Security Directory

P

Płyty warstwowe ARPANEL

arpanel.cz

48

ARPANEL is a regional manufacturer specializing in sandwich panels with PIR and mineral wool cores, serving the construction industry primarily in the Czech Republic and neighboring countries. The company offers a range of products including wall and roof panels, sheet metal elements, installation accessories, and technical consulting services. The website is multilingual, reflecting a broad regional market presence. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics, Google Ads, and CookieHub for consent management. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers are missing. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site presents a professional and trustworthy business front with good digital maturity.

A

ARPANEL

arpanel.eu

49

ARPANEL is a medium-sized manufacturing company based in Poland, specializing in the production of high-quality wall and roof sandwich panels with PIR and mineral wool cores. Established in 2013, the company serves a broad target audience including construction firms, architects, and industrial clients. Their product portfolio includes sandwich panels, flashings, installation accessories, and technical support services. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting their market position as a reputable manufacturer in the building materials sector. Technically, the website is built on WordPress with modern SEO and performance optimizations, including Yoast SEO, Google Tag Manager, and a cookie consent management platform (CookieHub). The site is mobile-optimized and uses HTTPS with good security headers, indicating a mature digital infrastructure. Analytics and marketing tools such as Google Analytics and Google Ads are employed with appropriate user consent mechanisms. From a security perspective, the site demonstrates good practices including HTTPS enforcement, spam protection via Google reCaptcha, and comprehensive cookie consent. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in formal security governance. Overall, ARPANEL's website presents a trustworthy and professional digital presence with strong compliance to privacy regulations and a solid security posture. Strategic enhancements in security policy transparency and accessibility could further strengthen their risk management and user trust.

Airex AG operates a professionally designed website focused on the manufacture and sale of high-quality Swiss-made training and therapy mats. The company holds a strong market position as a world leader in its niche, with a history dating back to 1952 and a broad international presence. The website supports this with clear product categorization, educational resources, and community engagement. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Google Analytics, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

C

Cobiax

cobiax.com

50

Cobiax is an international company specializing in voided slab technology for the construction industry, offering innovative and sustainable building solutions. Their product lines include Cobiax CLS and SL, supported by software tools like CQL for design and planning. The company targets architects, builders, and innovators, positioning itself as a leader with a 'Made in Germany' reputation and worldwide presence. The website is professionally designed using AMP technology, ensuring fast performance and excellent mobile optimization. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS data for the domain www.cobiax.com introduces uncertainty about domain registration legitimacy. Security posture is generally good with HTTPS and cookie consent, but lacks explicit security headers and published incident response information. Overall, the website reflects a mature digital presence with room for improvement in transparency and security disclosures.

B

BIRCO GmbH

birco.de

52

BIRCO GmbH operates as a specialized manufacturer and system provider in the drainage and water management sector, focusing on sustainable solutions for rainwater treatment, retention, and infiltration. The company offers a broad portfolio of products including drainage channels, infiltration trenches, and related infrastructure components, supported by digital tools and project management services. Their website reflects a mature digital presence with comprehensive product information, clear navigation, and multi-language support targeting construction professionals and planners primarily in Germany and neighboring countries. Technically, the site is built on TYPO3 CMS with modern frameworks and includes robust security measures such as HTTPS and security headers. Privacy compliance is well addressed with explicit cookie consent mechanisms and detailed privacy policies. However, the site lacks a dedicated security policy and incident response contact details, which could enhance trust and transparency. Overall, BIRCO GmbH presents a professional, secure, and user-friendly online presence aligned with its business objectives.

B

Baumit GmbH

baumit.de

46

Baumit GmbH is a leading European manufacturer specializing in sustainable building materials including insulation, plasters, paints, and renovation systems. The company targets private customers and construction professionals, emphasizing quality, sustainability, and innovation. Their digital presence is supported by modern web technologies including Vue.js and jQuery, with a custom CMS and structured data for SEO. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information. Security posture is good with HTTPS and cookie consent mechanisms, though improvements are recommended in enforcing Content-Security-Policy and enabling Google Consent Mode. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

Armacell

armacell-core-foams.com

68

Armacell is a global enterprise specializing in innovative insulation and engineered foam products, serving key sectors such as energy, manufacturing, and transportation. The company emphasizes sustainability, energy efficiency, and advanced materials like aerogel. Their website demonstrates a mature digital presence with a modern Drupal CMS, strong mobile optimization, and comprehensive content. Security posture is solid with HTTPS and CDN protections, though additional security headers and explicit policies could enhance trust. The absence of WHOIS data is a concern but does not outweigh the professional presentation and certifications. Overall, Armacell presents as a credible and established business with room for improved transparency in security and domain registration details.

