Security Directory

T

The Swedish Club

swedishclub.com

73

The Swedish Club is a well-established marine mutual insurer founded in 1872, providing a comprehensive range of marine insurance products and services targeted primarily at shipowners and maritime industry professionals. The website reflects a professional and consistent brand image, with clear business positioning as a leading insurer in the marine transportation sector. The digital presence leverages modern web technologies including WordPress with Gutenberg, integrated video content, and analytics tools such as Google Analytics and Hotjar, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, enhancing user experience and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, although explicit security headers and published security policies are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and business history support trustworthiness. Privacy compliance is basic, with cookie consent but no detected privacy policy page in the analyzed content. Contact information is not explicitly found in the provided content, which could be improved for better transparency. Overall, the website is a credible and professional platform for marine insurance services with room for enhancement in privacy and security disclosures.

N

NorthStandard

standard-club.com

71

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) insurance, positioning itself as one of the largest P&I clubs within the International Group. The company targets maritime industry professionals, ship owners, and operators, offering marine insurance services and partnership support. Founded in 2022, the business operates with a modern digital presence, leveraging professional design elements and standard web technologies. The website demonstrates moderate digital maturity with the use of Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analytics. However, explicit privacy policies and terms of service are not present in the analyzed content, which may impact compliance and user trust.

The Shipowners' Club website presents a professional maritime insurance business offering cover and insurance services to vessel owners, operators, and charterers worldwide. The site is well-structured with clear descriptions of its core business focus in the transportation sector. The technical infrastructure leverages Concrete CMS, Bootstrap, jQuery, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of visible privacy policy or terms of service pages highlight areas for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

N

NorthStandard

nepia.com

58

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) coverage, positioning itself as one of the largest P&I clubs within the International Group. The company targets marine industry professionals, ship owners, and operators, offering specialized insurance services tailored to the maritime sector. The website reflects a professional and consistent brand image with a focus on marine insurance solutions. Technically, the site employs modern web technologies including Google Tag Manager, Hotjar, Cookiebot for consent management, Adobe Typekit, and Google Fonts, indicating a moderate level of digital maturity. The hosting registrar is IONOS SE, a reputable provider, and the domain is relatively new, created in 2022, which aligns with a new business entity.

F

FORPSI

forpsi.sk

67

FORPSI is a Slovak-based technology company specializing in domain registration, web hosting, and server services. The company positions itself as a reliable partner with its own data center, targeting individuals and businesses seeking affordable and quality hosting solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on customer convenience through online domain registration and hosting management.

T

The Pitch

thepitch.no

57

The Pitch is a small, established marketing and printing agency based in Fredrikstad, Norway, founded in 2015. The company offers a range of services including printing, advertising, design, and website development, targeting local businesses and individuals seeking comprehensive marketing solutions. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though additional security headers and policies could enhance protection. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service pages. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious patterns detected.

D

Dyrket.no

dyrket.no

72

Dyrket.no is an online marketplace focused on delivering local food products from Norwegian farmers and producers directly to consumers. The website positions itself as a niche e-commerce platform catering to customers interested in high-quality, locally sourced food in Norway. The business model revolves around facilitating online orders and home delivery, targeting a general consumer audience within Norway. The website demonstrates a modern technical infrastructure, leveraging Next.js for server-side rendering and React for frontend interactivity, along with integration of Google Fonts, Google Maps API, and Cookiebot for cookie consent management. Analytics are implemented via Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of published privacy and terms of service policies represent areas for improvement. The missing WHOIS data reduces transparency and trustworthiness, though the website content and technology usage suggest a legitimate business. Overall, the site is professionally designed with good user experience and moderate SEO optimization, but could benefit from enhanced privacy compliance and clearer contact information.

