Medium-risk security reports

Denuo is a Belgian federation representing the waste and recycling sector, with over 200 members. The organization acts as a key intermediary between used materials and their reuse, recycling, and final processing. The website provides sector information, certification details, events, and member services, targeting companies and stakeholders in the Belgian waste management industry. The site is built on Drupal 9 and integrates modern analytics and marketing tools while maintaining GDPR compliance through clear privacy and cookie policies. Contact information and social media presence support business credibility. Security measures such as HTTPS and reCAPTCHA are implemented, though explicit security policies are not published.

The website www.agoria.be is currently inaccessible, presenting only a minimal 'Service unavailable' message indicating that the request is blocked. This suggests the presence of a Web Application Firewall (WAF) or other security mechanism preventing access to the site's content. Due to this blocking, no meaningful business, technical, or security information can be extracted from the site. The WHOIS query for the domain also failed to provide registrar or registration details, further limiting the ability to assess the domain's legitimacy or history. Overall, the digital maturity and security posture cannot be evaluated accurately given the lack of accessible data.

The website aankopen.vlaanderen-circulair.be is an official Flemish government platform dedicated to promoting circular procurement practices in Flanders. It provides educational content, project showcases, and resources to public sector purchasers and stakeholders interested in the circular economy. The site is branded under OVAM, a recognized Flemish environmental agency, reinforcing its official status. Technically, the site uses Fork CMS, integrates Google Analytics, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the site is professional, trustworthy, and serves as a credible resource for circular procurement in the region.

Circular Ports, operated by Circular Flanders, is a professional platform dedicated to supporting port professionals, businesses, and communities in transitioning towards a circular and low carbon economy. The website serves as a hub for information, case studies, thematic tracks, and monitoring tools related to circular economy practices in ports, primarily targeting stakeholders in the transportation and energy sectors within Belgium. The platform is well-positioned as a regional leader in circular economy initiatives for ports, leveraging partnerships with academic institutions and port authorities to enhance its credibility and reach. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket to optimize performance and search engine visibility. The site demonstrates good mobile optimization and user experience, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the security posture is moderate, with no critical vulnerabilities detected but room for improvement in headers and incident response documentation. The lack of WHOIS transparency slightly reduces trust, but the professional content and partnerships mitigate concerns. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving WHOIS transparency to strengthen trust and compliance.

Figure8 is a Belgian web agency established in 2007, specializing in designing and developing websites, web applications, and webshops primarily for small and medium enterprises, non-profits, and organizations. The company positions itself as a focused, quality-driven partner with a strong local presence in Ghent. Their website reflects a professional and modern digital presence with clear service offerings and client references. Technically, the site employs modern JavaScript frameworks, analytics, and bot protection mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS and bot mitigation, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, but could improve transparency and compliance documentation.

AKH Wien is a major university hospital in Vienna, Austria, affiliated with the Wiener Gesundheitsverbund and MedUni Wien. The website serves as an information portal for patients, medical professionals, and visitors, providing clinical service details, patient information, events, and news about medical advancements. The site reflects a large healthcare institution with a strong market position in the Austrian healthcare sector. Technically, the website is built on an ASP.NET framework with modern jQuery libraries and uses HTML5 video elements. The site is moderately optimized for performance and mobile devices, with basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response disclosures would enhance compliance and security posture.

The website www.hsr.it is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. Due to this access restriction, no meaningful content, metadata, or business information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's business model, services, or market position. Technically, the site shows no evidence of modern web technologies, security headers, or privacy compliance mechanisms. The security posture is weak due to the absence of HTTPS confirmation and security best practices. Overall, the site presents a high risk of poor user experience and low trustworthiness. Strategic recommendations include resolving access restrictions, implementing HTTPS, publishing privacy and cookie policies, and providing clear contact information to improve transparency and compliance.

