Security Directory

S

State Insurance NZ

state.co.nz

0

State Insurance NZ is a well-established insurance provider in New Zealand offering a broad range of insurance products including car, home, contents, travel, landlord, and business insurance. The company emphasizes customer ease with online quoting, policy management, and claims processing. Their market position is strong, supported by multiple industry awards and a high financial strength rating. Technically, the website is built on Adobe Experience Manager, uses modern web technologies, and is optimized for performance and mobile devices. Security posture is robust with HTTPS, security headers, and secure login portals, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the company.

A

AMI Insurance

ami.co.nz

0

AMI Insurance is a well-established New Zealand insurance provider, operating as a division of IAG New Zealand Limited. The company offers a broad range of insurance products including car, home, contents, landlord, travel, and business insurance, complemented by value-added services such as roadside rescue. The website reflects a strong market position supported by industry awards and a robust financial strength rating. The target audience primarily consists of New Zealand residents seeking personal and business insurance solutions. The business model focuses on direct online engagement with customers, providing quotes, policy management, and claims services digitally. Technically, the website is built on Adobe Experience Manager CMS and leverages modern web technologies including Adobe Helix RUM for performance monitoring, Typekit for fonts, and Vidyard for video content. The site is hosted likely via Akamai CDN, ensuring fast performance and excellent mobile optimization. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure login portals. However, explicit security headers are not evident, and no cookie consent mechanism was detected, which are areas for improvement. The absence of WHOIS data for the domain is noted but is consistent with the domain being a subdomain under a larger corporate domain. Overall, the security posture is strong with no visible vulnerabilities. The website is safe for general audiences, with no adult or explicit content. Social media presence and multiple trust indicators enhance credibility. Strategic recommendations include implementing cookie consent for privacy compliance, adding security headers, and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

N

NZI

nzi.co.nz

0

NZI is a well-established New Zealand insurance provider specializing in business and personal insurance solutions, operating for over 165 years and backed by the IAG Group. The website presents a professional and comprehensive digital presence targeting New Zealand businesses and individuals through broker partnerships. Technically, the site is built on Adobe Experience Manager with modern technologies and CDN support, delivering fast and mobile-optimized user experience. Security posture is strong with HTTPS and secure forms, though some security headers and explicit privacy mechanisms could be improved. The absence of WHOIS data for the domain is a minor concern but does not detract significantly from the overall legitimacy given the strong branding and parent company affiliation. Overall, NZI's website reflects a mature, trustworthy insurance business with room for minor enhancements in privacy and security transparency.

B

Benvenusa

benvenusa.com

0

Benvenusa is a small, specialized business representing artisanal micro wine producers primarily from Italy and Slovenia. Founded in 2023 by experienced wine industry professionals, the company focuses on niche, hand-harvested vineyards and offers a curated portfolio of wines. The website reflects a professional and consistent brand image targeting wine enthusiasts and distributors interested in high-quality, small-batch wines. Technically, the website uses modern web technologies including Google Tag Manager and JavaScript libraries for enhanced user experience. It is hosted via GoDaddy with SSL enabled, ensuring secure connections. However, the site lacks key compliance documents such as privacy and cookie policies and does not implement cookie consent mechanisms, which are important for GDPR and other privacy regulations. Security headers are not detected, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, allowing full content analysis.

S

Saga

saga.xyz

0

Saga.xyz is a technology company focused on providing advanced blockchain infrastructure solutions, specifically enabling developers and innovators to launch dedicated, scalable, and interoperable Layer-1 blockchains with EVM compatibility. Positioned as a next-generation platform in the Web3 ecosystem, Saga offers tools, developer documentation, and ecosystem support to empower blockchain builders. The website demonstrates a high level of digital maturity with modern frameworks like Next.js and React, embedded multimedia content, and integration with analytics services. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, targeting blockchain developers and Web3 innovators.

R

Registrant of singlefinance.io

singlefinance.io

0

Single Finance operates as a specialized DeFi yield earning platform focusing on marked-to-USD strategies that aim to protect investor capital by minimizing correlation to the general market. Positioned as a pioneering platform in this niche, it targets cryptocurrency investors seeking stable and innovative yield opportunities. The website is built on a WordPress CMS with Elementor, leveraging Cloudflare DNS services and modern web fonts, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled and domain status clear, but lacks advanced DNS security features like DNSSEC and security headers. Privacy and compliance documentation such as privacy and cookie policies are absent in the analyzed content, which represents a compliance gap. Overall, the platform presents a professional and trustworthy front but would benefit from enhanced security and privacy disclosures to improve user trust and regulatory compliance.

