Security Directory

S

Brand Identity Design and Visual Communications Design

sparksof.io

59

Sparks of is a brand identity and visual communications design agency based in Helsinki, Finland. The website presents a professional image focused on delivering design services to businesses seeking to establish or enhance their brand presence. The company appears to be a small agency with a clear focus on creative design solutions. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity and compliance with privacy regulations. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of public WHOIS data suggests privacy protection, which is typical for small agencies and does not raise immediate concerns. Overall, the website is well-designed, user-friendly, and trustworthy, but lacks visible contact information and formal privacy or terms of service pages.

E

Evermade

evermade.fi

75

Evermade is a Finnish design and technology agency specializing in creating impactful digital experiences, primarily leveraging WordPress. Positioned as the largest WordPress agency in Finland, Evermade offers services including design, development, digital marketing, and maintenance. Their target audience comprises businesses seeking to enhance their online presence through modern web solutions. Technically, the website is built on WordPress with integrations such as WooCommerce, HubSpot, Google Tag Manager, and Piwik PRO, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization and SEO practices, though some image loading errors were noted. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms via OneTrust, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, with room for improvement in security transparency and accessibility.

M

Maa- ja metsätaloustuottajain Keskusliitto MTK

mtk.fi

55

Maa- ja metsätaloustuottajain Keskusliitto MTK is a professional and advocacy organization serving farmers, forest owners, and rural entrepreneurs in Finland. It holds a central position in representing agricultural and forestry producers, offering key services such as professional representation and support. The website reflects a mature digital presence with a modern CMS (Liferay) and uses contemporary web technologies including React and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a good user experience, although explicit contact and policy pages are not evident in the provided content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks published security policies or incident response information. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

The website www.traktorpool.fi is currently inaccessible due to a DataDome CAPTCHA security mechanism that blocks direct content access. As a result, no meaningful business information, contact details, or policies are available for analysis. The site appears to be protected by a Web Application Firewall or bot mitigation service, which prevents automated or unauthorized access. This limits the ability to assess the company's market position, services, or technical infrastructure. The minimal HTML content consists solely of CAPTCHA-related scripts and iframe embedding, indicating a strong security posture in terms of bot protection but at the cost of accessibility for analysis. From a technical perspective, the site uses DataDome CAPTCHA technology to mitigate automated access. No other technologies, CMS, or frameworks are detectable due to the blocked content. There is no visible evidence of HTTPS configuration, security headers, or SEO optimization. The lack of privacy, cookie, or terms of service policies suggests compliance gaps. No contact or incident response information is available, limiting trust and transparency. Security posture evaluation is constrained by the lack of accessible content. While the presence of CAPTCHA indicates an effort to prevent automated attacks, the absence of visible security headers, SSL information, or vulnerability disclosures is a concern. The domain uses privacy protection for WHOIS data, which is common but reduces transparency. Overall, the site scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the blocked content. The overall risk assessment is moderate to high due to the inability to verify critical security and compliance aspects. Strategic recommendations include improving accessibility by balancing security with user experience, publishing clear privacy and cookie policies, providing contact and incident response information, and implementing standard security headers and HTTPS. Enhancing transparency and content quality will improve trust and compliance posture.

A

Aarrelehti / Viestimedia Oy

aarrelehti.fi

53

Metsänomistajan Aarre is a Finnish subscription-based forestry magazine published 11 times annually, targeting both novice and experienced forest owners. The website provides subscription options, access to a digital archive, and customer service portals. The business operates under Viestimedia Oy and maintains a professional online presence with clear branding and social media engagement. Technically, the site is built on WordPress with Visual Composer and integrates Google Tag Manager and OneTrust for analytics and cookie consent respectively. Security posture is solid with HTTPS and standard security headers, though explicit security policies and privacy documentation are missing. Overall, the site is well-structured and trustworthy, serving a niche media market in Finland.