W

Winz.io

winz.io

60

Winz.io is an online crypto casino and sportsbook platform established around 2019, offering over 6000 games and supporting multiple cryptocurrencies including Bitcoin, Ethereum, and others. It positions itself as a leading crypto casino with awards such as Best Online Casino of 2025 by AskGamblers. The platform uses modern web technologies including Angular and integrates third-party services like Cookiebot for cookie consent and Intercom for customer engagement. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. The website enforces HTTPS and employs clientTransferProhibited domain status, indicating a stable domain registration. However, explicit privacy policy and terms of service pages are not found in the provided content, which is a compliance gap. Contact information such as emails or phone numbers is not explicitly visible, which may affect user trust. The site targets adult users due to its gambling nature and complies with age restrictions. Overall, the platform demonstrates a good technical and security posture but should improve transparency and compliance documentation.

H

Høyskolen for yrkesfag

hfy.no

68

Høyskolen for yrkesfag is a Norwegian educational institution specializing in vocational training, established around 2020. The website presents a professional and consistent brand image with a focus on providing educational services to students and professionals interested in vocational studies. The technical infrastructure leverages modern web technologies including Bootstrap 5, jQuery, and Google services such as Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. Security posture is solid with HTTPS enforced and integration of security best practices like reCAPTCHA, although some improvements such as explicit security headers and vulnerability disclosure policies are recommended. Overall, the website is trustworthy, safe, and well-positioned within its niche educational sector.

D

DAB PUMPS SPA

dabpumps.mx

10

DAB PUMPS SPA is a well-established company specializing in water technology solutions with over 40 years of industry presence. The company offers a broad portfolio of products and services including pumps, digital connectivity solutions, and training programs, targeting residential, commercial, and agricultural sectors. The website reflects a mature digital presence built on Drupal 9, with modern UI components and a clear focus on user experience and compliance. The security posture is adequate but can be improved by implementing additional security headers and renewing the expired domain promptly. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves as a solid digital asset for the company.

D

DAB PUMPS S.p.A.

dabpumps.us

11

DAB PUMPS S.p.A. is an established Italian manufacturer specializing in pump products with a significant presence in North America through its subsidiary DAB Pumps Inc. The company offers a broad portfolio of pump solutions, complemented by customer service, training, and technical support. The website reflects a mature digital presence built on Drupal 9, integrating modern frontend technologies and a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and some advanced HTTP security headers are missing. The WHOIS data is consistent with the business claims, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-structured for its industrial target audience.

D

Dab Pumps Spa

dabpumps.es

10

Dab Pumps Spa is a well-established company specializing in water technology solutions, focusing on the manufacturing and distribution of water pumps and related services. With over 40 years of experience and a strong presence in Spain and Italy, the company targets both professional sector users and end consumers. Their website reflects a mature digital presence built on Drupal 9, featuring comprehensive content, clear navigation, and a consistent brand image. The site integrates modern web technologies and provides extensive resources including technical advisory, training, and digital tools for pump selection and connectivity.

D

DAB Pumps Spa

dabpumps.be

10

DAB Pumps Spa is a well-established company specializing in water technology solutions with over 40 years of market presence. The Belgian localized website dabpumps.be serves as a regional portal providing product information, service offerings, training, and news updates. The company targets residential, commercial, agricultural, and irrigation sectors with a strong focus on innovation and energy efficiency. Technically, the website is built on Drupal 9 with modern frontend libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The site demonstrates good privacy compliance and business credibility with clear legal documentation and active social media presence. Overall, the website is professional, trustworthy, and well-optimized for its audience.

D

Dab Pumps Spa

dabpumps.de

10

Dab Pumps Spa is a well-established company specializing in water technology solutions, with nearly 50 years of experience. The company focuses on manufacturing pumps and providing technological solutions to optimize water management and energy consumption across residential, commercial, industrial, and agricultural sectors. Their market position is strong, supported by a comprehensive product portfolio and service offerings including DService and DTraining. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the website reflects a credible and trustworthy business with good privacy compliance and user engagement through social media and contact channels.

D

Dab Pumps Spa

dabpumps.nl

62

Dab Pumps Spa operates a professional website focused on water pump manufacturing and related services, targeting industrial, agricultural, and building management sectors primarily in the Netherlands and internationally. The company has a strong market presence with over 40 years of history and offers a comprehensive product range, service contracts, training, and technical support. The website is built on Drupal 9 with modern front-end technologies and includes a secure login form protected by Google reCAPTCHA. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Security posture is good with HTTPS and secure practices, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, supporting the company's business credibility.

