Security Directory

T

TBG Metrostav

tbg-metrostav.cz

55

TBG Metrostav is a leading supplier of concrete and related construction materials in the Prague region, offering a comprehensive range of products including fresh concrete mixes, pumping services, and rental equipment. The company targets construction professionals and developers, positioning itself as a market leader with a strong local presence. The website is built on WordPress with modern technologies and includes tracking and analytics tools such as Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

T

Terran

terran.cz

57

Terran is a Czech company specializing in the manufacturing and distribution of high-quality concrete roofing tiles with a tradition spanning over 100 years. The company targets homeowners, builders, and roofing contractors primarily within the Czech Republic, offering a range of roofing products and accessories supported by expert advice and a wide sales network. The website reflects a mature digital presence with good content quality and user experience, including mobile optimization and clear navigation. Technically, the site employs standard web technologies and integrates common analytics and marketing tools with user consent mechanisms in place. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, but the overall business credibility remains high based on website content and trust indicators. Strategic recommendations include enhancing transparency with domain registration data, publishing security policies, and providing direct contact information for improved trust and compliance.

H

HELUZ cihlářský průmysl a.s.

heluzdomy.cz

40

HELUZ cihlářský průmysl a.s. operates the website heluzdomy.cz, offering detailed family house projects and comprehensive construction documentation primarily targeting individuals and families planning to build homes. The company positions itself as a provider of high-quality, energy-efficient house designs using their proprietary HELUZ brick system and premium windows. The website is professionally designed with clear navigation and good mobile optimization, leveraging modern technologies including Xaver CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a security perspective, the site enforces HTTPS and implements a granular cookie consent mechanism, demonstrating compliance with GDPR. However, no explicit security headers were detected, and no direct contact information or incident response policies were found on the homepage, which could be improved. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and branding appear consistent and professional. Overall, the website presents a solid digital presence with good privacy compliance and marketing practices. The main risks relate to incomplete domain registration transparency and minor security header omissions. Strategic improvements in these areas would enhance trust and security posture.

B

BE A FUTURE

beafuture.com

65

BE A FUTURE is a Czech Republic-based technology company specializing in IT services such as information systems, IT improvement, new IT development, and system integration. The company positions itself as a future-oriented IT partner emphasizing agility, loyalty, and partnership with clients. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technical infrastructure includes modern web technologies such as Bootstrap, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and bot protection in place, but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism implemented but no explicit privacy policy or terms of service found. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include publishing privacy and security policies, improving security headers, and clarifying domain registration status to enhance trust and compliance.

1

1·2·3 Veggie !

123veggie.fr

57

123veggie.fr is a French-language website dedicated to vegetarian and vegan lifestyle content, including recipes and community engagement. The site targets French-speaking consumers interested in plant-based diets and related lifestyle topics. The business model appears content-driven, likely monetized through advertising or affiliate marketing. Technically, the site is built on WordPress using the Divi theme, with SEO optimization via Yoast and tracking through Google Analytics and Google Tag Manager. Hosting is provided by NUXIT, a French hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. No contact information or incident response details are present, which limits direct communication channels. Overall, the site is professionally designed and functional but could improve privacy compliance and security transparency.

I

InterNICHE

interniche.org

45

InterNICHE is an international non-profit organization dedicated to promoting humane education and alternatives to animal use in medical, veterinary, and biological science education. The website serves as a multilingual resource hub for educators, students, and advocates, offering databases, educational materials, and advocacy tools. The organization positions itself as a niche leader in humane education with a collaborative and content-rich platform. Technically, the website is built on Drupal CMS, utilizing common JavaScript libraries such as jQuery and Lightbox2, and integrates Google Analytics for visitor tracking. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. Security practices are basic, with HTTPS implied but no visible advanced security headers or cookie consent mechanisms. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities were detected in the provided content. However, the absence of WHOIS data limits domain trust verification. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Contact information is limited to emails, with no phone or physical address details. Overall, the website is functional and trustworthy for its educational purpose but would benefit from enhanced security headers, improved privacy compliance, and better technical optimization to strengthen its digital maturity and user trust.

B

BUAV

crueltyfreeinternational.org

67

Cruelty Free International is a well-established non-profit organization focused on ending animal suffering in laboratories through advocacy, undercover investigations, and the globally recognized Leaping Bunny cruelty-free certification program. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content aimed at educating the public and encouraging donations and activism. Technically, the site is built on Drupal 10, integrates modern analytics and marketing tools, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though some security headers could be explicitly confirmed and a security policy published. Overall, the domain registration data aligns well with the organization's identity, supporting high trustworthiness. The site is safe for general audiences and does not contain any adult or explicit content.

