Security Directory

L

Leea MV GmbH

leea-mv.de

59

Leea MV GmbH operates as a regional competence center for renewable energies in Mecklenburg-Vorpommern, Germany. The company focuses on education, awareness, and community engagement through its Erlebniswelt, Energie Lab, Leea Akademie, and event hosting services. The website reflects a medium-sized organization with a clear mission to promote renewable energy understanding and participation among the general public. The business model is primarily educational and event-based, targeting families, schools, and stakeholders interested in sustainability and energy topics. Technically, the website is built on WordPress 6.8.1 with common libraries such as jQuery and Bootstrap, and uses modern sliders and carousels for content presentation. Cookiebot is integrated for GDPR-compliant cookie consent management, indicating a mature approach to privacy compliance. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and moderate technical sophistication. Strategic improvements in security headers, incident response transparency, and contact information clarity would enhance the security posture and user trust.

C

Cestovní kancelář Ludor, spol. s r. o.

e-wlochy.pl

50

The website www.e-wlochy.pl represents Cestovní kancelář Ludor, a Polish-language travel agency specializing in vacation packages to Italy for the year 2025. The company offers a broad range of services including accommodation bookings, travel consultancy, and customer support primarily targeting Polish-speaking tourists and families. The site is well-structured with rich content, including detailed regional guides, accommodation options, and customer reviews, reflecting a mature digital presence. Technically, the site uses a modern tech stack with jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management, ensuring good user experience and privacy compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and documented incident response policies. WHOIS data is unavailable, which slightly impacts trust but is offset by visible certifications and official documents. Overall, the site is professional, trustworthy, and well-positioned in the hospitality sector for Italian vacations.

C

Cestovná kancelária Ludor, spol. s r. o.

ludor.sk

49

Cestovná kancelária Ludor is a well-established Slovak travel agency specializing in holiday packages and accommodation bookings primarily in Italy for the 2025 season. The company leverages over 30 years of experience to provide curated travel options with a focus on family-friendly and diverse vacation experiences. The website is professionally designed, mobile-optimized, and offers clear navigation with multilingual support, enhancing user experience for Slovak, Czech, and Polish customers. Technical infrastructure includes modern JavaScript libraries, Bootstrap framework, and privacy-compliant analytics tools such as Matomo and Cookiebot. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The business demonstrates high credibility with transparent WHOIS data, certifications from relevant travel associations, and clear contact information. Overall, the website is safe, trustworthy, and compliant with GDPR regulations.

C

Cestovní kancelář Ludor, spol. s r. o.

ludor.cz

10

Cestovní kancelář Ludor, spol. s r. o. is a Czech travel agency specializing in holiday packages and accommodation bookings in Italy, with a focus on both summer and winter vacations. The website offers a comprehensive and user-friendly platform featuring detailed regional guides, interactive maps, and a wide selection of apartments, hotels, and villaggi. The company positions itself as a trusted provider with 30 years of experience, catering primarily to Czech-speaking tourists seeking quality and reliable travel services. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, Matomo analytics, and Cookiebot for GDPR-compliant cookie consent. The site is mobile-optimized and features good SEO practices, although some security headers are missing. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trust slightly, but the presence of certifications and legal documents supports legitimacy. Overall, the website presents a professional, trustworthy, and content-rich platform for travel services to Italy, with moderate technical and security maturity. Strategic improvements in security headers and published security policies would enhance its posture further.

N

Nidoma

nidoma.com

69

Nidoma is a specialized domain registration, backorder, and brokerage service operating since 2010. The company offers a range of domain-related services including auctions, premium domain sales, and domain appraisals, targeting domain buyers, sellers, and brokers. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Cookiebot for cookie consent, and hCaptcha for bot protection, hosted behind Cloudflare for DNS and CDN services. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, Nidoma presents a trustworthy and professional online presence in the domain services industry.

O

OREA Hotels & Resorts

orea.cz

66

OREA Hotels & Resorts operates a professional hospitality website offering luxury weekend stays, fine dining, corporate conferences, and animation programs. The website targets a general audience interested in hospitality services in the Czech Republic. The brand presents itself consistently with good content quality and a professional design. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and Bootstrap Datepicker, along with analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Bing Ads, and Cookiebot for cookie consent management. The website is mobile optimized and SEO friendly, although accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but additional security headers could enhance protection. WHOIS data is not publicly available, indicating privacy protection, which is typical for this business type. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and well-maintained.