I

Innova

innovaenergie.com

57

Innova is a technology-focused company based in Italy, providing innovative digital solutions and services. The website presents a professional image with consistent branding and a clear focus on technology and business audiences. The company leverages modern web technologies including ProcessWire CMS, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The website is well-optimized for SEO and mobile devices, with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance trust further. Privacy compliance is partially addressed through Cookiebot, but the absence of a visible privacy policy and terms of service is a gap. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

Letiště Praha, a. s.

aeroparking.cz

62

AeroParking is the official covered parking service directly at Prague Airport, offering secure and comfortable parking options for travelers. The website is professionally designed using Drupal 10 and integrates multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization and SEO practices, providing a user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's affiliation with Prague Airport and professional presentation support its legitimacy. Overall, the site is a reliable digital presence for the parking service with room for enhanced transparency in contact and security policies.

D

DAB Pumps Spa

dabpumps.com

71

DAB Pumps Spa is an established international manufacturer specializing in efficient water pump technologies and water management solutions. The company maintains a strong market presence with multiple country-specific websites and subsidiaries, targeting both professional and end-user audiences. Their business model focuses on manufacturing, customer support, training, and digital product offerings such as BIM integration. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on Drupal 9 with Bootstrap and integrates modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers could be improved. The security evaluation shows good practices in privacy compliance and data protection, including GDPR-aligned cookie consent and a clear privacy policy. However, no explicit security policy or incident response information is publicly available, which could be enhanced. The absence of WHOIS data limits domain trust verification but the website content and business information strongly indicate legitimacy. Overall, DAB Pumps Spa presents a trustworthy and professional online presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing incident response details, and ensuring WHOIS data transparency to strengthen trust further.

I

Innova

innova.it

57

Innova is a technology company based in Italy, offering innovative digital solutions and services. The company maintains a professional online presence with a well-structured website that includes comprehensive cookie consent management via Cookiebot, indicating a strong commitment to privacy and GDPR compliance. The website targets business clients and technology users seeking advanced technology services. Technically, the site is built on the ProcessWire CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized and performs moderately well with good SEO and accessibility features. Security-wise, the website enforces HTTPS and includes standard security headers, though explicit security policies and incident response information are not publicly available. The WHOIS data confirms the legitimacy and consistency of the domain registration, matching the company's Italian origin and business claims. Overall, the website demonstrates a solid security posture and privacy compliance, with room for improvement in transparency of contact and security policies.

V

Vølund Varmeteknik A/S

volundvt.dk

58

Vølund Varmeteknik A/S is a well-established Danish company specializing in sustainable and economical heating solutions including heat pumps for residential, institutional, and SME customers. With over 140 years of history, the company holds a strong market position in the energy sector in Denmark. Their website reflects a professional and consistent brand image, targeting a broad audience including homeowners and businesses. Technically, the site is built on Dynamicweb 9 CMS and integrates modern analytics and marketing tools such as Google Tag Manager and Cookiebot for GDPR compliance. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good privacy practices. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are missing. Overall, the website is trustworthy, well-structured, and compliant with relevant regulations.

I

Invia

invia.sk

68

Invia.sk is a leading online travel agency in Slovakia specializing in the sale of travel packages and last-minute vacations from multiple travel operators. The website targets a broad audience seeking holiday bookings primarily in popular European and Mediterranean destinations. Technically, the site employs modern web technologies including JavaScript frameworks, CDN delivery, and advanced analytics and error tracking tools such as Google Analytics, Hotjar, and Sentry. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a good level of GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit terms of service and direct contact information for security or business inquiries are not readily found, which could be improved to enhance trust and compliance. Overall, the site presents a professional and trustworthy platform for travel bookings.

S

Stampen Media

stampenmedia.se

49

Stampen Media is a leading Swedish media group primarily serving the west coast region with local quality journalism across 18 newspaper titles. The company also operates printing, distribution, and outdoor advertising subsidiaries, positioning itself as a comprehensive media service provider. The website is built on WordPress with modern SEO and consent management tools, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and DNSSEC. Privacy compliance is partial due to missing explicit privacy and terms pages. Overall, the site is professional and trustworthy but could improve transparency and security practices.

