Security Directory

D

Dinas Lingkungan Hidup Kota Cilegon

dlhcilegon.org

43

The website for Dinas Lingkungan Hidup Kota Cilegon serves as the official online presence for the local government environmental agency in Kota Cilegon, Indonesia. It provides public information, news, program details, and contact options for residents and stakeholders. The site is well-structured with clear navigation and updated content, targeting local citizens and government partners. Technically, it employs modern web technologies including Bootstrap, jQuery, and carousel libraries, hosted behind Cloudflare DNS services with HTTPS enabled. However, the absence of DNSSEC and security headers indicates room for security improvements. The WHOIS data presents inconsistencies, notably a domain creation date in the future, which raises legitimacy concerns despite the professional appearance and government branding. No privacy or cookie policies are found, which is a compliance gap. Overall, the site is functional and trustworthy for general users but requires enhancements in security posture and compliance documentation.

D

Dinas Lingkungan Hidup Provinsi Banten

dlhbanten.org

51

The website represents the official online presence of the Environmental Agency of Banten Province, Indonesia. It serves as a public information portal providing news, programs, public services, and contact details relevant to environmental management and governance in the region. The site targets residents, government officials, and environmental stakeholders, positioning itself as a regional government authority. Technically, the site uses modern web technologies including Bootstrap, jQuery, and carousel libraries, hosted behind Cloudflare DNS but without advanced security headers or DNSSEC. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data shows inconsistencies with domain creation date postdating website content, which may indicate data errors or domain pre-registration. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance measures.

D

Dinas Lingkungan Hidup Kota Yogyakarta

dlhyogyakarta.org

51

The website dlhyogyakarta.org serves as the official online presence of the Environmental Agency (Dinas Lingkungan Hidup) of Yogyakarta City, Indonesia. It provides comprehensive public information, news updates, program details, and public service resources related to environmental management and sustainability initiatives in the region. The site targets local residents, government officials, and environmental stakeholders, positioning itself as a trusted government resource. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Flickity, and Slick carousel, ensuring a responsive and user-friendly experience across devices. Hosting and DNS services are managed via Cloudflare, enhancing availability and performance. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and advanced security headers. Privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data reveals inconsistencies, notably a domain creation date set in the future, which conflicts with the website's content timestamps and raises legitimacy concerns. Overall, the site is professionally designed, content-rich, and trustworthy in appearance but would benefit from improved transparency and security practices.

D

Dinas Lingkungan Hidup Kota Bandung

dlhbandung.org

51

Dinas Lingkungan Hidup Kota Bandung operates as the official environmental agency for Bandung City, Indonesia, providing public information, environmental programs, and public services through its website. The site targets local residents, government officials, and environmental stakeholders, offering news, announcements, and contact channels. The business model is government public service with a medium-sized organizational footprint. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Flickity, and Slick Carousel, hosted behind Cloudflare DNS services, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date, reducing trustworthiness, though the website content and structure indicate a legitimate government entity. Overall, the site is professional, trustworthy, and content-rich but would benefit from improved security and privacy compliance measures.

D

Dinas Lingkungan Hidup Kota Tangerang

dlhtangerang.org

42

Dinas Lingkungan Hidup Kota Tangerang operates as the official environmental agency for the city of Tangerang, Indonesia. The website serves as a public information portal providing news, programs, public services, and contact information relevant to environmental management and community engagement. The site targets local residents, government officials, and environmental stakeholders, positioning itself as a trusted government resource. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Slick Carousel, hosted behind Cloudflare DNS services, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, indicating a compliance gap. Overall, the site is professional, content-rich, and trustworthy, though improvements in security and privacy compliance are advised.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhdkijakarta.org

54

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental preservation, waste management, public complaint handling, and community education. The website serves as an authoritative portal for residents and stakeholders to access environmental information and services. Technically, the site uses modern web technologies including Laravel Livewire, Swiper.js, and Cloudflare DNS, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in security and compliance aspects.

