Security Directory

C

C. Hasse & Sohn

hasse.info

54

C. Hasse & Sohn is a well-established German company specializing in roofing and building protection systems, including flat roof membranes, green roof solutions, building waterproofing, liquid plastics, and thermal insulation materials. With a history spanning over 150 years, the company serves construction professionals, architects, and planners, offering both products and technical consulting. Their market position is that of a reputable regional player with a specialized product portfolio and certifications such as ISO 50001. The website reflects a professional and consistent brand image, with comprehensive contact information and trust indicators like certification badges and a Kununu Top Company award. Technically, the site is built on WordPress with WooCommerce and the Enfold theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, with a detailed privacy policy and cookie management. Overall, the site is trustworthy, professional, and well-maintained, supporting the company's business credibility and digital presence.

B

bluMartin GmbH

blumartin.de

62

bluMartin GmbH operates a professional website focused on decentralized residential ventilation systems with heat recovery, targeting builders, architects, and installers primarily in Germany. The company positions itself as a specialized provider of energy-efficient ventilation solutions, offering products, planning support, and after-sales services. The website is well-structured, content-rich, and supported by certifications and customer testimonials, indicating a strong market presence in its niche. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. It employs lazy loading and integrates Facebook Pixel for marketing analytics. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance and business credibility. However, it could improve by publishing a formal security policy and enhancing HTTP security headers. The domain WHOIS data is minimal but consistent with the business profile, supporting legitimacy. Strategic recommendations include strengthening security posture, enhancing transparency on incident response, and maintaining up-to-date software to mitigate risks.

B

Birdshades

birdshades.com

62

Birdshades is a specialized company focused on developing and providing invisible bird protection window films that leverage birds' ability to see UV light, invisible to humans, to prevent bird-window collisions. The company targets building owners, architects, and environmental partners aiming to reduce human-wildlife conflicts in urban environments. The website is built on WordPress with modern plugins like Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and includes customer testimonials and scientific backing, enhancing trustworthiness. Security posture is good with HTTPS enabled, but lacks some security headers and visible privacy and cookie policies, which are compliance gaps. WHOIS data is missing or unavailable, which reduces domain trustworthiness. Overall, the website presents a professional and credible business but should improve privacy compliance and security headers to enhance trust and compliance.

B

BIRCO GmbH

birco.de

52

BIRCO GmbH operates as a specialized manufacturer and system provider in the drainage and water management sector, focusing on sustainable solutions for rainwater treatment, retention, and infiltration. The company offers a broad portfolio of products including drainage channels, infiltration trenches, and related infrastructure components, supported by digital tools and project management services. Their website reflects a mature digital presence with comprehensive product information, clear navigation, and multi-language support targeting construction professionals and planners primarily in Germany and neighboring countries. Technically, the site is built on TYPO3 CMS with modern frameworks and includes robust security measures such as HTTPS and security headers. Privacy compliance is well addressed with explicit cookie consent mechanisms and detailed privacy policies. However, the site lacks a dedicated security policy and incident response contact details, which could enhance trust and transparency. Overall, BIRCO GmbH presents a professional, secure, and user-friendly online presence aligned with its business objectives.

B

BETOMAX Systems GmbH & Co. KG

betomax.de

51

BETOMAX Systems GmbH & Co. KG is a well-established German company specializing in intelligent products and solutions for constructive concrete and civil engineering. With over six decades of experience and presence in more than 25 countries, BETOMAX is a leading supplier in reinforcement technology, formwork technology, and bridge construction technology. Their target audience includes construction managers, planners, structural engineers, and precast concrete manufacturers. The company offers a broad portfolio of products and services tailored to the construction industry, emphasizing innovation and system solutions. Technically, the website is built on Concrete CMS and utilizes modern web technologies including jQuery and FontAwesome. The site features multimedia content such as product and image videos, and is optimized for mobile devices with good navigation and SEO practices. While the site uses HTTPS and includes anti-bot measures on forms, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the website shows a moderate security posture with HTTPS enabled and some best practices observed. However, the absence of explicit security headers and cookie consent banners, as well as missing WHOIS domain registration data, indicate areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from improved transparency and security controls. The overall risk assessment is moderate with recommendations to strengthen domain registration transparency, implement comprehensive cookie consent, and enhance security headers. These steps will improve compliance, user trust, and resilience against potential threats.