R

ROMA KG

roma.de

63

ROMA KG is a leading German manufacturer specializing in sun and sight protection systems including roller shutters, venetian blinds, and textile screens. The company targets homeowners, architects, and construction professionals, positioning itself as a market leader in Germany with a strong brand presence. The website reflects a professional and consistent brand image with good content quality and clear focus on its product offerings. Technically, the site uses modern JavaScript frameworks and a CMS platform (Enhavo), with cookie consent managed by Cookiebot and analytics via Google Tag Manager, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial due to absence of visible privacy policy and terms of service pages. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

S

sevDesk

sevdesk.de

70

sevDesk is a leading German SaaS provider specializing in accounting software tailored for small and medium-sized businesses. The platform offers comprehensive services including invoice creation, bookkeeping, customer and inventory management, positioning itself as a market leader in Germany. The website is professionally designed, localized in German, and targets primarily German-speaking markets such as Germany and Austria. Technically, the site leverages modern web technologies including Webflow CMS, Cloudflare for DNS and CDN, Google Tag Manager, and New Relic for monitoring, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements robust cookie consent mechanisms, and uses security headers effectively, though it lacks explicit incident response and vulnerability disclosure information. Overall, the site demonstrates a strong security posture with no visible vulnerabilities or exposed sensitive data, complemented by good privacy compliance and extensive use of analytics and marketing tools with user consent. Strategic recommendations include publishing explicit security incident contacts, adding a vulnerability disclosure policy, enhancing accessibility, and expanding direct contact information to further improve trust and compliance.

E

Esterhazy

esterhazy.at

57

Esterhazy is a cultural heritage and event management organization based in Austria, focusing on organizing events, exhibitions, and cultural programs related to the Esterhazy estates. The website serves as an information portal for visitors and event attendees, providing details on tickets, exhibitions, and news. The business operates in the hospitality sector with a medium-sized footprint and targets a general audience interested in cultural and historical experiences. Technically, the website uses modern JavaScript technologies, integrates with YouTube for video content, and employs Cookiebot for GDPR-compliant cookie consent management. The presence of a CSRF token cookie indicates attention to security in web forms. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not detected. Privacy compliance is good regarding cookie management, but no explicit privacy policy or terms of service were found in the analyzed content. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile devices.

H

Hypo Vorarlberg Bank AG

hypovbg.at

68

Hypo Vorarlberg Bank AG is a well-established financial institution based in Austria, specializing in business banking, residential construction financing, and investment services. The website reflects a strong market position as a leading regional bank with a clear focus on entrepreneurs, home builders, and investors. Their digital presence is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Piwik PRO, indicating a mature technical infrastructure. The site is well-designed, mobile-optimized, and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates high professionalism and trustworthiness, suitable for a financial services provider.

W

Wienerberger

wienerberger.at

70

Wienerberger is a leading Austrian manufacturer specializing in bricks and building materials for walls, roofs, and facades. The company targets construction professionals and consumers interested in high-quality building products. Their website reflects a mature digital presence built on Adobe Experience Manager, integrating advanced marketing and analytics tools such as Adobe Launch, Google Tag Manager, and Cookiebot for consent management. The site is well-branded, professionally designed, and optimized for mobile devices, providing a good user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not publicly visible. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website demonstrates a solid enterprise-level digital infrastructure aligned with the company's market position.

L

Landeshauptstadt St. Pölten

st-poelten.at

62

Landeshauptstadt St. Pölten operates as the official municipal government portal for the capital city of Lower Austria, providing residents and visitors with comprehensive information on public services, city news, cultural events, and administrative resources. The website targets local citizens and tourists, positioning itself as a trusted source for city-related information and services. The business model is centered on public service delivery and community engagement, with a medium-sized organizational footprint typical of a city government entity. Technically, the website leverages Joomla CMS with modern JavaScript libraries such as jQuery and plugins like DearFlip for interactive content. Cookiebot is integrated for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. Hosting details are not explicitly identified but appear stable and secure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a cookie consent mechanism, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the city government. Strategic recommendations include publishing a formal security policy, establishing incident response contact channels, and enhancing accessibility to further strengthen the site's security and user experience.

M

mmcité

mmcite.com

69

mmcité is a company specializing in the design and manufacture of street furniture and smart urban solutions aimed at making cities smarter and more beautiful. The website presents a professional image with a clear business focus on B2B clients such as municipalities, urban planners, and architects. The company positions itself as a specialized provider in the urban design sector, offering innovative and aesthetic products for city environments. The website content is well-structured, with good SEO and mobile optimization, and includes a comprehensive cookie consent mechanism reflecting GDPR compliance. However, explicit contact information and detailed security policies are not readily found on the homepage content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers and published incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include improving transparency with contact and security policies, implementing security headers, and verifying domain registration details to enhance credibility and security posture.

