Security Directory

L

Landesspital Liechtenstein

landesspital.li

49

Landesspital Liechtenstein is a central healthcare provider in Liechtenstein, offering a broad range of medical services including emergency care, internal medicine, surgery, orthopedics, and specialized competence areas such as anesthesia and radiology. The hospital has a long-standing history of over 125 years and positions itself as a trusted institution for the local population. The website reflects a professional and comprehensive digital presence, supporting patient and visitor information, career opportunities, and detailed department descriptions. Technically, the site is built on WordPress with modern themes and plugins, optimized for performance and mobile use, and integrates privacy-respecting analytics via Plausible. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

Crystallize AS is a Norway-based technology company specializing in modern headless commerce solutions, subscription commerce, and product information management (PIM) powered by GraphQL APIs. The company targets developers, agencies, and product-obsessed brands seeking scalable and flexible e-commerce platforms. With a strong market position supported by over 7000 developers and teams worldwide, Crystallize offers a SaaS platform emphasizing performance, SEO, and developer freedom. The website reflects a mature digital presence with comprehensive resources, community engagement, and a consistent brand identity. Technically, the platform leverages modern frameworks such as Next.js, React, and Jamstack principles, hosted on AWS infrastructure, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies, though cookie consent mechanisms could be enhanced. Overall, Crystallize demonstrates a professional, secure, and trustworthy online presence aligned with its business goals.

Y

Yuga Labs

yuga.com

60

Yuga Labs is a prominent technology company specializing in the creation and development of NFT projects and web3 community experiences, notably known for the Bored Ape Yacht Club and related initiatives. The company positions itself as a leader in the web3 space, focusing on storytelling, community engagement, and digital art innovation. The website reflects a modern and professional digital presence with consistent branding and targeted messaging towards NFT enthusiasts and the broader web3 community. Technically, the website employs modern JavaScript frameworks such as Nuxt.js, utilizes Prismic CMS for content management, and leverages Cloudflare for DNS and likely CDN services. Analytics are implemented via Plausible and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status flags to protect against unauthorized domain changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which could be improved. The absence of privacy and cookie policies, as well as contact information, represents compliance and transparency gaps. No forms or direct data collection mechanisms were found, reducing immediate risk exposure. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance, security header implementation, and clearer contact channels to improve user trust and regulatory adherence.

Bored Ape Yacht Club (BAYC) is a leading NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and MAYC collections, providing member login and information about unique intellectual property rights. The business is positioned as a major player in the NFT and blockchain technology space, targeting digital art collectors and crypto enthusiasts. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The site demonstrates excellent design quality, mobile optimization, and user experience. Security posture is strong with HTTPS and domain registration protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

Bored Ape Yacht Club (BAYC) is a prominent NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and its related collections, providing members with login access and information about unique intellectual property rights and benefits. The brand holds a leading position in the NFT space with a large, engaged audience of crypto enthusiasts and digital art collectors. Technically, the website is built on a modern React and Next.js framework, hosted via Cloudflare with robust DNS and SSL configurations. It integrates multiple analytics and marketing tools such as Google Tag Manager and Plausible Analytics, ensuring good performance and mobile optimization. The site demonstrates excellent design quality, clear navigation, and consistent branding, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and explicit security headers. There is no visible incident response or vulnerability disclosure policy, and cookie consent mechanisms are absent despite tracking scripts. These gaps suggest room for improvement in compliance and security transparency. Overall, the website is trustworthy and professional, with strong business credibility and technical maturity. Strategic enhancements in privacy compliance, security policies, and DNS security would further strengthen its posture and user trust.

8

8.2 Group e.V.

8p2.de

60

8.2 Group e.V. is a German-based expert organization specializing in consulting, technical inspections, certifications, and expert reports for renewable energy installations including wind, photovoltaic, energy storage, and green hydrogen technologies. With over 30 years of experience and a global presence, they serve operators of renewable energy assets to ensure safe and economical operation. The website is professionally designed using modern web technologies such as Webflow CMS, Google reCAPTCHA, and Plausible Analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and published security policies are absent. Privacy compliance is limited due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

IZHAK Interact Agency

izhak.fr

45

IZHAK Interact Agency is a French digital communication and interactive marketing agency based in Strasbourg with an additional presence in Paris. Founded in 2020, the agency specializes in digital communication, social media, corporate and CSR communication, video production, web design, and branding services. Their target audience primarily consists of businesses and organizations seeking innovative and engaging communication strategies. The company maintains a professional and consistent brand image across its website and social media channels, positioning itself as a regional player with a focus on quality and creativity. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as GSAP and Swiper for animations and interactive elements. It integrates third-party services including Google Tag Manager, Plausible Analytics for privacy-focused tracking, Axeptio for cookie consent management, and Small.chat for live chat support. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR. However, it lacks advanced security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces the domain trust slightly, but the professional presentation and presence of legal and privacy documentation support the site's legitimacy. Overall, IZHAK Interact Agency presents a secure, professional, and user-friendly digital presence suitable for its business model. Strategic improvements in security headers, incident response transparency, and WHOIS data availability could further enhance trust and compliance.