G

Glue digital agency

glue.be

56

Glue digital agency is a well-established Belgian digital agency specializing in building websites and webshops that seamlessly integrate with external systems such as ERP, CRM, PIM, and ticketing platforms. With over 20 years of experience since its domain registration in 2002, Glue has positioned itself as a trusted partner for businesses seeking comprehensive digital solutions. Their key services include website and webshop development, digital strategy, online marketing, and content creation, targeting businesses that require integrated and scalable online platforms. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies including Craft CMS, Shopify, Magento, Laravel, and integrations with Salesforce and Mailchimp. The site is performant, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. The hosting and domain registration are consistent with the company's history, registered through Combell nv, a reputable provider. From a security perspective, the website enforces HTTPS and uses asynchronous loading of analytics and marketing scripts, minimizing performance impact. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, and privacy compliance is well addressed through comprehensive privacy and cookie policies with consent mechanisms. Overall, Glue digital agency presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include enhancing security transparency by publishing security policies and incident response information, implementing security headers, and establishing a vulnerability disclosure process to further strengthen their security posture and trustworthiness.

I

I am Sanderson

iamsanderson.com

42

I am Sanderson is a professional design portfolio website showcasing the work of Sander Vermeulen, a designer specializing in branding, typeface design, graphic design, and visual identity for cultural institutions, art galleries, and brands. The website presents a rich collection of projects with high-quality images and videos, demonstrating a strong creative portfolio. The technical infrastructure includes modern web technologies such as JavaScript, CSS, and lazy loading of images, with media assets hosted on Amazon S3. The site is responsive and optimized for mobile devices, though SEO and accessibility features are basic. Security posture is limited, with no detected security headers or privacy policies, and no WHOIS data available for the domain, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional and content-rich but lacks formal privacy and security compliance documentation.

F

FEBELCEM

febelcem.be

31

FEBELCEM is the Belgian Federation of the Cement Industry, representing major cement manufacturers in Belgium. The organization promotes the use of cement and concrete, provides information and training, and supports sustainability initiatives such as net zero carbon goals. The website is professionally designed using TYPO3 CMS and Bootstrap, with good mobile optimization and clear navigation. It integrates Google Analytics and Tag Manager for user tracking but lacks a cookie consent mechanism. Security posture is moderate with HTTPS usage but missing explicit security headers and published security policies. Contact is available primarily via a contact form, with no direct emails or phone numbers published. Overall, the website reflects a credible and established industry federation with a strong market position in Belgium.

W

Wienerberger

wienerberger.be

71

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

S

Stone

stone.be

60

STONE is a well-established Belgian company specializing in natural stone, terrazzo, and ceramics with over 100 years of experience. The company operates both as a producer and an international trader, serving architects, designers, and construction professionals. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 11, uses modern libraries like Slick Slider, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data confirms the domain's legitimacy and long history, consistent with the company's claims. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.

C

Cosentino

cosentino.com

65

Cosentino is a global leader in the manufacturing and distribution of innovative architectural surfaces and materials, targeting architects, designers, and professionals in the construction and design sectors. The website reflects a mature digital presence with comprehensive content showcasing their products, services, and design inspirations. The technical infrastructure is based on WordPress with modern marketing and analytics tools integrated, including Google Tag Manager, Cookiebot for consent management, and AB Tasty for optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data is a notable gap but does not detract significantly from the overall trustworthiness given the professional presentation and compliance indicators. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving transparency around domain registration.

F

Forster Profilsysteme AG

forster-profile.ch

45

Forster Profilsysteme AG is a Swiss-based manufacturer specializing in steel and stainless steel profile systems for doors, windows, and facades. The company emphasizes safety, durability, and energy efficiency, offering products with fire protection, smoke protection, burglary resistance, and bullet resistance. Their market position is that of an established medium-sized manufacturer serving architects, builders, and industrial clients. The website reflects a professional business with clear product offerings and a focus on quality. Technically, the site is built on TYPO3 CMS with modern frontend libraries and includes a comprehensive cookie consent mechanism, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy and compliant with GDPR, with moderate user tracking via Google Analytics and Google Ads cookies managed through Cookiebot consent.