B

Baumit GmbH

baumit.de

46

Baumit GmbH is a leading European manufacturer specializing in sustainable building materials including insulation, plasters, paints, and renovation systems. The company targets private customers and construction professionals, emphasizing quality, sustainability, and innovation. Their digital presence is supported by modern web technologies including Vue.js and jQuery, with a custom CMS and structured data for SEO. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information. Security posture is good with HTTPS and cookie consent mechanisms, though improvements are recommended in enforcing Content-Security-Policy and enabling Google Consent Mode. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

ARWEI Bauzubehör GmbH

arwei.de

49

ARWEI Bauzubehör GmbH is a well-established German manufacturer specializing in high-quality recessed matting and floor mat systems since 1952. The company targets architects, planners, homeowners, and construction professionals, offering custom solutions and accessories. Their market position is strong with over 60 years of experience and recognized certifications such as TÜV and DGNB. Technically, the website is built on the Contao CMS platform, using modern JavaScript libraries and privacy-conscious Matomo analytics. The site is mobile-optimized with a clear navigation structure and cookie consent implemented via Klaro. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

A

ArgillaTherm

argillatherm.de

52

ArgillaTherm is a small German company specializing in natural climate systems, offering multifunctional ceiling cooling and heating solutions with HUMID modules for effective humidity regulation. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Google Tag Manager and Borlabs Cookie for analytics and cookie consent management. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service were found, and contact information is not explicitly provided, which may impact user trust and compliance. Overall, the website is professional and relevant to its niche market but could improve in privacy and security transparency.

P

Płyty warstwowe ARPANEL

arpanel.de

47

ARPANEL is a medium-sized manufacturing company specializing in the production of insulated sandwich panels for walls and roofs, primarily targeting the construction and building materials sector. Established in 2013, the company offers a range of products including PIR and mineral wool core panels, metal profiles, mounting accessories, and technical consulting services. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted on nazwa.pl infrastructure. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, ARPANEL presents a trustworthy and professional online presence aligned with its business operations.

N

Nelonen Media Live Oy

abiristeilyt.fi

73

Abiristeilyt.fi is a professionally managed event website operated by Nelonen Media Live Oy, a Finnish media company. The site promotes and organizes legendary high school graduation parties on day cruises to Stockholm, targeting Finnish abiturients and young adults. The business is well-established with a domain age since 2003 and is supported by a parent company Sanoma Oyj, indicating strong market presence and credibility. The website offers ticket sales, event information, artist lineups, and social media engagement to enhance user experience and event promotion. Technically, the site runs on WordPress with modern plugins for SEO, galleries, and filtering, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, no exposed sensitive data, and privacy compliance linked to Sanoma's comprehensive policies. Overall, the site is trustworthy, well-branded, and serves its niche audience effectively.

N

Nelonen Media Live Oy

kuopiorock.fi

71

Kuopiorock is a well-established rock music festival organized by Nelonen Media Live Oy, a Finnish media company under the Sanoma group. The festival targets rock music enthusiasts primarily in the Savonia region and broader Finland, offering a large lineup of popular and diverse rock artists. The website serves as the main digital platform for event promotion, ticket sales, and information dissemination. Technically, the site is built on WordPress with a modern plugin ecosystem, including SEO and gallery management tools, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile and desktop users, with good navigation and content quality. Security-wise, the site uses HTTPS and shows signs of standard security practices, though some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence.

N

Nelonen Media Live Oy

tammerfest.fi

71

Tammerfest.fi is the official website for Tammerfest, Finland's largest urban music festival held annually in Tampere. The site is managed by Nelonen Media Live Oy, a subsidiary of Sanoma, indicating a strong media and entertainment business backing. The festival targets Finnish music fans and the general public, offering ticket sales, event schedules, VIP services, and media content. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile users. Technically, it is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi SAS. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant. The WHOIS data is transparent and consistent with the business, reinforcing legitimacy. Overall, the site demonstrates a mature digital presence suitable for a major event organizer.