P

Płyty warstwowe ARPANEL

arpanel.de

47

ARPANEL is a medium-sized manufacturing company specializing in the production of insulated sandwich panels for walls and roofs, primarily targeting the construction and building materials sector. Established in 2013, the company offers a range of products including PIR and mineral wool core panels, metal profiles, mounting accessories, and technical consulting services. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted on nazwa.pl infrastructure. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, ARPANEL presents a trustworthy and professional online presence aligned with its business operations.

3

3A Composites Core Materials

3accorematerials.com

67

3A Composites Core Materials is a globally recognized manufacturer and supplier of structural and lightweight core materials, specializing in closed cell foam and FSC-certified balsa wood. With over 85 years of experience, the company serves diverse industrial sectors including energy, transportation, and manufacturing, providing sustainable and high-performance materials. Their website reflects a mature digital presence with professional design, comprehensive product information, and active marketing integrations. Technically, the site uses modern technologies such as Craft CMS, Google Analytics, and various tracking pixels, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are possible in security headers and privacy compliance. The absence of WHOIS data is a notable anomaly that slightly diminishes trust but does not overshadow the professional business presentation. Overall, the company demonstrates strong market positioning and digital maturity with room for enhanced privacy and security practices.

C

CTS EVENTIM

eventimb2b.com

54

CTS EVENTIM USA operates a professional B2B ticketing platform providing robust technology and reliable solutions for live events. The company is positioned as the number one ticketing service provider in Europe and second worldwide, serving over 300 million tickets annually across 25 countries. Their services include ticketing technology, marketing, analytics, and access control, targeting event organizers, promoters, and venues. The website reflects a mature digital presence with modern CMS and SEO optimization, supported by extensive tracking and marketing pixels for analytics and retargeting. Security posture is strong with HTTPS and GDPR compliance, though lacking published security policies and incident response details. The absence of WHOIS data for the domain introduces some uncertainty, but corporate branding and external references support legitimacy.

P

Planeetta Internet Oy

cloudplatform.fi

54

Cloudplatform.fi is a Finnish cloud platform service operated by Planeetta Internet Oy, a well-established Finnish web hosting company founded in 2002. The service offers Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS) solutions, enabling developers and companies to deploy applications easily to the cloud without code changes. Powered by the Jelastic cloud platform, Cloudplatform targets Finnish businesses and developers seeking scalable, flexible cloud hosting with transparent usage-based pricing. The website is professionally designed, content-rich, and provides clear service descriptions, pricing, and customer testimonials, enhancing trust and credibility. Technically, the website uses modern web technologies including jQuery, Owl Carousel, Scrollax, Google Fonts, and Google Analytics for tracking. The platform emphasizes security with HTTPS, AES-256 encryption for data at rest, SSH key access, and free/custom SSL certificates. However, no formal security policy or incident response information is published, and cookie consent mechanisms are absent despite cookie policy disclosures. The site is mobile optimized with good navigation and SEO practices. Security posture is strong with encrypted data, secure access methods, and real-time scaling features. The WHOIS data confirms a consistent and legitimate registration by Planeetta Internet Oy, matching the website's claims and business history. No suspicious patterns or privacy protection obfuscation are present. Overall, the site is trustworthy, secure, and compliant with GDPR, though improvements in transparency around security policies and cookie consent are recommended. The overall risk is low, with no critical vulnerabilities detected. Strategic recommendations include publishing a formal security policy, adding incident response contacts, implementing cookie consent mechanisms, and enhancing accessibility features to further improve compliance and user trust.

T

Tehden Oy

avoinna24.fi

65

Avoinna24 is a Finnish online platform operated by Tehden Oy, established in 2011, that facilitates searching and booking appointments for various services such as haircuts, wellness treatments, and fitness activities. The platform targets Finnish consumers seeking convenient online booking options for local service providers. The website is built using modern web technologies including Angular and integrates analytics and marketing tools like Google Analytics and Facebook SDK. Privacy and cookie policies are clearly presented, indicating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the publicly accessible content. Overall, the platform demonstrates a mature digital presence suitable for its business model.

CrossFit, LLC operates a globally recognized fitness brand focused on delivering community-driven, results-based fitness programs. Their website offers extensive resources including gym locators, certification courses, workout programming, and media content, positioning them as a leader in the fitness industry. The brand targets fitness enthusiasts of all levels, providing tailored workouts and coaching support through a large affiliate network. Technically, the website employs modern web technologies such as React, Google Analytics, Segment, and Facebook Pixel, ensuring a robust digital presence with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-maintained, supporting CrossFit's market leadership and community engagement.

