Security Directory

M

Modum Brannstiger

modumbrannstiger.no

51

Modum Brannstiger is a Norwegian company specializing in manufacturing and supplying fire escape ladders and related safety equipment for various building types across Norway. The company offers both traditional and custom solutions including foldable fire ladders with or without back protection, inspection ladders, escape stairs, and balconies. The website reflects a niche market position focused on safety and compliance with Norwegian building regulations. Technically, the website is built on WordPress using Elementor and integrates modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, Google Analytics, and Plausible Analytics. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and formal security policies published. Overall, the website presents a professional and trustworthy digital presence consistent with a newly founded small manufacturing business.

F

Foreningen kommunal informasjonssikkerhet – KiNS

kins.no

69

Foreningen kommunal informasjonssikkerhet – KiNS is a Norwegian non-profit association dedicated to enhancing information security within municipalities and county municipalities. With over 370 members including public sector entities and companies, KiNS offers training, webinars, tools, and networking opportunities to strengthen cybersecurity and privacy practices in local government. The website reflects a mature organization with strong partnerships with official Norwegian government agencies, indicating a solid market position in the public sector security domain. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Plausible Analytics for privacy-conscious tracking, and Cookie-Script for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. While no CMS or hosting provider is explicitly identified, the technical implementation is robust and well-maintained. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to registry privacy policies for .no domains and does not indicate suspicious activity. Overall, the security posture is good but could be improved with additional transparency and security best practices. The overall risk assessment is low, with the site demonstrating high professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. Strategic recommendations include publishing a security policy, adding incident response contacts, implementing security.txt, and enhancing HTTP security headers to further strengthen the security posture and trust.

V

Volt Power Analytics

voltpoweranalytics.com

65

Volt Power Analytics is a specialized energy market analysis company focused on the Nordic and European power markets. Founded in 2022, it offers advanced forecasting tools and data services designed to support power market professionals, investors, and analysts in navigating the energy transition. Their product suite includes real-time market intelligence, long-term price forecasts, and tailored commodity databases, emphasizing renewable energy and green transition support. The company positions itself as an independent and trusted provider with a strong focus on customization and data transparency. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools such as Yoast SEO, HubSpot, and Plausible Analytics. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. Security practices include HTTPS, domain transfer protection, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is a gap. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Business credibility is high, supported by clear contact information, professional content, and trust signals such as client logos and LinkedIn presence. Overall, Volt Power Analytics presents a professional, secure, and privacy-conscious digital presence suitable for its target market. Strategic improvements in DNS security and published security policies would further enhance trust and resilience.

F

Frameworks AS

frameworks.no

59

Frameworks AS is a Norwegian web agency established in 2003, specializing in web design, development, SEO, and maintenance services primarily for businesses in the Agder region and across Norway. The company offers services including website and app development, site maintenance, and search engine optimization, leveraging platforms like WordPress and Umbraco. Their market position is that of a trusted local and national partner with a strong focus on performance, usability, and client satisfaction. Technically, the website is built on WordPress with Elementor and Yoast SEO, supported by modern JavaScript libraries and analytics tools like Plausible Analytics. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS and multiple security headers implemented, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Partners for Democratic Change Slovakia (PDCS) organizes an international conference titled 'Civic Actors in War and Peace' focusing on strategies to address hate, polarization, and extremism in communities during times of conflict and peace. The conference attracts international experts, civic actors, and policymakers, positioning PDCS as a recognized non-profit entity in the civic engagement and conflict prevention sector. The website provides comprehensive event details, speaker profiles, and multimedia content, reflecting a well-established event with a history dating back to at least 2014. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Flickity, and integrates privacy-conscious analytics via Plausible. Hosting is managed by Websupport with DNSSEC enabled, and HTTPS is enforced, indicating a secure infrastructure. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR through a linked privacy policy, though improvements in privacy and security disclosures are recommended.

