High-risk security reports

J

Jory&Co.

joryand.co

49

Jory&Co is a UK-based global design studio specializing in creative services that drive social and environmental change. Founded in 2015, the company positions itself as a niche player focusing on visionary clients who seek impactful branding and digital design solutions. Their service offerings include brand design, impact report design, and infographics, targeting organizations committed to sustainability and positive change. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and Vimeo for multimedia content. The site is hosted with a CDN provider, ensuring fast performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented, contributing to a strong digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, no vulnerabilities or exposed sensitive data were found. The use of reCAPTCHA on forms enhances protection against automated abuse. However, the absence of a published security policy or incident response contact is noted. Overall, the website demonstrates a high level of professionalism, security awareness, and privacy compliance. The domain registration is privacy protected but consistent with the business profile, and no suspicious indicators were found. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

The website livespbo.org currently serves only a 404 Not Found error page with no accessible business content, metadata, or contact information. The domain WHOIS data indicates a creation date in the future (April 17, 2025), which is inconsistent and suggests either placeholder data or an error. The site is powered by LiteSpeed Web Server and uses Cloudflare DNS but does not present any security challenge or WAF blocking. There is no evidence of HTTPS or security headers from the provided data. Overall, the website lacks any meaningful content or business presence, making it impossible to assess market position or services. The technical infrastructure appears minimal and incomplete.

S

Smedia

smedia.com.au

48

Smedia is a medium-sized Australian media and technology company founded in 2000, specializing in digital print editions, bespoke software development, and tailored enterprise applications. The company serves publishers and enterprises primarily in Australia and New Zealand, holding a strong market position as a leading developer for publishers and deploying innovative solutions across various sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern plugins and Google Analytics integration, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate with no signs of blocking or WAF interference.

C

Server Error

containerhurenin.nl

40

The website www.containerhurenin.nl is currently inaccessible, serving a 500 Server Error page. The site appears to be protected by Cloudflare, but the backend server is misconfigured or down, preventing content delivery. No business, contact, or policy information is available on the page, making it impossible to assess the company's market position or services. The technical infrastructure shows minimal use of external fonts and Cloudflare's analytics beacon, but no CMS or frameworks are detected. Security posture is weak due to lack of visible security headers and absence of HTTPS confirmation. Overall, the site is non-functional and lacks essential compliance and trust indicators.

The website at usphs.gov is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents extraction of any meaningful business, security, or compliance information from the site itself. The domain is registered since 2001 via get.gov registrar with government-related nameservers, indicating it is a legitimate government domain likely related to the U.S. Public Health Service. However, the use of privacy protection on WHOIS data is unusual for a government domain but may be justified for security reasons. Due to the blocked content, no privacy policies, contact information, or security frameworks are detectable on the site. The technical infrastructure details such as SSL configuration, security headers, and analytics usage cannot be assessed. Overall, the site’s security posture and compliance status cannot be evaluated from the current data.

T

Timber Finance Management AG

timberfinance.ch

46

Timber Finance Management AG operates as a leading competence center specializing in timber carbon finance, focusing on unlocking and monetizing the climate potential of the forest and timber industry. Their market position is strong within the niche of sustainable building and investment portfolios, offering key services such as carbon removals in buildings, investment products, and a knowledge network. The company targets investors, building sector professionals, and sustainability advocates, primarily operating in Switzerland. Technically, the website is built on WordPress with Elementor, integrating HubSpot forms and analytics, reflecting a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high legitimacy score and strong business credibility.

