deliver technically excellent and honest digital transformation services. Their offerings include workshops such as Architecture Assessment, Digital Check, and Retrospective, targeting businesses seeking tailored digital solutions. The website content is professional and well-structured, reflecting a medium-sized technology company with a consistent brand presence. Technically, the website uses the Scrivito CMS platform with modern JavaScript and CSS technologies. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security configurations, such as enabling DNSSEC and implementing security headers. The site uses HTTPS, ensuring encrypted communications. From a security perspective, the website shows a moderate security posture with HTTPS enabled and domain transfer protection. However, it lacks visible security headers, privacy and cookie policies, and incident response information, which are critical for compliance and trust. No vulnerabilities or suspicious content were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration, supporting the company's credibility. Overall, the website is a credible and professional digital solutions provider with solid technical infrastructure but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

T

TechDivision GmbH

techdivision.com

65

TechDivision GmbH is a German digital agency specializing in e-commerce, digital consulting, software solutions, and marketing services. The company positions itself as a digital powerhouse with a strong focus on Adobe Experience Cloud technologies and comprehensive digital transformation services. Their website is professionally designed, multilingual (German and English), and targets businesses seeking digital growth and modernization. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript and CSS technologies, ensuring good performance and mobile optimization. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms, and holds an ISO 27001 certification, indicating a mature security posture. However, the absence of explicit security policy and incident response information is a minor gap. The WHOIS data for the domain is missing, which raises some concerns about transparency, but the overall trust signals from the website content and compliance measures suggest legitimacy. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and improving WHOIS transparency.

P

Proofpoint

urldefense.com

69

The domain urldefense.com serves as a component of Proofpoint's cybersecurity infrastructure, specifically supporting their Targeted Attack Protection (TAP) product. The website content is minimal, primarily providing an informational notice that the domain is used to protect enterprise users from targeted phishing and malware threats by scanning URLs. The domain is registered with MarkMonitor Inc., a reputable registrar for enterprise domains, and uses AWS DNS services, indicating a robust technical infrastructure. However, the website itself lacks comprehensive content such as privacy policies, cookie notices, or contact information, which limits its completeness as a public-facing site. From a technical perspective, the site uses basic HTML and CSS with no detected advanced frameworks or CMS. DNS hosting via AWS and domain registration details reflect enterprise-grade management. Security posture is moderate; while domain status codes prevent unauthorized changes, DNSSEC is not enabled and no security headers were detected in the provided data. The site is accessible without WAF or security challenges, and no vulnerabilities or malicious content were found. Security-wise, the domain functions as a protective redirector within Proofpoint's ecosystem, contributing to enterprise email security by blocking malicious URLs. The lack of explicit security policies or incident response contacts on this domain is a gap but may be addressed on the main Proofpoint corporate site. Overall, the domain is legitimate and trustworthy but limited in standalone content and compliance disclosures. Strategically, the domain supports Proofpoint's market position as a leading cybersecurity provider focused on advanced threat protection for enterprises. Recommendations include enabling DNSSEC, adding security headers, and publishing privacy and cookie policies to enhance compliance and trust.

A

Agroforestry Sverige

agroforestry.se

53

Agroforestry Sverige is a Swedish non-profit association dedicated to promoting agroforestry practices through education, collaboration, and dissemination of knowledge. The organization targets advisors, farmers, growers, and landowners interested in sustainable land use and agroforestry. Their business model relies on project funding and volunteer board engagement. The website is built on WordPress, hosted on WordPress.com infrastructure, and uses Jetpack for analytics and some security features. The site is well-structured, mobile-optimized, and provides rich content including articles, events, and educational resources. However, explicit privacy and cookie policies are not found, which is a compliance gap.