V

Vipps MobilePay AS

vippsmobilepay.com

76

Vipps MobilePay AS operates a modern, well-branded payment platform targeting businesses in Finland and the Nordic region. The website presents a professional and user-friendly interface, emphasizing seamless payment solutions both online and in physical stores. The company leverages a modern technology stack including Next.js and Azure hosting, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer locks, though DNSSEC is not enabled and explicit incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. Overall, the site reflects a mature fintech business with a clear market position and trustworthy digital presence.

B

Bontonfilm CZ

bontonfilm.cz

68

Bontonfilm CZ operates as a media and film entertainment company primarily targeting the Czech Republic market. The website serves as a platform for film-related content and distribution, leveraging a modern Squarespace CMS infrastructure. The company maintains an active social media presence across major platforms including Facebook, Instagram, YouTube, LinkedIn, and TikTok, enhancing its digital footprint and audience engagement. However, the website lacks explicit business contact details and comprehensive descriptive content, which limits transparency. Technically, the website employs contemporary web technologies such as jQuery, Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for bot protection. The site is hosted on Squarespace, ensuring reliable hosting and SSL encryption. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices are implemented with proper meta tags and Open Graph data. From a security perspective, HTTPS is enforced with a valid SSL certificate, and cookie consent mechanisms are in place, demonstrating compliance with GDPR. However, the absence of security headers and explicit security policies reduces the overall security posture. The lack of WHOIS data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness. Overall, the website presents a professional and functional digital presence for Bontonfilm CZ but would benefit from enhanced transparency, improved security headers, and visible contact information to strengthen trust and compliance. Strategic improvements in these areas will support better risk management and user confidence.

C

CARDIFFACADEMY SE

cardiffacademy.cz

63

CARDIFFACADEMY SE operates as an online education provider specializing in MBA programs with 13 managerial specializations. The company targets students and professionals seeking flexible, remote MBA study options, positioning itself as a niche player in the Czech Republic's education sector. The website content is professionally presented, with clear descriptions of services and a consistent brand image. Technically, the site is built on WordPress, leveraging modern libraries such as jQuery, Swiper.js, and integrates marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight. Hosting is provided by WEDOS, a reputable registrar and hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not fully published. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data aligns well with the business profile, indicating legitimacy. However, the absence of explicit privacy and terms of service policies and contact information reduces compliance and trust scores.

V

ViT Logistics

vit-log.cz

55

ViT Logistics is a Czech Republic based logistics company established in 2013, offering tailored logistics services including warehousing, road, sea, and air transportation, as well as customs services. The company targets businesses requiring reliable and efficient supply chain solutions both domestically and internationally. Their website is professionally designed using WordPress and Elementor, with multilingual support and modern SEO practices. The technical infrastructure includes Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the website reflects a mature digital presence with room for improvement in compliance documentation and security transparency.

BigBoard Praha a.s. is a well-established leader in the Czech outdoor advertising market, operating since 1996. The company specializes in providing comprehensive advertising solutions in public spaces, including major roadways, Prague metro, and railways, as well as offering modern urban furniture to municipalities and public institutions. Their website reflects a professional and modern digital presence, leveraging technologies such as Laravel Livewire, Alpine.js, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site includes a robust cookie consent mechanism compliant with GDPR, demonstrating a commitment to privacy and regulatory adherence. Security posture is strong with HTTPS enforcement and CSRF protections, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, reinforcing the legitimacy and trustworthiness of the company.

F

FORPSI Cloud

forpsicloud.cz

71

FORPSI Cloud is a Czech-based cloud computing service provider offering reliable, secure, and scalable cloud solutions targeted at businesses and IT professionals. The website positions the company as a cost-effective and trustworthy cloud services provider in the Czech and Slovak markets. The digital infrastructure includes modern JavaScript libraries, Kentico CMS, and integration with major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency and slightly impacts trust, but the professional website and compliance measures mitigate this concern. No contact emails or phone numbers are explicitly found, which could be improved to enhance business credibility.