C

Carbon Farmers

carbonfarmers.nl

42

Carbon Farmers is a Dutch company focused on stimulating carbon storage in soil and biomass and managing carbon certificates to reduce CO2 emissions. The company operates in the energy sector with a niche focus on environmental sustainability and carbon farming. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Google reCAPTCHA and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS and DNSSEC enabled, but lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

A

Arteria

arteria.fr

47

Arteria is a French company specializing in providing fiber optic infrastructure and hosting services by leveraging the electricity transport network managed by its parent company, RTE. The company offers dark fiber, activated fiber, mobile antenna hosting on electrical pylons, and hosting solutions tailored for edge cloud and regional data centers. Positioned as a key regional infrastructure provider, Arteria targets telecommunications operators and businesses requiring high bandwidth connectivity. The website reflects a professional and consistent brand image with clear service offerings and a focus on connecting territories through advanced fiber optic technologies. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Site Kit, ensuring good SEO and analytics integration. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business history and legitimacy, supporting a high trust level. Strategic recommendations include enhancing security transparency and adding incident response contacts to improve trust and compliance.

The website wtve.net currently displays only a minimal error message indicating that the specified URL cannot be found, with no accessible content or metadata. The domain is registered with GoDaddy.com, LLC since 2014, indicating a potentially established business presence, but the lack of website content suggests the site is inactive or improperly configured. There are no visible business details, contact information, or policies published on the site. Technically, the site lacks modern security features such as DNSSEC and security headers, and no HTTPS status is provided. The absence of content and security best practices results in a low trust and security posture score. Overall, the site is not usable for business or customer engagement in its current state.

SD Teamsport is a small e-commerce retailer specializing in sportswear and team sport apparel, primarily targeting sports teams and individual sports enthusiasts in the Netherlands. The website presents a basic but functional online store with a consistent brand identity and moderate technical maturity, leveraging technologies such as OpenCart, Bootstrap, Google Tag Manager, and Trustpilot for customer reviews. While the site is mobile-optimized and provides a good user experience, it lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security incident response information. The security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC. Overall, the domain registration is consistent and legitimate for a small business established in 2017.

The website www.vaig.lv is currently inaccessible beyond a security challenge page that performs a browser integrity check and automatic redirect, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily technical, showing a loading animation and a message about secure access. The site uses outdated content management systems, Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities and are no longer supported. No business or contact information, privacy policies, or terms of service are present on the accessible page, limiting the ability to assess the company's legitimacy or compliance posture. The external link to bitninja.io suggests the use of a third-party security service to protect the site from attacks. Overall, the site appears to be in a protected state but lacks modern security hygiene and transparency.

I

ICROA

icroa.org

48

ICROA is a specialized non-profit organization focused on accrediting best practices in the voluntary carbon market to support the Paris Agreement goals. It operates under the umbrella of the International Emissions Trading Association (IETA) and provides accreditation and endorsement services to voluntary carbon market service providers. The website reflects a mature and professional digital presence with clear messaging, strong branding, and a focus on environmental integrity and climate leadership. Technically, the site is built on WordPress with modern plugins and technologies, including Gravity Forms for data collection and Google Tag Manager for analytics. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

O

Onsets

onsets.org

45

Onsets.org is a specialized platform facilitating the direct purchase of nature-based carbon removal certificates from entrepreneurs within the Climate Cleanup network. The platform emphasizes transparency, measurement-based verification, and ONCRA certification, positioning itself as a niche marketplace in the environmental sustainability sector. Technically, the website is built on WordPress with WooCommerce and uses reputable plugins and hosting, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the platform appears legitimate and trustworthy but would benefit from enhanced privacy and security practices.

O

Oncra

oncra.org

44

Oncra is a small non-profit organization founded in 2020, dedicated to supporting natural carbon dioxide removal projects to combat climate change. Their services include certification, carbon accounting tools, and maintaining a registry of carbon removal projects. The organization targets farmers, builders, and environmental stakeholders, positioning itself as an emerging leader aligned with international frameworks such as the IPCC and EU Carbon Removal Certification Framework. Technically, the website is built on WordPress, hosted on SiteGround, and uses modern JavaScript libraries for UI enhancements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional, with strong business credibility supported by partnerships with reputable organizations.

