Low-risk security reports

BPER Banca is a large Italian banking group offering a wide range of financial services including retail banking, corporate banking, wealth management, loans, mortgages, and digital banking services. The website targets private individuals, businesses, and wealth management clients, providing comprehensive product offerings and digital access points. The site is built on a modern technical infrastructure using Liferay CMS, React, and various JavaScript libraries, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though explicit security headers and published security policies are lacking. Privacy compliance is partially addressed with a cookie consent mechanism but no visible privacy policy or terms of service links in the main content. Overall, the website is professional, trustworthy, and well-positioned in the Italian banking sector.

BigRock is a leading Indian domain registration and web hosting provider offering a wide range of services including shared, VPS, dedicated, and cloud hosting, along with email hosting, website building, and online marketing solutions. The company has a strong market position in India, reinforced by its partnership with HostGator India, and targets small to medium businesses and entrepreneurs seeking affordable and reliable web presence solutions. Technically, the website is built on modern frameworks like Next.js and React, with extensive use of analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is fast, mobile-optimized, and well-structured, providing an excellent user experience. Security-wise, the site enforces HTTPS and uses SSL certificates, along with security products like SiteLock and CodeGuard, but lacks explicit published security policies and vulnerability disclosure information. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security transparency.

Lankeleisi-bikes.com is the official e-commerce website for Lankeleisi, a company specializing in dual motor electric bikes, including all-terrain, fat tire, and city commuter models. The site emphasizes a three-year warranty, positioning itself as a reliable brand in the electric bike market. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and ShipGuard for shipping protection services. Multilingual support is provided through TranslationLab, targeting a broad international audience. Technically, the site is well-structured with good SEO and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and domain status protections, but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site presents a professional and trustworthy front for its business, though it would benefit from enhanced transparency in privacy and security policies.

search.ch AG operates a leading Swiss local search engine and directory platform offering a wide range of services including phone directory, weather, maps, route planning, timetables, TV guides, cinema listings, and web search. The website targets Swiss residents and users seeking localized information, positioning itself as a comprehensive and trusted Swiss information hub. The business model centers on providing free access to local data supported by advertising revenue, with partnerships such as localsearch.ch enhancing its ecosystem. Technically, the site employs modern JavaScript libraries, advertising technologies, and analytics tools, delivering a good user experience with mobile optimization and multilingual support. Security posture is strong with HTTPS enforced and secure login forms, though formal security policies and incident response contacts are not publicly documented. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

modmore is a specialized technology company focused on developing premium and open source extras for the MODX Revolution CMS platform. Established in 2012 and based in the Netherlands, modmore serves a professional audience of web developers and agencies with high-quality software products, support services, and a remote site management platform called SiteDash. The company maintains a strong market position within the MODX ecosystem, supported by a loyal user base and active community engagement. Technically, the website is built on modern web standards with a robust tech stack including jQuery, Google Analytics, Disqus, and Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, modmore demonstrates a mature digital presence with professional branding, comprehensive content, and trustworthy business information.

Carcept Prev is a French social protection insurer specializing in the transport sector, offering health, retirement, and provident insurance solutions tailored to transport employees and companies. The website presents a professional and well-structured digital presence, leveraging Drupal CMS and modern web technologies to deliver a responsive and accessible user experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a trustworthy and credible business entity with a clear focus on its niche market.

DeinDeal AG operates a Swiss-focused e-commerce platform specializing in private sales offering discounts up to 70% on a wide range of products including apparel, cosmetics, home goods, and travel. The company targets consumers in Switzerland seeking branded products at discounted prices. The website demonstrates a mature digital infrastructure leveraging modern web frameworks such as Next.js and React, integrated with Prismic CMS for content management. Performance and error monitoring are implemented via New Relic, and bot protection is enforced using Google reCAPTCHA v3. The security posture is strong with HTTPS and Content Security Policy in place, although explicit security policy and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms active. Overall, the platform presents a professional and trustworthy online retail experience with extensive marketing and analytics integrations.