V

Vipps AS

vipps.no

75

Vipps AS operates a leading mobile payment and digital identification platform primarily serving the Norwegian market. The website vipps.no presents a professional and user-friendly interface that clearly communicates the company's core services, including mobile payments, business payment solutions, and digital identification. The company is positioned as a major player in the Norwegian finance and technology sectors, with a large user base and strong brand recognition. The technical infrastructure leverages modern web technologies such as Next.js and React, ensuring fast performance and excellent mobile optimization. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism powered by Cookiebot and adherence to GDPR principles. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, although explicit security policy and incident response information are not publicly detailed. Overall, the website reflects a mature digital presence with high trustworthiness and professional content.

I

Inago Digital

inago.cz

41

Inago Digital is a Czech Republic-based specialist digital marketing agency founded in 2019. The company focuses on delivering comprehensive digital solutions including marketing strategies, performance marketing, content marketing, web development, and branding services. Their website reflects a professional and modern digital presence, targeting businesses seeking to enhance their digital footprint and marketing effectiveness. The company maintains a good market position as a regional digital marketing specialist with a clear business model centered on service provision. Technically, the website is built on WordPress with modern SEO and marketing tools integrated, including Yoast SEO, Google Tag Manager, and Cookiebot for GDPR compliance. The site is mobile optimized and performs moderately well in terms of speed and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and consistency. No critical security or privacy issues were detected, and the content is safe for general audiences.

S

Suomen Punaisen Ristin Veripalvelu

sovinkoluovuttajaksi.fi

68

Suomen Punaisen Ristin Veripalvelu operates as the national blood service provider in Finland, responsible for the entire country's blood supply and stem cell registry. The organization is a non-profit entity under the Finnish Red Cross, targeting the general public to encourage blood and stem cell donation. Their website offers tests to determine donor eligibility and provides comprehensive information and support for donors. The site is well-branded, consistent, and professionally maintained, reflecting a strong market position in healthcare services within Finland. Technically, the website is built on WordPress with modern frameworks such as Bulma CSS and uses jQuery, Google Tag Manager, and Cookiebot for analytics and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Analytics and marketing tools are integrated responsibly with user consent, ensuring GDPR compliance. The WHOIS data confirms the legitimacy of the domain, matching the organization's identity and location. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategically, the organization should consider publishing a formal security policy and incident response contact details to enhance transparency and trust. Additionally, implementing a security.txt file and verifying all security headers would further strengthen their security posture.

M

Maschinenring GmbH

shop-maschinenring.at

52

Maschinenring GmbH operates an e-commerce platform focused on providing products and services for the agricultural, forestry, and workwear sectors in Austria. The website offers a broad range of categories including clothing, telecommunications, office supplies, and technical equipment, targeting professionals and businesses in these industries. The company positions itself as a regional specialist with a diversified product portfolio and a medium-sized business footprint. Technically, the website employs modern frontend technologies such as Bootstrap 5 and FontAwesome, with Cookiebot integrated for GDPR-compliant cookie management. The site is mobile optimized and uses HTTPS to secure user interactions. While the CMS is not explicitly identified, the site shows good navigation clarity and a professional design, though some SEO and accessibility enhancements could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement, session management via secure cookies, and a comprehensive cookie consent mechanism. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Maschinenring GmbH's website is trustworthy, compliant with privacy regulations, and professionally presented. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility and SEO, and maintaining regular audits of third-party scripts to sustain security posture.

B

Blood Service

bloodservice.fi

68

The Finnish Red Cross Blood Service operates as the national blood service provider in Finland, offering comprehensive blood donation services, stem cell registry, biobank services, and active biomedical research. The organization is a key player in healthcare and non-profit sectors, affiliated with the Finnish Red Cross, and serves a broad audience including donors, healthcare professionals, and researchers. The website reflects a mature digital presence with clear navigation, multilingual support, and extensive informational content. Technically, the site is built on WordPress with modern frameworks and integrates essential tools like Cookiebot for privacy compliance and Google Tag Manager for analytics. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Contact information is clearly presented with multiple channels including phone, email, and social media. Overall, the site demonstrates high professionalism, trustworthiness, and operational transparency.