N

Nelonen Media Live Oy

suomipopfestivaali.fi

66

Suomipop Festivaali is a Finnish music festival brand operated by Nelonen Media Live Oy, a subsidiary of Sanoma. The festival is held annually in July in Jyväskylä and Oulu, targeting Finnish pop music fans. The website serves as an information and ticket sales portal, linking to official ticket vendors Tiketti and Lippupiste. The business is well-established with a domain age of over 15 years, reflecting a mature market presence in the Finnish entertainment sector. Technically, the website is built on WordPress with modern tracking and marketing tools such as Google Tag Manager and Adobe DTM. The site is mobile optimized and SEO friendly, with good content quality and consistent branding. Hosting appears stable with Gandi.net nameservers. However, there is room for improvement in security headers and explicit privacy and terms documentation. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site implements a GDPR-compliant cookie consent mechanism, though privacy policy and terms of service pages are not clearly found. WHOIS data is transparent and consistent with the business identity, supporting legitimacy and trust. Overall, Suomipop Festivaali's website is a professional and trustworthy platform for its audience, with moderate technical sophistication and a good security baseline. Strategic improvements in security headers and compliance documentation would enhance trust and reduce risk.

N

Nelonen Media Live Oy

jysari.fi

70

Jysäri.fi is the official website for the Jysäri music festival held annually in Finland, organized by Nelonen Media Live Oy. The site provides comprehensive information about the festival, including artist lineups, schedules, ticket sales, and event news. The business is well-established with a domain age of over a decade, indicating stability and ongoing operations. The website targets music festival attendees primarily in Finland and offers a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi.net, and uses HTTPS for secure communications. Security posture is solid but could be improved with additional security headers and DNSSEC implementation. Privacy compliance is partially addressed with a privacy policy present but lacks a cookie consent mechanism. Overall, the site demonstrates a professional and trustworthy online presence for the festival.

N

Nelonen Media Live Oy

iskelmafestivaali.fi

70

Iskelmä Festivaali is a well-established Finnish music festival brand operating since 2008, organized by Nelonen Media Live Oy, a company linked to the SANOMA media group. The website serves as a comprehensive platform for festival promotion, ticket sales, artist lineups, schedules, and visitor information targeting Finnish music fans. The digital infrastructure is built on WordPress with modern SEO and analytics tools, reflecting a mature and professional online presence. Security posture is solid with HTTPS and privacy consent mechanisms, though explicit privacy and terms policies are not clearly presented. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business entity.

N

Nelonen Media Live Oy

tahkojuhannus.fi

73

Tahko Juhannus is a Finnish music festival event organized by Nelonen Media Live Oy, a subsidiary of Sanoma. The event is well-established since 2014 and targets festival-goers and music fans in Finland. The website provides comprehensive event information, ticket sales, and media content, supported by a professional digital infrastructure. The technical setup leverages WordPress CMS with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers are recommended. Privacy compliance is strong, linking to the parent company's detailed policies. Overall, the website and domain registration details align well, indicating a trustworthy and legitimate business presence.

N

Nelonen Media Live Oy

rmj.fi

71

Raumanmeren Juhannus is a well-established Finnish music festival organized by Nelonen Media Live Oy, a subsidiary of SANOMA. The festival targets music fans and attendees in Finland, offering a beach festival experience with a strong lineup of artists. The website serves as the primary information and ticket sales platform, reflecting a medium-sized business with a solid market position in the Finnish event industry. The digital presence is supported by WordPress CMS, enhanced with SEO and analytics tools such as Yoast SEO and Google Tag Manager, indicating a mature technical infrastructure. Security posture is good with HTTPS and standard security headers, though DNSSEC is not implemented. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the website and domain registration details are consistent and trustworthy, with no signs of malicious activity or suspicious patterns.

N

Nelonen Media Live Oy

himosjuhannus.fi

71

Himos Juhannus is Finland's largest midsummer festival, organized by Nelonen Media Live Oy, a Finnish media company. The website serves as the primary digital platform for festival information, ticket sales, artist lineups, schedules, and news updates. It targets festival attendees and music enthusiasts, positioning itself as a major event in the Finnish entertainment calendar. The business model revolves around event management and ticket sales, supported by media and marketing activities. The website reflects a medium-sized enterprise with a solid market presence and a parent company affiliation with SANOMA, a major Finnish media group. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Tag Manager for analytics. It uses HTTPS and is hosted with Gandi SAS nameservers. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Accessibility is basic but functional. The technical infrastructure supports a professional and user-friendly experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance security posture. No vulnerabilities or malicious indicators were detected. Privacy and cookie policies are present and indicate GDPR compliance, reflecting a responsible approach to data protection. Overall, the website is trustworthy, professionally maintained, and aligned with the business it represents. It provides comprehensive festival information and maintains a good balance between user experience, technical quality, and security. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing explicit security and incident response policies to further strengthen trust and compliance.

