Security Directory

S

Sportbuzzer

sportbuzzer.de

63

Sportbuzzer is a German-language media portal focused on fitness, nutrition, health, and sport topics. It serves a broad audience including beginners and experienced athletes, providing articles, tips, and podcasts. The site is part of the RedaktionsNetzwerk Deutschland partnership, indicating a reputable media affiliation. Technically, the site uses modern web technologies including React, Google Tag Manager, and a consent management platform to comply with cookie regulations. The site is well-structured, mobile-optimized, and uses HTTPS with good security practices. However, explicit privacy and terms of service pages are not found in the provided content, and direct contact information such as emails or phone numbers is missing, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy media presence in the German fitness and health niche.

SPOT Agency is a well-established creative digital agency based in St. Moritz, Switzerland, with a history dating back to 1990. The company specializes in developing strong brands, digital products, and e-commerce solutions primarily targeting the tourism, sport, and lifestyle sectors. Their market position is solid within their niche, supported by a professional website that reflects their expertise and creative capabilities. The agency leverages modern web technologies such as Next.js and React, ensuring a performant and mobile-optimized user experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR standards. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website and business present a trustworthy and professional image suitable for their target audience.

S

SPOT Werbung AG

spotbase.ch

61

SPOT Werbung AG operates SPOT.BASE, a design-driven coworking and meeting space hub located in St. Moritz, Switzerland. The business targets individuals and small teams seeking flexible workspace solutions without long-term commitments. Their services include various desk types, meeting rooms, workshop spaces, and executive offices, all bookable online with digital door access via Salto KS technology. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and DatoCMS, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though improvements are recommended in privacy compliance, such as implementing cookie consent and publishing security policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

S

StatusPal UG

statuspal.io

73

StatusPal UG operates a SaaS platform providing hosted status pages and incident communication tools targeted at CTOs, DevOps, SREs, and support engineers. The company positions itself as a reliable and scalable solution for monitoring and communicating system status, with features including multi-language support, notifications, and powerful APIs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs SVG graphics for visual appeal. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. Overall, the domain WHOIS data is privacy protected, which is common for SaaS businesses, and no suspicious patterns are detected. The website demonstrates high trustworthiness and professionalism.

S

SPOT Group

spotgroup.ch

11

SPOT Group is a well-established Swiss branding and digital design network operating since 1990 with offices in St. Moritz and Locarno. The company specializes in creating impactful brands and digital products primarily for the tourism, sports, and lifestyle sectors. Their market position is strong within their niche, supported by a professional portfolio and clear business focus. Technically, the website is built on modern frameworks such as Next.js and React, with integration of media players and a CMS likely DatoCMS, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website reflects a professional and trustworthy business with good compliance and user experience.

I

Infomaniak Network SA

infomaniak.cloud

74

Infomaniak Network SA is a Swiss-based technology company specializing in cloud infrastructure services, including public cloud IaaS solutions. The company targets businesses and developers seeking reliable, automated, and cost-effective cloud hosting. Infomaniak positions itself as a leading Swiss cloud provider with a strong emphasis on privacy, security, and sustainability, offering CHF 300 free credit to new users to encourage adoption. Technically, the website is built on modern frameworks such as React and Gatsby, ensuring fast performance, excellent mobile optimization, and good SEO practices. The infrastructure appears self-hosted with strong security configurations, including HTTPS enforcement and comprehensive security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, Infomaniak demonstrates maturity with ISO 27001 certification and transparent incident response contacts. No vulnerabilities or exposed sensitive data were detected. The main concern is the absence of publicly available WHOIS domain registration data, likely due to privacy protection, which slightly impacts transparency but does not undermine overall trust. Overall, Infomaniak presents a professional, secure, and privacy-conscious cloud service platform with strong business credibility. Strategic recommendations include enhancing public vulnerability disclosure, maintaining up-to-date third-party libraries, and continuing to improve transparency around data retention and incident response.