B

Blue Ocean Games

blueoceangames.com

47

Blue Ocean Games operates a niche platform focused on indie game developers, providing a venue for game validation, community feedback, and funding opportunities. The website highlights winners of their Rising Tide 2 challenge, showcasing games selected by public voting and judges. The company appears to have a small but focused market presence, targeting game developers and gaming enthusiasts. Technically, the site uses modern web technologies including React, Material UI, and Mux Player for video content, with Google Fonts and Plausible Analytics integrated. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the domain is well aged and registered with a reputable registrar, supporting legitimacy. Strategic improvements in security policies, cookie consent, and accessibility would enhance trust and compliance.

W

WebSource

websource.li

51

WebSource is a specialized digital agency based in Liechtenstein, focusing on WordPress websites, WooCommerce online shops, mobile app development, and hosting services. The company targets businesses and individuals in Liechtenstein and the surrounding Ostschweiz region, positioning itself as a trusted expert in digital transformation and web solutions. The website reflects a professional and consistent brand image with clear service offerings and a modern design. Technically, the site is built on WordPress 6.8.3, leveraging standard web technologies and including plausible analytics for minimal user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the website enforces HTTPS and uses a modern WordPress version, which is positive. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

B

backstage.li

backstage.li

50

Backstage.li is a youth-oriented media platform based in Liechtenstein, providing event listings, blog articles, podcasts, and community engagement content targeted at children and young people. The website is built on WordPress and leverages modern web technologies including jQuery, Slick Slider, and analytics tools such as Microsoft Clarity and Plausible Analytics. The platform demonstrates a good level of digital maturity with a professional design, mobile optimization, and structured data implementation. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, the site is trustworthy and well-positioned within its niche, but should enhance privacy transparency and incident response readiness to strengthen user trust and regulatory compliance.

A

aha

aha.li

46

aha is a non-profit organization focused on providing tips, information, and support services for young people in Liechtenstein. The website serves as a comprehensive portal offering news, events, workshops, youth participation opportunities, and project coaching. It targets youth and youth workers, positioning itself as a key regional player in youth information and engagement. The organization maintains a consistent brand presence and leverages social media channels to extend its reach. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses various plugins for SEO, analytics, and live chat. The site is mobile optimized and employs HTTPS with good SSL configuration. While performance is moderate, the site benefits from structured metadata and SEO best practices, enhancing discoverability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. No vulnerability disclosure or security.txt files are present. Overall, the website is trustworthy and professional, with a strong focus on youth services. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

Drosjeutvalget.no is an official Norwegian government website representing a public committee established in 2022 to review and propose improvements to taxi regulation across Norway. The committee's work focuses on ensuring a comprehensive and fair taxi service nationwide, addressing regulatory, economic, and safety concerns. The website serves as an information portal for the public and stakeholders, providing updates, reports, and contact information. Technically, the site is built on WordPress with standard plugins and uses HTTPS with moderate performance and good mobile optimization. Security posture is adequate with no critical vulnerabilities detected, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy, professional, and aligned with government standards.

O

Offshore Norge

offshorenorge.no

66

Offshore Norge is a Norwegian industry association representing the offshore oil and gas sector. The website provides news, policy standpoints, reports, and event information targeted at industry professionals and stakeholders. The organization positions itself as a key voice in the Norwegian offshore energy market, advocating for stable regulatory frameworks and sustainable industry practices. Technically, the website employs modern analytics tools including Google Analytics, Plausible, and Microsoft Application Insights, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, likely due to registry privacy policies, but the website's professionalism and social media presence support its legitimacy. Overall, the site is a credible and authoritative source for Norwegian offshore industry information.

A

Acetex

acetex.cz

66

Acetex is a Czech Republic based company specializing in the installation and servicing of photovoltaic systems and heat pumps for residential, commercial, and municipal clients. Established in 2020, it has positioned itself as a leading supplier in the renewable energy sector within the Czech market, boasting over 8,000 installations and recognized certifications and insurance coverage. The company offers a comprehensive range of products including photovoltaic power plants, heat pumps, gas boilers, and related energy solutions, complemented by consulting services for subsidies and professional maintenance. Technically, the website employs modern web technologies and multiple analytics and tracking tools, with a clear cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though explicit security policies and headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, though it lacks explicit privacy and terms of service documentation. The domain registration data aligns well with the business claims, supporting legitimacy.

8

81 klima a.s.