S

SMARTBROKER+

smartbrokerplus.de

38

SMARTBROKER+ operates as a cost-effective online brokerage platform based in Germany, offering a wide range of financial products including stocks, bonds, ETFs, derivatives, funds, cryptocurrencies, and savings plans. The platform targets retail investors seeking affordable and comprehensive trading services. The website demonstrates a professional design and clear branding, emphasizing its market position as a cost leader confirmed by Finanztest in 11/2024. Technically, the site is built on modern frameworks such as Next.js and integrates multiple marketing and tracking tools with a consent management platform, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses consent management but lacks explicit security headers and published security policies, indicating room for improvement in security transparency and incident response readiness. Overall, the site is accessible without WAF blocking, contains no adult content, and maintains a high trustworthiness level, though it would benefit from publishing privacy and terms policies and providing clear contact information.

H

Heavy

heavy.com

71

Heavy.com is an established sports news media website founded in 1998, providing comprehensive coverage of major sports leagues including NFL, NBA, MLB, and NHL. The site offers news, player statistics, analysis, trade rumors, and subscription-based alerts targeting sports fans and fantasy sports enthusiasts. Technically, the website is built on WordPress CMS with SEO optimizations via Yoast SEO Premium and uses Cloudflare for DNS and AdThrive for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enabled and domain transfer protections, but lacks visible security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. Overall, the site is professional and trustworthy with moderate user tracking via advertising and analytics services.

B

Bouygues Telecom

bouyguestelecom.fr

65

Bouygues Telecom is a leading French telecommunications company providing mobile phone services, mobile plans, and internet connectivity including Fibre and ADSL. The company is a major player in the French telecom market and operates under the Bouygues Group umbrella. Their website is professionally designed, mobile-optimized, and provides comprehensive information about their products and services targeting general consumers in France. The digital infrastructure leverages modern web technologies such as React and Next.js, ensuring a responsive and performant user experience. Security is robust with HTTPS enforced and multiple security headers implemented, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness, although WHOIS data is not publicly available due to registry policies or privacy protection. Strategic recommendations include publishing explicit security and incident response policies and enhancing accessibility features.

I

IPPEN.MEDIA

ippen.media

62

IPPEN.MEDIA is a major German media publishing group specializing in digital and print journalism with a strong focus on local news. The website presents a professional and comprehensive digital presence, showcasing news articles, network information, and career opportunities. The technical infrastructure leverages modern JavaScript frameworks and asynchronous loading to optimize user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website reflects a mature and credible media business with a strong market position in Germany.

B

Breitling

breitling.com

75

Breitling is a renowned Swiss luxury watchmaker specializing in high-end timepieces that combine style, purpose, and action. The company targets luxury watch consumers and enthusiasts globally, offering a comprehensive range of collections and services including watch sales, servicing, warranty registration, and boutique location. The website reflects a strong market position with consistent branding and excellent content quality. Technically, the site is built on modern frameworks such as Next.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly impacting trust.

C

Clara and Co

claraandco.co.uk

58

Clara and Co is a small retail e-commerce business specializing in luxury women's fashion, emphasizing timeless elegance and contemporary style. The website presents a curated collection aimed at women who appreciate sophisticated and classic fashion. The business model is focused on online retail with features such as newsletter subscriptions and social media engagement, although direct contact details are limited to a contact form. The market position is niche, targeting customers seeking quality and timeless fashion pieces. Technically, the website is built using modern web technologies including Next.js and React, indicating a contemporary and scalable infrastructure. The site is mobile-optimized with good design quality and clear navigation, although some accessibility features could be improved. Performance is moderate, with no major issues detected in the HTML content. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup failed due to domain naming rule violations, which raises concerns about domain registration legitimacy but does not necessarily reflect on the website's operational security. Overall, the website is professional and functional with moderate trustworthiness. Strategic improvements in security headers, privacy compliance, and clearer business contact information would enhance the security posture and user trust. The domain registration inconsistency should be investigated to ensure full legitimacy and compliance.