R

Reynaers Aluminium

reynaers.be

64

Reynaers Aluminium is a leading manufacturer and marketer of innovative and sustainable aluminium solutions for windows, doors, facades, verandas, and related building products. The company operates globally with multiple country-specific domains and offers a comprehensive product portfolio targeting both professionals and consumers in the construction and manufacturing sectors. The website is built on Drupal 11 and employs modern web technologies, including cookie consent management and analytics tools. Security posture is generally good with HTTPS and consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is restricted due to registry policies, but the website's professional presentation and consistent branding indicate legitimacy. Privacy compliance is partial, with cookie consent but no visible privacy policy on the main page. Overall, the site is well-designed, user-friendly, and trustworthy for its business domain.

The website a-plus.be currently serves a security CAPTCHA challenge page designed to verify visitor legitimacy before granting access to the actual content. This indicates the presence of a Web Application Firewall (WAF) or anti-bot mechanism, which blocks direct content access. The domain is registered since 2002 with ClearMedia NV, a Belgian registrar, suggesting an established presence. However, no business or contact information, privacy policies, or terms of service are exposed on this page, limiting the ability to assess the company's operations or compliance posture. The technical implementation uses advanced JavaScript with Web Workers to perform a proof-of-work CAPTCHA, reflecting a modern approach to bot mitigation. Despite this, the lack of visible security headers and privacy compliance documentation is a concern. Overall, the site is inaccessible for full analysis due to the security challenge, resulting in a low AI score and limited insights.

D

DE SINGEL

desingel.be

48

DE SINGEL is an established international arts center based in Belgium, specializing in theater, dance, music, and architecture exhibitions. The organization serves a broad audience interested in cultural events and operates a medium-sized business model focused on hosting performances and exhibitions. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site uses modern frameworks such as Angular 11, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs Salesforce for newsletter subscriptions. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the site demonstrates good GDPR compliance and business credibility.

H

Healthline Media LLC

healthline.com

56

Healthline Media LLC operates www.healthline.com, a leading health and wellness information website providing expert medical guidance, wellness advice, and product reviews. The company holds a strong market position as a trusted source for health content, supported by a large content library, sponsored programs, and community engagement platforms. The website targets a broad audience seeking reliable health information and wellness resources. Technically, the site is built on modern web technologies including Next.js and React, with integrations for analytics, advertising, and consent management, delivering a fast and mobile-optimized user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is privacy-protected, which is common for media companies, slightly impacting transparency but justified by the business type. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

F

Facades+, Premier Conference on High-Performance Building Enclosures.

facadesplus.com

57

Facades+ is a well-established conference series focused on high-performance building enclosures, targeting architecture, engineering, and construction professionals. The website presents a professional image with detailed event information, a clear business model centered on conferences and sponsorships, and a consistent brand presence. The company behind the site is AN Media Group, based in New York, with a domain age consistent with its market presence since 2013. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Bootstrap, and integrates advertising and analytics services such as Google Analytics and AdButler. While the site uses HTTPS and has domain protections, it lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is credible and professionally maintained but could improve in security and privacy transparency.

T

The Architect’s Newspaper

techplusexpo.com

55

Tech+ is a specialized event and media platform operated by The Architect’s Newspaper, focusing on the Architecture, Engineering, and Construction (AEC) industry's technology sector. The website promotes live one-day conferences in major US cities, showcasing emerging and established technology companies and offering educational content and networking opportunities. The platform targets AEC professionals seeking to optimize design and construction workflows through innovative technology. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and secure form embedding, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

T

The AN Media Group

archpaperawards.com

55

The Archpaper Awards website is a professionally designed media platform operated by The AN Media Group, focusing on recognizing excellence in architecture, products, and design within the AEC industry. The site showcases award winners, sponsors, and media partners, targeting architecture and design professionals. The business model revolves around event organization and media publishing, positioning itself as a niche leader in architecture awards. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Bootstrap for responsive design. Google Analytics is used for user tracking, and the site is hosted likely via GoDaddy, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

B

BD4Jobs

bd4jobs.com

10

BD4Jobs is a UK-based specialized job board focusing on architecture and related professions. The platform offers job search, job alerts, CV uploads, and recruiter services, positioning itself as a niche player in the real estate recruitment market. The website is built on the Madgex Job Board Platform and integrates multiple Google services for analytics and advertising. The technical infrastructure is modern and supports good mobile optimization and accessibility. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and branding appear professional and trustworthy. Strategic improvements in security transparency and privacy compliance are recommended to enhance trust and compliance.