Rádio BEAT is a Czech classic rock radio station operated by MEDIA CLUB, s.r.o., offering live radio broadcasting, online streaming, event news, and merchandise sales. The website presents a professional and content-rich platform targeting classic rock enthusiasts primarily in the Czech Republic. The technical infrastructure includes modern JavaScript libraries, Google Analytics, and a comprehensive GDPR-compliant consent management platform, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. The absence of WHOIS data due to privacy protection is common in media businesses and does not detract from the site's legitimacy. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

M

Mediachannel

mediachannel.cz

43

Mediachannel is a Czech Republic based media and brand marketing service provider established in 2007. The company focuses on helping brands grow by improving customer interaction and integrating real-world and digital experiences. Their website reflects a professional and consistent brand image targeting businesses seeking media and brand development services. Technically, the site uses modern technologies including JW Player for media, Google Analytics and Tag Manager for tracking, and is built on the Jekyll framework. The website is mobile optimized and SEO friendly with good design and navigation. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and formal privacy or terms policies. No contact information or incident response channels are explicitly provided, which limits transparency. Overall, the domain age and WHOIS data support legitimacy and trustworthiness. Strategic improvements in security headers, privacy documentation, and contact transparency would enhance compliance and trust.

I

Icareus Oy

icareus.es

34

Icareus Oy is a well-established provider of premium video and TV streaming solutions, operating globally with a strong presence in Spain and Finland. Their website showcases a comprehensive portfolio of cloud-based video services including OTT platforms, webinars, HbbTV solutions, and playout services, targeting content owners, broadcasters, enterprises, and event service companies. The company positions itself as a trusted partner with over 20 years in business and more than 300 satisfied clients worldwide. Technically, the website is built on a modern WordPress CMS with Elementor and Enfold theme, integrating advanced SEO and analytics tools, and providing a responsive and professional user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

I

Icareus Oy

icareus.fi

39

Icareus Oy is a Finnish technology company specializing in premium online video cloud solutions for enterprises and organizations. Their flagship product, Icareus Suite Videopilvi, offers a comprehensive platform for video content creation, management, streaming, and monetization. The company targets a diverse audience including businesses, public sector entities, educational institutions, sports organizations, and media companies. With a domain age dating back to 2004 and a consistent brand presence, Icareus holds a strong market position in Finland and internationally. The website reflects a mature digital infrastructure leveraging WordPress with modern plugins and integrations for SEO, analytics, and multilingual support. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, supporting trust and regulatory adherence. Overall, the company demonstrates professionalism, technical maturity, and a clear focus on delivering secure, scalable video solutions.

O

Općina Magadenovac

magadenovac.hr

55

Općina Magadenovac is a Croatian municipal government entity providing local administration and public services to residents of Magadenovac. The website serves as an official communication channel offering news, public notices, open data, and transparency documents. It targets local citizens and stakeholders, supporting community engagement and information dissemination. The business model is governmental, focusing on public service rather than commercial activities. The domain is well-established since 2008, reflecting a stable local government presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted by CARNET, a reputable Croatian academic network. The site is mobile-optimized, accessible, and includes modern web technologies. Google Analytics is integrated with a cookie consent mechanism, indicating moderate user tracking with privacy considerations. The site demonstrates good SEO and usability practices. Security posture is solid with HTTPS enforced and cookie consent implemented. However, explicit security headers like CSP and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. Incident response and security policy information are not publicly available, suggesting an area for enhancement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively serves its purpose as a municipal information portal with good technical and security standards. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to ensure ongoing protection and compliance.

G

Grad Donji Miholjac

donjimiholjac.hr

46

Grad Donji Miholjac operates an official municipal website serving as the primary digital portal for city administration, public services, cultural events, and community engagement. The site targets residents, local businesses, and visitors, providing transparent access to official documents, news, and contact information. The business model is government/public service with a focus on local governance and community support. The website is well-positioned as the authoritative source for municipal information in Donji Miholjac, Croatia. Technically, the website is built on Drupal 7 CMS with jQuery and several JavaScript libraries for UI enhancements. Hosting is provided by CARNET, a reputable Croatian academic network, ensuring stable and secure infrastructure. The site employs HTTPS with good SSL configuration and includes accessibility tools to support inclusive access. However, some technical aspects such as outdated jQuery and missing security headers indicate areas for modernization and security hardening. From a security perspective, the website enforces HTTPS and anonymizes IPs in Google Analytics, reflecting basic privacy considerations. There are no visible security policies or incident response contacts, and no security.txt file was found. The absence of security headers and use of an older CMS version suggest potential vulnerabilities that should be addressed. Overall, the security posture is moderate but could be improved with updated software and enhanced security controls. The website is safe for general audiences, containing no adult or questionable content. Contact information is clear and professional, supporting trustworthiness. The domain WHOIS data is consistent with the website's official government status, registered with a Croatian academic registrar since 2009, reinforcing legitimacy. Strategic recommendations include updating technical components, implementing comprehensive security policies, and enhancing privacy compliance mechanisms to strengthen trust and resilience.