The website 'Bewegen.Integrieren.Fördern' serves as a crowdfunding platform operated by the Niedersächsische Lotto-Sport-Stiftung, focusing on supporting sports projects within Lower Saxony, Germany. It provides a digital venue for local sports clubs and initiatives to raise funds, featuring project listings with progress tracking and community engagement features. The platform leverages modern web technologies including React and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Technically, the platform is built on a proprietary or custom CMS with integration of third-party services such as Google Analytics (with IP anonymization) and Eye-Able accessibility scripts. Hosting and DNS are managed via DomainControl (GoDaddy), and the site uses HTTPS with a good SSL configuration. However, there is a lack of visible HTTP security headers which could be improved to enhance security posture. From a security perspective, the site demonstrates good baseline practices including encrypted connections and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally maintained. Strategically, the platform is positioned as a regional niche crowdfunding service for non-profit sports projects, supported by a lottery sports foundation. It targets sports clubs and community members in Lower Saxony, providing a valuable service to facilitate funding and engagement. The business model is straightforward, relying on project hosting and donation facilitation. The site’s digital maturity is moderate with room for technical and security enhancements to further strengthen trust and compliance.

2

Application error: a client-side exception has occurred

24h-camions.com

54

The website www.24h-camions.com is positioned as the official portal for the 24 Heures Camions truck racing event scheduled for September 2026. It aims to provide event news, multimedia content, schedules, results, and ticketing information primarily targeting French-speaking motorsport enthusiasts. However, the current site is non-functional due to a client-side JavaScript error, severely impacting user experience and content accessibility. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted likely on Google Cloud Storage with CDN support, and integrates a consent management platform (Didomi) for cookie compliance. Despite these modern tools, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS and consent mechanisms in place but lacks visible security headers and comprehensive privacy documentation. Overall, the site requires urgent remediation of technical errors and improved transparency to enhance trust and usability.

D

Disney+

disneyplus.com

66

Disney+ is a leading global streaming platform operated by The Walt Disney Company, offering a wide range of family-friendly content including movies, series, and original productions from Disney, Marvel, Pixar, Star Wars, National Geographic, and Hulu. The website targets a general audience with a subscription-based business model and strong market positioning in the media industry. The platform is optimized for multiple devices and regions, including Finland as indicated by the localized content. Technically, the site leverages modern web technologies such as React and is hosted on AWS with CDN support for high performance and availability. Security posture is strong with HTTPS, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

The website www.laykeymanager.com appears to be a minimal service portal designed to allow users to input a key or email to retrieve information and download files. The site uses modern frontend technologies such as React and Next.js, hosted on Vercel, and integrates Google reCAPTCHA Enterprise for bot protection. However, the site lacks critical business and security information such as privacy policies, terms of service, contact details, and WHOIS registration data, which raises concerns about its legitimacy and trustworthiness. The absence of WHOIS data suggests the domain may be unregistered or privacy protected, which is unusual for a business-facing website. Security posture is basic with no visible security headers and limited compliance indicators.

J

juris GmbH

landesrecht-mv.de

10

The website 'Landesrecht Mecklenburg-Vorpommern' is an official legal information portal operated by juris GmbH in cooperation with the Justice Ministry of Mecklenburg-Vorpommern, Germany. It provides free access to consolidated state laws, administrative regulations, and court decisions, targeting citizens and legal professionals. The business model focuses on public service and legal transparency, positioning itself as a trusted government resource. Technically, the site uses modern web technologies including React and Webpack, with a CMS platform (jportal) tailored for legal content management. The site is mobile-optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Telia Company

teliacompany.com

76

Telia Company is a leading telecommunications provider operating primarily in the Nordic and Baltic regions. The company offers a broad range of connectivity and digital services targeting both consumer and enterprise customers. Their market position is strong, supported by a consistent brand presence and a focus on sustainability and corporate governance. The website reflects a mature digital presence with modern technologies and a professional design. The technical infrastructure is built on React and modern web standards, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the website and company demonstrate a high level of professionalism and trustworthiness.

G

Go-Ahead Nordic

go-aheadnordic.no

52

Go-Ahead Nordic operates as a regional train service provider in Norway, connecting major cities such as Oslo, Stavanger, and Kristiansand. The company is part of the larger Go-Ahead Group and focuses on delivering passenger rail services with an emphasis on travel information and customer support. The website serves as a portal for travelers to plan journeys, check train status, and access company news. Technically, the site is built on a modern React single-page application hosted on Microsoft Azure, integrating analytics and marketing tools such as Google Analytics, Bing Ads, and Telia ACE Web SDK. The site demonstrates good mobile optimization, accessibility, and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies would enhance trust. Overall, the domain registration aligns well with the business profile, indicating legitimacy and consistency. The site is safe for general audiences and does not contain any adult or questionable content.