M

Mainosmerkki Oy

mainosmerkki.fi

54

Mainosmerkki Oy is a Finnish company specializing in marketing materials production including vehicle and window wraps, signage, apparel branding, and related installation services. The company operates primarily in the retail sector targeting businesses and organizations seeking customized promotional products and branded clothing. Their website demonstrates a solid digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the domain registration details align well with the business, supporting legitimacy and trustworthiness.

T

The Open Group

opengroup.org

64

The Open Group is a well-established global consortium founded in 1995, specializing in the development of open, vendor-neutral technology standards and certifications such as TOGAF and ArchiMate. It serves a large and diverse membership base including customers, suppliers, vendors, integrators, academics, and consultants across multiple industries, primarily in the technology and energy sectors. The organization provides standards development, professional certifications, training, events, and a rich library of publications to support enterprise architecture and digital transformation initiatives worldwide. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap 5 and Font Awesome 6, and integrates analytics tools such as Google Analytics and StatCounter. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. The content is rich, well-structured, and highly relevant to its target audience of enterprise architects and IT professionals. From a security perspective, the site uses HTTPS with strong SSL configuration and follows standard Drupal security practices for forms and inputs. However, it lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. No WHOIS data was available due to privacy protection, but the website's professionalism and association with reputable partners support its legitimacy. Overall, The Open Group's website reflects a mature digital presence with strong business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and privacy compliance further.

B

Bizzdesign

bizzdesign.com

76

Bizzdesign is a well-established enterprise architecture software company, founded in 1999, offering a powerful SaaS platform designed to support organizations in their digital transformation journeys. The company holds a strong market position as a leader in the Gartner Magic Quadrant for EA tools for nine consecutive years, serving enterprise clients across various industries. Their key services include enterprise architecture management, business architecture, application portfolio management, and risk security management, targeting roles such as CIOs, enterprise architects, and business leaders. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Hotjar, Pardot, and other marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting is provided by Hosting Concepts B.V., and the domain is long-established and consistent with the business history. From a security perspective, the site enforces HTTPS with good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Content-Type-Options are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism in place, though no explicit security policy or incident response contacts are published. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, adding missing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and security posture.

D

DLC Websites

pointlesssites.com

59

PointlessSites.com is a niche entertainment portal that curates and lists amusing, pointless, and family-friendly websites for users seeking light-hearted fun. The site has been operating since at least 1999 according to meta data, offering daily new site recommendations and a voting system to engage users. The business model appears to rely on advertising revenue, primarily through Google Adsense, and partnerships with other niche sites. Technically, the site uses standard HTML, CSS, and JavaScript with integrations for social media and analytics. While the site is accessible and functional, it lacks modern security headers and a clear privacy policy, which impacts its compliance posture. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the site provides a moderate user experience with basic mobile optimization and SEO.

T

Technologické centrum Praha

horizontevropa.cz

43

The website www.horizontevropa.cz serves as the national information portal for the Horizon Europe program, providing comprehensive information, news, events, and services related to European research funding and innovation. It is operated by Technologické centrum Praha, a recognized entity supporting research and innovation in the Czech Republic. The portal targets researchers, project coordinators, consultants, and stakeholders interested in EU research programs. The business model focuses on informational and consultative services, positioning itself as a key national resource linked to European Commission initiatives. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses HTTPS with CSRF protection on forms, indicating a baseline of security best practices. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. However, explicit privacy and cookie policies are not clearly found, and no WHOIS data is available, which limits full trust assessment. From a security perspective, the site benefits from HTTPS encryption and CSRF tokens, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the strong affiliation with official Czech and EU institutions supports legitimacy. Overall, the website is a well-structured, professional portal with good content quality and user experience. Strategic improvements include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents. These steps would enhance compliance, trust, and security posture.

N

Notářská komora České republiky

nkcr.cz

62

Notářská komora České republiky is the official national chamber for notaries in the Czech Republic, providing a range of notarial services including quick notary search, legal services related to family, property, business entities, inheritance, and apostille issuance. The website serves both the general public and legal professionals, offering comprehensive information and online services such as company formation. The organization holds a strong market position as a governmental regulatory body with a medium-sized operational scale. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for analytics and marketing, and a cookie consent management system compliant with GDPR. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent with granular user controls. However, explicit security headers and a published security policy or incident response plan are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The lack of WHOIS data is likely due to CZ NIC registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and implementing a vulnerability disclosure mechanism to further strengthen trust and security posture.