澳

澳新省钱快报 dealmoon.com

dealmoon.nz

0

Dealmoon NZ is a Chinese-language e-commerce deal aggregation platform focused on the New Zealand market, providing users with continuously updated discount information across multiple categories including beauty, fashion, electronics, and home goods. The site leverages a modern technical infrastructure with extensive use of Google advertising and analytics technologies, ensuring good performance and user experience across devices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are not clearly presented. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and technical setup indicate a legitimate business operation. Strategic recommendations include publishing clear privacy and cookie policies, adding vulnerability disclosure information, and improving contact transparency.

T

TWYG skincare

twygskincare.com

0

TWYG skincare is a New Zealand-based luxury skincare e-commerce business specializing in products containing Bioactive Totarol™, a natural antioxidant ingredient sustainably sourced from native Tōtara trees. The company positions itself as a niche, scientifically backed brand targeting consumers seeking natural and effective skincare solutions. The website is professionally designed with rich content, clear navigation, and strong branding consistency, reflecting a mature digital presence for a relatively young company founded in 2022. Technically, the site leverages Shopify's platform with integrations of modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and MailerLite, ensuring effective customer engagement and data-driven marketing. Security posture is solid with HTTPS enforced and secure payment processing, though there is room for improvement by enabling DNSSEC and adding more security headers. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its market niche.

E

Eventbrite

eventbrite.co.nz

0

Eventbrite is a leading global event management and ticketing platform that enables users to discover local and online events as well as create and manage their own events. The website is well-branded, professionally designed, and offers a comprehensive suite of services including ticket sales, event marketing, and mobile ticketing apps. The platform targets event organizers and attendees, positioning itself as a key player in the technology and e-commerce sectors within New Zealand and globally. Technically, the website leverages modern frameworks such as Next.js and React, integrates multiple analytics and advertising tools, and employs robust security practices including HTTPS and security headers. Privacy compliance is well addressed with clear policies and consent management mechanisms. However, the absence of WHOIS data for the domain reduces domain registration trustworthiness, though the strong brand presence mitigates this risk. Overall, the site demonstrates a mature digital presence with good security posture and privacy compliance.

G

Global Alliance for Buildings and Construction (GlobalABC)

globalabc.org

0

GlobalABC is a well-established international alliance dedicated to promoting zero-emission, efficient, and resilient buildings and construction sectors worldwide. The organization serves as a collaborative platform for governments, private sector entities, civil society, research institutions, and intergovernmental organizations. Their website reflects a professional and content-rich platform offering resources, reports, and engagement opportunities to its diverse global audience. Technically, the site is built on Drupal 10, uses Cloudflare DNS services, and integrates Google Tag Manager for analytics, indicating a modern and maintainable infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are notably absent, which impacts compliance and user trust. Overall, the site is accessible, well-branded, and trustworthy, with room for improvement in privacy compliance and DNS security.

S

Sazeni-On-line

bettergambling.nz

0

BetterGambling.nz is an affiliate and informational platform focused on providing comprehensive online casino reviews, bonuses, and gambling-related educational content targeted primarily at the New Zealand market. The site is part of a broader network operated by the Czech-based organization Sazeni-On-line, founded in 2020. It offers a well-structured user experience with clear navigation, responsive design, and a strong social media presence. The business model centers on affiliate marketing and content provision to gambling enthusiasts in New Zealand and globally through sister sites. Technically, the website employs modern JavaScript, Google Tag Manager for analytics, and responsive CSS for mobile optimization. While the site performs moderately well, there is room for improvement in accessibility and security headers. The SSL configuration is excellent, ensuring secure HTTPS connections. Privacy and cookie policies are present and GDPR compliant, with a functional consent mechanism. From a security perspective, the site demonstrates good practices such as secure form handling and cookie consent but lacks explicit security policies and incident response information. The absence of WHOIS data and the mismatch between the registrant's Czech location and the New Zealand target market introduce moderate trust concerns. No critical vulnerabilities or malicious content were detected. Overall, BetterGambling.nz is a professionally presented gambling affiliate site with moderate risk due to limited domain registration transparency. Strategic improvements in security policies, domain registration clarity, and enhanced accessibility would strengthen its trustworthiness and compliance posture.

S

Sazeni-On-line

betting-online.nz

0

BettingOnline.nz is an informational and affiliate platform specializing in online sportsbook reviews and betting-related content targeted at the New Zealand market. The business operates under the organization Sazeni-On-line, founded in 2020 and based in Prague, Czech Republic, with a focus on providing trustworthy betting information, bonuses, and educational resources. The website demonstrates a professional design with good content quality and consistent branding across multiple social media channels. Technically, the site uses modern web technologies including JavaScript frameworks and Google Tag Manager for analytics and tracking. Security posture is moderate with HTTPS usage but lacks explicit security headers and detailed security policies. Privacy compliance is basic with cookie consent and privacy policy present. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and well-positioned in its niche but would benefit from enhanced transparency and security measures.

