Security Directory

B

Barns Furr Ltd

barnsfurr.com

56

Barns Furr Ltd operates a professional design and creative direction practice, specializing in brand identities, digital experiences, print solutions, and art direction. The company targets luxury, lifestyle, technology, and media brands, positioning itself as a trusted and experienced design partner with over a decade of expertise. The website showcases a portfolio of projects demonstrating a blend of aesthetics and functionality to help businesses grow and stand out. Technically, the website is built on WordPress, hosted by SiteGround, and uses modern web technologies including Adobe Fonts and Masonry JS. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

P

Planeetta

sitefactory.fi

62

Planeetta is a Finnish technology company specializing in domain registration, web hosting, and WordPress maintenance services. The company targets businesses of all sizes, offering comprehensive web service solutions including domain management, web hosting, virtual servers, and website maintenance. Their market position is that of a reliable and established local provider with a focus on quality and customer service. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Iubenda for privacy compliance, supported by Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security-wise, the website enforces HTTPS, uses security headers, and integrates cookie consent mechanisms, demonstrating a solid security posture. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the domain registration data aligns well with the business identity, supporting the legitimacy of the site. The company maintains transparency with contact details and privacy policies, enhancing trust. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further strengthen security and compliance.

N

Nelonen Media Live

nelonenmedialive.fi

72

Nelonen Media Live is a major Finnish festival and event organizer producing over 20 festivals, concerts, and cruises annually across Finland. The company holds a strong market position as one of the largest event producers in the country, targeting Finnish festival-goers and music enthusiasts. Their website reflects a professional digital presence with rich event content, social media integration, and clear branding. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi SAS, and optimized for mobile and SEO. Security posture is solid with HTTPS, privacy management, and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust. Overall, the domain registration details align well with the business claims, indicating legitimacy and transparency.

T

TorneoPal

torneopal.net

49

TorneoPal is a Finnish company providing a browser-based tournament and league management software solution. Their platform facilitates all aspects of tournament organization including registration, scheduling, referee assignments, and real-time result publishing. The service targets tournament organizers and sports associations, offering mobile-optimized result pages and custom mobile apps for larger events. The website is professionally designed, consistent in branding, and includes positive trust signals such as 5-star Facebook reviews. Technically, the site runs on WordPress with modern plugins and analytics tools, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

Apix Messaging Oy

apixmessaging.fi

67

Apix Messaging Oy is a Finnish technology company specializing in electronic message delivery services, including e-invoices, pay slips, and EDI messages. Established in 2010, the company positions itself as a specialist in seamless electronic communication for businesses. The website reflects a professional and consistent brand image, targeting business clients in Finland. The technical infrastructure is built on WordPress with modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer, hosted likely on AWS infrastructure. The site is mobile-optimized and SEO-friendly, supporting good user experience and discoverability. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements can be made by adding DNSSEC and explicit security headers. No critical vulnerabilities or suspicious indicators were found. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trust. Strategic recommendations include enhancing privacy and security disclosures and implementing DNSSEC to strengthen domain security.

I

Insinööritoimisto Karttatiimi

karttatiimi.fi

42

Karttatiimi Oy is a Finnish geospatial technology company established in 1993, specializing in providing mapping and location-based services primarily to municipalities, cities, and businesses across Finland. With over 25 years of experience and a client base exceeding 200 municipalities, the company holds a strong niche position in the Finnish geospatial services market. Their website clearly outlines key services such as map services, land reservation systems, feedback services, and open data interfaces, targeting public sector and corporate clients. Technically, the website is built on WordPress with modern plugins like Yoast SEO and integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small-sized technology company.

S

SEI

cr-sei.cz

57

The website sei.gov.cz represents the official online presence of the Státní energetická inspekce (State Energy Inspection) of the Czech Republic. It serves as a government regulatory body focused on energy inspections, compliance, and dissemination of energy-related legal information. The site targets a broad audience including government entities, building owners, energy specialists, and the general public interested in energy regulation and compliance. Key services include issuing official statements in construction proceedings, managing energy specialist education, and providing updates on energy legislation and projects. The website is well-branded, consistent, and trustworthy, reflecting its government affiliation.