P

PDCS, o.z.

pdcs.sk

41

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

T

Tourismusverband Franken e.V.

frankentourismus.de

61

Tourismusverband Franken e.V. operates a comprehensive regional tourism website focused on promoting the Franconia region in Germany. The site offers extensive information on cultural, culinary, wellness, and outdoor activities, targeting tourists and visitors interested in exploring the area. The business model centers on tourism promotion and providing travel-related services including event listings and online booking options. The website is well-positioned as an official regional tourism association with a consistent brand and strong trust indicators such as verified social media presence and GDPR-compliant cookie consent. Technically, the website employs modern tracking and analytics tools including Google Analytics, Plausible, and Umami, integrated via Google Tag Manager. The site uses a custom or proprietary CMS with good mobile optimization, accessibility, and SEO practices. The presence of a strict referrer policy and HTTPS indicates a solid security foundation, although some security headers are missing. The cookie consent mechanism is robust and aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and preparedness. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the website is professional, secure, and trustworthy with excellent content quality and user experience. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

U

University of the Arctic (UArctic)

uarctic.org

65

The University of the Arctic (UArctic) operates as a collaborative network of academic and research institutions focused on education and research in the Arctic and northern regions. The organization facilitates cooperation among over 200 member institutions, providing thematic networks, mobility programs such as north2north, and resources to support research and education. The website reflects a well-established non-profit entity with a clear mission to strengthen collective resources for northern studies. Technically, the website employs modern web technologies including Font Awesome 6 Pro, Embla Carousel, and lazy loading for images, ensuring a fast and responsive user experience. The use of Umbraco CMS is inferred from HTML structure, indicating a professional content management approach. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website demonstrates high professionalism, trustworthiness, and a strong digital presence suitable for its academic and non-profit nature.

S

Statens veterinärmedicinska anstalt

sva.se

69

Statens veterinärmedicinska anstalt (SVA) is a Swedish government agency dedicated to animal health, disease surveillance, diagnostics, research, and public information. The website serves veterinarians, researchers, animal owners, and government bodies with comprehensive resources, including disease information, diagnostic services, and educational materials. The agency holds a strong national position as the authoritative body for veterinary medicine in Sweden. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Plausible Analytics, with a focus on privacy and performance. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data for the subdomain 'www.sva.se' is unavailable, likely due to querying the subdomain instead of the main domain 'sva.se'. Despite this, the website's content, official contact information, and domain usage strongly indicate legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security policy or incident response contacts were found. Overall, the site is professional, trustworthy, and serves its government mandate effectively. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

M

Mein LIEBLINGS Event GmbH

meinlieblingsevent.de

51

Mein LIEBLINGS Event GmbH operates a professional event promotion website focused on concerts and events in Germany. The company targets event attendees seeking memorable experiences and offers services including event organization and venue rental. The website demonstrates a consistent brand presence with active social media integration and sponsor visibility, positioning it as a regional player in the hospitality and media sectors. Technically, the website employs modern JavaScript frameworks such as Livewire, Alpine.js, GSAP, and Swiper.js, indicating a moderate level of digital maturity. Hosting is provided by Schlund Technologies, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of a security.txt or vulnerability disclosure page further indicates limited formal security governance. However, no critical vulnerabilities or exposed sensitive data were detected in the content provided. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

H

HRAL Trans

hral.cz

45

HRAL Trans is a Czech logistics company founded in 2010, specializing in transportation and storage of palletized, piece, atypical, bulky, chilled, and frozen goods. The company also offers rental of utility vehicles through a related domain. Their market position is strong within the Czech Republic, serving major clients such as IKEA, Tesco, and Makro. The website is professionally designed using WordPress and modern technologies, with a focus on sustainability and digitalization. Security posture is good with HTTPS and secure forms, though cookie consent and explicit security policies are missing. Overall, the site reflects a credible and established business with a moderate to high level of digital maturity.

P

plug.

plugdesign.cz

42

plug. is a Czech-based small business specializing in revolutionary modular furniture that can be assembled without screws or glue, targeting a broad audience including homes, offices, and commercial spaces. The company operates an e-commerce platform with a 3D configurator to customize furniture sets, positioning itself as an innovative player in the modular furniture retail market. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and WooCommerce. Security posture is strong with HTTPS and secure login forms, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is good with a GDPR policy present, but lacks a cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a newly founded business in 2024.

C

Connecte DEVELOPMENT s.r.o.

connectedevelopment.cz

46

Connecte DEVELOPMENT s.r.o. is a Czech real estate development company specializing in the construction and sale of residential homes and apartments. The company emphasizes quality, comfort, and reliability, targeting young families, couples, and investors seeking high-quality properties. As part of the Connecte GROUP, it benefits from a strong parent company and a network of subsidiaries providing complementary services. The website reflects a professional and modern approach with comprehensive customer support and clear communication.