M

MEGA Privacy Limited

mega.io

0

MEGA Privacy Limited operates a privacy-focused cloud storage and communication platform offering a suite of services including cloud storage, VPN, password management, file sharing, and secure chat and meetings. Established in 2012 and based in New Zealand, MEGA positions itself as a leader in secure and private online data storage and communication, targeting individuals, freelancers, and small businesses with competitive pricing and strong privacy guarantees such as zero-knowledge encryption. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the website is built on WordPress with modern web technologies including jQuery and Yoast SEO for optimization. The infrastructure supports desktop and mobile platforms, with a moderate performance profile and good accessibility features. Security practices include HTTPS enforcement, a vulnerability reward program, and cookie consent mechanisms, although some improvements such as enabling DNSSEC and publishing a security.txt file could enhance security posture further. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. The domain WHOIS data is consistent with the business identity, supporting legitimacy and trustworthiness. Overall, MEGA demonstrates a high level of professionalism, security awareness, and privacy commitment, making it a trustworthy provider in the cloud storage and privacy services market.

V

Vapesale24

vapesale24.store

0

Vapesale24 is a small e-commerce business specializing in the sale of vaping products including nicotine salts, disposable vapes, and e-liquids, targeting primarily European customers. The website is professionally designed using Prestashop CMS and Elementor, featuring multiple language options and an age verification overlay to restrict underage access. The technical infrastructure includes HTTPS encryption and integration of Smartsupp live chat for customer support, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC, security headers, and published security policies, which are areas for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy and security transparency.

Tomahawk Tourism Marketing is a New Zealand-based digital marketing agency specializing in tourism sector services including bespoke website design, digital marketing, branding, and consulting. The company targets tourism businesses primarily in New Zealand and Australia, positioning itself as a leading provider with strong industry expertise and a comprehensive service offering. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and consistent branding. Technically, the site uses modern web technologies and integrates multiple marketing and analytics platforms such as HubSpot, Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is high, supported by partner badges and awards, though direct contact emails and phone numbers are not publicly listed, relying on contact forms and social media channels.

Hilti New Zealand operates as a regional website for Hilti, a global leader in manufacturing power tools, fasteners, and construction software. The site targets construction professionals and offers a comprehensive catalog of products and services tailored to the construction industry. The website demonstrates a mature digital presence with modern technologies such as Adobe Experience Manager and Angular, combined with robust analytics and consent management tools to ensure privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust. Overall, the website is professional, well-branded, and trustworthy, reflecting the enterprise-level stature of the Hilti brand in the New Zealand market.

F

fLaMEd fury

flamedfury.com

0

fLaMEd fury is a personal website and blog operated by an individual known as fLaMEd, focusing on web culture, personal interests, and collections such as books and records. The site serves as a digital diary and a curated index of various personal content, targeting a general audience interested in web and personal storytelling. The website is small-scale and niche, with a consistent brand and good content quality. Technically, the site is built using modern web standards and the Eleventy static site generator, hosted with Cloudflare as registrar and DNS provider. The site demonstrates good performance, mobile optimization, and accessibility, with no detected tracking or advertising scripts, reflecting a privacy-conscious approach. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, and does not publish formal security or incident response policies. Overall, the site is trustworthy and well-maintained but could improve privacy compliance and security posture by adding cookie consent and security policies.

P

PURE Sports Nutrition

puresportsnutrition.com

0

PURE Sports Nutrition is a New Zealand-based e-commerce business specializing in premium sports nutrition products including sports drinks, energy gels, protein powders, and hydration solutions. The website is professionally designed and hosted on the Shopify platform, leveraging modern web technologies and multiple third-party marketing and analytics integrations. The brand positions itself as a clean, performance-focused nutrition provider targeting active lifestyle consumers. Technically, the site demonstrates good performance and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and formal policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and transparency.

R

Round the Bays

roundthebays.co.nz

0

Round the Bays is a well-established event series in New Zealand, organizing fun run events across Auckland, Wellington, and Christchurch. The website presents a professional and engaging platform for participants, offering event details, hospitality packages, merchandise, and fundraising opportunities. The business model leverages event participation fees, sponsorships, and merchandise sales, positioning itself as a leading community and charity-focused event organizer in New Zealand. Technically, the site is built on Webflow with integrations for analytics and fundraising widgets, demonstrating moderate digital maturity with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and clearer privacy policies. The absence of WHOIS data limits domain trust verification, but the website content and partner affiliations support legitimacy. Overall, the site is a reliable and professional digital presence for the Round the Bays event series.