B

Bailey & Glasser, LLP

thebaileyglasserblog.com

43

Bailey & Glasser, LLP operates a professional legal blog providing updates and insights on various legal matters including mass torts, institutional abuse, and product liability. The blog serves as a communication channel to clients, legal professionals, and the public, reinforcing the firm's market position as a tenacious and collaborative national law firm. The website is built on WordPress with a modern tech stack including Yoast SEO and Jetpack, ensuring good SEO and moderate performance. The firm maintains a consistent brand presence across social media and the blog content is of good quality and relevance. Security posture is solid with HTTPS and standard protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-maintained, supporting the firm's business objectives effectively.

Q

Q Cables B.V.

qcables.nl

43

Q Cables B.V. is a Dutch company founded in 2021 specializing in the supply of electrical cables ranging from low to high voltage, including custom cable solutions and ground cables. The company targets industrial sectors requiring specialized cable products and emphasizes a broad stock availability to meet diverse customer needs. The website reflects a professional and consistent brand image with clear contact information and a user-friendly design. Technically, the site is built on WordPress using the Elementor framework, incorporating modern web technologies and privacy-friendly analytics via Usermaven. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of a privacy policy and security headers represents compliance and security gaps. Overall, the domain registration aligns well with the business profile, supporting legitimacy.

M

Mintt Uitzendbureau

mintt.nl

49

Mintt Uitzendbureau is a small Dutch staffing agency based in The Hague, specializing in flexible and permanent job placements as well as training services. The website is built on WordPress using the Kadence theme and incorporates SEO best practices with Rank Math. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website presents a professional image suitable for its local staffing business model.

T

Three NZ

threenow.co.nz

46

The website content analyzed is a region-restriction error page for the domain cdn.fullscreen.nz, indicating that the content is only available in New Zealand. The page is minimalistic, with no interactive elements, forms, or contact information. The metadata and Open Graph tags identify the site as related to Three NZ, a telecommunications or media service provider in New Zealand. The lack of WHOIS data for the subdomain is typical for CDN subdomains and does not indicate suspicious activity. The technical infrastructure is basic, with no advanced frameworks or analytics detected. Security posture is minimal with no security headers or privacy policies present. Overall, the site is functional for its purpose but lacks comprehensive security and privacy features.

F

Forty Niners Football Company LLC

levisstadiumpremium.com

46

Levi's Stadium Premium website represents the official digital presence for the San Francisco 49ers' premium ticketing, suite hospitality, and event hosting services. The site offers detailed information on Stadium Builder's Licenses, suite partnerships, and special event spaces, targeting sports fans, corporate clients, and event planners. The business is positioned as a leading NFL venue with high-tech facilities and premium hospitality offerings. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and is hosted via GoDaddy. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS enforced, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is good with a comprehensive privacy policy, but no explicit cookie consent mechanism is detected. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is professional, trustworthy, and well-suited for its audience.

V

Virtual Tour Experts

virtualtourcompany.co.uk

49

The Virtual Tour Experts, operating under the domain virtualtourcompany.co.uk, is a UK-based small business specializing in high-quality 360° photography, virtual tours, and VR content management primarily serving the transport, education, and tourism sectors. The company holds reputable certifications including B Corp and a BIMA award, positioning itself as a leading virtual tour provider in the UK market. Their business model focuses on delivering immersive digital experiences with a strong emphasis on marketing effectiveness and client satisfaction. Technically, the website is built on WordPress with modern plugins and tracking technologies, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy or terms of service pages. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

B

British Fires

britishfires.com

49

British Fires is a UK-based manufacturer specializing in electric fires and media walls, offering premium products such as the New Forest fires and luxury stoves. The company has a strong market position in the UK, targeting consumers and businesses seeking high-quality heating and decorative solutions. The website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. Hosting appears to be managed via SiteGround, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