ARAG Allgemeine Versicherungs-AG is Germany's largest family-owned insurance company, offering a broad portfolio of insurance products including legal protection, health, liability, travel, home, pet, and commercial insurance. The website reflects a mature, well-established business with over 90 years of market presence and a strong customer base exceeding 12 million. The company emphasizes tailored insurance solutions and customer service accessibility through multiple channels including online portals, live chat, and local advisors. The site is professionally designed, mobile-optimized, and rich in content relevant to its target audience of private and commercial insurance customers in Germany. Technical infrastructure incorporates modern web technologies, consent management, and analytics tools, indicating a digitally mature organization. Security posture is strong with HTTPS, consent mechanisms, and reputable third-party integrations, though explicit security policies and vulnerability disclosure mechanisms are not publicly detailed. Overall, ARAG's website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its market leadership and customer trust.

Zammad.org is the community website for Zammad, an open source web-based help desk and ticketing system. The site provides downloads for multiple operating systems and promotes free self-hosted installation. The business model centers on open source community engagement with a sister commercial site (zammad.com) for extended offerings. The website is well-structured, with clear navigation and professional design, targeting organizations seeking open source support solutions. Technically, the site uses modern JavaScript libraries such as jQuery and Prism.js, and employs Matomo for privacy-focused analytics. The site is hosted under a reputable registrar and uses HTTPS with a clientTransferProhibited domain status, indicating good domain security practices. However, the site lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. No contact emails or phone numbers are listed on the homepage, which may impact user trust and support accessibility.

Keyweb AG is a well-established German technology company specializing in custom-built dedicated servers and hosting services. With over 20 years of experience and TÜV certification, the company offers high-performance, sustainable server solutions tailored to business needs. Their close partnership with Keymachine Server Manufaktur enables rapid and flexible server manufacturing, supporting a broad range of IT infrastructure and hosting services. The website reflects a professional and trustworthy business with clear contact channels and comprehensive service offerings. Technically, the site uses modern web technologies including Bootstrap and JavaScript, is mobile-optimized, and performs well. Security posture is strong with HTTPS, cookie consent, and secure forms, though explicit security policies and incident response contacts are not published. Overall, the domain and WHOIS data align with the company's history and legitimacy, supporting a high trust level.

JAXForms AG is a Swiss technology company specializing in digital form and workflow solutions, offering a range of services from simple forms to tailored complete solutions. The company positions itself as a competent partner for digital transformation projects, serving a business audience primarily in Switzerland. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including success stories and job postings, indicating active operations and growth. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is strong with HTTPS enforced and security headers present, though the absence of a dedicated security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its business clientele.

Promotion économique Valais is a regional government economic promotion entity serving entrepreneurs and businesses in the Valais region of Switzerland. The website provides information and services to support innovation, business development, and investment in the local economy. It targets SMEs, startups, investors, and external companies interested in establishing themselves in Valais. The site is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Multilingual support is provided for French, German, and English audiences. Technically, the site uses modern web technologies and enforces HTTPS, ensuring secure communications. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security hardening. The site uses Google Analytics with a cookie consent mechanism, reflecting basic GDPR compliance. Overall, the website is credible and trustworthy, aligned with its governmental role, but could enhance privacy and security policies to strengthen compliance and user confidence.

