Security Directory

K

König-Brauerei GmbH

koenig.de

74

König-Brauerei GmbH operates the König Pilsener brand, a well-established brewery in Germany under the Bitburger Braugruppe umbrella. The website showcases their beer products, brewery tours, and fan engagement activities, targeting adult consumers with responsible marketing including age verification. The digital infrastructure is modern, leveraging Next.js and React, with integrated consent management and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, supporting a medium-sized hospitality business.

PuzzlePlayz.com is a Swedish website operated by Bulls, a company specializing in providing digital and printed crossword puzzles, sudoku, and similar puzzle content. The business positions itself as the largest provider of online crosswords in Sweden, targeting puzzle enthusiasts and publishers. Their services include responsive digital puzzles compatible across devices and digitalization of existing puzzles. The website content is professional and consistent with the business focus, though it lacks comprehensive privacy and cookie policies. Technically, the website uses standard web technologies including Bootstrap CSS and Google Analytics with Google Tag Manager for tracking. The domain is registered through a reputable registrar and hosted with DNS services via Cloudflare. The site is mobile optimized and performs moderately well but lacks advanced SEO and accessibility features. Security practices are basic with HTTPS enabled but missing important security headers and DNSSEC. From a security perspective, the website shows moderate maturity. HTTPS is implemented, and Google Analytics is configured with secure cookie flags. However, the absence of security headers, DNSSEC, and published privacy or incident response policies indicates room for improvement. No critical vulnerabilities or adult content were detected, and the domain registration is consistent and legitimate. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency to improve trust and regulatory adherence.

S

SWB Bus und Bahn

swb-busundbahn.de

61

SWB Bus und Bahn is a large regional public transportation provider based in Bonn, Germany, operating bus and tram services with a focus on sustainable mobility and customer service. The company is part of the SWB Konzern group and offers a variety of ticketing options, real-time traffic updates, and mobility apps. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Owl Carousel, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

PickyStory

pickystory.com

61

Amplify, operated by PickyStory, is a SaaS growth platform designed specifically for Shopify merchants to increase revenue through AI-powered bundles, upsells, and subscription services. The platform targets e-commerce brands seeking to boost average order value and customer lifetime value. The website is professionally designed using WordPress and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and HubSpot. The technical infrastructure is modern and performant, with Cloudflare DNS and HTTPS enforced, ensuring secure and reliable access. However, the site lacks explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security posture is solid with standard protections but could be enhanced with additional HTTP security headers and published security policies. Overall, the business appears legitimate and well-positioned in the e-commerce SaaS market, serving over 4,500 Shopify brands.

1

1881

1881.no

66

1881.no is a leading Norwegian telephone directory and number lookup service, providing updated contact information for individuals and businesses across Norway. The website positions itself as a trusted source for reliable phone directory services, supported by a strong brand presence and social media engagement. The business model focuses on information services, leveraging advertising and partnerships to monetize the platform. Technically, the site employs modern web technologies including Google Tag Manager, Prebid.js for header bidding, and Amazon Publisher Services, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and standard security headers likely present, but the site lacks visible privacy and cookie policies, as well as incident response disclosures. Overall, the site is professional and trustworthy, but could enhance compliance and transparency to improve user trust and regulatory adherence.

D

Distribution Innovation

di.no

61

Distribution Innovation is a Nordic technology company specializing in logistics and distribution solutions, focusing on parcel and print media logistics. The company offers software products that enhance logistics efficiency for businesses delivering products to consumers, with a strong presence in Norway, Sweden, and Finland. Their solutions cover distribution execution and planning, supporting a network of over 15,000 couriers and powering major newspaper deliveries in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, Google Tag Manager, and reCAPTCHA for security. The site is well-optimized for performance and mobile devices, with good SEO practices and a professional design. Analytics are implemented via Google Analytics with IP anonymization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks several important security headers and explicit incident response or security policy disclosures. Privacy compliance is partially addressed with a privacy and cookie policy, though no explicit cookie consent mechanism is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for businesses in this sector. Overall, the website presents a professional and trustworthy front for a medium-sized Nordic logistics technology company. Strategic improvements in security headers, privacy mechanisms, and transparency around incident response would enhance their security posture and compliance standing.

