Security Directory

Z

Zahnärztliche Mitteilungen

zm-online.de

69

zm-online.de is a German-language news portal specializing in dental medicine and healthcare news. It serves dental professionals and stakeholders with up-to-date articles, continuing education, job listings, and market information. The site is powered by TYPO3 CMS and integrates modern web technologies including Google Analytics and Traffective advertising. The website demonstrates a good level of technical maturity with mobile optimization, SEO best practices, and privacy consent mechanisms in place. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

K

Kassenzahnärztliche Bundesvereinigung (KZBV)

zaehnezeigen.info

56

The website www.zaehnezeigen.info is a professional campaign platform operated by the Kassenzahnärztliche Bundesvereinigung (KZBV) and associated regional dental associations in Germany. It focuses on advocating for improved dental healthcare policies, emphasizing prevention, reduced bureaucracy, better digital infrastructure, and reliable financing for dental practices. The site targets patients, dental professionals, and policymakers, aiming to raise awareness and support for sustainable dental care. Technically, the site is built on TYPO3 CMS with modern web technologies and includes cookie consent management and Google Tag Manager for analytics. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or explicit incident response contacts. WHOIS data is unavailable due to privacy protections, but the site’s branding and external references strongly support its legitimacy. Overall, the site is well-designed, content-rich, and trustworthy, serving as an important advocacy tool in the German dental healthcare sector.

D

Deutscher Verkehrssicherheitsrat

dvr.de

55

The Deutscher Verkehrssicherheitsrat (DVR) is a leading independent German organization dedicated to road traffic safety. The website serves as an authoritative platform providing information on traffic safety topics, prevention campaigns, policy advocacy, and training programs. It targets the general public, policymakers, and traffic safety professionals, positioning itself as a key competence center in the transportation safety sector. The business model is non-profit, focusing on education, advocacy, and safety improvements.

A

AGROLA AG

agrola.ch

53

AGROLA AG is a Swiss energy and mobility company providing a broad range of products and services including heating oil, wood pellets, electricity, electromobility charging solutions, and solar energy systems. The company targets both residential and commercial customers within Switzerland, positioning itself as a reliable regional partner in energy and mobility sectors. The website reflects a mature digital presence with clear navigation, professional design, and multilingual support (German and French). Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a moderate to advanced digital infrastructure. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is partially met with a comprehensive privacy policy available, but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

fenaco Genossenschaft

fenaco.ch

53

fenaco Genossenschaft is a large Swiss agricultural cooperative with a 150-year history, serving over 40,000 members including active Swiss farmers. The organization operates across multiple sectors including agriculture, food industry, retail, and energy, with well-known subsidiary brands such as UFA, RAMSEIER, Volg, LANDI, and AGROLA. The website reflects a mature digital presence built on Drupal 11, featuring comprehensive content, multimedia, and multilingual support. It demonstrates good technical infrastructure with modern tracking and marketing tools integrated, including Facebook Pixel and Google Tag Manager. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not clearly published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional and consistent branding and content. Overall, fenaco's website is a trustworthy and well-maintained digital asset supporting its cooperative business model and stakeholder engagement.

S

Statsforvalteren

fylkesmannen.no

66

Statsforvalteren.no is the official website of the Norwegian government agency representing the state at the county level. The agency is responsible for implementing decisions, goals, and guidelines from the Norwegian Parliament and government, acting as a vital link between municipalities and central authorities. The website provides access to public services, complaint handling, forms, news, and job postings relevant to the agency's functions. It targets Norwegian citizens, public sector employees, and municipalities, offering content primarily in Norwegian with language options including English and regional languages. Technically, the website employs modern web technologies including Bootstrap for responsive design, JavaScript libraries, and integrates analytics tools such as Azure Application Insights, Hotjar, Maze Analytics, and Siteimprove Analytics. The site is served over HTTPS with good mobile optimization and accessibility features, though explicit security headers are not evident. The site lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. From a security perspective, the site demonstrates a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a published security or incident response policy are areas for improvement. The WHOIS data is unavailable due to Norid's privacy policies, but the domain's .no TLD and consistent government-related content strongly indicate legitimacy and trustworthiness. Overall, Statsforvalteren.no is a professionally maintained government website with good content quality and technical implementation. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding security headers to strengthen the security posture and user trust.

