Medium-risk security reports

Fresenius Kabi is a global healthcare company specializing in lifesaving medicines and technologies, serving critically and chronically ill patients worldwide. The company operates under the Fresenius Group umbrella and offers a diverse portfolio including Pharma, Medical Nutrition, MedTech, and Biopharma. The website reflects a mature, enterprise-level digital presence with comprehensive content, clear navigation, and a strong emphasis on sustainability and corporate responsibility. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and multimedia content to engage a global audience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though some gaps exist in incident response transparency and terms of service availability. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and credibility of the site. Strategic recommendations include publishing explicit incident response contacts, terms of service, and vulnerability disclosure information to enhance trust and compliance.

Freepik Company, S.L. operates a comprehensive AI-powered creative suite and stock asset platform, targeting designers, marketers, and content creators globally. The website offers a wide range of AI tools including image, video, and audio generators, alongside traditional stock assets such as photos, vectors, and icons. The business model is subscription and credit-based, supporting professional and personal creative projects. Freepik holds a strong market position as a leading provider in the creative technology space with a consistent brand presence and extensive social media engagement. Technically, the website is built on modern frameworks like Next.js and React, leveraging CDN hosting and advanced consent management tools such as OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a high-quality user experience. Analytics and tracking are implemented moderately with Google Tag Manager and Apollo Tracker, balanced with privacy compliance mechanisms. From a security perspective, Freepik enforces HTTPS, employs standard security headers, and integrates cookie consent management. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the overall legitimacy given the brand's maturity and external trust signals. Overall, Freepik presents a secure, professional, and privacy-conscious platform with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and improving WHOIS transparency to further strengthen trust and compliance.

The website swile.com currently presents minimal content, limited to a basic welcome message without any detailed business description, contact information, or policy documentation. The domain is well-established, created in 2009, and registered through Amazon Registrar, Inc., indicating a legitimate registration history. However, the lack of substantive content and metadata suggests the site may be under development or a placeholder. From a technical perspective, the site uses basic HTML with no detected scripts, forms, or external resources. Hosting appears to be via AWS DNS services. There is no evidence of advanced technology stacks, CMS platforms, or analytics tools. Mobile optimization and SEO are minimal due to the sparse content. Security posture is weak based on the provided data, with no visible security headers, no DNSSEC enabled, and no confirmation of HTTPS usage. The absence of privacy, cookie, and terms of service policies further reduces compliance and trustworthiness. No contact or incident response information is available, limiting transparency and user trust. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements should focus on enriching content, implementing security best practices, publishing compliance policies, and providing clear contact information to enhance trust and usability.

The website organica.com is currently a parked domain managed by GoDaddy.com, LLC, with no active business content or services presented. The page primarily serves as a placeholder to offer the domain for sale or acquisition. The business model is domain parking and resale, targeting domain investors or buyers. The site includes minimal branding and a Trustpilot widget as a trust signal but lacks substantive content or contact information. Technically, the site uses basic JavaScript, CSS, and third-party widgets such as Trustpilot and Google Adsense. It is hosted by GoDaddy and uses their parking infrastructure. The site shows basic mobile optimization and moderate performance but lacks advanced SEO or accessibility features. No CMS or complex frameworks are detected. From a security perspective, the site does not present HTTPS details in the provided content, lacks security headers, and DNSSEC is not enabled on the domain. No security policies, incident response contacts, or certifications are visible. The site does not collect user data or have forms, reducing attack surface but also limiting trust signals. Privacy and cookie policies are present but basic. Overall, the site poses low risk but also low business credibility due to lack of active content and contact information. Recommendations include enabling DNSSEC, improving security headers and HTTPS configuration, and providing clearer privacy and security policies to enhance trust and compliance.

The website rockfeller.com is a parked domain with minimal content, primarily serving advertising placeholders and related search iframes. There is no substantive business information, contact details, or interactive features. The domain is registered since 2002 with eNom, LLC and is not privacy protected, indicating a legitimate registration but the website itself does not represent an active business. The technical infrastructure relies on Bodis DNS and Google advertising services, with no advanced frameworks or CMS detected. Security posture is basic with no security headers or DNSSEC enabled, and privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site appears to be a placeholder or monetized domain rather than a functional business website.