S

SeenThis

seenthis.se

51

SeenThis is a Swedish technology company specializing in digital advertising solutions that enhance engagement through adaptive streaming and high-quality creative activation. Positioned as an innovative player in the marketing technology sector, the company targets advertisers and media agencies seeking to boost ad performance. The website is built on a modern React and Gatsby stack, ensuring fast performance and good SEO optimization. Privacy compliance is well addressed with Cookiebot managing cookie consent and GDPR adherence. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though explicit security policies and incident response details are absent. Overall, the site reflects a professional and trustworthy digital presence with room for improvement in transparency and direct contact information.

Y

YS Pensjon

yspensjon.no

53

YS Pensjon is a Norwegian pension service provider focused on delivering consolidated pension account management and investment services for members of YS federations. The company collaborates closely with Nordea Liv, a leading Nordic capital manager, to offer competitive pension profiles and digital advisory tools such as YS Boost. The website reflects a professional and user-friendly platform targeting Norwegian workers with defined contribution pension schemes, emphasizing cost efficiency and sustainability. Technically, the site is built on WordPress with modern optimization and tracking tools, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

L

Legejobber.no

legejobber.no

68

Legejobber.no is a Norwegian job portal specializing in medical job listings, primarily targeting healthcare professionals seeking employment opportunities in Norway. Established in 2010, the site offers a focused recruitment platform with curated job postings and recruitment services for employers. The website demonstrates a consistent brand presence and provides a user-friendly experience with clear navigation and mobile optimization. Technically, the site employs a modern JavaScript stack including jQuery and Knockout.js, integrates Matomo analytics for privacy-conscious tracking, and uses Cookiebot for cookie consent management. Security practices include HTTPS enforcement and CSRF protection, though some security headers are not explicitly detected. The absence of visible contact information and terms of service pages suggests areas for improvement in transparency and user trust. Overall, the site is professional, secure, and compliant with GDPR regulations, serving a niche healthcare recruitment market effectively.

C

Castorani

castorani.it

49

Castorani is a small Italian wine producer and retailer with a well-established online presence since 2002. The website offers e-commerce capabilities for purchasing wines, along with hospitality services such as tastings and vineyard tours. The company targets wine enthusiasts and tourists interested in authentic Italian wine experiences. Technically, the site is built on PrestaShop, uses modern web technologies, and integrates Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

H

Hyundai Avto Trade d.o.o.

hyundai.si

56

Hyundai Avto Trade d.o.o. is the authorized importer and distributor of Hyundai motor vehicles in Slovenia, operating since 2004. The company offers a range of automotive products including electric and hybrid vehicles, servicing, financing, and after-sales support. The website reflects a professional and consistent brand presence targeted at Slovenian consumers interested in Hyundai vehicles. Technically, the site leverages Cloudflare for DNS and CDN services, uses Cookiebot for GDPR-compliant cookie consent, and integrates multiple analytics and advertising platforms with user consent. Security posture is strong with HTTPS enforced and standard security headers likely in place, although no dedicated security or incident response policies are published. Overall, the website is well-structured, accessible, and compliant with privacy regulations, supporting a trustworthy business image.

I

Impact Factory

impact-factory.de

65

Impact Factory is Germany's largest incubator and accelerator focused on startups addressing social and ecological challenges. The organization provides structured programs tailored to different startup development phases, fostering a community and network to support impact-driven entrepreneurs. The website reflects a professional and consistent brand presence, targeting impact startups and stakeholders in the social entrepreneurship ecosystem. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive cookie consent banner and detailed cookie categorization. However, the absence of visible contact information and terms of service pages limits full business transparency. Overall, the website presents a low-risk profile with good digital maturity and compliance. Strategic improvements in security headers, incident response information, and contact transparency would further strengthen trust and resilience.