I

IRONMAN New Zealand Limited

aucklandmarathon.co.nz

0

The Auckland Marathon website represents IRONMAN New Zealand Limited's flagship running event, showcasing a well-established and reputable marathon with a history dating back to 2000. The site effectively targets runners and sports enthusiasts with detailed race information, multiple race options, and strong branding partnerships including Barfoot & Thompson and ASICS. The business model centers on event management, sponsorship, and merchandise sales, positioning itself as New Zealand's premier marathon event. Technically, the website employs a mature technology stack including SilverStripe CMS, Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Hosting and DNS services leverage Cloudflare for performance and security. The site is mobile-optimized with good SEO practices, though some technical debt is noted with older jQuery versions and lack of DNSSEC. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks some advanced security headers and does not publish a vulnerability disclosure or security policy. The absence of DNSSEC and use of older libraries present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained with a strong business credibility score. Strategic improvements in security posture and transparency would further enhance trust and compliance.

MrBruh.com is a personal blog operated by Paul, a young programmer and aspiring cybersecurity professional from New Zealand. The site focuses on sharing technical blog articles related to cybersecurity vulnerabilities, malware analysis, and programming insights. The blog targets gamers and cybersecurity enthusiasts, providing niche content in the technology sector. The website is built using the Hugo static site generator and hosted by Privex, with DNS managed via Cloudflare. The domain is registered with Tucows Domains Inc. and is relatively new, consistent with the stated founding year of 2023. Technically, the website is well-structured with good mobile optimization and accessibility. However, it lacks advanced SEO optimization and security headers. The site uses HTTPS but does not enable DNSSEC, and no privacy or cookie policies are present. There are no analytics or tracking scripts detected, indicating minimal user tracking. Contact information is provided via email and Signal, but no forms or other data collection mechanisms are present. From a security perspective, the site benefits from domain transfer protections but lacks important security headers and DNSSEC, which could improve its security posture. No vulnerabilities or exposed sensitive data were detected in the content. The absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. Overall, the site is safe for general audiences and does not contain adult or explicit content. The overall risk is low given the personal blog nature, but improvements in security headers, privacy compliance, and DNS security are recommended to enhance trust and protection against potential threats.

The website piefed.social is currently inaccessible, displaying a Cloudflare error 521 indicating the origin web server is down. The domain is newly registered in November 2023 with privacy protection enabled, and no business or contact information is available on the site. The lack of content and policies prevents a full assessment of the business or its services. Technically, the site uses Cloudflare as a CDN and WAF, but the origin server is offline, resulting in poor availability and user experience. Security posture is weak due to missing security headers and no visible SSL configuration. Privacy compliance is absent with no privacy or cookie policies detected. Overall, the site currently presents a high risk due to unavailability and lack of transparency.

X

Xapian Project

xapian.org

0

The Xapian Project is an established open source search engine library primarily written in C++ with bindings for multiple programming languages. It targets developers and organizations seeking to integrate advanced search capabilities into their applications. The project also offers Omega, a packaged search engine application built on Xapian, enhancing its versatility. The website reflects a mature project with a long domain history dating back to 2001, hosted by Gandi SAS, and presents stable version releases indicating ongoing maintenance. Technically, the website is straightforward, using basic HTML and CSS without advanced frameworks or CMS. It is hosted securely over HTTPS but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The site is moderately optimized for performance and mobile devices, with clear navigation and relevant content for its target audience. There is no evidence of analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site benefits from HTTPS but misses several best practices such as security headers and formal privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust in security matters. The WHOIS data shows a consistent domain registration history with no suspicious patterns, supporting the legitimacy of the project. Overall, the website is safe, professional, and credible for its niche audience but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve trust and compliance posture.

L

Lemmy NZ

lemmy.nz

0

Lemmy NZ is a small, community-focused federated social platform instance targeting New Zealand users and content. It operates within the Lemmy and ActivityPub federated network, providing a moderated environment for discussions and content sharing. The platform emphasizes community rules, spam prevention via application-based registration, and transparency in moderation. Technically, it leverages Cloudflare for DNS and CDN services and uses modern web frameworks such as Inferno.js. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced, captcha for registrations, and abuse reporting mechanisms, though explicit security policies and vulnerability disclosures are absent. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, the site is trustworthy and well-maintained, suitable for general audiences without adult content concerns.