King's Health Partners is a prominent academic health science centre in the UK, integrating research, education, and clinical practice across three NHS Foundation Trusts and King's College London. The organization focuses on pioneering healthcare improvements through collaboration and innovation, targeting healthcare professionals, researchers, students, patients, and the wider public. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on Concrete CMS and leverages modern web technologies such as jQuery, FontAwesome, and Owl Carousel. It includes accessibility tools and multilingual support via Google Translate, indicating a commitment to inclusivity. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure program. WHOIS data is privacy protected, which is reasonable for this healthcare partnership. No critical vulnerabilities or suspicious indicators were found. Overall, the website demonstrates a strong security posture and business credibility, with recommendations to enhance transparency around security policies and incident response. The risk level is low, supporting trust in the organization's digital presence.

HUS (Helsingin ja Uudenmaan sairaanhoitopiiri) operates Finland's largest university hospital, providing comprehensive medical and dental specialty care services. The website serves multiple audiences including patients, healthcare professionals, and researchers, offering detailed information on treatments, hospital locations, research projects, and educational resources. The organization holds a strong market position as a key public healthcare provider in Finland.

Vall d'Hebron Barcelona Hospital Campus is a leading healthcare and research institution in Catalonia, Spain, providing comprehensive medical assistance, research, education, and innovation services. The website reflects a mature digital presence with multilingual support, rich content, and strong branding consistent with a large healthcare entity. Technically, the site uses Drupal 9 CMS with modern frameworks and integrates multiple analytics and marketing tools, including Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and spam protection via hCaptcha, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with clear user consent mechanisms. The WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and certifications. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

Yapaka is a well-established Belgian government-initiated non-profit program focused on the prevention of child maltreatment. The website serves parents, children, adolescents, and professionals by providing educational content, campaigns, and support resources. It holds a strong market position within the Wallonie-Bruxelles region and benefits from governmental backing. Technically, the site is built on Drupal 7 with common web libraries and frameworks, hosted by Etnic, and uses HTTPS with cookie consent and CAPTCHA for security and privacy. However, the use of an outdated CMS and lack of modern security headers present some risks. The site is content-rich, professionally designed, and trustworthy, with moderate user tracking via Google Analytics and Matomo. No explicit privacy or security policies are found on-site, but a privacy/legal link to the Federation Wallonie-Bruxelles portal is provided.

Cellule Architecture de la CFWB operates as a government-affiliated entity supporting public sector clients in Wallonie-Bruxelles with architectural quality assurance, public procurement advice, and cultural promotion. The website serves as an information hub for architectural markets, art integration, cultural editions, archives, and international collaborations. The organization is positioned as a trusted regional government partner with a clear mission and target audience. Technically, the website is built on Drupal 7 with legacy JavaScript libraries such as jQuery 1.12.4 and uses Leaflet.js for mapping features. Hosting is provided by OVH SAS, a reputable provider. The site is mobile-optimized and has good SEO and accessibility basics but could benefit from modernization and enhanced security headers. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and modern security headers. The use of outdated JavaScript libraries presents potential vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is clear and trustworthy, reinforcing business credibility. Overall, the website is professional, trustworthy, and serves its governmental and cultural mission well, but should address technical and privacy improvements to enhance security and compliance.

The website 'Portail officiel de la recherche scientifique en fédération Wallonie-Bruxelles' serves as the official government portal for scientific research in the Wallonia-Brussels Federation. It provides comprehensive information on research activities, funding opportunities, career resources, and institutional partnerships. The portal targets researchers, academic institutions, government bodies, and the general public interested in scientific research within the region. The business model is government-funded, focusing on information dissemination and support for the research community. Technically, the site is built on TYPO3 CMS version 4.5, an outdated platform that may pose security risks. It employs common web technologies such as jQuery, Owl Carousel, and Matomo analytics for privacy-conscious user tracking. The site demonstrates moderate performance and good mobile optimization but lacks modern security headers and uses an older CMS version, indicating technical debt. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of visible security headers and the outdated CMS version present potential vulnerabilities. No direct contact emails or phone numbers are provided, with contact facilitated through forms. WHOIS data is unavailable due to domain registration restrictions, which slightly reduces trust but does not negate the site's legitimacy given its government affiliation. Overall, the website is a trustworthy and professional government portal with good content quality and user experience. Strategic improvements include updating the CMS, enhancing security headers, and publishing explicit security and incident response policies to strengthen the security posture and compliance.