K

Koneviesti

koneviesti.fi

65

Koneviesti is a Finnish media brand specializing in news, articles, and technical information related to agricultural and construction machinery. It operates under the parent company Viestimedia Oy and offers subscription-based premium content, a technical data service called Konedata, and a podcast named Konepodi. The website targets professionals and enthusiasts interested in machinery and related industries. Technically, the site is built using modern web technologies including React and Next.js, with integrations for analytics and marketing tools such as Google Tag Manager, BlueConic, and UserReport. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS, employs multiple security headers, and provides cookie consent mechanisms, reflecting a mature security posture. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy regulations.

L

Landesnetzwerk Weiterbildungsberatung Baden Württemberg

bildung-bringt-weiter.de

46

Landesnetzwerk Weiterbildungsberatung Baden Württemberg (LN WBB) is a regional network providing free, neutral, and personalized continuing education counseling services to individuals in Baden-Württemberg, Germany. The website serves as a portal to locate advisory centers and offers multiple consultation formats including in-person, video, telephone, and online. The network positions itself as a trusted educational resource with a focus on accessibility and quality standards. Technically, the website is built on WordPress with modern plugins for SEO, accessibility, and cookie management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, though explicit security policies and headers are lacking. Overall, the website is professional, trustworthy, and well-suited for its target audience, but could improve privacy transparency and security documentation.

D

Discover Financial Services, Inc.

discover.com

73

Discover Financial Services, Inc. operates the website discover.com, providing a comprehensive suite of financial products including credit cards, online banking, personal loans, home loans, and identity theft protection. The company is a division of Capital One, N.A., and holds a strong market position as a large, enterprise-level financial institution. The website targets consumers seeking personal financial services and offers a user-friendly, mobile-optimized experience with clear navigation and professional branding. Technically, the website leverages modern technologies such as Adobe Experience Manager for content management, and integrates multiple analytics and marketing tools including Google Analytics, Adobe Launch, Facebook Pixel, TikTok Pixel, and others. Hosting and performance are optimized with Akamai services, ensuring fast load times and excellent mobile responsiveness. Accessibility and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure login forms. While no critical vulnerabilities were detected, the site could improve transparency by publishing explicit security policies and incident response contacts. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. The business credibility is high, supported by trust indicators such as FDIC membership, BBB accreditation, and clear corporate information. Overall, discover.com is a professionally managed, secure, and trustworthy financial services website with extensive content and robust technical infrastructure. The absence of WHOIS data is noted but does not detract from the site's legitimacy given the strong brand presence and comprehensive content.

D

Diners Club International Ltd

dinersclub.com

74

Diners Club International Ltd is a well-established financial services company specializing in premium charge and credit card products with a global presence. The website reflects a mature digital presence built on Adobe Experience Manager, offering rich content about cardmember benefits, business solutions, and exclusive privileges. The company leverages modern web technologies and maintains compliance with privacy regulations through Evidon cookie consent mechanisms. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit security policies could be improved. The absence of WHOIS data is likely due to privacy protection and does not detract from the brand's legitimacy. Overall, the website is professional, trustworthy, and well-optimized for user experience.

The website olx.ba is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of any meaningful business, compliance, or security information from the page. The page title 'Just a moment...' and the presence of Cloudflare challenge scripts confirm that the site is protected by a Web Application Firewall (WAF) which requires human verification before access. Consequently, no privacy policies, contact information, or business details are available for analysis. The technical infrastructure is limited to Cloudflare's security platform with no visible CMS or analytics tools. The security posture cannot be fully assessed due to lack of access, but the presence of Cloudflare indicates some level of protection. Overall, the site cannot be properly evaluated until the WAF challenge is passed and the actual content is accessible.

K

KCUS

kcus.ba

52

KCUS is the University Clinical Center in Sarajevo, Bosnia and Herzegovina, providing a broad range of healthcare services across multiple specialized clinics. The website serves patients, visitors, and healthcare professionals with detailed information about clinics, contact details, and news. Technically, the site is built on WordPress using Elementor and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good navigation and content quality. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy and cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professional but should address privacy and security gaps to enhance user trust and regulatory compliance.