M

Medevio

medevio.cz

61

Medevio is a Czech-based healthcare technology company providing an online platform designed to streamline communication and administrative tasks for medical practices. The platform targets doctors, nurses, clinics, and hospitals, offering services such as patient communication management, appointment scheduling, and integration with various ambulatory information systems. Medevio has established a solid market presence with nearly 2,000 medical professionals and over 600,000 patients using its services. The company offers tiered subscription plans and additional products like a digital call center and telephony services, supporting a SaaS business model. Technically, the website is well-constructed using modern web technologies, including Google Tag Manager and Plausible Analytics for tracking, and is hosted on AWS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security is a priority, evidenced by ISO 27001 certification and the use of HTTPS with cookie consent mechanisms. The contact methods primarily include a secure contact form and social media channels, with no direct emails or phone numbers publicly listed. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. However, the site could improve by adding explicit security headers and publishing a vulnerability disclosure policy. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Medevio presents a trustworthy and professional digital footprint suitable for its healthcare audience. Strategically, Medevio should focus on enhancing transparency around incident response and vulnerability disclosure to further build trust. Continued investment in security best practices and user privacy will support its growth and reputation in the healthcare technology sector.

E

Element Logic

elementlogic.cz

69

Element Logic is a prominent provider of automated warehouse solutions specializing in AutoStore® systems, software, and robotic solutions. The company positions itself as the first and largest distributor of AutoStore worldwide, targeting businesses seeking to optimize warehouse performance and inventory management. Their website is professionally designed, content-rich, and localized for the Czech Republic market, with multilingual support indicating a global presence. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and Plausible Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though hosting details are not explicitly identified. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response pages. The WHOIS data is unavailable, which raises some concerns about domain registration transparency. However, the professional presentation, active content updates, and social media presence support the legitimacy of the business. No signs of malicious or suspicious content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, Element Logic's website reflects a mature digital presence suitable for a large technology and logistics company, with room for improvement in security transparency and WHOIS data availability.

R

Readpeak

readpeak.com

63

Readpeak is a Finnish-based technology company specializing in native advertising and content promotion platforms. It targets marketers seeking to create and manage native advertising campaigns efficiently, offering access to premium media outlets such as The Independent and The Guardian. The platform leverages machine learning algorithms to optimize campaign delivery and conversion rates. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Tag Manager, Hotjar, and Plausible Analytics. Cookiebot is used for GDPR-compliant cookie consent management, reflecting a mature approach to privacy compliance. Security posture is strong with HTTPS enforced and reputable third-party integrations, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence and privacy policies. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features.

Č

Český Toolbox

ceskytoolbox.cz

45

Český Toolbox is a Czech-based manufacturer specializing in automated tool dispensing systems designed to optimize industrial and manufacturing workflows. With over 10 years of experience and more than 100 units produced, the company offers customizable toolbox solutions integrated with advanced online management software. Their market position is strong locally, supported by client references and a transparent pricing model. The website reflects a professional and user-friendly digital presence, emphasizing efficiency, security, and customer support. Technically, the site is built on WordPress with modern themes and privacy-respecting analytics, ensuring good performance and compliance. Security posture is solid with HTTPS and consent management, though some enhancements in security headers and policies are recommended. Overall, the business demonstrates legitimacy, technical maturity, and a trustworthy online presence.

T

Truck1 Sp.z.o.o.

truck1.es

51

Truck1 Sp.z.o.o. operates an established online marketplace specializing in the sale of used trucks, special vehicles, agricultural machinery, and industrial equipment primarily targeting the Spanish and broader European markets. Founded in 2003, the company offers a comprehensive platform with over 350,000 listings, catering to businesses and individual buyers seeking reliable commercial vehicles. The website demonstrates consistent branding and a professional digital presence, supporting multiple languages and currencies to serve an international audience. Technically, the site employs a modern analytics and advertising stack including Google Tag Manager, Facebook Pixel, TikTok Analytics, and others, indicating a mature digital marketing strategy. Security measures such as HTTPS and standard security headers are implemented, though explicit privacy and cookie policies are not detected in the provided content, representing an area for improvement. The absence of WHOIS data due to registry query restrictions limits domain verification, but the overall site professionalism and structured data suggest legitimacy. Strategic recommendations include enhancing privacy compliance transparency, publishing security policies, and maintaining regular audits of third-party scripts to mitigate risks.