S

Social Intents, LLC

socialintents.com

10

Social Intents, LLC operates a professional SaaS platform specializing in live chat and AI chatbot solutions integrated with popular collaboration tools such as Microsoft Teams, Slack, Google Chat, Zoom, and Webex. Their platform enables businesses to engage customers across multiple channels including websites, WhatsApp, Messenger, and SMS, leveraging AI to automate routine inquiries and improve customer support efficiency. The company targets small businesses, entrepreneurs, and marketing teams seeking to enhance customer engagement and sales through streamlined communication tools. Their market position is strong within the niche of AI-powered chat solutions integrated with collaboration platforms, supported by clear pricing tiers and agency reseller options. Technically, the website employs a modern technology stack including JavaScript frameworks like Alpine.js and jQuery, along with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Weglot for multilingual support. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. The security posture is mature with good privacy compliance evidenced by comprehensive privacy and cookie policies and GDPR adherence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers were found, and no public security or incident response contacts are provided, which could impact trustworthiness from a security perspective. Overall, the website presents a professional, trustworthy, and technically sound platform for AI-driven live chat services. Strategic recommendations include verifying domain registration details, enhancing visible security headers, publishing incident response contacts, and providing clearer direct contact information to improve business credibility and security transparency.

W

Webtune AI

webtune.ai

63

Webtune AI is a SaaS platform specializing in autonomous AI-driven website SEO management, offering detection, resolution, and deployment of on-page SEO issues with a one-click approach. The platform targets SEO professionals, small business owners, startups, and digital marketers, positioning itself as a pioneering solution in automated SEO optimization. The website is well-branded, consistent, and associated with Scalenut, a recognized AI-SEO platform, enhancing its market credibility. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, Hotjar, and integrates marketing and analytics tools effectively. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a comprehensive privacy policy but no visible cookie consent mechanism. WHOIS data is unavailable publicly, likely due to privacy protection, which is justified for this business type. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and privacy controls.

S

Statsforvalteren

statsforvalteren.no

66

Statsforvalteren.no is the official website of the Norwegian government agency representing the state in various counties. The agency is responsible for implementing parliamentary and governmental decisions, acting as a liaison between municipalities and central authorities. The website provides comprehensive information about the agency's services, news updates, job postings, and access to various public forms and complaint mechanisms. It targets Norwegian citizens, public officials, and municipalities, offering content primarily in Norwegian with options for English and other Norwegian dialects. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Azure Application Insights, Hotjar, and Maze Analytics for user behavior tracking and performance monitoring. The site is well-structured with good SEO and mobile optimization, though it lacks a visible cookie consent mechanism. The site uses HTTPS with no detected security vulnerabilities in the content or scripts. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and not suspicious for Norwegian government domains. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the site would benefit from implementing a cookie consent banner to comply fully with privacy regulations, publishing clear security and incident response policies, and enhancing accessibility features to improve inclusivity and compliance.

A

Avisa Oslo

ao.no

65

Avisa Oslo is a Norwegian local news media outlet focused on delivering news, politics, culture, business, real estate, and sports content primarily for the Oslo region. It operates a digital-first platform with subscription offerings and advertising revenue streams, supported by a professional and modern web presence. The site is part of the Amedia group, a major media company in Norway, which enhances its market position and credibility. Technically, the website employs modern JavaScript frameworks, service workers, and ad technologies to deliver a responsive and engaging user experience. Security-wise, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data, reflecting a mature security posture. Privacy compliance is evident with comprehensive privacy and cookie policies and GDPR adherence. Overall, the site presents a low-risk profile with strong business credibility and technical implementation.

N

Nettvett.no

nettvett.no

54

Nettvett.no is a Norwegian internet safety information portal providing guidance, advice, and educational courses on safer internet usage. It is positioned as a trusted resource in Norway, supported by partnerships with recognized governmental and security organizations such as NorSIS, NSM, and NKOM. The website targets a general audience seeking to improve their digital security awareness. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO tools like Yoast. It integrates Google Analytics and Facebook SDK for analytics and tracking, and employs Google reCAPTCHA for form security. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and published incident response policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism present. WHOIS data shows an anomalous future creation date, which slightly impacts trust but does not detract from the site's legitimacy given its content and partnerships.

