Security Directory

iFotoVideo.cz is a Czech media portal operated by Atemi s.r.o., specializing in photography and videography content including news, competitions, technical articles, tutorials, and a magazine publication. The website targets photography enthusiasts and professionals primarily within the Czech Republic, offering a niche but well-established platform with a consistent brand presence and member affiliation with EISA. The business model revolves around media publishing supported by advertising and magazine subscriptions. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11 and Prototype.js, Google Fonts, and Google Analytics for tracking. While the site is accessible and content-rich, it shows moderate performance and basic mobile optimization with room for improvement in accessibility and SEO. Security-wise, the site lacks visible security headers and uses an outdated JavaScript library, which could pose risks. Cookie consent is implemented, and a GDPR-related page is present, indicating some privacy compliance. However, the absence of WHOIS data and explicit security or incident response policies reduces trustworthiness. Overall, the site is functional and professional but would benefit from technical and security enhancements to improve its posture and compliance.

The website www.fotostart.cz serves as a platform for the FOTOSTART photography competition, primarily targeting photography enthusiasts in the Czech Republic. It provides information about annual contests, winners, exhibitions, and related photo education resources. The site is small-scale and community-focused, with consistent branding and good content relevance. Technically, it uses older JavaScript libraries such as jQuery 1.11.2 and the Nette framework, with basic mobile optimization and accessibility features. Security posture is limited due to lack of visible HTTPS enforcement details, absence of security headers, and outdated libraries. No privacy or cookie policies are present, which impacts compliance and user trust. The WHOIS data is missing, which raises concerns about domain legitimacy, though the website content appears genuine and niche-focused. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain transparency.

H

HESTIA - Centrum pro dobrovolnictví, z.ú.

dobromani.cz

52

Dobromani.cz is a Czech non-profit platform dedicated to facilitating online volunteering by connecting non-profit organizations with volunteers who can provide expertise and support remotely. The platform is operated by HESTIA - Centrum pro dobrovolnictví, a recognized non-profit organization in the Czech Republic. The website offers project planning tools, volunteer matching, and ongoing project support, targeting non-profits adapting to new operational realities, especially post-pandemic. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, and analytics tools such as Google Analytics and Microsoft Application Insights, hosted on infrastructure linked to Active24 and websupport.cz. The site is mobile-optimized with good design and navigation but lacks some advanced SEO and accessibility features. Security posture is moderate; HTTPS is used, but no security headers were detected in the provided data, and there is no visible privacy or cookie policy, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

AB Klaipėdos vanduo is a Lithuanian regional water utility company providing water supply and wastewater management services primarily in the Klaipėda region. The company serves both residential and business customers, offering services such as water supply, wastewater treatment, water quality testing, and remote metering. The website is professionally designed with clear navigation and relevant content targeting local customers. Technically, the site uses modern web technologies including HTTPS, JavaScript libraries like ApexCharts, and integrates Facebook Pixel and Google reCAPTCHA for marketing and security purposes. Security posture is good with HTTPS enforced and anti-CSRF tokens on forms, though some security headers could be improved and explicit security policies are not published. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the website content and company information appear legitimate and consistent. Overall, the site demonstrates a mature digital presence suitable for a regional utility provider.

M

MINISTRY OF EDUCATION

gov.gh

34

The Ministry of Education Ghana operates as the national government authority responsible for education policy, reform, and implementation in Ghana. The website serves as an official communication channel to disseminate information about education reforms, virtual learning initiatives, and government projects. It targets a broad audience including students, educators, policymakers, and the general public interested in education in Ghana. Technically, the site is built on WordPress with modern plugins such as Elementor and Revolution Slider, and uses Google Analytics for visitor tracking. The site is mobile optimized and presents a professional design consistent with government branding. Security-wise, the site uses HTTPS and has no visible exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the government entity, indicating high legitimacy.

T

Tele2

tele2.com

72

Tele2 is a prominent telecommunications company focused on providing smart connectivity solutions and enabling business transformation through advanced infrastructure. The website reflects a professional and modern digital presence with responsive design and accessibility features. The technical infrastructure includes standard web technologies and integration with Google Tag Manager for analytics and OneTrust for cookie consent management. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness. Overall, the site is functional and professional but could improve transparency and security disclosures.