Simpleview Europe is a specialized digital agency providing comprehensive tourism technology solutions including CMS, CRM, DMS, and digital marketing services. As part of Granicus, it holds a strong market position serving Destination Management Organisations and tourism boards across Europe. The website reflects a mature digital presence with modern technologies and extensive service offerings. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The technical infrastructure is robust with use of modern JavaScript frameworks and analytics tools, supporting good performance and user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

F

Fibbl

fibbl.com

56

Fibbl is a technology platform specializing in delivering 3D product experiences and content aimed at enhancing B2B sales, go-to-market strategies, and eCommerce efficiency. The company offers services including 3D viewers, virtual try-on solutions, and augmented reality experiences, positioning itself as a key player in the digital product experience market. Founded in 2015, Fibbl has established a medium-sized business presence with a focus on innovative technology solutions for brands. The website infrastructure is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and integrating multiple marketing and analytics tools including HubSpot, Google Tag Manager, TikTok Pixel, Facebook Pixel, LinkedIn Insight Tag, Dreamdata Analytics, and Hotjar. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations and providing users with granular control over cookie preferences. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business age and shows no suspicious patterns, enhancing trustworthiness. Overall, Fibbl demonstrates a solid technical and business foundation with good privacy compliance and marketing transparency. Strategic improvements include publishing comprehensive privacy and security policies, incident response details, and enhancing security headers to further strengthen the security posture.

H

HotelNetSolutions GmbH

hotelnetsolutions.de

60

HotelNetSolutions GmbH is a specialized technology company providing SaaS solutions tailored for the hospitality industry, focusing on hotel booking engines, channel management, and related backend systems. Their product suite includes OnePageBooking, RateDistributor, VoucherBooking, and HotelControl, targeting hoteliers and hotel groups primarily in Germany. The company positions itself as a niche provider with a strong emphasis on integrating hotel operations with modern internet technologies to enhance booking experiences and operational efficiency. Technically, the website is built on WordPress with Elementor, leveraging modern SEO and analytics tools such as Google Analytics and Google Tag Manager. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring reliable infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional and trustworthy business with good digital maturity and compliance standards.

A

Amedia

amedia.no

74

Amedia is the largest publisher of local newspapers in Norway, operating a broad portfolio including 92 local newspapers, Nettavisen, Nationen, multiple local websites, trade journals, and a local radio station. The company focuses on delivering high-quality journalism and local news coverage across the country, targeting Norwegian local media consumers and advertisers. The website reflects a professional media publishing business with a clear market position as a leading local media entity in Norway. Technically, the website is built on Joomla CMS with Yootheme UIkit framework, integrating modern web technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It employs a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain registration insights, but the professional web presence and structured data support legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing performance and accessibility further.

A

agimus web gmbh

agimus-web.ch

45

Agimus web gmbh is a small Swiss company specializing in web design, web programming, hosting, and support services primarily targeting small and medium enterprises in the Eglisau region. The website presents a professional image with clear descriptions of their services including web development and office software support. The technical infrastructure is based on Joomla CMS with Bootstrap framework and integrates Google Analytics with IP anonymization for user tracking. While the website is accessible and functional, it lacks explicit privacy and cookie policies, as well as security headers and vulnerability disclosure mechanisms, which are important for compliance and security transparency. The overall security posture is moderate with HTTPS enabled but could be improved by implementing additional security best practices. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

C

Cave de La Côte

cavedelacote.ch

59

Cave de La Côte is a Swiss-based e-commerce retailer specializing in premium Vaudois and Swiss wines. The website positions itself as a provider of award-winning Swiss wines, targeting wine consumers both locally and internationally. The business model focuses on online sales with an emphasis on quality and regional authenticity. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices, though some areas like explicit privacy policies and terms of service are missing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved with additional security headers and vulnerability disclosures. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

B

Bianchi

bianchi.ch

48

Bianchi is a well-established Swiss family business specializing in fresh food products including fish, seafood, meat, and poultry. Operating since 1881, it serves the Swiss gastronomy sector with a broad product range and a dedicated logistics network. The company maintains a professional online presence with a WordPress-based website featuring modern design and SEO optimization. Technically, the site uses popular plugins and frameworks such as Avada theme, Fusion Builder, and Revolution Slider, supported by Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in security headers and vulnerability disclosure. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the website reflects a credible and trustworthy business with room for enhanced privacy and security transparency.