Jobbnorge.no is a Norwegian online recruitment platform focused on connecting job seekers with employers across Norway. The website offers job search functionality and recruitment tools, positioning itself as an important player in the Norwegian recruitment market. The platform targets both job seekers and employers, providing a streamlined experience for finding and posting jobs. The business model revolves around providing digital recruitment services and tools to facilitate hiring processes. Technically, the website employs modern technologies including ASP.NET, Matomo analytics, and Cloudflare for hosting and security. It features a comprehensive cookie consent mechanism compliant with GDPR, enhancing user privacy and transparency. Security posture is strong with HTTPS enforced and device fingerprinting used for security purposes, although some security headers could be improved. Overall, the website is professional, well-branded, and trustworthy, with good mobile optimization and accessibility. However, the lack of publicly available WHOIS data slightly reduces trust but is likely due to privacy protection. Strategic recommendations include publishing a privacy policy page, terms of service, and a vulnerability disclosure policy to further enhance compliance and trust.

A

Altinn

altinn.no

59

Altinn is a well-established Norwegian government digital platform that facilitates communication between citizens, businesses, and public authorities. It offers access to digital forms, message inboxes, and relevant public information, serving as a critical infrastructure for public sector digital services in Norway. The platform targets Norwegian citizens and businesses, providing a trusted and accessible interface for government interactions. Technically, the website employs modern web technologies including JavaScript, jQuery, and Microsoft Application Insights for telemetry and analytics. The site is hosted on Microsoft Azure infrastructure, ensuring reliable performance and scalability. The design is responsive and accessible, with good SEO and navigation clarity, supporting a positive user experience. From a security perspective, the site enforces HTTPS and uses telemetry to monitor performance and errors. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data limits domain registration trust analysis, but the official government branding and consistent content strongly support legitimacy. Overall, Altinn demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic improvements in security headers, privacy consent, and public security policies would further strengthen its security posture and compliance standing.

D

Datawrapper GmbH

datawrapper.de

61

Datawrapper GmbH operates a professional SaaS platform focused on enabling users to create interactive and responsive data visualizations such as charts, maps, and tables without coding. The company serves a broad audience including media organizations, enterprises, and public service entities, with a strong market position evidenced by notable clients like the UN and New York Times. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern performance optimizations and privacy-conscious analytics (Matomo). Security posture is strong with HTTPS enforced and privacy policies clearly presented, though some security headers could be improved. Overall, the domain registration and hosting setup are consistent and trustworthy. The site demonstrates good compliance with GDPR and cookie consent requirements, supporting a high level of business credibility.

V

Volvo Car Switzerland

volvocars-news.ch

51

Volvo Cars News Switzerland operates as an official or semi-official digital platform providing news, model information, and event updates related to Volvo Cars in Switzerland. The website targets automotive enthusiasts and customers interested in Volvo's innovations and sustainable mobility solutions. The business is positioned as a trusted source within the transportation sector, leveraging Volvo's brand and parent company association. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO and Elementor Pro, ensuring good SEO and content management capabilities. The site is mobile optimized and uses HTTPS with a good SSL configuration, though some security headers are not explicitly detected. The security posture is solid but could be improved by adding explicit security policies and cookie consent mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but should enhance privacy and security transparency to meet higher compliance standards.

P

Pinterest

pinterest.dk

74

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Danish localized site (dk.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising-based business model, leveraging user engagement to deliver targeted ads. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks like React, advanced security measures including HTTPS and Content Security Policy, and integrations with reputable third-party services for advertising and fraud prevention. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for a broad audience.

K

Knipp Medien und Kommunikation GmbH

irondns.net

67

ironDNS® is a specialized DNS service provider operated by Knipp Medien und Kommunikation GmbH, established in 2009 in Germany. The company focuses on delivering secure and compliant DNS infrastructure services to corporates, registrars, and registries. Their offerings include DNS provisioning APIs (SOAP and REST), control panel access, DNSSEC support, and advanced DNS features such as Zone Lock and ANAME records. The website reflects a professional and consistent brand presence with clear navigation and relevant business content.

B

Bank für Kirche und Diakonie eG

kd-onlinespende.de

52

KD-onlineSpende is a donation portal operated by the Bank für Kirche und Diakonie eG, targeting nonprofit organizations and donors primarily in Germany. The platform facilitates online donations for charitable projects, providing an intuitive and cost-effective service for its users. The website is professionally designed, with clear navigation and relevant content focused on donation projects and institutional registration. Technically, the site is built on the Contao CMS and uses modern JavaScript libraries such as jQuery and Modernizr, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. The site does not employ advertising or extensive tracking, aligning with its nonprofit focus.