B

Black Hole Experience

blackholeexperience.com

60

The Black Hole Experience website presents a mobile exhibition that combines the awe of nature and the cosmos with meditative reflection. The site is built using modern web technologies such as Next.js and React, and integrates privacy-conscious analytics via Plausible. While the website is accessible and professionally designed, it lacks publicly available WHOIS registration data, which raises some concerns about domain legitimacy. No direct contact information or detailed business credentials are provided, limiting business credibility assessment. Security posture is moderate with HTTPS enabled but missing key security headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site appears legitimate and focused on a niche experiential offering but would benefit from enhanced transparency and security hardening.

Lavenham Leisure Ltd. operates a professional e-commerce website specializing in premium quilted jackets and waistcoats, manufactured in-house at their Suffolk factory. The company positions itself as a British factory brand with a focus on quality and craftsmanship, targeting men and women seeking high-quality outerwear. The website is built on the Shopify platform, leveraging modern technologies such as React, Google Analytics, Facebook Pixel, and OneTrust for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data raises concerns about domain legitimacy, suggesting the need for further verification. Overall, the site demonstrates strong business credibility and technical implementation with room for improvement in transparency and security documentation.

D

DNEG

dneg.com

67

DNEG is a globally recognized leader in visual effects, animation, and creative technologies, serving the film, TV, and immersive content industries. With over 25 years of experience and multiple Academy Awards, DNEG partners with top filmmakers and studios to deliver cutting-edge digital production services. Their website reflects a mature digital presence with rich multimedia content and strong branding. Technically, the site uses modern frameworks like Next.js and React, integrates Vimeo for video hosting, and employs TrustArc for cookie consent management. However, some security best practices such as explicit security headers are not evident in the provided data. The absence of WHOIS registration details reduces transparency but does not detract significantly from the company's credibility given their established market position and external partnerships. Overall, DNEG demonstrates a solid security posture with room for improvement in security headers and incident response visibility.

Native is a specialized insurance brokerage focused on digital assets and the crypto-native ecosystem. They leverage decades of experience to provide bespoke insurance and risk management solutions tailored for onchain and offchain risks, integrating traditional insurance with blockchain technology. Their services include onchain capital insurance, smart contract-based policy execution, and crypto-denominated policies, positioning them as a niche player bridging legacy insurance and web3 innovation. Technically, the website is built on modern frameworks such as Next.js and React, with content managed likely via Contentful CMS. The site demonstrates good design and mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is moderate with no visible security headers or explicit SSL details in the provided data, and privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are visible, limiting direct communication channels. Overall, the site is professional and safe but would benefit from enhanced security practices and compliance transparency.

C

Clientis AG

clientis.ch

72

Clientis AG operates as a leading outsourcing provider for banks in Switzerland, enabling clients to focus on their core business while benefiting from cost advantages and innovations. The website presents a professional and consistent brand image, targeting banking institutions and their customers. The technical infrastructure leverages modern web technologies including React and Liferay CMS, with integrated analytics tools such as Matomo and Microsoft Clarity to monitor user interactions. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced further. Security posture is solid with HTTPS enforced and standard security headers implied, but explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website reflects a mature digital presence appropriate for a medium-sized financial services company.

S

simple & co gmbh

pokus.ch

55

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

B

B Studio

bossert.studio

52

The website bossert.studio currently serves as a minimal placeholder with very limited content, primarily displaying a waving hand emoji and a brief 'in progress' description. There is no substantive business information, contact details, or policies presented, indicating the site is under development or not actively maintained. The technical infrastructure is based on modern web technologies such as React and Next.js, suggesting a contemporary development approach, but the lack of content and metadata limits the site's digital maturity. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and privacy compliance documentation. Overall, the site presents a low trust profile with minimal risk but also minimal utility or engagement potential at this time.

The SYJMB Foundation website represents a small non-profit entity established around 2019, likely based in Switzerland. The site is built using modern web technologies such as Gatsby and React, indicating a moderate level of technical maturity. However, the content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies are published, which may expose the organization to compliance risks. Overall, the site is accessible and free from blocking mechanisms but would benefit from enhanced transparency and security measures.