Otevřená společnost,o. p. s. is a Czech non-profit organization founded in 2005, dedicated to promoting a well-functioning state with equal opportunities for all citizens. Their work includes advocacy, education, and social services focusing on public information rights, gender equality, debt issues, and police-public relations. The organization maintains a professional web presence with clear contact details and partnerships with reputable foundations and institutions. Technically, the website uses a Pimcore CMS with legacy jQuery and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for tracking. While the site is secure with HTTPS, it lacks published privacy and cookie policies, which is a compliance gap. No security headers or vulnerability disclosures are present, and the use of an outdated jQuery version poses potential security risks. Overall, the website is well-designed, trustworthy, and serves its target audience effectively.

G

GORDIC spol. s r.o.

gordic.cz

66

GORDIC spol. s r.o. is a well-established Czech software company specializing in information systems for public administration and private sector clients. With over 30 years of experience, the company offers a broad portfolio including cybersecurity, cloud services, and training. Their market position is strong within the Czech Republic, supported by compliance with GDPR, ISO standards, and ISMS frameworks. The website reflects a mature digital presence with professional design and comprehensive service offerings. Technically, the site leverages modern frameworks such as Liferay and React, integrates multiple analytics and marketing tools, and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by the website content and compliance programs. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and increasing transparency on data retention.

H

hjertegaver.dk

hjertegaver.dk

40

Hjertegaver.dk is a Danish e-commerce website specializing in personalized gifts, offering a wide range of customizable products such as clothing, home decor, and accessories. The business targets consumers seeking unique, personalized gift items and operates primarily within Denmark. The website is built on WordPress with WooCommerce, leveraging modern plugins and themes to provide an interactive and user-friendly shopping experience. Social media integration, particularly Facebook, supports customer engagement and brand presence. Technically, the site employs HTTPS and standard tracking tools like Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. However, some security best practices such as DNSSEC and security headers are not implemented, and explicit privacy and terms of service pages are not found in the provided content, which may impact compliance and user trust. Overall, the security posture is adequate but could be improved with enhanced policies and technical controls. The website is accessible without WAF or security challenges, and no suspicious or malicious content was detected. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to strengthen the security posture and compliance standing.

S

Suzana Stojković

suzanastojkovic.com

54

Suzana Stojković operates a professional creative services website specializing in branding, graphic design, web design, photography, and video/animation services. The website presents a strong market position with a portfolio of satisfied clients and testimonials, targeting businesses and individuals seeking tailored creative solutions. Technically, the site is built on WordPress using Elementor and several modern plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response mechanisms are recommended. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.

C

Challenge 22 - Animals Now, Vegan Izazov 22 - Sloboda za životinje

vegan-izazov22.com

52

Vegan Izazov 22 is a Serbian-based non-profit initiative promoting a 22-day vegan challenge aimed at encouraging plant-based diets for animal welfare, environmental sustainability, and personal health. The website serves as an educational and community platform offering free access to recipes, mentorship, and expert advice. It has a significant market presence with over one million participants historically and active social media engagement. Technically, the site is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the website is professional, trustworthy, and well-positioned within the non-profit vegan advocacy sector.

N

Niech Żyją!

niechzyja.pl

56

Niech Żyją! is a Polish non-profit coalition of NGOs and individuals dedicated to ending bird hunting in Poland. Established in 2012, the campaign focuses on advocacy, public awareness, and mobilizing support through petitions and educational resources. The website serves as a platform for news, campaign information, and engagement with supporters. Technically, the site is built on WordPress, leveraging common plugins and technologies such as Google Analytics and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and spam protection on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the domain registration data aligns well with the website's mission and history, indicating a trustworthy and legitimate presence.