G

Gatsby

gatsbyjs.com

68

Gatsby is a leading React-based open source framework designed for building performant, scalable, and secure websites and applications. It targets developers and enterprises seeking fast web development with modern technologies such as React and GraphQL. The company is positioned strongly in the web development ecosystem, supported by its parent company Netlify, which provides deployment and hosting services. The website reflects a mature digital presence with excellent design, mobile optimization, and SEO practices. Technically, Gatsby leverages modern JavaScript frameworks and integrates with reputable platforms, ensuring a robust infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website and business demonstrate high professionalism and trustworthiness, though WHOIS data is unavailable likely due to privacy protection, which slightly impacts business credibility scoring.

M

Milka

milka.com

66

Milka.com is the official website for the Milka brand, a well-known confectionery company specializing in chocolate products. The site targets German-speaking consumers, offering product information, promotions, and community engagement. The website is built using modern web technologies such as React and Gatsby, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforced and standard security headers present, though no explicit incident response or vulnerability disclosure policies are found. The absence of WHOIS data is unusual but the website's professional presentation and brand consistency support its legitimacy. Overall, the site is well-constructed, secure, and user-friendly, though improvements in transparency and contact information could enhance trust.

F

fit4future foundation Germany

fit4future-foundation.de

49

fit4future foundation Germany is a Munich-based non-profit organization dedicated to promoting health and environmental sustainability among children and youth. Their focus lies in educating about the intersection of climate change and health, supporting school projects, and running tree planting donation campaigns. The foundation targets schools, educators, and environmentally conscious individuals in Germany, positioning itself as a niche player in the non-profit sector focused on future generations' well-being. Technically, the website employs modern web technologies including Vue.js for frontend rendering, Google Tag Manager for analytics, and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized with good navigation and content quality, though no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a privacy policy and cookie banner, but terms of service and vulnerability disclosure mechanisms are absent. Overall, the website is trustworthy and professional with a strong focus on its mission. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance to strengthen the security posture and user trust.

S

Stiftung Deutsche Sporthilfe

sporthilfe.de

54

Stiftung Deutsche Sporthilfe is a well-established non-profit organization dedicated to supporting young and elite athletes in Germany. With a history dating back to 1967, it plays a pivotal role in private sports funding, contributing significantly to Germany's international sports successes. The website reflects a professional and comprehensive presentation of their services, partnerships, and events, targeting donors, sponsors, and sports enthusiasts. Technically, the site is built on TYPO3 CMS with modern integrations such as Google Tag Manager, reCAPTCHA, and consent management, ensuring a good digital maturity level. Security posture is strong with HTTPS, secure forms, and privacy compliance, though explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy, well-branded, and provides a positive user experience with clear navigation and rich content.

The domain postmansubs.com is registered since 2018 with a reputable registrar and has a valid registration status. However, the website content is currently inaccessible, returning a 404 Not Found error page with no meaningful content, metadata, or business information. There are no privacy, cookie, or terms of service policies, nor any contact information or forms available. The technical infrastructure appears minimal with no detected scripts, analytics, or tracking technologies. Security posture cannot be assessed due to lack of HTTPS information and security headers. Overall, the website is non-operational and lacks any digital maturity or business presence.

U

urbanista.ch

urbanista.ch

64

urbanista.ch is a Swiss-based consulting firm specializing in urban planning, mobility, and spatial transformation strategies. The company supports complex planning processes and develops strategies that integrate space, mobility, and human factors. Their market position is that of a niche expert in regional urban and mobility planning, with a focus on sustainable and participatory development. The website is built on WordPress with Elementor and Yoast SEO, reflecting a modern and professional digital presence. Security posture is good with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies. The site is accessible without WAF or blocking mechanisms, and social media presence on LinkedIn and Facebook supports credibility. Overall, the website is professional and trustworthy but could improve privacy compliance and security disclosures.