The website www.rietumu.com is currently inaccessible due to a Cloudflare Turnstile security challenge that blocks direct access to its content. The WHOIS query for the domain returned no match, indicating the domain may not be registered or WHOIS data is unavailable. Consequently, no business, contact, or policy information could be extracted or verified. The technical infrastructure is limited to Cloudflare's security mechanisms with no visible CMS or additional technologies. Security posture cannot be assessed due to lack of accessible content and absence of security headers or SSL details. Overall, the site presents a high risk due to inaccessibility and lack of transparency, preventing meaningful analysis or trust evaluation.

E

Eräs Teatteri

erasteatteri.fi

57

Eräs Teatteri is a small, community-focused amateur theater group based in Hämeenlinna, Finland. The organization offers theatrical performances, club activities for adults interested in theater, and venue rental services. The website reflects a local cultural entity with a clear focus on engaging the community through arts and performances. The business model is non-profit and community-oriented, targeting general audiences interested in theater and cultural events. The website is professionally presented with consistent branding and clear contact information, supporting trust and engagement.

H

Hämeenlinnan Teatteri

hmlteatteri.fi

61

Hämeenlinnan Teatteri is a culturally significant theatre institution in Finland with a history spanning over 120 years. The website serves as a platform to showcase theatrical performances, provide event calendars, and facilitate ticket sales primarily through partner platforms. The site targets a general audience interested in cultural and theatrical events in the Hämeenlinna region. Technically, the website employs modern web technologies including Bootstrap for responsive design, Cookiebot for cookie consent management, and Google Analytics for visitor tracking. The CMS appears to be OpiPortal, and hosting is likely provided by ws7.opiferum.net. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit privacy policy and terms of service pages is a notable gap. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, but could improve transparency and security headers.

S

Suomen kansallismuseo

kansallismuseo.fi

56

Suomen kansallismuseo operates as Finland's national museum authority, managing multiple museum sites and castles across the country. The website provides comprehensive information about exhibitions, events, visitor services, and contact details, targeting a broad audience including families, tourists, and culture enthusiasts. The institution holds a strong market position as a government cultural entity offering educational and heritage services.

N

Naivistit Iittalassa -säätiö SR

naivistit.fi

49

Naivistit Iittalassa -säätiö is a Finnish cultural foundation dedicated to organizing naive art exhibitions and related events in Iittala, Finland. The website serves as a portal for visitors and art enthusiasts to learn about current and upcoming exhibitions, purchase art, and engage with the naive art community. The organization maintains a clear market niche focused on naive art, supported by a small but consistent digital presence and multilingual accessibility. The website is professionally designed with good content quality and clear navigation, targeting a general audience interested in art and culture. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and GDPR-compliant cookie management. Hosting is provided by Hostaan Oy, a Finnish hosting provider. The site demonstrates good mobile optimization and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though some security headers are missing. Privacy compliance is well addressed with clear policies and consent mechanisms. The security posture is solid for a small cultural foundation, with no critical vulnerabilities detected. The WHOIS data confirms legitimacy with consistent registrant information matching the website content and a domain age appropriate for the foundation's history. No suspicious patterns or privacy protection obfuscation are present. Overall, the website is trustworthy, secure, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, maintaining plugin updates, and considering a dedicated security policy page to further improve trust and compliance. The website effectively supports the foundation's mission and provides a reliable digital platform for its audience.

S

Suomen Tykistö-, Pioneeri- ja Viestimuseoyhdistys ry

museomilitaria.fi

57

Museo Militaria is a Finnish non-profit organization operating one of the largest war and military history museums in Finland, located in Hämeenlinna. The museum offers diverse exhibitions, educational programs, guided tours, and a retail e-commerce platform targeting families, history enthusiasts, and school groups. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap, integrates multiple analytics and marketing tools, and employs secure payment processing via Paytrail. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a dedicated security policy page. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

I

Iittala Village

iittalavillage.fi

46

Iittala Village is a cultural and tourism-focused website representing a regional artisan and design village in Hämeenlinna, Finland. It aggregates information about local attractions, events, shops, and cultural heritage related to glassmaking and artisan crafts. The website targets tourists and visitors interested in Finnish design and culture, providing comprehensive event listings, visitor information, and local business promotion. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and privacy compliance. It is hosted by a reputable registrar and uses HTTPS with good security practices. Privacy and cookie policies are implemented with GDPR compliance in mind. The security posture is solid with no critical vulnerabilities detected. Overall, the site is professional, trustworthy, and well-maintained, serving as a valuable resource for cultural tourism in the region.