L

Léguriviera Groupe

leguriviera-groupe.ch

50

Léguriviera Groupe is a Swiss-based company specializing in the selection and delivery of exceptional fruits and vegetables primarily serving the gastronomy and retail sectors in Suisse romande. The company operates a professional e-commerce platform allowing customers to order fresh produce, including fresh-cut and ready-to-eat products. Their market position is that of a trusted regional supplier with strong local partnerships and a commitment to quality and freshness. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement features. Technically, the website is built on WordPress with WooCommerce and enhanced by various plugins for analytics, cookie compliance, and multilingual support. The infrastructure uses modern web technologies and tracking tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile optimized and SEO friendly, though performance is moderate and accessibility could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks advanced security headers and a publicly visible security policy or incident response information. No critical vulnerabilities or blocking mechanisms were detected, indicating a generally sound security posture but with room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the site's security and user experience.

C

Culturefood CFD SA

culturefood.ch

52

Culturefood CFD SA operates as a regional wholesale distributor specializing in fresh and frozen food products for professional kitchens across Switzerland. The company emphasizes regional sourcing, freshness, and daily delivery services, positioning itself as a reliable partner in the food service industry. The website reflects a mature digital presence built on WordPress with modern SEO and performance optimizations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in its market niche.

D

Deutscher Behindertensportverband – National Paralympic Committee Germany

parasport.de

47

Parasport.de is the official platform of the Deutscher Behindertensportverband, serving as the National Paralympic Committee Germany. The website provides comprehensive information about para sports, including 22 paralympic summer and 6 winter sports, role models, clubs, training, and events. It targets para athletes, enthusiasts, and the general public interested in inclusive sports within Germany. The platform acts as a central hub for para sport promotion and community engagement. Technically, the website is built on Drupal 10, uses modern web technologies including Google Fonts, Google Tag Manager, and Google Maps API, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, multiple security headers, and a cookie consent mechanism, although explicit privacy and terms of service pages are missing. The WHOIS data is minimal but consistent with a legitimate organization. Overall, the site is professional, trustworthy, and well-positioned as a national authority on para sports.

maxcluster GmbH is a German-based managed hosting provider specializing in scalable, high-performance cluster hosting solutions tailored for e-commerce platforms such as Shopware, Magento, WordPress, and others. Established in 2011, the company positions itself as Germany's leading e-commerce host, offering a comprehensive suite of hosting and managed services with a strong emphasis on security, performance, and customer support. Their target audience includes online shops, agencies, and e-commerce businesses seeking reliable and scalable hosting infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to their market segment. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including JavaScript frameworks, HubSpot forms for lead generation, and Iubenda for cookie compliance. The hosting infrastructure is TÜV-certified, with proprietary data centers and advanced security measures such as DDoS protection, malware scanning, and 24/7 monitoring. The site is mobile-optimized, SEO-friendly, and integrates marketing and analytics tools responsibly. From a security perspective, maxcluster demonstrates a strong posture with HTTPS enforcement, security headers, and proactive incident response capabilities. However, there is room for improvement in publishing a formal vulnerability disclosure policy and providing explicit data protection officer contact details. Overall, the domain registration data aligns well with the website content, reinforcing the legitimacy and trustworthiness of the business. The overall risk assessment is low, with no critical vulnerabilities or suspicious content detected. Strategic recommendations include enhancing transparency around vulnerability disclosures and incident response, which would further strengthen trust and compliance. The website scores highly across content quality, technical implementation, security, privacy compliance, and business credibility, making it a robust and professional digital asset for maxcluster GmbH.

N

Niedersächsischer Turner-Bund e.V.

ntbwelt.de

69

The Niedersächsischer Turner-Bund (NTB) is a regional non-profit sports association based in Hannover, Germany, focused on promoting turn and related sports across Niedersachsen. It offers a broad range of services including educational programs, event organization, and support for member clubs and trainers. The website serves as a comprehensive portal for information, resources, and community engagement for its target audience of sports clubs, trainers, and enthusiasts. Technically, the site is built on TYPO3 CMS with legacy jQuery and integrates multiple third-party services for analytics, marketing, and social media. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism, reflecting GDPR adherence. Security posture is moderate with room for improvement in HTTP security headers and library updates. Overall, the site is professional, trustworthy, and well-suited for its community-oriented mission.