B

Bündnis Kinder- und Jugendreha e.V. (BKJR)

kinder-und-jugendreha-im-netz.de

55

The website 'Kinder- und Jugendreha im Netz' serves as a comprehensive informational portal dedicated to medical rehabilitation for chronically ill children and adolescents in Germany. Operated by the Bündnis Kinder- und Jugendreha e.V. (BKJR) in collaboration with the Deutsche Gesellschaft für Pädiatrische Rehabilitation und Prävention e.V. (DGPRP), it provides detailed guidance on rehabilitation services, clinics, application procedures, and downloadable resources. The platform targets families, medical professionals, and stakeholders involved in pediatric rehabilitation, positioning itself as a trusted non-profit resource within the healthcare sector in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Flexslider for UI components, Cookiebot for consent management, and Matomo for analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Hosting appears to be managed by monks.de, inferred from tracking domains. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. Tracking includes Facebook Pixel and Matomo, with moderate user tracking balanced by privacy compliance measures. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional, trustworthy, and well-maintained informational resource with a strong focus on pediatric rehabilitation. Strategic improvements could include enhancing security headers, publishing security policies, and expanding contact information to bolster trust and compliance.

K

Kinstellar

kinstellar.com

68

Kinstellar is a well-established European law firm founded in 2008, providing a broad range of legal services across Central Europe and Asia. The firm specializes in sectors such as M&A, banking and finance, real estate, energy, data privacy, and healthcare. Their market position is strong with multiple offices and a professional online presence. The website is professionally designed, content-rich, and optimized for user experience with clear navigation and mobile responsiveness. Technically, the site uses modern technologies including JavaScript, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is robust with a detailed cookie consent mechanism and linkage to a comprehensive privacy policy via Cookiebot. Overall, the site is trustworthy and credible, with no signs of malicious activity or adult content.

F

Fogyasztó Barát

fogyasztobarat.hu

53

Fogyasztó Barát is a Hungarian e-commerce trust and legal compliance platform established in 2012, serving over 10,000 webshops. It offers key services such as legally compliant terms and conditions (ÁSZF) generation, certification, customer review systems, and informational widgets to enhance webshop credibility and customer trust. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Elementor, Bootstrap, and Cookiebot for GDPR compliance. The platform integrates Google Analytics and Google Ads for marketing and analytics purposes. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating a trustworthy and mature online presence.

H

HELP Forsikring

help.no

71

HELP Forsikring is a Norwegian insurance company specializing in legal insurance products such as advokatforsikring and boligkjøperforsikring. Established in 1999, the company offers affordable legal assistance without hourly fees, targeting Norwegian consumers who require legal support. The website is professionally designed, mobile-optimized, and includes modern tracking and analytics tools, reflecting a mature digital infrastructure. Security measures such as HTTPS and security headers are properly implemented, and a cookie consent mechanism is in place, indicating good privacy compliance. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for enhanced compliance and transparency. Overall, the website and domain data indicate a legitimate and trustworthy business with a solid market position in Norway.

T

Thüringer Satiretheater und Kabarett "DIE ARCHE" e.V.

kabarett-diearche.de

53

Kabarett Die Arche is a small regional satire theater and cabaret based in Erfurt, Germany, offering live performances and cultural events. The website provides comprehensive information about shows, ticketing, and contact details, targeting a general audience interested in cultural entertainment. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, featuring a cookie consent mechanism via Cookiebot, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS and consent management but lacks explicit security headers and incident response policies. Overall, the site is professional and trustworthy with clear business information and social media presence.

B

Befalets Fellesorganisasjon

bfo.no

57

Befalets Fellesorganisasjon (BFO) is a leading Norwegian trade union representing military personnel across all ranks. The organization provides career support and union representation, positioning itself as a trusted advocate for its members. The website reflects a professional and consistent brand image, targeting military personnel and related stakeholders in Norway. Technically, the site employs modern web technologies including Craft CMS, Vite, and integrates analytics tools such as Matomo and Google Analytics, alongside a robust cookie consent mechanism via Cookiebot. Security posture is strong with HTTPS enforcement, CSRF protection, and standard security headers, though explicit security and privacy policies are not clearly presented on the site. Overall, the site is well-structured, mobile-optimized, and trustworthy, with extensive user tracking balanced by consent mechanisms. Recommendations include publishing comprehensive privacy and security policies and enhancing contact transparency to improve compliance and user trust.

