High-risk security reports

3

3Group

3group.co.nz

42

3Group is a New Zealand-based property investment, development, construction, maintenance, and management group active primarily in Auckland, Waikato, and Bay of Plenty. Established in 2016, the company has developed or constructed over $500 million in property assets. The business operates through multiple subsidiaries, including C3 Construction, B3 Buildings, D3 Development, 3Capital, and Awatoru Property, providing end-to-end property lifecycle services. The website reflects a professional and consistent brand image targeting property investors, developers, and clients seeking construction and property management services.

B

British Fires Australia & New Zealand

britishfires.com.au

48

British Fires Australia & New Zealand is a retail business specializing in fireplace products, serving the Australian and New Zealand markets. The company has an established online presence with a domain registered since 2000, indicating long-term market participation. The website uses WordPress CMS with the Divi theme and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is professionally designed with good content quality and mobile optimization, targeting general consumers interested in home heating and fireplace products. However, the website lacks explicit privacy and cookie policies, which impacts its privacy compliance score. From a technical perspective, the website employs modern web technologies and is hosted likely on SiteGround, with moderate performance and good SEO optimization. Security posture is adequate with HTTPS enabled, but the absence of security headers and DNSSEC reduces the overall security score. No forms or contact information were detected in the provided content, limiting direct user engagement channels. The security evaluation shows no critical vulnerabilities or WAF blocking, but improvements are recommended in implementing security headers, privacy policies, and cookie consent mechanisms to enhance compliance and trust. The domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness. Overall, British Fires Australia & New Zealand presents a credible and professional online presence with room for improvement in privacy compliance and security best practices to strengthen user trust and regulatory adherence.

S

Sanctuary Labs

sanctuarylabs.com.au

29

Sanctuary Labs is a small Australian-based company specializing in design, marketing, and research services. The website is built on WordPress using the Elementor page builder, indicating a modern and flexible technical infrastructure. The site presents professional content relevant to its business domain, targeting businesses seeking creative and strategic marketing solutions. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. No contact emails, phone numbers, or social media links were found in the provided content, limiting direct communication channels. Security posture is minimal with no detected security headers or advanced configurations, and no evidence of HTTPS enforcement was found in the data provided. WHOIS data shows consistent registration with an Australian registrar, supporting legitimacy. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

PSC Network Insurance Partners is an Australian insurance broking network established around 2020, providing tailored insurance and risk management services through a network of authorised representatives nationwide. The company positions itself as a trusted intermediary with strong insurer partnerships and a focus on personal service and technical expertise. The website is built on WordPress using the Flatsome theme and optimized with SiteGround hosting and Yoast SEO, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is professional and trustworthy with clear business information and contact details, though privacy compliance could be improved.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder when a website is inaccessible or blocked. The page content is primarily the embedded Chrome offline dinosaur game, with no actual business or website content present. Consequently, there is no privacy policy, cookie policy, terms of service, contact information, or business details available. The technical infrastructure is limited to client-side JavaScript and HTML5 Canvas used for the game, with no server-side or hosting information. Security posture cannot be meaningfully assessed due to the nature of the page. Overall, this is not a public-facing website but a browser error page, and thus it lacks any business credibility or compliance indicators.

The website studiebureaujonckheere.be is currently inaccessible, presenting only a minimal HTML message indicating the host name is not valid for the server. This suggests the site is either misconfigured, inactive, or blocked. The domain was registered in 2017 with Combell nv, a reputable registrar, but no further business or contact information is available from the site content. Due to the lack of accessible content, no metadata, scripts, forms, or business descriptions could be extracted. The absence of security headers, SSL information, and privacy policies indicates a very low security posture and compliance level. Overall, the website does not provide any meaningful information or trust signals, resulting in a critical risk assessment and a very low AI score.