81energy.cz

62

81 klima a.s. operates the website www.81energy.cz, offering photovoltaic solar power solutions primarily targeting residential and commercial customers in the Czech Republic. The company provides sales, installation, financing, and subsidy assistance services for solar energy systems, positioning itself as a professional and trusted regional player with multiple branches and strong customer reviews. The website content is well-structured, professionally designed, and optimized for mobile devices, providing clear navigation and comprehensive information about products and services. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Plausible Analytics. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, enhancing user privacy and transparency. The website uses HTTPS with good SSL configuration, though explicit security headers could be improved. From a security perspective, the site demonstrates good practices including secure forms and no visible vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy page, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and certifications support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and header implementation would further strengthen its security posture and user trust.

81 klima a.s., operating under the brand 81heat.cz, is a Czech Republic-based company specializing in energy-efficient heating solutions, including solar water heating and air-to-water heat pumps. The company targets homeowners seeking to reduce energy costs and leverage government subsidies such as the Nová zelená úsporám program. With multiple regional offices and strong customer reviews, 81heat.cz positions itself as a trusted local provider with comprehensive installation, maintenance, and customer support services. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Plausible Analytics, combined with a responsive and well-structured design optimized for mobile devices. The site enforces HTTPS and provides a detailed cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, while HTTPS is properly implemented and no sensitive data is exposed, the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of publicly available WHOIS data due to privacy protection is common for this business type and does not detract from the site's legitimacy, supported by consistent branding and transparent contact information. Overall, 81heat.cz demonstrates a solid business and technical foundation with good privacy compliance and user trust indicators. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture and customer confidence.

W

Writesonic

writesonic.com

68

Writesonic is a technology company founded in 2021 that offers an AI-powered SaaS platform focused on enhancing brand visibility across AI platforms such as ChatGPT and Claude. The platform provides comprehensive tools for AI visibility tracking, content creation, SEO optimization, and actionable insights to improve search rankings and content performance. Positioned competitively in the AI SEO and content optimization market, Writesonic targets businesses and marketers seeking advanced AI-driven solutions. The website demonstrates a high level of digital maturity, leveraging modern web technologies including Webflow CMS, Cloudflare DNS, and multiple analytics and marketing integrations such as Google Analytics, TikTok Pixel, and Mixpanel. Security posture is strong with HTTPS enforcement, security headers, and bot protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, well-branded, and optimized for performance and mobile use, with extensive tracking and marketing tools indicating a mature digital marketing strategy. The domain registration is consistent with the company profile, showing no suspicious patterns and appropriate domain age. Recommendations include enabling DNSSEC, publishing security and incident response policies, and providing direct security contact information to enhance trust and compliance.

81 klima a.s. is a Czech Republic-based company specializing in the installation and servicing of air conditioning and heat pump systems for residential and commercial clients. The company operates multiple showrooms across major Czech cities and emphasizes quality service, competitive pricing, and long-term customer care. Their website reflects a mature digital presence with comprehensive content, customer testimonials, and certifications that reinforce trust. Technically, the website employs modern tracking and analytics tools including Google Tag Manager, Facebook Pixel, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a secure and user-friendly environment. However, the absence of WHOIS data for the domain raises questions about domain registration transparency. Security posture is generally strong with HTTPS and consent management, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. The company demonstrates good privacy compliance and business credibility through visible contact information, certifications, and positive customer feedback. Overall, 81 klima a.s. presents a professional and trustworthy online presence with minor areas for improvement in security transparency and domain registration verification.

U

Unity Technologies

tapjoy.com

71

Unity Technologies operates a leading real-time 3D development platform with integrated monetization and user acquisition services, including the Tapjoy Offerwall. The company targets game developers, advertisers, and publishers, providing a comprehensive suite of tools to build, monetize, and grow games and interactive experiences. Their market position is strong as an enterprise-level technology provider with a global footprint and a mature digital presence. The website demonstrates a modern technical infrastructure leveraging React and Next.js frameworks, hosted on Akamai CDN, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting Unity's enterprise credibility and commitment to privacy and security.

B

Barcelona Activa

barcelonactiva.cat

68

Barcelona Activa is the official local economic development agency of Barcelona, providing services to citizens, entrepreneurs, and businesses to promote employment, entrepreneurship, business growth, and training. The website is professionally designed, multilingual, and integrates well with the Barcelona city government branding. Technically, it uses a modern CMS (Liferay) and includes various JavaScript libraries and analytics tools with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. WHOIS data is not publicly available due to the .cat domain registry policies, but the website content and branding strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and serves as a comprehensive resource for economic development in Barcelona.