E

Exekutorská komora České republiky

ekcr.cz

48

Exekutorská komora České republiky operates as the official regulatory and service body overseeing court executors and enforcement proceedings within the Czech Republic. The organization provides a range of services including public registers of executions, auction portals, legal advice, and statistical data publication. The website serves a broad audience including creditors, debtors, legal professionals, and the general public, positioning itself as a trusted governmental authority in its sector. The domain's long registration history since 2002 supports its established presence and legitimacy. Technically, the website employs modern web technologies such as Google Analytics and Tag Manager for tracking, Toastr.js for notifications, and uses SVG icons for UI elements. It is hosted by Active24, a known hosting provider, and demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS and implements a cookie consent mechanism, reflecting compliance with privacy regulations. From a security perspective, the site benefits from HTTPS encryption and secure form handling but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the content. The privacy policy and cookie consent are comprehensive and GDPR compliant, enhancing user trust. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a government-related entity. Strategic improvements could include adding explicit security policies, publishing vulnerability disclosure information, and enhancing security headers to further strengthen its security posture.

Z

Zotavovna Přední Labská - Špindlerův Mlýn

prednilabska.cz

42

Zotavovna Přední Labská is a government-affiliated recreational and rehabilitation facility primarily serving employees of the Czech Ministry of Justice and Prison Service, along with the general public. The website presents a well-structured hospitality business offering accommodation, dining, conference facilities, and sports and wellness activities in the Krkonoše mountain region. The business model is state-supported, focusing on providing quality leisure and event services. Technically, the site uses Joomla CMS with Yootheme templates and UIkit framework, integrating Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

S

Soustava státního zastupitelství ČR

verejnazaloba.cz

64

The website 'Soustava státního zastupitelství' serves as the official web portal for the public prosecution system of the Czech Republic. It provides comprehensive information about the structure, activities, and regional offices of the state prosecution service. The site targets citizens, legal professionals, and government entities, offering transparency and public service information. The business model is that of a government-operated informational portal, with a medium organizational size and a founding date consistent with the domain registration in 2020. Technically, the website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and Smart Slider 3 for content management and presentation. It employs modern web technologies including jQuery and integrates Google Analytics and Google Tag Manager for traffic analysis, with consent mechanisms set to deny data storage by default. The site is served over HTTPS, ensuring secure communication, and demonstrates moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response contact information is present, indicating areas for improvement in security transparency and user trust. Overall, the website is professional, trustworthy, and well-aligned with its government function. The absence of privacy and cookie policies, as well as contact details, slightly reduces its compliance and user assurance scores. Strategic enhancements in these areas would strengthen its security posture and privacy compliance, further solidifying its role as a reliable public service portal.

A

AVBS Trade SIA

opticspot.lv

49

OpticSpot.lv is an e-commerce retailer specializing in hunting optics and accessories, including thermal cameras and scopes, targeting hunters and professionals primarily in Latvia. The business operates under AVBS Trade SIA, founded in 2021, and offers professional consultation and financing options such as 0% leasing. The website is built on a modern WordPress platform with WooCommerce and Elementor, enhanced by SEO and caching plugins, and integrates multilingual support via Weglot. The technical infrastructure is robust, leveraging Cloudflare for DNS and likely CDN services, ensuring fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and policies could be improved. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service policies. Overall, the website presents a professional and trustworthy front with good business credibility and technical maturity.

J

JK Clinic Oy

spattiturku.fi

52

JK Clinic Oy operates the SPåTTI website, providing wellness and healthcare services including various types of massage, acupuncture, physiotherapy, and body composition measurements in Turku, Finland. The business targets both general wellness clients and athletes, with a notable partnership as the massage provider for FC TPS. The website is built on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a moderate to advanced digital maturity. Privacy and cookie compliance are well implemented, reflecting GDPR adherence. Security posture is good with HTTPS and consent management, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with the business's local healthcare service model.