N

Norsk Psykologforening

psykologforeningen.no

66

Norsk Psykologforening is the sole professional association for authorized psychologists in Norway, providing members with educational resources, professional development, salary and labor agreement support, and advocacy. The website is well-designed, mobile-optimized, and provides comprehensive information relevant to its target audience of psychologists and psychology students. The technical infrastructure includes modern JavaScript frameworks and tracking tools with appropriate privacy consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly available. Overall, the site represents a legitimate and professional organization with a solid digital presence.

P

parat

parat.com

5

The website 'parat.com' appears to represent a business entity named 'parat' with a Norwegian language focus. However, the site content is minimal, lacking descriptive business information, contact details, or legal pages such as privacy policy and terms of service. The technical infrastructure includes older JavaScript libraries like jQuery 1.8.2, and tracking technologies such as Google Tag Manager, Cookiebot for cookie consent, and Hotjar for analytics. Security posture is weak due to absence of visible security headers and outdated libraries. The WHOIS lookup failed to retrieve any registration data, raising concerns about domain legitimacy or registration status. Overall, the site shows basic digital maturity but lacks critical compliance and security elements, which poses risks to trust and user confidence.

G

Gjerholm AS

hkinfo.no

65

HK Norge is a Norwegian workers union organization dedicated to ensuring safe workplaces and good labor conditions, with a history dating back to 1908. The website serves as an informational platform targeting Norwegian workers and union members, providing advocacy and union services. Technically, the site is built on WordPress using the Astra theme and incorporates modern SEO and cookie consent tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

L

Landsorganisasjonen i Norge

lo.no

72

Landsorganisasjonen i Norge (LO) is the largest trade union confederation in Norway, serving as a representative body for workers and providing member support and advocacy. The website www.lo.no acts as an information portal primarily targeting Norwegian workers and union members, offering resources related to labor rights and union activities. The site is professionally designed with consistent branding and good content quality, reflecting its position as a major non-profit organization in the government sector. Technically, the website employs a modern technology stack including Google Tag Manager, Cookiebot for cookie consent management, Hotjar for user behavior analytics, Meta Pixel for marketing, Snap Pixel, Plausible Analytics, and Microsoft Application Insights for telemetry. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, explicit security headers and detailed privacy or terms of service pages are not detected, indicating areas for improvement in security posture and compliance transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is likely due to privacy protections common in Norwegian domains and does not detract from the site's legitimacy. Overall, the site maintains a moderate to good security posture but would benefit from publishing explicit security policies and contact information for incident response. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include enhancing security headers, publishing privacy and security policies, adding vulnerability disclosure mechanisms, and improving accessibility features to meet compliance standards. These steps will strengthen trust and security culture while ensuring regulatory adherence.

V

Verlag Freies Geistesleben

geistesleben.de

48

Verlag Freies Geistesleben operates as a specialized publishing house and online retailer focusing on books and eBooks related to Waldorf pedagogy, anthroposophy, and related educational and cultural topics. The website serves a niche audience interested in these areas, offering a curated selection of literature and educational materials. The business model centers on direct online sales complemented by a partner bookstore network and digital content offerings. Market positioning is that of a trusted medium-sized publisher within its specialized domain in Germany. Technically, the website is built on the OXID eShop Enterprise Edition platform, utilizing common web technologies such as jQuery, Font Awesome, and Cookiebot for cookie consent management. The site is mobile-optimized with a responsive design and includes standard ecommerce features like user login and shopping cart functionality. SEO and accessibility are implemented at a basic to good level, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy practices. However, there is a lack of explicit security headers and no publicly available security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected in the analysis. The absence of a privacy policy page and terms of service is a notable gap in compliance documentation. Overall, the website presents a professional and trustworthy front for its business, with moderate technical maturity and a solid privacy posture. Strategic improvements in security headers, compliance documentation, and accessibility would enhance its security and user trust further.