G

Goetheanum TV

goetheanum.tv

67

Goetheanum TV is a specialized media platform offering video content centered on anthroposophy, targeting a general audience interested in cultural and educational material. The platform operates on a subscription and video-on-demand business model, leveraging a modern technical infrastructure including Uscreen OTT platform, Tailwind CSS, and various JavaScript libraries. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. Overall, the platform presents a trustworthy and professional digital presence with moderate tracking and advertising practices.

B

Basilico Srl

basili.co

63

Basilico Srl operates as a specialized digital agency focusing on brand identity, web design, development, and digital marketing services. The company targets organizations seeking to innovate their business through digital experiences, positioning itself as a creative and professional agency with a strong portfolio of corporate and product websites, UX/UI design, and social media campaigns. The website content is well-structured, visually appealing, and demonstrates a consistent brand image, supporting a high level of professionalism and trustworthiness. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and video integration via Video.js and Vimeo. Analytics are implemented using privacy-focused services such as Plausible and ShinyStat, although no explicit cookie consent mechanism is present. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features, though some improvements in accessibility could be made. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for improvement. The WHOIS data is privacy protected, which is typical and justified for a small digital agency, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security and incident response policies, and enhancing contact information visibility to further strengthen trust and compliance.

F

Fellesforbundet

fellesforbundet.no

69

Fellesforbundet is Norway's largest trade union in the private sector, representing approximately 170,000 members and engaging with over 6,000 companies through collective bargaining agreements. The organization focuses on improving working conditions and wages for its members, offering services such as membership benefits, training courses, and advocacy. The website is professionally designed, targeting Norwegian private sector workers and union members, and is presented primarily in Norwegian with multiple language alternatives available. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates multiple analytics platforms including Google Analytics, Plausible, and Microsoft Application Insights, and employs a cookie consent management system to comply with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices.

L

Landsorganisasjonen i Norge

lo.no

72

Landsorganisasjonen i Norge (LO) is the largest trade union confederation in Norway, serving as a representative body for workers and providing member support and advocacy. The website www.lo.no acts as an information portal primarily targeting Norwegian workers and union members, offering resources related to labor rights and union activities. The site is professionally designed with consistent branding and good content quality, reflecting its position as a major non-profit organization in the government sector. Technically, the website employs a modern technology stack including Google Tag Manager, Cookiebot for cookie consent management, Hotjar for user behavior analytics, Meta Pixel for marketing, Snap Pixel, Plausible Analytics, and Microsoft Application Insights for telemetry. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, explicit security headers and detailed privacy or terms of service pages are not detected, indicating areas for improvement in security posture and compliance transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is likely due to privacy protections common in Norwegian domains and does not detract from the site's legitimacy. Overall, the site maintains a moderate to good security posture but would benefit from publishing explicit security policies and contact information for incident response. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include enhancing security headers, publishing privacy and security policies, adding vulnerability disclosure mechanisms, and improving accessibility features to meet compliance standards. These steps will strengthen trust and security culture while ensuring regulatory adherence.

Z

Zamsino.Casino

zamsino.org

57

Zamsino.Casino operates as an online affiliate and guide platform specializing in real money online casinos. It targets international gamblers by providing comprehensive casino reviews, bonus comparisons, and free spins offers. The website is positioned as a trusted resource for players seeking the best online gambling experiences, with a focus on detailed listings and exclusive bonuses. Technically, the site is built on WordPress using modern themes and plugins, including SEO optimizations and analytics via Plausible. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. WHOIS data is limited due to privacy protection, common in gambling domains, but the site content and structure suggest legitimacy. Overall, the site is a well-constructed gambling guide with moderate risk due to limited transparency in registrant data and privacy compliance gaps.

B

Beneficial Apps AS

fagforeninger.no

56

The website 'Fagforeningsguiden' is an informational portal operated by Beneficial Apps AS, providing comprehensive data on trade unions and federations in Norway. It targets Norwegian workers and employees seeking to understand and compare union membership options, fees, and benefits. The site is well-structured with clear navigation and professional design, offering value through aggregated union data and direct links to official union websites. Technically, the site uses modern web standards including Google Fonts, Line Awesome icons, and privacy-friendly Plausible analytics, ensuring a good user experience and mobile optimization. Security posture is moderate; while HTTPS usage is assumed, no explicit security headers or privacy policies are published, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the presence of a valid company contact email and consistent branding supports legitimacy. Overall, the site is safe, professional, and privacy-conscious, with recommendations to enhance transparency and security compliance.