Finom is a fintech company founded in 2019, providing online business banking and financial management solutions tailored for SMEs, freelancers, and entrepreneurs across multiple European countries. The platform offers business accounts with local IBANs, cashback rewards, electronic invoicing, and accounting integrations, leveraging partnerships with licensed banks SolarisBank and Treezor. Finom positions itself as a fast, reliable, and secure financial platform with multilingual support and regulatory compliance under De Nederlandsche Bank (DNB). Technically, the website is built on modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, and optimized for mobile and SEO. The site employs TLS encryption and security best practices, including strong security headers and GDPR compliance. The user experience is professional, with clear navigation, comprehensive content, and trust signals like awards and customer reviews. Security posture is strong, with encrypted data transfers, no exposed sensitive information, and deposit insurance coverage. However, the site lacks a dedicated security policy and incident response contact details, which could enhance transparency and trust. Overall, the domain registration aligns well with the business claims, supporting legitimacy and credibility. The website is safe for general audiences, contains no adult or questionable content, and provides clear contact channels primarily via email and web forms. Strategic recommendations include publishing explicit security and incident response policies, enhancing vulnerability disclosure, and maintaining rigorous third-party script audits to sustain security and compliance.

ISNI International Agency (ISNI-IA) operates the ISO certified global standard for uniquely identifying contributors to creative works, serving a critical role in the media and creative industries. The organization maintains a large database of over 16 million identities, including individuals and organizations, facilitating accurate attribution and interoperability across multiple domains. Their business model centers on providing persistent identifiers to resolve name ambiguity and support linked data applications, positioning ISNI as a global authority in this niche. The website reflects a professional and consistent brand presence, targeting researchers, creators, publishers, and distributors worldwide.

FORS AG is a Swiss-based company specializing in the retail and professional supply of household and commercial appliances, with over 40 years of market presence. The website showcases a broad product range including cooling, cooking, washing, and professional equipment, supported by warranty and service offerings. The company targets both private consumers and professional clients, positioning itself as a trusted specialist in its sector. Technically, the website is built on WordPress with WooCommerce, leveraging modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and multiple tracking pixels. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility could be enhanced. Security posture is strong with HTTPS and security headers implemented, but lacks explicit privacy and cookie policies, which impacts compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Suva is a leading Swiss public institution specializing in accident prevention, insurance, and rehabilitation services. The organization serves a broad audience including employers and insured individuals across Switzerland, positioning itself as a key player in the national insurance and healthcare sector. The website reflects a mature digital presence with a clear focus on user experience and compliance with privacy regulations. Technically, the site leverages modern frameworks such as Angular, integrates reputable third-party services like Google Tag Manager and Cookiebot, and employs a Sitecore CMS backend, indicating a robust and scalable infrastructure. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and CSRF protections, although explicit security policies and incident response contacts are not publicly detailed. Overall, Suva's website demonstrates high professionalism, trustworthiness, and compliance, supporting its role as a major government-related insurance provider.

Toyota Schweiz operates as the official Swiss website for Toyota, providing comprehensive information about Toyota vehicles, especially hybrid models, targeting German-speaking customers in Switzerland. The site reflects a strong market position as part of the global Toyota brand, offering key services such as vehicle sales information, dealer location, and customer support. The technical infrastructure is modern and robust, leveraging Adobe Experience Manager as CMS, advanced analytics via Datadog and Google Tag Manager, and a compliant cookie consent mechanism through OneTrust. The website is well-optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security posture is strong with HTTPS enforcement, bot protection via hCaptcha, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and aligned with corporate standards, supporting Toyota's brand integrity in Switzerland.

The Bundesagentur für Arbeit website serves as the official digital portal for Germany's federal employment agency, providing comprehensive services including job search, unemployment benefits, career counseling, and support for families, people with disabilities, and immigrants. The site is well-positioned as a national government entity with a large enterprise scale, offering a broad range of public services to citizens and businesses alike. The content is professionally curated, accessible, and highly relevant to its target audience. Technically, the website employs modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The use of Matomo analytics reflects a commitment to privacy-conscious user tracking. The site is hosted on German infrastructure with secure HTTPS enforcement and demonstrates good SEO and accessibility practices. From a security perspective, the site benefits from ISO 27001 certification, indicating a mature information security management system. Security best practices are observed, including secure communication channels and cookie consent mechanisms. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing clear security incident response information, adding a security.txt file, and enhancing transparency around security contacts to further strengthen trust and security culture.