H

Hämeenlinnan kaupunki

hameenlinnantaidemuseo.fi

67

Hämeenlinnan taidemuseo is a municipal art museum located in Hämeenlinna, Finland, operated by the city government. The museum offers a diverse range of visual art exhibitions, events, educational programs, and retail services, targeting the general public, art enthusiasts, and tourists. The website reflects a well-established regional cultural institution with a clear focus on accessibility and community engagement. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for consent management, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration aligns with the municipal ownership, confirming legitimacy and trustworthiness.

Hämeenlinnan kaupungin museo operates as a regional cultural heritage museum in Finland, managing multiple museum sites including Museo Skogster, Sibelius's birthplace, Palanderin talo, and the Savings Bank Museum. The institution targets general public audiences interested in history, culture, and regional heritage, offering exhibitions, events, educational programs, and a museum shop. The website reflects a well-maintained digital presence with multilingual support and clear navigation. Technically, the website is built on WordPress 6.8.1, utilizing standard plugins such as Cookie Law Info for GDPR compliance and Matomo for analytics. Hosting and DNS services leverage Cloudflare, providing CDN and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks published privacy policy and terms of service pages, which are recommended for full compliance and transparency. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is legitimately registered to the museum organization with consistent details. Overall, the website is trustworthy, professionally managed, and compliant with basic privacy regulations. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen trust and compliance.

K

Kulttuurikeskus ARX

kulttuurikeskusarx.fi

65

Kulttuurikeskus ARX is a municipal cultural center based in Hämeenlinna, Finland, focused on providing cultural services and events primarily for children, youth, and families. The website serves as a hub for information about their activities, exhibitions, festivals, and youth programs, positioning itself as a key local cultural institution. The business is affiliated with the city of Hämeenlinna, reinforcing its legitimacy and public service orientation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot, indicating a mature digital infrastructure. Analytics are handled via Matomo and Google Analytics, with clear cookie consent mechanisms in place, reflecting good privacy practices. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with no signs of blocking or WAF interference.

H

Hämeenlinnan Liikuntahallit Oy

liikuntahallit.fi

71

Hämeenlinnan Liikuntahallit Oy is a municipally owned limited company operating under the city of Hämeenlinna, Finland. It provides a broad range of sports and recreational services including management of swimming halls, sports halls, gyms, ice rinks, and related facilities. The company targets local residents, sports clubs, and community groups, positioning itself as a key municipal service provider in the sports sector. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its audience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. Analytics are handled primarily through Matomo, ensuring privacy-conscious data collection. The site is mobile optimized and accessible, with good SEO practices implemented. However, some plugins like MonsterInsights are installed but not configured, indicating room for technical refinement. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy or incident response contact reduces transparency in security governance. The site would benefit from adding security headers and formalizing its security posture. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. It serves its municipal function effectively with a moderate security maturity level. Strategic improvements in security policy publication and analytics configuration would enhance its posture further.

J

Jätelautakunta Kolmenkierto

kolmenkierto.fi

67

Jätelautakunta Kolmenkierto is a Finnish governmental waste management authority serving 13 municipalities. The organization provides regulatory oversight and services related to waste management, including waste fees, composting notifications, and waste regulations. The website is professionally designed, targeting residents and municipal stakeholders within its service area. It operates under the parent organization Hämeenlinnan kaupunki and maintains a consistent brand presence online. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It uses Matomo analytics to respect user privacy and implements HTTPS with good SSL configuration. The site is mobile-optimized and accessible, with good SEO practices in place. From a security perspective, the site enforces HTTPS and cookie consent but lacks a dedicated security policy or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie categories and GDPR adherence. The domain registration aligns well with the website's governmental nature, enhancing trustworthiness. Overall, the website presents a low-risk profile with good privacy and security practices. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