I

Imbach Logistik AG

imbach-logistik.ch

71

Imbach Logistik AG is a Swiss-based logistics and transport company specializing in cargo, bottle, and event logistics. The company operates with approximately 340 employees and a fleet of 70 trucks, emphasizing innovative and sustainable transport solutions. It is part of the Galliker Group, which enhances its market position and operational capabilities. The website reflects a professional and modern digital presence, with clear service offerings and strong branding consistency. Technical infrastructure includes modern web technologies such as Google Tag Manager, Google Analytics, and a cookie consent framework, supporting compliance and user experience. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers and explicit security policies are missing. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

X

XLENT Sverige

xlent.se

64

XLENT Sverige is a Swedish IT consulting company specializing in digital transformation, AI readiness, cybersecurity, CRM systems, and sustainability reporting. The company positions itself as a trusted partner for organizations undergoing change, offering a broad range of consulting services with local expertise across multiple Swedish offices. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their offerings and corporate culture. Technically, the site uses modern web technologies including Google Tag Manager and CookieTractor for cookie consent management, and it employs HTTPS with good SSL configuration. Security best practices are partially implemented, with room for improvement in security headers and incident response transparency. Privacy compliance is strong, with detailed cookie policies and GDPR-aligned consent mechanisms. Overall, the website reflects a credible and established business with a strong digital presence and good user experience.

O

Online Now! GmbH

online-now.de

10

Online Now! GmbH is a specialized digital agency based in Berlin, Germany, focusing on TYPO3 CMS development, responsive web design, and social media integration. The company positions itself as a certified TYPO3 integrator with a strong portfolio of reference projects, offering end-to-end services including consulting, design, programming, hosting, and support. Their target audience primarily consists of businesses and organizations seeking professional web solutions with a focus on usability and mobile optimization. Technically, the website is built on TYPO3 CMS with PHP and JavaScript technologies, incorporating modern libraries such as jQuery and bxSlider for UI components. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. Analytics are implemented via Google Analytics and Matomo, with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs cookie consent banners to comply with GDPR. However, explicit HTTP security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website and domain exhibit a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration is consistent with the business, though registrant details are protected per DENIC policy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Gesellschaft zur Förderung des Deutschen Baugewerbes mbH operates as a promoter of the German construction industry, based in Berlin. The company targets stakeholders within the construction sector in Germany, offering industry promotion services. The website is currently under construction and provides basic contact and company information. Technically, the website is minimalistic with no advanced frameworks or CMS detected, hosted on servers associated with online-now.de. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and establishing trust. Privacy compliance is limited to a basic privacy policy PDF without cookie consent mechanisms. Overall, the security posture is weak, with no incident response or vulnerability disclosure information available. The business credibility is moderate due to clear company information but limited online presence and content quality. Strategic improvements in security, privacy compliance, and website content are recommended to enhance trust and operational maturity.

T

Timber Construction Europe

timber-construction.eu

43

Timber Construction Europe is a well-established European umbrella association representing the carpentry and timber construction trades across multiple countries including Germany, Italy, Luxembourg, Switzerland, and Austria. The organization focuses on networking, education, advocacy, and promoting sustainable timber construction practices. The website is professionally designed using TYPO3 CMS, providing multilingual content primarily in German with English and French options. It offers clear navigation, relevant industry information, and educational resources, targeting professionals and organizations in the timber construction sector. Technically, the website employs a modern CMS platform with JavaScript and CSS for interactivity and styling. It uses HTTPS with a valid SSL configuration ensuring secure communications. The presence of a cookie consent banner and privacy policy indicates GDPR compliance. Analytics are implemented via Piwik, reflecting moderate user tracking with privacy considerations. However, no explicit security headers were detected, and no published security or incident response policies were found. From a security perspective, the site shows good baseline practices such as HTTPS enforcement and cookie consent but could improve by implementing additional security headers and publishing incident response information. The WHOIS data is unavailable due to EURid privacy restrictions, but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and professional digital presence for a non-profit industry association. Strategically, the organization should enhance its security posture by adding security headers, publishing security policies, and maintaining transparency about data protection officers and incident response. These steps will strengthen trust and compliance in the evolving regulatory landscape.

E

Ege Carpets

egecarpets.com

10

Ege Carpets is a Denmark-based company specializing in designing and manufacturing high-quality carpets for commercial use, including wall-to-wall carpets, carpet tiles, planks, and rugs. The company emphasizes sustainability and innovative design, targeting commercial sectors such as hospitality, office, retail, healthcare, and marine industries. Their website showcases rich multimedia content, custom design tools, and a strong sustainability agenda, positioning them as a reputable player in the commercial carpet market. Technically, the website employs modern JavaScript libraries, video integrations, and cookie consent management, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent but lacks some advanced security headers and published security policies. WHOIS data is unavailable, which raises some legitimacy concerns, but the presence of detailed contact information and social media presence supports business credibility. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in security transparency and domain registration clarity.