U

Up Česká republika, s.r.o.

podanioznameni.cz

62

Můj Up is a Czech Republic-based technology platform offering a mobile application designed to motivate employees, enhance team collaboration, and foster a healthy corporate culture. The company positions itself as a comprehensive solution for employee benefits, targeting businesses seeking to improve workplace engagement. The website is professionally designed with good SEO and structured data implementation, reflecting a medium-sized enterprise with a consistent brand presence. Technically, the site is built on WordPress, utilizing modern tools such as WP Rocket for performance optimization and Cookiebot for cookie consent management. Google Tag Manager is employed for analytics and marketing purposes, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and explicit security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain trust analysis, but the website content and technical setup suggest a legitimate business. Overall, the site scores well in content quality and business credibility but could benefit from enhanced privacy compliance and security posture.

V

Vesle Skaugum Fondet

vesleskaugum.no

62

Vesle Skaugum Fondet operates a hospitality website focused on accommodation services in the Golsfjellet region of Norway. The website presents a professional and visually appealing interface with clear branding and a focus on guest experience. The business appears to be a small local hospitality provider targeting travelers seeking lodging and memorable stays in the area. Technically, the site uses common web technologies including jQuery, Google Analytics with IP anonymization, Cookiebot for cookie consent, and hCaptcha for bot protection, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and standard security headers present, though the absence of explicit privacy and terms of service pages limits full compliance assessment. Overall, the site is accessible without WAF or blocking mechanisms, and no suspicious content or vulnerabilities were detected. The lack of WHOIS data is consistent with privacy protection practices common for small businesses. Strategic recommendations include adding clear privacy and terms pages, providing explicit contact information, and enhancing accessibility features to improve compliance and user trust.

H

Hot Tools

hottools.ie

67

Hot Tools is a professional e-commerce retailer specializing in hair styling electronics targeted primarily at Irish salons. The website presents a well-established brand with over 25 years of market presence, leveraging the Shopify platform for its online store. The site includes modern marketing and analytics integrations such as Klaviyo, Google Analytics, and Facebook Pixel, and implements a robust cookie consent mechanism via Cookiebot to comply with privacy regulations. Technically, the site is built on a reputable CMS with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The absence of explicit privacy and terms of service pages and direct contact information slightly detracts from compliance and user trust. Overall, the site is professional, trustworthy, and well-positioned in its niche.

Unframed B.V. is a Netherlands-based creative agency specializing in digital strategy, application development, and brand development. The company targets businesses seeking innovative and well-thought-out digital solutions and brand enhancement. Their market position is that of a niche, small-sized agency with a focus on delivering strategic and creative digital services. The website reflects a professional and consistent brand image with good content quality and clear messaging. Technically, the website is built on WordPress with a modern tech stack including popular JavaScript libraries and frameworks such as GSAP, Splide.js, and integrations with Google Tag Manager, reCAPTCHA, and Cookiebot for consent management. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with moderate performance. From a security perspective, the website enforces HTTPS, uses Google reCAPTCHA for form protection, and manages cookie consent via Cookiebot, indicating a good security posture. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not present, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR through the use of Cookiebot. The risk level is low, but strategic recommendations include publishing detailed security and incident response policies and enhancing security headers to further strengthen the security posture.

A

Ariete

ariete.store

61

Ariete Store is the official Italian e-commerce platform for Ariete, a brand specializing in small household appliances. The website offers a variety of products for kitchen, cleaning, and coffee preparation, targeting Italian consumers. The business model is retail-focused with an emphasis on direct online sales and customer service via phone. The site integrates modern marketing and analytics tools, including Google Tag Manager, Cookiebot for consent management, and third-party review widgets, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not explicitly visible. The absence of a visible privacy policy and terms of service pages is a notable gap in compliance documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Greenpeace Österreich

greenpeace.at

10

Greenpeace Österreich is the Austrian branch of the internationally recognized environmental NGO Greenpeace. The organization focuses on environmental advocacy, public awareness campaigns, and activism to promote sustainability and ecological protection. Their website targets the general public interested in environmental issues and provides information on current priorities and campaigns. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR-compliant cookie management, and integrates third-party services such as Stripe for payments and Typeform for forms. The site is hosted by EDIS GmbH, a reputable Austrian hosting provider, and uses HTTPS with strong security headers, indicating a good security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, explicit contact information and terms of service pages are not clearly found in the provided content. Overall, the website is professionally designed, well-branded, and trustworthy, with moderate to good performance and mobile optimization.