M

MyIntegration

myintegration.fi

48

MyIntegration is a Finnish-based company with an online presence focused on integration services, as indicated by the website title and branding. The website is built on WordPress and employs a modern technology stack including popular plugins such as Yoast SEO, Smart Slider 3, and Cookiebot for cookie consent management. The site supports multiple languages, indicating a target audience that is international or multilingual. The business appears to be small-sized with a consistent brand image and a moderate level of trust signals, including a Facebook social media presence. Technically, the website is well-structured with proper SEO meta tags and uses HTTPS with an excellent SSL configuration. The use of Matomo analytics shows a commitment to privacy-friendly tracking. However, the site lacks visible security headers and does not publish a privacy policy or terms of service, which are important for compliance and user trust. No direct contact information is found on the homepage, which may affect user confidence. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. There are no visible vulnerabilities or exposed sensitive data. The absence of a security policy and incident response contacts suggests room for improvement in security transparency and readiness. Overall, the website is functional, moderately secure, and privacy-conscious but would benefit from enhanced compliance documentation and clearer contact information to improve trust and professionalism.

J

Jyväskylän Vuokra-Asunnot - JVA

jva.fi

69

Jyväskylän Vuokra-Asunnot (JVA) is a Finnish rental housing service provider focused on the Jyväskylä region. The website presents a professional and consistent brand image, offering rental housing services primarily to local residents. The business model is centered on public housing rental management, targeting tenants in the Jyväskylä area. The site uses Drupal 10 CMS and integrates modern web technologies including JavaScript and Cloudflare for performance and security. Cookie consent and privacy compliance are well implemented, reflecting GDPR adherence. Security posture is solid with HTTPS and security headers in place, though explicit security and incident response policies are not publicly found. Overall, the website is safe, well-structured, and trustworthy, with moderate user tracking for analytics and marketing purposes.

J

Jyväskylän kaupunginteatteri

jklteatteri.fi

67

Jyväskylän kaupunginteatteri is the official city theatre of Jyväskylä, Finland, providing theatrical and cultural services to the local community. The website is hosted on a modern Drupal 10 CMS platform and integrates trusted third-party services for analytics and marketing, including Google Tag Manager and Trustmary. The site is well-branded and professionally designed, targeting a general audience interested in cultural events. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a public security policy. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website reflects a credible municipal cultural institution with room for improvement in transparency and security documentation.

S

Suomen käsityön museo

craftmuseum.fi

65

The website www.craftmuseum.fi represents the Finnish Handicraft Museum, a cultural institution dedicated to showcasing traditional and contemporary handicrafts, including Finnish national costumes. The site targets a general audience including families and cultural enthusiasts, providing exhibition information and educational content. Technically, the site is built on Drupal 10, uses Cloudflare for hosting and security, and integrates a comprehensive GDPR-compliant cookie consent mechanism. The site demonstrates good SEO practices and mobile optimization, although contact information and legal pages like terms of service are limited or absent. Security posture is solid with HTTPS and security headers, but lacks explicit security policy and vulnerability disclosure details. Overall, the domain registration aligns well with the museum's identity, indicating legitimacy and trustworthiness.

J

Jyväskylän seutu

jyvaskylanseutu.fi

66

Jyväskylänseutu.fi is a regional government website serving the Jyväskylä area in Finland, providing residents and visitors with local news, events, and community services. The website is built on Drupal 10, indicating a modern and maintainable technical infrastructure. It employs reputable third-party services for analytics and cookie consent management, ensuring compliance with GDPR and enhancing user privacy. The site demonstrates good mobile optimization and accessibility, contributing to a positive user experience. Security posture is strong with HTTPS enforced and appropriate cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and professionally maintained, suitable for its public sector role.

F

FRS GmbH & Co. KG

frs.world

71

FRS GmbH & Co. KG is a well-established international ferry operator with a history dating back to 1866. The company operates approximately 70 vessels worldwide, providing passenger and freight ferry services across Europe, North Africa, North America, and the Middle East. Their business model includes diversified maritime services such as offshore logistics, port management, crewing, and maritime consultancy, positioning them as a leading specialist in the ferry shipping industry. The website reflects a professional and consistent brand presence with comprehensive information about their subsidiaries and services. Technically, the website is built on TYPO3 CMS, employs modern web technologies including responsive design and WebP images, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with clear navigation and SEO-friendly metadata. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies are not evident. The WHOIS data is privacy protected, limiting transparency on domain registration details; however, the website's professional presentation, linked subsidiaries, and social media presence support its legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, FRS demonstrates a mature digital presence aligned with its business stature, though improvements in security policy transparency and security headers could enhance trust and compliance further.