M

Ministerstvo průmyslu a obchodu ČR

optak.cz

54

The website optak.gov.cz represents the official Czech government program 'Operační program Technologie a aplikace pro konkurenceschopnost (OP TAK)', aimed at supporting Czech entrepreneurs and businesses from 2021 to 2027 through EU funds. It focuses on enhancing innovation, digitalization, energy savings, and sustainable economic development primarily for small and medium enterprises. The site is well-branded with government and EU trust signals, providing comprehensive information about funding opportunities, current calls, and program documentation. Technically, the site uses a modern web stack including jQuery, Google Tag Manager, Facebook Pixel, and various UI plugins to deliver a responsive and accessible user experience. The site is well-optimized for SEO and mobile devices, with clear navigation and structured content. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security-wise, the site enforces HTTPS and uses standard security practices, although explicit security headers could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing, which is unusual for a government domain, but the content and branding strongly indicate legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical and security posture. Strategic recommendations include enhancing security headers and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The website technikadoskol.gov.cz represents an official Czech educational project aimed at introducing modern technology and digital literacy to primary school students, particularly targeting 8th and 9th graders. The project operates mobile classrooms equipped with advanced manufacturing and digital technology tools, providing practical learning experiences. It also supports educators by offering training and resources to enhance their teaching capabilities in technical subjects. The site is hosted on a WordPress platform with modern technologies such as Bootstrap and jQuery, and it employs GDPR compliance plugins to manage privacy concerns. While the site is well-structured and content-rich, minor technical issues such as a visible PHP warning and the absence of explicit privacy and security policies slightly detract from its overall professionalism. The domain uses a Czech government TLD (.gov.cz), indicating official status, although WHOIS data is not publicly available due to registry policies.

I

Icareus Media Services Ltd

icareus.video

53

Icareus Media Services Ltd operates the website icareus.video, providing a comprehensive video cloud platform for creating, managing, and monetising video content including webinars and live streaming. The company targets business customers and developers seeking an all-in-one video solution. The website is professionally designed using WordPress with Elementor and Astra theme, featuring clear navigation and product offerings. The technical infrastructure includes modern web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and consistent with the company's Finnish registration and recent founding in 2024.

P

Pour une Éthique dans le Traitement des Animaux (PETA)

petafrance.com

69

PETA France operates as a localized branch of the international animal rights organization PETA, focusing on advocacy to end animal exploitation in food, clothing, entertainment, and experimentation. The website serves as a platform for campaigns, educational resources, activism tools, and fundraising through donations and subscriptions. It targets a general audience interested in animal welfare and veganism, maintaining a consistent and professional brand image. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS and consent-based cookie management, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the site’s legitimacy is supported by its professional presentation and affiliation with PETA. Overall, the site is a credible and well-maintained resource for animal rights advocacy in France.

P

People for the Ethical Treatment of Animals (PETA)

peta.org.uk

65

People for the Ethical Treatment of Animals (PETA) UK is a well-established non-profit organization dedicated to animal rights advocacy and protection in the United Kingdom. The website serves as a comprehensive platform for news, campaigns, activist resources, and investigations related to ethical treatment of animals. The organization targets animal rights supporters and the general public, providing educational content and calls to action. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence.

C

CANABA a.s.

cvzd.cz

54

Centrum vzorových domů (cvzd.cz) is a Czech Republic based company specializing in the exhibition and sale of modern and classic family houses. Established in 2015 and operated by CANABA a.s., it positions itself as the largest permanent year-round exhibition of family houses in the country, targeting individuals and families planning to build or buy homes. The website offers detailed information about various model houses, free project documentation, and consultation services, supported by a professional and user-friendly digital presence. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and reCAPTCHA for security and analytics, and uses a cookie consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and form protections, though some security headers could be enhanced. Overall, the site demonstrates a mature digital infrastructure aligned with business goals and regulatory compliance.

T

Tuiskulan Kotikolo

tuiskulankotikolo.fi

58

Tuiskulan Kotikolo is a Finnish small business specializing in handcrafted plywood products under the Vanerikko brand, including storage boxes, laundry baskets, and gift items. They operate both a physical shop with a café and an online presence, targeting local Finnish consumers and craft enthusiasts. The website is built on WordPress with common plugins and provides a good user experience with clear navigation and relevant content. However, it lacks some privacy compliance features such as cookie consent and comprehensive GDPR indicators. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and policies. Overall, the business appears legitimate and trustworthy with a mature domain and consistent WHOIS data.

K

Kotokartanosäätiö

kotokartanosaatio.fi

45

Kotokartanosäätiö is a Finnish non-profit foundation dedicated to supporting the wellbeing, functional capacity, and social inclusion of senior citizens. The organization offers a variety of community activities, including fitness facilities, educational lectures, digital guidance, group courses, meeting places, volunteer activities, and peer support. Their services are targeted primarily at the elderly population in Riihimäki, Finland, positioning them as a local leader in senior wellbeing initiatives. The website reflects a well-maintained digital presence with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress with modern libraries such as jQuery, Slick Carousel, and FontAwesome, and it integrates Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security-wise, the site uses HTTPS and some security headers but lacks advanced policies like CSP and a cookie consent mechanism, which are recommended for GDPR compliance. No incident response or vulnerability disclosure information is published, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and serves its community focus well, with room for security and privacy enhancements.