S

Store norske leksikon

snl.no

61

Store norske leksikon is a well-established Norwegian online encyclopedia owned by major Norwegian universities and non-profit organizations. It offers a comprehensive collection of over 300,000 expert-written articles and serves as Norway's largest research dissemination platform with millions of monthly users. The website is professionally designed, mobile-optimized, and provides rich, relevant content for a general audience. Technically, the site uses modern web technologies including asynchronous JavaScript, web fonts, and analytics tools such as Matomo and Google Tag Manager, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforcement and CSRF protections, though formal security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, safe, and authoritative in its domain.

E

Eelume AS

eelume.com

68

Eelume AS is a Norwegian technology company specializing in the development of All-Terrain Autonomous Underwater Vehicles (AUVs) and advanced marine cybernetics. Their products, including the S-Series and M-Series AUVs and underwater hyperspectral imagers, serve sectors such as energy, defense, research, and underwater exploration. The company positions itself as an innovative leader in marine technology, focusing on sustainable and cost-effective oceanic data collection and seabed mapping. The website reflects a professional and consistent brand image with comprehensive product information and a clear target audience of marine professionals and organizations. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google reCAPTCHA Enterprise for form security and Cloudflare services for hosting and CDN. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, explicit security headers are not visibly implemented, and there is no cookie policy or terms of service page detected, which are areas for improvement. From a security perspective, the site uses HTTPS and integrates advanced bot protection on its contact form, indicating a good baseline security posture. The absence of WHOIS registration details suggests privacy protection, common for tech companies, but reduces transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance by adding cookie consent mechanisms, publishing terms of service, and enhancing security headers. These steps will strengthen trust and compliance with data protection regulations. The website is professional, trustworthy, and well-suited for its business purpose, with minor technical and compliance improvements recommended.

T

Transactional Email API Service For Developers | Mailgun

mailgun.com

75

Mailgun is a leading transactional email API service provider targeting developers and businesses that require reliable, scalable email delivery solutions. The company offers a comprehensive suite of email services including sending, validation, optimization, and testing, positioning itself strongly in the technology sector with a large enterprise customer base including major tech companies. The website demonstrates a mature technical infrastructure built on WordPress with modern performance and SEO optimizations, ensuring excellent user experience and accessibility. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and a dedicated security portal, although WHOIS data is unavailable which slightly impacts trust but is mitigated by the company's known parent entity, Sinch. Overall, Mailgun presents a professional, trustworthy, and technically sound platform for transactional email services.

Ringier Axel Springer Tech is a technology competence center within the Ringier Axel Springer Media AG group, serving a large user base of 40 million across multiple media brands. The organization employs over 300 IT specialists and performs approximately 1000 deployments daily, indicating a mature and active technology operation. The website reflects a professional corporate presence targeting IT professionals and potential employees, with consistent branding and multiple social media channels. Technically, the site uses modern tracking and consent management tools, though it lacks explicit privacy and terms of service pages. Security posture is good with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and published policies. Overall, the site is trustworthy and well-maintained, though some compliance documentation is missing.

H

House Of Builders

houseofbuilders.no

62

House Of Builders operates as an innovative showroom and meeting place within the Norwegian construction industry, targeting professionals and companies in this sector. The website presents a professional image with good SEO and structured data, reflecting a small but focused business established in 2017. The technical infrastructure is based on WordPress, utilizing common libraries and plugins such as jQuery, Bootstrap, FontAwesome, and Cookiebot for cookie consent management. Google Analytics is employed for visitor tracking, indicating moderate user tracking levels. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published privacy policy and terms of service pages represents compliance gaps. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found.