P

Pierce Me London

piercemelondon.co.uk

68

Pierce Me London is a UK-based small business specializing in body piercing services and retailing body jewellery and aftercare products. The company operates an e-commerce platform built on Shopify, offering a range of piercing essentials and jewellery items. Their market position is niche, targeting consumers interested in body modification and related accessories. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site leverages modern web technologies and Shopify's secure infrastructure, ensuring reliable performance and security. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security and incident response policies are not published. Privacy compliance is good, with a privacy policy and cookie consent banner implemented. Overall, the website is trustworthy and well-maintained, with room for improvement in publishing terms of service and security policies.

S

Soaps n Scrubs

soapsnscrubs.co.uk

64

Soaps n Scrubs is a small UK-based retailer specializing in handmade, natural, and eco-friendly skincare products including soaps and body scrubs. The company targets consumers seeking organic, vegan, and cruelty-free personal care items. Their market position is niche with a focus on quality and sustainability. The website is built on WordPress using the Gutenberg editor, indicating a modern CMS platform with moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, and no advanced security headers were detected, which could be improved to enhance trust and compliance. The WHOIS data for the domain is unavailable due to a naming rules violation error from Nominet UK, which raises some concerns about domain legitimacy, although the website content and business information appear consistent and professional. Overall, the site is functional and trustworthy from a content perspective but would benefit from improved security and compliance transparency.

C

CH Media

chmediawerbung.ch

68

CH Media operates a comprehensive advertising portal targeting Swiss advertisers with cross-media offerings including newspapers, magazines, radio, TV, and digital platforms. The company has a strong market position as the largest private broadcaster group in Switzerland, reaching millions daily. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript and CSS technologies, including Lottie animations and Piwik PRO analytics, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security policies and incident response.

F

ford.si

ford.si

66

Ford.si is the official website for Ford vehicles in Slovenia, representing a well-established automotive brand with a domain age dating back to 2004. The site offers comprehensive information on Ford's vehicle lineup, including electric and hybrid models, servicing options, financing, and test drives, targeting Slovenian consumers and businesses. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as Ruby on Rails, Stimulus JS, Turbo, and Mapbox GL JS, complemented by marketing and analytics tools from HubSpot and Google Tag Manager. Security posture is strong with HTTPS enforcement, security headers, and consent management, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a positive user experience and clear brand consistency.

Ford Romania operates an official regional website providing comprehensive information and offers for new Ford vehicles. The site targets Romanian consumers interested in purchasing or learning about Ford cars, offering detailed specifications, pricing, and dealer information. The business model focuses on automotive sales and marketing, supported by a strong brand presence and consistent digital branding aligned with the global Ford Motor Company. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager CMS, Adobe Analytics, and Akamai CDN services, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and aligned with industry standards for automotive e-commerce and marketing.

Ford Polska operates as the official regional website for Ford Motor Company in Poland, providing comprehensive information about their vehicle lineup including electric cars, SUVs, and commercial vehicles. The site targets Polish consumers interested in Ford products, offering services such as test drive scheduling and dealer location. The website demonstrates a mature digital infrastructure, leveraging Adobe Experience Manager CMS, Adobe Analytics, and Akamai service workers to deliver a performant and secure user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a major automotive brand's regional presence.

Ford Norge operates the official Norwegian website for Ford Motor Company, providing comprehensive information on passenger and commercial vehicles, including electric models. The site targets Norwegian consumers and businesses interested in Ford products, offering vehicle specifications, finance options, and dealer locators. The website is built on modern web technologies including Adobe Experience Manager and uses Akamai for hosting and performance optimization. It employs Adobe Analytics for user tracking and has implemented cookie consent mechanisms to comply with privacy regulations. Security posture is strong with HTTPS enforced and service workers for performance, though explicit security headers and detailed privacy policies are not detected in the provided content. The domain WHOIS data is unavailable from the Norid service, likely due to privacy protection, which is common for large brand domains. Overall, the site demonstrates a professional and trustworthy presence with good technical implementation and business credibility.