G

Glaifa Lichtreclame

glaifa-lichtreclame.com

49

Glaifa Lichtreclame is a well-established Dutch company specializing in the production and installation of light advertising, facade signage, and related products for businesses. With over 75 years of experience and recognized certifications such as installQ and membership in Techniek Nederland, Glaifa positions itself as a trusted partner for companies seeking high-quality signage solutions. Their website reflects a professional and comprehensive digital presence, offering detailed service descriptions, project showcases, and multiple contact channels including forms protected by Google reCAPTCHA. Technically, the website employs modern web technologies including Mapbox for mapping, Google Tag Manager, Google Analytics, Microsoft Clarity, Hotjar, and ClickCease for analytics and security. The site is mobile-optimized with good SEO practices and a clean, consistent design. Security measures include HTTPS enforcement and spam protection on forms, though explicit security headers are not detected, indicating room for improvement. From a security and compliance perspective, the site maintains privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. However, the lack of WHOIS data for the domain raises questions about domain registration transparency, though the professional nature of the site and presence of valid contact information mitigate immediate concerns. No critical vulnerabilities or adult content are present, and the site is safe for general audiences. Overall, Glaifa Lichtreclame demonstrates a strong business and technical foundation with minor areas for security enhancement and domain registration verification. Strategic recommendations include implementing security headers, clarifying domain registration status, and maintaining rigorous third-party script audits to ensure ongoing security and compliance.

T

tRede vzw

trede.be

43

tRede vzw is a non-profit collaborative network of 13 care providers based in the Flemish Brabant region of Belgium. It focuses on delivering coordinated care and support services for persons with disabilities and special support needs by pooling expertise and resources. The website presents a professional and well-structured digital presence with clear navigation and relevant content aimed at clients, partners, and employees. Technically, the site uses common frontend libraries such as Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to registry restrictions, which limits domain trust verification. Overall, the site is trustworthy and serves its non-profit mission effectively.

Stimmt Digital B.V. is a Netherlands-based digital agency specializing in custom websites and webshops with a focus on sleek technology and design. They serve businesses seeking tailored digital solutions, leveraging platforms such as Craft CMS, Shopify, Magento 2, and Laravel. Their portfolio includes 29 cases, indicating a solid market presence and experience. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a medium-sized agency profile. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent, though lacking explicit security headers and privacy policy documentation. WHOIS data is unavailable due to privacy or query failure, which slightly reduces trust but is common for such businesses. Overall, the site demonstrates a mature digital infrastructure and credible business presence.

O

Oncall Communications

oncallcomm.co.nz

43

Oncall Communications is a small New Zealand-based marketing communications consultancy led by Angela Hallberg, specializing in marketing management, advertising, social media, web design, and PR services primarily for small to medium businesses in the transportation and service sectors. The website demonstrates a solid market position with detailed client case studies and a professional online presence. Technically, the site is built on WordPress with a commercial theme and uses common libraries and Google services for analytics and maps. While the site is mobile optimized and well-structured, it lacks explicit privacy and cookie policies and advanced security headers, which are areas for improvement. The domain registration is consistent and legitimate, supporting the business's credibility. Overall, the website is professional and trustworthy but could enhance its privacy compliance and security posture.

Swaffood is a small Belgian retailer specializing in Japanese food products, including sake and related culinary items. The website serves both as an e-commerce platform and an informational resource about Japanese cuisine, targeting consumers interested in authentic Japanese products. The business appears well-established with a domain age dating back to 2008 and clear contact information, including phone numbers, email, and physical address. The presence of a sister site focused on wine indicates a related business ecosystem. Technically, the website uses modern web fonts, icon libraries, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. It employs HTTPS and reCAPTCHA for security but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent banner and a privacy policy page, though GDPR compliance indicators are minimal. Overall, the site is professionally designed with good navigation and mobile optimization, but security and privacy practices could be enhanced. The site is free from adult or explicit content and is accessible without WAF or blocking mechanisms.

T

Tripleclick bvba

tctemplate.be

38

The website 'Tc Template' hosted at tctemplate.be appears to be a business template or placeholder site operated by Tripleclick bvba, a small Belgian company founded in 2019. The site has minimal content and lacks detailed business descriptions, contact information, or policies. Technically, the site uses modern web fonts, FontAwesome icons, Google Tag Manager, and Google reCAPTCHA, indicating some digital maturity and basic bot protection. However, the absence of privacy and cookie policies, security headers, and contact details reflects a low level of privacy compliance and business credibility. The domain registration is consistent with the hosting provider Unix-Solutions BV, supporting legitimacy. Overall, the site is accessible without WAF or blocking mechanisms but requires significant improvements in content, security, and compliance to enhance trust and professionalism.