N

NAML

naml.no

66

The website www.naml.no represents a Norwegian entity with a professional web presence focused on providing organizational or business-related services. The site uses modern web technologies including HTTPS, Google reCAPTCHA Enterprise for bot protection, Microsoft Application Insights for analytics, and Cookiebot for cookie consent management. The content is primarily in Norwegian and the site demonstrates good design quality and user experience with clear navigation and mobile optimization. However, explicit privacy policy and terms of service pages are not clearly found, and no direct contact information such as emails or phone numbers are visible, which slightly impacts transparency and user trust. Technically, the site employs a modern tech stack with standard web technologies and integrates third-party services for analytics and marketing. Security posture is solid with HTTPS enforced and bot protection in place, but the absence of explicit security headers and detailed privacy documentation suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common but reduces the ability to verify domain ownership and age. Overall, the website is secure and professional but could enhance trust and compliance by publishing clear privacy and terms policies and providing contact details. The domain's privacy-protected WHOIS is not unusual but should be monitored for legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

T

Takentreprenørenes forening

taktekker.no

66

Takentreprenørenes forening (TEF) is a Norwegian professional association representing qualified and reputable roofing contractors. The organization focuses on safeguarding members' common interests and promoting collaboration and expertise in roofing and membrane roofing trades. The website serves as an informational and organizational platform for its members and stakeholders within the roofing industry in Norway. Technically, the website employs modern web technologies including HTTPS, JavaScript frameworks, Microsoft Application Insights, Siteimprove analytics, Google reCAPTCHA Enterprise, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though explicit security headers and privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for professional associations. Overall, the site is professional, secure, and compliant with basic privacy standards, serving its target audience effectively.

T

TPF

tpf-info.org

57

TPF is a small local business based in Majorstuen, Norway, with an online presence hosted on the Wix platform. The website serves as an informational portal with basic contact details including a phone number and physical address. The business appears to target a general audience with no explicit or adult content. The site uses standard Wix technologies and includes minimal external analytics via Siteimprove Analytics. However, the website lacks critical compliance documents such as privacy and cookie policies, and does not provide contact forms or email addresses for direct communication. The WHOIS data for the domain is unavailable or malformed, which limits the ability to fully verify domain legitimacy and ownership.

N

NOVA Spektrum

novaspektrum.no

59

NOVA Spektrum is a Norwegian event venue and exhibition space established in 2019, offering services such as hosting exhibitions, concerts, and other events. The website targets a general audience including visitors, exhibitors, and organizers, positioning itself as a regional hub for events in Norway. The business model revolves around venue rental and event facilitation, supported by a network of related domains indicating a broader ecosystem of services. Technically, the website is built on WordPress using Elementor, with integrations such as Matomo for analytics and Complianz for GDPR compliance, reflecting a moderate level of digital maturity. The site is mobile optimized and features a cookie consent mechanism, demonstrating awareness of privacy regulations. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit incident response contacts suggests room for improvement. Overall, the website is professional and trustworthy, with clear branding and consistent content quality. Strategic recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve user trust and compliance.

The domain project.space currently hosts no active website content, only a placeholder page in German indicating that no website is assigned to the domain. There is no business information, contact details, or metadata present. The domain was registered in late 2022 with a reputable registrar, 1API GmbH, and is set to expire in 2026. The lack of content and policies indicates the domain is either newly acquired or parked without active use. Technically, no scripts, frameworks, or CMS are detected, and no security headers or HTTPS information is available, suggesting minimal technical infrastructure. Security posture is weak due to absence of HTTPS and security best practices. Overall, the domain currently poses low risk but also offers no trust signals or business credibility.

T

teuto.net Netzdienste GmbH

teuto.net

72

teuto.net Netzdienste GmbH is a German-based IT service provider specializing in Kubernetes, cloud, and hosting solutions. Founded in 1996, the company offers a broad portfolio including managed Kubernetes, bare-metal hosting, private and public cloud services, consulting, and data science platforms. Their market position is that of a specialized regional provider with a strong focus on modern container orchestration and cloud infrastructure technologies. The website reflects a professional and consistent brand image targeting businesses and IT professionals seeking advanced infrastructure solutions. Technically, the website is built on WordPress with the Divi theme, leveraging modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Hosting and DNS are managed via InterNetX GmbH and Cloudflare respectively, ensuring good performance and security. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. While security headers are not explicitly detected, the site uses reCAPTCHA and cookie consent mechanisms, indicating awareness of security and privacy best practices. No critical vulnerabilities or exposed sensitive data were found. However, enabling DNSSEC and additional security headers would enhance the security posture. Overall, the website and domain demonstrate a high level of trustworthiness and professionalism. The business is compliant with GDPR, provides clear contact information, and maintains transparency in domain registration. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing DNS security, publishing a formal security policy, and continuous monitoring of third-party components.