N

North Harbour Club

northharbourclub.co.nz

49

North Harbour Club is a well-established non-profit business networking organization based in New Zealand, founded in 1995. The club focuses on providing networking opportunities, events, awards, and community support primarily for North Shore business people and the regional community. The website reflects a mature digital presence with good branding and structured data, supporting its role as a regional business club. Technically, the site is built on WordPress with modern plugins like Elementor and JetEngine, integrating Google Analytics and Tag Manager for marketing and analytics. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some security headers and explicit privacy policies. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

V

Van Dorsten Makelaars

vandorsten.nl

49

Van Dorsten Makelaars is a well-established real estate agency operating primarily in Meppel and surrounding areas in the Netherlands. With over 50 years of experience, the company offers a comprehensive range of services including property sales, purchases, mortgages, appraisals, and insurance. The website reflects a professional and trustworthy business with a strong local presence and a large property portfolio. Technically, the site uses modern analytics tools such as Google Tag Manager and Inspectlet, and is well-optimized for mobile devices with good SEO practices. However, it lacks a cookie consent mechanism and some security headers, which are important for full GDPR compliance and security hardening. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness.

N

nFusion Solutions

nfusionsolutions.com

45

nFusion Solutions is a specialized software provider focused on delivering tailored precious metals market tools, including gold price APIs, real-time data feeds, and dynamic pricing catalogs. The company targets bullion dealers, wholesalers, ecommerce businesses, developers, and marketers, positioning itself as a leading provider with over a decade of experience. Their platform is trusted by large online dealers and financial institutions, emphasizing accuracy and reliability in precious metals pricing and data visualization. Technically, the website is built on WordPress with Elementor and uses modern web technologies and multilingual support, hosted likely on InMotion Hosting. Security posture is good with HTTPS and domain transfer lock, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, well-structured, and trustworthy, with clear business information and contact channels.

The domain 1rmg.com is registered since 2017 and hosted on WP Engine with Cloudflare DNS, indicating a potentially legitimate setup. However, the website currently displays only a placeholder 'Site is not available' page with no active content, metadata, or business information. There are no privacy, cookie, or terms of service policies, nor any contact information or forms. The technical infrastructure is minimal and lacks visible security headers or SSL configuration details. No analytics or advertising technologies are detected, and no social media or business contacts are present. Overall, the site is inactive and provides no meaningful business or security information, resulting in a low trust and security posture.

The Good Website Company is a small New Zealand-based business specializing in website design and hosting services with a unique socially conscious business model that donates a portion of hosting fees to charity. The company targets small to medium businesses seeking affordable, functional websites optimized for mobile and search engines. The website is built on the Weebly platform, utilizing standard web technologies including jQuery and Google Analytics for tracking. While the site demonstrates good content quality, clear navigation, and a consistent brand message, it lacks critical privacy and cookie policies and does not provide explicit security or incident response information. The WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the business appears professional but would benefit from enhanced transparency and security practices.

The Federal Reserve Bank of Kansas City website serves as an official portal for the Tenth Federal Reserve District, providing central banking services, economic research, and community development support. The site targets financial institutions, economists, policymakers, and community organizations. It is part of the larger Federal Reserve System, positioning it as a key regional financial institution within the United States. Technically, the website utilizes the Sitecore CMS platform and integrates common analytics and tracking tools such as Google Analytics, Google Tag Manager, and Crazy Egg. The performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. The site lacks visible privacy and cookie policies, which impacts privacy compliance scoring. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies or incident response contacts. The WHOIS data is unavailable due to a malformed response, but the domain appears legitimate given its .org TLD and consistent branding. No vulnerabilities or suspicious patterns were detected in the provided content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve compliance and security posture.