Clicksign is a Brazilian technology company specializing in digital and electronic document signature solutions. Their platform automates the signing process, targeting businesses and professionals primarily in Brazil and Latin America. The website is multilingual, supporting Portuguese, Spanish, and English, reflecting a regional market focus. Clicksign positions itself as a leading SaaS provider in the digital signature space with a user-friendly and secure platform. The company emphasizes automation and legal compliance in document workflows. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including HubSpot, Microsoft Clarity, Google Tag Manager, and Visual Website Optimizer. The site is well-optimized for SEO and mobile devices, with good performance and accessibility basics. Security best practices are observed with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by comprehensive privacy and cookie policies, including GDPR considerations. The lack of WHOIS data reduces domain trustworthiness but the professional website and marketing maturity suggest legitimate business operations. Overall, the site presents a trustworthy and professional digital signature service with room for improvement in transparency around security and contact information. Strategic recommendations include publishing a dedicated security policy and incident response information, establishing a vulnerability disclosure program, enhancing accessibility features, and maintaining regular audits of third-party scripts to mitigate risks. These steps will strengthen trust and compliance, supporting Clicksign's market position and customer confidence.

The website www.ifood.com.br is currently inaccessible due to a Web Application Firewall or security mechanism blocking access, as evidenced by the 'Access Denied' message and reference to an edgesuite.net error page. This prevents retrieval of any meaningful content, metadata, or business information directly from the site. The domain is hosted on Amazon AWS infrastructure, indicated by the AWS nameservers, suggesting a large-scale enterprise setup. The WHOIS data shows the domain is published and consistent with a legitimate business presence. Due to the lack of accessible content, no privacy, cookie, or security policies could be identified, nor any contact information or business descriptions. The site appears to be a major e-commerce platform based in Brazil, likely serving a large user base, but this cannot be confirmed from the blocked content.

Sankhya is a Brazilian technology company specializing in enterprise resource planning (ERP) and business management solutions. Their website presents a comprehensive ecosystem designed to connect people, data, and results, aiming to automate processes and enhance business efficiency and strategic growth. The company targets business clients seeking integrated management software and services. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern CSS frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security-wise, the site enforces HTTPS and uses Cloudflare DNS, but lacks some explicit security headers and published security policies, which are areas for improvement. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

Vattenfall Eldistribution AB operates as a major electricity distribution company in Sweden, serving over 900,000 businesses and private customers. The company focuses on providing reliable and efficient electricity network services, supporting the transition to a fossil-free future. Their website offers comprehensive information and digital services related to grid connections, subscriptions, billing, and outage information, targeting both private and business customers. The company is positioned as a key player in the Swedish energy sector with a strong brand presence and parent company affiliation to Vattenfall. Technically, the website is built using modern web technologies including Angular framework and integrates Microsoft Application Insights and Google Tag Manager for monitoring and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional user experience. Security best practices such as HTTPS and cookie consent mechanisms are implemented, although explicit security policies and incident response information are not published. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the absence of WHOIS domain registration data for the domain 'www.vattenfalleldistribution.se' is a notable anomaly that reduces trust slightly. Overall, the website demonstrates a mature digital infrastructure and compliance with privacy regulations, supporting a trustworthy and user-friendly platform for energy distribution services. Strategic recommendations include publishing detailed security and incident response policies, providing vulnerability disclosure information, and clarifying domain registration details to enhance trust and transparency.

ennit GmbH is a well-established German IT services company specializing in flexible, secure, and sustainable IT infrastructure solutions. With over 20 years of experience, they serve medium to large enterprises across various sectors including technology, banking, trade, and services. Their offerings include virtual data centers, managed IT services, cybersecurity solutions compliant with EU directives such as NIS2, and innovative green IT powered by renewable energy. The company emphasizes compliance with multiple certifications including ISO 27001, PCI DSS, and IDW PS 951, positioning itself as a trusted IT partner in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as Swiper.js and WOW.js for enhanced user experience. The site is mobile-optimized with good SEO practices, although some accessibility features could be improved. Hosting appears to be geo-redundant within Germany, supporting their claims of data sovereignty and security. From a security perspective, the site enforces HTTPS and demonstrates strong adherence to recognized security standards and certifications. However, there is room for improvement in implementing security headers, cookie consent mechanisms, and providing explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Overall, ennit GmbH presents a professional, trustworthy, and compliant digital presence aligned with its business goals. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and customer trust.