Hochschulen Fresenius GmbH is a large, well-established private higher education institution in Germany, founded in 1848. It offers a broad range of Bachelor and Master degree programs across multiple disciplines including Chemistry, Biology, Business, Media, Health, Social Sciences, and Fashion & Design. The university serves over 17,000 students with flexible study options including full-time, part-time, on-campus, and online formats. The website reflects a professional and modern digital presence, leveraging WordPress CMS, SEO best practices, and cookie consent management via Usercentrics. Hosting is provided by Adacor, with consistent DNS and SSL configurations ensuring secure access. However, explicit privacy and security policies are not readily visible, and security headers are not detected, indicating room for improvement in security posture. Overall, the website is trustworthy, well-branded, and compliant with basic GDPR cookie consent requirements.

IKEA Deutschland GmbH & Co. KG operates a comprehensive retail website offering affordable furniture and home accessories tailored for the German market. The site provides extensive product categories, planning services, and customer support, positioning IKEA as a leading furniture retailer in Germany. The website is well-branded, professionally designed, and optimized for mobile and accessibility, reflecting a mature digital presence. Technically, the site employs modern web technologies including JavaScript frameworks, cookie consent management via OneTrust, and A/B testing with Optimizely, ensuring a robust user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence and a consent mechanism. The absence of WHOIS data limits domain registration trust analysis, but the overall site quality and brand reputation strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

iocto GmbH is a German company specializing in industrial measurement technology and automation, established since 1984. The company positions itself as an expert in its field, targeting industrial clients requiring precise measurement and automation solutions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, indicating a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements such as enabling DNSSEC and publishing a security.txt file could enhance trust and compliance. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting iocto's market position as a reliable industrial technology provider.

König-Brauerei GmbH operates the König Pilsener brand, a well-established brewery in Germany under the Bitburger Braugruppe umbrella. The website showcases their beer products, brewery tours, and fan engagement activities, targeting adult consumers with responsible marketing including age verification. The digital infrastructure is modern, leveraging Next.js and React, with integrated consent management and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, supporting a medium-sized hospitality business.

Simpleview Europe is a specialized digital agency providing comprehensive tourism technology solutions including CMS, CRM, DMS, and digital marketing services. As part of Granicus, it holds a strong market position serving Destination Management Organisations and tourism boards across Europe. The website reflects a mature digital presence with modern technologies and extensive service offerings. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The technical infrastructure is robust with use of modern JavaScript frameworks and analytics tools, supporting good performance and user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

Göttingen Tourismus operates an official city tourism website providing comprehensive information on sightseeing, events, accommodations, and cultural offerings in Göttingen, Germany. The site targets tourists, families, and business visitors, positioning itself as the authoritative source for local tourism and city marketing. The business model focuses on destination promotion and visitor engagement through digital content and services such as city tours and newsletters. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO, mobile responsiveness, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and consent management. Security posture is solid with HTTPS and some best practices, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and well-maintained, serving its purpose effectively.

Amedia is the largest publisher of local newspapers in Norway, operating a broad portfolio including 92 local newspapers, Nettavisen, Nationen, multiple local websites, trade journals, and a local radio station. The company focuses on delivering high-quality journalism and local news coverage across the country, targeting Norwegian local media consumers and advertisers. The website reflects a professional media publishing business with a clear market position as a leading local media entity in Norway. Technically, the website is built on Joomla CMS with Yootheme UIkit framework, integrating modern web technologies such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It employs a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain registration insights, but the professional web presence and structured data support legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing performance and accessibility further.

The Niedersächsischer Turner-Bund (NTB) is a regional non-profit sports association based in Hannover, Germany, focused on promoting turn and related sports across Niedersachsen. It offers a broad range of services including educational programs, event organization, and support for member clubs and trainers. The website serves as a comprehensive portal for information, resources, and community engagement for its target audience of sports clubs, trainers, and enthusiasts. Technically, the site is built on TYPO3 CMS with legacy jQuery and integrates multiple third-party services for analytics, marketing, and social media. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism, reflecting GDPR adherence. Security posture is moderate with room for improvement in HTTP security headers and library updates. Overall, the site is professional, trustworthy, and well-suited for its community-oriented mission.