B

Beneficial Apps AS

thefood.app

53

The Food App is a Norwegian-based technology company developing a consumer-focused mobile application designed to scan food products for ultra-processed ingredients, allergens, and additives. Targeting health-conscious consumers and allergy sufferers, the app aims to launch in the UK market in late 2025. The website serves as an informational and lead capture platform with educational articles and a notify-me form for launch updates. The business is small, with clear branding and a professional online presence supported by a parent company, Beneficial Apps AS. Technically, the website uses modern JavaScript libraries such as Alpine.js and Velocity.js, integrates privacy-friendly analytics via Plausible, and employs HTTPS with good mobile optimization. However, it lacks explicit privacy and terms of service pages, cookie consent mechanisms, and published security policies, which are areas for improvement. Security posture is solid with no detected vulnerabilities or exposed sensitive data, but could benefit from enhanced security headers and incident response information. Overall, the website is trustworthy, well-designed, and aligned with its business goals, though compliance and security documentation should be enhanced to meet best practices.

B

Beneficial Apps AS

tryggmat.app

56

Trygg Mat is a Norwegian technology company operating a consumer-focused mobile application designed to help users identify ultraprosessed foods, allergens, and additives through barcode scanning and product exploration. The company, Beneficial Apps AS, positions itself as a niche player in the health and wellness segment, targeting consumers who want to make informed food choices, especially those with allergies or dietary restrictions. The business model is freemium, offering a free app with optional subscription-based premium features. Technically, the website employs modern web technologies including Alpine.js and Velocity.js, integrates privacy-friendly analytics, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and minimal tracking, but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and incident response transparency are recommended.

A

Ajuntament de Barcelona

barcelona.cat

67

Ajuntament de Barcelona operates the official municipal website for the city of Barcelona, providing residents and visitors with comprehensive information about city services, news, cultural events, transport, and business resources. The website is positioned as a key digital gateway for public services and community engagement in Barcelona. The site targets a broad audience including residents, businesses, and tourists, offering multilingual support and extensive navigation options. Technically, the site is built on Drupal 10 with modern frontend frameworks like Bootstrap, and integrates multiple analytics platforms including Matomo and Plausible, alongside marketing and tracking tools such as Adobe Visitor Tracking and Google Analytics. The site demonstrates a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and anti-CSRF protections evident, though explicit security headers are not visible in the provided content and should be verified. Privacy compliance is well addressed with a detailed cookie consent mechanism and granular cookie categorization, although no explicit privacy policy or terms of service URLs were found in the provided content. WHOIS data is privacy protected by puntCAT, which is typical for government domains under the .cat TLD, and does not raise legitimacy concerns. Overall, the website is a professional, secure, and trustworthy government portal with extensive content and good user experience.

J

JazzHR

applytojob.com

79

JazzHR is a technology company specializing in applicant tracking and recruiting software tailored for small to medium-sized businesses. Their platform streamlines hiring processes, enabling companies to find and hire talent efficiently. The website demonstrates a mature digital presence with comprehensive marketing and analytics integrations, reflecting a well-established SaaS business model. The company maintains consistent branding and offers clear business information, targeting SMBs in the recruitment sector. Technically, the site is built on WordPress with modern performance optimizations, strong SEO, and mobile responsiveness. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data is unavailable, likely due to privacy protection, which is justified given the business type. Overall, JazzHR presents a professional, trustworthy online presence with room for enhanced transparency in security and incident response.

B

Beneficial Apps AS

energyprices.eu

54

Energyprices.eu is a specialized informational website operated by Beneficial Apps AS, a Norwegian company. The site provides real-time electricity spot prices across various European countries, complemented by energy news and educational content. It targets consumers and businesses interested in energy market dynamics and electricity pricing. The business model appears to be based on advertising revenue and providing valuable market data sourced from ENTSO-E. Technically, the site uses modern web technologies including amCharts for mapping, Chart.js for data visualization, and integrates Google Adsense and Plausible Analytics for monetization and tracking. The website is well designed, mobile optimized, and offers clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns are detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Beneficial Apps AS

sahkonhintatanaan.fi

59

The website www.sahkonhintatanaan.fi is operated by Beneficial Apps AS, a Norwegian company specializing in providing real-time and historical electricity spot price information for Finland. The site serves Finnish consumers interested in optimizing their electricity usage based on Nord Pool market prices. It offers detailed hourly price charts, historical data, an API for developers, and practical energy-saving tips. The business model is primarily advertising-supported with additional API services. The site is well-branded, consistent, and trusted by its audience.

B

Beneficial Apps AS

elprisenligenu.dk

50

ElprisenligeNu.dk is a Danish-focused informational website providing real-time electricity spot prices, hourly price charts, and energy saving tips. Operated by Beneficial Apps AS, the site targets Danish consumers interested in monitoring electricity costs and optimizing their energy consumption. The business model relies on advertising and affiliate partnerships with electricity providers. Technically, the site uses modern JavaScript libraries such as Chart.js and amCharts for data visualization, Google Fonts for typography, and integrates Google Adsense and Plausible Analytics with user consent. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. WHOIS data is unavailable, limiting domain legitimacy assessment, but the website content and business information appear professional and trustworthy. Overall, the site presents a low-risk profile with good privacy compliance and business credibility.