Buran Studio is a small creative design agency based in Lisbon, Portugal, founded in 2010. The company focuses on delivering innovative design solutions to a diverse client base worldwide. Their website reflects a professional and creative brand identity, emphasizing future-oriented and complex problem-solving capabilities. Technically, the site uses modern JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Typekit fonts, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, and no security headers were detected, which are areas for improvement. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which impacts overall trustworthiness. Strategic recommendations include enhancing security posture, adding compliance documentation, and verifying domain registration details to improve credibility and trust.

The website at imagekit.co is registered to Killbridge Ventures Pte. Ltd., a Singapore-based technology company founded in 2020. However, the accessible website content is minimal, consisting only of a JSON status response, indicating that the site is likely protected or blocked by Cloudflare's Web Application Firewall or security challenge mechanisms. This limits the ability to analyze the site's business description, services, or user experience in detail. The domain registration data is consistent and transparent, supporting the legitimacy of the business entity behind the domain. From a technical perspective, the site is hosted or managed via Cloudflare, but no further technical details such as CMS, frameworks, or scripts are accessible due to content blocking. Security posture cannot be fully assessed, but the lack of visible security headers or policies and the presence of a WAF suggest some level of security hardening. Privacy and compliance documentation such as privacy policy, cookie policy, or terms of service are not found in the accessible content. Overall, the website's security posture and compliance status cannot be fully evaluated due to restricted content access. The domain registration information is positive and consistent with a legitimate technology business. Strategic recommendations include improving content accessibility, publishing comprehensive privacy and security policies, and enhancing transparency to build trust with users and stakeholders.

N

Home - NextUp '25

nextupconference.com

48

NextUp '25 is a specialized business conference focused on youth sports operators, offering keynotes, breakout sessions, and networking opportunities. The event targets a professional audience including directors, operators, entrepreneurs, and other stakeholders in the youth sports industry. The website is professionally designed using WordPress and Elementor, integrating third-party services such as Whova for event registration and Vimeo for video content. The technical infrastructure is modern and supports mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and serves its business purpose effectively.

S

Signature Wealth Strategies

signaturewealth.com

49

Signature Wealth Strategies is a well-established financial advisory firm founded in 2003, serving individuals, families, and business owners primarily in North and South Carolina. The company offers a comprehensive suite of wealth management services including investment management, retirement planning, insurance services, and specialized solutions for women investors and business owners. Their market position is regional with multiple office locations and a strong presence in the Southeast US. The website reflects a professional and consistent brand image, supported by recognized media features and active social media engagement. Technically, the site is built on WordPress using Elementor and hosted likely on SiteGround, with modern tracking via Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS and domain locks but lacks advanced DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

C

Climate Cleanup

climatecleanup.org

44

Climate Cleanup Foundation is a Netherlands-based non-profit organization dedicated to reversing climate change by removing carbon dioxide from the atmosphere and oceans using nature-based solutions. The organization fosters systemic conditions for a regenerative economy and operates through a network of ambassadors and partners. Their website is professionally designed, content-rich, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and hosted on SiteGround, offering good performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks explicit security policies and advanced security headers. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the organization demonstrates credible business operations with strong partnerships and a clear mission, though improvements in transparency and security documentation are recommended.

The website dutchcarboneers.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered with The Registrar Company B.V. since 2021 and is valid until 2025, indicating a legitimate registration without privacy protection. However, the lack of accessible content and security policies limits the ability to assess the company's market position, technical infrastructure, or security posture. The absence of HTTPS and security headers information further restricts security evaluation. Overall, the site appears to be either under maintenance, restricted, or improperly configured, resulting in a very low trust and usability score.

P

Property Concierge

propertyconcierge.com.au

45

Property Concierge is a small Australian company specializing in a wide range of property maintenance and service offerings including electricians, landscaping, flooring, plumbing, and renovations. The company targets property owners and managers seeking comprehensive property care solutions. The website is built on WordPress using modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is supported by the presence of privacy and cookie policies with consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security policies and DNS security would enhance trust and resilience.

P

Puddle Ducks Swim Academy Pty Ltd

pdswim.com.au

46

Puddle Ducks Swim Academy Pty Ltd is a specialized swim school based in Australia offering private and semi-private swim lessons, stroke correction, and swim team coaching for all ages starting from 4 months. The company positions itself as a provider of high-quality, customized swim programs with a focus on safety and confidence building. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeted at parents and children seeking swim education. Technically, the website is built on WordPress using popular plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and cookie consent mechanisms, which are recommended for improvement. WHOIS data is privacy protected but consistent with a legitimate Australian business. Overall, the website is trustworthy and well-suited for its educational purpose.