S

Sherpas, s.r.o. (projekt WebTop100)

webtop100.cz

65

WebTop100 is a well-established digital marketing competition platform primarily serving the Czech and Slovak markets. Operated by Sherpas, s.r.o., it offers a comprehensive ecosystem for digital marketing professionals including competitions, conferences, and strategic consultations. The platform targets marketing managers and specialists responsible for corporate digital presentations, positioning itself as a leading authority in the digital marketing space in the region. The website features detailed category descriptions, expert judges, and strong media partnerships, enhancing its market credibility. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and YouTube APIs, ensuring robust tracking and user engagement capabilities. The site is mobile-optimized with good accessibility and SEO practices, providing a positive user experience. However, some security headers are not explicitly detected, and there is no visible privacy policy or terms of service, which are areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented, indicating attention to privacy compliance, though explicit privacy and terms documents are missing. The absence of WHOIS data reduces transparency and trust assessment, but the professional presentation and structured data suggest legitimacy. Overall, WebTop100 presents a professional, content-rich, and user-friendly platform with strong business credibility. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.

S

Sherpas

sherpas.cz

65

Sherpas is a strategic digital agency based in the Czech Republic specializing in digital design, branding, and marketing services. The company positions itself as a guide to digital success, offering services such as branding, digital design, lead generation, e-commerce marketing, and retention marketing. Their website showcases a professional design with extensive client testimonials and case studies, indicating a strong market presence and trustworthiness. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has secure form inputs but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the professional web presence and business information suggest a legitimate operation. Overall, Sherpas presents a mature digital footprint with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency are recommended to enhance security posture and trust further.

Business Media One, s.r.o. is a well-established Czech media publishing company specializing in architecture and construction-related content. With over 25 years of market presence, it operates multiple award-winning magazines and web portals targeting homeowners, architects, and construction professionals. The company holds a strong market position as a leading publisher in its niche. Technically, the website is built on WordPress with the Divi theme, leveraging common web technologies and Google Analytics for user insights. The site is mobile-optimized and professionally designed, offering a good user experience. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the business credibility is high with clear contact information and consistent domain registration data.

M

Materiály pro stavbu

imaterialy.cz

53

Materiály pro stavbu is a Czech-language online media platform specializing in construction materials, technologies, and industry news. Established in 2006, it serves construction professionals, architects, engineers, and manufacturers primarily in the Czech Republic. The website offers categorized articles, event information, and product insights, supported by industry partnerships. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms with no explicit emails or phone numbers displayed. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

L

LASSELSBERGER, s.r.o.

rako.cz

64

LASSELSBERGER, s.r.o. operates the RAKO brand, a historic and leading manufacturer of ceramic wall and floor tiles in the Czech Republic and Slovakia, with a legacy spanning nearly 140 years. The company targets construction professionals, architects, distributors, and end customers seeking high-quality ceramic tiles. Their business model focuses on manufacturing and distribution, positioning them as a key player in the regional manufacturing sector. The website reflects a professional and consistent brand image with multilingual support, catering to a broad audience.

H

HELUZ cihlářský průmysl a.s.

heluz.cz

46

HELUZ cihlářský průmysl a.s. is a well-established Czech manufacturer specializing in bricks, lintels, chimneys, ceiling systems, and masonry materials, providing a comprehensive building system for residential construction. The company targets home builders, architects, and construction professionals, offering both products and professional consulting services. The website reflects a strong market position with consistent branding and a professional online presence supported by multiple subsidiary and partner domains. Technically, the website employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and retargeting services, with good mobile optimization and SEO practices. The site uses HTTPS with secure forms and cookie consent mechanisms, indicating a mature digital infrastructure. However, some security headers are missing, and no explicit security policy or vulnerability disclosure is published. From a security perspective, the site demonstrates good practices such as encrypted connections, CSRF protection on forms, and cookie consent management. The absence of WHOIS data is a concern for domain legitimacy verification, but the professional nature of the site and business presence mitigate immediate trust issues. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and secure with minor areas for improvement in security policy transparency and technical headers. The domain WHOIS data absence suggests further verification is recommended to fully confirm legitimacy.

L

LAIX (Luxembourg Architectes Ingénieurs-conseils eXport)

laix.lu

47

LAIX is a professional platform dedicated to showcasing architectural, engineering, and urbanism projects by Luxembourg architects and consulting engineers, primarily members of the Ordre des Architectes et Ingénieurs Conseils (OAI). The website serves as a promotional and informational hub for these professionals, highlighting their projects both within Luxembourg and internationally. The platform targets industry professionals, potential clients, and partners interested in Luxembourgish architectural and engineering expertise. Technically, the website is built on Drupal 8 CMS, incorporating modern web technologies such as JavaScript, CSS, and external services like Google Analytics and AddToAny for social sharing. The site is mobile-optimized and accessible, with a moderate performance profile. However, some SEO and privacy compliance aspects could be improved. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, but lacks visible security headers and formal security or incident response policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a generally secure posture but with room for enhancement in security best practices and compliance documentation. Overall, the website is professional and trustworthy, with comprehensive project content and clear contact information. The absence of privacy and cookie policies, as well as security policies, represents compliance gaps that should be addressed to improve user trust and regulatory adherence.

