Security Directory

P

Paramount Global

cbslocal.com

67

CBS Local is a well-established local news and streaming news service operated under the umbrella of Paramount Global, a major US media conglomerate. The website provides comprehensive local news coverage and live streaming services targeting a general audience interested in regional and national news. The business model is primarily advertising-supported, leveraging digital ad networks and consent-based tracking technologies. The site demonstrates strong branding consistency and a professional digital presence with extensive social media integration.

A

AUDI AG

audi.com

73

Audi AG operates a comprehensive international corporate website showcasing its leadership in the premium automotive sector. The site provides detailed information on innovation, sustainability, investor relations, and career opportunities, targeting investors, job seekers, and automotive enthusiasts. The technical infrastructure leverages Adobe Experience Manager with a modern React-based frontend, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and a robust cookie consent mechanism, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is unusual but likely due to registry restrictions rather than malicious intent. Overall, the website reflects a mature digital presence aligned with Audi's market position.

O

OVHcloud

ovh.com

72

OVHcloud is a prominent European cloud service provider offering a wide range of infrastructure and platform services including dedicated servers, VPS, bare metal servers, storage, and network solutions. The company targets businesses and developers seeking scalable and secure cloud infrastructure. Their market position is strong in Europe with a growing global footprint. The website reflects a mature digital presence with good design, mobile optimization, and clear navigation. Technically, the site employs modern web technologies, security best practices including HTTPS and security headers, and integrates analytics and error monitoring tools. Security posture is robust with certifications such as ISO 27001 and SecNumCloud, indicating compliance with recognized standards. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the site is professional, secure, and compliant, suitable for enterprise customers.

U

Upsun

platform.sh

72

Upsun is a technology company specializing in providing a highly flexible Platform as a Service (PaaS) designed for developers and organizations seeking customizable cloud application hosting. The platform emphasizes developer flexibility, self-service capabilities, and predictable pricing, supporting multiple frameworks and languages such as Django, Next.js, Drupal, and more. The company has a strong market position as a modern, developer-friendly cloud platform, with a focus on eliminating staging drift and accelerating release confidence. Founded in 2010, Upsun has evolved from its former identity as Platform.sh and maintains a consistent brand presence with a professional and well-structured website. Technically, the website is built using modern web technologies including Gatsby and React, optimized for performance, mobile responsiveness, and SEO. The platform integrates with major cloud providers like AWS, Azure, and Google Cloud Platform, indicating a mature and scalable infrastructure. The site employs extensive analytics and marketing tools with appropriate consent mechanisms, reflecting digital maturity and compliance awareness. From a security perspective, Upsun enforces HTTPS, implements a strict Content-Security-Policy, and maintains domain transfer protections. However, DNSSEC is not enabled, and there is no public security.txt or explicit incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Upsun presents a trustworthy and professional online presence with strong business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing incident response transparency to further strengthen security posture and compliance.

State of the Map is a well-established series of annual conferences dedicated to the OpenStreetMap community, providing a platform for knowledge sharing and networking among mapping enthusiasts and geospatial professionals worldwide. The website serves primarily as an informational hub listing past and upcoming events with locations and dates, reflecting a consistent history since 2006. Technically, the site is a simple static HTML implementation with minimal modern web technologies detected, hosted behind Cloudflare DNS but lacking advanced security headers or HTTPS status details in the provided data. Security posture is minimal with no visible privacy or cookie policies, no contact or incident response information, and no vulnerability disclosure mechanisms. The domain registration data is consistent and legitimate, supporting the authenticity of the site and its long-standing presence in the community. Overall, the site is functional for its purpose but would benefit from enhanced security, privacy compliance, and richer technical implementation to improve trust and user experience.

S

SotM-EU

sotm-eu.org

57

SotM-EU is a well-established annual conference focused on the OpenStreetMap community in Europe, hosted by Karlsruhe University of Applied Sciences. The website provides comprehensive information about the event, including schedules, registration, sponsors, and community activities. The target audience includes mappers, developers, and GIS professionals interested in OpenStreetMap. The business operates on a non-profit model relying on sponsorships and ticket sales, positioning itself as a key event in the European OpenStreetMap ecosystem. Technically, the website uses a simple but effective stack with HTML, CSS, JavaScript, and Turbolinks for navigation. Hosting is provided by DreamHost, LLC. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site approach. From a security perspective, HTTPS is enabled, but the absence of security headers such as CSP, HSTS, and X-Frame-Options reduces the overall security posture. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact emails or phone numbers are provided on the homepage, limiting direct communication channels. The domain registration is consistent with the website's history and shows no suspicious patterns. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen user trust and regulatory adherence.

N

NAVER

naver.com

64

NAVER is a leading South Korean internet portal offering a wide range of services including search engine capabilities, news aggregation, live streaming, and gaming content. The website demonstrates a high level of digital maturity with modern JavaScript SDKs and responsive design optimized for both desktop and mobile platforms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and privacy policies suggests room for improvement in compliance and security best practices. Overall, NAVER presents a professional, trustworthy, and content-rich platform serving a general audience in South Korea.