The website sport-adeps.be serves as the official sports portal for the Fédération Wallonie-Bruxelles, focusing on promoting sports activities and supporting the francophone population in Wallonia and Brussels. It offers a variety of services including sports courses, events, and support for local sports initiatives. The site is government-affiliated and links extensively to official federation domains, reinforcing its legitimacy and public service role. Technically, the site is built on TYPO3 CMS version 4.5, utilizing several JavaScript libraries and analytics tools such as Matomo and Maze. While the site is functional and well-structured with good content quality and mobile optimization, some technical aspects like outdated jQuery versions and missing security headers present moderate security concerns. Privacy compliance is well addressed with visible cookie consent and privacy policies. WHOIS data is unavailable due to domain registry restrictions, but the overall trustworthiness remains high given the official nature of the site and its content. Recommendations include updating libraries, implementing security headers, and publishing explicit security policies to enhance trust and security posture.

The Fédération Wallonie-Bruxelles official website serves as a comprehensive portal for government services, cultural information, education, sports, youth aid, research, and justice within the Wallonia-Brussels Federation in Belgium. It targets residents and stakeholders by providing news, documentation, contact information, and access to various public services. The site is well-branded and consistent with government standards, featuring official social media links and a professional design. Technically, the website is built on TYPO3 CMS version 4.5, an older but stable content management system, supplemented by jQuery, Owl Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the CMS version is outdated, which may pose security risks. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. No explicit security headers were detected in the provided data, and no vulnerability disclosures or incident response contacts are publicly available. The WHOIS data is restricted due to DNS Belgium policies, but the domain is consistent with an official government entity. Overall, the security posture is moderate but could be improved by updating software and adding security headers. The overall risk assessment is low, with recommendations focusing on modernizing the CMS, enhancing security headers, and publishing clear security policies. The website is trustworthy, professional, and safe for general audiences.

Optimal Workshop is a professional SaaS platform specializing in UX research and design testing, targeting enterprise and product teams. The website demonstrates a strong market position with trusted clients such as Netflix, Nike, and Apple, offering a comprehensive suite of user insight tools including first-click testing, card sorting, tree testing, surveys, qualitative insights, and prototype testing. The platform is designed to facilitate insight-driven product decisions and improve user experience outcomes. Technically, the website is built on Webflow with modern analytics and marketing integrations, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. The WHOIS data is unavailable, which limits domain trust verification, but the professional presentation and branding mitigate concerns. Overall, the website scores well on content quality, technical implementation, and security, with minor penalties for missing WHOIS transparency and security policy details.

VISITWallonia.be is the official tourism website for the Wallonia region in Belgium, providing travel information, destination guides, and event listings to tourists and visitors. The site is built on Drupal 7 and incorporates modern web technologies such as jQuery and embedded social media content via Flockler. The website demonstrates good content quality and user experience with multilingual support, targeting a broad audience interested in tourism in southern Belgium. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain registration is consistent with the business purpose and age, registered with a reputable registrar since 2019. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

APEFE is a well-established international cooperation agency integrated within the international relations framework of the Federation Wallonia-Brussels and Wallonia, active for over 50 years in emerging countries. The organization focuses on sustainable development goals, delivering projects in environment, social and economic inclusion, and health sectors. The website reflects a professional and consistent brand image with clear alignment to UN SDGs and multiple country programs and partnerships. Technically, the site is built on WordPress with modern libraries and plugins, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled, but could be improved by adding security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, limiting domain registration trust assessment, but the overall site content and presentation support legitimacy.

The Wallonia Export & Investment Agency (AWEX) is a government entity dedicated to promoting foreign investment and export activities in the Wallonia region of Belgium. The website serves as a portal for foreign companies seeking to invest, Walloon companies looking to export, and young graduates seeking internships abroad. It provides access to partner sites, international news, and a database of export companies. The agency's market position is that of an official regional government body with a medium-sized operational scale and a founding date consistent with the domain registration in 2000. Technically, the website employs modern JavaScript libraries including Google Tag Manager and Google Maps API, ensuring moderate performance and good mobile optimization. The site uses HTTPS and includes a cookie consent mechanism, reflecting a basic level of privacy compliance. However, there is room for improvement in security headers and accessibility features. From a security perspective, the site is well-positioned with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency. The cookie consent banner and privacy policy indicate GDPR awareness but could be enhanced with more comprehensive compliance documentation. Overall, the website is professional, trustworthy, and aligned with its government mandate. Strategic recommendations include enhancing security headers, publishing terms of service and incident response information, and improving accessibility and privacy compliance documentation to strengthen trust and security posture.