B

BINGO! - Die Umweltlotterie

bingo-umweltlotterie.de

65

BINGO! - Die Umweltlotterie operates as a regional environmental lottery in Germany, offering lottery tickets with jackpots and additional prizes. The organization supports environmental projects across seven German federal states and integrates a related TV quiz show to engage its audience. The website is professionally designed, mobile-optimized, and provides comprehensive information about jackpots, prizes, and lottery rules. Technically, the site uses modern web technologies including Next.js and React, with Cloudflare DNS and FriendlyCaptcha for security. Analytics are handled via Piwik PRO, indicating a moderate level of user tracking with privacy considerations. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though some improvements are recommended in cookie consent and published security policies. Overall, the site is trustworthy, well-branded, and targets German-speaking lottery players interested in environmental causes.

F

Frontify

brandmanual.ch

65

Frontify is a technology company specializing in brand management and digital asset management solutions. Their platform targets brand managers and marketing teams in enterprises, offering SaaS tools to maintain branding consistency and facilitate collaboration. The website analyzed is a login page for their platform, reflecting a professional and consistent brand image. Technically, the site uses modern web technologies including React and integrates third-party services such as Amplitude for analytics and Sentry for error tracking. The site is well optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced, CSRF tokens, and password policies, though some security headers are missing and no public security or privacy policies are visible on this page. Overall, the site is trustworthy and professional but could improve transparency around privacy and security policies. The domain registration data aligns well with the business, showing legitimacy and consistency. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

B

Bündnis StrukturWandeln

struktur-wandeln.de

57

Bündnis StrukturWandeln is a small non-profit civil society alliance focused on structural change in the Central German mining region. The website serves as an informational and advocacy platform targeting regional stakeholders and activists. Technically, the site is built on WordPress using modern block editor technologies and includes Matomo analytics for visitor tracking. The site is accessible, mobile-optimized, and uses HTTPS, but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. WHOIS data is minimal and domain status is unusual, which reduces trustworthiness. Overall, the site is functional but could improve in privacy compliance and security best practices.

P

PING PLD

pingpld.com

56

PING PLD operates as a niche golf equipment brand specializing in PLD putters, which are currently restricted in availability by region as indicated on the analyzed page. The website serves primarily as an informational and redirect page to the parent brand PING's main site. The technical infrastructure is modern, leveraging React and Next.js frameworks with Material-UI for styling, indicating a contemporary digital maturity level. However, the content on this particular page is minimal, focused on access restriction messaging without additional business or contact information. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with cookie consent implemented but no visible privacy or terms policies. Overall, the site is legitimate and consistent with the business domain registration and branding but would benefit from enhanced security and compliance documentation.

ERDINGER Weissbräu operates a professional website focused on promoting its non-alcoholic beer product line, ERDINGER Alkoholfrei, targeting adults over 16 years old and sports enthusiasts. The site features product showcases, athlete sponsorships, and links to an official fan shop. The technical infrastructure is modern, leveraging Next.js and React frameworks, with embedded multimedia content enhancing user engagement. However, the site lacks explicit privacy and cookie policies, and no contact information or security policies are readily available, which may impact user trust and compliance. Security posture is moderate with no detected blocking or WAF challenges, but missing security headers and incident response contacts are areas for improvement. Overall, the website is professionally designed and consistent with the brand's market position but would benefit from enhanced privacy and security disclosures.

The website sportscheck.com is a retail and event promotion platform focused on running events, specifically the SportScheck RUN Hannover 2025. It targets a general audience interested in sports and running, offering event participation options and related sports equipment. The site uses modern web technologies including React and various JavaScript tracking libraries, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as missing WHOIS registration data, suggests gaps in compliance and transparency. Security posture appears average with no explicit security headers detected in the provided data, and no evidence of vulnerabilities or exposed sensitive data. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

S

Schule für Gestaltung Basel

sfgbasel.ch

70

Schule für Gestaltung Basel is a well-established educational institution based in Basel, Switzerland, specializing in design and art education. The website presents a comprehensive range of courses and programs targeting talented young individuals, experienced professionals, and anyone interested in developing their creative skills. The institution offers foundational courses, vocational training, higher education, and public continuing education, positioning itself as a key regional player in design education. Technically, the website is built on modern frameworks such as Next.js and uses DatoCMS for content management, ensuring a responsive and user-friendly experience. Cookie consent is managed via Cookiebot, reflecting awareness of privacy regulations. However, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with excellent SSL configuration but does not implement common security headers or publish incident response contacts or vulnerability disclosure policies. No signs of WAF or blocking mechanisms were detected, and no analytics or tracking scripts beyond cookie consent were found, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