K

Kulturstiftung Dessau-Wörlitz

gartenreich.de

52

The Gartenreich Dessau-Wörlitz website represents a well-established cultural foundation dedicated to preserving and promoting a UNESCO World Heritage site in Germany. It offers comprehensive visitor information, event calendars, exhibitions, and educational programs targeting tourists, families, and cultural enthusiasts. The site is professionally designed with consistent branding and rich content relevant to its mission. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap, jQuery, and Leaflet for interactive maps. It demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Hosting is provided by a German hosting provider, consistent with the website's geographic focus. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, indicating a good baseline security posture. However, the absence of explicit security headers and incident response information suggests room for enhancement. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience. It effectively supports the foundation's cultural and educational objectives while maintaining user privacy and security standards.

T

T&R Oberland AG

troag.ch

58

T&R Oberland AG is a Swiss fiduciary services company specializing in tax, accounting, auditing, HR administration, succession planning, pension provision, start-ups, and restructuring services primarily targeting SMEs and private individuals. The company positions itself as a modern, innovative partner that alleviates administrative burdens to allow clients to focus on their core business and personal priorities. The website is professionally designed using the Cloudrexx CMS and UIkit framework, offering good mobile optimization and clear navigation. However, some technical aspects such as security headers and cookie consent mechanisms are missing, which could be improved to enhance security and privacy compliance. The security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

J

J.Lindeberg

jlindeberg.com

65

J.Lindeberg is a premium fashion brand specializing in men’s and women’s activewear and sports-inspired apparel, including golf, ski, and tennis collections. The company operates a direct-to-consumer e-commerce platform hosted on Shopify, complemented by physical retail locations. Their website features a membership program offering exclusive benefits, positioning them as a lifestyle brand blending fashion and sport. The technical infrastructure leverages modern e-commerce technologies and integrates multiple marketing and analytics tools such as Trustpilot, Klaviyo, and Microsoft Clarity, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The domain WHOIS data is missing or unregistered, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is well-designed, performant, and compliant with privacy regulations, but domain registration inconsistencies warrant further verification.

A

Adler Joailliers

adler.ch

55

Adler Joailliers is a Swiss luxury jewellery company based in Geneva, with a heritage dating back to 1886. The company specializes in designing and retailing high-end, meaningful jewellery pieces, including innovative collections and bespoke Haute Joaillerie. Their market position is that of a prestigious, small-sized luxury retailer targeting discerning customers seeking unique and timeless jewellery. The website reflects a professional and consistent brand image, supported by active social media channels and SEO optimization. Technically, the site is built on WordPress with modern plugins and tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is basic, with no explicit privacy policy or terms of service detected. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy and security documentation.

Zingreen is a small Swiss garden construction company based in Gstaad, specializing in landscaping and garden building services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on visual presentation. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a legitimate local business but would benefit from enhanced security and compliance measures.

A

Armin Werren AG

werrenag.ch

60

Armin Werren AG is a specialized painting, plastering, staining, varnishing, wallpapering, and sandblasting service provider based in Gstaad, Switzerland. The company focuses on creating sophisticated and personalized living environments for private, hospitality, and business clients. Their website reflects a professional and consistent brand image with clear service offerings and company information. Technically, the site uses modern web technologies including Google Analytics and Cookiebot for tracking and consent management, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security headers and incident response information are absent. Overall, the website is trustworthy, compliant with GDPR, and well-suited for its target audience.

I

idormo AG und GM-Möbel AG

traum-werk.ch

39

Traumwerk is a Swiss-based premium retail brand specializing in sleep products, garden furniture, and stylish living furniture. Operated by idormo AG and GM-Möbel AG, the company maintains a strong market position with multiple physical locations and an integrated e-commerce platform. Their offerings include certified sleep consultations and exclusive designer furniture, targeting discerning customers seeking quality and exclusivity. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site leverages WordPress with WooCommerce and Elementor, supported by modern tracking and marketing tools such as Google Tag Manager and Borlabs Cookie for GDPR compliance. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, Traumwerk demonstrates a trustworthy and professional online presence aligned with its business objectives.