Physicourses is a specialized e-learning platform providing continuing education courses primarily for physiotherapists, occupational therapists, and allied health professionals worldwide. The platform offers a rich library of over 600 hours of video content and numerous PDF courses, all designed to provide professional accreditation credits. The business operates on a subscription model with options for digital and PDF course access, supported by partnerships with recognized institutions and authors. The website is professionally designed, mobile-optimized, and offers a seamless user experience with clear navigation and calls to action. Technically, the site is built on the Webflow CMS platform, leveraging modern web technologies including jQuery and Vimeo for video content delivery. Hosting is managed by Webflow, ensuring reliable performance and HTTPS security. Accessibility and SEO practices are well implemented, contributing to good overall technical maturity. However, the site lacks a cookie policy and terms of service pages, which are important for full privacy compliance. From a security perspective, the site enforces HTTPS and uses secure embedded content. No critical vulnerabilities or exposed sensitive data were detected. The absence of detailed security policies and incident response information suggests room for improvement in transparency and preparedness. The WHOIS data for the domain is missing, which raises some concerns about domain legitimacy, although the professional nature of the website content mitigates this somewhat. Overall, Physicourses presents a trustworthy and professional online presence for healthcare education, but should address privacy compliance gaps and improve domain registration transparency to enhance trust and security posture.

Rehab Physio Centre is a small healthcare provider based in Palmerston North, New Zealand, specializing in physiotherapy and rehabilitation services. Established in 2009, the center offers professional treatment for musculoskeletal conditions, ACC treatments without requiring a doctor's referral, and sports assessment clinics. The business targets local patients seeking physiotherapy and rehabilitation, leveraging partnerships such as the ACC Allied Health Services Contract and Southern Cross Health Society for easy claims. The website reflects a professional healthcare service with clear contact information and social media presence. Technically, the website is built on Joomla CMS using the Warp framework and Widgetkit extensions, with jQuery libraries for interactivity. Hosting and DNS are managed via Cloudflare and Freeparking Limited respectively, with HTTPS enabled ensuring secure connections. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO is adequately addressed with meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is used for user tracking without visible consent mechanisms, which may pose privacy concerns. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, published privacy and cookie policies, and improved compliance with data protection regulations. These improvements would strengthen user trust and reduce potential legal risks.

Ezy Kitchens is a New Zealand-based kitchen design, renovation, and installation company with multiple showrooms across the South Island. The website presents a professional and comprehensive overview of their services, targeting homeowners seeking quality kitchen solutions. The business model focuses on local manufacturing and personalized service, supported by a consistent brand presence and active social media engagement. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Pipedrive LeadBooster, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, indicating room for compliance improvements. WHOIS data is unavailable due to privacy or registry restrictions, but the website content and external references support legitimacy. Overall, the site is well-designed and trustworthy, though privacy compliance and security policies should be enhanced.

Harmoney Limited operates as a leading online personal loan provider in New Zealand, offering a range of unsecured loan products including debt consolidation, home improvements, car loans, and more. The company positions itself as a fast, 100% online lender with fixed interest rates and no early repayment fees, targeting New Zealand residents seeking convenient and transparent lending solutions. The website reflects a mature digital presence with comprehensive content, customer testimonials, and clear calls to action, supporting its market position as an award-winning financial services provider. Technically, the website is built on the SilverStripe CMS platform and integrates modern analytics and marketing technologies such as RudderStack, TrackJS, FullStory, Google Tag Manager, and Intercom. The site is well-optimized for mobile devices, demonstrates good SEO practices, and maintains fast performance. Security is enforced through HTTPS, and no critical vulnerabilities or exposed sensitive data were detected in the content. However, some security headers and explicit security policies are not evident, suggesting room for improvement. From a security and compliance perspective, the site includes a comprehensive privacy policy and cookie consent mechanism, indicating good privacy compliance aligned with GDPR principles. Contact information is clearly provided, including phone numbers, email, and physical addresses. The domain WHOIS data is not available for the www subdomain, likely due to privacy protection or querying method, but the website's legitimacy is supported by business registration and trust signals such as financial service provider licensing and customer reviews. Overall, Harmoney's website demonstrates a strong business credibility and digital maturity with a secure and user-friendly online lending platform. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen trust and security posture.