N

Nelonen Media Live Oy

rockfest.fi

67

Nelonen Media Live Oy operates Rockfest, Finland's largest rock festival held annually in Turku. The website serves as the primary digital platform for event information, ticket sales, and marketing. The company holds a strong market position in the Finnish live music event sector, leveraging partnerships with ticketing platforms and sponsors. The website is built on WordPress with modern plugins and integrates social media and analytics tools to enhance user engagement and marketing effectiveness. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and DNSSEC could be made. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with a medium-sized operational scale.

E

Eventim UK

eventim.co.uk

54

Eventim UK operates as a prominent online ticketing platform specializing in the sale of tickets for concerts, festivals, theatre, sports, comedy, and other live events across the United Kingdom. The website offers a broad range of event categories and detailed navigation by city and venue, targeting a general audience interested in live entertainment. The business model centers on e-commerce ticket sales, positioning Eventim UK as a major player in the UK ticketing market. The site branding is consistent and professional, with clear descriptions and a user-friendly interface.

E

Eventim SE

eventim.se

49

Eventim SE operates a professional and comprehensive online ticket sales platform focused on live entertainment events such as concerts, theater, opera, musicals, and sports in Sweden. The website is well-branded, localized primarily in Swedish with English support, and offers a rich user experience with event discovery, recommendations, and a mobile app. The platform integrates modern web technologies and complies with GDPR through a consent management platform. Despite the absence of WHOIS data for the subdomain www.eventim.se, the overall digital presence and branding strongly indicate a legitimate and established business. Security posture is good with HTTPS enforced and privacy policies in place, though explicit security headers and incident response information are not publicly visible. The site is free from adult or questionable content and does not exhibit blocking or WAF challenges, allowing full content accessibility.

E

EVENTIM Slovenia

eventim.si

46

EVENTIM Slovenia operates a leading online ticket sales platform in Slovenia, offering tickets for over 3000 events annually including concerts, festivals, and sports. The website is well-structured with rich event content and uses modern web technologies such as jQuery, Swiper.js, and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance, supported by a consent management platform. Security posture is solid with HTTPS enforced, though security headers and explicit incident response contacts are not evident. The domain registration is consistent with the business claims, showing a long-established presence since 2003. Overall, the website presents a professional and trustworthy e-commerce platform for event ticketing in Slovenia.

S

SVK

eventim.sk

49

Eventim.sk is a well-established online ticketing platform primarily serving Slovakia and nearby regions. It offers tickets for a wide range of events including concerts, sports, cultural shows, and festivals. The platform targets a broad audience interested in entertainment and cultural activities, positioning itself as a regional leader in ticket sales. The website features a professional design with good navigation and content relevance, supporting a positive user experience.

E

Eventim Polen

eventim.pl

47

Eventim.pl is a professional and authorized online ticket sales platform focused on concerts, sports, cultural events, and exhibitions in Poland. The website targets a broad audience interested in entertainment and cultural activities, offering a secure and user-friendly platform for purchasing tickets. The business is positioned as a key player in the Polish event ticketing market, with a large catalog of events and venues across multiple cities. Technically, the site uses modern web technologies including jQuery and Google Tag Manager, with good mobile optimization and accessibility features. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and detailed privacy policy, reflecting GDPR adherence. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the site is trustworthy and professionally maintained, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information.

E

Eventim NO

eventim.no

52

Eventim NO operates a professional e-commerce platform specializing in ticket sales for a wide range of cultural, musical, theatrical, and sports events in Norway. The website is well-structured, providing users with easy navigation through event categories and locations, supported by personalized recommendations and editorial choices. The business targets Norwegian consumers seeking official and secure ticket purchasing options. Technically, the site employs modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some HTTP security headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this commercial entity. Overall, the platform demonstrates a mature digital presence with good privacy and security practices.

E

Eventim NL

eventim.nl

55

Eventim NL operates as a leading online ticket sales platform in the Netherlands, specializing in live entertainment tickets including musicals, theater, concerts, cabaret, classical music, and family shows. The website positions itself as the official and secure ticket seller for the Dutch market, targeting a broad general audience interested in cultural and entertainment events. The business model focuses on e-commerce ticket retail with a comprehensive event catalog and user-friendly navigation.