Ford Magyarország operates as the official Hungarian website for the Ford automotive brand, providing comprehensive information on passenger cars, commercial vehicles, pickups, financing options, and aftersales services including maintenance and repairs. The website targets Hungarian consumers interested in purchasing or servicing Ford vehicles, positioning itself as a trusted national brand portal. Technically, the site leverages Adobe Experience Manager as its CMS, integrates Adobe Analytics for data insights, and uses Akamai for content delivery and service worker capabilities, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and modern security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the site presents a professional, trustworthy, and user-friendly experience with moderate tracking balanced by user consent.

Ford Italia operates the official Italian website for Ford Motor Company, providing detailed information on vehicle models, pricing, technical specifications, and promotional offers. The site targets Italian consumers interested in purchasing or learning about Ford vehicles, including commercial vehicles. The business is positioned as a major automotive brand with a strong market presence in Italy, supported by a comprehensive digital platform built on Adobe Experience Manager and leveraging Akamai for performance and security.

Ford Ireland operates as the official regional website for Ford Motor Company, providing comprehensive information on vehicle models, pricing, specifications, and promotions tailored for the Irish market. The site targets consumers interested in purchasing or financing Ford vehicles, offering detailed product data and dealer locator services. The business is positioned as a leading automotive brand with a strong market presence in Ireland, supported by the global Ford Motor Company brand. Technically, the website leverages Adobe Experience Manager as its CMS platform, integrated with Adobe Launch for tag management and analytics, and Akamai for content delivery and service worker-based performance enhancements. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. The technology stack is modern and robust, supporting a professional user experience. From a security perspective, the site enforces HTTPS and employs security best practices such as service workers and cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly disclosed, which could be enhanced to improve transparency and trust. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR and cookie regulations. The domain's WHOIS data is not publicly available due to .ie domain privacy norms, but the site aligns well with the official Ford brand, indicating legitimacy. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining regular security audits to sustain a strong security posture.

Ford Spain operates a comprehensive and professionally designed website serving as the official portal for Ford vehicles in Spain. The site provides detailed vehicle specifications, pricing, and promotional information tailored to the Spanish market. The use of Adobe Experience Manager and Akamai service workers indicates a mature technical infrastructure supporting performance and scalability. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. However, explicit contact information and security incident response policies are not readily visible in the provided content, which could be improved to enhance user trust and compliance transparency. Overall, the website demonstrates a strong security posture with HTTPS enforcement and modern web technologies, positioning it as a reliable and authoritative source for Ford customers in Spain.

Ford Deutschland GmbH operates the official German website for Ford, providing comprehensive information on passenger cars, commercial vehicles, financing, and after-sales services. The website targets consumers and business customers in Germany, offering vehicle configurators, test drive bookings, and detailed product information. The brand is well-established with a strong market position in the automotive sector. Technically, the site leverages Adobe Experience Manager CMS, Adobe Analytics, and Akamai CDN services, reflecting a mature digital infrastructure. The website is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting Ford's enterprise-level digital presence in Germany.

Ford.cz is the official website for Ford Motor Company in the Czech Republic, providing comprehensive information about Ford vehicles, pricing, and dealer services. The site targets consumers and businesses interested in purchasing or learning about Ford vehicles in the region. It leverages modern web technologies including Adobe Experience Manager and Adobe Analytics, ensuring a professional and responsive user experience. The website demonstrates strong branding consistency and good content quality, supporting Ford's market position as a leading automotive brand in the Czech market. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the brand and content quality. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure programs to enhance trust and compliance.

The website www.ford.be serves as the official Ford Belgium landing page, primarily offering a language selection interface for Dutch and French users. It represents a major automotive brand with a strong market presence in Belgium, providing vehicle information and dealer services. The site employs modern web technologies including Adobe DTM, Google Tag Manager, and Akamai service workers, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and use of service workers, but lacks visible security headers and explicit privacy or cookie policies on this landing page. No forms or direct contact information are present, limiting data collection points. Overall, the site appears legitimate and professionally branded, but could improve transparency and compliance by adding privacy and cookie policies and enhancing security headers.