The website www.modell-fahrzeug.com is a professionally designed media publishing platform operated by Delius Klasing Verlag GmbH, focusing on model vehicles, model cars, and related hobbies. It offers rich editorial content, news, interviews, and integrates e-commerce services for subscriptions and product sales. The target audience includes hobbyists, collectors, and enthusiasts of model vehicles. The site demonstrates a mature digital infrastructure using modern web technologies such as React, Next.js, and Shopify for commerce integration. It is mobile-optimized and provides a good user experience with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement in security posture. The WHOIS data for the domain is unavailable, indicating the domain may be unregistered or there is an issue with WHOIS data retrieval, which raises concerns about domain legitimacy that should be verified. Overall, the website is a credible and trustworthy media platform with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and clarifying domain registration status to strengthen trust and compliance.

The website is a professional domain brokerage landing page offering the domain fuelish.de for sale. It emphasizes secure payment processing, escrow transaction handling, and fast domain transfer services. The platform targets individuals and businesses seeking premium domains, positioning itself as a trusted intermediary with verified and premium domain badges. Technically, the site uses modern web technologies including Bootstrap and Google reCAPTCHA to ensure usability and security. The security posture is solid with HTTPS and spam protection, though some security headers are not explicitly detected. Privacy compliance is supported by clear links to privacy and terms policies, though no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, with a moderate to good technical and security maturity.

The Deutscher Oldtimer Club operates a membership platform focused on classic and vintage car enthusiasts in Germany, offering exclusive partner discounts and services. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, it uses LivingLogic CMS with standard web technologies and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though security headers are missing and could be improved. The absence of WHOIS data limits domain trust verification but the site content and partner ecosystem support legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism.

Bremen Classic Motorshow is a well-established event organizer specializing in classic and vintage vehicle exhibitions held annually in Bremen, Germany. The website serves as a comprehensive information portal for visitors, exhibitors, and enthusiasts, showcasing event details, registration, and thematic content. The business holds a strong market position within the classic vehicle community, attracting tens of thousands of visitors and hundreds of exhibitors from multiple countries. Technically, the website is built on WordPress with Elementor and integrates modern web technologies including Gravity Forms and Swiper.js for interactive content. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are absent. Overall, the site demonstrates professionalism and strong user experience but would benefit from enhanced compliance documentation and explicit contact details.

Oldtimer Youngtimer App is a German-based niche website dedicated to classic and vintage vehicles, providing a comprehensive database of museums, workshops, dealers, and events related to Oldtimer and Youngtimer vehicles. The site operates on a free model supported by partner advertising and sponsorships, targeting enthusiasts and the general public interested in classic automobiles. The website is built on WordPress CMS with a moderate technical infrastructure including common plugins and Google Analytics for tracking. The content is well-structured, primarily in German, and regularly updated with blog articles and news. Security posture is basic with HTTPS enabled and reCAPTCHA implemented, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and serves its niche well but would benefit from improved security and privacy compliance measures.

MO Medien Verlag GmbH operates the website mo-web.de, a well-established German motorcycle magazine publisher with over 40 years of history. The website serves as a digital platform for their print and digital magazines, targeting motorcycle enthusiasts ranging from sport riders to new entrants. Their business model centers on publishing, digital epaper sales, and advertising. The company maintains a professional online presence with consistent branding and quality content. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and frameworks to deliver a responsive and SEO-optimized experience. Security posture is solid with HTTPS, consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, professional, and well-maintained.

GTÜ Gesellschaft für Technische Überwachung mbH is a leading German organization specializing in official vehicle inspections, technical services, damage assessment, and certification. It holds a strong market position as the largest officially recognized supervisory organization for freelance automotive experts in Germany. The website is professionally designed, content-rich, and targets both private and business customers with a broad portfolio of services including vehicle inspections, technical services, building inspections, and certification. The company operates several subsidiaries and maintains a robust digital presence with social media and partner portals. Technically, the website uses modern technologies including Google Tag Manager and Usercentrics for consent management, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

Robert Bosch GmbH operates the website bosch.de, providing comprehensive information about its products, services, corporate news, and career opportunities primarily for the German market. The company is a large multinational enterprise with a strong market position in manufacturing, mobility solutions, and home appliances. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting both general consumers and business customers. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent components, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration is consistent with Bosch's corporate infrastructure, and the website reflects a high level of professionalism and trustworthiness.