D

Dana Petroleum

dana-petroleum.com

67

Dana Petroleum is a medium-sized exploration and production company operating primarily in the UK, Netherlands, and Egypt. It is a wholly owned subsidiary of the Korea National Oil Corporation, focusing on oil and gas extraction with significant operations in the North Sea. The website presents a professional corporate image with clear business descriptions, key service offerings, and a consistent brand presence. The company targets investors, partners, industry professionals, and potential employees through detailed sections on management, operations, and careers. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics, Google Tag Manager, and Plausible Analytics for user tracking and performance monitoring. The site is mobile optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces confidence in domain legitimacy, but the professional content and company registration details support trustworthiness. Overall, Dana Petroleum's website is a well-structured, professional corporate site with good technical implementation and privacy compliance. The main risk is the lack of WHOIS transparency and limited published security policies, which could be improved to enhance trust and compliance.

N

Nolan Consulting Limited

cryptovoxels.com

54

Cryptovoxels, operated by Nolan Consulting Limited, is a blockchain-based virtual world platform offering users the ability to explore, buy, and build on virtual parcels of land. The platform targets crypto enthusiasts, gamers, and digital artists, positioning itself as a niche leader in the metaverse and virtual real estate market. Key services include virtual land sales, digital asset marketplaces, and hosting virtual events. The website content is basic but functional, with a consistent brand presence and active social media engagement via Discord and Twitter. Technically, the site uses JavaScript and Leaflet.js for mapping features and employs Plausible Analytics for minimal user tracking. The site performance is moderate with basic mobile optimization and accessibility features. However, there is a lack of advanced SEO and security headers, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the security posture is moderate but could benefit from enhanced policies and transparency. The overall risk is moderate with no critical vulnerabilities detected, but the absence of WHOIS data and privacy compliance features suggest the need for strategic improvements to enhance trust and security culture.

D

Dark Dog

darkdog.fr

47

Dark Dog is a French energy drink brand with a professionally designed WordPress website presenting their product and brand identity. The site targets general consumers interested in energy beverages, positioning itself as a source of intense energy and adventure. The business model is focused on B2C sales of energy drinks, with a moderate market presence in France. The website demonstrates good SEO practices and mobile optimization, leveraging modern technologies such as Yoast SEO and Plausible Analytics for performance and tracking. However, the site lacks visible contact information and comprehensive privacy and security disclosures, which could impact user trust and compliance.

K

KEDGE Business School

kedgebs.com

68

KEDGE Business School is a leading French business and management educational institution with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of programs including bachelor, master, and specialized master's degrees targeting students, professionals, and corporate clients. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and credibility. The website reflects a professional and comprehensive digital presence with clear navigation and multilingual support. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, and Kameleoon, ensuring data-driven insights and user experience optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security and incident response policies are not publicly detailed. Privacy compliance is robust, featuring cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates a mature digital infrastructure supporting the institution's business goals and reputation.

K

KEDGE Business School

kedge.edu

68

KEDGE Business School is a prominent French business and management school with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of academic programs including bachelor, master, and specialized master's degrees targeting students, professionals, companies, alumni, and candidates. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and reputation in higher education. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its educational mission. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, Kameleoon, and Plausible Analytics, integrated with a GDPR-compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the website is professional, secure, and compliant, supporting KEDGE's credibility as a leading educational institution.

R

Rankai

rankai.ai

61

Rankai is a newly founded AI-powered SEO agency focused on delivering high-quality SEO services to startups and SMBs at a competitive price point. The company leverages a hybrid approach combining human SEO expertise with AI-driven content creation and optimization to generate significant organic traffic growth for clients. Backed by reputable investors such as OpenAI, Andreessen Horowitz, Y Combinator, and Microsoft, Rankai positions itself as an innovative player in the SEO technology space. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics, Plausible, PostHog) and customer engagement (Intercom). The site is well-optimized for performance, mobile responsiveness, and SEO best practices, reflecting a mature digital infrastructure for a startup. Hosting is via GoDaddy, with domain privacy protection enabled. From a security perspective, the site uses HTTPS and follows basic security best practices but lacks advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a clear privacy policy and terms of service but no cookie consent mechanism. WHOIS data indicates a legitimate startup with privacy protection justified by business type. Overall, Rankai presents a professional, trustworthy, and technically sound online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

C

Code Week Germany

codeweek.de

44

Code Week Germany is a well-established grassroots educational initiative supported by the European Commission, focused on promoting coding and digital literacy among children and youth across Germany and Europe. The website effectively communicates its mission, events, and community engagement through a professional and accessible digital platform powered by TYPO3 CMS. The technical infrastructure is modern, secure, and optimized for performance and accessibility, including HTTPS enforcement and security headers. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. The security posture is solid, though the site could benefit from explicit security and incident response policies. Overall, the site demonstrates high legitimacy, trustworthiness, and a strong community presence, making it a reliable resource for its target audience.