S

Sputnik Bikeshop Zweisimmen

sputnik-bikeshop.ch

42

Sputnik Bikeshop Zweisimmen is a specialized local retail business focused on bicycles, e-bikes, and related accessories, offering sales, rental, repair, and personalized consultation services primarily in the Zweisimmen and Gstaad regions of Switzerland. The website reflects a well-structured and content-rich platform that supports the business model with clear product categories, service descriptions, and contact information. Technically, the site uses a combination of Bootstrap 3, jQuery, and various sliders to deliver a responsive and user-friendly experience, though some technologies are slightly dated. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though no terms of service or vulnerability disclosure policies are present. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Plattenleger R.Brand AG Gstaad

plattenlegergstaad.ch

48

Plattenleger R.Brand AG Gstaad is a small local business specializing in tile laying and floor/wall coverings in the Gstaad and Saanen region of Switzerland. The company offers services for private and industrial clients, including indoor and outdoor floor and wall coverings, wellness installations, and processing of natural and artificial stone products. The website is built on WordPress with common SEO and performance plugins, presenting a professional and consistent brand image. Contact information is clearly provided, though no email addresses or social media links are visible. The site is primarily in German and targets local customers. Technically, the site uses HTTPS and Google Analytics but lacks security headers and privacy/cookie policies, indicating compliance gaps. No forms or incident response information are present, and no suspicious content or domains were detected.

M

Moratti & Söhne AG

morattisoehne.ch

48

Moratti & Söhne AG is a well-established Swiss construction company founded in 1905, offering a comprehensive range of construction and related services including high-rise construction, civil engineering, road construction, excavation, demolition, remodeling, transport, and building materials supply. The company targets private individuals, businesses, and public sector clients primarily in the Gstaad and Saanen regions. Their website reflects a professional and consistent brand image with clear service descriptions and multiple physical office locations, supporting their regional market position. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses performance optimization tools like WP Rocket. It integrates Google Analytics and Google Maps APIs for analytics and location services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features are basic, and there is room for improvement in SEO and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IPs in Google Analytics, indicating some privacy awareness. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. There is no cookie consent mechanism, which may affect GDPR compliance. No vulnerabilities or suspicious patterns were detected in the visible content. Overall, the website is trustworthy and professional with a solid business presence. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance their security posture and regulatory adherence.

M

Max Brand Bedachungen AG

bedachungen-gstaad.ch

56

Max Brand Bedachungen AG is a small Swiss company specializing in roofing and solar panel installation services in the Gstaad/Saanen region. With over 32 years of experience, the company offers a range of services including roofing, solar energy solutions, scaffolding, maintenance, and renovation consulting. The website presents a professional and consistent brand image targeting local private and commercial customers seeking high-quality roofing and solar solutions. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and SEO best practices. It is mobile-optimized and includes a cookie consent mechanism, though it lacks a privacy policy and terms of service pages. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the site is trustworthy and functional, supporting the company's local market position.

Kurztusch Gipsdesign AG is a small Swiss company specializing in plastering, drywall, stucco, facades, monument preservation, and decorative plastering services. The company emphasizes craftsmanship and quality with over 25 years of experience, targeting clients primarily in the Aargau region. Their website is built on TYPO3 CMS and uses a range of JavaScript libraries for UI enhancements. The site is professionally designed with clear navigation and content relevant to their business domain. However, the WHOIS data for the domain www.gipsdesign.com is missing, which raises questions about domain registration legitimacy despite the active and professional website presence. The company provides clear contact information including a Swiss phone number and uses email obfuscation to protect against scraping. Privacy and cookie policies are implemented with GDPR compliance in mind, including a consent mechanism.

Hotel Kernen AG operates a family and sport hotel located in Gstaad-Schönried, Switzerland, with a long tradition dating back to 1904. The business focuses on hospitality services including accommodation, gastronomy, and outdoor activity packages targeting families and active vacationers. The website reflects a well-established market position, recognized for quality and value. Technically, the site employs modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, ensuring compliance and performance. Security posture is strong with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear business information.