D

Designers’ Saturday

designerssaturday.no

63

Designers’ Saturday is a Norwegian event organization specializing in showcasing design news in furniture, textiles, lighting, flooring, interior, and furnishing products. Positioned as Norway's only dedicated design exhibition platform, it targets design professionals, exhibitors, and enthusiasts primarily in Oslo and the surrounding region. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as htmx, Google Tag Manager, and AWS S3 for media hosting, and is built on Craft CMS. The site is well-optimized for mobile and SEO, with clear navigation and rich multimedia content. From a security perspective, the website employs HTTPS with strong SSL configuration and includes security best practices such as CSRF tokens in forms. However, it lacks explicit cookie consent mechanisms and published security or incident response policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is common for event organizations but reduces transparency. Overall, the site demonstrates a high level of professionalism and trustworthiness with moderate privacy compliance. Strategically, the organization should focus on enhancing privacy compliance by implementing cookie consent banners, publishing terms of service, and providing clear security incident contact channels. These steps will strengthen user trust and regulatory adherence. The technical infrastructure is robust, but ongoing audits of third-party scripts and security policies are recommended to maintain a strong security posture.

V

Vieser Norge

vieser.no

58

Vieser Norge is a regional branch of a Finnish manufacturer specializing in floor drains since 1973. The website targets Norwegian customers and professionals interested in modern floor drainage solutions. The company maintains a consistent brand presence with regional partner sites in Finland, Estonia, and Sweden. Technically, the site is built on WordPress with WooCommerce and uses modern technologies such as Bootstrap and jQuery, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent banner and links to detailed privacy policies. However, the site lacks visible contact information and formal security or incident response policies, which could be enhanced to improve trust and compliance. Overall, the website is professional, secure, and compliant, serving its business purpose effectively.

A

AXOR

axor-design.com

72

AXOR is a premium luxury brand specializing in avant-garde design for bathrooms and kitchens, collaborating with leading designers to offer high-end mixers, showers, and fixtures. The website targets discerning consumers and design professionals seeking luxury bathroom and kitchen products. The business operates primarily in the retail sector with a B2C and partner network model, positioning itself strongly in the luxury market segment. The website content is professionally presented, multilingual, and consistent with the brand's premium image. Technically, the website leverages a modern technology stack including SAP Hybris as the CMS, advanced analytics platforms such as Google Analytics, Piwik PRO, New Relic, and Visual Website Optimizer, and integrates a comprehensive GDPR-compliant consent management system. The site is well-optimized for performance and mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not visible in the HTML, the use of CSRF tokens and asynchronous loading of scripts indicates adherence to security best practices. No vulnerabilities or suspicious content were detected. However, the absence of visible privacy policy, terms of service, and contact information pages in the provided content suggests areas for improvement. Overall, AXOR's website demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic recommendations include publishing explicit privacy and terms pages, enhancing security headers, and providing clear contact and incident response information to further strengthen trust and compliance.

I

Input interior

inputinterior.no

59

Input interior is a leading independent interior furnishing group in the Nordic region, specializing in tailored solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and maintains a strong digital presence with comprehensive content and social media engagement. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Input interior presents a trustworthy and credible business front with strong market positioning in the Nordic interior furnishing industry.

S

sigdal

sigdal.com

73

Sigdal is a well-established Norwegian company specializing in high-quality kitchen, bathroom, and wardrobe solutions. With over 70 years of history, it operates primarily in the retail sector, offering both products and design services. The website reflects a mature digital presence with comprehensive content, professional design, and multiple customer engagement channels including free design meetings and installation services. The company maintains consistent branding and leverages modern web technologies to deliver a responsive and user-friendly experience. Technically, the site uses a modern JavaScript framework (Vue.js), integrates telemetry and analytics via Microsoft Application Insights and Google Tag Manager, and employs cookie consent management to comply with privacy regulations. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response contacts is noted. The WHOIS data for the domain is missing or unavailable, which is unusual for a commercial entity and slightly impacts trustworthiness. Overall, Sigdal presents a professional and trustworthy online presence with room for improvement in transparency of security policies.