UGURUS was a specialized training and mentorship platform targeting digital agencies and freelancers, operating for over 12 years before its discontinuation in March 2025. The platform provided educational resources, community engagement, and a podcast to support agency growth. The website is built on WordPress, uses Cloudflare DNS, and is linked to DigitalOcean and Cloudways for hosting and support. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is trustworthy but shows signs of being in a sunset phase with limited active content.

C

CSS-Tricks

css-tricks.com

68

CSS-Tricks is a well-established online platform dedicated to web development education, focusing primarily on CSS and front-end technologies. Founded in 2007, it serves a global audience of web developers, designers, and technologists by providing high-quality articles, guides, and tutorials. The site maintains a strong market position as a reputable resource in the web development community, supported by consistent content updates and a professional digital presence. The business model revolves around content publishing, advertising partnerships, and newsletter subscriptions, with DigitalOcean as a notable sponsor and hosting partner. Technically, the website is built on WordPress, leveraging modern web technologies including PHP, JavaScript, and CSS. It employs Cloudflare for DNS and CDN services, ensuring fast performance and robust availability. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a superior user experience. Hosting on DigitalOcean via Cloudways further supports its performance and scalability needs. From a security perspective, CSS-Tricks enforces HTTPS with strong security headers, protecting user data and enhancing trust. While DNSSEC is not enabled, the domain registration is secured with registrar locks preventing unauthorized transfers or deletions. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. However, explicit security policies or incident response information are not publicly available, representing an area for potential improvement. Overall, CSS-Tricks presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include enabling DNSSEC, publishing a formal security policy and incident response plan, and considering a vulnerability disclosure program to further enhance security posture and stakeholder confidence.

U

Upsun

platformsh.site

70

Upsun is a technology company offering a highly flexible Platform as a Service (PaaS) designed to empower developers with self-service capabilities and predictable pricing. The platform supports multiple popular frameworks and languages, enabling organizations to deploy production-perfect clones of their applications across major cloud providers such as AWS, Azure, and Google Cloud Platform. Formerly known as Platform.sh, Upsun positions itself as a reliable and innovative cloud application platform targeting developers and businesses seeking efficient application delivery and modernization solutions. The website demonstrates a high level of digital maturity with modern technologies like Gatsby and React, excellent mobile optimization, and comprehensive SEO practices. Security posture is strong with HTTPS enforcement, Content Security Policy, and domain transfer protections, although enabling DNSSEC and publishing explicit incident response policies would enhance trust further. Overall, Upsun presents a professional, trustworthy, and technically sound online presence.

G

Germany Trade & Invest

gtai.de

73

Germany Trade & Invest (GTAI) is the official economic promotion agency of the Federal Republic of Germany, dedicated to assisting international companies in establishing and expanding their business operations in Germany. The website serves as a comprehensive resource offering detailed information on Germany's business environment, industry sectors, investment guides, and support services. It targets international investors and companies seeking to enter the German market, providing free confidential advice and project support. The agency maintains a strong market position as a government-backed entity with a wide network of international offices and active participation in global events. Technically, the website is built on CoreMedia CMS and employs modern web technologies including JavaScript, CSS, and asynchronous script loading. It integrates analytics and tracking tools such as eTracker and Crazy Egg, alongside a GDPR-compliant cookie consent mechanism powered by Usercentrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the website's official nature, showing consistent domain registration and hosting information. Overall, GTAI's website reflects a professional, trustworthy, and well-maintained digital presence suitable for its role as a government investment promotion agency. Strategic recommendations include publishing explicit privacy and security policies, enhancing security header implementation, and providing clear incident response contacts to further strengthen trust and compliance.

F

F-Droid Contributors

f-droid.org

74

F-Droid is a well-established open source Android app repository founded in 2010, providing a catalog and client for free and open source software applications. It targets Android users who prefer privacy-respecting and open source alternatives to mainstream app stores. The website is donation-funded and emphasizes community trust and transparency, including PGP verification for downloads. Technically, the site uses standard web technologies with good mobile optimization and SEO practices, hosted under a reputable registrar. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers, and no formal security or privacy policies published on the main page. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

F

Fullstory

fullstory.com

67

Fullstory operates as an enterprise SaaS company specializing in behavioral data platforms that analyze user sentiment to improve digital products. The website presents a professional and modern interface built on Gatsby and React, indicating a mature technical infrastructure. However, the absence of publicly available WHOIS data suggests domain privacy protection, which is common for technology companies but reduces transparency. Security posture is moderate due to lack of visible security headers, policies, or incident response information. Privacy compliance is weak as no privacy or cookie policies were detected. Overall, the site is trustworthy and well-branded but would benefit from enhanced transparency and security disclosures.