D

Deutscher Turner-Bund

dtb.de

46

The Deutscher Turner-Bund (DTB) is a prominent German sports federation specializing in gymnastics, rhythmic sports gymnastics, trampoline, and fitness activities. The organization combines competitive sports with health and fitness initiatives, promoting values such as fairness, tolerance, team spirit, and respect. The website serves as a comprehensive portal for members, athletes, and the general public, offering information on events, education, and various sports disciplines. DTB holds a leading position in the German sports federation landscape, targeting a broad audience including children, youth, and adults interested in gymnastics and fitness.

D

DLRG Bundesverband

dlrg.de

76

DLRG Bundesverband is Germany's largest voluntary water rescue organization, founded in 1913, with a mission to prevent drowning through education, rescue services, and volunteer engagement. The organization operates a comprehensive website powered by TYPO3 CMS, hosted on AWS infrastructure, and integrates multiple modern analytics and marketing tools such as Google Analytics, Meta Pixel, and Brevo. The website demonstrates strong digital maturity with excellent content quality, clear navigation, and mobile optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a dedicated security policy are absent. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb.nrw

46

The Landessportbund Nordrhein-Westfalen e.V. is a prominent regional sports federation serving the North Rhine-Westphalia region in Germany. It provides a broad range of services including sports promotion, qualification programs, support for sports clubs, and initiatives for integration, inclusion, and sustainability in sports. The organization targets sports clubs, athletes, and sports enthusiasts within the region, positioning itself as a key non-profit entity in the government and sports sector. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and third-party tools such as Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing purposes. Accessibility features and mobile optimization are well implemented, enhancing user experience across devices. The site employs HTTPS with good SSL configuration and security headers, indicating a solid security posture. From a security and compliance perspective, the website demonstrates strong privacy compliance with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, explicit security policy documentation and incident response contacts are not publicly available, representing an area for improvement. The WHOIS data is privacy protected, which is typical for such organizations and does not raise immediate concerns given the website's professional presentation and domain relevance. Overall, the website is trustworthy, professionally managed, and compliant with relevant privacy standards. Strategic recommendations include publishing a formal security policy, providing incident response contact details, and considering a vulnerability disclosure program to further enhance transparency and security readiness.

H

HIPMI

hipmitimika.com

56

HIPMI Kabupaten Timika is a regional chapter of the Indonesian Young Entrepreneurs Association, focusing on fostering young entrepreneurs in Kabupaten Timika. The organization provides networking, collaboration, and business development opportunities through events and membership programs. The website is built on WordPress using Oxygen builder and integrates modern web technologies including Google Analytics and Tag Manager for tracking. The site is well-structured with good SEO practices and provides comprehensive event and membership information. Security posture is adequate with HTTPS enabled and domain registration through a reputable registrar, but lacks advanced security headers and explicit privacy or cookie policies. The domain is newly registered in 2025, which is inconsistent with the organization's founding year of 1974, suggesting a new or relaunched website for the regional chapter. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

Hotel Des Alpes is a well-established family-run hospitality business located in the picturesque Saanenmöser-Gstaad region of Switzerland, with a history dating back to 1904. The website reflects a professional and consistent brand image, offering hotel accommodation, gastronomy, and event services. The target audience includes tourists and travelers seeking premium mountain hospitality experiences. The business maintains a strong market position through its tradition and partnership with Hotel Kernen. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant, supporting the business's credibility and customer engagement.

S

Stageone Kommunikation

stageone.ch

58

Stageone Kommunikation is a small Swiss web agency based in Thun, specializing in digital communication, web design, and development services. The company emphasizes long-term partnerships, modular and scalable solutions, and comprehensive support for clients. Their website reflects a professional and modern digital presence, leveraging Cloudrexx CMS, jQuery, and Uikit frameworks. Privacy compliance is well addressed with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS and standard best practices, though explicit security policies and headers could be improved. Overall, the website is trustworthy, content-rich, and well-structured, supporting the company's business credibility.