S

Sprocket Digital

sprocketdigital.co.nz

0

Sprocket Digital is a New Zealand-based digital marketing agency founded in 2016, specializing in data-driven marketing solutions across multiple channels including Google Ads, social media advertising, SEO, creative services, and email marketing. The company targets businesses seeking to optimize their digital growth through strategic and creative full-funnel marketing approaches. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress with Astra theme and various marketing and analytics tools. Security posture is generally good with HTTPS and Cloudflare DNS, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

S

STIEBEL ELTRON New Zealand

stiebel-eltron.co.nz

0

STIEBEL ELTRON New Zealand is a medium-sized company specializing in the supply of German-engineered heating and ventilation products including heat pumps, water heaters, room heaters, and ventilation systems tailored for the New Zealand market. The company holds a strong market position supported by recognized certifications such as the Superbrand status and memberships in reputable industry associations. Their website reflects a professional and consistent brand image targeting homeowners and businesses seeking energy-efficient heating solutions. Technically, the website employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enabled and secure forms, but missing key security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite active tracking scripts. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the website's security and trustworthiness.

E

Einhell Australia Pty Ltd

ozito.co.nz

0

Ozito.co.nz is an e-commerce and brand website operated by Einhell Australia Pty Ltd, offering a wide range of power tools and garden equipment targeted at DIY enthusiasts and gardeners in New Zealand. The site features a comprehensive product catalog, including cordless tools, battery systems, and garden accessories, supported by rich multimedia content and customer reviews. The brand positions itself as providing quality and value for money with a focus on cordless freedom and brushless technology. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, BazaarVoice, and Zoovu Search, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses CAPTCHA for form protection but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain reduces trust from a domain registration perspective, though the website content and branding strongly indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but could improve transparency in security and incident response policies.

I

igus

igus.co.nz

0

igus is a manufacturer and direct seller specializing in motion plastics, offering a wide range of products such as energy chains, plain bearings, and linear guides. The company targets industrial and manufacturing sectors, positioning itself as an expert in motion plastics technology. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and React, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the overall branding and content suggest a trustworthy business. Strategic improvements include adding comprehensive privacy and cookie policies, security incident response information, and enhancing domain registration transparency.

R

RBTX

rbtx.nz

0

RBTX is a New Zealand-focused robotics and automation marketplace offering affordable and compatible components from leading manufacturers. The platform provides a range of services including product sales, free expert consultations via video calls, feasibility testing, and educational resources through its academy. The website is well-designed with a clear focus on manufacturing and automation professionals seeking cost-effective robotic solutions. Technically, the site leverages modern frameworks such as Next.js and React, hosted on an Australian cloud provider with AWS DNS services. Analytics are handled via Piwik PRO, and scheduling is integrated through Calendly. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy and cookie policies are not detected, indicating a compliance gap. The WHOIS data shows some inconsistencies, notably a domain creation date in the future, which may be a data error but warrants verification. Overall, the site is professional and trustworthy but would benefit from improved security and privacy compliance measures.

N

NZ Herald

nzherald.co.nz

0

NZ Herald is a leading New Zealand news media company providing comprehensive news coverage, opinion, and multimedia content to a broad audience. The website serves as a primary digital platform for news dissemination in New Zealand, offering diverse content including politics, business, sports, entertainment, and lifestyle. It operates under the parent company NZME and offers subscription-based premium content services. Technically, the website employs modern web technologies such as React, Tailwind CSS, and integrates multiple third-party analytics and advertising tools, hosted likely on Microsoft Azure infrastructure. The site demonstrates good performance and mobile optimization with a professional design and clear navigation. Security posture is solid with HTTPS enforced and use of security best practices, though explicit security headers and vulnerability disclosure mechanisms are not clearly identified. Privacy and cookie policies are not explicitly found in the provided content, indicating an area for improvement in compliance. Overall, the website is trustworthy, safe for general audiences, and maintains a high level of business credibility.

Resene Paints Ltd is a well-established New Zealand-based manufacturer and retailer of paint, coatings, stains, wallpaper, and curtains. The company targets a broad audience including DIY enthusiasts, professional specifiers, painters, artists, and schools. Their website offers extensive resources such as colour libraries, technical data sheets, virtual painting tools, and expert advice, positioning Resene as a market leader with a strong brand reputation and sustainability focus. The company has received multiple awards and certifications, reinforcing its credibility and trustworthiness in the industry. Technically, the website employs a mature technology stack including jQuery, Google reCAPTCHA, Facebook Pixel, Google Tag Manager, and Outbrain for marketing and analytics. The site is well-structured with comprehensive SEO and accessibility considerations, though some improvements in security headers and cookie consent mechanisms are recommended. Hosting appears stable and performance is moderate with good mobile optimization. Security posture is solid with HTTPS enforced and use of anti-bot measures, but could be enhanced with additional HTTP security headers and explicit privacy compliance features. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a minor concern but likely due to regional domain registration policies rather than malicious intent. Overall, Resene's digital presence reflects a professional, trustworthy, and customer-focused business with strong market positioning in the retail and manufacturing sectors. Strategic improvements in privacy compliance and security headers would further strengthen their online security and user trust.