DLRG Bundesverband is Germany's largest voluntary water rescue organization, founded in 1913, with a mission to prevent drowning through education, rescue services, and volunteer engagement. The organization operates a comprehensive website powered by TYPO3 CMS, hosted on AWS infrastructure, and integrates multiple modern analytics and marketing tools such as Google Analytics, Meta Pixel, and Brevo. The website demonstrates strong digital maturity with excellent content quality, clear navigation, and mobile optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a dedicated security policy are absent. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

Nkom is the Norwegian Communications Authority responsible for ensuring robust, equitable, and future-oriented postal and electronic communication services across Norway. As a government regulatory body, it oversees frequency management, market regulation, security, and emergency preparedness in the telecommunications sector. The website reflects its authoritative role with comprehensive information, regulatory documents, and public resources targeted at Norwegian citizens, businesses, and communication providers. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, with Adobe Fonts integration and Fathom Analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. Security best practices such as HTTPS and cookie consent mechanisms are implemented, though some security headers could be enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published vulnerability disclosure policy and incident response contact details suggests room for improvement in transparency and readiness. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Nkom's website is a trustworthy, professional government portal with high content quality and technical maturity. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security posture.

NorSIS is a Norwegian non-profit organization dedicated to information security awareness and support, aiming to ensure a safe digital everyday life for all. The website positions NorSIS as a national center for information security, providing threat information, preventive advice, and assistance to victims of online crime. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Matomo analytics for privacy-conscious tracking, and Cookiebot for GDPR-compliant cookie consent. The security posture is solid with HTTPS enforced and privacy-friendly analytics, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its audience, with no blocking or WAF interference detected.

Direktesport is a Norwegian sports streaming platform operated under Amedia AS, a large media company in Norway. The website offers live sports broadcasts and sports-related content targeting Norwegian sports fans. It holds a strong market position as a leading sports streaming service in the country. The technical infrastructure is modern, leveraging React and Next.js frameworks, with integrations for analytics and user tracking via Google Tag Manager and Mouseflow. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed through links to comprehensive privacy and cookie policies managed by the parent company. Overall, the site is trustworthy, professional, and safe for general audiences.

aID.no is an identity management solution provided by the Norwegian media conglomerate Amedia. It serves as a centralized login and user profile platform used by over 100 Norwegian newspapers, facilitating seamless authentication and user data management across multiple media outlets. The service targets Norwegian media consumers and subscribers, offering features such as mobile number and password management, and supports modern authentication methods like WebAuthn for enhanced security. Technically, the website employs modern JavaScript frameworks including Svelte and uses ES modules with a Vite build system. It integrates advanced authentication protocols such as WebAuthn, indicating a mature and security-conscious technical infrastructure. The site is mobile-optimized and demonstrates good performance and SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and integrates passwordless login mechanisms, which are strong security indicators. However, explicit security headers are not evident, and there is no visible cookie consent mechanism, which may pose compliance risks. The absence of WHOIS data due to privacy protection limits transparency but is justified given the business nature. No critical vulnerabilities or exposed sensitive data were detected. Overall, aID.no presents a professional and trustworthy identity solution within the Norwegian media sector. Strategic recommendations include implementing explicit security headers, adding cookie consent mechanisms to enhance GDPR compliance, and publishing detailed security and incident response policies to improve transparency and user trust.