B

Bosetti Blinds Shutters Awnings

bosetti.com.au

47

Bosetti Blinds Shutters Awnings is a specialized retailer and installer of window furnishings including blinds, plantation shutters, curtains, and awnings primarily serving the Sydney area. The company emphasizes customer service excellence, offering personalized consultations and a wide range of made-to-measure products. Their market position is strengthened by positive customer reviews and industry certifications such as membership in the BMAA. Technically, the website is built on a modern WordPress platform with WooCommerce and Gravity Forms, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA usage, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a professional and trustworthy digital presence suitable for its retail business model.

C

Core Broking Pty Ltd

corebroking.com.au

47

Core Broking Pty Ltd operates as a general insurance broker based in Australia, providing tailored insurance solutions for both business and domestic clients. With over 25 years of professional experience, the company emphasizes personalized service, claims advocacy, and sourcing appropriate insurance products. The website reflects a professional and consistent brand image, targeting Australian insurance customers seeking reliable brokerage services. The presence of regulatory compliance documents and authorized representative statements enhances trustworthiness. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, leveraging modern web technologies such as jQuery and Font Awesome. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. No signs of malware or vulnerabilities were detected. The domain WHOIS data is unavailable due to privacy or query failure, but the domain usage and website content align with a legitimate Australian insurance brokerage. External links to industry associations and privacy partners further support legitimacy. Overall, the website presents a trustworthy and professional front for the business, though improvements in security headers and privacy compliance could enhance its posture. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security.txt file, and providing explicit incident response contacts to strengthen security and compliance. These steps will improve user trust and reduce potential risks.

G

Gremmo Homes

gremmohomes.com.au

44

Gremmo Homes is a medium-sized Australian company specializing in luxury custom home building and design services primarily serving the Sydney metropolitan area. The company emphasizes unique, functional, and individually tailored homes with over 30 years of experience, positioning itself as an established player in the real estate and home construction market. The website showcases a professional portfolio of projects and testimonials, reinforcing its market presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and quality content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is limited due to privacy protection, but the domain appears legitimate and consistent with the business claims. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

M

My Biz Finance

mybizfinance.com.au

35

My Biz Finance is an Australian financial services company specializing in unsecured business loans for small businesses. The company positions itself as Australia's #1 lender for small business unsecured loans, offering fast approvals and funding with loan amounts ranging from $5,000 to $500,000. Their services include various loan types such as business line of credit, car loans for business, equipment loans, invoice finance, and trade finance. The website is built on WordPress using Elementor and related plugins, optimized for performance and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and published privacy or cookie policies, indicating room for compliance improvement. Overall, the website presents a professional and trustworthy image with clear business offerings and customer testimonials.

O

Ovation Hospitality Services

ovationhospitalityservices.co.nz

46

Ovation Hospitality Services is a New Zealand-based hospitality service provider specializing in food and hospitality solutions for schools, hospitals, stadiums, workplaces, and events. The company positions itself as a trusted partner delivering warmth, care, and professionalism across a wide range of sectors. The website reflects a large-scale operation with a comprehensive partnership network and a strong focus on customer experience and quality service delivery. Technically, the website is built on WordPress using modern tools such as Breakdance Builder and Yoast SEO, indicating a mature digital infrastructure with good SEO and user experience. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security documentation.

O

One Foundation

onefoundation.nz

47

One Foundation is a New Zealand-based licensed gaming trust that provides grants and funding to eligible community organizations. The organization operates by distributing proceeds generated from gaming machines hosted by small business owners in pubs and taverns across the country. The website reflects a well-established non-profit entity with a clear focus on community support and responsible gambling. Their market position is regional with a strong community orientation and transparent grant application processes. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively.

The website baanalyser.com is currently inaccessible, displaying only a minimal error message with no substantive content. The domain is registered since 2012 with a reputable registrar, indicating a mature domain age, but the lack of accessible content prevents any meaningful business or service analysis. The technical infrastructure appears minimal with no detected CMS, frameworks, or scripts, and the hosting provider is inferred from nameservers as ztomy.com. Security posture is weak due to absence of HTTPS information, security headers, and DNSSEC. No privacy, cookie, or terms of service policies are present, and no contact information is available, which significantly limits trust and compliance evaluation. Overall, the site appears non-functional or blocked, resulting in a low AI score and high risk for users.