Hydrogroup d.o.o. is a Bosnia and Herzegovina based company specializing in pools, wellness, fountains, and hydromassage pools. Established in 2000, it offers comprehensive services including design, supply, installation, maintenance, and consumables. The company has a solid regional presence with over 350 reference projects and partnerships with leading global brands. The website is built on WordPress with a moderate technical infrastructure including Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and Wordfence plugin, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

O

Općina Ilidža

opcinailidza.ba

60

Općina Ilidža operates as the official municipal government portal for the Ilidža municipality in Bosnia and Herzegovina. The website provides residents and stakeholders with access to public announcements, e-forms, contact information, and details about local governance and services. It serves as a key communication channel between the local government and the community, emphasizing transparency and accessibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging common web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Google Tag Manager is used for analytics and tracking, although privacy disclosures are lacking. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as incident response contacts, suggests areas for compliance and security improvement. Overall, the website is a professional and trustworthy government resource with solid technical foundations. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

K

Kozmo Shop

kozmoshop.ba

39

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

Grand Hotel Neum is a well-established hospitality business located in Bosnia and Herzegovina, offering a wide range of services including accommodation, wellness, dining, and congress facilities. The website reflects a medium-sized hotel with a strong market position as the largest and most luxurious hotel on the Neum riviera. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and integrates third-party booking and analytics services. While the site is functional and content-rich, it lacks modern privacy and security compliance features such as privacy and cookie policies, GDPR indicators, and security headers. The domain registration data supports the legitimacy and long-term operation of the business. Overall, the website is professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

M

McCormick & Company

mccormick.com

73

McCormick & Company is a well-established leader in the spices and seasoning industry, with a history dating back to 1889. The company operates a comprehensive e-commerce platform offering a wide range of seasoning products and culinary content targeted at consumers interested in cooking and recipes. The website reflects a mature digital presence with consistent branding and high-quality content. Technically, the site leverages Shopify as its CMS and e-commerce platform, integrating multiple modern marketing and analytics tools such as Google Tag Manager, New Relic, and various social media pixels. Security practices are robust, with HTTPS enforcement and appropriate security headers, alongside a comprehensive privacy and cookie policy with consent management. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a major brand and may indicate privacy protection or registry issues. Overall, the site demonstrates a strong business and technical foundation with good security posture and compliance.

C

Callebaut

callebaut.com

69

Callebaut is a well-established Belgian chocolate brand with a rich history dating back to 1911. The company offers a comprehensive range of chocolate products and culinary tools targeted primarily at artisans and professional chefs worldwide. Their website reflects a strong commitment to quality, sustainability, and community engagement, including professional training through the Chocolate Academy. Technically, the website is built on Drupal 10, uses modern web technologies, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS and security headers in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the brand's global recognition and consistent online presence.

A

Ardo

ardo.com

62

Ardo is a well-established company specializing in supplying high-quality fresh-frozen vegetables, herbs, and fruits, targeting foodservice, industry, and retail sectors with a strong emphasis on sustainability. The company has a mature online presence with a website built on Drupal 10, integrating modern tracking and consent management tools such as Google Tag Manager and Cookiebot. The website demonstrates good content quality, professional design, and clear navigation, supporting a positive user experience. Security-wise, the site employs HTTPS and domain transfer protections but could enhance security headers and DNSSEC to further strengthen its posture. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, Ardo presents a credible and trustworthy digital footprint consistent with its business claims.

M

Mlinar

mlinar.hr

53

Mlinar is a well-established Croatian bakery and retail food company with a domain registered since 1999, indicating a mature market presence. The website presents a professional design with consistent branding and clear focus on bakery products and retail services. The technical infrastructure includes modern CSS frameworks and JavaScript libraries, with integration of popular analytics and marketing tools such as Google Analytics and Meta Pixel. Cookie consent is managed via Cookiebot, demonstrating attention to privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the website is trustworthy and professionally maintained, serving a general audience with safe content.