Access Granted NZ is a New Zealand-based podcast platform launched in 2023, focusing on sharing unique and valuable narratives through interviews and storytelling. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress, uses HTTPS, and Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or detailed GDPR indicators. Contact information is limited to a contact form with no direct emails or phone numbers published. Overall, the site is safe, trustworthy, and suitable for general audiences.

Barfoot & Thompson is New Zealand's largest privately-owned real estate agency, with a strong market presence in Auckland and surrounding regions. The company offers a broad range of real estate services including residential sales, rentals, rural and commercial property services, property management, and body corporate management. With over 100 years of family ownership and operation, the company holds a significant market share and is recognized for its professionalism and community involvement. Technically, the website is built on a modern Angular framework with integration of multiple analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site demonstrates good mobile optimization, SEO practices, and a professional design that supports a positive user experience. Security measures include HTTPS enforcement and standard security headers, although some advanced security policy disclosures are not publicly available. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is due to .nz registry policies rather than privacy protection, and does not detract from the legitimacy of the business. Overall, the website and business demonstrate a high level of trustworthiness and professionalism. Strategic recommendations include publishing a dedicated security policy and incident response information, enhancing accessibility features, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance. These steps will further strengthen the company's digital maturity and trust with users.

Woolworths NZ Ltd operates a major online supermarket platform serving New Zealand consumers, offering online grocery shopping, home delivery, and pickup services. The website is branded consistently with the Woolworths Group and provides recipe content to enhance customer engagement. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Facebook Pixel, hosted on Akamai CDN, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and secure cookie practices, though explicit privacy and cookie policies are not clearly found in the provided content. The absence of WHOIS data for the domain is unusual but the website content and branding suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security disclosures.

The Warehouse is a leading New Zealand retail company offering a wide range of products including clothing, homeware, toys, groceries, and more. It operates both online and physical stores, emphasizing everyday low prices and sustainability initiatives. The website reflects a mature e-commerce platform with strong branding and customer engagement through MarketClub membership and social media presence. Technically, the site leverages Salesforce Commerce Cloud and integrates multiple analytics and marketing tools, ensuring a modern and responsive user experience. Security posture is solid with HTTPS, secure forms, and embedded live chat, though explicit security policies and vulnerability disclosure programs are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

New Zealand Rugby League operates as the national governing body for rugby league in New Zealand, providing comprehensive information on national teams, tournaments, player resources, and community engagement. The website serves a broad audience including players, coaches, referees, fans, and community members, positioning itself as an authoritative source for rugby league in the country. The business model focuses on sports promotion, community involvement, and membership services, supported by a medium-sized organizational structure founded in 2001. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for analytics and user engagement such as Google Analytics, Hotjar, and YouTube Embed Plus. Hosting and DNS services are provided by Freeparking Limited and Cloudflare respectively, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were detected, indicating potential compliance gaps with GDPR and other privacy regulations. The site employs tracking and marketing tools, including Facebook Pixel and HubSpot, with moderate user tracking levels. Overall, the website is professional, content-rich, and trustworthy, with a strong brand presence and social media integration. However, improvements in privacy compliance and security hardening are advised to mitigate risks and enhance user trust.