O

OAI/Ordre des Architectes et des Ingénieurs-Conseils du Grand-Duché de Luxembourg

architectour.lu

46

Architectour.lu is a professionally maintained website serving as a comprehensive guide to contemporary architecture, engineering, and urbanism in Luxembourg. It is affiliated with the official Order of Architects and Engineers (OAI) of Luxembourg, providing curated tours, project showcases, and editorial content aimed at professionals and the general public interested in architectural innovation and sustainable construction. The platform is well-positioned as a leading architectural reference in Luxembourg with a clear focus on promoting local architectural achievements and education. Technically, the website is built on Drupal 8 CMS, leveraging modern JavaScript libraries and Google Analytics for user tracking with IP anonymization. The site is mobile optimized, accessible, and features good SEO practices. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and anonymizes user IPs in analytics, but does not provide visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No WAF or blocking mechanisms are detected, and the site content is fully accessible. The WHOIS data aligns well with the website's business claims, indicating legitimacy and consistency. Overall, the website is a credible and valuable resource for its target audience but would benefit from enhanced privacy compliance and security posture improvements to align with best practices and regulatory requirements.

G

GuideRefOAI

guideoai.lu

47

GuideRefOAI is a professional directory and resource platform affiliated with the Ordre des Architectes et Ingénieurs Conseils (OAI) in Luxembourg. It provides a comprehensive guide and references for architects, consulting engineers, interior architects, urban designers, and landscape architects, facilitating connections between clients and trusted design professionals. The website offers downloadable guides and archives, targeting professionals and clients in the architecture and engineering sectors within Luxembourg. Technically, the site is built on Drupal 8, incorporates Google Analytics for user tracking, and uses AddToAny for social sharing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and anonymizes IP addresses in analytics but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits full domain legitimacy verification, but the site content and branding strongly indicate a legitimate professional organization. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security practices.

O

Ordre des Architectes et des Ingénieurs-Conseils (OAI)

bhp.lu

47

The website bhp.lu represents the Bauhärepräis OAI, an architecture and engineering award program managed by the Ordre des Architectes et des Ingénieurs-Conseils (OAI) in Luxembourg. It serves as a platform to showcase award winners, nominees, and related cultural exhibitions, targeting architects, engineers, project owners, and the general public interested in architectural quality and urban development in Luxembourg. The site is professionally designed with consistent branding and good content relevance, reflecting a small but important government-related entity promoting architectural excellence. Technically, the website is built on Drupal 8 CMS, utilizing standard web analytics (Google Analytics) and social sharing tools (AddToAny). The site is mobile optimized and accessible, with moderate performance. However, there is room for improvement in security practices, such as implementing security headers and providing explicit privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which limits direct communication channels. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and incident response information. No vulnerabilities or suspicious patterns were detected in the WHOIS data, which aligns well with the website's Luxembourg-based professional focus. Overall, the site is trustworthy but could enhance compliance and security posture. Strategic recommendations include adding comprehensive privacy and cookie policies with consent mechanisms, improving security headers, publishing contact information for security incidents, and maintaining up-to-date CMS and modules to mitigate vulnerabilities.

S

SataKylät ry

satakylat.fi

45

SataKylät ry is a Finnish regional non-profit association founded in 1999, dedicated to supporting and developing rural communities in the Satakunta region. The organization acts as an advocate and facilitator for local village and resident associations, promoting self-sufficiency and vitality in the area. Their key activities include organizing the annual 'Vuoden Kylä' (Village of the Year) competition, coordinating the 'Avoimet Kylät' (Open Villages) day, and providing information and support to local communities. The website reflects an active and engaged organization with regular news updates, social media presence, and community outreach.