T

TicketOne

ticketone.it

55

TicketOne is a leading Italian online ticketing platform specializing in the sale of tickets for concerts, theater, sports, and cultural events. It operates under the parent company Eventim S.p.A., providing a comprehensive digital marketplace for entertainment consumers in Italy. The website demonstrates a mature digital infrastructure with integration of modern analytics, advertising, and consent management technologies. Security posture is strong with HTTPS enforcement, security headers, and GDPR compliance mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the platform is professional, trustworthy, and well-positioned in the Italian e-commerce event ticketing market.

C

CTS EVENTIM FRANCE

eventim.fr

49

CTS EVENTIM FRANCE operates a comprehensive online ticketing platform focused on concerts, theater, sports, and cultural events primarily targeting the French-speaking market. The website presents a professional and well-structured interface with clear navigation and a broad range of event categories. The business is positioned as a major player in the French entertainment ticketing sector, leveraging the CTS EVENTIM brand. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and performs moderately well. Security posture is strong with HTTPS enforced and consent mechanisms in place, though additional security headers and explicit security policies could enhance trust. WHOIS data is not publicly available, indicating privacy protection typical for commercial entities. Overall, the site is trustworthy, compliant, and professionally maintained.

B

Billetlugen DK

billetlugen.dk

49

Billetlugen.dk is a Danish e-commerce platform specializing in the sale of official tickets for a wide range of live events including concerts, sports, comedy, musicals, festivals, and theater. The website targets a broad audience interested in live entertainment within Denmark and offers a comprehensive catalog of events and venues. The business model is focused on online ticket sales, positioning Billetlugen as a key player in the Danish ticketing market with a medium-sized operational scale. The site branding is consistent and professional, supporting trust and user engagement.

E

EVENTIM Croatia

eventim.hr

48

EVENTIM Croatia operates a professional e-commerce platform specializing in ticket sales for concerts, festivals, theatre performances, and sports events primarily targeting the Croatian market. The website is well-structured with comprehensive navigation options by event categories and cities, supporting a broad audience interested in entertainment and cultural events. The business is well-established, with domain registration dating back to 2003, and is part of the larger Eventim group, indicating a solid market position and operational maturity. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance and user privacy. The site is hosted with Cloudflare DNS services, enhancing availability and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be more explicitly confirmed. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for ticket sales in Croatia.

E

Eventim BR

eventim.com.br

49

Eventim BR operates a large-scale e-commerce platform specializing in ticket sales for concerts, theater, musicals, festivals, sports, and other entertainment events primarily in Brazil. The website is well-positioned in the Brazilian market as a major ticketing service provider, offering extensive event listings and a user-friendly interface. The platform supports multiple languages and integrates mobile applications for Android and iOS, enhancing accessibility and user engagement. Technically, the website leverages modern web technologies including jQuery, Swiper.js, and Google Tag Manager, hosted on Akamai's infrastructure, ensuring reliable performance and scalability. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism implemented via ConsentManager CMP. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

C

CTS EVENTIM

eventimb2b.com

54

CTS EVENTIM USA operates a professional B2B ticketing platform providing robust technology and reliable solutions for live events. The company is positioned as the number one ticketing service provider in Europe and second worldwide, serving over 300 million tickets annually across 25 countries. Their services include ticketing technology, marketing, analytics, and access control, targeting event organizers, promoters, and venues. The website reflects a mature digital presence with modern CMS and SEO optimization, supported by extensive tracking and marketing pixels for analytics and retargeting. Security posture is strong with HTTPS and GDPR compliance, though lacking published security policies and incident response details. The absence of WHOIS data for the domain introduces some uncertainty, but corporate branding and external references support legitimacy.

B

Bizzdesign

bizzdesign.com

76

Bizzdesign is a well-established enterprise architecture software company, founded in 1999, offering a powerful SaaS platform designed to support organizations in their digital transformation journeys. The company holds a strong market position as a leader in the Gartner Magic Quadrant for EA tools for nine consecutive years, serving enterprise clients across various industries. Their key services include enterprise architecture management, business architecture, application portfolio management, and risk security management, targeting roles such as CIOs, enterprise architects, and business leaders. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Hotjar, Pardot, and other marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting is provided by Hosting Concepts B.V., and the domain is long-established and consistent with the business history. From a security perspective, the site enforces HTTPS with good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Content-Type-Options are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism in place, though no explicit security policy or incident response contacts are published. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, adding missing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and security posture.

