Skip to main content

Is sbbcargo-international.com a Scam? Security Check Results - SBB Cargo International Reviews

sbbcargo-international.com favicon

Is sbbcargo-international.com Safe? Security Analysis for SBB Cargo International

https://sbbcargo-international.com

Check if sbbcargo-international.com is a scam or legitimate. Free security scan and reviews.

TransportationSwitzerlandlarge
Google Tag ManagerGoogle AnalyticsOneTrust Cookie ConsentMoveCMS
Analyzed 10/4/2025Completed 12:17:40 AM
54
Security Score
MEDIUM RISK

AI Summary

SBB Cargo International operates as a major rail freight transportation provider in Europe, specializing in secure and timely cargo transport by rail. The company leverages its parent company Swiss Federal Railways' brand and infrastructure to serve logistics customers requiring cross-border and domestic freight solutions. The website reflects a professional business presence with clear service descriptions and a focus on quality and reliability. Technically, the site uses modern tracking and consent management tools such as Google Analytics and OneTrust, and is built on the MoveCMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. The absence of WHOIS data for the domain is a concern for domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site scores well on content quality and business credibility but would benefit from enhanced security header implementation and clearer domain registration information.

Detected Technologies

Google Tag ManagerGoogle AnalyticsOneTrust Cookie ConsentMoveCMS

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

SBB Cargo International holds an important position in the European rail freight market, leveraging the reputation and infrastructure of Swiss Federal Railways. Its business model focuses on providing rail-based logistics and freight transport services, targeting businesses requiring efficient and reliable cargo movement. The company likely generates revenue through freight contracts and logistics partnerships. The website indicates a mature digital presence with integrated analytics and consent management, supporting compliance with GDPR. The lack of visible certifications or vulnerability disclosures suggests room for improvement in transparency and security communication. The company maintains a consistent brand identity and provides contact channels, including a data protection officer email, enhancing trust. The absence of WHOIS data may be due to privacy protection or recent domain registration, warranting further verification.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

d*****@sbbcargo-international.com

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate security posture with HTTPS enforced and cookie consent implemented, indicating awareness of privacy and security best practices. However, the lack of explicit security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options reduces the overall security robustness. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security governance. The use of third-party scripts like Google Analytics and OneTrust requires ongoing monitoring to mitigate supply chain risks. Overall, the security posture is adequate but could be strengthened by implementing comprehensive security headers, publishing security policies, and establishing clear incident response channels.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and verify comprehensive security headers including Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options to enhance protection against common web attacks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

SBB Cargo International

Description:

Der Schiengüterverkehr und Gütertransport ist minutiös terminierbar. Wir transportieren Ihre Güter sicher und auf direktem Weg ans Ziel – nach bester Qualität.

Key Services:
Rail freight transportLogistics solutionsCross-border cargo transport
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Google Tag ManagerGoogle AnalyticsOneTrust Cookie ConsentMoveCMS
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enforced
  • Cookie consent mechanism implemented
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
Google Analytics
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF challenge.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

50/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

88/100
Score

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 32 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
15 years(mature)
Expiry Risk
low(123 days)
Protection Level
basicDNSSEC OFF

DNS Records

A Records:82.220.34.111
Name Servers:
dns1.cscdns.net
dns2.cscdns.net
MX Records:
10: custmx.cscdns.net
SOA:Serial: 2021051111, TTL: 14400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:86ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on MoveCMS and integrates Google Tag Manager and Google Analytics for tracking, alongside OneTrust for cookie consent management. The site uses modern web fonts and responsive design techniques, providing good mobile optimization and user experience. Performance is moderate, with multiple external scripts potentially impacting load times. The site lacks some advanced security headers, which is a technical gap. Hosting provider details are not explicitly identified from the content. SEO is supported by proper meta tags and Open Graph data. Accessibility is basic but could be improved. Overall, the technical infrastructure is solid but has opportunities for modernization and security enhancements.
⭐ Verified Community Reviews

What others say about sbbcargo-international.com

Share your experience to help others make informed decisions. We verify every review by email and publish it once our moderation team approves it.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

out of 5

0 reviews published

Loading reviews…

How did we do?

Your feedback directly shapes our roadmap. Rate the quality of this report, leave an optional comment, and let us know if you want our security specialists to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.

Analyze Another Website