D

DigitalOcean

digitaloceanspaces.com

71

DigitalOcean is a prominent cloud infrastructure provider focused on delivering simple, scalable, and developer-friendly cloud solutions. Their product suite includes virtual machines (Droplets), Kubernetes, managed databases, AI GPU services, and application platforms, targeting developers, startups, and small to medium businesses. The company positions itself as a cost-effective and easy-to-use alternative to larger cloud providers, emphasizing predictable pricing and strong customer support. Technically, the website is built using modern frameworks such as Next.js and React, with a fast, mobile-optimized, and accessible design. The use of analytics tools like Amplitude and Google Tag Manager indicates a mature digital marketing and user tracking strategy, balanced with comprehensive privacy and cookie policies that comply with GDPR standards. From a security perspective, the site enforces HTTPS, implements key security headers, and provides clear incident response channels. Certifications such as SOC 2 Type II and ISO 27001 further demonstrate a commitment to security best practices. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. The lack of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the business. Strategic recommendations include ongoing security audits, enhanced transparency on incident response, and continuous improvement of privacy measures.

I

Industrie- und Handelskammer

ihk.de

71

The website www.ihk.de serves as the central portal for the German Chambers of Industry and Commerce (Industrie- und Handelskammer), a large government-related institution providing business support, consulting, certification, and regional economic development services across Germany. It targets businesses and entrepreneurs nationwide, offering access to multiple regional chambers with detailed contact information and localized services. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on the CoreMedia CMS platform, utilizing modern JavaScript libraries and analytics tools such as eTracker. It employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. While security headers are not explicitly detected, the presence of CSRF tokens and cookie consent tools indicate a reasonable security posture. No critical vulnerabilities or suspicious content were found. Overall, the security posture is solid but could be improved by adding explicit security headers and publishing a formal security policy or vulnerability disclosure framework. Privacy compliance is good, with clear privacy and cookie policies. The domain WHOIS data aligns with the website's official nature, supporting its legitimacy. No WAF or blocking mechanisms interfere with content access. The site is safe for general audiences, contains no adult or questionable content, and demonstrates high trustworthiness. Strategic recommendations include enhancing security headers, establishing incident response contacts, and improving transparency around security practices to further strengthen trust and compliance.

Dell Technologies is a global leader in technology solutions, offering a broad portfolio of products, services, and support tailored for corporate and enterprise customers. The Finnish localized site provides access to Dell's technology offerings, partner programs, and support resources, reflecting a mature and well-established business presence in the EMEA region. The website infrastructure leverages modern web technologies, content delivery networks, and secure login mechanisms, demonstrating a high level of digital maturity and operational robustness. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy and incident response information could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations including GDPR. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to further enhance transparency and trust.

P

PETZI

petzi.ch

64

PETZI is a Swiss federation representing music venues and festivals, providing a centralized platform for event listings, ticketing, and industry support. The website targets music venues, festival organizers, and attendees primarily within Switzerland. It offers services including event aggregation, points of sale information, association details, projects, publications, jobs, and workshops. The business operates as a non-profit federation with a clear focus on the Swiss music and festival sector. Technically, the website employs modern JavaScript frameworks such as Alpine.js and htmx, and uses Piwik/Matomo for analytics, indicating a moderate level of digital maturity with privacy-conscious tracking. The site is mobile-optimized and features good SEO practices, though it lacks explicit CMS identification and some advanced accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which may impact GDPR compliance. There is no visible security policy or incident response contact information, and no vulnerability disclosure policy is present. Overall, PETZI's website is professional, trustworthy, and well-aligned with its business purpose. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

X

XING

xing.com

66

XING is a professional networking and job search platform primarily serving German-speaking professionals. The website offers extensive job listings, recruiter access, salary information, and employer reviews, positioning itself as a key player in the online recruitment market. The platform supports profile creation and personalized job matching, enhancing user engagement and service relevance. Technically, the website employs modern web technologies such as React and asynchronous JavaScript loading, ensuring a fast and responsive user experience optimized for mobile devices. Security practices include HTTPS enforcement and sandboxed iframes for third-party content, though explicit security headers were not detected in the provided data. The absence of WHOIS data is unusual but does not detract from the site's apparent legitimacy based on content and branding. Privacy and cookie policies were not found in the provided content, indicating an area for improvement in compliance transparency.

B

Base Design

basedesign.com

64

Base Design is a professional international branding agency specializing in creating culturally impactful brands through design and technology. The company operates globally with offices in Brussels, New York, Geneva, and Melbourne, offering services such as branding, typography, identity, and digital experiences. Their website reflects a high level of professionalism with excellent design quality, clear navigation, and comprehensive content showcasing their portfolio and thought leadership. Technically, the website is built on modern frameworks including Next.js and React, ensuring fast performance and mobile optimization. The site employs cookie consent mechanisms compliant with GDPR and uses analytics tools like Google Analytics and Plausible for visitor insights. Security best practices are observed with HTTPS enforcement and security headers, although no explicit security policy or incident response information is published. The security posture is strong with no evident vulnerabilities, but the absence of WHOIS data and domain registration information raises concerns about domain legitimacy and transparency. This discrepancy impacts the overall trust score despite the professional appearance and content quality. Strategically, the company should consider publishing detailed security and incident response policies and clarifying domain registration details to enhance trust. Overall, Base Design presents as a credible and mature digital branding agency with room for improvement in transparency and security communication.