The Shopsite is a New Zealand-based e-commerce retailer founded in 2019, specializing in a broad range of consumer products including electronics, gaming accessories, home living items, security solutions, and pet products. The website positions itself as a competitive price leader offering quality products to New Zealand consumers. The business operates on the Shopify platform, leveraging integrated marketing and review tools such as Klaviyo and Judge.me to enhance customer engagement and trust. The site demonstrates good content quality, consistent branding, and a user-friendly shopping experience optimized for mobile devices.

illuxiCampus is an online educational platform offering a library of training courses aimed at skill development and professional growth. The website targets learners seeking flexible access to training content anytime and anywhere. The platform leverages modern web technologies including Bootstrap and FontAwesome, and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Mixpanel to monitor user engagement and support advertising efforts. Despite a professional and well-structured website, the absence of WHOIS registration data raises concerns about domain legitimacy. The security posture is moderate with HTTPS implied but lacking explicit security headers and privacy compliance documentation. Overall, the site presents a credible educational service but would benefit from enhanced transparency and security practices.

Igepa is a well-established Belgian company specializing in the distribution of paper, visual communication materials, packaging, and construction products. The company serves a diverse range of professional sectors including copy centers, office supplies, education, cleaning, advertising agencies, and government entities. With a domain registered since 2002, Igepa demonstrates a stable market presence and a broad product offering tailored to B2B customers. The website reflects a professional business model focused on providing comprehensive product categories to its target audience. Technically, the website is built on the Shopware CMS platform and integrates modern tools such as Google Tag Manager for analytics and MultiSafepay for payment processing. The site shows good mobile optimization and moderate performance, although SEO metadata is incomplete and accessibility features are basic. The presence of a cookie consent mechanism indicates some attention to privacy compliance, but the absence of explicit privacy and cookie policies suggests room for improvement. From a security perspective, the website uses HTTPS with a good SSL configuration and employs Google Tag Manager's consent mode. However, no security headers were detected, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were identified in the provided content. Overall, the security posture is moderate but could benefit from enhanced transparency and additional protective measures. The overall risk assessment indicates a legitimate and professional business with moderate technical and security maturity. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing SEO and accessibility, and providing clear contact and incident response information to improve trust and compliance.

Oud Papier Jozef Michel NV is a well-established family-owned business specializing in the collection, transport, sorting, and recycling of old paper in Belgium. With over 50 years of operational history and a domain registered since 2000, the company holds a strong market position as one of the oldest paper collectors in the region. Their services target a diverse audience including logistics, graphic, port, industrial sectors, and various associations and SMEs. The website reflects a professional and consistent brand image with multilingual support and clear contact information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPML, ensuring good SEO and user experience across devices. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, although some security headers and explicit policies are missing. Overall, the site demonstrates a solid security posture with room for improvement in formal security policies and incident response readiness. The website is free from suspicious content or blocking mechanisms, making it accessible and trustworthy for users.

Select is a Belgian human resources and recruitment consultancy firm specializing in providing HR services and recruitment solutions to businesses. The website positions itself as a specialist in human resources and recruitment, targeting companies and professionals seeking expert consultancy and staffing services. The digital presence is supported by modern web technologies including Google Analytics, Cookiebot for cookie consent management, and Herefish for marketing automation, indicating a moderate level of digital maturity. The website is well-structured with good content quality and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit privacy policy pages suggests room for improvement in compliance and security best practices. The domain WHOIS data is restricted, which is common for small businesses to protect privacy, but limits transparency. Overall, the website represents a legitimate and professional business with moderate risk and good operational security practices.

Monizze is a Belgian company specializing in electronic employee benefit solutions including meal vouchers, eco vouchers, gift vouchers, and sport and culture cheques. They offer a fully digital, innovative platform targeting employers, employees, merchants, and partners within Belgium. The company positions itself as a leading provider in this niche market with a comprehensive suite of services including RewardFlex and RewardPilot for flexible remuneration and salary policy management. Technically, the website is built on WordPress with modern libraries and integrates Google Tag Manager and a consent management platform, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be improved. The WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Vink BV is a Belgian company specializing in plastics materials and processing solutions, targeting professional customers in manufacturing and related sectors. The company offers a broad range of products including fiberglass reinforced plastics, adhesives, and custom cutting services, supported by an online webshop called MyVink. Their market position is that of an established medium-sized player with nearly 30 years of experience, emphasizing quality and sustainability, as evidenced by their ISO 9001:2015 certification and EcoShift recycling program. Technically, the website is well-structured, mobile-optimized, and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response information. WHOIS data is restricted due to .be domain policies, limiting transparency but not indicating suspicious activity. Overall, the website is professional, trustworthy, and business-focused with room for security enhancements.