O

Outseta

outseta.com

58

Outseta operates as a SaaS membership operating system designed to help businesses and creators monetize and grow their membership offerings. The platform integrates payments, authentication, protected content, CRM, email marketing, and help desk tools into a unified solution. The website presents a professional and modern interface with good content relevance and user experience, targeting businesses seeking an all-in-one membership management solution. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, reCAPTCHA, and Plausible Analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and bot protection, but lacks explicit security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and technology usage suggest a legitimate business. Privacy and cookie policies are not clearly presented, indicating room for compliance improvement.

N

Norsk Hydro ASA

r-100.no

58

The website www.r-100.no represents a project by Norsk Hydro ASA focused on promoting Hydro CIRCAL R100, an innovative aluminium product made entirely from recycled post-consumer scrap. The site highlights collaborations with prominent designers and showcases exhibitions, targeting design professionals and sustainability advocates. The business model centers on corporate branding and sustainable innovation promotion within the energy and manufacturing sectors. Technically, the site is built using modern frameworks such as Next.js and Sanity CMS, with integration of privacy-focused analytics via Plausible. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

The Fédération Suisse des Parlements des Jeunes (FSPJ) is a Swiss non-profit organization dedicated to youth political education and participation. It serves as a neutral competence center supporting 65 youth parliaments across Switzerland and Liechtenstein. The website provides comprehensive information about its mission, services, and offers tailored for young people, educators, and local governments. Multilingual support and partnerships with organizations like easyvote.ch and engage.ch enhance its outreach and impact. Technically, the site is built on WordPress with modern plugins and optimizations, delivering a responsive and accessible user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and mission-driven organization with a strong digital presence.

Depkatalog.no is an official Norwegian government website operated by the Departementenes digitaliseringsorganisasjon (DIO). It serves as a comprehensive contact directory for the Prime Minister's office, various ministries, and related government organizations such as DSS and DIO itself. The site provides search functionality for employees and departments, along with brief descriptions of their roles. It targets government employees and the general public seeking official contact information. The website is well-positioned as the authoritative source for government contact data in Norway. Technically, the site is built on WordPress 6.8.3 with jQuery and uses the Ninja Forms plugin for contact forms. It is hosted on a Norwegian government domain (nettsteder.regjeringen.no), indicating a secure and official hosting environment. The site includes modern web practices such as HTTPS, mobile responsiveness, and accessibility features. Analytics are handled via Plausible Analytics, which respects privacy and limits tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. There is no cookie consent mechanism, which is a minor GDPR compliance gap. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk is low given the official nature and content safety of the site. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and maintaining regular plugin audits. These steps would enhance compliance and trust without significant operational impact.

D

digicube AG

bienenzeitung.ch

67

The Schweizerische Bienen-Zeitung is a specialized Swiss magazine focused on beekeeping, targeting hobbyist and professional beekeepers, as well as related agricultural and health professionals. It operates on a subscription-based model with a monthly publication cycle and a circulation of approximately 13,500 copies. The website is professionally designed and maintained by digicube AG, a digital agency, and provides a rich content experience including articles, archives, and subscription management. The site is well positioned within its niche market in Switzerland, supported by partnerships with related beekeeping organizations and shops. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Google Maps API, and caching via WP Rocket. It uses a child theme of GeneratePress and integrates social media and analytics tools such as Plausible Analytics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and security.txt files. No security headers were detected, which could improve protection against common web attacks. The privacy policy is comprehensive and GDPR compliant, but no cookie consent banner was found, which is a compliance gap. The WHOIS data confirms a legitimate registration consistent with the business claims, enhancing trust. Overall, the website presents a low risk profile with good business credibility and content quality. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and security posture, further strengthening user trust and regulatory adherence.