E

ESpanix

espanix.net

69

ESpanix operates as a leading internet exchange point and connectivity hub in Southern Europe, primarily serving Spain and the Iberian Peninsula. The company offers a range of services including IP transit, datacenter hosting, bespoke connectivity solutions, and a high-precision time synchronization service. With over 25 years of experience, ESpanix positions itself as a critical infrastructure provider facilitating secure, low-latency interconnections for telecommunications and network operators. Technically, the website demonstrates a modern and professional design with good mobile optimization and basic accessibility features. The technology stack is standard web technologies with no detected CMS or advanced frameworks. Performance is moderate, and SEO is basic but adequate for the business domain. The site uses HTTPS with integrity checks on resources, but lacks some security headers and cookie consent mechanisms. From a security perspective, ESpanix shows strong compliance with recognized frameworks such as ISO 9001 and the Spanish National Security Scheme (ENS), aligned with the European NIS2 directive. Certifications like WELL, LEED, and WiredScore Platinum further reinforce their commitment to quality and security. However, the absence of WHOIS data for the domain raises questions about domain registration transparency. No incident response contacts or vulnerability disclosure policies are publicly available, which could be improved. Overall, the website and business present a trustworthy and professional image with solid security and compliance posture. The main risks relate to domain registration opacity and minor gaps in privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing cookie consent to improve regulatory compliance and user trust.

E

Ealys

ealys.com

41

Ealys is a French web development agency specializing in the creation, redesign, and maintenance of websites and web applications, primarily serving clients in the North-East region of France including Metz, Nancy, and Strasbourg. With over 20 years of experience, the company targets a diverse clientele ranging from SMEs to large groups and institutional clients. Their service offerings include website creation, web application development, hosting, security, and audits, positioning them as a comprehensive digital solutions provider in their regional market. The website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the site employs modern web technologies such as HTML5, CSS3, jQuery, and popular plugins like Revolution Slider and Fancybox, ensuring a responsive and user-friendly experience. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented, indicating basic privacy compliance. Security-wise, the site uses HTTPS and follows some best practices but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, which supports legitimacy. Overall, the website is well-structured, professional, and trustworthy, though there is room for improvement in security and compliance documentation.

A

Association des Agences Marketing et Communication | MarkCom

markcom.lu

56

MarkCom is a well-established non-profit association representing 29 leading marketing and communication agencies in Luxembourg since 1995. The organization promotes excellence, best practices, training, and advocacy for agencies and advertisers. The website is professionally designed, mobile-optimized, and rich in relevant content including events, tools, and news updates. Technically, the site is built on WordPress with modern plugins and performance optimizations, hosted via EuroDNS. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration and hosting details align with the business profile, indicating legitimacy and trustworthiness.

G

GCVE

gcve.eu

56

GCVE.eu operates as a specialized platform offering a decentralized approach to vulnerability identification and CVE allocation, targeting cybersecurity professionals and organizations. The platform introduces GCVE Numbering Authorities (GNAs) to enhance flexibility and autonomy in vulnerability numbering while maintaining compatibility with traditional CVE systems. The website presents a professional and consistent brand image with clear technical content and a focus on security innovation. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies and external widgets such as Pretix and FlexSearch for enhanced functionality. The site is well-optimized for performance, mobile responsiveness, and accessibility, with HTTPS enforced to ensure secure communications. However, explicit security headers and privacy compliance mechanisms are currently lacking. From a security perspective, the site demonstrates good practices such as HTTPS usage and absence of exposed sensitive data or vulnerable libraries. Nonetheless, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. The lack of privacy and cookie policies also indicates incomplete compliance with data protection standards. Overall, GCVE.eu is a credible and technically sound platform with a clear business focus in the cybersecurity domain. Strategic enhancements in privacy compliance, security policy transparency, and contact information would strengthen its trustworthiness and regulatory adherence.

B

Bild.ua

bild.ua

61

Bild.ua is a Ukrainian real estate portal specializing in listings of new residential complexes across Ukraine. The platform offers a unique reliability index for new buildings, helping buyers make informed decisions. It targets property buyers and investors seeking trustworthy information about developers and new construction projects. The website is well-positioned in the Ukrainian real estate market with a medium-sized operation founded in 2013. Technically, the site uses modern web technologies including React and Redux, and integrates analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and security headers implemented, though it lacks explicit security policies and incident response contacts. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is legitimate, professional, and trustworthy, with room for improvement in privacy and security transparency.