Die Werke Versorgung Wallisellen AG is a regional Swiss energy utility company providing sustainable and secure energy services including electricity, gas, water, thermal networks, and digital networks. The company targets residential and commercial customers in Wallisellen and surrounding areas, emphasizing fair pricing and environmental responsibility. Their digital presence includes a customer portal and active social media engagement, supporting customer service and communication. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and tracking tools like Google Analytics and Facebook Pixel. The site is mobile optimized, accessible, and SEO-friendly, with a custom CMS backend inferred from URL structures. Performance is moderate with good navigation and content quality. From a security perspective, the site uses HTTPS with good SSL configuration and secure form validation. However, it lacks explicit published security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, supporting user consent and data protection. Overall, the website is professional, trustworthy, and well-aligned with the company's business sector. Recommendations include publishing a formal security policy, incident response information, and enhancing security headers to further strengthen the security posture.

T

Ausgabe Nr. 2–2025 - THE PHILANTHROPIST

thephilanthropist.ch

55

Thephilanthropist.ch is a multilingual online publication primarily in German, with English and French versions available. The website appears to be a magazine or journal focused on philanthropy or related topics, targeting a general audience interested in non-profit and philanthropic activities. The site uses WordPress CMS with Yoast SEO Premium for search engine optimization and integrates Google Tag Manager and Mailchimp for analytics and marketing purposes. The technical infrastructure is modern but lacks some advanced security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is moderate with no visible vulnerabilities but missing key security best practices such as security headers and incident response information. Overall, the website is professionally designed and mobile optimized, but it lacks transparency in privacy, contact, and security policies, which could impact user trust and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response and vulnerability disclosure information, and providing clear contact details to improve credibility and compliance.

A

Amedia

plussalt.no

59

The website www.plussalt.no is a Norwegian media subscription platform branded as +Alt, operated by Amedia. It offers users access to over 100 local newspapers, exclusive podcasts via the Untold app, and live sports streaming through Direktesport. The platform targets Norwegian consumers interested in comprehensive news and sports content in a single subscription. The site is professionally designed with good content quality and consistent branding, reflecting a mature digital media business. Technically, the site uses modern JavaScript libraries and ad platforms, including Google Tag Manager, Prebid.js, and DoubleClick, indicating a sophisticated advertising and analytics infrastructure. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the site is legitimate and well-positioned in the Norwegian media market, but could improve security and privacy transparency.

F

Filemail Inc.

filemail.com

61

Filemail Inc. operates a mature and professional cloud-based file transfer service specializing in sending and sharing large files securely. The company targets a broad audience including individuals, teams, businesses, and enterprises, offering a free tier and multiple paid subscription plans with advanced features such as managed file transfer, compliance certifications, and custom branding. The website demonstrates a strong market position with over 50 million users and global data centers, emphasizing security and ease of use. Technically, the website is built on modern frameworks like Next.js and React, with native applications available across major platforms including desktop, mobile, and Outlook. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Security is robust with HTTPS, multiple security headers, end-to-end encryption, 2FA, virus scanning, and regular penetration testing. The security posture is strong, with compliance to standards such as ISO 27001, HIPAA, GDPR, and Cyber Essentials UK. However, explicit incident response and vulnerability disclosure policies are not publicly found, representing an area for improvement. The absence of WHOIS data limits domain registration trust analysis, but the overall business credibility and website professionalism mitigate concerns. Overall, Filemail presents a low-risk profile with a secure, compliant, and user-friendly service offering. Strategic recommendations include publishing incident response and vulnerability disclosure policies, adding a security.txt file, and providing Data Protection Officer contact details to enhance transparency and trust.

A

Amedia AS

direktesport.no

69

Direktesport is a Norwegian sports streaming platform operated under Amedia AS, a large media company in Norway. The website offers live sports broadcasts and sports-related content targeting Norwegian sports fans. It holds a strong market position as a leading sports streaming service in the country. The technical infrastructure is modern, leveraging React and Next.js frameworks, with integrations for analytics and user tracking via Google Tag Manager and Mouseflow. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed through links to comprehensive privacy and cookie policies managed by the parent company. Overall, the site is trustworthy, professional, and safe for general audiences.