M

Molten Ventures

moltenventures.com

71

Molten Ventures is a prominent European venture capital firm specializing in technology investments at Series A and beyond. The company positions itself as a forward-thinking investor backing visionary teams with global ambitions, focusing on sectors such as deeptech, consumer tech, healthtech, SaaS, and enterprise software. Their business model revolves around active portfolio development and long-term value creation, supported by a professional and content-rich website that targets startups and investors alike. The firm maintains a strong market position as a leading tech-focused VC in Europe, with a clear emphasis on innovation and growth. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools including Google Analytics, Google Tag Manager, and Plausible Analytics, and a cookie consent mechanism ensuring compliance with privacy regulations. The site is well-optimized for mobile devices, offers fast performance, and includes SEO best practices. However, explicit security headers are not detected, and no CMS or hosting provider details are evident from the source. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA on forms, indicating a baseline security posture. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of a published security policy, incident response information, or vulnerability disclosure reduces transparency. The WHOIS data is notably missing, which is unusual for a professional entity and slightly impacts trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Molten Ventures' website is professional, secure, and compliant with privacy standards, serving its business and investor audiences effectively. The primary risk lies in the lack of WHOIS transparency and some missing security best practices, which should be addressed to enhance trust and security posture.

M

Molten Ventures

forwardpartners.com

71

Molten Ventures is a prominent European venture capital firm specializing in technology investments at Series A and beyond. The company positions itself as a forward-thinking investor backing visionary teams across sectors such as deeptech, consumer tech, healthcare, SaaS, and enterprise software. Their business model centers on active portfolio development and scaling support, distinguishing them from traditional VC firms tied to fixed investment cycles. The website reflects a mature market position with a professional and consistent brand presence, targeting startups seeking growth capital and investors interested in technology innovation. Technically, the website employs modern JavaScript libraries and analytics tools including Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Plausible Analytics, alongside a cookie consent management system. The site is well-optimized for mobile devices, features fast loading times, and includes SEO best practices such as meta tags and structured data. However, no specific CMS or hosting provider is explicitly identified. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA for form protection, demonstrating good baseline security hygiene. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates GDPR compliance. Nonetheless, the absence of explicit security headers, incident response contacts, and vulnerability disclosure policies suggests areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Molten Ventures' website presents a trustworthy and professional digital presence with strong business credibility. The lack of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the quality of content and transparency. Strategic recommendations include enhancing security header implementation, publishing incident response information, and maintaining ongoing audits of third-party scripts to mitigate potential risks.

V

Verein für Männer- und Geschlechterthemen Steiermark

maennerinfo.at

52

MÄNNERINFO is a non-profit crisis telephone counseling service for boys and men in Austria, operated by a consortium of men's counseling centers and organized by the Verein für Männer- und Geschlechterthemen Steiermark. The service offers anonymous, confidential, and free 24/7 telephone support, including multilingual interpreted counseling and chat services. The website is professionally designed using Drupal 10 and modern web technologies, providing good accessibility and multilingual content. Security posture is adequate with HTTPS and no visible vulnerabilities, though improvements are recommended in cookie consent and security policy transparency. Overall, the site demonstrates high trustworthiness and business credibility, supported by government funding and public endorsements.

Fenster zum Sonntag Talk is a Swiss Christian media website focused on TV talk shows broadcast on SRF channels. It provides viewers with insights into personal life stories and the role of faith. The site is professionally designed using WordPress and modern web technologies, with a consistent brand presence and good content quality. The technical infrastructure includes multiple analytics platforms and a cookie consent mechanism, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though some compliance areas like terms of service and incident response policies could be improved. Overall, the site is trustworthy and well-maintained, serving a general audience interested in religious and social topics.

E

ERF Medien

lifechannel.ch

56

Life Channel is a Swiss-based Christian media broadcaster offering 24/7 radio programming, podcasts, music streaming, and news content focused on faith and constructive journalism. The website is professionally designed with consistent branding and targets German-speaking Christian audiences. Technically, it is built on WordPress with modern libraries and frameworks such as UIkit and JW Player, and integrates multiple analytics platforms including Matomo, Plausible, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though advanced security headers and explicit security policies are absent. Overall, the site demonstrates good compliance with GDPR and provides clear privacy and cookie policies. The domain registration data aligns well with the website's claims, supporting legitimacy.