W

Wikimedia Foundation

wikisource.org

65

Wikisource is a free digital library project operated by the Wikimedia Foundation, providing access to source texts in multiple languages under free licenses. It serves a broad audience including researchers, students, and the general public interested in freely accessible source materials. The website is well-established, with a domain age consistent with the project's founding in 2003, and is part of the trusted Wikimedia ecosystem. Technically, the site is powered by MediaWiki software, a mature and widely used platform for collaborative content management. The infrastructure appears robust, with modern web technologies, good mobile optimization, and fast performance. Security is strong with HTTPS enforced and domain status flags preventing unauthorized domain changes, although DNSSEC is not enabled. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, privacy policies, and cookie consent mechanisms are not found on the main page, which slightly reduces privacy compliance scores. The site does not engage in advertising or extensive user tracking, aligning with Wikimedia's non-profit and privacy-respecting ethos. Overall, Wikisource presents a trustworthy, professional, and high-quality educational resource with strong technical and security foundations. Strategic recommendations include publishing explicit privacy and security policies and enabling DNSSEC to further enhance domain security.

W

Wikimedia Foundation, Inc.

mediawiki.org

67

MediaWiki is an established open source collaboration and documentation platform developed and maintained by the Wikimedia Foundation, a large non-profit organization. It powers Wikipedia and tens of thousands of other websites worldwide, offering a multilingual, extensible, and reliable wiki software solution. The platform targets system administrators, users, developers, and contributors who seek to manage and share knowledge effectively. The business model is based on open source software with community contributions and professional consulting services. The website content is comprehensive, professionally presented, and consistent with the Wikimedia brand. Technically, the website runs on the MediaWiki framework version 1.45.0, leveraging modern web technologies such as JavaScript, CSS, and HTML5. It is hosted on Wikimedia Foundation infrastructure, likely in Equinix data centers, and demonstrates fast performance, good mobile optimization, and accessibility. SEO practices and metadata are well implemented, including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. CSRF tokens are present, and no vulnerable libraries or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently published, representing an area for improvement. Overall, the website is trustworthy, safe, and professionally maintained with high content quality and technical maturity. The domain is long-established and consistent with the Wikimedia Foundation's history. Privacy policies and terms of use are comprehensive and GDPR compliant. No blocking or WAF challenges were detected, allowing full content access and analysis.

W

Wikimedia Foundation

wikidata.org

65

Wikidata is a globally recognized free and open knowledge base operated by the Wikimedia Foundation. It serves as a central repository for structured data used across Wikimedia projects such as Wikipedia, enabling collaborative data curation and linked open data access. The platform targets a broad audience including researchers, developers, and the general public, supporting knowledge sharing and data interoperability. Technically, Wikidata is built on the MediaWiki platform with modern web technologies, hosted on Wikimedia's robust infrastructure, ensuring fast performance and good mobile optimization. Security is strong with HTTPS enforcement and comprehensive security headers, although formal public security policies and incident response contacts are not prominently published. Privacy and compliance are well addressed with clear privacy and cookie policies, reflecting the organization's commitment to user data protection. Overall, Wikidata demonstrates high professionalism, trustworthiness, and technical maturity, positioning it as a leading open data resource in the technology and non-profit sectors.

Wikivoyage is a free travel guide website operated under the Wikimedia Foundation umbrella, offering multilingual travel content created and maintained by a global community. The platform serves a broad audience of travelers seeking open and reliable travel information. Technically, the site is built on the MediaWiki CMS platform, leveraging modern web standards and optimized for mobile devices, ensuring fast performance and good accessibility. Security-wise, the site enforces HTTPS and secure form submissions but lacks some advanced security headers and explicit vulnerability disclosure policies. Privacy policies are comprehensive and GDPR compliant, though no cookie consent mechanism is present. Overall, the website is trustworthy, professional, and well-maintained, with minor areas for improvement in security and privacy transparency.

T

Thunderbird

thunderbird.net

68

Thunderbird is a well-established open-source email and productivity application supported by the Mozilla Foundation. The website serves as the official distribution and information portal for Thunderbird desktop and mobile applications, targeting general users seeking a free, customizable email client. The site is professionally designed with excellent content quality, multi-language support, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web technologies, enforces HTTPS, and implements strong security headers, contributing to a robust security posture. However, the absence of WHOIS data for the domain www.thunderbird.net is unusual but likely due to domain registration nuances or privacy measures. Overall, the site is trustworthy and aligns with Mozilla's reputation.

M

Mozilla

firefox.com

75

The website www.firefox.com serves as the official download and informational portal for the Firefox browser, a product of Mozilla, a well-known non-profit organization dedicated to internet health and privacy. The site offers comprehensive information about Firefox's features, download options for multiple platforms, and strong emphasis on user privacy and security. The brand is positioned as a leading privacy-focused browser with a large global user base and a commitment to open source principles. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, along with third-party services like Sentry for error monitoring and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. From a security perspective, the site enforces HTTPS and implements cookie consent banners, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain www.firefox.com is notable and reduces trust slightly, though the website content aligns strongly with Mozilla's official branding and services. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy source for Firefox browser downloads and information. Strategic improvements include publishing explicit security headers, incident response policies, and clearer contact information to enhance trust and security transparency.