A

Ajuntament de Barcelona

barcelona.cat

67

Ajuntament de Barcelona operates the official municipal website for the city of Barcelona, providing residents and visitors with comprehensive information about city services, news, cultural events, transport, and business resources. The website is positioned as a key digital gateway for public services and community engagement in Barcelona. The site targets a broad audience including residents, businesses, and tourists, offering multilingual support and extensive navigation options. Technically, the site is built on Drupal 10 with modern frontend frameworks like Bootstrap, and integrates multiple analytics platforms including Matomo and Plausible, alongside marketing and tracking tools such as Adobe Visitor Tracking and Google Analytics. The site demonstrates a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and anti-CSRF protections evident, though explicit security headers are not visible in the provided content and should be verified. Privacy compliance is well addressed with a detailed cookie consent mechanism and granular cookie categorization, although no explicit privacy policy or terms of service URLs were found in the provided content. WHOIS data is privacy protected by puntCAT, which is typical for government domains under the .cat TLD, and does not raise legitimacy concerns. Overall, the website is a professional, secure, and trustworthy government portal with extensive content and good user experience.

I

Invia

invia.cz

70

Invia.cz is a prominent online travel agency based in the Czech Republic, offering a broad selection of holiday packages for 2025, including summer and winter trips and last minute deals. The website targets consumers primarily in the Czech Republic and neighboring countries, providing an e-commerce platform for travel bookings. The company positions itself as a leading travel service provider in the region with a professional and user-friendly website. Technically, the site employs modern JavaScript libraries and third-party services such as Sentry for error monitoring, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS and implements a detailed cookie consent mechanism, though it lacks some advanced security headers and explicit security policies. Overall, the site demonstrates a good security posture with room for improvement in transparency and incident response readiness. The domain WHOIS data is privacy-protected, which is common for commercial websites, and no suspicious patterns were detected. The website is safe for general audiences with no adult content. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer security and incident response information to improve trust and compliance.

G

GLYNT

glynt.com

72

GLYNT operates an e-commerce platform specializing in professional hair care and styling products for home use, targeting consumers seeking salon-quality products. The website is built on the Contao CMS and employs modern JavaScript libraries such as jQuery and Isotope, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good design quality, clear navigation, and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and HTTPS usage suggest a legitimate business presence. Overall, the site scores moderately well but would benefit from enhanced transparency and security practices.

I

INTERSOS

intersos.org

10

INTERSOS is a well-established humanitarian non-profit organization focused on providing frontline aid during emergencies worldwide. The website presents a professional and comprehensive digital presence, targeting donors, humanitarian workers, and partners. It offers detailed information about its activities, news updates, and donation options, supporting its mission effectively. Technically, the site is built on WordPress with modern plugins for SEO, donations, and cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the domain appears legitimate despite the lack of WHOIS registrant data, likely due to privacy protection common in NGOs. The site is safe, trustworthy, and well-optimized for its audience.

E

EMOS

emos.hu

72

EMOS.hu is a Hungarian e-commerce website specializing in the online sale of lighting technology and electronic devices. The site targets general consumers in Hungary and positions itself as a significant player in the retail sector for these product categories. The website features a professional design with consistent branding and good content quality, supporting a positive user experience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and Cookiebot for cookie consent management. It is hosted with CDN support to optimize performance and is mobile-optimized with basic accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent with granular controls, and integrates multiple advertising and analytics services responsibly. No critical vulnerabilities or security issues were detected, though explicit security and incident response policies are not publicly available. Overall, EMOS.hu demonstrates a mature digital presence with good privacy compliance and business credibility.