K

Kiinteistö Oy Ideapark Ab

ideapark.fi

45

Ideapark.fi represents a Finnish real estate company specializing in operating shopping centers across multiple Finnish cities including Lempäälä, Oulu, and Seinäjoki. The website serves primarily as a landing page directing visitors to regional subdomains for each shopping center location. The business is well established with a domain age of over 17 years and a registrant organization that matches the website's business focus and geographic location. From a technical perspective, the website employs basic modern web technologies including Google Analytics, Google Tag Manager, and Adobe Typekit fonts. Hosting and DNS infrastructure leverage Amazon AWS services, indicating a reliable hosting environment. However, the site lacks advanced CMS or frameworks and shows minimal content and interactivity on the main page. Security posture is limited with no visible security headers, no published privacy or cookie policies, and no explicit HTTPS verification in the provided data. The site uses tracking and advertising pixels without visible consent mechanisms, which may raise privacy compliance concerns under GDPR. No contact emails or phone numbers are present on the homepage, though WHOIS data provides a physical address. Overall, the website is functional and consistent with the business it represents but requires improvements in privacy compliance, security best practices, and richer content to enhance trust and user experience.

I

Internet Info, s.r.o.

zdn.cz

60

The website zdravi.euro.cz is a Czech-language specialized media portal focused on healthcare and medical topics. It serves healthcare professionals, doctors, and the general public by providing expert articles and news related to medicine. The site is part of the Internet Info, s.r.o. group, a known media company in the Czech Republic. The business model revolves around content publishing and advertising revenue. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Gemius analytics, and header bidding via Prebid.js. It uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR principles, though no explicit privacy policy page was found in the provided content. Security posture is moderate with HTTPS and error monitoring via Sentry, but lacks visible security headers and published security policies. WHOIS data is not publicly available, indicating privacy protection, which is common but reduces transparency. Overall, the site is professionally designed, mobile-optimized, and trustworthy for its target audience.

I

ISOTRA

artosi.cz

47

The website www.artosi.cz represents a Czech company specializing in the design, manufacture, and sale of advanced bioclimatic pergolas under the ARTOSI brand, developed by ISOTRA, a recognized leader in shading technology. The site showcases detailed product information, references, and accessories, targeting homeowners and businesses seeking high-quality outdoor shading solutions. The technical infrastructure includes modern web technologies such as Google Tag Manager, YouTube embeds, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and comprehensive privacy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance disclosures.

L

Liveto

liveto.io

67

Liveto is a Finnish technology company specializing in comprehensive event management solutions including ticketing, access control, POS systems, and event applications. Established in 2017, Liveto serves event organizers primarily in Finland with a SaaS platform that integrates multiple event-related services. The website is built on HubSpot CMS and incorporates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar, demonstrating a mature digital infrastructure. Cookie consent is implemented via Cookiebot, indicating attention to privacy compliance, although explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is generally good with HTTPS enabled and domain registration protected by privacy services, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, Liveto presents a professional and trustworthy online presence with room for improvement in explicit privacy and security disclosures.

K

Kemikalioliike Olet Kaunis Oy

oletkaunis.fi

56

Kemikalioliike Olet Kaunis Oy operates the Finnish e-commerce website Oletkaunis.fi, specializing in cosmetics and beauty products. The company offers a wide range of brands and products with a focus on fast delivery, competitive pricing, and a reliable Finnish shopping experience. The website targets Finnish consumers interested in cosmetics and beauty care, positioning itself as a trusted online retailer in this niche. The business has been established since 2015, indicating a stable market presence. Technically, the website is built on the PrestaShop platform and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. It employs HTTPS for secure communications and uses Google reCAPTCHA to protect forms from abuse. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website benefits from HTTPS and some security best practices but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. No incident response or security policy information is publicly available, which could be improved to enhance trust. Overall, the website is professional, trustworthy, and secure for e-commerce purposes, but it would benefit from enhanced privacy compliance and additional security headers. The WHOIS data confirms the legitimacy of the business with transparent registration details consistent with the website's claims.

N

NÉPRA

wearnepra.com

73

NÉPRA is an ethical, minimalist activewear brand based in Finland, operating primarily through an e-commerce platform hosted on Shopify. The website presents a professional and well-structured online store with clear navigation and a focus on sustainable fashion. The technical infrastructure leverages modern web technologies, including Shopify's Stiletto theme, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mailchimp. Security posture is strong with HTTPS enforced and standard security headers likely managed by Shopify. Privacy compliance is addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of WHOIS registration data and lack of explicit contact information slightly diminish business credibility. Overall, the site is functional, secure, and user-friendly, serving a niche market of ethical activewear consumers.

V

Very Black Corner Oy

veryblackstore.fi

57

Very Black Store, operated by Very Black Corner Oy, is a Finnish-based e-commerce retailer specializing in CrossFit and functional training equipment, apparel, and accessories. The company emphasizes quality and durability, with products tested in real gym environments and a strong focus on custom gym consulting and construction services. Their market position is niche but well-established in Finland, supported by over a decade of experience and local manufacturing for wooden products. The website is professionally designed, bilingual (Finnish and English), and offers a comprehensive product catalog with clear navigation and active customer engagement channels.