I

Gardiner | Ia Torgersen design

ia-torgersen.no

53

The website www.ia-torgersen.no appears to be a small-scale business site built on the Wix platform. The content is minimal and lacks detailed business descriptions, contact information, or policy disclosures. The technical infrastructure relies on Wix's standard scripts and hosting, indicating a basic digital maturity level. Security posture is weak due to the absence of security headers, privacy policies, and WHOIS transparency. No forms or data collection mechanisms were detected, reducing immediate data protection concerns but also limiting user engagement. Overall, the site presents a low trust profile with significant gaps in compliance and security best practices.

N

Norfax AS

norfax.no

53

Norfax AS is a well-established Norwegian manufacturer specializing in the production and delivery of outdoor shelters (leskur) and furniture for both public and private sectors. With a founding date of 1946 and product delivery since 1984, Norfax positions itself as a quality-focused provider offering customized solutions tailored to client projects. The company maintains a strong digital presence with comprehensive contact information, social media engagement, and clear privacy and cookie policies, reflecting a mature business approach. Technically, the website employs modern JavaScript frameworks, analytics tools, and security best practices, ensuring a reliable and user-friendly experience. Security posture is robust with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Norfax demonstrates a high level of professionalism, trustworthiness, and compliance, making it a credible and secure business entity online.

I

IARK

iark.no

50

IARK is a Norwegian design firm specializing in workplace development, sustainability, and innovation. The company offers services including interior architecture, furniture and industrial design, and strategic innovation. Their market position is that of a leading innovator in sustainable workplace solutions within Norway, targeting organizations seeking to improve their work environments responsibly. The website reflects a professional and consistent brand with good content quality and clear navigation. Technically, the site uses modern JavaScript modules and image optimization via Imgix, indicating a contemporary frontend infrastructure. However, there is no evidence of a CMS or backend platform from the provided data. Security posture is moderate with HTTPS implied but lacking visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is clearly provided with company emails and a physical address in Oslo, enhancing business credibility. No forms or data collection fields are present on the homepage, reducing immediate privacy risks. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy and security disclosures.

Duravit.no is the Norwegian localized website of Duravit, a well-established international brand specializing in bathroom furniture and porcelain products. The company has a long history dating back to 1817 and collaborates with renowned designers to offer high-quality, stylish, and functional bathroom solutions. The website provides rich content including product categories, design inspiration, and tools for customers to plan their bathrooms. Technically, the site uses modern JavaScript libraries, consent management tools, and performance monitoring, hosted likely on a CDN with good SSL configuration. Security posture is solid but could be improved with additional headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page in the provided content. No WHOIS data is publicly available due to Norwegian domain registry privacy policies, but the domain appears legitimate and consistent with the brand. Overall, the website is professional, trustworthy, and well-positioned in the retail bathroom products sector.

T

TreCe

trece.se

54

TreCe is a Swedish company specializing in office storage and recycling solutions designed to integrate seamlessly with office interiors. Their website presents a professional and well-structured digital presence built on WordPress with WooCommerce, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. The site targets businesses and organizations seeking flexible and user-friendly storage and sorting solutions for office and public environments. Technically, the website is well-optimized for mobile devices and includes standard tracking and consent mechanisms, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some advanced security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain www.trece.se reduces trustworthiness from a domain registration perspective, though the website content and structure appear legitimate and professional. Overall, the site is safe for general audiences and provides a solid foundation for business operations, but would benefit from enhanced transparency in privacy and security documentation.

E

Essem Design

essem.se

61

Essem Design is a Swedish company specializing in the retail of hall furniture and interior accessories, focusing on design, sustainability, and functionality. Their website showcases a well-structured e-commerce platform with rich product offerings, design stories, and inspiration targeted at consumers interested in hall furnishings. The company maintains a consistent brand presence across multiple social media platforms and provides comprehensive privacy and cookie policies compliant with GDPR regulations. Technically, the website is built on the Umbraco CMS, uses modern JavaScript libraries such as Swiper.js, and integrates third-party services like Vimeo and Cookiebot for enhanced user experience and compliance. Security-wise, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The WHOIS data query for the subdomain 'www.essem.se' returned no results, which is expected as WHOIS data is typically registered for the root domain 'essem.se'. Overall, the website demonstrates a mature digital presence with good security posture and privacy compliance, suitable for its business model and audience.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

L

LAUFEN

laufen.no

62

LAUFEN is a company specializing in high-quality Swiss bathroom products and design solutions, targeting consumers and professionals interested in premium bathroom furnishings. The website reflects a medium-sized retail business with a consistent and professional brand presence, offering a wide range of bathroom products including toilets, sinks, showers, and furniture. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages, as well as contact information for security incidents or data protection officers. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the site itself appears trustworthy and professional. Overall, the website scores well in content quality and security posture but should improve privacy compliance and business credibility transparency.