L

Loomio Cooperative Limited

loomio.com

0

Loomio Cooperative Limited operates a collaborative decision-making platform designed to help organizations make inclusive, transparent, and efficient decisions without the need for meetings. The website positions Loomio as a tool for membership organizations, governance boards, and self-managing companies, emphasizing open source availability and privacy. The platform offers cloud hosting with options for private hosting and self-hosting, supporting various voting and polling methods and integration APIs. Technically, the website uses modern web technologies including Alpine.js and custom CSS, with a fast, mobile-optimized, and accessible design. Security posture is strong with HTTPS enforced and minimal third-party tracking, though some security headers and explicit incident response policies are absent. Privacy policies are comprehensive and GDPR compliant, but no cookie consent mechanism is present. WHOIS data for the domain is unavailable, which slightly reduces trust but the overall professional presentation and trust indicators support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and adding cookie consent mechanisms.

O

OnlineCasinosKiwi

onlinecasinoskiwi.co.nz

0

OnlineCasinosKiwi is a specialized affiliate marketing website providing expert reviews and rankings of online casinos tailored for New Zealand players. The site offers detailed information on casino bonuses, payment methods, and game selections, positioning itself as a niche leader in the NZ online gambling review market. The business model relies on affiliate partnerships with casino operators, driving traffic through SEO and content marketing. Technically, the website is built on WordPress with Yoast SEO and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy for its target audience but could improve transparency and security practices.

Cryptlib Security is a specialized technology company offering a mature and widely-used Security Software Development Toolkit that enables developers to integrate encryption and authentication services into their applications via a single API. With over 30 years of history and a stable API, cryptlib positions itself as a reliable and efficient solution for embedded systems, applications, and devices across various sectors. The company operates primarily from New Zealand under Digital Data Security Ltd and targets software developers and security professionals seeking robust cryptographic solutions. The website reflects a professional and consistent brand image with comprehensive product information and client testimonials, reinforcing its market position as a trusted security toolkit provider. Technically, the website is built on WordPress with modern plugins and themes, optimized for performance, mobile responsiveness, and SEO. It uses Cloudflare DNS and enforces HTTPS, ensuring secure access. However, the site lacks DNSSEC and explicit security headers, which could enhance its security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is clearly provided, enhancing business credibility. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

A

Audika New Zealand

audika.co.nz

0

Audika New Zealand is a healthcare service provider specializing in hearing aids, hearing tests, and audiologist consultations. The company operates multiple clinics across New Zealand and offers flexible payment options, positioning itself as a trusted provider in the hearing care market. The website is professionally designed, mobile-optimized, and provides clear pathways for booking appointments and accessing services. Technically, the site employs modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a public security policy and incident response information suggests room for improvement. WHOIS data is not publicly available, likely due to privacy protection, but the website content and branding strongly support legitimacy. Overall, the site presents a low-risk profile with good business credibility and compliance with privacy standards.

R

Radio New Zealand

radionz.co.nz

0

Radio New Zealand (RNZ) is New Zealand's public broadcaster, providing comprehensive news, current affairs, and audio content including podcasts and documentaries. The website serves a broad New Zealand audience interested in national and international news, cultural programming, and specialist audio features. RNZ holds a leading market position as a trusted public media entity with a large content offering and consistent branding. Technically, the RNZ website employs a modern SPA architecture with extensive use of JavaScript frameworks and libraries such as D3.js and Observable Plot for data visualization. It integrates advanced monitoring and analytics tools including New Relic, Google Tag Manager, Chartbeat, and Nielsen, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as lack of explicit security incident contact information, suggests room for improvement in privacy compliance and incident response readiness. Overall, RNZ's website is professionally designed, content-rich, and technically sound, reflecting its status as a major public broadcaster. The lack of WHOIS data is consistent with .nz domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

R

Radio New Zealand

rnz.co.nz

0

Radio New Zealand (RNZ) is New Zealand's public broadcaster providing comprehensive news, current affairs, audio on demand, podcasts, and documentaries. The website serves as a primary digital platform for delivering timely and relevant content to the New Zealand public, positioning itself as a trusted media source. The site features a professional design, clear navigation, and multimedia content tailored to a general audience interested in news and cultural programming. Technically, the website employs modern JavaScript frameworks and libraries, including New Relic for performance monitoring, Google Tag Manager for marketing and analytics, and D3.js for data visualization. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident in meta tags and structured content. Performance is moderate, with asynchronous loading of scripts and CDN usage. From a security perspective, RNZ uses HTTPS with good SSL configuration and includes security best practices such as monitoring and error tracking. However, explicit privacy and cookie policies are not evident in the provided content, and no dedicated security or incident response pages were found. The WHOIS data for the domain is unavailable due to registry policies, but the website's public broadcaster status and content quality provide strong legitimacy. Overall, RNZ's website demonstrates a mature digital presence with strong business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and cookie policies, implement a vulnerability disclosure mechanism, and provide explicit contact information for security incidents.