Fuse Creative is a small Auckland-based brand design and creative agency established in 2006. The company offers services in brand strategy and design, advertising and marketing, and engagement and culture change. Their website presents a professional portfolio showcasing various projects for clients, indicating a solid market presence in the New Zealand media sector. The business targets organizations seeking creative brand and marketing solutions, positioning itself as a creative partner to grow brands and sales. Technically, the website employs common web technologies including jQuery, Bootstrap, Google Fonts, and Slider Revolution for dynamic content presentation. It integrates third-party analytics and tracking tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight. The site appears moderately optimized for mobile devices and SEO, with good navigation and content quality. Hosting is provided by a New Zealand-based registrar, Voyager Internet Ltd. From a security perspective, the site lacks visible security headers and does not have DNSSEC enabled, which are areas for improvement. The SSL configuration could not be confirmed from the data provided. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are explicitly listed, which may affect user trust and communication. Overall, the website is professionally designed and functional but requires enhancements in security posture and privacy compliance to improve trustworthiness and regulatory adherence. Strategic recommendations include implementing security headers, enabling DNSSEC, adding privacy and cookie policies, and providing clear contact information to strengthen the site's credibility and user confidence.

B

BlueBarn

bluebarnhq.com

48

BlueBarn is a Dutch-language email marketing software provider offering a SaaS platform that enables businesses to create, personalize, and send email campaigns with detailed analytics and API integration. The company targets businesses and marketers seeking scalable email marketing solutions with tiered subscription plans and a pay-as-you-go option. The website is professionally designed with clear navigation and good mobile optimization, reflecting a moderate level of digital maturity. Technically, the site uses jQuery, Google reCAPTCHA v3, and standard web fonts, but lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS and bot protection but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with terms and conditions present but no dedicated privacy or cookie policies clearly identified. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy of the active website. Overall, the site is functional and professional but could improve in privacy transparency and security best practices.

W

Windekind vzw

windekindleuven.be

46

Windekind vzw is a Belgian non-profit organization specializing in special education and care for chronically and long-term ill children. The organization offers a variety of educational programs including specific learning support centers and collaborates with regular education and partners to provide comprehensive care. The website presents a professional and consistent brand image, targeting parents, educators, and partners involved in special education. Founded in 2004, the organization has an established presence in the Leuven region.

M

We begeleiden kinderen en jongeren met een lichte tot matige verstandelijke beperking, vaak gecombineerd met bijkomende gedrags- en emotionele stoornissen.

mpcterbank.be

41

The website www.mpcterbank.be appears to be a WordPress-based site focused on providing support for children and youth with mild to moderate intellectual disabilities, often combined with behavioral and emotional disorders. The content is primarily informational and supportive, targeting caregivers and families of affected individuals. The site uses modern web technologies including the Astra theme, Elementor page builder, and integrates marketing tools such as Mailchimp. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts its overall trustworthiness and compliance posture. The WHOIS data is restricted and incomplete, limiting the ability to verify domain legitimacy and ownership details. HTTPS is enabled, providing basic transport security.

’t Prieeltje vzw is a small-scale non-profit therapeutic day care center based in Hakendover, Belgium, serving children and youth aged 0 to 21 with severe mental, motor, or multiple disabilities. The organization provides individualized care in a home-like environment, addressing the needs of children who cannot attend special education due to the severity of their disabilities. The website reflects a focused mission with clear service offerings and a local community presence, supported by social media engagement and partnerships such as with tRede.

R

Reynaga's

reynagas.com

43

Reynaga's is a small local business specializing in lawn care services, operating since 2016. The website presents basic business information, prominently displaying a contact phone number and branding consistent with its service offering. The technical infrastructure is based on WordPress CMS using the Divi theme and Yoast SEO plugin, hosted by Bluehost Inc. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit privacy or cookie policies. No analytics or tracking services are detected, indicating minimal user data collection. Overall, the website is functional and safe for general audiences but would benefit from enhanced privacy compliance and security best practices.