M

MTMO

mtmo.nl

48

MTMO is a Dutch company specializing in marketing services tailored for the real estate sector. Their business model focuses on managing marketing activities for real estate agencies, charging a fixed fee per sold product or service. The website presents a professional image with clear service offerings such as review software and housing websites, targeting real estate professionals in the Netherlands. The company leverages customer reviews and social media presence to build trust and credibility. Technically, the website is built on WordPress with common marketing and analytics tools integrated, including Google Analytics, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and use of reCAPTCHA, but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

T

Tophuis.nl

tophuis.nl

39

Tophuis.nl is a specialized Dutch platform offering unique digital and print marketing solutions for real estate agents and private sellers. The company provides tailored websites per property and custom print materials, all branded to the client's corporate identity, enhancing brand visibility and online presence. The platform integrates with major Dutch real estate organizations such as Realworks, NVM, and VBO, positioning itself as a niche player with exclusive regional partnerships. Technically, the website is built on WordPress with WooCommerce and uses modern libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and secure login forms, though some security headers could be improved. Privacy compliance is basic but present, with privacy and terms pages available. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

The website kzg-shop.nl is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business description, contact information, or user-facing content is available for analysis. The domain is registered since 2017 with DNSSEC enabled, indicating some level of domain security and legitimacy. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies significantly limit the ability to assess compliance and security posture. The technical infrastructure cannot be fully evaluated due to the blocked content, and no security headers or SSL details are available. Overall, the site appears to be offline or access-restricted, resulting in a low trust and credibility score.

F

FinConnect

finconnect.nl

44

FinConnect is a Dutch financial software provider specializing in modular solutions for financial institutions and businesses. Established in 2013, the company offers digital transformation and process optimization services tailored to the finance sector. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant cookie consent mechanisms. Technically, the site is built on WordPress with modern web technologies including jQuery, LESS CSS, and integrates Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS enabled and use of reCAPTCHA on forms, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating legitimacy.

The website mijnwaardecheck.nl currently serves as a minimal placeholder page displaying a 'Not found' message and referencing DatHuis as the creator of the application. The domain is registered with team.blue nl B.V. since December 2020, indicating a relatively new presence. The site lacks substantive content, contact information, privacy or cookie policies, and security features such as HTTPS or security headers. Technically, the site is basic with minimal optimization and no detected analytics or tracking. Security posture is weak due to absence of HTTPS and security policies. Overall, the site appears to be under development or inactive, limiting its business and security maturity.

F

Franssons Konfektyrer AB

franssonskonfektyrer.se

44

Franssons Konfektyrer AB is a well-established Swedish confectionery manufacturer and retailer based in Gränna, with a history dating back to 1965. The company operates as part of the Humble group and offers confectionery products through its website and retail channels. The website reflects a professional and consistent brand image, targeting general consumers interested in traditional Swedish confectionery. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap and jQuery, and includes Google Analytics for user tracking. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, and does not publish security or privacy policies, indicating room for improvement in compliance and security transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Grahns Konfektyr AB

grahns.se

44

Grahns Konfektyr AB is a Swedish confectionery company established in 1949, specializing in manufacturing and retailing a variety of candies including sour, salty, and sweet products. The company maintains a professional online presence with a website that highlights its long-standing heritage and product offerings, targeting a general audience interested in confectionery. The website is built on WordPress, utilizing modern web technologies such as Google Tag Manager and reCAPTCHA to enhance user experience and security. The site is mobile-optimized and provides clear navigation and contact information, supporting good user engagement and trust. Security posture is solid with HTTPS enforced and anti-bot measures in place, though there is room for improvement in implementing security headers and publishing formal security policies. The absence of WHOIS data for the www subdomain introduces some uncertainty, but the overall digital footprint and business information align with a legitimate small-sized retail and manufacturing business in Sweden.