R

RockTape Suomi

rocktape.fi

52

RockTape Suomi operates as a specialized healthcare business focused on providing kinesiology tapes, related therapeutic products, and professional training courses primarily targeting healthcare professionals in Finland. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is supported by consistent branding and relevant content but lacks explicit contact details and certifications. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

G

GreenACT Oy

nopain.fi

55

NoPain.fi is a Finnish premium sportswear e-commerce brand operated by GreenACT Oy. The company specializes in high-quality training apparel for both women and men, offering products such as compression tights, sports bras, and other fitness clothing. The website positions itself as a domestic premium brand with a focus on fast delivery and free shipping for orders over 120 euros. The target audience includes fitness enthusiasts and athletes seeking quality sportswear. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools like Google Analytics, Facebook Pixel, Hotjar, and Tawk.to live chat. The site is well-structured, mobile-optimized, and uses HTTPS with good security headers, although some improvements in security policies could be made. Privacy and cookie policies are present and indicate GDPR compliance, but explicit security and incident response policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

Nikotiinipussit

pussit.com

47

Nikotiinipussit.com is a Finnish e-commerce retailer specializing in the sale of legal nicotine pouches. Established in 2007, the company positions itself as the largest and most recognized supplier of nicotine pouches in Finland, offering a wide product selection, installment payment options, and free delivery for orders exceeding 120 euros. The website is professionally designed, multilingual, and integrates modern e-commerce technologies including WooCommerce and Elementor, supported by extensive marketing and analytics tools such as Google Analytics and Google Tag Manager. The business targets adult consumers seeking legal nicotine alternatives, emphasizing product quality and legal compliance.

L

Lattianvalu- ja Rakennuspalvelu Kuula Oy

kuulaoy.fi

43

Lattianvalu- ja Rakennuspalvelu Kuula Oy is a Finnish construction company specializing in floor casting and concrete works, operating primarily in the Ylivieska region and surrounding areas. The company has a solid regional presence with a workforce ranging from 6 to 15 employees seasonally and a significant volume of concrete work annually. Their website reflects a professional image with clear branding and detailed business information, targeting construction clients and partners in Finland. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts and Google Analytics for tracking. While the site is mobile-optimized and SEO-friendly, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding standard security headers and incident response information. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and transparency.

F

Fonecta Oy

palvelee.fi

66

Kotisivukone is a Finnish website building service operated by Fonecta Oy, offering easy-to-use tools for creating websites and e-commerce stores targeted at businesses, associations, and private users. The service includes turnkey website packages and domain registration, positioning itself as a cost-effective and reliable solution in the Finnish market. The website demonstrates professional design and clear navigation, supported by a solid technical infrastructure including modern JavaScript libraries and analytics tools. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear links to privacy and terms of service documents. Security posture is strong with HTTPS enforcement and secure form handling, though some advanced security headers could be added for further hardening. Overall, the domain registration and business information are consistent and trustworthy, reflecting a mature and legitimate online presence.

M

MVR-Yhtymä Oy

mvr-yhtyma.fi

47

MVR-Yhtymä Oy is a Finnish construction company with a strong regional presence, specializing in industrial construction, public contracting, housing production, and turnkey construction projects. The company emphasizes quality, sustainability, and creating living spaces that go beyond mere buildings. Their market position is supported by over 35 years of experience and multiple certifications, positioning them as a trusted partner in the Finnish construction sector. The website reflects a professional image with clear service offerings and project references. Technically, the site is built on WordPress with Bootstrap and modern web technologies, ensuring good mobile optimization and user experience. Analytics tools such as Google Analytics and Tag Manager are used for user tracking, though privacy compliance could be enhanced with cookie consent mechanisms. Security posture is adequate with HTTPS enabled, but could benefit from additional security headers and DNSSEC implementation. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Suomen Painonnostoliitto SPNL ry

painonnosto.fi

56

Suomen Painonnostoliitto SPNL ry is the Finnish national weightlifting federation, established in 2004, serving as the governing body for weightlifting and related strength sports in Finland. The organization provides services including competition management, coaching education, anti-doping compliance, licensing, and community building. The website reflects a well-structured and content-rich platform targeting athletes, coaches, clubs, and enthusiasts within Finland. It maintains a consistent brand identity and offers comprehensive information about events, rules, and news.