B

Blodtjänst

blodtjanst.fi

68

Blodtjänst is the centralized national blood service organization in Finland, operating under the Finnish Red Cross. The website serves blood donors, healthcare professionals, and the general public by providing information on blood donation, stem cell registry, blood products, and related healthcare services. It holds a strong market position as the official blood service provider in Finland, emphasizing life-saving activities and community health. The site is multilingual, with Swedish as the analyzed language, and offers comprehensive resources including booking appointments, health declarations, and educational content. Technically, the website is built on WordPress with modern frameworks like Bulma CSS and uses essential third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement, cookie consent with granular controls, and no visible vulnerabilities or exposed sensitive data. The security posture is strong, with good SSL configuration and security best practices observed. However, there is no explicit security policy or incident response contact published, which could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by official branding, clear contact information, and social media presence. Overall, the website presents a low-risk profile with excellent professionalism and trustworthiness. Strategic recommendations include publishing a dedicated security policy, incident response details, and implementing a security.txt file to enhance transparency and vulnerability management.

V

Veripalvelu

veripalvelu.fi

68

Veripalvelu is the official national blood service provider for Finland, operating under the Finnish Red Cross. The organization manages blood donation services, blood supply logistics, and donor health questionnaires, serving the general public across Finland. The website reflects a strong market position as the sole blood service entity in the country, offering key services such as appointment booking and donor education. Technically, the website is built on WordPress with modern integrations including Google Tag Manager, Cookiebot for consent management, and a Boost.ai chat panel, indicating a mature digital infrastructure. The site is mobile optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is robust with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a granular consent mechanism. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is trustworthy, professional, and aligned with the organization's mission, with recommendations to enhance transparency around security and incident handling.

V

VIPPS HOLDING AS

mobilepay.fi

70

MobilePay.fi is a Finnish mobile payment service website operated by VIPPS HOLDING AS, a Norwegian company. The service facilitates easy sending and receiving of money using phone numbers and supports payments at physical stores, online shops, and apps. The domain is well-established since 2013 and is hosted on Microsoft Azure infrastructure with modern web technologies including JavaScript and Cookiebot for consent management. The website demonstrates good digital maturity with responsive design, clear navigation, and professional content tailored for Finnish consumers and businesses. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not prominently published. Overall, the site is trustworthy and compliant with privacy regulations, though it could improve transparency by publishing security and incident response policies.

F

FRASEBA GmbH

fraseba.de

64

FRASEBA GmbH is a German-based company specializing in substrates, soils, and related landscaping products and services. The company targets businesses, private customers, and municipal clients, offering a broad product range including tree, roof, lawn, and plant substrates, as well as gravel, lava, and soil processing services. Their market position is that of a reliable regional supplier with industry certifications and memberships enhancing their credibility. Technically, the website employs modern web technologies, including Cookiebot for consent management and Matomo for privacy-conscious analytics, with responsive design and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive business reputation.

S

Sempergreen

sempergreen.com

47

Sempergreen is a globally recognized market leader specializing in sustainable green solutions including green roofs, living walls, and ground cover. The company targets a professional audience comprising contractors, architects, roofers, landscape architects, gardeners, and civil engineers. Their business model focuses on providing direct-green products and tailored project recommendations, supported by a network of nurseries and dealers worldwide. The website reflects a medium-sized enterprise with a strong brand presence and consistent messaging aligned with environmental sustainability. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Matomo Analytics, Cookiebot for consent management, and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were explicitly detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security maturity. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further to ensure trustworthiness. Overall, the website is professional, content-rich, and user-friendly, but the domain registration inconsistency and limited security policy disclosures present moderate risks. Strategic enhancements in security governance and domain verification are recommended to strengthen trust and compliance.

K

Kirkon Keskusrahasto

evl.fi

77

The website evl.fi serves as the official online presence of the Evangelical Lutheran Church of Finland, operated by Kirkon Keskusrahasto. It provides information and services related to the church's activities, targeting Finnish residents interested in religious and community engagement. The domain is well-established, dating back to 1991, reflecting the long-standing nature of the organization. The website employs a modern WordPress CMS with SEO optimization and a GDPR-compliant cookie consent mechanism, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration and standard security headers, though DNSSEC is not implemented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is partially met with cookie consent but lacks explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and aligned with the organization's mission.

V

Veho Mercedes-Benz Cars

mercedes-benz.fi

75

Veho Mercedes-Benz Cars operates as the official Mercedes-Benz dealership and service provider in Finland, offering a wide range of luxury vehicles including sedans, SUVs, coupes, and electric models. The company provides comprehensive automotive services such as new and used car sales, vehicle servicing, warranty, roadside assistance, and digital tools like vehicle configurators. The website reflects a strong market position with consistent branding and multiple dealership locations across Finland, targeting consumers interested in premium automotive products.