User.com is a comprehensive marketing automation platform designed to help businesses streamline their marketing, sales, and customer support processes. Positioned as an all-in-one SaaS solution, it offers a wide range of tools including customer data platforms, personalization engines, no-code automation builders, analytics, loyalty programs, and multi-channel communication channels such as email, SMS, WhatsApp, and live chat. The platform targets marketing, sales, support, and product teams across various industries including SaaS, e-commerce, education, finance, healthcare, and real estate. User.com is part of the Positive Group and operates primarily from France. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and uses AWS Cloudfront CDN for hosting and performance optimization. The site is well-optimized for mobile devices, features good accessibility and SEO practices, and integrates cookie consent mechanisms compliant with GDPR. The presence of multiple language versions and extensive product documentation indicates a mature digital infrastructure. From a security perspective, User.com enforces HTTPS, provides a dedicated security overview page, and claims regular penetration testing and audits. While explicit security headers are not fully visible in the HTML, the overall posture is strong with GDPR compliance and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which slightly reduces trust but is common for privacy reasons. Overall, User.com presents a professional, trustworthy, and technically sound platform with strong business credibility and compliance focus. Strategic recommendations include enhancing transparency on incident response, publishing security.txt, and reinforcing security headers to further improve trust and security posture.

HBF Furniture is a premium manufacturer specializing in contract office seating, tables, and hospitality furniture, with a strong legacy and market presence supported by its parent company, HNI Corporation. The website is built on a modern Drupal 10 CMS platform, leveraging contemporary web technologies and third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional branding and external domain relationships. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving transparency around domain registration.

Wetteralarm.ch is a Swiss-focused weather application providing free weather forecasts, precipitation radar, severe weather warnings, and access to over 500 live webcams. The service targets the general public in Switzerland, offering multilingual support and mobile app availability for iOS and Android. The website demonstrates a professional digital presence with consistent branding and good content quality. Technically, it employs modern JavaScript libraries, Adobe analytics, and Cookiebot for consent management, hosted likely on a CDN for performance. Security posture is solid with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and well-positioned in its niche.

Hausinfo.ch is a Swiss-based advisory website operated by GVB Services AG, providing neutral guidance around house and garden topics, primarily targeting homeowners and property owners in Switzerland. The site is positioned as a service linked to the Swiss Homeowners Association, offering insurance-related advice and consultation services. The business model focuses on providing informational content and facilitating insurance and property management services through digital forms and advisory tools. The website demonstrates a consistent brand presence and targets a niche market segment effectively. Technically, the website employs modern web technologies including JavaScript, Adobe Experience Platform Launch for tag management, and Cookiebot for cookie consent management. The hosting appears to be managed or supported by GVB's CDN infrastructure. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, hausinfo.ch presents a trustworthy and professional online presence with good privacy compliance and security posture. Strategic recommendations include publishing detailed security and incident response policies, adding a terms of service page, enhancing accessibility, and maintaining vigilance on third-party scripts. These steps will further strengthen the site's security and compliance maturity.

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

Mailgun is a leading transactional email API service provider targeting developers and businesses that require reliable, scalable email delivery solutions. The company offers a comprehensive suite of email services including sending, validation, optimization, and testing, positioning itself strongly in the technology sector with a large enterprise customer base including major tech companies. The website demonstrates a mature technical infrastructure built on WordPress with modern performance and SEO optimizations, ensuring excellent user experience and accessibility. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and a dedicated security portal, although WHOIS data is unavailable which slightly impacts trust but is mitigated by the company's known parent entity, Sinch. Overall, Mailgun presents a professional, trustworthy, and technically sound platform for transactional email services.

teuto.net Netzdienste GmbH is a German-based IT service provider specializing in Kubernetes, cloud, and hosting solutions. Founded in 1996, the company offers a broad portfolio including managed Kubernetes, bare-metal hosting, private and public cloud services, consulting, and data science platforms. Their market position is that of a specialized regional provider with a strong focus on modern container orchestration and cloud infrastructure technologies. The website reflects a professional and consistent brand image targeting businesses and IT professionals seeking advanced infrastructure solutions. Technically, the website is built on WordPress with the Divi theme, leveraging modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Hosting and DNS are managed via InterNetX GmbH and Cloudflare respectively, ensuring good performance and security. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. While security headers are not explicitly detected, the site uses reCAPTCHA and cookie consent mechanisms, indicating awareness of security and privacy best practices. No critical vulnerabilities or exposed sensitive data were found. However, enabling DNSSEC and additional security headers would enhance the security posture. Overall, the website and domain demonstrate a high level of trustworthiness and professionalism. The business is compliant with GDPR, provides clear contact information, and maintains transparency in domain registration. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing DNS security, publishing a formal security policy, and continuous monitoring of third-party components.