C

CircleOne

vagabondfactory.com

63

CircleOne is a Finnish digital consulting and development company specializing in creating tailored web experiences, including websites, e-commerce solutions, web applications, and maintenance services. The company targets businesses and organizations in Finland seeking quality digital solutions to support their business goals. Their market position is that of a niche local provider with a focus on modern technologies and client satisfaction, as evidenced by their client references and professional presentation. Technically, the website is built using modern frameworks such as Astro and hosted on Vercel, ensuring fast performance and mobile optimization. The use of Vercel Analytics indicates some level of user tracking, although no cookie consent mechanism is present. Security-wise, the site enforces HTTPS and provides a PGP public key for secure email communication, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy compliance and security transparency.

L

Lapin Lumilomat Oy

lapinlumilomat.fi

45

Lapin Lumilomat Oy operates a hospitality business specializing in vacation apartment rentals and travel packages in the Ylläs region of Finland. The company targets tourists seeking quality accommodation and local experiences in Äkäslompolo and surrounding areas. The website presents a professional and consistent brand image with clear business information and contact details, supporting a trustworthy market position as a regional hospitality provider. Technically, the website is built on WordPress with a modern tech stack including jQuery, FontAwesome, and Google Fonts, hosted by Hostingpalvelu. The site is mobile-optimized, fast-loading, and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but lacks advanced security headers and formal incident response disclosures. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. Privacy policies and terms of service are present and GDPR compliant, but cookie consent mechanisms are missing, which could be improved. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Overall, the website is a well-maintained digital asset for a small hospitality business with solid business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

V

Venuu Oy

venuu.fi

62

Venuu Oy operates Venuu.fi, Finland's largest and most popular online platform for booking event venues, catering, and related event services. Established in 2013, the company offers over 6500 venues for various occasions including meetings, weddings, parties, and sauna evenings. The platform targets event organizers and venue owners, providing a marketplace that simplifies venue discovery and booking. The website demonstrates a mature market position with strong brand recognition and partnerships with major Finnish companies. Technically, the site is built on a modern Rails framework with integration of analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Segment Analytics. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, supporting a medium-sized business in the hospitality sector.

D

Digia Oyj

digia.com

63

Digia Oyj is a well-established Finnish software and service company founded in 1997, specializing in digital transformation, AI, analytics, and cybersecurity services. The company targets businesses and organizations seeking to leverage technology for smarter business operations and sustainable futures. Their market position is strong in Finland with a large company size and a comprehensive service portfolio. The website is professionally designed, mobile-optimized, and uses HubSpot CMS with modern marketing and analytics tools. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website reflects a credible, professional, and trustworthy business presence.

P

Parasta Lapsille ry

parastalapsille.fi

60

Parasta Lapsille ry is a well-established Finnish non-profit organization focused on child welfare and family well-being. The organization offers camps, weekend activities, and volunteer opportunities to support children and families, emphasizing multicultural inclusion. The website reflects a mature digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain WHOIS data aligns well with the organization's identity, supporting high legitimacy and trust.

P

ProAgria

proagria.fi

58

ProAgria is a Finnish company specializing in expert services and knowledge to enhance the competitiveness of agriculture and rural business operations. The company offers a broad range of services including management, finance, accounting, crop production, animal production, and sustainable development. Positioned as a leading service provider in Finland's agricultural sector, ProAgria targets farms and rural enterprises seeking professional consulting and development support. The website reflects a mature digital presence with a modern CMS (Craft CMS), responsive design, and structured data for SEO. The technical infrastructure includes modern JavaScript frameworks and delayed Google Tag Manager loading to optimize performance. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit cookie consent mechanisms and published security policies are absent. Overall, the site is professional, trustworthy, and well-aligned with the business's market position and audience.

O

Oulun yliopisto

oulu.fi

75

Oulun yliopisto is a large, internationally active research university based in Finland, providing higher education and producing scientific knowledge and solutions. The website reflects a mature digital presence built on Drupal 10, integrating modern analytics and consent management tools such as Google Analytics, Matomo, and CookieInformation. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is strong with HTTPS enforced and Cloudflare used for hosting and protection, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration and website content are consistent and trustworthy, representing a legitimate educational institution.