H

Hansakortteli

hansakortteli.fi

75

Hansakortteli is a well-established retail shopping center located in Turku, Finland, offering a diverse range of over 130 services including retail stores, restaurants, and event spaces. The website reflects a strong market position with a focus on providing a comprehensive urban shopping and leisure experience. The business targets a broad audience including local residents and visitors seeking shopping, dining, and cultural activities. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Analytics, HubSpot, and Cookiebot for privacy compliance. The site is mobile-optimized and accessible, providing a professional user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration details align well with the business identity, enhancing trust and legitimacy. The website demonstrates good privacy compliance and transparent data collection practices.

P

Pirilän Kukkatalo Oy

kukkatalo.fi

71

Pirilän Kukkatalo Oy operates a retail flower and gardening supply business based in Finland, with an established online presence since 2006. The website serves as both an e-commerce platform and an informational resource showcasing products such as flowers and funeral arrangements. The company targets local Finnish customers interested in gardening and floral products. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins like Cookiebot for GDPR-compliant cookie management and Yoast SEO for search optimization. The site demonstrates good mobile responsiveness and moderate performance. Security-wise, the site enforces HTTPS, includes standard security headers, and uses consent mechanisms for cookies, reflecting a solid security posture. However, the absence of explicit privacy policy and terms of service pages, as well as missing direct contact emails and phone numbers on the site, represent areas for improvement. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

H5 Ravintolat Oy operates the H5 Bar & Barrel, a hospitality venue located in Tampere, Finland, offering a relaxed bar experience with live music and DJ events. The business targets adults interested in nightlife and quality bar services, positioning itself as a local nightlife hub with a focus on atmosphere and entertainment. The website reflects a small-sized hospitality business with a clear focus on customer engagement through events and reservations. Technically, the website is built on WordPress using the FoundationPress theme and integrates common plugins such as Cookiebot for GDPR compliance and Ninja Forms for contact management. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed via Cookiebot, ensuring GDPR adherence. Overall, the website is professional, trustworthy, and aligned with the business's hospitality focus.

T

Tampereen Aluetaksi Oy

taksitampere.fi

48

Tampereen Aluetaksi Oy operates the Taksi Tampere service, the largest taxi dispatch center in the Pirkanmaa region of Finland, providing 24/7 taxi ordering services via phone, mobile app, and WhatsApp. The company boasts a fleet of approximately 450 vehicles and handles nearly 2 million rides annually, positioning itself as a dominant regional transportation provider. The website reflects a mature digital presence with multilingual support, social media integration, and modern web technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The business demonstrates transparency with clear contact details and certifications, supporting trustworthiness and compliance with GDPR. Overall, the site is professional, user-friendly, and well-optimized for SEO and mobile use.

H

Haaga-Helia ammattikorkeakoulu Oy

haaga-helia.fi

72

Haaga-Helia is a prominent Finnish university of applied sciences specializing in business, hospitality, IT, and sports education. The institution targets students, professionals, and corporate partners, offering bachelor's and master's degree programs, continuing education, and research services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on Drupal CMS, leveraging modern libraries and third-party integrations such as Cookiebot for consent management and Google Tag Manager for analytics. The security posture is strong, with HTTPS enforced and multiple security headers present, although a dedicated security policy page and incident response contacts are absent. Privacy compliance is robust, featuring GDPR-aligned cookie consent mechanisms and a clear privacy policy. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with business objectives.

L

Löfbergs

lofbergs.fi

71

Löfbergs is a well-established coffee company based in Finland, specializing in dark roast filter coffee since 1906. The website reflects a mature retail business with a focus on coffee products and brand heritage. The company targets general consumers interested in premium coffee products. Technically, the website is built on WordPress with modern SEO and cookie consent tools, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers properly configured, although explicit privacy and terms policies are not found in the provided content. The site uses multiple third-party analytics and marketing tools, managed via Cookiebot for GDPR compliance. Overall, the website is professional, trustworthy, and well-optimized for its business domain.

K

Kiinteistö Oy Hämeenlinnakeskus

kauppakeskusgoodman.fi

68

Kauppakeskus Goodman is a well-established shopping center located in Hämeenlinna, Finland, operated by Kiinteistö Oy Hämeenlinnakeskus. The website presents a clear business focus on retail and leisure services, targeting local residents and visitors. The site offers a comprehensive range of shops, cafes, and restaurants, positioning itself as a community hub. The domain age and registrant information align well with the business claims, indicating legitimacy and transparency. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities. Cookie consent is implemented with detailed categorization, supporting GDPR compliance. Security posture is strong with no critical issues detected. However, the site lacks explicit security policy and incident response contact information, which could enhance trust and compliance. Privacy compliance is good, supported by cookie consent and a privacy policy, though explicit contact emails and phone numbers are not present in the analyzed HTML. Overall, Kauppakeskus Goodman demonstrates a solid digital presence with good security and privacy practices. Strategic improvements could include publishing security policies and incident response details to further strengthen trust and compliance.