S

Samsonite

samsonite.com

68

Samsonite.fi is the official Finnish e-commerce website for Samsonite, a globally recognized luggage brand. The site offers a wide range of travel products including suitcases, backpacks, bags, and personalized accessories, targeting consumers in Finland. The business model is retail-focused with a strong emphasis on product personalization and customer service, supported by a comprehensive online platform. The website reflects a mature market position with consistent branding and a professional digital presence.

M

Mission Foods

missionfoods.com

69

Mission Foods is a well-established brand specializing in Mexican food products such as tortillas, chips, wraps, and related items. The company has a strong market presence since 1977 and targets consumers interested in authentic Mexican cuisine and recipes. Their website provides comprehensive product information, recipes, and store locator services, supporting a retail and e-commerce business model. Technically, the website is built on WordPress with modern technologies including Google Tag Manager, Facebook SDK, and various analytics tools, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, WHOIS data is unavailable or privacy protected, which slightly impacts trust but does not outweigh the strong brand and content quality. Overall, the website is professional, secure, and trustworthy with minor areas for security enhancement.

M

Messenger Links Generator

msng.link

54

The website msng.link offers a specialized online utility service that generates direct messaging links for a wide range of popular messenger platforms including WhatsApp, Telegram, Viber, Facebook Messenger, and others. It targets general internet users and businesses who want to facilitate direct communication via messengers. The business model appears to be free usage supported by advertising revenue, primarily through Google Adsense. The site is small in scale and focused on a niche utility function. Technically, the website employs modern web technologies including SvelteKit and Bootstrap for frontend development, and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate given the nature of the service and lack of sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving privacy compliance to build greater user trust and regulatory adherence.

P

ProfiCentar

proficentar.ba

61

ProfiCentar is a professional e-commerce retailer specializing in tools and equipment, offering over 3500 items from renowned global brands. The website targets professional users and retail customers primarily in Bosnia and Herzegovina, positioning itself as a leading supplier in the region. The business model focuses on online sales supported by a comprehensive product catalog and customer support via phone and email. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is well-structured, mobile-optimized, and employs HTTPS with appropriate security headers, reflecting a good digital maturity level. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but the absence of published security policies and incident response contacts suggests room for improvement. Overall, the site is professional and trustworthy, with recommendations to enhance compliance and transparency.

A

Adriaticket

adriaticket.com

54

Adriaticket is an established online ticketing and event promotion platform primarily serving Croatian and regional markets. Founded in 2012, it offers ticket sales for concerts, festivals, and cultural events, leveraging a custom-built website with AngularJS and Bootstrap frameworks. The platform integrates multiple third-party services including Google Maps, Facebook SDK, and YouTube APIs to enhance user experience. While the website is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but absence of DNSSEC and security headers present areas for improvement. Overall, Adriaticket demonstrates a solid business presence with moderate risk, suitable for general audiences and event attendees.

O

ORION TELEKOM d.o.o.

tickets.rs

52

Tickets.rs is an established online ticketing platform operated by ORION TELEKOM d.o.o., founded in 2008 and serving primarily the Serbian market. The platform offers online ticket sales for a variety of entertainment events including concerts, theater performances, festivals, and sports events. The website demonstrates a professional design with good user experience and clear navigation, targeting a broad audience interested in cultural and sports events. Technically, the site is built using Angular 9, integrates Google Maps and Google Analytics, and employs modern UI components such as Material Design and Swiper.js for carousels. While HTTPS is enforced and no sensitive data is exposed, the site lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak as no explicit privacy or cookie policies were found, and no consent mechanisms are implemented. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the site is functional and trustworthy but would benefit from improved privacy and security practices.

Entrio.si is an established online ticketing platform founded in 2012, primarily serving Slovenia and neighboring regions. It offers ticket sales and event promotion services for concerts, festivals, conferences, exhibitions, and theater performances. The platform targets a broad audience interested in cultural and entertainment events, providing a user-friendly interface with multi-language support and social login options. The business operates in the media sector with a medium-sized footprint and maintains consistent branding and good content quality.