E

ERF Medien

radio-erf-plus.ch

51

ERF Medien Schweiz operates Radio ERF Plus, a Christian 24-hour radio station providing inspirational content for listeners in Switzerland. The website serves as a platform to promote the radio service, offer downloadable programming, newsletters, and facilitate donations to support broadcasting costs. The organization positions itself as a niche media provider focused on faith-based content with a clear target audience of Christian listeners. The business model is non-profit, relying on donations and community support. Technically, the website is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and multiple tracking protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a small media entity.

E

ERF Medien

erf-medien.ch

51

ERF Medien is a Swiss Christian media organization providing multimedia content including podcasts, articles, radio programs, and various services targeting a general audience interested in faith, society, and life questions. The website is professionally designed with consistent branding and offers a broad range of content and services, positioning it as an established player in the Swiss Christian media sector. Technically, the site is built on WordPress with modern frameworks like UIkit and integrates multiple analytics and marketing tools while maintaining GDPR compliance through a comprehensive cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is safe, trustworthy, and well-optimized for users, with clear navigation and good mobile responsiveness.

V

VBT - Vereinigung der Business Trainer Österreich

business-trainer.at

44

The Vereinigung der Business Trainer Österreich (VBT) is a professional association dedicated to business trainers in Austria, offering a platform for networking, professional development, and exclusive member benefits. The website reflects a well-established organization with a clear focus on education and community building within the business training sector. It maintains a strong market position by providing quality certifications, workshops, and cross-border membership advantages with the German BDVT. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner, ensuring good SEO and privacy compliance. The presence of Facebook Pixel and Plausible Analytics indicates moderate user tracking balanced with privacy considerations. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policy documentation is absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

D

DLRG DLRG-Jugend Bundesebene

dlrg-jugend.de

70

DLRG-Jugend Bundesebene is a German non-profit youth organization affiliated with the German Life Saving Association (DLRG). It focuses on youth engagement, education, and community activities related to water safety and youth development. The website serves as an information hub for events, campaigns, and volunteer opportunities targeted primarily at German-speaking youth and volunteers. The organization maintains a consistent brand presence and provides comprehensive contact and privacy information, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design frameworks such as Bootstrap and FontAwesome. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site incorporates GDPR-compliant cookie consent mechanisms and uses both Google Analytics and Plausible Analytics for visitor tracking, with user opt-in consent. From a security perspective, the site enforces HTTPS and employs cookie consent for analytics tracking, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture appropriate for a non-profit organization. The overall risk is low, with recommendations focusing on enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

P

Pageflow

pageflow.io

65

Pageflow is a Germany-based SaaS platform specializing in multimedia storytelling and digital publishing. It offers an intuitive cloud-based content management system that enables users to upload various digital formats and create interactive web stories with ease. The platform targets media professionals, journalists, and organizations seeking to deliver engaging multimedia content across devices. Pageflow has a solid market presence with notable clients and a reputation for quality digital journalism solutions. Technically, the website employs modern web technologies including Video.js, React-like frameworks, and privacy-focused analytics (Plausible). It is optimized for performance, accessibility, and SEO, with a responsive design ensuring excellent user experience on all devices. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent, and avoids exposing sensitive data, though explicit security headers and incident response contacts could be improved. Overall, the domain appears legitimate despite privacy-protected WHOIS data, consistent with industry norms for SaaS providers. The website scores highly on content quality, technical implementation, and security posture, making it a trustworthy and professional digital publishing solution.

S

Stiftung Stadt.Geschichte.Basel

stadtgeschichtebasel.ch

11

Stadt.Geschichte.Basel is a non-profit foundation focused on providing deep insights into the history of Basel through digital storytelling, research data platforms, and public engagement. The website serves a niche audience including history enthusiasts, students, and researchers by offering access to nine individual volumes and an overview volume of Basel's history, enriched with innovative data stories and a blog covering various historical epochs. The platform emphasizes open access to research data and collaborative dissemination through partnerships and events. Technically, the site is built on modern frameworks like SvelteKit, ensuring fast performance, mobile optimization, and good accessibility. The use of privacy-respecting analytics (Plausible) aligns with the foundation's educational mission. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of some security headers and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and well-aligned with its cultural and educational objectives.