A

Atria

atria.fi

65

Atria is a leading Finnish food company specializing in fresh meat, fish, poultry, and ready meals with over 120 years of experience. The website reflects a mature digital presence with comprehensive product information, recipes, and corporate content targeting consumers, professionals, and retail partners. Technically, the site uses modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, indicating a well-instrumented infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Business credibility is high, supported by consistent WHOIS data and strong brand presence. Overall, the site is professional, secure, and user-friendly, suitable for its large enterprise status.

BG-Graspointner GmbH is a manufacturing company specializing in sustainable drainage channels suitable for private, public, commercial, and industrial sectors. The company maintains a professional website with a clear focus on product offerings, sustainability, and innovation. Their market position appears solid with international reach and a comprehensive product catalog. Technically, the website is built on Neos CMS and employs modern web technologies including lazy loading, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The lack of WHOIS domain registration data is a concern for transparency but does not detract significantly from the overall legitimacy given the professional content and contact information. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving domain registration transparency.

M

Mitsubishi Polyester Film GmbH

alpolic.eu

64

The website www.alpolic.eu represents Mitsubishi Polyester Film GmbH, a well-established manufacturer specializing in aluminum composite panels with over 50 years of industry experience. The company targets a broad audience including construction and facade professionals, offering high-quality products with a focus on performance, corrosion protection, and design. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including German, English, and French. Technical infrastructure includes modern analytics tools such as Google Analytics and Matomo, integrated via Google Tag Manager, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies are recommended for improvement. The absence of publicly available WHOIS data due to privacy protection slightly reduces transparency but is common for corporate domains. Overall, the website demonstrates a mature digital presence with good privacy and security practices, supporting the company's credibility and market position.

L

Liveto

liveto.io

67

Liveto is a Finnish technology company specializing in comprehensive event management solutions including ticketing, access control, POS systems, and event applications. Established in 2017, Liveto serves event organizers primarily in Finland with a SaaS platform that integrates multiple event-related services. The website is built on HubSpot CMS and incorporates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar, demonstrating a mature digital infrastructure. Cookie consent is implemented via Cookiebot, indicating attention to privacy compliance, although explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is generally good with HTTPS enabled and domain registration protected by privacy services, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, Liveto presents a professional and trustworthy online presence with room for improvement in explicit privacy and security disclosures.

W

Wisenetwork Oy

wisenetwork.fi

76

Wisenetwork Oy is a Finnish technology company specializing in software solutions for access control, membership management, and event registration. Established in 2012, the company serves business clients primarily in Finland, offering integrated systems that include CRM, invoicing, and e-commerce functionalities. The website reflects a mature business with a niche focus, supported by a custom CMS and hosted on Google Cloud infrastructure. The technical stack includes legacy jQuery and Bootstrap, with modern integrations such as Google reCAPTCHA and Cookiebot for privacy compliance. Security measures are basic, with room for improvement in security headers and updated libraries. The absence of explicit privacy and terms of service pages suggests an area for compliance enhancement. Overall, the domain registration data aligns well with the website content, indicating a legitimate and stable business presence.

T

TRIDO, s.r.o.

trido.cz

56

TRIDO, s.r.o. is a Czech manufacturer specializing in custom garage doors, automatic doors, and industrial door solutions, serving both residential and commercial clients. With over 27 years of market presence, TRIDO positions itself as a reliable and innovative company offering tailored products and professional installation and service. The company maintains a broad network of authorized distributors and service partners across the Czech Republic and Slovakia, enhancing its market reach and customer support capabilities. The website reflects a mature digital presence with comprehensive product information, customer service options, and multimedia content to engage visitors effectively. Technically, the website is built on Drupal 10, leveraging Bootstrap 3.4.5 for responsive design and integrating modern web technologies such as Google Fonts, YouTube embeds, and consent management via Cookiebot. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. From a security and compliance perspective, the site includes privacy and cookie policies with GDPR compliance indicators and provides clear contact information for customer support and service. However, the absence of WHOIS data and lack of explicit security policy or vulnerability disclosure pages slightly reduce trustworthiness. No critical vulnerabilities or adult content were detected, and the site maintains a professional and safe environment for its users. Overall, TRIDO's website is a well-structured, content-rich platform supporting its manufacturing business with a good balance of technical sophistication and user experience. Strategic improvements in security headers and domain registration transparency would further enhance its credibility and security posture.