S

Scalenut

scalenut.com

69

Scalenut is a technology company specializing in AI-powered SEO and content marketing solutions. Their platform offers a unified suite of tools designed to help marketers plan, create, optimize, and track content performance across AI search engines and traditional search platforms. With a user base exceeding one million and endorsements from major global brands, Scalenut positions itself as a leader in the AI-SEO space, combining advanced AI capabilities with expert-led services to deliver measurable growth in organic traffic and brand visibility. Technically, Scalenut leverages modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, and various marketing and tracking integrations. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. The use of multiple analytics and tracking tools indicates a data-driven approach to marketing and user engagement. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive information. However, it lacks explicit security policies and incident response contact details, which are recommended for enhanced trust and compliance. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common for SaaS providers. Overall, Scalenut demonstrates a strong business and technical foundation with high-quality content and user experience. Strategic improvements in security transparency and WHOIS data disclosure could further enhance trustworthiness and compliance posture.

U

User.com

user.com

71

User.com is a comprehensive marketing automation platform designed to help businesses streamline their marketing, sales, and customer support processes. Positioned as an all-in-one SaaS solution, it offers a wide range of tools including customer data platforms, personalization engines, no-code automation builders, analytics, loyalty programs, and multi-channel communication channels such as email, SMS, WhatsApp, and live chat. The platform targets marketing, sales, support, and product teams across various industries including SaaS, e-commerce, education, finance, healthcare, and real estate. User.com is part of the Positive Group and operates primarily from France. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and uses AWS Cloudfront CDN for hosting and performance optimization. The site is well-optimized for mobile devices, features good accessibility and SEO practices, and integrates cookie consent mechanisms compliant with GDPR. The presence of multiple language versions and extensive product documentation indicates a mature digital infrastructure. From a security perspective, User.com enforces HTTPS, provides a dedicated security overview page, and claims regular penetration testing and audits. While explicit security headers are not fully visible in the HTML, the overall posture is strong with GDPR compliance and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which slightly reduces trust but is common for privacy reasons. Overall, User.com presents a professional, trustworthy, and technically sound platform with strong business credibility and compliance focus. Strategic recommendations include enhancing transparency on incident response, publishing security.txt, and reinforcing security headers to further improve trust and security posture.

V

v2com newswire

v2com-newswire.com

68

v2com newswire is a specialized media distribution service focused on architecture, design, and lifestyle sectors. It offers press release distribution, media relations, and related services to architects, designers, journalists, and editors worldwide. The company positions itself as a leader with 30 years of experience and a large international media network. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting a niche professional audience. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, reCAPTCHA, and uses Ruby on Rails framework. It integrates multiple marketing and tracking tools, indicating a mature digital infrastructure. Performance and SEO are good, with responsive design and accessibility features. From a security perspective, the site uses HTTPS, CSRF tokens, and reCAPTCHA for form security. However, it lacks explicit security headers, privacy and cookie policies, and incident response information. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts trustworthiness. Overall, the website is functional, professional, and trustworthy in content and design but would benefit from improved transparency in privacy, security policies, and domain registration information to enhance credibility and compliance.

R

RE|STRUCTURED NEWS | Real Estate Market Inside News

restructurednews.com

59

The website 'Restructured News' appears to be a small-scale news or informational site hosted on the Wix platform. The site uses standard Wix technologies and includes Google Analytics and Google Tag Manager for tracking, along with an ad network script from PageBooster. However, the site lacks substantive business information, contact details, and compliance policies such as privacy or cookie policies. The absence of WHOIS registration data is a significant concern, as it suggests the domain may not be properly registered or the data is not publicly available, which undermines trust and legitimacy. Technically, the site is moderately optimized for mobile and performance but lacks advanced security headers and visible security best practices. Overall, the security posture is basic, and privacy compliance is poor, indicating room for improvement in governance and transparency.

I

ICFF

icff.com

68

ICFF is a well-established international contemporary furniture fair held in New York City, targeting design professionals and industry stakeholders. The website serves as a comprehensive platform for event information, exhibitor details, and visitor engagement, positioning ICFF as a leading trade fair in North America. The technical infrastructure is built on WordPress with modern integrations such as Google Tag Manager and analytics, ensuring a functional and responsive user experience. Security posture is solid with HTTPS enforced and domain protections in place, though improvements in DNSSEC and security headers are recommended. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence aligned with its business objectives.

H

HBF Furniture

hbf.com

67

HBF Furniture is a premium manufacturer specializing in contract office seating, tables, and hospitality furniture, with a strong legacy and market presence supported by its parent company, HNI Corporation. The website is built on a modern Drupal 10 CMS platform, leveraging contemporary web technologies and third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional branding and external domain relationships. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving transparency around domain registration.