TwentyThree is a leading European video software company specializing in a comprehensive video marketing platform designed for businesses to leverage video content across customer journeys. The company positions itself as a pioneer with a full suite of video tools including webinars, video libraries, and personal video capabilities, targeting medium-sized to large enterprises primarily in the technology sector. The website reflects a mature digital presence with modern infrastructure, leveraging HubSpot CMS, Amazon Cloudfront hosting, and advanced analytics tools such as Google Analytics and Google Tag Manager. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional branding. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration data corroborates the business legitimacy and history, supporting a high trust level.

Galliker Transport AG is a well-established Swiss transport and logistics company offering a wide range of national and international services including car, cargo, food, frigo, and healthcare logistics. The company positions itself as a market leader in food logistics within Switzerland and operates a large fleet and multiple locations across several countries. The website reflects a mature digital presence with multi-language support and comprehensive service descriptions. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, integrated with a responsive design and good SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policy and incident response information are not published. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, but the professional website and business information mitigate this risk. Overall, the site is trustworthy and professionally managed, serving a B2B audience in the transportation sector.

VBL AG is a well-established public transportation company serving the Luzern region in Switzerland for over 125 years. The company operates bus and trolleybus services and is a regional leader in mobility solutions. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and reCAPTCHA to enhance analytics and security. The site is professionally designed with good user experience and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and anti-bot measures, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the company's identity, supporting legitimacy and trustworthiness.

Holidu.com.mx is a localized vacation rental platform operated by Holidu GmbH, offering a wide range of verified holiday homes, apartments, and rural houses primarily targeting families and pet owners in Mexico and Europe. The platform emphasizes quality, trust, and convenience with features like free cancellation and star host badges. Technically, the website employs modern web technologies including React, Tailwind CSS, and integrates multiple analytics and advertising services such as Google Analytics, Facebook Connect, and Taboola. The site is mobile-optimized and provides a seamless user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit public security policies or incident response information. Privacy compliance is strong with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website is trustworthy, professional, and well-positioned in the vacation rental market.

Holidu GmbH operates a professional online vacation rental platform targeting European and Canadian markets. The website offers a comprehensive selection of verified vacation homes, apartments, villas, and cottages, catering to families, pet owners, and general travelers. The platform emphasizes user trust through free cancellation policies, star host badges, and high user ratings. Technically, the site uses modern web technologies including React, integrates multiple analytics and advertising services, and provides a mobile app for enhanced user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the website presents a trustworthy and mature digital presence suitable for its business domain.

Holidu GmbH operates a professional online vacation rental platform specializing in holiday homes, villas, and apartments primarily across Europe. The website offers a comprehensive search and booking experience targeting families, pet owners, and travelers seeking quality vacation accommodations. The platform is well-positioned in the European hospitality market with a strong brand presence and multiple localized sister sites. Technically, the site uses modern JavaScript frameworks and integrates various analytics and marketing tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though some enhancements like CSP and HSTS could improve resilience. Privacy compliance is well addressed with clear cookie and privacy policies, reflecting GDPR adherence. The absence of WHOIS data limits full domain trust analysis, but the overall professionalism and content quality suggest a legitimate and trustworthy business. Strategic recommendations include enhancing security headers, expanding contact transparency, and continuous monitoring of third-party scripts for vulnerabilities.