Terezia.sk is an e-commerce website specializing in dietary supplements made from mushrooms and plants, targeting the Slovak and Czech markets. The business operates in the healthcare sector, focusing on natural health products. The website demonstrates a consistent branding approach and provides a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Technically, the site uses modern tools such as Google Tag Manager, Cookiebot for cookie consent, and integrates third-party analytics and marketing services. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and publishing security policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. The site collects extensive user data via cookies and tracking pixels, with a comprehensive cookie consent mechanism in place.

A

Zážitkovky Albi – Přijďte se bavit

albizazitkovky.cz

53

The website 'Zážitkovky Albi' appears to be an e-commerce platform focused on selling experience-based gifts or entertainment activities, targeting a Czech audience. The site is built on WordPress and uses popular plugins such as LayerSlider and Slider Revolution, with Cookiebot managing cookie consent. The technical infrastructure is modern and supports HTTPS with a good SSL configuration. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy. The website lacks explicit privacy policy and terms of service pages, and no direct contact information is found, which impacts business credibility and privacy compliance. Security posture is moderate with HTTPS and cookie consent but missing security headers and incident response details.

E

E4YOU spol. s r.o.

smartweb.cz

61

E4YOU spol. s r.o. is a Czech technology company specializing in developing mobile marketing systems, CRM intranets and extranets, school intranets, web design, SEO, and IT infrastructure services including hosting and technical support. Established since 2000, the company serves a broad B2B audience with a focus on marketing and CRM solutions, supported by a portfolio of notable clients such as Electrolux and Coca-Cola. The website reflects a professional and consistent brand image with detailed service descriptions and comprehensive contact information. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrates Google Analytics for user tracking, and uses Cookiebot for cookie consent management, although the domain is not authorized in the Cookiebot Manager, causing a minor error. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with good SSL configuration but does not publish a privacy policy or terms of service, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms a long-standing domain registration consistent with the company's history, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from improved privacy documentation, enhanced security headers, and formalized incident response information to strengthen compliance and security posture.

S

Summit Ventures Oy

unbroken.fi

65

Unbroken.fi is a Finnish fitness and wellness service provider operated by Summit Ventures Oy, established in 2014. The company offers gym memberships, fitness training, event registrations, and related e-commerce services targeting fitness enthusiasts in Finland. The website is professionally designed with consistent branding and good content quality, primarily in Finnish. The technical infrastructure includes AngularJS, jQuery, Bootstrap, and Google Fonts, hosted with DNS services from Google Domains and assets served via Wisenetwork's CDN. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though the use of an outdated jQuery version and lack of DNSSEC are noted. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the domain registration details align well with the business identity, indicating legitimacy and trustworthiness.

W

Wienerberger

wienerberger.cz

72

Wienerberger.cz is the Czech Republic website for Wienerberger, a leading manufacturer of building materials including bricks, roof tiles, facing bricks, and paving products. The site targets construction professionals and homeowners seeking quality building solutions. The company is positioned as a major player in the manufacturing sector with a broad product portfolio. Technically, the website is built on Adobe Experience Manager, leveraging modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analysis. The site is well-optimized for SEO and mobile devices, with good design and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data limits domain trust verification, but the professional presentation and compliance with GDPR indicate a legitimate business. Overall, the website is secure, compliant, and professionally maintained, supporting Wienerberger's market presence.

V

Vatajankoski

vatajankoski.fi

62

Vatajankoski is a Finnish energy company focused on permanently reducing its customers' energy costs and climate emissions. The website presents a professional corporate image with clear branding and a focus on energy services. The company targets energy consumers in Finland, positioning itself as a sustainable energy partner. Technically, the website is built on WordPress, utilizing modern technologies such as jQuery, Google Tag Manager, and Cookiebot for consent management. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security-wise, the site enforces HTTPS and includes standard security headers, with no visible vulnerabilities or exposed sensitive data. Cookie consent is implemented comprehensively, supporting GDPR compliance. However, contact information and detailed security or incident response policies are not explicitly found on the site, which could be improved for transparency and trust. Overall, the website reflects a mature digital presence with a solid security posture and privacy compliance, suitable for its business sector.