P

Plinko

plinko.co.nz

0

Plinko.co.nz is a niche online platform dedicated to the Plinko gambling game targeted primarily at New Zealand players. The website provides comprehensive information about the game mechanics, betting options, strategies, demo versions, and recommended casinos offering Plinko. It operates mainly as an affiliate marketing and informational site, promoting various online casinos and their bonuses. The site is relatively new, launched in mid-2024, and uses Cloudflare DNS services for hosting and security. The technical infrastructure is modern and supports PC and mobile platforms with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is moderate with clear contact email and social media presence but no phone or physical address. Overall, the site is professional and trustworthy for its niche but could improve in privacy and security transparency.

T

Turnitin

turnitin.co.nz

0

Turnitin is a globally recognized company specializing in academic integrity solutions, including plagiarism detection and grading tools. The New Zealand regional website serves educational institutions and students, promoting original work and academic honesty. The site is professionally designed, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager. Privacy and cookie consent mechanisms are robust, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and security headers present, although no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence consistent with a large enterprise brand.

E

Equifax Pty Ltd.

equifax.co.nz

0

Equifax New Zealand operates as a leading credit reporting and analytics provider serving businesses and enterprises across New Zealand. The company offers a broad range of credit risk, asset verification, fraud prevention, and decisioning solutions, leveraging data on millions of individuals and companies. As a subsidiary of Equifax Inc., it benefits from global brand recognition and extensive data resources. The website is professionally designed, targeting business customers with clear navigation and product offerings. Technically, the site is built on Drupal 7 with jQuery and Bootstrap, integrating modern analytics tools like Google Tag Manager and Hotjar, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure login portals, though some improvements in security headers and library updates are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a trustworthy and credible business presence with a solid market position in the New Zealand finance sector.

I

InnoCraft

innocraft.com

0

InnoCraft is the creator and maintainer of Matomo, a leading open-source digital analytics platform emphasizing privacy, data ownership, and GDPR compliance. The company offers a range of services including support plans, cloud-hosted analytics, and premium features tailored to businesses of all sizes globally. With offices primarily in New Zealand and a strong European presence, InnoCraft positions itself as a trusted alternative to major analytics providers, focusing on openness and customer relationships. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a fast, accessible, and SEO-optimized experience. Security practices are solid with HTTPS enforcement, privacy-respecting analytics, and form protections, though explicit security policies and vulnerability disclosure mechanisms could be enhanced. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and stability.

Portacom is a well-established New Zealand company specializing in modular, portable, and transportable building solutions. With over two decades of domain presence, the company positions itself as a leader in providing flexible and reliable building hire and permanent modular solutions tailored to various industries including education, construction, and workforce accommodation. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting businesses and organizations in New Zealand. Technically, the site is built on Drupal CMS, leveraging modern web technologies such as Google Tag Manager and reCAPTCHA for security and analytics. Hosting is likely on AWS infrastructure, supported by AWS DNS servers. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism despite usage of tracking scripts. Overall, the site demonstrates good business credibility and digital maturity.

B

Brio

brionz.com

0

Brio is a New Zealand-based manufacturer specializing in sliding and folding door hardware, screen solutions, and related accessories for both residential and commercial applications. The company operates under the Allegion family of brands, indicating strong corporate backing and market presence. Their website provides comprehensive product information, warranty details, and downloadable resources, targeting architects, builders, and consumers seeking quality door hardware solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though improvements such as DNSSEC and security headers could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with a medium-sized market footprint.

S

Schlage

schlage.co.nz

0

Schlage New Zealand operates as a reputable manufacturer and retailer of door hardware and smart locks, serving homeowners and businesses with precision-built security products. The website reflects a mature digital presence consistent with its 2006 domain registration and affiliation with parent company Allegion. The site is built on Adobe Experience Manager, leveraging modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA to provide a secure and user-friendly experience. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS enforced and form protections in place, though some security headers could be improved. Overall, the website demonstrates a professional and trustworthy online presence aligned with its business objectives.