E

ESA Technology Broker Czech Republic

technology-broker.cz

45

ESA Technology Broker Czech Republic is a small technology brokerage entity affiliated with the European Space Agency, focused on helping companies and institutions integrate space technology into their terrestrial business operations. The website presents a professional image with clear information about their services including technology scouting, business coaching, and funding facilitation through ESA Spark Funding. The target audience includes companies, universities, and other entities interested in space technology applications. Technically, the website is built on WordPress with standard plugins like Yoast SEO and uses jQuery and FontAwesome for UI elements. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Z

Zdravotnická zařízení Ministerstva spravedlnosti

zzms.cz

41

Zdravotnická zařízení Ministerstva spravedlnosti (ZZMS) is an official healthcare provider operating under the Czech Ministry of Justice, offering specialized medical services primarily for the justice sector. The website serves as an information portal presenting news, organizational details, and contact points for the institution. The business model is public sector healthcare provision, with a medium-sized operational scale and a recent establishment date in 2023. The site targets government employees and the public seeking healthcare services within the justice system. Technically, the website is built on WordPress 6.8.1 using the Astra theme and several plugins including Rank Math SEO and SupportCandy. Hosting is provided by Webglobe, consistent with the domain's WHOIS data. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some technical improvements are recommended, such as implementing security headers and properly configuring analytics tools. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The presence of a cookie policy plugin indicates awareness of privacy requirements, though a consent mechanism is missing. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and aligned with its governmental healthcare mission. Strategic recommendations include enhancing privacy compliance with active cookie consent, adding security headers, configuring analytics properly, and publishing incident response details to strengthen security posture and user trust.

J

Justiční akademie

jacz.cz

57

Justiční akademie is a Czech government-affiliated educational institution focused on providing training and continuous education for judiciary professionals including judges, prosecutors, and legal candidates. The website serves as a portal for seminar information, e-learning, and official communications related to justice sector education. It maintains a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on Joomla CMS with modern frontend technologies and includes privacy and cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS and CSRF protections, though some security headers are missing and no explicit vulnerability disclosure policy is present. WHOIS data is unavailable, which slightly reduces trust but does not contradict the legitimacy indicated by the website content and domain usage. Overall, the site is a credible and functional government resource with moderate technical sophistication and good privacy compliance.

S

Soustava státního zastupitelství ČR

verejnazaloba.cz

64

The website 'Soustava státního zastupitelství' serves as the official web portal for the public prosecution system of the Czech Republic. It provides comprehensive information about the structure, activities, and regional offices of the state prosecution service. The site targets citizens, legal professionals, and government entities, offering transparency and public service information. The business model is that of a government-operated informational portal, with a medium organizational size and a founding date consistent with the domain registration in 2020. Technically, the website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and Smart Slider 3 for content management and presentation. It employs modern web technologies including jQuery and integrates Google Analytics and Google Tag Manager for traffic analysis, with consent mechanisms set to deny data storage by default. The site is served over HTTPS, ensuring secure communication, and demonstrates moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response contact information is present, indicating areas for improvement in security transparency and user trust. Overall, the website is professional, trustworthy, and well-aligned with its government function. The absence of privacy and cookie policies, as well as contact details, slightly reduces its compliance and user assurance scores. Strategic enhancements in these areas would strengthen its security posture and privacy compliance, further solidifying its role as a reliable public service portal.

G

Generali Investments CEE, investiční společnost, a.s.

generali-investments.sk

46

Generali Investments CEE is a professional investment company specializing in mutual funds and asset management services primarily targeting Slovak and Czech investors. The website presents a mature and well-structured digital presence with clear navigation, multilingual support, and comprehensive information about investment products and client services. The company holds a recognized market position, evidenced by awards and a broad portfolio of investment funds and programs. Technically, the website employs modern frameworks such as Bootstrap and Highcharts, with integrated marketing tools like Facebook Pixel for analytics and retargeting. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with detailed privacy and cookie policies and active consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a financial services provider.