M

Ministerstvo práce, sociálnych vecí a rodiny Slovenskej republiky

mpsvr.sk

60

The website www.mpsvr.sk is the official online presence of the Ministry of Labour, Social Affairs and Family of the Slovak Republic. It serves as a comprehensive portal for citizens, employers, and social service providers offering information on employment, social assistance, family benefits, social insurance, and pension systems. The site is authoritative and well-positioned as a government resource with consistent branding and clear contact information. Technically, the site uses a range of JavaScript libraries and the WebJET CMS platform, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response disclosures are recommended. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for general audiences.

T

The Human Safety Net

thehumansafetynet.org

65

The Human Safety Net website represents a global non-profit network focused on social support and community empowerment. The site aims to connect people to help transform lives, emphasizing humanitarian values. The website's content is well-structured, with consistent branding and a professional design that targets a general audience interested in social good. However, the absence of explicit business model details and contact information limits deeper business insights. Technically, the website employs modern JavaScript libraries such as jQuery and Kaltura for media playback, alongside common analytics and tracking tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site appears moderately optimized for performance and mobile responsiveness, though accessibility features are basic. The lack of detected CMS or hosting provider information suggests a custom or proprietary platform. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance with GDPR and other regulations. The WHOIS data is incomplete or obscured, which raises concerns about domain registration transparency and trustworthiness. No forms or direct contact channels were found, limiting user engagement and support avenues. Overall, the website is functional and professionally presented but requires improvements in privacy compliance, security best practices, and transparency of domain registration to enhance trust and credibility.

P

Profi Aesthetics

profi-aesthetics.eu

39

Profi Aesthetics is a small graphic design portfolio business based in Germany, showcasing a diverse range of creative projects including artwork, book design, web design, exhibition design, and event campaigns. The website serves primarily as a visual portfolio targeting general audiences interested in graphic design services. The business model focuses on presenting past projects to attract potential clients or collaborators. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery 1.12.3, and Swiper.js for interactive slideshows. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, the use of an outdated jQuery version and lack of modern frameworks or CMS indicates room for technical modernization. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation from the provided data, which may expose it to certain risks. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. No contact or incident response information is available, limiting transparency and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

]

]init[ AG

dialog-box.de

64

The website dialog-box.de represents ]init[ AG, a medium-sized German company specializing in digital participation platforms for government and NGOs. Their flagship product, DIALOG BOX, is a cloud-native SaaS solution designed to facilitate public and stakeholder engagement through a modular and secure platform. The company has a strong market position with over 10 years of experience and more than 130 implemented projects, supported by certifications such as EMAS and ISO 14001. The website content is professional, comprehensive, and targeted at public sector clients and organizations seeking digital dialogue solutions. Technically, the site is built on modern frameworks including Next.js and React, hosted securely on AWS in Germany. It employs best practices such as HTTPS, session cookies, and a cookie consent mechanism with Matomo analytics for privacy-respecting user tracking. Accessibility is addressed but partially incomplete, with ongoing improvements noted. The site is fast, mobile-optimized, and SEO-friendly. From a security perspective, the site demonstrates a solid posture with appropriate headers, encrypted connections, and secure user authentication flows. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, the website and business present a low-risk profile with strong compliance to GDPR and professional operational standards. Strategic recommendations include enhancing accessibility compliance, publishing a dedicated security policy, and establishing formal vulnerability disclosure channels to further strengthen trust and security maturity.

The website 'Reden bewegen – WOHIN?' is a cultural and educational initiative by the Jüdisches Museum Frankfurt in cooperation with the Bundeszentrale für politische Bildung. It focuses on democratic education and remembrance culture through a mobile sound installation and workshops targeted at secondary school students and teachers. The project is positioned as a non-profit educational offering with municipal support, emphasizing political education and democratic awareness. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript with jQuery 1.12.3. The site is accessible, well-structured, and mobile-optimized but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and implementing security best practices. Overall, the site is trustworthy, professional, and serves its educational mission effectively.