Kryddhuset i Ljung AB operates a retail website specializing in spices, seasoning products, and related accessories such as spice grinders and jars. The company targets consumers and businesses interested in culinary spices and seasoning blends, offering a product catalog with detailed images and ingredient information. The website is hosted on One.com and built using their web editor platform, featuring image sliders and galleries to showcase products. Technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is legitimate and consistent with the business branding but would benefit from enhanced security and compliance measures.

T

Tweek

tweeksweets.com

48

Tweek is a Swedish e-commerce business specializing in confectionery products branded as 'Sweets with benefits.' The website presents a professional and visually appealing platform built on WordPress using the Avada theme, enhanced with translation capabilities via Weglot. The company appears to target a general audience interested in sweets, with a product catalog prominently displayed. The domain is well-established since 2016, supporting the business's legitimacy. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Technical infrastructure is modern but could benefit from enhanced security headers and better analytics configuration. Overall, the business demonstrates a solid market presence but should improve privacy and security transparency.

The website at blstaging.com.au currently serves as a simple directory index page with minimal content and no business-related information. It appears to be a staging or placeholder site rather than a fully developed business website. The domain is registered with an Australian registrar, Synergy Wholesale Accreditations Pty Ltd, and uses standard name servers without DNSSEC enabled. The site is hosted on a LiteSpeed Web Server and includes basic JavaScript for table sorting but lacks metadata, structured data, or any forms and contact details. From a technical perspective, the site demonstrates basic HTTPS support but lacks important security headers and modern SEO or accessibility features. There are no privacy, cookie, or terms of service policies present, indicating low compliance with privacy regulations such as GDPR. No analytics, advertising, or tracking technologies are detected, suggesting minimal user data collection. Security posture is weak due to missing security headers and lack of DNSSEC, though no critical vulnerabilities or malware indicators are found. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, reflecting its staging or placeholder nature. Strategic recommendations include implementing standard security headers, enabling DNSSEC, adding privacy and cookie policies, providing clear contact and incident response information, and improving SSL configuration. Enhancing website content and business information will also improve trust and credibility.

Ducati Aarschot is a specialized Ducati motorcycle dealership based in Aarschot, Belgium, established since 2010. The company offers a range of Ducati motorcycles, including new and used models, along with personalization, fine-tuning, and maintenance services. They maintain a digital presence with a webshop for accessories and clothing, a newsletter, and a dedicated mobile app to engage customers. Their market position is strengthened by recognition such as the Client Satisfaction Award from Ducati Motor Holding, indicating strong customer service and satisfaction. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Google Maps API, and Google Analytics, ensuring a functional and moderately optimized user experience. Security-wise, the site uses HTTPS and reCAPTCHA but lacks explicit security headers and detailed security policies, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though enhancements in privacy compliance and security best practices would further strengthen its position.

Viva Immo BV is a small real estate agency based in Leuven, Belgium, specializing in property sales and rentals with a focus on the Leuven region. The company offers services including property listings for sale and rent, free property valuations, and maintains a professional online presence with clear contact details and social media engagement. The website is well-structured, mobile-optimized, and uses modern web technologies such as Google Analytics and reCAPTCHA to enhance user experience and security. Security posture is solid with HTTPS and bot protection, though it lacks published security policies and incident response contacts. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business.

Wijzijnstaf is a Belgian non-profit organization founded in 2020 that provides personal support and guidance to people with disabilities to enable independent living. The website targets individuals seeking support, caregivers, and professionals in the Leuven region. The organization offers services such as begeleid wonen (guided living), mobile ambulant support, home guidance, and training sessions. The site is well-branded, consistent, and provides clear contact information and social media presence, indicating a trustworthy and community-focused entity. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Maps API, and popular font/icon libraries. The site is mobile optimized and performs moderately well, though no CMS or advanced frameworks are detected. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and has a misconfigured Facebook Pixel. Privacy compliance is basic with a privacy policy and cookie banner but no detailed GDPR statements or security policies. Overall, the site is professional and credible but could improve in security and privacy transparency.

Swaffou is a specialized wine retailer based in Belgium, focusing on wines that reflect the philosophy of the winemaker rather than geographic origin. The company operates a niche business model targeting wine enthusiasts and restaurant partners, offering curated wine selections and organizing discovery events. The website is professionally designed with good content quality and clear navigation, supporting Dutch and French languages. Technically, the site uses modern web fonts, icons, Google Maps, and tracking technologies such as Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and explicit security headers. No formal security or incident response policies are published, which could be improved. Overall, the domain registration is consistent and trustworthy, supporting the business credibility.