H

Haute Autorité de Santé

accreditation-des-medecins.fr

57

The website accreditation-des-medecins.fr is an official platform managed by the Haute Autorité de Santé (HAS), the French national health authority. It serves as the information system for the accreditation of doctors and medical teams, focusing on specialties considered high-risk. The platform provides authentication, dossier management, and engagement functionalities for medical professionals. The site is well-positioned as a government service with a clear mission to improve healthcare quality and risk management through accreditation programs. The target audience is healthcare professionals in France, particularly those in surgical, anesthesiology, and intensive care specialties. Technically, the website is built using JavaServer Faces with PrimeFaces UI components, leveraging jQuery and Font Awesome for UI enhancements. The site demonstrates moderate performance and basic mobile optimization. Accessibility and SEO are at a basic level, with room for improvement. The hosting provider is not explicitly identified, but the domain registrar is ADISTA, a known French registrar. The site uses HTTPS and session management via JSF ViewState, but lacks visible advanced security headers such as CSP or HSTS. From a security perspective, the site shows good practices in password handling and session management but could enhance its posture by implementing additional security headers and publishing explicit security and incident response policies. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. Privacy compliance is strong, with a clear privacy policy, GDPR compliance, and a named Data Protection Officer with contact information. However, no cookie consent mechanism was found. Overall, the website is a credible, professional government platform with a high trust level. Strategic recommendations include improving security headers, adding cookie consent, enhancing mobile and accessibility features, and publishing security policies to strengthen compliance and user trust.

J

Jauri Resort

jauriresort.com

62

Jauri Resort is a small family-run hospitality business located in Kemijärvi, Finland, specializing in authentic Arctic experiences including lakeside cottages, a new hotel opening in 2025, a traditional restaurant, and a variety of seasonal activities such as Northern Lights tours, snowshoeing, and husky safaris. The website is professionally designed with good content quality and clear navigation, targeting couples, families, and small groups seeking peaceful Arctic getaways. Technically, the site uses modern web technologies including Ruby on Rails, Google Fonts, FontAwesome, and integrates error monitoring via Rollbar and analytics via Google Tag Manager. Security posture is moderate with HTTPS enforced and CSRF protection, but lacks HTTP security headers and a cookie consent mechanism, which are recommended for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and professional online presence for a niche hospitality provider in Arctic Finland.

R

ReGear

regear.fi

48

ReGear.fi is a Finnish e-commerce platform specializing in printed products and custom printing services targeted primarily at businesses and clubs. Established in 2019, the company operates a niche online retail business offering customized merchandise solutions. The website is professionally designed using WordPress and WooCommerce with the Astra theme, hosted on SiteGround, and incorporates modern web technologies including Google Tag Manager for analytics and marketing. The technical infrastructure reflects a mature digital presence with good mobile optimization, SEO practices, and performance. Security posture is solid with HTTPS enforced, standard security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms, aligning with GDPR requirements. Overall, the website and domain registration data are consistent and trustworthy, with transparent registrant information matching the business profile. No WAF or blocking mechanisms interfere with content accessibility. The site is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security policy transparency, incident response readiness, and accessibility features to further strengthen trust and compliance.

V

Very Black Corner Oy

veryblackstore.fi

57

Very Black Store, operated by Very Black Corner Oy, is a Finnish-based e-commerce retailer specializing in CrossFit and functional training equipment, apparel, and accessories. The company emphasizes quality and durability, with products tested in real gym environments and a strong focus on custom gym consulting and construction services. Their market position is niche but well-established in Finland, supported by over a decade of experience and local manufacturing for wooden products. The website is professionally designed, bilingual (Finnish and English), and offers a comprehensive product catalog with clear navigation and active customer engagement channels.

N

NOCCO

nocco.com

72

NOCCO is a Swedish-based company specializing in functional, sugar-free energy drinks enriched with caffeine, vitamins, and BCAA, targeting active and exercising adults. The brand has established a strong international presence, available in over 40 markets, and is supported by a professional, multi-language website that highlights product offerings, brand ambassadors, and company news. The business operates primarily in the retail sector with an e-commerce component, under the parent company Vitamin Well AB.

M

MyPowerFix

mypowerfix.fi

44

MyPowerFix is a Finnish healthcare-focused business specializing in online training programs and individualized physiotherapy services. The company targets athletes and fitness enthusiasts, offering a blend of digital coaching and physiotherapy tailored to customer needs. The website reflects a niche market position with a clear focus on quality online courses and appointment booking services. Technically, the site is built on WordPress with WooCommerce and uses modern plugins like Yoast SEO and PixelYourSite for marketing and analytics. The infrastructure supports e-commerce and integrates with external platforms for course delivery and booking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned cookie consent and a privacy policy available. Business credibility is supported by consistent branding, social media presence, and legitimate WHOIS registration data. Overall, the website is professional, secure, and well-optimized for its target audience.