M

Martat

martat.fi

62

Martat is a Finnish non-profit organization dedicated to promoting home and family wellbeing and the appreciation of household management. The website serves as a comprehensive portal for membership, educational courses, events, publications, and community engagement. It targets Finnish households and families interested in sustainable and responsible living. The organization has a strong national presence with local chapters and a variety of services including international aid projects. Technically, the site is built on WordPress with WooCommerce and integrates modern JavaScript libraries and third-party services for analytics, feedback, and chat support. The site is well-optimized for SEO, mobile-friendly, and accessible. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

L

LähiTapiola

lahitapiola.fi

68

LähiTapiola is a well-established Finnish insurance company offering a range of insurance and investment services tailored for individuals, families, and businesses. The company positions itself as a trusted provider in the Finnish market, emphasizing reliability and comprehensive service offerings. The website reflects a mature digital presence with modern technologies such as Gatsby and React, ensuring fast performance and excellent mobile optimization. Privacy and cookie consent are managed effectively using OneTrust, and marketing tags are handled via Adobe Launch and Adform, indicating a sophisticated marketing infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, although a dedicated security policy or incident response contact is not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

Z

Zeckit

zeckit.com

75

Zeckit is a Finnish online platform providing free access to background information and customer reviews for all Finnish companies. The website targets Finnish consumers and businesses seeking reliable company data and reviews, positioning itself as a comprehensive resource in the Finnish market. The business model appears to be based on free access, likely monetized through advertising and partnerships. Technically, the site is built on WordPress, hosted on Amazon Web Services, and uses modern web technologies including jQuery, FontAwesome, and Cookiebot for cookie consent management. SEO is well implemented with Yoast SEO and structured data. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements, but lacks visible privacy policy and contact information in the analyzed content.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

R

Ridee Nordic Oy

bokabuss.nu

52

Bokabuss.nu is a Swedish transportation service platform that enables users to request and compare quotes for bus and minibus transportation across Sweden. The company, operated by Ridee Nordic Oy, has been active since 2011 and maintains a medium-sized presence in the Nordic transportation market. The website is professionally designed with a clear user journey for submitting transport requests and accessing operator offers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and marketing tools, and employs Cloudflare for hosting and security. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is good with HTTPS enforced, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

L

LUGA

luga.lu

63

LUGA is a cultural event organizer hosting an ephemeral urban garden exhibition in Luxembourg from May to October 2025. The website serves as an information and engagement platform for visitors, volunteers, and partners, showcasing event details, locations, and news. The site is well designed, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it leverages WordPress CMS, Cloudflare for DNS and CDN, and integrates modern analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS, security headers, and cookie consent, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

O

Ordre des Architectes et des Ingénieurs-Conseils

oai.lu

46

The Ordre des Architectes et des Ingénieurs-Conseils (OAI) is a professional association representing architects, consulting engineers, urban planners, interior architects, and landscape architects in Luxembourg. Established by law in 1989, it serves as a regulatory and support body for these professions, offering services such as training, publications, member directories, and event organization. The website is well-structured, professionally designed, and targets both professionals and clients in the architecture and engineering sectors. It maintains a strong presence on multiple social media platforms, enhancing its outreach and engagement. Technically, the website employs modern web technologies including the Dojo Toolkit, Bootstrap, and advanced search integrations with Typesense and InstantSearch.js. It uses HTTPS with good SSL configuration, though it lacks some security headers that could enhance protection. The site is mobile-optimized and provides a moderate level of performance and accessibility. Analytics are implemented via Piwik/Matomo, indicating a moderate level of user tracking. From a security and compliance perspective, the site does not display explicit privacy or cookie consent mechanisms, which may impact GDPR compliance. No contact information for incident response or data protection officers is evident. The WHOIS data is unavailable due to malformed queries or registry restrictions, which slightly reduces trustworthiness but does not negate the professional presentation and content quality. Overall, the OAI website is a credible and professional platform serving its niche audience effectively. Strategic improvements in privacy compliance, security headers, and transparency of contact information would enhance its security posture and regulatory adherence.