M

Microsoft

yammer.com

75

The website www.yammer.com represents Viva Engage, a Microsoft enterprise collaboration platform designed to enhance communication and productivity within organizations. It is positioned as a key component of the Microsoft 365 ecosystem, targeting enterprise customers and business professionals. The site showcases Microsoft branding and integrates tightly with other Microsoft services, reflecting a mature and well-established business offering. Technically, the website employs modern JavaScript frameworks such as RequireJS and CoreUI, hosted on Microsoft Azure infrastructure. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. The site uses HTTPS and includes standard security headers, indicating a strong security posture. From a security and compliance perspective, the site links to comprehensive Microsoft privacy and cookie policies, indicating GDPR compliance and user consent mechanisms. However, no explicit security policy, incident response contacts, or vulnerability disclosure pages were found publicly. WHOIS data is unavailable due to privacy or proxy registration, which is typical for large enterprises like Microsoft. Overall, the website is trustworthy, professionally maintained, and secure, with no signs of suspicious activity or content. Strategic recommendations include enhancing transparency by publishing explicit security policies and vulnerability disclosure information to further strengthen trust and compliance.

R

Read It Later, Inc.

getpocket.com

67

Pocket, operated by Read It Later, Inc. and owned by Mozilla, is a technology company specializing in read-it-later and content discovery services. The website clearly communicates the service shutdown and provides users with export options and subscription refund information. The business is well-positioned in the content curation and browser integration market, leveraging Mozilla's brand and resources. Technically, the site uses modern web frameworks such as Next.js and React, hosted on AWS infrastructure, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and user-friendly, with no adult or questionable content detected.

W

WhatsApp LLC

wa.me

67

WhatsApp LLC operates one of the world's leading messaging platforms, serving over 2 billion users globally. The company offers free, secure, and reliable messaging and calling services accessible via multiple platforms including mobile and web. As a subsidiary of Meta Platforms, Inc., WhatsApp maintains a strong market position in the technology sector, focusing on user privacy and security. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding aligned with Meta's ecosystem. Technically, the website leverages modern web technologies and Facebook's internal frameworks, ensuring fast performance and excellent mobile optimization. The infrastructure is hosted on Meta's robust platforms, providing high availability and security. The site implements HTTPS with strong SSL configurations and security headers, demonstrating adherence to best security practices. From a security perspective, WhatsApp's website shows a strong posture with no detected vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, although the site lacks a visible cookie consent mechanism on the analyzed page. Contact information and incident response details are minimal, suggesting areas for improvement in transparency and user support. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enhancing cookie consent transparency, publishing a security.txt file or vulnerability disclosure policy, and providing clearer contact channels for security incidents to further strengthen user trust and compliance.

V

Vercel

zeit-world.org

70

Vercel is a well-established technology company founded in 1999, providing a platform as a service focused on web development, deployment, and AI cloud infrastructure. The company targets developers and businesses seeking efficient and scalable web solutions. Their market position is strong, with a focus on modern developer tools and cloud infrastructure that enable fast, personalized web experiences. Technically, the website leverages modern frameworks such as React and Next.js, hosted on their own platform, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement and client-side challenges for sensitive API endpoints, although some security headers and DNSSEC are not implemented. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website is professional, trustworthy, and technically mature, but could improve transparency around privacy and security policies.

Mastercard Finland Oy operates as a subsidiary of the global Mastercard Incorporated, providing advanced payment processing and financial technology services tailored for the Finnish market. The company holds a strong market position as a leader in payment solutions, serving consumers, businesses, and financial institutions with a comprehensive portfolio of services including credit and debit card processing, digital payments, and fraud prevention. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional design, targeting a broad audience in the finance sector. Technically, the site leverages modern web technologies and a proprietary digital experience platform, ensuring fast performance and mobile optimization. Security is robust, with HTTPS enforcement, comprehensive security headers, and adherence to industry standards such as PCI DSS and ISO 27001. Privacy compliance is well addressed with clear policies and consent mechanisms aligned with GDPR requirements. Overall, Mastercard Finland demonstrates a high level of business credibility and digital maturity.

P

PriceRunner Danmark

pricerunner.dk

57

PriceRunner Danmark is a well-established price comparison platform serving the Danish market, offering consumers the ability to compare prices on over 8 million products from nearly 7,000 stores. The site is professionally designed with a strong focus on user experience, mobile optimization, and comprehensive product data. Technically, the website leverages modern web technologies such as React and integrates analytics and marketing tools like Google Analytics, FullStory, and Google Tag Manager. Security posture is good with HTTPS enforced and nonce usage in scripts, though some security headers could be improved. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the analyzed content. The lack of accessible WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is credible and trustworthy for consumers but could enhance compliance and security practices.