E

Elpriset just nu – Se elpriserna idag, kvart för kvart

elprisetjustnu.se

50

The website www.elprisetjustnu.se is a Swedish informational platform providing real-time and historical electricity spot prices segmented by geographic price areas within Sweden. It targets Swedish consumers interested in monitoring electricity prices and offers additional content such as energy saving tips and an API for electricity price data. The site is monetized primarily through advertising and affiliate marketing partnerships. Technically, the site employs modern JavaScript libraries including Chart.js and amCharts for data visualization, uses Google Fonts and icons, and integrates Google Adsense and Plausible Analytics for advertising and minimal user tracking. The website is mobile optimized and presents data clearly with good navigation and user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no contact or incident response information is provided. WHOIS data for the full domain is unavailable, which raises some concerns about domain registration legitimacy, though the website content and external links suggest a legitimate business. Overall, the site is a useful and professional resource for electricity price information in Sweden but would benefit from enhanced transparency and security documentation.

B

Beneficial Apps AS

beneficial.no

54

Beneficial Apps AS is a small Norwegian technology company specializing in developing useful and informative apps and web solutions focused on seamless user experiences, privacy, and sustainable technology. Their market position is niche, targeting users interested in privacy-friendly and practical digital tools. The website showcases multiple apps and web projects primarily serving Norwegian and European audiences, with clear contact information for the CEO, indicating a transparent and approachable business model. Technically, the website employs modern web technologies such as Google Fonts, Line Awesome icons, and Plausible Analytics for privacy-friendly tracking. The site is mobile-optimized and well-structured, though some SEO and accessibility improvements could be made. No CMS or hosting provider details were detected. Performance is moderate with good user experience. From a security perspective, the site uses no cookies and relies on Plausible for minimal user tracking, reflecting a strong privacy stance. However, no explicit privacy policy or security headers were found, and WHOIS data is missing, which reduces trustworthiness. The absence of WHOIS information limits domain legitimacy verification but the website content and business details appear professional and credible. Overall, the website presents a low-risk profile with good privacy practices but would benefit from publishing formal privacy and security policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.

LEAB is a German-based company specializing in mobile energy solutions, primarily serving manufacturers and converters of emergency, special, and commercial vehicles across sectors such as BOS, service, transport, and leisure. The company is positioned as a specialist within the Micropower Group, offering tailored power supply systems and related services including application engineering, logistics, production, and training. The website reflects a professional and consistent brand image with detailed product highlights and industry focus. Technically, the site employs modern web technologies including Laravel Livewire and integrates privacy-conscious analytics via Plausible. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy and cookie policies. Overall, LEAB demonstrates a credible and trustworthy digital presence aligned with its business objectives.

N

Nødvarsel

emergencyalert.no

66

Emergencyalert.no is a Norwegian government-related website providing comprehensive information about the national Emergency Alert System. It serves the general public by offering details on how the alert system works, who can receive alerts, types of incidents covered, and a FAQ section. The site is well-branded with official partner logos from Norwegian Police, Directorate for Civil Protection, and Civil Defence, reinforcing its authoritative position. The website is bilingual, supporting English and Norwegian audiences, and is designed to be accessible and mobile-friendly. Technically, the site is hosted on Microsoft Azure and uses modern technologies including Azure Application Insights for telemetry and Plausible Analytics for privacy-focused visitor analytics. The cookie consent mechanism is implemented via CookieInformation.com, ensuring GDPR compliance with detailed cookie descriptions and user consent management. The site uses HTTPS with strong SSL configuration, though explicit security headers are not detected in the provided data. From a security perspective, the website demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks published security policies, incident response contacts, or vulnerability disclosure information, which are recommended for enhanced transparency and trust. The WHOIS data is not publicly available, indicating privacy protection which is justified given the nature of the service. Overall, the site is trustworthy, professional, and compliant with privacy regulations. The overall risk is low, but improvements can be made by adding explicit security headers, publishing security and incident response policies, and providing clear contact information for security issues. These steps would further strengthen the site's security posture and user trust.

T

Templated

templated.co

56

Templated is a specialized knowledge platform focused on online gambling and digital tools, providing expert-reviewed content such as casino reviews, payment method comparisons, and responsible gambling information. The website targets players, affiliates, and developers, positioning itself as a trusted and transparent resource in the regulated gambling industry. Technically, it is built on WordPress using the GeneratePress theme, with performance optimizations and privacy-respecting analytics. Security posture is solid with HTTPS and security headers, though lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with basic privacy standards.