L

Lev Diet® — You Nutrition Experts

levdiet.ch

40

Lev Diet® is a Swiss-based company specializing in natural diet and nutrition products, offering a medication-free weight loss method. The website serves as an e-commerce platform and informational resource, targeting consumers seeking healthy and effective diet solutions. The company maintains a consistent brand presence with active social media channels and a clear business focus. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. While the site is secure with HTTPS and no visible sensitive data exposure, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security headers are partially implemented, and no vulnerability disclosure or incident response information is provided. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

P

Privab Grossisterna AB

mywaybutikerna.se

43

MyWay is a Swedish retail chain of independent convenience stores operating under a shared brand owned by Privab Grossisterna AB, established in 2008. The business offers a variety of products including fast food, candy, magazines, beverages, tobacco, lottery services, and postal services. The website is built on WordPress using the Avada theme and integrates Google Maps for store location services. The site is accessible, mobile-optimized, and provides a professional user experience, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. WHOIS data for the domain is unavailable, raising concerns about domain legitimacy despite the professional appearance of the site. Overall, the site serves its business purpose well but should improve privacy compliance and domain registration transparency.

V

Vastgoed Nederland

vbo.nl

44

Vastgoed Nederland operates a comprehensive real estate platform serving the Dutch market, offering property listings for sale, rent, new builds, commercial and agricultural properties. It also functions as a professional association for real estate brokers, appraisers, and building surveyors, promoting professionalism and transparency in the market. The website is well-branded, professionally designed, and targets a broad audience including buyers, sellers, renters, landlords, and real estate professionals. Technically, the site uses modern JavaScript frameworks, integrates multiple marketing and analytics tools, and is hosted on a reliable CDN infrastructure. Security practices include HTTPS enforcement and CSRF protection, though some security headers and explicit policies are missing. Privacy compliance is supported by a comprehensive cookie policy and consent mechanism. Overall, the site demonstrates a mature digital presence with strong business credibility and good security posture.

F

Bedrijfspand Nederland | Zoek bedrijfspanden [funda in business]

fundainbusiness.nl

49

The website www.fundainbusiness.nl appears to be a business-oriented site, but the content is largely inaccessible or blocked, likely due to web application firewall or security mechanisms. The visible data is minimal, with no privacy, cookie, or terms of service policies detected, and no contact information or forms available. The technical infrastructure appears basic with no advanced security headers or analytics tools identified. The security posture is weak due to lack of HTTPS and security best practices. Overall, the site presents a low level of transparency and compliance, which raises concerns about trustworthiness and user confidence.

The website greateplanner.com is currently inaccessible due to a Cloudflare Error 521 indicating the origin web server is down. The domain is newly registered in 2023 with NextName B.V. as the registrar and uses Cloudflare DNS services. No business information, contact details, or policies are present on the site, limiting the ability to assess the company's operations or market position. The technical infrastructure relies on Cloudflare for CDN and security, but the origin server outage severely impacts availability and user experience. Security posture is weak due to lack of visible security headers and DNSSEC not being enabled. Overall, the site lacks content, compliance documentation, and trust indicators, resulting in a low AI score and high risk for visitors and stakeholders.

E

ESight Studio

esightstudio.nl

44

ESight Studio is a Dutch-based small business specializing in custom B2B website and webshop development, complemented by marketing consulting and digital growth strategies. The company positions itself as a quality-driven service provider focused on delivering bespoke digital solutions to B2B clients, aiming to enhance brand presence and customer acquisition. The website is professionally designed using WordPress and Elementor, with modern technologies and SEO best practices implemented. Analytics and tracking tools such as Google Tag Manager, Usermaven, and Leadinfo are used alongside a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and basic security best practices observed, though some security headers could be improved and DNSSEC is not enabled. The domain registration is consistent with the business claims and is relatively new, matching the company's founding year. Overall, the website is trustworthy, professional, and well-optimized for its target audience.