Amazon.com, Inc. operates one of the world's largest e-commerce platforms, offering a wide range of products and services globally. The company is a market leader in online retail, serving a broad general audience with a business model centered on direct sales and marketplace facilitation. The website content provided is limited due to a security challenge page, restricting full content visibility. The technical infrastructure leverages proprietary Amazon UI frameworks and scripts, hosted likely on Amazon AWS, but lacks visible security headers and detailed performance metrics in the provided data. Security posture assessment is limited by the presence of a WAF or captcha challenge blocking normal access, which reduces the ability to fully evaluate security best practices and compliance. WHOIS data is unavailable from the raw query, which is unusual for a major domain, impacting trust verification. Overall, the site shows basic privacy and terms of service presence but lacks visible contact or security policy details in the sample. The risk assessment is moderate due to content blocking and missing WHOIS data, with recommendations to improve transparency and security header implementation.

W

Workplace from Meta

workplace.com

80

Workplace from Meta is a comprehensive business communication platform that integrates chat, video, groups, and intranet tools to enhance organizational collaboration. Positioned as an enterprise-grade SaaS solution, it targets businesses and organizations seeking secure and integrated communication tools. The platform is backed by Meta's infrastructure, ensuring scalability and reliability. The website clearly communicates the upcoming closure of the Workplace service in 2026, providing users with timelines and data export instructions to facilitate a smooth transition. Technically, the website leverages modern web technologies including React and Facebook's proprietary frameworks, ensuring a fast, responsive, and accessible user experience. The presence of advanced tracking and analytics tools indicates a mature digital infrastructure focused on performance and user engagement insights. From a security perspective, the site demonstrates strong adherence to best practices with HTTPS enforcement, comprehensive security and governance documentation, and a public bug bounty program. However, explicit incident response contacts and a security.txt file are not found, representing areas for improvement. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and well-maintained digital presence consistent with a major technology enterprise. The lack of publicly available WHOIS data is typical for large brands employing privacy protection. The risk profile is low, with no detected vulnerabilities or suspicious content. Strategic recommendations include enhancing transparency around incident response and security certifications to further build user trust.

E

European Union

europa.eu

70

The European Union's official website serves as a comprehensive portal providing detailed information about the EU's functions, principles, priorities, history, and member states. It targets a broad audience including EU citizens, researchers, policymakers, and the general public. The site is authoritative and well-positioned as the primary source of EU-related information, offering multilingual content and extensive contact options. Technically, the website is built on Drupal 10, leveraging modern web technologies and EU-specific webtools services. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. Hosting is likely managed by European Commission infrastructure, ensuring reliability and performance. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance aligned with GDPR. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, the website is highly trustworthy and professional, with a strong focus on transparency, user privacy, and accessibility. The lack of WHOIS data is typical for EU subdomains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and security.

M

Microsoft

office.com

77

The website www.office.com is the official Microsoft portal for Microsoft 365 Copilot and Office Online services. It provides cloud-based productivity tools including Word, Excel, PowerPoint, and OneNote, integrated with OneDrive for online collaboration. The site targets both individual users and businesses, positioning Microsoft as a market leader in productivity software and cloud services. The business model is subscription-based, leveraging Microsoft's extensive cloud infrastructure and brand recognition. Technically, the site is well-constructed using modern web technologies, hosted on Microsoft Azure and CDN networks, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring clear privacy and cookie policies with user consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, consistent with Microsoft's enterprise-grade standards.

T

Tumblr

tumblr.com

72

Tumblr is a prominent social media and blogging platform that enables users to explore trending topics, share multimedia content, and engage with diverse communities. Owned by Automattic Inc., it holds a significant position in the social media landscape, targeting a broad audience interested in content sharing and community interaction. The platform's business model primarily revolves around advertising and content promotion. Technically, Tumblr employs modern web technologies including JavaScript frameworks, web fonts, and progressive web app features, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site enforces HTTPS, implements GDPR-compliant consent mechanisms, and maintains good security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, Tumblr presents a high level of professionalism, trustworthiness, and compliance, with no detected blocking or WAF interference.

T

Threads

threads.net

77

Threads is a social media platform designed to facilitate idea sharing, community engagement, and content posting, tightly integrated with Instagram and operated under Meta Platforms' infrastructure. The website demonstrates a modern, responsive design optimized for mobile and desktop platforms, leveraging React and JavaScript technologies. Security posture is strong with HTTPS enforcement and comprehensive security headers, although explicit privacy and cookie policies are not detected in the provided content. The absence of WHOIS data suggests domain privacy protection, common for large technology companies, and does not detract from the platform's legitimacy. Overall, Threads presents a professional and trustworthy digital presence with room for improvement in privacy transparency and contact availability.