Brogramming is a small, specialized web development business operated by Fabian Voegeli based in Zürich, Switzerland. The company focuses on delivering custom web development projects primarily for cultural heritage institutions, academia, art galleries, and architecture firms. Their portfolio demonstrates expertise in modern web technologies including Next.js, React, Craft CMS, WordPress, and Gatsby, reflecting a mature and technically competent digital infrastructure. The website showcases a broad network of partners and clients, reinforcing its niche market position. Technically, the website employs a modern tech stack with frameworks like React and Next.js, and integrates Google Analytics for user tracking. The site is mobile optimized with good SEO practices, though accessibility features are basic. Hosting and DNS are managed through Key-Systems GmbH and firestorm.ch DNS servers. Performance is moderate, with room for improvement in security configurations. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. The domain is secured with clientTransferProhibited status, and HTTPS is presumed but not explicitly confirmed in the data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is professional and trustworthy with a solid business foundation and technical implementation. However, it would benefit from improved security practices and formalized privacy compliance to enhance user trust and regulatory adherence.

T

TITLIS Bergbahnen AG

titlis.ch

72

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.

M

MIDNIGHT STUDIO IO LTD.

midnight.agency

61

Midnight Studio IO Ltd. is a UK-based small technology company specializing in web development services tailored for creative teams and design agencies. Their business model focuses on partnering with design teams to deliver high-end digital experiences, positioning themselves as a reliable and client-facing technology partner. The company showcases a strong portfolio with notable clients such as Meta, Cartier, CNN, and The North Face, indicating a solid market position in the creative technology sector. Technically, the website is built using modern frameworks including Next.js and React, with Contentful CMS integration. The site demonstrates excellent design quality, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Performance is fast, and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes key security headers, indicating good baseline security hygiene. However, the absence of explicit privacy and cookie policies, vulnerability disclosure mechanisms, and incident response contacts suggests areas for improvement in compliance and transparency. No critical vulnerabilities or suspicious content were detected. Overall, Midnight Studio IO Ltd. presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and user trust.

S

Skyra

skyra.no

61

Skyra is a Norwegian technology company offering a SaaS platform focused on user insight and improving website user experience through data-driven methodologies such as top tasks, user surveys, and continuous improvement reporting. The company targets organizations seeking to enhance self-service and user satisfaction on their websites. The website is professionally designed, mobile optimized, and uses modern web technologies including Next.js and Sanity.io CMS. Hosting is inferred to be with Scaleway, a European cloud provider, aligning with GDPR compliance goals. Security posture is strong with HTTPS and security headers properly configured, and a cookie consent mechanism is implemented to comply with privacy regulations. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, slightly reduces privacy compliance and business credibility scores. WHOIS data is unavailable, likely due to privacy protection, which is common for tech startups but reduces domain trust slightly. Overall, the website presents a professional and trustworthy front for a small technology company in Norway.

A

Arkitektur Skaper Verdi

arkitekturskaperverdi.no

58

The website 'Arkitektur Skaper Verdi' is dedicated to showcasing the importance of good architecture, landscape architecture, and interior architecture. It features content such as news, projects, and podcasts related to architecture, targeting a general audience interested in architectural value and design. The site uses modern web technologies including Next.js and Sanity CMS, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. Matomo analytics is implemented for user tracking, but there is no visible cookie consent mechanism or privacy policy, which may raise privacy compliance concerns. Security posture is limited due to lack of visible security headers and absence of HTTPS verification in the provided data. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy compliance measures.

A

Assemble

assemblestudio.co.uk

62

Assemble is a small, UK-based multi-disciplinary collective specializing in architecture, design, and art. The website serves as a portfolio showcasing a wide range of creative projects, emphasizing their expertise and diverse capabilities. The business operates in a niche creative sector with a focus on community and artistic architectural projects. Technically, the website is built using modern frameworks such as Next.js and React, with content sourced from a WordPress backend via API. The site demonstrates good SEO and mobile optimization but lacks comprehensive privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS enforced and deferred script loading, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

D

Derwent London

networkw1.london

60

The website represents a commercial real estate property called Network located at 10 Howland Street in Fitzrovia, London, managed by Derwent London. It offers flexible office workspace across multiple floors with a focus on modern and sustainable design. The site targets businesses seeking premium office space in a central London location. Technically, the website is built using modern frameworks such as Next.js and React, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, some accessibility features appear basic and security headers are not detected, which could be improved. The security posture is moderate due to the presence of HTTPS (assumed) but lack of visible security headers and no published security or privacy policies. Cookie consent is implemented, but no privacy policy or terms of service are found, which impacts compliance and trust. Overall, the site is professional and relevant to its business domain but would benefit from enhanced security and compliance documentation.