Wienerberger is an international manufacturer and supplier of building and infrastructure solutions, specializing in energy-efficient and sustainable construction materials such as bricks, roof tiles, pipelines, and solar panels. The website serves primarily as a recruitment platform targeting job seekers interested in joining the company’s diverse workforce across multiple locations in Belgium. The company positions itself as a large, established player with a family-oriented culture and a strong focus on innovation and sustainability. Technically, the website uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security policies. WHOIS data is inconsistent, showing a future domain creation date and a registrar that does not match the company, which raises some trust concerns. Overall, the website is professional and functional but could improve in privacy transparency and security posture.

S

Stad & Architectuur

stadenarchitectuur.be

62

Stad & Architectuur is a well-established cultural organization based in Leuven, Belgium, focused on promoting contemporary architecture through exhibitions, podcasts, events, and publications. The organization targets both professionals and the general public interested in architecture, maintaining a strong local and regional presence with international outreach. Their website reflects a professional and consistent brand image, providing clear contact information and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress using modern plugins such as Yoast SEO and Complianz for privacy management, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy laws.

N

NBN

nbn.be

66

NBN is the Belgian national standards body providing trusted knowledge and services related to standards for Belgian and international companies, governments, and organizations. Their offerings include a standards purchasing platform, participation in standards development, management systems training, and a public portal for commenting on standards. The website is professionally designed, multilingual, and trusted by over 700 companies, positioning NBN as a key player in the standards domain in Belgium. Technically, the website leverages modern web technologies including Webflow CMS, HubSpot for forms and marketing, Weglot for multilingual support, and various analytics and optimization tools such as Google Analytics, Microsoft Clarity, and Visual Website Optimizer. The site is well-optimized for performance, accessibility, and SEO, with HTTPS enforced and security best practices observed. Security posture is strong with no evident vulnerabilities, use of HTTPS, reCAPTCHA on forms, and cookie consent mechanisms. However, explicit security policies and incident response information are not published, which could be improved. WHOIS data is restricted due to DNS Belgium policies, but the domain and website content indicate legitimacy and trustworthiness. Overall, NBN's website reflects a mature digital presence with strong business credibility and security hygiene, serving a specialized market in standards and compliance. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.

L

Lark Landskap

larklandskap.no

59

Lark Landskap is a medium-sized landscape architecture firm based in Oslo, Norway, founded in 2014 and part of the Dark Design Group. The company specializes in sustainable and climate-adapted landscape and urban design, focusing on creating functional and socially engaging outdoor spaces. Their market position is solidified by award-winning projects and a professional digital presence. Technically, the website is built on WordPress with Elementor and modern plugins, showing good SEO and mobile optimization but lacking explicit privacy and security policy pages. Security posture is good with HTTPS and cookie consent, though improvements in security headers and incident response transparency are recommended. Overall, the business appears legitimate and professional with a moderate risk profile.

H

HotelNetSolutions GmbH

onepagebooking.com

60

HotelNetSolutions GmbH is a technology company specializing in software solutions for the hospitality industry, including booking engines, channel management, voucher shops, and backend hotel management systems. Their market position is that of an established provider offering integrated products tailored to hotels and hotel groups. The website is professionally designed, well-structured, and targets hospitality businesses seeking digital booking and management solutions. Technically, the site is built on WordPress using Elementor and several plugins, hosted on Hetzner servers, and incorporates modern SEO and analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent. Overall, the site is trustworthy and professional, with no signs of malicious activity or content safety concerns.

Seminarland is a regional service provider specializing in seminar, conference, and event venue bookings in Eastern Switzerland. The website offers a professional and user-friendly platform for businesses and groups to find and book venues, supported by a free booking service and expert consultation. The business model focuses on hospitality and event management services within a defined geographic region. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a cookie policy and consent mechanism present but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

U

UNO RateGain

myhotelshop.com

66

UNO RateGain is a specialized digital marketing and technology solution provider focused on the hospitality industry, offering paid media services to help hotels maximize direct bookings and return on ad spend. The website is a subdomain of the established RateGain brand, indicating a focused business unit or product offering within a larger corporate structure. The site demonstrates a mature digital infrastructure with integration of multiple analytics, marketing, and consent management tools, reflecting a commitment to data-driven marketing and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website presents a professional and trustworthy front for its target audience of hospitality businesses seeking paid media solutions.