S

Springer Nature

springernature.com

66

Springer Nature is a leading global academic publisher with a strong market position and a comprehensive portfolio of services aimed at researchers, authors, librarians, and institutions. The website reflects a mature digital presence with a focus on open science, licensing, and research dissemination. The technical infrastructure leverages modern web technologies including CoreMedia CMS, Google Tag Manager, and reCAPTCHA, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

A

Aargauer Zeitung

aargauerzeitung.ch

60

Aargauer Zeitung is a well-established regional news media portal serving the Aargau region in Switzerland since 1996. It provides comprehensive news coverage including sports, politics, economy, and entertainment, targeting a regional audience. The website is professionally designed with consistent branding and good content quality, supported by a large media company, CH Media AG. The digital infrastructure leverages modern web technologies such as React, structured data, and integrates multiple advertising and analytics services to support its business model. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a mature digital presence with moderate tracking and advertising typical for media outlets.

N

NVA Online Advertising B.V.

axion.ch

54

The website axion.ch is a domain sales landing page operated by NVA Online Advertising B.V., a domain expert company based in the Netherlands. The site offers the domain axion.ch for sale through the Nameshift.com platform, which provides escrow services to ensure safe and fast domain transfers. The business model focuses on domain brokerage with an emphasis on security and buyer protection via escrow. The target audience includes domain investors and businesses seeking premium domain names. The website content is professional and consistent with the business purpose, featuring clear calls to action and trust signals such as payment method icons and a Trustpilot widget. Technically, the website is built using modern web technologies including SvelteKit and JavaScript, hosted on a CDN associated with Nameshift.com. The site is fast, mobile-optimized, and has a clean design, though accessibility features are basic. SEO optimization is minimal but sufficient for the domain sale purpose. No CMS or complex platform is detected, indicating a lightweight and focused implementation. From a security perspective, the site uses HTTPS (implied by CDN usage and external links), but no explicit security headers or policies are visible. There is no privacy or cookie policy, nor incident response or vulnerability disclosure information, which are gaps in compliance and security transparency. The escrow service mitigates transactional risk, but the site could improve by adding formal security and privacy documentation. Overall, the website is legitimate and trustworthy for its purpose, with a moderate security posture and good business credibility. Strategic improvements in privacy compliance and security transparency would enhance trust and reduce risk.

C

Crédit Mutuel de Bretagne

cmb.fr

66

Crédit Mutuel de Bretagne is a regional cooperative and mutual bank serving individuals, professionals, enterprises, associations, and collectives primarily in Brittany, France. The website offers comprehensive banking services including account management, online account opening, and card services, positioning itself as a trusted regional financial institution under the Crédit Mutuel Arkéa group. The site is professionally designed with consistent branding and clear navigation tailored to its diverse audience segments. Technically, the website leverages modern web technologies including JavaScript, CSS, Bootstrap, and Jalios CMS. It integrates advanced consent management via Didomi and analytics through Piano Analytics and Google Tag Manager, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the website enforces HTTPS, employs cookie consent mechanisms aligned with GDPR, and avoids exposing sensitive data. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities. The absence of WHOIS data is likely due to privacy protection, which is justified for a financial institution. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a major regional bank. Strategic recommendations include enhancing visible security headers, publishing clear security and incident response policies, and maintaining vigilance on third-party scripts to sustain trust and compliance.

P

Free Images & Free stock photos - PxHere

pxhere.com

59

PxHere is a free stock photo platform offering over 1.1 million high-quality images under the CC0 license, allowing free commercial use without attribution. The website targets a broad audience including content creators, marketers, and businesses seeking royalty-free images. It supports multiple languages, enhancing accessibility globally. Technically, the site uses standard web technologies including JavaScript and Google Analytics for user tracking. While the site design and content quality are good, there is a lack of visible security headers and privacy policies, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, PxHere presents a moderate risk profile with room for improvement in security and compliance documentation.