R

Rapumylly

rapumylly.fi

43

Rapumylly is a small Finnish company specializing in the sale of domestic signal crayfish, primarily sourced from the clean waters of Säkylä Pyhäjärvi. The company offers cooked and live crayfish products along with related traditional accompaniments such as crayfish beer. The website serves as a digital storefront and information hub for customers interested in purchasing these niche seafood products. The business has a strong local market position with a clear focus on quality and tradition. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MetaSlider, integrating social media and analytics tools like Facebook SDK and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosures or incident response information are provided, indicating a potential gap in security transparency. No signs of WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, Rapumylly's website is a trustworthy and professional representation of a niche local business but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

P

Porin Erotuomarit -53

porinerotuomarit.fi

44

Porin Erotuomarit -53 is a Finnish non-profit sports association focused on football and futsal refereeing in the Pori region. The website serves as a community hub providing news, event information, and referee services. The organization maintains an active presence with regular updates and structured navigation, targeting local referees and sports enthusiasts. Technically, the site is built on WordPress with common plugins such as LiteSpeed Cache and Yoast SEO, and uses Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

M

Matkatoimisto Satalomat

satalomat.fi

47

Matkatoimisto Satalomat is a local travel agency based in Pori, Finland, specializing in a wide range of travel services including flights, city breaks, beach holidays, cruises, business trips, spa holidays, and visa services. The company positions itself as a trusted local provider with partnerships with multiple well-known travel and airline companies, catering primarily to Finnish travelers. Their website is professionally designed using WordPress with modern plugins for SEO and social media integration, reflecting a moderate to high level of digital maturity. The technical infrastructure includes Google Analytics and HubSpot for marketing and analytics, and security measures such as HTTPS and Google Invisible reCAPTCHA are implemented to protect user interactions. However, the absence of a cookie consent banner and explicit security headers indicates room for improvement in privacy compliance and security posture. Overall, the website is trustworthy, content-rich, and well-structured, supporting the company's business credibility and customer engagement.

S

Satakunnan Yritystili Oy

satakunnanyritystili.fi

48

Satakunnan Yritystili Oy is a Finnish authorized accounting firm specializing in comprehensive financial administration services including bookkeeping, payroll, tax advisory, and consulting primarily for businesses in the Satakunta region. The company positions itself as a trusted local partner with a focus on personalized service and expertise in evolving financial regulations. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, targeting entrepreneurs and small to medium-sized enterprises in Finland. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates essential marketing and analytics tools like Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile-optimized with moderate performance. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration details are consistent with the business identity, supporting legitimacy and trustworthiness. Overall, the website presents a secure, professional, and GDPR-compliant digital presence suitable for its business domain. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

D

Digiteekki Oy

digiteekki.fi

43

Digiteekki Oy is a Finnish technology company specializing in the development of modern, user-friendly, and secure web services and e-commerce platforms for businesses and associations. Founded in 2004, the company offers tailored solutions including website creation (Verkkoneuvos), project management tools (Hankeneuvos), domain registration services, and training focused on project and online visibility management. Their market position is that of a niche provider with a strong emphasis on usability and security, targeting small to medium-sized enterprises and organizations in Finland. The website infrastructure is built on WordPress, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Google Site Kit, indicating a mature digital presence with SEO and analytics capabilities. Hosting is provided by hostingpalvelu.fi, and the site employs HTTPS with a valid SSL certificate, ensuring secure communications. The site is mobile-optimized and includes accessibility features, though some improvements in security headers could enhance the security posture. Security-wise, the site demonstrates good practices with HTTPS enforcement and a comprehensive cookie consent mechanism supporting GDPR compliance. However, no explicit security policies or incident response contacts are published, and security headers are not detected, suggesting room for improvement in defense-in-depth strategies. No vulnerabilities or exposed sensitive data were identified during analysis. Overall, Digiteekki Oy presents a credible and professional online presence consistent with its business claims. The domain registration data aligns with the company’s identity and location, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.

F

Floristimestari

floristimestari.fi

46

Floristimestari is a small local florist business based in Pori, Finland, specializing in floral arrangements, flower delivery, workshops, and retail sales. The company operates both a physical store and an online webshop, targeting general consumers and corporate clients in the local area. The website is built on WordPress and leverages common plugins such as Yoast SEO and Instagram Feed to enhance SEO and social media integration. The business demonstrates a consistent brand presence and provides clear contact information, including email, phone, and physical address. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. Technically, the website uses a modern tech stack with Bootstrap and jQuery, and it is mobile-optimized with good SEO practices. Security posture is moderate with HTTPS enabled and anonymized Google Analytics tracking, but lacks security headers and a vulnerability disclosure policy. No forms collect sensitive personal data except a search function, reducing risk exposure. The domain registration details align well with the business information, supporting legitimacy and trustworthiness. Overall, the website is professional and functional, serving its business purpose effectively. To improve security and compliance, the business should implement privacy and cookie policies with consent mechanisms, add security headers, and consider publishing a security.txt file. These steps will enhance user trust and regulatory adherence.