B

Bluesky Social

bsky.app

64

Bluesky Social is an emerging decentralized social media platform focused on providing a creative and community-driven experience for users. The platform emphasizes user engagement and creativity, positioning itself as a modern alternative in the social networking space. The website presents a professional and clean design with clear branding and accessible privacy and terms of service documentation. Technically, the site leverages modern web technologies such as React and serves content over HTTPS with good SSL configuration, ensuring secure communications. However, there is room for improvement in security headers and privacy compliance mechanisms such as cookie consent. The absence of direct contact information and security policy details suggests an opportunity to enhance transparency and user trust. Overall, the platform appears legitimate and well-positioned in the technology sector with a medium-sized operational scale.

I

Industrie- und Handelskammer zu Koblenz (IHK Koblenz)

ihk-koblenz.de

74

The Industrie- und Handelskammer zu Koblenz (IHK Koblenz) is a public law corporation serving as the regional chamber of commerce for northern Rhineland-Palatinate, Germany. It represents the interests of over 95,000 member businesses, providing regulatory oversight, vocational examination services, and business support. The website reflects a professional and authoritative presence with comprehensive content tailored to its business audience. Technically, the site is built on CoreMedia CMS, employs modern JavaScript and CSS, and integrates multiple analytics and marketing tools such as eTracker, LinkedIn Insight, and Facebook Pixel. The site is well-optimized for mobile and accessibility, with clear navigation and consistent branding. Security posture is solid with HTTPS, CSRF protection, and cookie consent management, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, compliant with GDPR, and serves its public mandate effectively.

The Global Multimedia Protocols Group (GMPG) is a small, niche experimental organization focused on developing and promoting web protocols and conceptual frameworks such as the XHTML Friends Network (XFN) and XHTML Meta Data Profiles (XMDP). The website serves primarily as an informational resource to stimulate simplification and innovation in web technologies. The group operates with a non-commercial, experimental business model and targets audiences interested in web standards and conceptual simplification. Technically, the website is basic, built with simple HTML and CSS, lacking modern web technologies, mobile optimization, and accessibility features. There is no evidence of advanced CMS, analytics, or advertising technologies. The hosting provider is not explicitly identified beyond the registrar and name servers. Performance is likely moderate given the minimal content. From a security perspective, the site lacks critical security headers, privacy and cookie policies, and incident response information. DNSSEC is not enabled, and HTTPS status is unknown but assumed minimal. The domain registration is consistent and legitimate, with a long history dating back to 2003, aligning with the group's founding. No vulnerabilities or suspicious patterns were detected, but the security posture is basic and could be improved. Overall, the website presents low risk but also low maturity in security and privacy compliance. Strategic improvements in security headers, HTTPS enforcement, privacy policies, and contact transparency would enhance trust and compliance.

C

Công Ty Cổ Phần Dịch Vụ Bảo Vệ Long Hải

securitaslonghai.vn

72

Công Ty Cổ Phần Dịch Vụ Bảo Vệ Long Hải is a leading security service provider in Vietnam, offering a range of services including on-site guarding, technology-based security solutions, event security, VIP protection, asset transportation, and mobile security. The company positions itself as the first and foremost security provider in the Vietnamese market, combining human expertise with advanced technology to deliver comprehensive security solutions. The website reflects a professional business model targeting corporate and institutional clients within Vietnam. Technically, the site uses EPiServer CMS, integrates Google Tag Manager and Microsoft Application Insights for analytics, and employs OneTrust for cookie consent management, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and a published security policy suggests room for improvement. Overall, the website is well-designed, mobile-optimized, and provides clear navigation and relevant content, supporting a high trustworthiness rating.

S

Securitas Portugal

securitas.pt

73

Securitas Portugal is a leading private security company offering a broad range of security services with a strong technological component. The company targets businesses and organizations in Portugal, providing specialized surveillance, remote monitoring, electronic security, and risk management solutions. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a well-established market position under the global Securitas brand. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Overall, the website demonstrates a high level of professionalism and trustworthiness, supporting the company's credibility in the security sector.

S

Securitas Nederland

securitas.nl

77

Securitas Nederland is a leading security services provider operating in the Netherlands, offering a broad range of integrated security solutions including physical security, alarm central services, mobile surveillance, technology solutions, risk management, and consultancy. The company is part of the global Securitas Group, with a strong market position and a comprehensive service portfolio targeting businesses and organizations seeking professional security services. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support linking to global Securitas domains. Technically, the site employs modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforced, nonce-based script loading, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through detailed privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website and domain registration data indicate a legitimate, trustworthy, and professionally managed online presence.

Swissquote Bank Europe is a leading online investment and banking service provider based in Luxembourg, targeting private investors, professionals, and institutional clients. The company offers a comprehensive suite of financial services including online trading, wealth management, life insurance, and banking products such as debit and credit cards. The website reflects a strong market position as a European leader in online investing, supported by personalized services and global market access. Technically, the website is built on modern frameworks like Next.js and React, optimized for performance and mobile use, and employs robust security measures including HTTPS and security headers. The security posture is strong with ISO 27001 certification and clear incident response channels, although WHOIS data is incomplete, which slightly impacts trust metrics. Overall, the site demonstrates high professionalism, compliance with GDPR, and a user-friendly experience, making it a trustworthy platform for financial services.