A

Allegion plc

allegion.co.nz

0

Allegion plc operates a professional and comprehensive website focused on access and security hardware solutions in New Zealand. The company is a global pioneer with multiple respected brands and a strong market presence. The website targets B2B customers such as architects, fabricators, and distributors, offering a wide range of mechanical and electronic security products. The digital infrastructure is built on Adobe Experience Manager with modern technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be improved. WHOIS data is unavailable, which is unusual but the website content and branding strongly indicate legitimacy. Overall, the site is professional, secure, and trustworthy with minor areas for enhancement.

G

glammr.us

glammr.us

0

glammr.us operates as a niche Mastodon instance dedicated to individuals interested in galleries, libraries, archives, museums, memory work, and records (GLAMMR). It provides a decentralized, harassment-free social media platform emphasizing inclusivity and community support. The platform encourages diverse content beyond GLAMMR topics, fostering a welcoming environment for all users. The business model relies on community donations via Patreon and Ko-Fi to sustain server operations. Technically, the site is built on the Mastodon platform using modern web technologies including React and ES modules, delivering a moderately performant and mobile-optimized user experience. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR-specific disclosures. Overall, the site demonstrates good business credibility and technical maturity for a small independent social media server.

Biogen NZ Biopharma Limited operates a professional and well-structured website focused on biotechnology and healthcare, specifically targeting New Zealand residents and healthcare professionals. The company emphasizes innovation in neurology, neuropsychiatry, specialized immunology, and rare diseases. The website reflects a mature digital presence with clear navigation, professional design, and integration with global Biogen branding and social media channels. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript libraries, and cookie consent management, indicating a solid digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which raises some concerns about domain transparency but does not detract from the overall legitimacy given the strong brand consistency and external references. Overall, the website scores well in content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional corporate site.

ShedCreator.co.nz is an online platform based in New Zealand that provides custom shed and building design services primarily targeting individuals and businesses seeking tailored building solutions. The platform offers user account management, guest access for building design, and a selection of building types including sheds, covers, arenas, heritage barns, cow houses, and mono pitch buildings. The website is built on ASP.NET WebForms using DevExpress controls and integrates Google Analytics for user tracking. The domain is registered with a reputable New Zealand registrar since 2014, indicating an established presence in the market. Technically, the website employs legacy technologies such as jQuery 1.9.1 and lacks modern SEO and accessibility optimizations. The site uses HTTPS but does not explicitly present security headers like CSP or HSTS, which could enhance security posture. Privacy and cookie policies are absent, and no contact information or social media links are provided on the login page, limiting transparency and user trust. The site includes a browser compatibility warning for HTML5 Canvas support, indicating some reliance on modern browser features. From a security perspective, the site uses standard ASP.NET mechanisms for form validation and event handling but lacks advanced security headers and vulnerability disclosure information. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations. The overall security score is moderate, with recommendations to improve header implementation, update libraries, and add compliance documentation. Overall, ShedCreator.co.nz presents a niche, regionally focused business with a functional but basic online presence. Strategic improvements in privacy compliance, security best practices, and technical modernization would enhance trust and user experience.

B

BlueOcean Consulting

blueocean.consulting

0

BlueOcean Consulting is a New Zealand-based consulting firm specializing in helping businesses grow by focusing on customer-centric strategies. Their services include business clarity, organizational structure and process optimization, sales performance enhancement, and team empowerment. The company positions itself as a strategic partner for businesses aiming to improve performance through human-centric approaches. The website demonstrates a professional digital presence with client case studies and research collaborations, indicating a credible market position within the consulting sector. Technically, the website employs modern marketing and analytics technologies including HubSpot, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Microsoft Clarity, and Microsoft Dynamics tracking. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, there is a lack of explicit privacy and cookie policies, which impacts privacy compliance scoring. Security posture is generally good with HTTPS and use of reCAPTCHA on forms, but the absence of security headers and incident response information suggests room for improvement. No WHOIS registrant data is available due to privacy protection or malformed WHOIS response, which is common for consulting firms but limits full trust verification. Overall, the website is professional and trustworthy with moderate technical maturity and a solid business credibility profile. Strategic improvements in privacy compliance and security transparency would enhance the overall risk posture and user trust.

S

Southern Cross Life Insurance

southerncrosslife.co.nz

0

Southern Cross Life Insurance, underwritten by Chubb Life Insurance New Zealand Limited, offers life insurance products targeting New Zealand residents. The company positions itself as the most trusted life insurance brand in New Zealand, providing coverage options up to $1 million, with additional benefits such as accidental death cover and advanced funeral benefits. The website is professionally designed with clear navigation and strong branding consistency, supporting a direct-to-consumer business model with online quoting and application capabilities. Technically, the site leverages modern JavaScript libraries, a Sitecore CMS platform, and Azure CDN hosting, delivering moderate performance and good mobile optimization. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain trust verification, but the website content and branding strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for enhanced privacy compliance and security best practices.