B

Beneficial Apps AS

hvakosterstrommen.no

58

The website hva-kosterstrommen.no is a professionally designed and content-rich platform providing real-time and historical electricity spot prices for Norway. It targets Norwegian consumers interested in monitoring electricity prices and saving on energy costs. The business is operated by Beneficial Apps AS, a small company focused on energy sector informational services. The site offers detailed hourly pricing data, news, tips, and an API for electricity prices, supported by advertising and newsletter subscriptions. Technically, the site uses modern JavaScript libraries such as Chart.js and amCharts for data visualization, Google Fonts for typography, and Plausible Analytics for privacy-conscious user tracking. The site is mobile optimized and accessible with good SEO practices. Security-wise, the site enforces HTTPS and uses secure external libraries but lacks some security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the site is trustworthy, professional, and valuable for its target audience.

Ú

Úrad podpredsedu vlády pre plán obnovy a znalostnú ekonomiku

planobnovy.sk

53

The website www.planobnovy.sk serves as the official Slovak government platform dedicated to the EU Recovery Plan, aiming to provide comprehensive information, project monitoring, and transparency to Slovak citizens and stakeholders. It is managed by the Úrad podpredsedu vlády pre plán obnovy a znalostnú ekonomiku and features detailed content about the plan's priorities, implementation status, and related news. The site targets government entities, project implementers, and the general public interested in Slovakia's economic recovery efforts. Technically, the website employs a modern but straightforward technology stack including jQuery, Font Awesome, Google Fonts, Google Tag Manager, Google Analytics, Facebook Pixel, and Plausible Analytics. It uses HTTPS with good SSL configuration and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with good navigation and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent tools to manage user privacy. However, it lacks a published security policy, vulnerability disclosure page, and incident response contact emails, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's government affiliation, supporting its legitimacy. Overall, the website is a trustworthy and professional government resource with good content quality and privacy compliance. Strategic improvements in security policy transparency and accessibility would further strengthen its posture and user trust.

Hugin Cybersecurity AS is a newly established Norwegian cybersecurity company focused on providing effortless cybersecurity solutions for small and medium businesses. The website's title and meta description emphasize this target audience and business focus. However, the website content is currently minimal and displays a client-side application error, limiting user engagement and information availability. The technical infrastructure leverages modern JavaScript frameworks such as Next.js and React, with integrations of HubSpot and Apollo tracking scripts, indicating a moderate level of digital maturity. Hosting is provided via Cloudflare, but DNSSEC is not enabled, and no security headers are detected, suggesting room for improvement in security hardening. The security posture is weak due to missing privacy and cookie policies, lack of incident response contact information, and absence of security best practices visible in the HTML content. Overall, the website presents a low trustworthiness level and poor user experience. Strategic recommendations include fixing the application errors, implementing comprehensive privacy and cookie policies with GDPR compliance, enabling DNSSEC and security headers, and providing clear contact and incident response information to enhance credibility and security posture.

F

Fortytwo

fortytwo.io

75

Fortytwo is a cybersecurity and compliance service provider offering consulting and risk management solutions to businesses. The website is professionally designed using the Wix platform and includes comprehensive privacy and cookie policies with GDPR compliance. The technical infrastructure leverages modern analytics and marketing tools, including Google Tag Manager, Plausible Analytics, and LinkedIn Insight, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and some security headers present, though there is room for improvement in CSP implementation and incident response transparency. The domain WHOIS data is unavailable, likely due to privacy protection, which is common in this sector but reduces transparency. Overall, the website presents a trustworthy and professional image with moderate technical maturity.

B

Brann- og redningsskolen

brsk.no

70

Brann- og redningsskolen is a Norwegian government-affiliated educational institution specializing in fire and rescue training. The website provides comprehensive information about their two-year vocational college program, continuing education courses, and student life. The institution targets prospective students and current fire and rescue personnel, positioning itself as a national leader in this specialized education sector. Technically, the website is hosted on Microsoft Azure and protected by Cloudflare, using modern analytics tools like Plausible and Azure Application Insights. The site is well-structured, mobile-optimized, and includes accessibility features, reflecting a mature digital presence. Security-wise, HTTPS is enforced and cookie consent is implemented with granular user controls, though some HTTP security headers are not explicitly detected. The absence of WHOIS data is consistent with Norwegian domain privacy policies and does not detract from the site's legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility.

U

UKi Media & Events

tiretechnologyinternational.com

56

Tire Technology International is a specialized media publication and event organizer focused on the tire industry, serving professionals such as chemists, suppliers, designers, engineers, and CEOs. The website provides industry news, online magazines, and event information, positioning itself as a key resource within the tire manufacturing and transportation sectors. The business operates under UKi Media & Events, a known media company in the UK. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Elementor, and integrates analytics tools such as Google Tag Manager and Plausible Analytics, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain is a concern for domain legitimacy, but the professional content and branding mitigate some risk. Overall, the site is trustworthy and well-maintained but would benefit from enhanced transparency and security practices.