Guilliams Group is a Belgian business entity founded in 2018, operating as an umbrella organization for three companies specializing in green power, living solutions, and logistics. The website presents a professional and consistent brand image focused on sustainability and environmental responsibility. The technical infrastructure is moderate, utilizing Font Awesome Pro icons and hosted by Unix-Solutions BV, but lacks advanced frameworks or CMS indications. Security posture is weak due to absence of security headers, privacy policies, and contact information, which limits trust and compliance. Overall, the website is accessible and functional but requires improvements in privacy compliance and security best practices to enhance credibility and user trust.

TvGG is a Dutch-language medical journal serving the Belgian medical community, publishing scientific articles and providing educational resources such as e-books and an academy platform. The website is professionally designed with a clear focus on medical professionals and academics. The technical infrastructure includes modern web technologies and standard analytics tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and a published security policy. The Facebook Pixel is misconfigured with a placeholder ID, which should be corrected to avoid data tracking issues. Overall, the domain registration is consistent and appropriate for the business age and type, indicating legitimacy. The site does not contain adult or explicit content and targets a general professional audience.

P

Publima

publima.be

49

Publima is a Belgian-based company specializing in the production and installation of illuminated signage, facade advertising, and 3D logos for businesses primarily in Belgium and the Netherlands. The company targets both large and small enterprises, offering a broad range of products including LED lighting, facade letters, advertising panels, and retail signage solutions. Their market position is strengthened by large-scale projects such as the rebranding of AXA Bank branches to Crelan, demonstrating operational capacity for extensive assignments. The website reflects a professional and consistent brand image with comprehensive service descriptions and multilingual support. Technically, the website employs modern web technologies including Mapbox for mapping, Google Tag Manager for analytics, and reCAPTCHA for form security. It is built on Craft CMS, indicating a robust content management system. The site is mobile-optimized with good SEO practices and includes privacy and cookie policies compliant with GDPR. Security measures include HTTPS enforcement and CSRF tokens on forms, though explicit security headers are not detected. From a security perspective, the site shows a mature posture with secure forms and privacy compliance but lacks visible incident response or vulnerability disclosure policies. The absence of WHOIS data limits domain registration trust verification, which slightly impacts overall trustworthiness. No critical vulnerabilities or suspicious content were detected. Overall, Publima presents a credible and professional online presence suitable for its B2B signage market. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

Neon Design is a Belgian company specializing in the design, construction, installation, and maintenance of illuminated signage and light advertising for businesses focused on strong brand building. The website is built on WordPress using the Divi theme and incorporates SEO optimization via the Yoast plugin. The technical infrastructure includes Google Fonts and Google Analytics for tracking, although some analytics plugins are not fully configured. The site is served over HTTPS, ensuring secure communication. However, there is a lack of explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. No contact information or security policies are clearly published, limiting transparency. Overall, the business appears legitimate with a long domain history and consistent WHOIS data, but improvements in privacy compliance and security best practices are recommended.

B

Bocovan

bocovan.be

48

Bocovan is a small engineering bureau specializing in the management and supervision of new construction and renovation projects, primarily serving the Kortrijk region in Belgium. Their services focus on industrial projects, high-rise warehouses, offices, and apartments. The website presents a professional image with clear business descriptions and regional targeting. Technically, the site uses a modest technology stack including jQuery 1.9.1, Google Analytics, and a custom slider, built on the Plenso CMS platform. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is moderate with no visible security headers and use of an outdated JavaScript library, and no explicit HTTPS or SSL configuration details were found. Privacy compliance is weak due to absence of privacy and cookie policies, and no GDPR indicators are present. The WHOIS data is restricted and unavailable, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from improved security, privacy compliance, and transparency.

Ontwerpbureau Pauwels BV is a Belgian landscape architecture and urban planning firm with a long-standing presence since 1999. The company offers specialized design and consultancy services focusing on sustainable and circular building projects. Their website reflects a professional and consistent brand image, targeting clients interested in green architecture and urban development. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, and Google Maps API, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking advanced security headers and a formal privacy policy. The domain's WHOIS data confirms legitimacy and consistency with the business history. Overall, the website is trustworthy and professionally maintained, though improvements in privacy and security documentation are recommended.