TAK Akademie Deutsches Kraftfahrzeuggewerbe is a German company specializing in providing seminars, eLearning, and software solutions tailored for the automotive trade sector. The company offers a range of educational services including inhouse training, certification courses, and software tools to support automotive professionals. Their market position is supported by ISO 9001 certification and partnerships with recognized automotive trade organizations such as ZDK. The website is professionally designed with consistent branding and clear navigation, targeting automotive industry professionals in Germany. Technically, the website is built on a mature ASP.NET Web Forms platform with JavaScript and CSS for interactivity and styling. The site is mobile optimized and SEO friendly, though it lacks modern security headers and cookie consent mechanisms. Hosting details are limited but the domain uses German domain discount name servers. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious approach or limited tracking. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were found in the provided data. Forms use hidden validation tokens, which is a positive security practice. However, the absence of a cookie consent banner and incident response contact details are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional image with a solid business model focused on automotive education and software. Security posture is moderate with room for improvement in headers and compliance. The risk level is low, but implementing recommended security and privacy enhancements would strengthen trust and regulatory adherence.

KLASSIKWELT BODENSEE is a well-established classic mobility trade fair hosted by Messe Friedrichshafen GmbH in Germany. The website serves as an information portal for the event scheduled for June 12-14, 2026, targeting classic vehicle enthusiasts, exhibitors, and visitors. The business operates in the transportation sector, focusing on classic vehicles on land, water, and air, with a medium-sized organizational scale. The website demonstrates a professional design with consistent branding and good content quality, providing detailed event highlights and partner information. Technically, the site uses modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and basic security headers, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

DEUVET Bundesverband Oldtimer – Youngtimer e.V. is a German non-profit association dedicated to classic and youngtimer vehicle enthusiasts. The website serves as a portal for members and the public to access news, membership information, and advocacy resources related to historic mobility in Germany. The association positions itself as a national representative body for clubs and individuals interested in preserving automotive heritage. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Bootstrap, and Font Awesome. It is hosted on 1und1 servers, with a moderate performance profile and good mobile optimization. The site includes a member area and social media integration, primarily Facebook, but lacks advanced marketing or tracking tools. From a security perspective, the site uses HTTPS but lacks important security headers and a formal vulnerability disclosure policy. Privacy compliance is limited, with no visible cookie consent or GDPR-specific mechanisms. Contact information is primarily via contact forms, with no explicit emails or phone numbers published. The WHOIS data is minimal but consistent with the hosting provider, indicating a legitimate domain. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent contact information to increase trust and user confidence.

die NetzWerkstatt GmbH & Co. KG is a well-established web development and digital agency based in Schleswig-Holstein, Germany, operating since 2002. The company specializes in creating professional websites using TYPO3 and WordPress CMS, alongside offering web applications, database and interface programming, SEO, online marketing, and classic advertising services. Their target audience includes businesses and municipal clients, with a strong focus on E-Government solutions and full-service digital and print media. The company maintains a strong market position in northern Germany with a client base of approximately 900 customers across Europe. Technically, the website is built on WordPress 6.8.3 with the Enfold theme, utilizing modern web technologies such as jQuery and SVG graphics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented via JSON-LD. Hosting is inferred to be managed via ennit.net nameservers. Performance is moderate with good mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms denying ad personalization and storage by default. However, explicit privacy policies, terms of service, and security.txt files are missing, and security headers are not explicitly detected. The WHOIS data is consistent with the website's claims, showing no privacy protection and a domain age appropriate for the business history. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy compliance and explicit security policies. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and adding vulnerability disclosure mechanisms.

The website www.virtualregatta.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any meaningful content, metadata, or business information. The WHOIS lookup failed to return any registration data, indicating the domain may be unregistered, privacy-protected, or the WHOIS data is otherwise unavailable. Consequently, no business details, contact information, or compliance policies are accessible. The technical infrastructure includes Cloudflare's security services, but no further technology stack or CMS details can be discerned. The security posture cannot be fully evaluated due to the lack of accessible content and absence of security headers or policies. Overall, the site presents a low trust profile due to the lack of transparency and blocked content.

The Vendée Globe official website serves as a comprehensive digital platform for the globally recognized solo round-the-world sailing race. It offers detailed race information, skipper profiles, rankings, news updates, and promotes ocean preservation initiatives. The site targets sailing enthusiasts, media, and the general public with a professional and engaging user experience. Technically, the website is built on a modern stack including Drupal CMS, Alpine.js, and Swiper.js, with strong mobile optimization and accessibility features. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. WHOIS data is unavailable, which slightly impacts domain trust but the overall branding and external references strongly support legitimacy.