G

GreenACT Oy

nopain.fi

55

NoPain.fi is a Finnish premium sportswear e-commerce brand operated by GreenACT Oy. The company specializes in high-quality training apparel for both women and men, offering products such as compression tights, sports bras, and other fitness clothing. The website positions itself as a domestic premium brand with a focus on fast delivery and free shipping for orders over 120 euros. The target audience includes fitness enthusiasts and athletes seeking quality sportswear. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools like Google Analytics, Facebook Pixel, Hotjar, and Tawk.to live chat. The site is well-structured, mobile-optimized, and uses HTTPS with good security headers, although some improvements in security policies could be made. Privacy and cookie policies are present and indicate GDPR compliance, but explicit security and incident response policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kankaanpään kaupunki

visitkankaanpaa.fi

57

Visit Kankaanpää is the official tourism website for the city of Kankaanpää, Finland, providing comprehensive information on local attractions, events, accommodation, and cultural activities. The site targets tourists, families, and local residents interested in exploring the city's offerings. It serves as a municipal portal to promote tourism and community engagement, positioning itself as a trusted source for visitors and locals alike. The business model is focused on municipal tourism promotion and information dissemination.

K

Kankaanpään kaupunki

businesskankaanpaa.fi

62

Business Kankaanpää is a municipal business portal operated by the city of Kankaanpää, Finland, focused on supporting local economic development, business growth, and investment attraction. The website provides comprehensive information about services, investment opportunities, industrial parks, and community events, targeting businesses and investors interested in the region. The site maintains a consistent brand aligned with official city identity and integrates multiple social media channels to engage its audience. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO for search optimization, Slider Revolution for dynamic content, and GDPR compliance tools. The site is mobile-optimized and uses structured data to enhance search engine visibility. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a municipal entity with consistent registration details. Overall, the website presents a professional and trustworthy digital presence for the city’s business services, with good privacy compliance and moderate security posture. Strategic improvements in security headers and accessibility could further enhance its resilience and user experience.

N

Nikotiinipussit

pussit.com

47

Nikotiinipussit.com is a Finnish e-commerce retailer specializing in the sale of legal nicotine pouches. Established in 2007, the company positions itself as the largest and most recognized supplier of nicotine pouches in Finland, offering a wide product selection, installment payment options, and free delivery for orders exceeding 120 euros. The website is professionally designed, multilingual, and integrates modern e-commerce technologies including WooCommerce and Elementor, supported by extensive marketing and analytics tools such as Google Analytics and Google Tag Manager. The business targets adult consumers seeking legal nicotine alternatives, emphasizing product quality and legal compliance.

J

Joen Tukkutiimi Oy

tukkutiimi.fi

47

Joen Tukkutiimi Oy is a Finnish family-owned business specializing in promotional textiles, workwear, and custom branding services. Operating since 2005, the company offers a broad range of products including clothing for various demographics, accessories, home textiles, and ecological products, all customizable with logos or text. Their market position is that of a trusted local retailer with over a decade of experience and a focus on quality and personalized service. Technically, the website is built on a modern stack including jQuery, Bootstrap, and Google Fonts, hosted with Google Cloud DNS. It features responsive design, good SEO practices, and integrates Google Analytics and Tag Manager for tracking. The site includes cookie consent mechanisms and privacy policies, indicating a mature digital presence. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks advanced security headers and dedicated security or incident response pages. The cookie consent and privacy policy suggest GDPR compliance, but no explicit security framework or incident response contacts are provided. Overall, the website is professional, trustworthy, and well-maintained with a strong business credibility score. Recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to further improve security posture.

Elebet Oy is a well-established Finnish manufacturer specializing in concrete elements, operating since 1974 from Pomarkku. The company serves a broad range of construction clients across Finland, including large projects such as stadiums, and emphasizes quality and reliability backed by Kiwa Inspecta certification. Their website reflects a mature digital presence built on WordPress with Bootstrap and jQuery, offering a professional user experience with clear navigation and mobile responsiveness. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Security posture is good with HTTPS enforced, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a trustworthy and professional representation of a medium-sized manufacturing business in the construction sector.