Winds of Dawn is a small, niche community website dedicated to a clan within the online role-playing game Clan Lord. The site serves as an informational hub for clan members and new players, offering clan history, leadership details, guides, newsletters, and galleries. The business model is community-focused without commercial transactions or extensive digital services. The website is hosted by DreamHost and has been active since 2000, indicating a stable and long-term presence in its niche. Technically, the site is built with basic HTML and CSS without modern frameworks or CMS platforms. It lacks mobile optimization and advanced SEO or accessibility features. Performance is moderate given the simple static content. No analytics or tracking technologies are detected, reflecting a privacy-conscious or minimalistic approach. From a security perspective, the site lacks HTTPS information in the provided data, no DNSSEC is enabled, and no security headers are detected. There are no visible vulnerabilities or exposed sensitive data, but the absence of modern security practices and policies is notable. No privacy, cookie, or terms of service policies are present, which limits compliance with GDPR or similar regulations. Overall, the website is safe and trustworthy for its intended audience but would benefit from modernizing its technical infrastructure, improving security posture, and adding privacy and security policies to enhance compliance and user trust.

P

Primal

primal.net

55

Primal.net is a technology-focused website dedicated to discovering and presenting content related to Nostr, a decentralized social network protocol. The website appears to be a small-scale operation with a modern frontend architecture leveraging JavaScript modules and CSS. The domain is well-established, having been registered since 2002, which supports the legitimacy and maturity of the business. However, the website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which limits transparency and user trust. Technically, the site uses Cloudflare DNS and serves content over HTTPS, but no advanced security headers or analytics tools are detected in the provided content.

SDF Public Access UNIX System, Inc. operates a long-standing community platform providing free UNIX shell accounts, vintage system access, and federated social media services such as Mastodon. Established in 1987, it serves a niche audience of Unix enthusiasts and open source community members. The business model is non-profit, supported by donations, and the platform is recognized for its historical significance and community-driven approach. Technically, the website uses basic HTML and CSS with legacy UNIX shell scripting tools (ksh, sed, awk) for page generation. The platform shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS. Hosting details are not explicit, but domain registration is stable and consistent with the business identity. Security posture is moderate with no detected advanced security headers or published policies. The site uses HTTPS (assumed) but lacks DNSSEC and formal privacy or cookie policies, indicating compliance gaps. No vulnerabilities or exposed sensitive data were found. Incident response contact is provided via [email protected]. Overall, the website is trustworthy and serves its community well but would benefit from enhanced security practices, formal privacy compliance, and improved technical modernization to reduce risk and improve user experience.

4

404 Media

404media.co

62

404 Media is a new independent media company founded by experienced technology journalists. The company focuses on technology journalism and media publishing, targeting a general audience interested in tech news. The website is professionally designed using modern web technologies including Ghost CMS, and integrates third-party services such as Disqus for comments, Stripe for payments, and Plausible for analytics. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal privacy or cookie policies. No contact information or incident response details are provided, which limits transparency. Overall, the website is safe, trustworthy, and professionally maintained but could improve in privacy compliance and security best practices.

A

ARD Online

tagesschau.de

68

tagesschau.de is a leading German news website operated by ARD Online, providing comprehensive news coverage and information updates 24/7. It holds a prominent market position as a trusted national news source in Germany, offering multimedia content including articles and videos. The website demonstrates a mature technical infrastructure leveraging modern web technologies, Google Cloud DNS hosting, and structured data for SEO optimization. Mobile responsiveness and accessibility are well implemented, enhancing user experience across devices. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving a broad general audience with safe content.