N

native.

native.fm

63

native. is a UK-based company focused on powering campus culture by organizing and promoting student events such as live talks, virtual events, and club nights. Their platform aims to enhance university life for students across the UK by providing engaging cultural content and event experiences. The company maintains a niche position within the UK education and media sectors, targeting university students and campus communities. Technically, the website is built using modern web technologies including React, Next.js, and Material-UI, with integrated analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy and cookie policies are present and GDPR compliant at a basic level. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though there is room for enhancement in security transparency and contact information completeness.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

B

Ben Chernett

benchernett.com

56

Ben Chernett is a freelance web developer operating primarily in the UK, with over 10 years of experience. The website serves as a professional portfolio showcasing bespoke web development services, primarily using WordPress as a CMS. The business targets UK-based organizations seeking custom web solutions and ongoing site maintenance. The site demonstrates a solid market position with a portfolio of reputable clients in architecture and cultural sectors. Technically, the website is built on modern frameworks such as Next.js and React, with Cloudflare providing DNS and likely CDN services, resulting in fast performance and excellent mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and technically sound, but could improve in privacy and security policy transparency.

A

Add arkitekter AS

addarkitekter.no

65

Add arkitekter AS is a Norwegian architectural firm established in 1998, specializing in architectural design and urban development. The company recently rebranded to Add arkitekter and serves clients primarily in Norway, including municipalities and private sector entities. Their website reflects a professional and consistent brand image with clear contact information and relevant project articles. Technically, the site is built using modern frameworks such as Next.js and React, with some creative use of p5.js for visual effects. The site is mobile optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the website uses HTTPS as indicated by the Open Graph URL, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data is publicly available due to .no domain privacy restrictions, which is typical but reduces transparency. No signs of malicious content or tracking scripts were found, indicating a low-risk profile. However, the absence of privacy and cookie policies and security headers are notable gaps. Overall, the website is professional and trustworthy from a business perspective but could improve its security posture and privacy compliance to meet modern standards. The domain registration information is not publicly accessible, which is common for Norwegian domains but should be considered when assessing transparency.

S

Statsbygg

statsbygg.no

61

Statsbygg is a Norwegian government agency responsible for managing major construction projects and state-owned properties. The website presents comprehensive information about their projects, sustainability efforts, innovation initiatives, and public services. It targets government entities, contractors, suppliers, and the general public interested in public infrastructure and property management. The site uses modern web technologies including React and Matomo analytics, and embeds multimedia content such as Vimeo videos. The website is well-designed, mobile-optimized, and professionally maintained, reflecting a high level of digital maturity. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which is unusual but may be due to registry policies. Overall, the site is trustworthy and authoritative for its domain.

A

Aargauische Kantonalbank

akb.ch

29

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

E

EnergieSchweiz

energieschweiz.ch

70

EnergieSchweiz is an official Swiss federal energy program managed by the Bundesamt für Energie (Swiss Federal Office of Energy). It supports voluntary measures to implement Swiss energy policy, targeting the Swiss population, businesses, and public institutions. The website is professionally designed using modern static site generation technology (Gatsby) and includes multilingual support for German, French, and Italian audiences. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible as a government-affiliated platform but would benefit from enhanced privacy and security disclosures.

2

2038 | Home

2038.xyz

9

2038.xyz is a cultural and artistic project presenting a vision of a future society through multimedia storytelling and expert collaboration across various disciplines including architecture, ecology, and technology. The website serves as a platform to showcase films, publications, and expert insights related to the project, which is positioned as a niche cultural initiative with international exhibition presence. Technically, the site is built on modern web technologies such as Gatsby and React, hosted likely via GoDaddy, and optimized for mobile with good SEO practices. However, it lacks advanced security configurations such as DNSSEC and security headers, and does not provide privacy or cookie policies, which impacts compliance and trust. No contact information or incident response channels are provided, limiting user engagement and transparency. Overall, the site is professionally designed and content-rich but could improve in security and privacy compliance to enhance trustworthiness.