Holidu GmbH operates a professional and well-established online vacation rental platform specializing in holiday homes and apartments across Europe. The website offers a comprehensive search and booking experience with a strong emphasis on family-friendly and pet-friendly accommodations. The platform is positioned as a trusted specialist in the European vacation rental market, providing verified listings and flexible booking options such as free cancellation. Technically, the website employs modern web technologies including React, uses advanced fingerprinting for user identification, and integrates multiple analytics and advertising services. The site is well-optimized for mobile devices and SEO, ensuring a smooth user experience. Security-wise, the site enforces HTTPS, implements standard security headers, and provides cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR.

Renault Trucks Norge operates as a key player in the Norwegian transportation sector, offering a comprehensive range of transport solutions including new trucks, electric vehicles under the E-Tech brand, and commercial vans. The company is a subsidiary of the global Renault Trucks brand, positioning itself as a trusted provider for transport professionals in Norway. The website reflects a professional and consistent brand image, targeting industry professionals and businesses requiring commercial vehicles and transport solutions. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Google Tag Manager, Matomo Analytics, and HubSpot for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Cookie consent mechanisms are implemented, indicating attention to privacy compliance. From a security perspective, while HTTPS is implied and cookie consent is present, there is a lack of visible security headers and no explicit security or incident response policies found on the site. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trustworthiness. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a form. Overall, the website presents a solid business presence with good content quality and marketing maturity but would benefit from enhanced security practices and improved transparency in domain registration and contact information.

Norske arkitekters landsforbund (NAL) is a well-established Norwegian non-profit professional association for architects, founded in 2001. The organization focuses on promoting good architecture and representing architects' common interests in Norway. Their services include membership benefits, professional courses, architecture competitions, publications, and political advocacy. The website reflects a mature digital presence with clear navigation, relevant content, and active engagement with its target audience of architecture professionals and students in Norway. Technically, the site uses modern JavaScript libraries, a consent management platform (Usercentrics), Google Analytics, and Google reCAPTCHA to secure forms and comply with privacy regulations. The CMS is Umbraco, indicating a professional content management approach. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

XLENT Norge is a Norwegian IT consulting company specializing in technology leadership, solution architecture, system development, CRM, and digital strategy. It operates as part of the XLENT Consulting Group with a combined workforce of 550 employees across Norway and Sweden. The company targets Norwegian IT sector clients and professionals seeking career opportunities in IT consulting. Their website reflects a professional and consistent brand image with clear service offerings and a focus on digital transformation and cybersecurity. Technically, the website employs modern JavaScript technologies, Matomo analytics, and cookie consent mechanisms, hosted likely behind Cloudflare infrastructure. Security posture is strong with HTTPS and cookie consent but lacks explicit security headers and published security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the website is trustworthy, well-designed, and serves as a credible digital presence for the company.

ArchDaily is a globally recognized architecture media platform headquartered in Santiago, Chile, providing architecture news, project showcases, and competitions for professionals and enthusiasts worldwide. The website demonstrates a mature digital presence with modern web technologies, including JavaScript frameworks, Google Analytics, and consent management tools, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, although explicit security policies and incident response details are not publicly disclosed. Overall, ArchDaily presents a professional, trustworthy platform with comprehensive content and good privacy compliance, though improvements in transparency around security and data protection could enhance trust further.

Gleeds is a global property and construction consultancy with a long-standing history dating back to 1875. The company offers a broad range of consultancy services focused on the built environment, targeting clients in the real estate and construction sectors. The website reflects a professional brand image with consistent messaging and a clear focus on their industry expertise. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Accessibility features are supported via the UserWay widget, enhancing usability for users with disabilities. Security posture is generally good with HTTPS enforced and anti-forgery cookies in use; however, explicit security headers are not clearly detected and no public security or incident response policies are found. The domain WHOIS data is missing or protected, which reduces trustworthiness from a registration transparency perspective. Cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and secure but would benefit from improved transparency in domain registration and explicit privacy and security policy disclosures.