F

Fondation Sommer

fondation-sommer.lu

53

Fondation Sommer is a Luxembourg-based non-profit organization dedicated to supporting educational, cultural, and intercultural projects. The foundation operates primarily through grant funding and project support, targeting non-profit organizations and educational institutions within Luxembourg and its vicinity. The website is professionally designed using WordPress with Bootstrap and Font Awesome, supporting multilingual content via WPML. The technical infrastructure is modern and includes performance optimizations such as WP Rocket. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are lacking. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR requirements. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

W

Worldsoft AG

worldsoft-partner.website

60

Worldsoft-Partner.website is a German-language franchise platform operated by Worldsoft AG, a Swiss company established in 2000. The website offers a turnkey business concept for individuals and entrepreneurs to start their own internet agency, leveraging Worldsoft's 20+ years of experience and a large customer base. The business model focuses on creating mobile-optimized websites quickly using proprietary tools, supported by online training, marketing materials, and personal coaching. Technically, the site uses a modern JavaScript stack with multiple analytics and marketing integrations, including Google Analytics, Facebook Pixel, LinkedIn Insight, Hotjar, and Elfsight widgets. The website is mobile-optimized and well-structured, providing a professional user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is partially met with a privacy policy linked externally but lacks a cookie consent mechanism. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

A

Aurora Systems Inc.

specadsystems.com

69

AD Systems, a division of Aurora Systems Inc. under the parent company Allegion, specializes in commercial sliding and swinging door systems designed for healthcare, commercial offices, education, and hospitality sectors. Their product offerings emphasize acoustic isolation, space-saving design, and customized solutions tailored to professional environments. The website reflects a mature B2B business model targeting architects and facility planners with comprehensive design tools and resources. Technically, the site is built on Adobe Experience Manager with integrations of modern marketing and analytics tools such as Marketo and Adobe Helix RUM. Security posture is strong with HTTPS, reCAPTCHA, and responsible disclosure links, though explicit security policies and incident response details are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional branding and parent company association mitigate trust issues. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.

A

App Elevate

appelevate.cz

54

App Elevate is a small technology company specializing in rapid development of interactive applications across multiple platforms including web, Android, iOS, and macOS. The company emphasizes close client collaboration and offers prototype trials to attract customers. The website is professionally designed with clear navigation and good mobile optimization, hosted on Cloudflare infrastructure. The technical stack includes Bootstrap, jQuery, Font Awesome, and Google Fonts, reflecting a modern front-end approach. Security posture is moderate with Cloudflare protection but lacks explicit security headers and privacy policies, indicating areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and aligned with the domain registration data, but would benefit from enhanced privacy compliance and security hardening.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing and technology integration services. The company offers a range of services including email marketing strategy, technology implementation for retention marketing, data engineering in CRM systems, and advanced customer analytics. Their website reflects a professional and consistent brand image, targeting B2B clients seeking to optimize marketing performance through technology. The company demonstrates a solid market position supported by client references and a clear business focus. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and CookieScript for consent management, indicating a mature digital infrastructure. The site is built likely on the Nette Framework, with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities. Cookie consent is implemented with opt-in mechanisms, and forms include anti-bot measures. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR cookie consent requirements. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility. The domain WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness.

T

Tabernas 21, s.r.o.

citybee.cz

58

CityBee.cz is a Czech online media platform focused on providing curated event listings, venue recommendations, and cultural tips primarily for Prague residents and visitors. The website operates under the company Tabernas 21, s.r.o., established around 2012, and positions itself as a trusted local guide with editorial content and advertising services. The platform integrates advertising partnerships and offers business registration services for local venues. Technically, the site uses legacy JavaScript libraries like jQuery 1.8.3, Google Tag Manager, and Facebook SDK, with a moderate performance profile and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses outdated libraries, which could pose risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for media businesses. Overall, the site is professional, content-rich, and safe for general audiences.

S

StavbaWeb

stavbaweb.cz

51

StavbaWeb is a Czech-language online platform dedicated to sharing information about construction products, architectural projects, and companies in the architecture and construction sectors. It serves as a niche media outlet providing news, project showcases, and industry insights primarily targeting architects, construction professionals, and related stakeholders in the Czech Republic. The website features a modern WordPress-based infrastructure with various plugins supporting GDPR compliance and user engagement. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. Security posture is moderate with HTTPS enforced and some security plugins in place, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the site appears professional and well-maintained. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. Overall, the site is a credible resource within its industry niche but would benefit from enhanced transparency and security documentation.