M

Mobimo Holding AG

mobimo.ch

70

Mobimo Holding AG is a well-established Swiss real estate company specializing in property development, investment, and management. The company targets investors, tenants, and real estate professionals, positioning itself as a leading player in the Swiss real estate market. The website reflects a professional and comprehensive digital presence with clear business information and user-friendly navigation. Technically, the site employs modern technologies such as React, Google Analytics, and Google Maps API, ensuring good performance and mobile optimization. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit security policies and incident response details are not published. Overall, the site demonstrates a mature digital infrastructure and trustworthy business credibility.

H

HRS

hrs.ch

69

HRS is a well-established Swiss real estate company with over 60 years of experience, specializing in development, implementation, and investment across Switzerland. The company operates as the largest owner-managed real estate service provider in the country, emphasizing regional roots, sustainability, and innovation. Their website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and Storyblok CMS, with strong mobile optimization and SEO practices. Security posture is robust, with HTTPS enforced, security headers present, and a cookie consent mechanism implemented via Cookiebot. However, there is no explicit security policy or incident response information publicly available. Overall, the website and business information align well with the WHOIS data, indicating a legitimate and trustworthy entity.

Electrolux Switzerland operates a professional and well-branded website focused on household appliances, targeting general consumers in Switzerland. The site uses modern web technologies such as React and Next.js, providing a good user experience with multi-language support. However, explicit privacy, cookie, and security policies are not detected in the provided content, which may impact compliance and user trust. The security posture is moderate with no visible security headers or incident response information. Overall, the domain and WHOIS data align well with the Electrolux brand, indicating high legitimacy. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Avacon Netz GmbH operates as a major regional energy network operator in Germany, providing reliable electricity and gas network infrastructure to municipalities, industries, businesses, and households. The company serves approximately 16 million people across a large geographic area, positioning itself as a key player in the German energy sector. The website reflects a mature digital presence with multiple customer portals and comprehensive service offerings tailored to various customer segments. Technically, the site employs modern web technologies including React, Adobe Experience Manager CMS, and integrates consent management tools to comply with GDPR requirements. Security posture is strong with HTTPS enforcement, content security policies, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

B

Beer Merz AG

beermerz.ch

61

Beer Merz AG is a small architecture firm based in Basel, Switzerland, specializing in architectural design, building renovations, and project competitions. The website presents a professional portfolio of projects primarily focused on real estate and urban development. The firm targets a general audience interested in architectural services within the Basel region. Technically, the website is built using React and modern JavaScript, with a custom CMS or framework. It shows moderate performance and good mobile optimization but lacks some accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. Cookie consent is implemented, and Google Analytics is used for tracking. However, no explicit contact information, terms of service, or security policies are present on the site. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

株

株式会社Faber Company

audience-mieruca.com

53

Audience Mieruca is a Japanese SaaS platform specializing in AI-driven web analytics and optimization tools. The company, operated by 株式会社Faber Company, offers a suite of services including user behavior analysis, SEO and SERP monitoring, AI chatbot support, and monitoring of AI search engines. The platform targets a broad audience from beginners to agencies, focusing on mobile-friendly web optimization. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good performance and mobile optimization but lacks some advanced SEO and privacy compliance features. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized technology company profile.

S

SPOT Agency

spotwerbung.ch

66

SPOT Agency is a creative digital agency based in St. Moritz, Switzerland, specializing in brand development, digital products, and e-commerce solutions with a focus on tourism, sport, and lifestyle sectors. Established in 1990, the agency combines strategic thinking, creative design, and technological expertise to serve its clients effectively. The company is part of the SPOT Group, indicating a broader organizational structure and resources. Their website reflects a professional and modern digital presence, showcasing their portfolio and services clearly to their target audience of tourism and lifestyle businesses. Technically, the website is built using modern frameworks such as Next.js and React, with media handled via Mux Player and content managed through DatoCMS. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. SEO and metadata are properly implemented, enhancing discoverability and user experience. From a security perspective, the website enforces HTTPS, includes standard security headers, and does not expose sensitive information. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, SPOT Agency presents a trustworthy and professional digital footprint with strong business credibility and technical maturity. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and potentially obtaining recognized security certifications to further boost trust and compliance.