P

Die Frankfurter Paulskirche

paulskirche.de

43

The website paulskirche.de represents the Frankfurter Paulskirche, a historical and governmental site focused on democracy and cultural heritage. The site uses modern web technologies such as React and Next.js, indicating a contemporary technical infrastructure. However, the content is minimal and primarily serves as an informational landing page with limited interactive features. The security posture is basic, with no visible security headers or privacy policies, and no contact information is provided, which limits user trust and compliance with privacy regulations. Overall, the site is legitimate and consistent with municipal ownership but would benefit from enhanced security and compliance documentation to improve trust and user engagement.

The website kaarna.fi is a parked domain primarily intended for sale, as indicated by the prominent domain sale banner and minimal content. The site lacks substantive business information, contact details, or services, positioning it as a placeholder rather than an active business site. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense and Youseasky, hosted via Cloudfront CDN. The site shows moderate performance but limited mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, suitable only as a domain sale landing page.

C

Catcha

avida.fi

60

Catcha.fi operates as a specialized domain sales and leasing platform focusing on Finnish .fi domains. The company, registered in Finland and founded in 2022, offers domain purchase, leasing, backorder, and selling services targeting individuals and businesses interested in Finnish domain names. The website presents a professional and consistent brand image with clear business information and contact details, positioning itself as a niche player in the domain marketplace sector. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google reCAPTCHA for analytics and security. Hosting appears to be on Amazon AWS infrastructure, ensuring reliable performance. The site is mobile-optimized and SEO-friendly, with good navigation and content quality. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partially addressed with a clear privacy policy, but the absence of a cookie consent mechanism may pose GDPR compliance risks. No signs of malicious activity or vulnerabilities were detected. Overall, Catcha.fi demonstrates a solid business and technical foundation with room for security and privacy improvements. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

B

Brocc AB

brocc.fi

63

Brocc AB operates a Finnish branch website brocc.fi offering financial services focused on smarter loans and savings solutions. The company positions itself as a consumer-friendly alternative to traditional banks, targeting individuals seeking flexible loan and savings products. The website is professionally designed, mobile-optimized, and built on modern web technologies such as React and Gatsby, hosted likely on AWS infrastructure. Security posture is strong with HTTPS, DNSSEC, and standard security headers implemented. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. No critical vulnerabilities or suspicious indicators were found, supporting a high legitimacy score. Overall, Brocc.fi presents a credible and trustworthy financial service platform with a solid technical foundation and good user experience.

C

Collector

collector.se

71

Collector is a Swedish financial services provider offering personal loans, credit cards, and savings accounts primarily targeting private individuals and businesses in Sweden. The company operates under the brand Collector, which is part of Norion Bank AB. The website demonstrates a mature digital presence with a focus on user experience, clear product offerings, and compliance with privacy regulations such as GDPR. The technical infrastructure includes modern web technologies, cookie consent management, and analytics integration, reflecting a well-maintained platform. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and aligned with industry standards for financial services.

T

TF Bank AB

tfbank.fi

72

TF Bank AB operates as a consumer finance bank specializing in loans and savings accounts, primarily targeting Finnish consumers. The website presents a professional image with clear navigation and relevant content describing their financial products. The company is part of the TF Bank Group, with a domain age consistent with its business history since 2012. The technical infrastructure includes modern analytics and consent management tools, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates a mature digital presence suitable for a financial institution, with room for improvement in transparency around security and legal terms.

T

TF Bank AB

halino.fi

71

Halino.fi is a Finnish consumer loan service operated by TF Bank AB, a Swedish financial institution. The website offers unsecured loans up to 6000 euros with quick online application and approval processes, targeting Finnish consumers needing financial support for everyday or celebratory expenses. The business is positioned as a reliable, transparent lender with clear contact information and regulatory compliance. Technically, the site uses modern web technologies including React, jQuery, and Umbraco CMS, hosted likely on Azure, with integrated analytics and consent management tools. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though some HTTP security headers could be improved. Overall, the site is professional, user-friendly, and compliant with GDPR and Finnish regulations.