The domain ulysse-nardin.com is registered since 1997 and is associated with the luxury watch brand Ulysse Nardin. However, the website content is currently inaccessible due to a Fastly CDN configuration error indicating the domain is not recognized by the hosting service. This results in a lack of any visible website content, metadata, or contact information. The technical infrastructure appears to rely on Fastly as a CDN, but the domain is not properly configured, blocking access to the site. Security posture cannot be fully assessed due to lack of content and headers, but WHOIS data shows domain status protections that support legitimacy. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is currently non-functional from a user perspective, severely limiting business and security insights.

Selma.se is a Swedish technology company specializing in AI-driven digital accessibility solutions designed to help businesses comply with the EU's accessibility directives effective from June 2025. Their offerings include automated website adaptation for users with disabilities, monthly accessibility scanning, and legal compliance consulting in partnership with recognized legal experts. The company targets medium to large enterprises in sectors affected by accessibility laws, providing a SaaS model with subscription-based pricing. Technically, the website is built on Webflow with integrations of multiple marketing and analytics tools including HubSpot, Google Analytics, Facebook Pixel, and LinkedIn Insight. Security posture is strong with HTTPS, Content Security Policy, and Cloudflare Turnstile captcha implemented, although explicit security policies and incident response information are not published. The absence of WHOIS data for the www.selma.se subdomain suggests it is an alias or subdomain of selma.se, which should be verified for full legitimacy. Overall, Selma.se presents a professional, trustworthy, and technically mature digital presence with good compliance and marketing practices.

Bundler Solutions AB operates a technology platform that enables digital resellers to offer multiple subscription services through a single integration, streamlining distribution partnerships and boosting competitiveness. The company is positioned as a scalable solution provider in the subscription services market, targeting resellers and content providers primarily in Sweden and the Nordic region. The website reflects a professional and consistent brand image with clear business messaging and customer testimonials from notable partners. Technically, the site uses modern JavaScript modules, Google Tag Manager for analytics, and is hosted on AWS infrastructure, indicating a mature digital presence. Security posture is moderate with domain registration protections in place but lacks visible security headers and published security policies. Privacy and cookie policies are present and GDPR compliant, though no terms of service or incident response contacts are found. Overall, the website is well designed, mobile optimized, and trustworthy, with room for improvement in security transparency and policy disclosures.

Apiary.io is a mature, enterprise-grade API design and documentation platform owned by Oracle Corporation. It serves developers and companies aiming to accelerate and control their API lifecycle through design, prototyping, documentation, and testing tools. The platform is well-positioned in the technology market with a strong backing from Oracle and trusted by major global brands. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site leverages modern JavaScript frameworks, CDN hosting via Akamai, and is optimized for performance and mobile use. Security posture is strong with HTTPS enforcement and domain registration protections, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent management integration. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance security transparency and DNS security.

Nordea Bank Abp, filial i Sverige, operates a comprehensive banking website serving private individuals and businesses in Sweden. The site offers a wide range of financial services including loans, savings, investments, pensions, insurance, and digital banking solutions. The website is professionally designed with clear navigation and extensive content tailored to its target audience. Nordea holds a strong market position as a leading Nordic financial institution with a large enterprise footprint. Technically, the website employs modern web technologies, including asynchronous JavaScript loading, SVG logos, and tag management via Tealium and Adobe Target, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms and GDPR adherence. Overall, the website reflects a high level of professionalism, trustworthiness, and technical maturity, although WHOIS data for the subdomain www.nordea.se is missing, likely due to querying the subdomain instead of the root domain. This does not detract from the legitimacy of the site given the strong brand and security indicators.

Storyspot is a Swedish media platform focused on audio storytelling about places, positioning itself as the largest such platform in Sweden. The website is built on the Wix platform, leveraging modern JavaScript polyfills and performance optimizations to deliver a good user experience. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture shows some best practices in client-side scripting but lacks comprehensive HTTP security headers and formal privacy or cookie policies. The absence of WHOIS data for the www subdomain limits domain trust analysis, though the main domain may be registered separately. Overall, the site is accessible and safe, targeting a general audience with no adult content. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended.