Canon België | Canon Belgique operates as the Belgian branch of Canon, a global leader in imaging and optical products. The website targets Belgian consumers in Dutch and French, offering access to Canon's consumer cameras, printers, and related services. The site reflects Canon's strong brand presence and market position in the technology sector, particularly in imaging solutions. Technically, the website employs a modern tech stack including JavaScript frameworks, marketing and analytics tools such as Google Tag Manager, Tealium, and Optimizely, and integrates Google reCAPTCHA for security. The site is mobile optimized and SEO friendly, with good content quality and navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is restricted due to DNS Belgium policies, which is typical for .be domains, and does not raise suspicion. Overall, the website is professional, trustworthy, and compliant with GDPR cookie consent requirements.

Wallonie-Bruxelles International (WBI) is a governmental organization responsible for managing international relations for the Wallonia-Brussels region in Belgium. It supports cultural, educational, and economic cooperation with over 70 countries and regions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to government officials, international partners, and cultural stakeholders. Technically, the site is built on Drupal 10 with modern libraries and includes a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates high trustworthiness and professionalism consistent with its governmental role.

Wallonia.be is the official regional government website for Wallonia, Belgium, providing comprehensive information and services related to living, investing, studying, visiting, and buying products from the region. The site targets a broad international audience including potential investors, students, tourists, and residents. The business model is governmental promotion and information dissemination, positioning Wallonia as an attractive region in Europe. Technically, the site is built on Drupal CMS with modern frontend technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and published security policies. Privacy compliance is basic but includes cookie consent and a privacy policy consistent with GDPR. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but the official nature of the site and consistent branding mitigate concerns. Overall, the site is trustworthy, professional, and well-maintained.

Vlaanderen Circulair is an official Flemish government platform dedicated to promoting and coordinating the circular economy in the Flanders region of Belgium. It operates as a partnership among government bodies, businesses, civil society, and knowledge institutions to drive circular economy initiatives through thematic work agendas and supporting lever actions. The website serves as an information hub, offering resources, training programs, and tools to facilitate circular economy adoption. The platform is well-positioned as a leading regional authority and knowledge center in this domain, supported by a network of recognized partners and stakeholders. Technically, the website is built on Fork CMS and employs modern web technologies including Google Tag Manager, Google Analytics, and Smartlook for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance with privacy regulations.

Kortrijk Xpo is a well-established event venue located in Kortrijk, Belgium, offering spaces for fairs, events, seminars, and catering. The company operates under Xpo Group bv and targets event organizers and business professionals primarily in the West Flanders region. The website is professionally designed, multilingual, and provides comprehensive information about services and upcoming events. Technically, the site runs on TYPO3 CMS version 4.7 with integrations for Google Analytics, Facebook Pixel, and Leadinfo for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and published security policies. The absence of WHOIS data is a notable transparency concern but does not detract significantly from the overall legitimacy given the professional web presence and business information. Strategic improvements in security headers and CMS updates are recommended to enhance security and compliance.

Howest is a prominent higher education institution based in Belgium, offering a wide range of bachelor, master, graduaat, and postgraduaat programs. The institution emphasizes innovation and entrepreneurship, targeting students, alumni, and professionals seeking education and training. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Drupal CMS with modern libraries and includes cookie consent mechanisms and Google Tag Manager for analytics. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and a published security policy are areas for improvement. WHOIS data is restricted due to registry policies, which slightly impacts trust but is common for .be domains. Overall, Howest presents a professional, trustworthy, and well-maintained online presence suitable for its educational mission.

Digital Pulse is a Belgian technology company specializing in the development of integrated websites and e-commerce platforms, with a strong emphasis on Craft CMS and system integrations. Founded in 2018, the company holds a reputable market position as a Craft CMS Enterprise Verified partner, offering services that include web development, online marketing, and custom plugin development. Their client base primarily consists of businesses seeking seamless integration of their digital platforms with internal systems such as ERP and CRM. The website reflects a mature digital infrastructure with modern technologies, responsive design, and comprehensive SEO practices. Security posture is solid with HTTPS and some security best practices in place, though explicit security policies and incident response information are not publicly disclosed. Overall, the company demonstrates high business credibility and professionalism with multiple office locations and active social media presence.