S

Skydent Oy

skydent.fi

42

Skydent Oy operates a modern dental laboratory located in Tampere, Finland, specializing in a wide range of prosthetic dental solutions including fixed and removable prosthetics and digital CAD-CAM services. The company targets dental professionals and patients requiring high-quality dental prosthetics, positioning itself as a local expert with advanced technology such as 3Shape scanners. The website reflects a small-sized healthcare business with a professional and consistent brand presence, providing clear service descriptions and contact details. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Bootstrap for responsive design. It integrates Google Analytics for visitor tracking and demonstrates moderate performance and good mobile optimization. However, some accessibility features are basic, and there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. The absence of security headers and lack of an incident response or security policy page are areas for enhancement. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected, which is important for GDPR compliance. Overall, the website is trustworthy and professional with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and establishing incident response contacts to strengthen security and compliance posture.

K

Karlevy Oy

karlevy.fi

44

Karlevy Oy is a Finnish small manufacturing company specializing in ecological and high-quality acoustic curtains. The company offers tailored acoustic curtain solutions and related accessories, emphasizing sustainability, quality, and customer service. Their market position is niche-focused within Finland, targeting both business and consumer segments seeking acoustic solutions. The website is built on a modern WordPress CMS with WooCommerce for e-commerce capabilities, integrating popular plugins such as Yoast SEO and Jetpack. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business goals effectively.

K

Karteko Oy

karteko.fi

44

Karteko Oy is a Finnish small business specializing in industrial maintenance services, including conveyor maintenance, welding, installation, and agricultural machinery repair. The company also offers logistics and driver rental services, targeting industrial and agricultural sectors in Finland. The website presents a professional image with clear contact information and service descriptions, supporting its market position as a local service provider. Technically, the site is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and transparency.

S

Suomen Opetuskaluste Oy

opetuskaluste.fi

45

Suomen Opetuskaluste Oy is a Finnish family-owned company specializing in educational furniture and presentation equipment, operating since 1987. The company positions itself as a trusted provider with decades of experience, targeting educational institutions and professionals in Finland. Their product range includes whiteboards, blackboards, notice boards, and various teaching accessories. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their market segment. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. However, some security best practices such as security headers and explicit privacy policies are missing. The site uses HTTPS and integrates Google Analytics and Google Tag Manager with IP anonymization, indicating moderate attention to user privacy. Overall, the security posture is adequate but could be improved with better compliance and incident response disclosures.

H

Hämeen Kylät ry

hameenkylat.fi

46

Hämeen Kylät ry is a Finnish regional non-profit association dedicated to promoting village and resident activities in the Kanta-Häme region. Established in 1998, it serves as an advocacy and cooperation body for local communities, aiming to foster vibrant and pleasant living environments close to nature. The website reflects this mission with relevant content, active social media integration, and regular updates on projects and news. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Jetpack, and Contact Form 7, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, serving its community-focused mission effectively.

A

ArtCloud Oy

artcloud.fi

46

ArtCloud Oy is a Finnish company specializing in digital services including web development, software solutions, media production, and advertising. The company targets businesses and organizations in Finland seeking customized digital and media services. Their website reflects a professional and consistent brand image with comprehensive service offerings and active client engagement through blog articles and social media integration. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and social media feeds, hosted likely by Louhi Net Oy. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Overall, the website and domain registration data align well, indicating a trustworthy and legitimate business presence.

D

Domik.ua

domik.ua

60

Domik.ua is a well-established Ukrainian real estate portal founded in 2001, offering comprehensive services including property sales, rentals, new construction projects, real estate news, and community forums. The platform targets Ukrainian real estate buyers, renters, developers, and investors, positioning itself as a leading marketplace and information source in the Ukrainian real estate sector. The website features a professional design with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern technologies such as React, integrates analytics tools like Google Analytics and Facebook Pixel, and enforces HTTPS with appropriate security headers, reflecting a mature digital infrastructure. However, the absence of a cookie consent mechanism and dedicated security or incident response policies indicates gaps in privacy compliance and security transparency. Overall, Domik.ua demonstrates a solid security posture with room for improvement in privacy and incident response disclosures. Strategic recommendations include implementing GDPR-compliant cookie consent, publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain trust and compliance.