T

The NetBSD Foundation, Inc.

pkgsrc.org

53

pkgsrc.org is the official website for pkgsrc, a mature and widely used package management framework primarily for UNIX-like operating systems such as NetBSD, SmartOS, and others. The site is maintained by The NetBSD Foundation, Inc., reflecting a strong open source community focus. The website provides comprehensive information about pkgsrc releases, installation instructions, community support, and security practices. It serves a technical audience including system administrators and developers who require reliable package management solutions across multiple platforms. The business model is centered on open source software distribution and community-driven development, positioning pkgsrc as a key player in the UNIX package management ecosystem. Technically, the website is straightforward, built with standard HTML and CSS without complex frameworks or CMS. It supports multiple platforms and integrates with CVS for source control. The site is performant and accessible with a basic mobile optimization level. However, it lacks modern security headers and explicit privacy or cookie policies, which are areas for improvement. The domain is well-established with consistent WHOIS data, reinforcing trust and legitimacy. From a security perspective, pkgsrc.org demonstrates good practices such as signed vulnerability databases and domain transfer protections. However, it lacks DNSSEC and explicit incident response contacts or security policies on the site. No forms or tracking technologies are present, minimizing attack surface and privacy concerns. Overall, the security posture is solid but could benefit from enhanced transparency and modern security headers. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, adding security headers, enabling DNSSEC, and publishing clear contact and incident response information. These steps would enhance trust, compliance, and security culture, supporting the long-term sustainability of the pkgsrc project and its community.

C

CIC

cic.fr

77

CIC (Crédit industriel et commercial) is a major French banking and insurance group offering a wide range of financial services including accounts, loans, insurance, savings, and digital banking solutions. The website targets individuals, entrepreneurs, professionals, and associations primarily in France, emphasizing proximity banking and ethical commitments as an enterprise with a mission. The digital infrastructure is modern and well-optimized for mobile and accessibility, leveraging multiple third-party services for enhanced user experience and analytics. Security posture is strong with HTTPS and secure practices, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is noted but likely due to AFNIC domain registration policies. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a large customer base effectively.

H

Hager

hager.sg

70

Hager is a well-established company specializing in electrical products and solutions, targeting primarily B2B customers in the energy sector. The website for the Singapore market offers a comprehensive product catalog including energy distribution, main switchgear, modular devices, and energy management solutions. The company demonstrates a strong market position with a large-scale business presence and a domain registered since 1997, indicating stability and trustworthiness. Technically, the website is built on the Sitecore CMS platform, leveraging modern web technologies such as Algolia for search, Google Analytics for tracking, and CookieHub for cookie consent management. The site is hosted on Akamai infrastructure, ensuring reliable performance and security. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the analyzed content. Overall, the website is professional, user-friendly, and trustworthy, with moderate tracking and analytics usage. Recommendations include enhancing privacy disclosures, publishing security policies, and improving security header implementation to strengthen compliance and security posture.

Ford Motor Company operates a comprehensive and professionally designed website showcasing its extensive lineup of vehicles including hybrid, electric, SUVs, trucks, and commercial vehicles. The site targets consumers and commercial buyers in the automotive sector, providing detailed product information, pricing, and dealer location services. The company is a major player in the global automotive market with a strong brand presence and consistent messaging. Technically, the website leverages modern web technologies including Adobe Experience Manager, Adobe Target, and Akamai CDN, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not prominently published. WHOIS data for the domain is unavailable, likely due to registry restrictions, but the website's legitimacy is supported by strong brand signals and professional content. Overall, the site reflects a mature digital presence with good security and privacy practices, suitable for a large enterprise in the transportation industry.

Ford Motor Company is a globally recognized American multinational automaker with a significant presence in Europe, as evidenced by the ford.eu website. The site serves as a country selection portal directing users to localized Ford websites across many European countries. The business model focuses on manufacturing and selling automobiles, supported by localized digital experiences tailored to regional markets. The company is well-established, founded in 1903, and operates at an enterprise scale with a strong brand identity and consistent digital branding across its European web presence. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and Akamai CDN services to ensure fast, reliable, and scalable delivery. The site is mobile optimized and incorporates performance monitoring tools such as Adobe DTM and Akamai Boomerang. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident, and no public security or incident response policies are published. The absence of WHOIS data is due to EURid privacy policies for .eu domains, but the domain usage and content strongly indicate legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and security posture. Strategic improvements could include publishing security policies, adding security headers, and providing direct contact information for security incidents to enhance trust and compliance.