K

KEIM Commercial

keim.com

56

KEIM Commercial is a well-established manufacturer and distributor of mineral silicate paints and stains, serving commercial and residential markets with a focus on sustainable, long-lasting, and breathable coatings. The company has a strong market position in the niche of mineral coatings, supported by detailed product information, technical data, and a comprehensive sales team presence. The website is built on a modern WordPress platform with WooCommerce and Elementor, indicating a mature digital infrastructure. Security posture is good with HTTPS and clientTransferProhibited domain status, though improvements like DNSSEC and security.txt publication are recommended. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, supporting KEIM's business credibility.

S

Senab Eikeland

senabeikeland.no

71

Senab Eikeland is a Norwegian company specializing in furniture and interior solutions with a strong emphasis on sustainability and circular economy principles. The company offers a range of services including furniture sales, refurbishment, flexible leasing, and digital portfolio management. Their market position is that of a medium-sized, reputable player in the Norwegian real estate and interior design sector, targeting businesses and organizations seeking tailored and sustainable furniture solutions. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, ensuring a good level of digital maturity and performance. Security-wise, the site employs HTTPS and Google reCAPTCHA v3, with standard security headers, but lacks explicit security policies and incident response information. Overall, the website is professional and trustworthy, though improvements in privacy compliance and contact transparency are recommended.

I

INR

inr.no

71

INR is a Scandinavian bathroom furnishing company offering customizable, high-quality products such as shower solutions, bathroom furniture, mirrors, storage, mixers, and towel warmers. The company targets consumers seeking stylish and functional bathroom designs with a focus on Scandinavian aesthetics. Their market position is that of an established brand with Swedish production and long-term warranties, emphasizing quality and design. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Swiper.js for UI components. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and security policies. Security posture is good with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

F

fenaco Genossenschaft

landi.swiss

53

LANDI is a Swiss cooperative network supporting farmers and rural populations through services in agriculture, retail, and energy sectors. The website reflects a mature digital presence using modern technologies such as Angular and Google APIs, with a professional design and clear branding. Privacy and cookie policies are well implemented, demonstrating compliance with GDPR standards. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the domain registration aligns well with the business entity, indicating legitimacy and trustworthiness.

Cloudlog.ch provides a basic web portal primarily focused on user login access to Cloudlog services. The website is minimalistic, offering two distinct login options, likely for different user groups or applications. The business appears to be a small technology service provider based in Switzerland, targeting users who require access to Cloudlog's cloud-based services. The site lacks detailed business descriptions, policies, or contact information, limiting the depth of business insights. Technically, the website uses simple HTML and CSS without advanced frameworks or CMS detected. The presence of Matomo analytics indicates some level of user tracking, but no explicit cookie or privacy policies are provided, which is a compliance gap. The site shows basic mobile optimization and accessibility but lacks SEO optimization and security headers, which could impact performance and security. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, which are critical for protecting user data during login. No incident response or vulnerability disclosure information is available, and no contact channels for security issues are provided. The domain WHOIS data is consistent with the website's Swiss origin and shows no privacy protection, supporting legitimacy. However, the lack of security best practices and compliance documentation suggests a low to moderate security posture. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and business transparency. Strategic enhancements in these areas would improve trustworthiness and user confidence.

The website at tru.am appears to be primarily an exposed storage bucket or file listing rather than a fully developed business website. The content is minimal and technical in nature, showing XML data of stored files without any visible business branding, contact information, or user-facing content. The domain is registered since 2012 with a reputable registrar and is active, indicating legitimacy in domain ownership but not necessarily in website content or presentation. The technical infrastructure lacks modern web technologies, security headers, and HTTPS, which indicates a low level of digital maturity and security posture. No privacy or cookie policies are present, and no contact or incident response information is available, which raises concerns about compliance and user trust. Overall, the site does not present itself as a professional or customer-facing platform and may be misconfigured or under development.