Häme Events is a regional event listing platform operated by Hämeen Maakuntaliitto, a Finnish regional government entity. The website provides a searchable calendar of events in the Kanta-Häme region and offers an open API for integrating event data into other services. The platform targets residents and visitors interested in local events, supporting community engagement and regional promotion. The business model centers on providing free access to event information and facilitating event submissions. Technically, the website uses a custom-built platform with modern JavaScript libraries such as jQuery, Semantic UI, and various UI enhancement plugins. It integrates multiple analytics services including Google Analytics, Matomo, and Facebook SDK. Hosting appears to be on Amazon AWS infrastructure, indicated by the AWS nameservers. The site is mobile optimized and has basic SEO and accessibility features, though content quality is minimal and mostly functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and does not provide privacy or cookie policies, which impacts GDPR compliance. No contact emails or phone numbers are visible on the site, limiting user support and incident response transparency. The WHOIS data confirms the domain is registered to the regional government organization, with consistent registration details and no privacy protection, supporting legitimacy. Overall, the website is a functional regional event platform with moderate technical maturity and a solid legitimacy profile. Security and privacy compliance can be improved by adding policies, security headers, and contact information. Enhancing content richness and user engagement features would also increase value and trust.

F

FRS Travel

frs-travel.de

66

FRS Travel is a specialized maritime travel service provider focusing on package tours to the German North Sea islands of Sylt and Heligoland. The company offers combined hotel and ferry bookings, leveraging partnerships with local hotels and ferry operators such as FRS Syltfähre and the Halunder Jet catamaran. Their market position is niche but well-defined, targeting tourists seeking maritime vacation experiences in Germany. The website is professionally designed with clear navigation, good content quality, and consistent branding. Technically, the site is built on TYPO3 CMS, uses Cloudflare for DNS and CDN, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Accessibility and SEO optimizations are well implemented.

A

Albanian Ferry Terminal Operator (AFTO)

afto.al

69

Albanian Ferry Terminal Operator (AFTO) operates the modern ferry terminal in Durrës, Albania, serving as a key gateway for passengers and cargo between Albania and the Balkan region with ferry connections to Italian ports. As a subsidiary of the FRS Group since 2013, AFTO manages a terminal that handles significant passenger and vehicle traffic annually. The website reflects a professional and consistent brand presence aligned with its parent company. Technically, the site is built on TYPO3 CMS, incorporates Google Tag Manager and Analytics for tracking, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Privacy compliance is strong with comprehensive cookie and privacy notices adhering to GDPR standards. Overall, the site is trustworthy, safe, and well-structured, supporting AFTO's business operations effectively.

F

FRS Elbfähre Glückstadt Wischhafen GmbH

frs-elbfaehre.de

66

FRS Elbfähre Glückstadt Wischhafen GmbH operates a regional ferry service crossing the Elbe river in northern Germany, providing frequent and reliable transport for passengers and vehicles. The company emphasizes customer convenience with amenities such as free Wi-Fi and onboard refreshments, and is actively pursuing sustainable mobility initiatives to reduce emissions and increase capacity. The website is professionally designed using TYPO3 CMS, with good accessibility and SEO practices, and integrates Google Analytics and Tag Manager for performance monitoring. Security posture is solid with HTTPS and Cloudflare protection, though explicit security headers and incident response policies are not published. Privacy compliance is strong with comprehensive cookie and privacy policies aligned with GDPR. Overall, the site reflects a trustworthy and credible transportation business with a medium-sized operational scale.

O

Opiferum Oy

opiferum.com

69

Opiferum Oy is a Finnish technology company specializing in creating modern, user-friendly websites, e-commerce platforms, and intranet solutions tailored to business needs. With over 20 years of experience, they position themselves as a trusted local provider in Hämeenlinna, focusing on clear communication and customer-centric services. Their offerings include website development, online stores, additional services like email hosting and SEO, and ongoing support and training. Technically, the website employs modern frameworks such as Bootstrap, integrates with Google Analytics and Tawk.to for analytics and customer engagement, and uses Cookiebot for GDPR-compliant cookie management. The site is hosted on AWS Cloudfront CDN, ensuring reliable performance and availability. Security-wise, the site enforces HTTPS, uses standard security headers, and provides a comprehensive cookie consent mechanism, though it lacks explicit security policy and incident response disclosures. Overall, the website is professional, well-structured, and compliant with privacy regulations, reflecting a mature digital presence suitable for its business scope.

L

Liikuttajat Oy

liikuttajat.fi

53

Liikuttajat Oy operates a Finnish-language e-commerce and event management platform designed to simplify online sales of products, services, and events for businesses, associations, and clubs. The company positions itself as a user-friendly, comprehensive solution with features such as sales automation, booking calendars, and secure payment methods. The website is built on WordPress with Elementor and integrates SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR compliance mechanisms in place, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.