K

Kadastralekaart.com

kadastralekaart.com

49

Kadastralekaart.com operates as a specialized online platform providing free access to cadastral maps and land parcel information for the Netherlands. Founded in 2016, it serves a niche market of Dutch residents, real estate professionals, and others requiring detailed cadastral data. The website offers interactive map features, measurement tools, and downloadable cadastral data, supported by a webshop for related products. The business model combines free access with premium upgrade options, positioning itself as a trusted resource in the Dutch real estate and land information sector. Technically, the website is built on a modern Angular 20 framework, leveraging Leaflet.js for mapping functionalities and integrating WMS services for map tiles. Hosting is provided by Hetzner, a reputable provider, and the site employs Google Tag Manager for analytics with privacy-conscious settings disabling ad personalization. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, and the domain registration is consistent with the business profile, enhancing trustworthiness. Overall, Kadastralekaart.com presents a professional, secure, and privacy-conscious online service with a clear focus on cadastral data for the Netherlands. Strategic improvements in security policy transparency and enhanced security headers could further strengthen its posture and user trust.

A

Awatoru Property

awatoruproperty.co.nz

40

Awatoru Property is a New Zealand-based commercial and industrial property investment partnership combining the expertise of 3Group and the capital strength of a major institutional investor. The company focuses on developing, funding, managing, and owning high-quality commercial and industrial properties primarily in the Auckland region and surrounding areas. Their business model emphasizes long-term property holding with stable leases and sustainable building practices. The website reflects a professional and consistent brand image, targeting investors and commercial tenants. Technically, the website is built on WordPress 6.8.1, utilizing modern frontend technologies such as Bootstrap 4.6.1, jQuery, Owl Carousel, and Google reCAPTCHA v3 for form security. The site is mobile optimized and SEO friendly with proper meta tags and structured data. Hosting details are not explicit but the domain registrar is a reputable provider. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks important security headers and does not provide a security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy disclosures and security headers would strengthen the site's security posture and regulatory compliance.

3

3 Capital

3capital.co.nz

48

3 Capital is a New Zealand-based real estate investment and development company specializing in partnering capital with in-house development and construction expertise to unlock long-term value in property. The company operates through multiple partnerships including 3Capital VA, 3Capital Development Fund, and Awatoru Property, targeting property owners, investors, and tenants. Their business model emphasizes end-to-end control of property projects to deliver higher returns with reduced risk. The website reflects a professional and consistent brand image with clear messaging and good content quality.

D

D3 Development

d3development.co.nz

45

D3 Development is a New Zealand-based property development company specializing in residential, commercial, and industrial real estate projects primarily in Auckland, Bay of Plenty, and Waikato regions. The company focuses on delivering quality homes and commercial buildings, targeting everyday Kiwis and investors. The website reflects a professional and consistent brand image with good content quality and relevant business descriptions. Technically, the site is built on WordPress 6.8.1 using modern libraries such as jQuery, Bootstrap, Owl Carousel, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no visible security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly displayed on the homepage, which may affect user trust. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy compliance aspects.

C

C3 Construction

b3buildings.co.nz

44

B3 Buildings is a New Zealand-based construction company specializing in commercial fit outs, building refurbishment, and maintenance services. As part of the larger 3Group property business, B3 Buildings leverages strong financial backing and integrated services to deliver high-quality projects primarily targeting property managers and owners. Their business model focuses on creating long-term value through reliable and efficient building services. The website reflects a medium-sized enterprise with a professional and consistent brand presence, supported by certifications such as Telarc and Toitu. Technically, the website is built on WordPress 6.8.1 with modern frameworks including Bootstrap 5.3.3, jQuery, and Owl Carousel. SEO is well-implemented using Yoast SEO, and the site is mobile-optimized with good user experience. Hosting and domain registration are consistent with the business location and timeline. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a cookie consent mechanism, which impacts privacy compliance. No visible security or incident response policies are published, which could be a concern for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with a solid business foundation and good technical implementation. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.