Done Sweden AB operates a digital platform connecting private consumers in Sweden with certified and insured installers specializing in electrical, plumbing, kitchen, and bathroom home installations. The company positions itself as a trusted intermediary offering fixed-price and express services with a strong emphasis on customer satisfaction, evidenced by high Trustpilot ratings and app store reviews. Their business model leverages a mobile app and web presence to streamline booking, quoting, and project management, targeting homeowners in major Swedish cities. Technically, the website is built on Webflow CMS with integrations including Google Analytics, Google Tag Manager, Cookiebot for consent management, Intercom for customer support, and Trustpilot for social proof. The site is well-optimized for mobile and SEO, with fast performance and modern JavaScript libraries.

BoutiqueHotel.me is a specialized online platform operated by Heylab AB, Sweden, focused on curating and facilitating bookings for boutique hotels worldwide. The site offers a rich collection of unique and luxury boutique hotels, complemented by local guides to restaurants, cafés, and cultural spots, targeting discerning travelers seeking distinctive lodging experiences. The platform supports multiple languages, enhancing its global accessibility and appeal. Technically, the website employs modern web technologies including Google Fonts, SVG icon libraries, and Google Analytics, hosted behind Cloudflare DNS services, ensuring reliable performance and moderate loading speeds. The site is mobile-optimized with good SEO practices and a clear navigation structure, contributing to a positive user experience. Security-wise, the website enforces HTTPS and employs domain transfer protection, but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and incident response policies are absent. Overall, BoutiqueHotel.me presents a professional, trustworthy, and user-friendly platform with a solid business foundation and moderate technical maturity.

Bredbandsval.se is a Swedish broadband comparison and ordering platform that helps residential consumers quickly and freely identify the best internet options available at their address. The website positions itself as an independent service, providing unbiased broadband comparisons to facilitate consumer choice in Sweden's telecommunications market. Technically, the site leverages modern web technologies such as Next.js and React, integrating Cookiebot for cookie consent management and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data for the exact domain queried suggests the domain may be a subdomain or alias, which slightly reduces trustworthiness. Overall, the site is professional, safe, and functional, but could benefit from publishing clear privacy and terms of service documents and improving transparency around security and incident response.

Presentjakt.se is a Swedish gift recommendation website that provides curated gift ideas across various categories such as fun gadgets, experiences, summer gifts, and personalized presents. The platform primarily operates as an affiliate marketing site, linking users to partner retailers like coolstuff.se. The site targets Swedish consumers seeking gift inspiration and aims to offer a user-friendly browsing experience with categorized suggestions. Technically, the website is built using modern web technologies including React and Next.js, ensuring a responsive and interactive user interface. However, the site currently lacks visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. Security headers and SSL configuration details are not evident from the provided data, indicating potential areas for improvement in security posture. The WHOIS data for the domain is unavailable or the domain is not registered as queried, which raises some concerns about domain legitimacy from a registration standpoint. Overall, the website presents a professional and clean interface with good content quality but requires enhancements in privacy compliance, security practices, and transparency to improve trust and regulatory adherence.

Developers Bay AB operates as a specialized agency and community platform focused on senior freelance tech consultants in Sweden. Founded in 2015, the company provides services that match consultants with clients, fostering a network for professional growth and project collaboration. Their market position is solid within the Swedish tech freelance sector, supported by a medium-sized business infrastructure and a sister company, Developers Shore. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted on AWS infrastructure, and incorporates modern web technologies and analytics tools with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing. Privacy policies are comprehensive and accessible. Overall, the site is trustworthy and well-maintained, with room for improvement in security policy transparency and incident response readiness.

Connected Skills AB operates a digital platform focused on transparent and automated consultant matching services primarily targeting buyers and sellers of consulting services in Sweden. Founded in 2021, the company positions itself as an innovative player offering efficient recruitment solutions without external sales pressure. The website reflects a professional and consistent brand image with clear business messaging and trust signals such as testimonials and partner logos. Technically, the site is built on WordPress with modern integrations including React components for live search, Google Tag Manager for analytics, and Mailchimp for marketing communications. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements are recommended in DNSSEC and security headers. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the website demonstrates good digital maturity and business credibility, supporting the company's market position as a specialized technology platform in the consulting sector.