C

Carers UK

carerpositive.org

47

Carer Positive is a Scottish non-profit initiative operated by Carers UK on behalf of the Scottish Government. It supports employers in creating supportive working environments for staff with caring responsibilities, offering awards, resources, and guidance. The website targets employers in Scotland and promotes retention and support of working carers. Technically, the site uses the concrete5 CMS with common web technologies like jQuery, Bootstrap, and Google Tag Manager. It is moderately optimized for mobile and SEO, with good content quality and clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers. Privacy and terms policies are present and comprehensive, though cookie consent is missing. Overall, the site is trustworthy and professional, with a strong business credibility score.

F

FEBELCEM

febelcem.be

31

FEBELCEM is the Belgian Federation of the Cement Industry, representing major cement manufacturers in Belgium. The organization promotes the use of cement and concrete, provides information and training, and supports sustainability initiatives such as net zero carbon goals. The website is professionally designed using TYPO3 CMS and Bootstrap, with good mobile optimization and clear navigation. It integrates Google Analytics and Tag Manager for user tracking but lacks a cookie consent mechanism. Security posture is moderate with HTTPS usage but missing explicit security headers and published security policies. Contact is available primarily via a contact form, with no direct emails or phone numbers published. Overall, the website reflects a credible and established industry federation with a strong market position in Belgium.

W

Wienerberger

wienerberger.be

71

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

S

Stone

stone.be

60

STONE is a well-established Belgian company specializing in natural stone, terrazzo, and ceramics with over 100 years of experience. The company operates both as a producer and an international trader, serving architects, designers, and construction professionals. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 11, uses modern libraries like Slick Slider, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data confirms the domain's legitimacy and long history, consistent with the company's claims. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.

C

Cosentino

cosentino.com

65

Cosentino is a global leader in the manufacturing and distribution of innovative architectural surfaces and materials, targeting architects, designers, and professionals in the construction and design sectors. The website reflects a mature digital presence with comprehensive content showcasing their products, services, and design inspirations. The technical infrastructure is based on WordPress with modern marketing and analytics tools integrated, including Google Tag Manager, Cookiebot for consent management, and AB Tasty for optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data is a notable gap but does not detract significantly from the overall trustworthiness given the professional presentation and compliance indicators. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving transparency around domain registration.

F

Forster Profilsysteme AG

forster-profile.ch

45

Forster Profilsysteme AG is a Swiss-based manufacturer specializing in steel and stainless steel profile systems for doors, windows, and facades. The company emphasizes safety, durability, and energy efficiency, offering products with fire protection, smoke protection, burglary resistance, and bullet resistance. Their market position is that of an established medium-sized manufacturer serving architects, builders, and industrial clients. The website reflects a professional business with clear product offerings and a focus on quality. Technically, the site is built on TYPO3 CMS with modern frontend libraries and includes a comprehensive cookie consent mechanism, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy and compliant with GDPR, with moderate user tracking via Google Analytics and Google Ads cookies managed through Cookiebot consent.

R

Reynaers Aluminium

reynaers.be

64

Reynaers Aluminium is a leading manufacturer and marketer of innovative and sustainable aluminium solutions for windows, doors, facades, verandas, and related building products. The company operates globally with multiple country-specific domains and offers a comprehensive product portfolio targeting both professionals and consumers in the construction and manufacturing sectors. The website is built on Drupal 11 and employs modern web technologies, including cookie consent management and analytics tools. Security posture is generally good with HTTPS and consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is restricted due to registry policies, but the website's professional presentation and consistent branding indicate legitimacy. Privacy compliance is partial, with cookie consent but no visible privacy policy on the main page. Overall, the site is well-designed, user-friendly, and trustworthy for its business domain.

D

DE SINGEL

desingel.be

48

DE SINGEL is an established international arts center based in Belgium, specializing in theater, dance, music, and architecture exhibitions. The organization serves a broad audience interested in cultural events and operates a medium-sized business model focused on hosting performances and exhibitions. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site uses modern frameworks such as Angular 11, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs Salesforce for newsletter subscriptions. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the site demonstrates good GDPR compliance and business credibility.