D

DATABOX, s.r.o.

zivegdpr.cz

55

ŽivéGDPR.cz is a Czech Republic based small business operated by DATABOX, s.r.o., specializing in providing comprehensive GDPR compliance documentation and support services. The website offers a complete package of GDPR-related documents, manuals, templates, and expert consultation services targeted at companies seeking to implement GDPR requirements efficiently. The business leverages a professional online presence with clear contact information and a focus on GDPR education and compliance support. Technically, the website uses modern web technologies including Bootstrap and jQuery, with Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and well-structured, providing a good user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers and formal incident response disclosures. Overall, the domain registration aligns well with the business claims, showing legitimacy and consistency. The website is safe, professional, and trustworthy with no signs of malicious or adult content.

D

Databox s.r.o.

skolanadlani.cz

62

ŠkolaNaDlani.cz is an educational communication platform operated by Databox s.r.o., founded in 2013 and based in the Czech Republic. The service facilitates easy and efficient communication between schools and families, targeting teachers, parents, and students. It integrates with popular platforms such as Google Classroom and Microsoft Teams, enhancing its utility in modern educational environments. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience.

M

Muzeum Hlučínska

hlucinske-pamatky.cz

56

The website 'Hlučínské památky' serves as an informational platform dedicated to the cultural and historical monuments of the town of Hlučín in the Czech Republic. It provides detailed listings and descriptions of sacral and secular monuments, targeting a general audience interested in local heritage. The site is managed by 'Muzeum Hlučínska' and features a professional design with good navigation and mobile optimization. Technically, the site uses jQuery libraries, Google Analytics, and Tag Manager, hosted on a CDN provided by arsy.cz. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or terms of service pages. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears trustworthy and professionally maintained. Overall, the site is safe for general audiences and provides valuable cultural information but would benefit from enhanced security and compliance features.

T

TESCOMA s.r.o.

tescoma.com

50

TESCOMA s.r.o. operates a multilingual website offering a comprehensive range of kitchen stainless steel cookware, utensils, and accessories for cooking and table use. The company targets a broad general audience interested in kitchenware products and maintains a consistent brand presence across multiple country-specific domains. The business model is retail-focused, serving customers primarily in the Czech Republic and other European markets. The website content is professionally presented with good design and navigation, although mobile optimization and accessibility are basic. Technically, the website uses standard HTML, CSS, and JavaScript technologies, including an outdated version of jQuery (1.4.4) and Google Analytics for tracking. The site lacks modern security headers and does not provide visible privacy or cookie policies, which impacts compliance and user trust. Performance is moderate, and SEO optimization is good based on meta tags and multilingual support. From a security perspective, the site uses Google Analytics asynchronously but lacks visible HTTPS confirmation and security headers in the provided data. The WHOIS lookup failed to return registrar or registrant information, raising concerns about domain registration legitimacy. No contact information or incident response details are provided, limiting transparency and trust. Overall, the security posture is moderate but requires improvements in SSL configuration, security headers, and compliance documentation. The overall risk assessment indicates a functional and professional retail website with some technical and compliance gaps. Strategic recommendations include updating JavaScript libraries, implementing HTTPS and security headers, publishing privacy and cookie policies, and improving transparency with contact and incident response information to enhance trust and security posture.

H

HELUZ cihlářský průmysl a. s.

heluznamax.sk

41

HELUZ cihlářský průmysl a. s. operates the website heluznamax.sk, which promotes the HELUZ NA MAX partner program offering building materials and unique benefits for construction projects. The company is positioned as a large manufacturer in the building materials sector, targeting construction professionals and home builders primarily in Slovakia. The website provides detailed program benefits, partner links, and resources to support customers in their building projects. Technically, the website uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Typekit fonts. It is served over HTTPS with good SSL configuration and includes multiple external integrations for analytics and advertising. The site is mobile optimized with good design and navigation, though accessibility features are basic. Privacy and cookie policies are present but lack an explicit consent mechanism. From a security perspective, the site enforces HTTPS and uses standard tracking and advertising scripts without visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public security or incident response policies are found. The WHOIS data aligns well with the business identity, indicating a legitimate and trustworthy domain. Overall, the website presents a professional and credible business presence with moderate user tracking and advertising. Strategic improvements in security headers, explicit cookie consent, and public security policies would enhance the security posture and compliance. The risk level is low, with no critical issues detected.

C

Citadeli

citadeli.com

55

Citadeli is a Georgian-based company specializing in the retail and distribution of high-quality construction and renovation materials, as well as construction equipment. The company operates an e-commerce platform that facilitates easy online purchasing for construction professionals and retail customers. The website is well-structured with a comprehensive product catalog and multi-language support, targeting primarily the Georgian market. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components and integrates marketing and analytics tools like Facebook Pixel and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses domain registration locks to protect the domain, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security policy transparency.