Startup 4 Climate is an innovation challenge initiative founded in 2020, aimed at catalyzing ideas that accelerate the energy transition and limit global warming to 1.5 degrees. The initiative is supported by prominent Swedish energy companies such as Ellevio and GodEl, and partners like THINGS and We Don't Have Time. The website serves as a platform for startups to participate, pitch ideas, and gain exposure and funding. The business model revolves around fostering innovation through competitions and networking opportunities, positioning itself as a key player in Sweden's sustainable energy ecosystem. Technically, the website is built on WordPress, leveraging common technologies such as jQuery, Matomo for analytics, and Cookiebot for cookie consent management. The site demonstrates good SEO practices with Yoast SEO integration and is mobile optimized with a responsive design. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements a robust cookie consent mechanism, reflecting good privacy compliance. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the initiative's founding date. Overall, Startup 4 Climate presents a professional, trustworthy, and privacy-conscious web presence supporting an important environmental cause. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

UR is a Swedish public service media company specializing in educational television and radio programming. The website serves as an information portal about UR's mission, current programs, and key topics, targeting a general audience interested in educational content. The organization holds a strong market position as a national public service broadcaster in Sweden, focusing on delivering quality educational media content. Technically, the website is built on WordPress 6.8.2, utilizing the Kadence theme and blocks, with integrations such as Cookiebot for cookie consent management and Google Tag Manager for analytics. The site demonstrates modern web practices including responsive design, SEO optimization via Yoast SEO, and accessibility considerations. Performance is moderate, with good mobile optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses Sentry for error monitoring. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, UR's website is professional, trustworthy, and compliant with privacy regulations, with no indications of malicious activity or content safety concerns. The lack of WHOIS data for the www subdomain is expected and does not detract from the site's legitimacy. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing incident response transparency to further strengthen trust and security posture.

Erik Olsson Fastighetsförmedling is a Swedish real estate brokerage firm with a strong regional presence in cities such as Stockholm, Göteborg, and Malmö. The company focuses on assisting clients in buying and selling residential properties, aiming to provide a secure and trustworthy real estate transaction experience. The website reflects a professional brand image consistent with the real estate industry in Sweden, targeting home buyers and sellers within the country. Technically, the website is built using modern web technologies including React and Next.js frameworks, with integrations of analytics and tracking tools such as Google Analytics, Hotjar, and Cookietractor. The site demonstrates good mobile optimization and a generally good user experience, although some accessibility features could be improved. Performance is moderate, and SEO practices appear adequate. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies in the provided content, which indicates room for improvement in compliance and security best practices. The absence of WHOIS data for the queried subdomain reduces confidence in domain registration legitimacy, although the website content and branding suggest a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the website presents a moderate risk profile with recommendations to enhance security headers, privacy compliance, and domain registration transparency to improve trustworthiness and regulatory adherence.

Vattenfall AB operates as Sweden's largest producer of fossil-free electricity, offering a wide range of energy solutions including electricity contracts, solar panels, heat pumps, and electric vehicle charging infrastructure. The company targets both private consumers and businesses within Sweden, emphasizing sustainability and fossil-free energy production. The website reflects a mature digital presence with modern technologies such as Angular, Optimizely, and Piwik PRO for analytics, alongside a robust GDPR-compliant consent management system. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could enhance trust further. Overall, the site is professional, well-branded, and trustworthy, supporting Vattenfall's market position as a leading energy provider.

Quickyweb is a small Italian web agency specializing in custom digital solutions including professional website development, bespoke management software, AI-powered video and chatbot consultancy, SEO optimization, and eLearning platforms. The company positions itself as a technology innovator for SMEs and professionals seeking to enhance their online presence and digital workflows. The website is well-structured, professionally designed, and mobile-optimized, reflecting a solid digital maturity. The technical stack includes modern front-end frameworks and libraries such as Bootstrap, AOS, Swiper.js, and jQuery, supporting a responsive and interactive user experience. Security practices are acknowledged with references to GDPR and ISO 27001 compliance, and the contact form enforces privacy consent, though technical security headers and vulnerability disclosure mechanisms are absent. Overall, the site is accessible without WAF or blocking, indicating good operational stability. The domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

The website gptw.com.br serves as a professional portal for Great Place To Work (GPTW) consultancy services in Brazil, focusing on workplace culture, certification, and related consultancy offerings. The site targets companies and HR professionals seeking to improve workplace environments and obtain GPTW certification. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted on AWS infrastructure, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Algolia Search. The website demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact information or incident response channels are found, which limits user trust and compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Leadster is a Brazilian technology company specializing in AI-powered marketing chatbots designed to increase qualified lead generation for businesses across multiple sectors including software, education, real estate, and finance. The company positions itself as a key player in conversational marketing with a SaaS business model offering free trials and subscription plans. Their website demonstrates a professional design with clear navigation, client testimonials, and case studies that reinforce their market credibility. Technically, the site uses modern frameworks such as Next.js and Bootstrap, is hosted behind Cloudflare, and integrates marketing and analytics tools like Google Tag Manager and Drip. Security posture is solid with HTTPS and no visible vulnerabilities, though there is room for improvement in security headers and published policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and well-structured but should enhance transparency and compliance documentation.