U

UKi Media & Events

automotivepowertraintechnologyinternational.com

59

Automotive Powertrain Technology International is a specialized media outlet operated by UKi Media & Events, focusing on the latest developments in automotive and truck powertrain components including internal combustion, electric, hybrid, and fuel cell technologies. The website serves industry professionals and stakeholders by providing news, features, online magazines, webinars, and events. It holds a niche position within the transportation and energy sectors, targeting a professional audience interested in powertrain innovations. The technical infrastructure is built on WordPress CMS with modern plugins such as Yoast SEO and Elementor, supported by analytics tools like Plausible Analytics and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Advertising is managed through Revive Adserver and UKI Media Events' ad network, with cookie consent mechanisms in place to comply with GDPR. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security policies or incident response contacts. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices. Strategically, the site should focus on publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing security headers to strengthen its security posture and compliance. These improvements will enhance trust and reduce risk exposure.

U

UKi Media & Events

automotiveinteriorsworld.com

66

Automotive Interiors World is a specialized media publication focused on the automotive interiors industry, providing daily news, features, and online magazines that highlight current and emerging technologies, design concepts, and industry trends. The website is professionally designed, well-structured, and targets automotive industry professionals and enthusiasts interested in interior materials and technologies. The business operates under UKi Media & Events, a known media and events company, positioning itself as a premier source for automotive interiors content. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Elementor, with integrations for Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Plausible Analytics. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. Security is solid with HTTPS enforced, though some security headers are missing, and no explicit security policies or vulnerability disclosures are present. The security posture is generally good, with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and the lack of WHOIS registration data reduce compliance and trust scores. The domain WHOIS query returned no match, which is unusual for an active .com domain and may indicate privacy protection or a query limitation. Overall, the website presents a professional and trustworthy front for its niche media business but should improve privacy compliance and transparency regarding domain registration to enhance trust and security posture.

U

UKi Media & Events

autonomousvehicleinternational.com

62

ADAS & Autonomous Vehicle International is a specialized media outlet providing news, features, and event coverage for the autonomous vehicle and driverless technology industry. The website targets professionals and stakeholders in this sector, offering industry insights, online magazines, and information about related events and awards. The site is operated under the UKi Media & Events brand, a known entity in media and event management. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Elementor, with integration of modern analytics and advertising tools. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and terms documentation. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, though the website content and branding appear professional and consistent. Overall, the site is a credible source of industry information but would benefit from enhanced transparency and security practices.

D

Direktoratet for samfunnssikkerhet og beredskap

dsb.no

73

Direktoratet for samfunnssikkerhet og beredskap (DSB) is a Norwegian government agency responsible for civil protection, safety, risk management, and emergency preparedness. The website serves both professionals in safety-related fields and the general public, providing regulatory information, training resources, safety advice, and emergency communication services. The agency holds a strong national position as the authoritative body for societal safety in Norway. The site is well-structured, professionally designed, and offers comprehensive content relevant to its audience.

H

Headon Rekruttering

headonrekruttering.no

10

Headon Rekruttering is a newly established Norwegian recruitment agency specializing in headhunting and staffing for communication, marketing, design, and technology roles. The company targets businesses seeking specialists for permanent, freelance, or temporary positions. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating marketing and analytics tools such as HubSpot and Google Tag Manager. While the site is well-designed and optimized for SEO and mobile use, it lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain registration aligns with the business founding date, supporting legitimacy. Strategic enhancements in privacy compliance and security practices would strengthen the company's digital trustworthiness.

M

MedicVision Optikk AS

medicvision.no

10

MedicVision Optikk AS is a Norwegian company specializing in customized optical solutions for medical practice and microscopy. Their offerings include magnifying glasses, microscopes (notably ZEISS Research Microscopy Solutions), medical lighting, and diagnostic instruments tailored for healthcare professionals and researchers. The company operates a physical showroom in Arendal, Norway, providing hands-on product trials and service capabilities including adjustments and repairs. The website reflects a professional and focused business model targeting healthcare and research sectors with a clear B2B and B2C sales approach. Technically, the website is built on modern web standards with responsive design, CSS grid, and flexbox layouts, likely powered by the Umbraco CMS. It uses privacy-conscious analytics (Plausible Analytics) and lazy loading for images, enhancing performance and user experience. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. No forms are present on the main page, reducing potential security risks. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. Incident response and vulnerability disclosure information are also absent. The domain is newly registered in April 2024, consistent with the company's recent founding, and WHOIS data shows no privacy protection, supporting legitimacy. Overall, MedicVision's website is professional, trustworthy, and well-aligned with its business goals but would benefit from enhanced privacy compliance and security hardening to improve its security posture and regulatory adherence.