CIKO s.r.o. is a Czech manufacturer specializing in chimney systems, including brick and stainless steel chimneys, safe penetrations, and related accessories. Established in 2004 and operating under the Heluz Group, the company offers a broad product range with a strong emphasis on quality, safety, and customer satisfaction, including a 30-year warranty. The website reflects a mature digital presence with integrated analytics and marketing tools, a cookie consent mechanism, and clear contact information. However, it lacks explicit privacy policy and terms of service pages, as well as formal security policies or incident response contacts. The technical infrastructure is modern and supports good user experience and SEO, though security headers and advanced compliance features could be improved.

The website www.klientskyportal.cz serves as a client login portal primarily for financial services, targeting customers in the Czech Republic. It provides secure access to client accounts and integrates modern technologies such as Material Design, Google Analytics, Microsoft Clarity, and a custom chatbot for customer support. The presence of GDPR-compliant cookie consent mechanisms indicates attention to privacy regulations. However, the absence of WHOIS registration data and lack of explicit business contact information on the login page reduce transparency and business credibility. Technically, the site employs a moderate performance stack with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent, but could be improved by adding explicit security headers and ensuring secure form handling. Overall, the site appears legitimate and professional but would benefit from enhanced business transparency and security hardening.

D

DLC Websites

deadlinkchecker.com

39

DeadLinkChecker.com is a specialized online service offering free and subscription-based tools to detect broken links on websites, targeting webmasters and SEO professionals. The business operates a niche service focused on website quality and SEO enhancement, with a freemium model that includes manual checking and automated scheduled scans. The website content is professional and consistent with its stated purpose, providing clear service descriptions and user testimonials. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Analytics, with basic security measures such as HTTPS and a Content-Security-Policy header. However, the absence of additional security headers and cookie consent mechanisms indicates room for improvement in privacy compliance and security posture. The WHOIS data is notably missing or unregistered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site scores well on content quality and usability but should address privacy and security gaps to enhance trust and compliance.

R

Runto

windson.eu

45

Windson.eu is a specialized e-commerce website focused on the manufacture, distribution, and sale of darts and related accessories, targeting both professional and amateur darts players. The business operates primarily in the retail sector, offering a range of products including steel and soft dart sets, shafts, flights, tips, and electronic targets. The website is built on a modern WordPress platform utilizing WooCommerce for e-commerce functionality and Elementor for page design, supported by plugins such as Rank Math SEO and Site Kit by Google for analytics and SEO optimization. Hosting is provided by INTERNET CZ, a.s., a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses security-related scripts such as reCAPTCHA and password strength meters, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no visible security or incident response policy, which suggests room for improvement in security maturity. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms implemented, which could pose regulatory risks especially under GDPR. Overall, the website presents a professional and trustworthy front for its niche market, with good technical implementation and SEO practices. The absence of critical security issues and malicious content supports a moderate security score. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and establishing clear incident response and vulnerability disclosure channels to improve compliance and trust.

B

Bizzdesign BV

bizzdesign-academy.com

53

Bizzdesign Academy is a professional online training platform specializing in enterprise architecture and related software solutions such as Horizzon, Alfabet, and MEGA HOPEX. The platform offers a variety of free and paid eLearning courses, certifications, and role-based tutorials targeting enterprise users and professionals seeking to enhance their skills in Bizzdesign products. The website is built on the Moodle LMS platform with a modern tech stack including YUI, RequireJS, and jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security measures include HTTPS enforcement and Google reCAPTCHA v3 for bot protection, although explicit security headers and cookie consent mechanisms are not fully implemented. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration legitimacy, but the professional content and consistent branding support the site's credibility. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and security header implementation.

C

CIRCULAR PATH X AMANDA MURRAY

circularpathshoes.com

49

Circular Path X Amanda Murray is a niche luxury footwear brand offering unique and limited edition shoes and accessories crafted in Italy. The brand targets fashion-conscious women inspired by iconic New York City fashion culture. The website is hosted on the AliveShoes platform and integrates modern technologies including Stripe and Adyen for secure payments, Google reCAPTCHA for bot protection, and tracking tools like Google Analytics and Mouseflow. While the site is professionally designed with good mobile optimization and SEO practices, it lacks a visible privacy policy page and explicit security headers, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and secure website presence suggests a legitimate business. Overall, the site demonstrates a moderate security posture and good business credibility but should enhance transparency and security practices to improve trust and compliance.