Starfisk is a technology company specializing in digital transformation solutions including software development, DevOps, cloud infrastructure, IT consulting, AI, and data services. Positioned as a trusted digitalisation partner, Starfisk serves businesses aiming to innovate and grow through tailored IT solutions. The website demonstrates a professional and modern digital presence with multilingual support and strong client case studies. Technically, the site is built on WordPress with modern plugins and scripts, optimized for performance and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA on contact forms, and cookie consent management, though explicit security headers and published security policies are absent. WHOIS data is unavailable, suggesting recent domain registration or privacy concerns, which slightly impacts trust. Overall, Starfisk presents a credible and professional business with room for enhanced security transparency.

Volta is a Belgian digital agency specializing in branding, website development, and creative digital services. The company targets businesses and organizations seeking professional digital presence and marketing solutions. Their website is built on Drupal 11, indicating a modern and scalable technical infrastructure. The use of advanced JavaScript libraries and tracking tools like Google Tag Manager and Leadinfo reflects a mature digital marketing approach. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with moderate to high technical and security maturity.

Plexus ziekenhuisnetwerk is a regional hospital network in Oost-Vlaams-Brabant, Belgium, comprising AZ Diest, Regionaal Ziekenhuis Heilig Hart Leuven, RZ Tienen, and UZ Leuven. The network focuses on delivering quality healthcare close to patients and collaborates closely with first-line care providers and mental health services. Key services include coordinated COVID-19 care, shared electronic patient dossiers via Nexuzhealth, and quality improvement initiatives such as FlaQuM. The website reflects a professional healthcare organization with clear regional focus and partnerships.

The European University Hospital Alliance (EUHA) is a collaborative network of eleven leading university hospitals across Europe, focused on promoting excellence and innovation in healthcare, research, and education. The alliance aims to improve health outcomes and support sustainable healthcare systems in Europe by sharing best practices, facilitating professional exchanges, and collaborating on research and policy advice. The website reflects a mature and professional organization with a clear mission and strong partnerships with major European hospitals. Technically, the website is built on WordPress using the Elementor page builder, integrating modern web technologies such as Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-structured with good SEO practices, mobile optimization, and accessibility considerations, although some accessibility features could be enhanced. Performance is moderate, with a clean design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to EURid privacy policies, but the website's professional presentation and reputable partner links indicate high legitimacy. Overall, EUHA's website demonstrates a strong digital presence aligned with its healthcare collaboration mission, with room for improvement in security policy transparency and technical security hardening.

The domain vznkul.be is registered since 2002 with The Registrar Company B.V., indicating a long-standing registration. However, the website content is completely inaccessible, returning a 403 Forbidden error page with no additional content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. No privacy, cookie, or terms of service policies are present, nor is there any contact or security information available. The lack of accessible content and security headers suggests the site is either under maintenance, misconfigured, or intentionally restricted. The security posture cannot be assessed due to lack of data, and no trust indicators or certifications are visible. Overall, the site presents a very low digital maturity and poor user experience due to blocked access.

eps en kaas is a small digital agency based in Gent, Belgium, specializing in branding and custom website development. The company targets businesses and organizations seeking professional digital presence and branding services. Their market position is regional with a portfolio that includes cultural and educational projects, indicating a niche focus and trusted client relationships. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. The use of Drupal 10 CMS and privacy-focused analytics (Plausible) demonstrates a commitment to modern, privacy-conscious technology. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is privacy protected, which is typical for small agencies and does not raise immediate trust concerns. Overall, the website presents a credible and professional business front with room for security and compliance improvements.

Studio Mast is a small creative agency based in Belgium, specializing in creating visual identities, websites, books, and graphic design for ambitious individuals, companies, and organizations. The company positions itself as a niche player in the media sector, offering tailored branding and web design services. The website showcases a professional portfolio and clear contact information, supporting its market presence and credibility. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager, Hotjar, and Leadinfo, hosted by Combell nv, a reputable provider. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the domain registration is consistent with the business age and claims, enhancing trustworthiness.