M

Morrow Bank ASA

morrowbank.fi

68

Morrow Bank ASA is a Nordic financial services provider specializing in consumer loans, credit cards, and insurance products. The company recently rebranded from Komplett Bank, emphasizing a forward-looking brand identity focused on the future. Their website targets consumers primarily in Finland and the Nordic region, offering flexible credit solutions and digital payment options such as Apple Pay and Google Pay. The business model centers on retail banking services with a medium-sized market presence and a clear digital-first approach. Technically, the website is built on modern frameworks including Next.js and React, with content managed via Sanity CMS and hosted likely on Azure infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Integration with Google Tag Manager and Usercentrics CMP indicates a mature approach to analytics and privacy compliance. From a security perspective, the site enforces HTTPS, implements strong security headers, and uses cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, and a vulnerability disclosure program is absent. Overall, the website and domain registration data indicate a legitimate, trustworthy financial institution with a strong digital presence. The domain age aligns with the company's recent rebranding, and registrant information is consistent with the business identity. The site is safe for general audiences and complies with relevant privacy regulations.

N

Nordax Bank AB (publ)

nordax.fi

64

Nordax Bank AB (publ) is a well-established Nordic specialist bank founded in 2003, focusing on providing unsecured loans, loan consolidation, and savings products primarily to Finnish consumers. The website is professionally designed, mobile-optimized, and uses modern web technologies such as React, Next.js, and Sanity CMS. It demonstrates a strong digital maturity with good SEO and accessibility features. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published on the site. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site reflects a trustworthy and credible financial institution with clear business information and contact details.

R

Resurs Bank AB (publ) Suomen sivuliike

resursbank.fi

69

Resurs Bank AB (publ) Suomen sivuliike operates as a financial services provider in Finland, offering consumer loans, loan consolidation, credit cards, and payment solutions for businesses. The company targets both private individuals and corporate customers, positioning itself as a trusted and established player in the Finnish financial market. The website reflects a professional and user-friendly digital presence, supporting the business model with clear service offerings and customer engagement tools. Technically, the site leverages modern web technologies including React, Google Tag Manager, and reCAPTCHA, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website demonstrates good compliance with privacy regulations, including GDPR, and provides comprehensive contact and policy information. Strategic recommendations include enhancing transparency around security incident handling and data protection officer contacts to further build trust.

Svea Bank is a well-established financial services provider operating in Finland, offering financing, debt collection, and payment services. The website presents a professional and consistent brand image with a focus on user privacy and consent management, as evidenced by the comprehensive cookie consent mechanism. The technical infrastructure leverages modern technologies such as Astro framework, Google Tag Manager, and Matomo analytics, indicating a mature digital presence. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit security policies, which are recommended for improvement. The absence of WHOIS data limits domain legitimacy verification, but external verifications and consistent branding support the site's credibility. Overall, the website is functional, compliant with privacy regulations, and targets consumers and businesses in the Finnish financial sector.

B

Bank Norwegian, a branch of NOBA Bank Group AB (publ)

banknorwegian.fi

74

Bank Norwegian, operating as a branch of NOBA Bank Group AB (publ), provides consumer financial services including loans, credit cards, savings accounts, and insurance products primarily targeting Finnish consumers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. The company maintains an international footprint with sister sites in multiple European countries, reinforcing its market position as a regional consumer finance provider. Technically, the website leverages modern web technologies such as React and Material-UI, with media assets hosted on Cloudinary and analytics via Google Tag Manager and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices implemented. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the website demonstrates a mature digital presence suitable for a financial institution, with minor areas for improvement in security transparency and contact information availability.

M

mpmX

mpm-processmining.com

65

mpmX is a technology company specializing in modular process mining and process intelligence solutions designed to handle complex data environments. Positioned as a leader in the Gartner Magic Quadrant, mpmX targets organizations seeking to optimize and streamline their business processes through advanced data mining and analytics. The website reflects a mature digital presence with professional design, clear messaging, and integration of modern web technologies such as Webflow CMS and Lottie animations. The technical infrastructure includes reputable hosting and DNS providers, with embedded cookie consent mechanisms indicating awareness of privacy compliance. Security posture is adequate but could be improved by enabling DNSSEC and publishing explicit security policies. Overall, the domain registration and website content indicate a legitimate and established business with a strong market position in the process mining industry.