Hand Talk is a technology company specializing in sign language translation solutions, offering a plugin and an app that make websites and communications accessible in American Sign Language (ASL) and Brazilian Sign Language (Libras). The company positions itself as the largest sign language translation platform globally, supported by significant usage metrics and client testimonials from major corporations such as Mondelez, GM, and Samsung. Their app has been recognized by the United Nations as the best social app in the world, underscoring their social impact and market presence. Technically, the website is built on WordPress with modern web technologies including jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for data insights. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Security-wise, the site uses HTTPS and follows basic best practices but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. WHOIS data is unavailable, likely due to privacy protection, which is justified for this business type. Overall, the website demonstrates a professional and trustworthy digital presence with room for improvement in privacy and security transparency.

The domain pn.vg is registered since 2017 with Gandi SAS as the registrar and uses Cloudflare DNS servers. However, the website content is completely inaccessible, returning only a minimal 'Not Found' message with no metadata, structured data, or business information. There are no privacy policies, cookie notices, contact details, or security disclosures available. The technical infrastructure is minimal, with no DNSSEC enabled and no visible security headers or HTTPS enforcement details. The lack of content and business presence on the website severely limits the ability to assess the company's market position or services. Security posture is basic with no evident vulnerabilities but also no advanced protections. Overall, the site appears inactive or under construction, resulting in a low trust and credibility score.

The website at site.neoassist.com currently serves a 403 Forbidden error page indicating that the content is either non-existent or under construction. There is no accessible business information, contact details, or policies available on the site. The WHOIS lookup failed to return any registration data for the domain, suggesting it may be unregistered or a subdomain without independent registration. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare Insights for analytics, hosted by Locaweb. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. Overall, the site is inaccessible for meaningful content or business analysis, resulting in a low trust and legitimacy score.

Great Place To Work Nederland is a recognized authority in the Netherlands specializing in employer certification, workplace culture improvement, and employer branding services. The company offers a range of services including employee surveys, culture coaching, ESG certification, and participation in Best Workplaces rankings. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting organizations aiming to improve their workplace environment and attract talent. Technically, the site is built on HubSpot CMS with modern marketing and analytics tools integrated, ensuring a solid digital presence. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

Great Place To Work Sweden is a well-established company founded in 2004, specializing in workplace culture improvement, employee engagement surveys, certification, and employer branding services. The company operates primarily in Sweden and is part of the global Great Place To Work network. Their website is professionally designed, mobile-optimized, and rich in relevant content, targeting organizations seeking to enhance their workplace environment and employer brand. The technical infrastructure leverages HubSpot CMS, Bootstrap framework, and integrates modern analytics and marketing tools such as Google Analytics 4, Hotjar, and Google Tag Manager, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though DNSSEC is not enabled, representing a minor security enhancement opportunity. Privacy compliance is well addressed with clear cookie and privacy policies, and GDPR consent mechanisms. Business credibility is supported by certifications, customer testimonials, and consistent branding. Overall, the website presents a trustworthy and professional image with a high AI score of 87, indicating a robust digital and business maturity.

Great Place To Work® Portugal operates as a recognized global authority on workplace culture, providing certification services, employer branding solutions, and rankings of the best workplaces in Portugal and internationally. The company targets organizations seeking to improve and certify their workplace environment, leveraging data-driven insights from employee feedback. Their market position is strong as a leader in workplace culture certification, supported by a professional website with clear service offerings and client engagement portals. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap, jQuery, and Video.js. It integrates Google Tag Manager and Google Analytics for tracking and marketing automation via Marketo. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Contact information is available, though no direct security contact or vulnerability disclosure policy is present. Overall, the website presents a professional and trustworthy digital presence with a solid business model and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust further.

Great Place To Work® Institute Poland operates as a global leader in workplace culture research, consulting, and certification. The website reflects a mature, professional business with a strong market position in Poland and internationally. Their key services include certification, employee surveys, and publishing best workplace lists. The technical infrastructure is based on Joomla CMS with modern libraries and frameworks, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.