P

Piwik PRO

piwik.pro

79

Piwik PRO operates as a technology company specializing in analytics and data activation platforms designed to unify marketing insights and provide comprehensive performance views for businesses. The company positions itself as a privacy-conscious alternative in the analytics market, offering tools that enable organizations to collect and activate data while maintaining compliance with data protection regulations. The website reflects a mature digital presence built on WordPress with SEO optimization and cookie consent mechanisms aligned with GDPR and Google Consent Mode standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS registrant data slightly reduces trust but is mitigated by professional website content and privacy compliance. Overall, the risk profile is low with recommendations to enhance transparency around security policies and incident response.

A

Automattic

gravatar.com

69

Gravatar, operated by Automattic, is a well-established global avatar and profile service that enables users to maintain a consistent online identity across millions of websites. The service offers free personal profiles, link-in-bio pages, and developer APIs, positioning itself as a key player in digital identity management. The website reflects a mature digital presence with professional design, comprehensive multilingual support, and clear branding aligned with Automattic and WordPress.com. Technically, the site employs modern web standards, including HTTPS, JavaScript, and CSS, ensuring fast performance and mobile optimization. Privacy and cookie policies are prominently presented with user consent mechanisms, demonstrating compliance with GDPR and other privacy regulations. Security posture is strong with domain registration protections and secure HTTPS, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, the site is trustworthy, professional, and well-suited for its target audience of individual users and developers.

F

Font Awesome

fontawesome.com

72

Font Awesome is a leading technology company specializing in providing a comprehensive icon library and toolkit widely used by designers, developers, and content creators globally. Established in 2012, the company offers a freemium business model with free icons and paid Pro and Pro+ subscription plans that unlock additional icon packs and features. The website demonstrates a strong market position with millions of users and a professional, consistent brand presence. Technically, the site leverages modern web technologies including Vue.js, SVG, and optimized assets hosted on AWS infrastructure, ensuring fast performance and excellent mobile responsiveness. Security posture is robust with HTTPS, CSRF protection, reCAPTCHA integration, and privacy compliance mechanisms including GDPR-aligned policies and cookie consent. No critical vulnerabilities or suspicious indicators were found. Overall, Font Awesome presents a trustworthy, mature, and well-managed digital presence with clear business credibility and user-focused design.

U

University of Plymouth

plymouth.ac.uk

74

The University of Plymouth website serves as the digital presence for a large UK-based educational institution focused on advancing knowledge and transforming lives through higher education and research. The site targets prospective and current students, researchers, and the academic community, offering information about courses, research programs, and student services. The website demonstrates a mature digital infrastructure with modern technologies such as AWS Cloudfront CDN, Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance and user experience enhancement. The use of Ruby on Rails is implied by the presence of CSRF tokens, indicating a robust backend framework. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be more clearly implemented and documented. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. The absence of WHOIS data limits domain registration insights, but the overall professionalism and trust indicators suggest legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response and security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

Manage2sail.com is an established online platform specializing in regatta and sailing event management, primarily serving sailing clubs, sailors, and regatta organizers across Europe. The platform offers key services such as event scheduling, regatta management, and integrates live tracking powered by a third-party service, TracTrac. The business operates under ST Software s.r.o., founded in 2013, indicating a mature presence in its niche market. The website supports multiple languages, enhancing accessibility for its international audience. From a technical perspective, the website is built on a Microsoft ASP.NET MVC framework, hosted likely on Microsoft Azure infrastructure, and employs standard web technologies including HTML5, CSS, JavaScript, and jQuery. The site demonstrates moderate performance and basic mobile optimization, with a clean and consistent design that supports good user experience and navigation clarity. Security posture is moderate; the site uses HTTPS but lacks advanced security headers such as Content-Security-Policy or HSTS. DNSSEC is not enabled for the domain, representing a minor security gap. No explicit security or incident response policies are published, and no cookie consent mechanism is present, which impacts privacy compliance. WHOIS data shows a consistent and legitimate domain registration with appropriate domain status protections. Overall, the website is functional and professional with a clear business focus but would benefit from enhanced security practices and improved privacy compliance to strengthen trust and regulatory adherence.

S

SOCIÉTÉ NAUTIQUE DE GENÈVE

sng-shop.com

68

SOCIÉTÉ NAUTIQUE DE GENÈVE operates an e-commerce website (sng-shop.com) focused on nautical-themed apparel, accessories, and related products. The website targets a European audience, primarily French-speaking customers in Switzerland and Finland, and leverages the Shopify platform with the Dawn theme for its online store. The business model is retail e-commerce with a niche market positioning. Technically, the site uses modern web technologies and is hosted on Shopify's infrastructure, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and no explicit security policies or incident response information are published. Privacy compliance is supported by a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. However, contact information is limited to social media and a contact form, with no explicit emails or phone numbers found. WHOIS data shows a suspicious future domain creation date, likely a data anomaly, which slightly impacts trustworthiness. Overall, the site is professionally designed and functional but could improve transparency and security disclosures.