M

mpmX

mpmx.com

64

mpmX is a German-based technology company specializing in modular process mining and process intelligence software designed to handle complex data environments. The company positions itself as a leader in the Gartner Magic Quadrant, offering solutions that enable enterprises to optimize and streamline their business processes. The website reflects a mature digital presence with professional design, clear messaging, and targeted content for enterprise clients. Technically, the site is built on Webflow, uses modern web technologies including Lottie animations and SVG graphics, and integrates privacy and analytics tools such as Iubenda and Google Tag Manager. Security posture is strong with HTTPS enforced and standard security headers present, though DNSSEC is not enabled. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the domain age and WHOIS data support the legitimacy and credibility of the business.

Y

yippy LLC

eu-verbraucher.de

66

The website represents yippy LLC's profile page for the European Consumer Centre (EVZ) Germany, a trusted entity providing consumer protection and advisory services within the EU. It offers free support for cross-border consumer disputes and is part of a larger EU-funded network. The site is well-structured, professionally designed, and targets EU consumers needing assistance with cross-border purchases and services. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and domain locks, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is credible and trustworthy but could improve security and privacy transparency.

V

Verbraucherzentrale

post-aerger.de

57

The website www.verbraucherzentrale.de is an official consumer protection platform in Germany, operated by the Verbraucherzentrale organization. It provides comprehensive consumer advice, here specifically about traceable postal letter services. The site is well-structured, professionally designed, and uses modern technologies including Drupal 10 and Matomo analytics. It is mobile optimized and accessible, with a clear privacy policy and multiple regional links. Security posture is good with HTTPS enforced, though some security headers are not explicitly visible. Contact is primarily via contact forms rather than direct emails or phone numbers on this page. Overall, the site is trustworthy and serves a large audience of German consumers seeking reliable information.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

mlr-bw.de

66

The website represents the official online presence of the Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg, a government ministry responsible for agriculture, rural development, consumer protection, forestry, animal health, and nutrition in the German state of Baden-Württemberg. It serves as an authoritative source of information for citizens, stakeholders in agriculture and forestry, and consumers. The site offers comprehensive content including news, press releases, service information, career opportunities, and links to related government portals and campaigns. The target audience includes the general public, professionals in agriculture and forestry, and government employees. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including responsive design, SVG icons, and asynchronous JavaScript. It employs Matomo analytics with a user consent mechanism, reflecting a mature approach to privacy and data protection. The site is well-optimized for accessibility and SEO, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and integrates cookie consent for tracking. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official government domain usage, indicating legitimacy. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the website demonstrates a strong digital maturity for a government entity, balancing comprehensive public service content with privacy and security considerations. Strategic improvements could include publishing detailed security policies and enhancing security header configurations to further strengthen its security posture.

O

Otavamedia Oy

otavamedia.fi

58

Otavamedia Oy is a well-established Finnish media company specializing in magazine publishing and digital subscription services. As part of the Otava Group, it holds a strong market position in Finland's media sector, offering a diverse portfolio of magazines and digital content targeted at a broad Finnish audience. The website reflects a professional and consistent brand image, with clear navigation and relevant content for its users. Technically, the site is built on WordPress, leveraging modern web technologies and a consent management platform to ensure GDPR compliance. The use of Cloudflare DNS and CDN services enhances performance and security. Security posture is solid with HTTPS enforced and consent mechanisms in place, although some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

E

EU Reference Laboratories for Residues of Pesticides

crl-pesticides.eu

61

The EU Reference Laboratories for Residues of Pesticides website serves as an authoritative portal providing scientific and regulatory support for pesticide residue analysis across Europe. It offers proficiency tests, monitoring studies, guidance documents, and workshops aimed at official control laboratories and regulatory bodies. The site is government-affiliated and co-funded by the European Union, emphasizing its role in enhancing food safety and compliance with EU regulations. The content is well-structured and relevant to its specialized audience, though the design and technical implementation reflect legacy web technologies with basic mobile optimization and accessibility.