P

Pemerintah Sako

dlhsako.com

56

The website dlhsako.com represents the official online presence of the Dinas Lingkungan Hidup Sako, a government environmental agency in Indonesia. It provides information about environmental management services, including waste management, pollution control, and public complaint handling. The site targets the general public and local community, aiming to inform and facilitate environmental governance. The domain is newly registered in 2024, consistent with a new government initiative. Technically, the website uses modern web technologies such as Laravel Livewire, Swiper.js, and FontAwesome, with a responsive design optimized for mobile devices. The site is hosted with Cloudflare DNS but lacks DNSSEC and some security headers, indicating room for security improvements. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, HTTPS is properly implemented, and domain transfer protections are in place. However, the absence of privacy and cookie policies, security headers, and vulnerability disclosure mechanisms represent compliance and security gaps. The site does not appear to be blocked by any WAF or security challenge, allowing full content access. Overall, the website is professional and trustworthy as a government entity but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

P

Pemerintah Dinas Lingkungan Hidup Plaju

dlhplaju.com

57

Dinas Lingkungan Hidup Plaju is a government environmental agency serving the Plaju region in Indonesia, focusing on environmental management, waste control, and pollution monitoring. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at local residents and stakeholders. Technically, the site uses modern web technologies such as Laravel Livewire, Alpine.js, and Swiper.js, providing a responsive and moderately performant user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and legitimate, but improvements in security and compliance documentation are recommended.

D

Dinas Lingkungan Hidup Kertapati

dlhkertapati.com

57

Dinas Lingkungan Hidup Kertapati operates as a local government environmental agency in Kertapati, Palembang, Indonesia, providing essential environmental management services such as waste management, pollution control, and public complaint handling. The website serves as an official portal offering information about their services, news updates, and contact details. The target audience primarily includes local residents and stakeholders interested in environmental issues and public services. Technically, the website is built using modern web technologies including Laravel Livewire, Swiper.js for interactive elements, and FontAwesome for icons. The site is hosted with NameCheap as registrar and uses Cloudflare DNS services. The website demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be further enhanced. From a security perspective, the site enforces HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and additional HTTP security headers, which are recommended for improved security. No privacy or cookie policies are present, indicating compliance gaps with data protection regulations. No vulnerability disclosure or incident response contacts are provided. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas will increase trustworthiness and regulatory adherence.

P

Pemerintahan Dinas Lingkungan Hidup Kemuning

dlhkemuning.com

50

Pemerintahan Dinas Lingkungan Hidup Kemuning is a local government environmental agency in Indonesia focused on environmental management, waste handling, pollution control, and community services. The website serves as an informational and service portal for residents and stakeholders in Kemuning, providing access to news, permits, complaint forms, and environmental programs. Technically, the site uses modern web technologies including Laravel Livewire, Swiper.js, and CountUp.js, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protection but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

T

Togel SDY

dlhpalembang.com

44

The website 'Togel SDY' operates as a niche informational portal providing daily lottery results and historical data for the Togel Sidney (SDY) lottery market, primarily targeting Indonesian lottery players. The business model centers on delivering timely and accessible lottery data to assist bettors in making informed decisions. The site is relatively new, with domain registration in late 2024, and uses Squarespace CMS hosted with Cloudflare DNS services. The technical infrastructure is modern but basic, with moderate performance and mobile optimization. Security posture is adequate with HTTPS and HSTS enabled, but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are published, indicating compliance gaps. The site does not provide contact information or business credentials, which limits trust and credibility. Content is gambling-related, thus age-restricted and considered questionable for general audiences. Overall, the site is functional but requires improvements in privacy compliance, security hardening, and business transparency to enhance trust and regulatory adherence.

D

Dinas Lingkungan Hidup Muara Tebo

dlhmuaratebo.com

50

Dinas Lingkungan Hidup Muara Tebo is a local government environmental agency responsible for managing environmental preservation, waste management, pollution control, and public services related to environmental issues in Muara Tebo, Indonesia. The website serves as an official communication channel providing information about the agency's services, news, and contact details. The site targets residents and stakeholders in the Muara Tebo region, offering services such as permitting, complaint handling, and environmental education. Technically, the website is built using modern web technologies including Laravel Livewire, Swiper.js for sliders, and Font Awesome for icons. It is hosted securely over HTTPS and shows moderate performance with good mobile optimization. However, it lacks some advanced SEO and accessibility features. The site does not use common analytics or advertising tools, indicating a focus on public service rather than commercial interests. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security posture. Overall, the website is a legitimate government resource with good content quality and business credibility. Strategic improvements in privacy compliance, security headers, and accessibility would strengthen its security and user trust. The domain WHOIS data aligns well with the website's claims, supporting its legitimacy.