The website www.ford.ch serves as the official localized landing page for Ford in Switzerland, primarily offering language selection options for German, French, and Italian users. It represents a major global automotive brand with a strong market presence and consistent branding. The site is built on modern web technologies including Adobe Experience Manager CMS and integrates advanced performance and analytics tools such as Akamai service workers and Adobe Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and privacy policies are absent on this landing page. The absence of privacy and cookie policies, as well as contact information, limits compliance and user trust aspects. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

B

Boll & Branch

bollandbranch.com

73

Boll & Branch is a premium e-commerce retailer specializing in luxury organic bedding, sheets, towels, and home textiles. The company emphasizes ethical sourcing, sustainability, and Fair Trade certification, targeting consumers who value high-quality, toxin-free organic cotton products. Their market position is that of a trusted, upscale brand in the organic bedding sector, with a direct-to-consumer business model leveraging Shopify's platform for online sales. Technically, the website is built on Shopify with modern frameworks and technologies such as React and Oxygen, ensuring fast performance, mobile responsiveness, and good SEO practices. The site includes comprehensive privacy and cookie policies with GDPR compliance and uses marketing and analytics tools like AB Tasty and OneTrust for consent management and user experience optimization. From a security perspective, the site enforces HTTPS, employs strong security headers, and avoids exposing sensitive data. However, it lacks publicly available incident response or vulnerability disclosure information, which could be improved to enhance trust. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Overall, Boll & Branch presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing security policies and incident response contacts and addressing the WHOIS data gap to improve transparency and trust.

L

Lunchgate AG

lunchgate.ch

47

Lunchgate AG operates a Swiss-focused online platform for discovering restaurants, cafés, and bars, offering users the ability to search by location, cuisine, and make online reservations. The website is professionally designed, primarily in German, and targets a general audience interested in dining options within Switzerland. The platform integrates partner services such as Foratable for reservation management and uses a consent management platform to comply with privacy regulations. Technically, the site uses modern web technologies including AngularJS and JavaScript, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though security headers and explicit security policies are absent. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the site is trustworthy and well-positioned in the hospitality sector.

Bank CIC (Schweiz) AG is a Swiss banking institution serving entrepreneurs and private individuals with complex financial needs. The website presents a professional image with a clear focus on investment, financing, corporate finance, and private banking services. The bank positions itself as a trusted partner offering tailored financial solutions supported by Swiss tradition and corporate governance. The digital infrastructure is modern, leveraging Magnolia CMS and JavaScript frameworks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a credible and trustworthy financial institution with a strong market presence in Switzerland.

A

adbodmer AG

adbodmer.ch

52

adbodmer AG is a Swiss investment group specializing in providing private capital and strategic support to medium-sized companies with growth ambitions, primarily in the DACH region. With approximately 20 years of experience, the company positions itself as a supportive and future-oriented partner for entrepreneurial ventures. The website reflects a professional and consistent brand image, targeting medium-sized enterprises seeking growth capital and expertise. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, leveraging modern web technologies including JavaScript and CSS. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent mechanisms are implemented, ensuring compliance with privacy regulations. From a security perspective, the website enforces HTTPS and employs cookie consent for user privacy. However, it lacks visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen the security posture and user trust.

C

Crédit Mutuel Impact

creditmutuelimpact.fr

66

Crédit Mutuel Impact is a specialized asset management company operating under Crédit Mutuel Alliance Fédérale, focusing on sustainable and impact investments primarily in infrastructure and private equity sectors. The company targets investors interested in long-term environmental and societal impact, managing funds that support renewable energy, electric mobility, and decarbonization projects. The website reflects a professional and consistent brand image aligned with its parent company, offering clear information about its investment philosophy and regulatory compliance. Technically, the site uses modern web technologies including jQuery and YouTube API, with a responsive design and good accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by the strong brand presence and regulatory adherence. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.