S

Schweizer Agrarmedien AG

tierwelt.ch

66

TierWelt is a Swiss-based animal and nature magazine operated by Schweizer Agrarmedien AG, targeting readers interested in animals, nature, and environmental topics. The website offers rich editorial content, subscription services, classifieds, and e-paper access, positioning itself as a reputable media outlet in Switzerland. The business model combines content publishing with advertising and subscription revenue streams. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Flipster, and multiple analytics and advertising integrations. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, security headers, CAPTCHA protections, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

H

Hannover 96

hannover96.de

53

Hannover 96 operates an official website serving as the primary digital platform for the football club, providing fans with news, matchday information, video content, ticketing, and merchandise details. The site targets supporters and stakeholders interested in club activities and fan engagement. Technically, the website is built on TYPO3 CMS and integrates various modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. From a security perspective, the website enforces HTTPS and employs common tracking and advertising scripts. However, it lacks visible security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which could expose the organization to regulatory risks. No contact information or incident response details are published, limiting transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and policy disclosures. These improvements would strengthen user trust and regulatory adherence while maintaining the club's strong brand presence online.

T

Thurgau Tourismus

thurgau-bodensee.ch

60

Thurgau Tourismus operates a regional tourism website promoting the Thurgau and Bodensee region in Switzerland, focusing on nature experiences, culture, and family-friendly activities. The website provides travel tips, hotel recommendations, and leisure activity suggestions, targeting tourists and families interested in this Swiss region. The business model centers on tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on the Contao Open Source CMS with Bootstrap for styling and includes modern integrations such as Weglot for multilingual support, Cookiebot for GDPR-compliant cookie management, Plausible Analytics for privacy-friendly visitor tracking, and Google Tag Manager for marketing tags. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses a robust cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for regional tourism information. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.

Headspin AS is a Norwegian creative agency based in Trondheim, specializing in integrated communication services including strategy, campaign development, design, text production, 3D visualization, website and app development, and film production. The company targets businesses and organizations seeking comprehensive communication and branding solutions. The website reflects a professional and consistent brand image with a medium-sized team and a solid client portfolio. Technically, the site is built on WordPress with modern technologies such as Google Fonts, Google Maps API, and multiple analytics platforms including Matomo and Plausible, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with clear business information and certifications such as Miljøfyrtårn enhancing credibility.

B

Black Hole Experience

blackholeexperience.com

60

The Black Hole Experience website presents a mobile exhibition that combines the awe of nature and the cosmos with meditative reflection. The site is built using modern web technologies such as Next.js and React, and integrates privacy-conscious analytics via Plausible. While the website is accessible and professionally designed, it lacks publicly available WHOIS registration data, which raises some concerns about domain legitimacy. No direct contact information or detailed business credentials are provided, limiting business credibility assessment. Security posture is moderate with HTTPS enabled but missing key security headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site appears legitimate and focused on a niche experiential offering but would benefit from enhanced transparency and security hardening.

D

digicube AG

bienen.ch

58

bienen.ch is a comprehensive Swiss platform dedicated to providing high-quality, scientifically grounded information about honey and wild bees, beekeeping, and environmental issues. The platform is supported by organizations focused on improving bee health and habitats, offering educational resources, services, and a marketplace for beekeeping supplies. The website targets beekeepers, environmentalists, and the general public interested in bees within Switzerland. Technically, the site is built on a modern WordPress infrastructure with a rich plugin ecosystem, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and minimal user tracking via Plausible Analytics. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment between WHOIS data and business claims.

N

Norske Tog AS

norsketog.no

59

Norske Tog AS is a Norwegian state-owned enterprise responsible for procuring, owning, and managing passenger train vehicles in Norway. The company holds a key position in the national transportation sector, focusing on ensuring modern and efficient rolling stock for passenger rail services. Their website provides comprehensive information about their projects, train types, sustainability efforts, and investor relations, targeting both the general public and industry stakeholders. Technically, the website is well-implemented with modern JavaScript, SVG graphics, and privacy-focused analytics (Plausible). It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response information are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site projects professionalism and trustworthiness, though the lack of WHOIS data from the Norid registry is a notable gap requiring verification. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

R

Røroshotellene

roroshotellene.no

53

Røroshotellene is a hospitality business operating in Røros, Norway, offering hotel accommodations, local dining experiences, event hosting, and family-friendly activities. The website positions the company as a regional hospitality provider with a focus on authentic local experiences and tailored events. The digital infrastructure is modern, leveraging JavaScript, CSS, and privacy-respecting analytics (Plausible). The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and consistent business information support legitimacy. Overall, the site is well-suited for its target audience of tourists, business clients, and families seeking hospitality services in Røros.