MEA Group GmbH operates a professional manufacturing business specializing in drainage and construction products, including English courtyards and cellar skylights, with over 130 years of industry experience. The company targets construction professionals and customers primarily in the Czech Republic, offering a broad product portfolio supported by technical documentation and BIM files. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring moderate performance and good user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and published security policies could enhance trust. Privacy compliance is strong, with comprehensive policies and GDPR adherence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be verified further. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

Archiproducts is a well-established online platform founded in 2001 that serves as a comprehensive search engine and marketplace for architecture and design products. It caters primarily to architects, designers, retailers, and consumers seeking furniture, lighting, bathroom, kitchen, outdoor, office, and contract products. The platform offers extensive catalogues, BIM and 3D files, and an integrated shopping experience. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, Pinterest tracking, and reCAPTCHA, ensuring a robust digital infrastructure. The site is mobile-optimized, SEO-friendly, and provides a professional user experience. Security posture is strong with HTTPS enforced and secure forms, though some security headers could be explicitly improved. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact information and incident response details are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Archiproducts presents a mature, professional, and trustworthy digital presence in the architecture and design sector.

Č

Česká agentura na podporu obchodu / CzechTrade

exportmag.cz

57

ExportMag.cz is a professional export magazine operated by the CzechTrade agency and the Ministry of Industry and Trade of the Czech Republic. It serves as an authoritative information platform targeting exporters, businesses, and stakeholders interested in international trade. The website offers expert articles, news, and support services related to export and business development. The content is well-structured, professionally presented, and updated regularly, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Bootstrap for responsive design. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism compliant with GDPR. While the site is mobile-optimized and performs moderately well, there is room for improvement in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks several recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces the ability to fully verify domain legitimacy, though the content and business affiliations strongly indicate a legitimate government-backed entity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, WHOIS transparency, and contact information completeness would enhance trust and security posture.

I

Icareus Oy

icareus.fi

39

Icareus Oy is a Finnish technology company specializing in premium online video cloud solutions for enterprises and organizations. Their flagship product, Icareus Suite Videopilvi, offers a comprehensive platform for video content creation, management, streaming, and monetization. The company targets a diverse audience including businesses, public sector entities, educational institutions, sports organizations, and media companies. With a domain age dating back to 2004 and a consistent brand presence, Icareus holds a strong market position in Finland and internationally. The website reflects a mature digital infrastructure leveraging WordPress with modern plugins and integrations for SEO, analytics, and multilingual support. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, supporting trust and regulatory adherence. Overall, the company demonstrates professionalism, technical maturity, and a clear focus on delivering secure, scalable video solutions.

P

POSLEPU - POmoc SLEPým Uživatelům

poslepu.cz

40

POSLEPU is a specialized Czech website focused on digital accessibility, assistive technologies, and inclusive design primarily for users with visual impairments and other specific needs. The site provides educational content, podcasts, training, and event information, positioning itself as a trusted resource in the accessibility domain within the Czech Republic and Slovakia. The business model centers on information dissemination and community engagement rather than commercial sales. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, ensuring good performance, mobile optimization, and accessibility standards. The presence of structured data and Open Graph metadata enhances its digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for further strengthening. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong focus on accessibility and user support.

F

Fundacja Green REV Institute

roslinnaszkola.pl

44

Roślinna Szkoła is a Polish non-profit initiative advocating for plant-based meals in schools as part of a broader green transformation focused on climate-friendly and ethical food systems. The website serves as an educational and advocacy platform, promoting awareness about sustainable food choices and supporting local communities and activists. Technically, the site is built on WordPress with modern plugins and accessibility features, hosted by a Polish registrar. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is limited due to missing explicit policies and consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

B

BUSINESS MEDIA ONE, s. r. o.

dumabyt.cz

55

Dumabyt.cz is a Czech online magazine specializing in home living, construction, interior design, and gardening. Operated by BUSINESS MEDIA ONE, s. r. o., the site offers a rich collection of articles, news, and inspiration targeted at homeowners, builders, and enthusiasts. The website demonstrates a professional and consistent brand presence with a clear focus on its niche market. Technically, the site runs on WordPress 6.8.1 with modern frontend technologies including jQuery and Typekit fonts, and integrates a consent management platform for GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and business information indicate a legitimate and established media company. Overall, the site is well-designed, content-rich, and compliant with privacy regulations, serving a general audience safely.

B

BUSINESS MEDIA ONE, s. r. o.

mujdum.cz

54

Můj Dům is a Czech media company specializing in content related to home building, furnishing, and living. The website serves as an online magazine providing articles, tips, and inspiration for homeowners and builders primarily in the Czech Republic. The company BUSINESS MEDIA ONE, s. r. o. operates the site, which has been active since 2006. The site is well-branded, professionally designed, and targets a medium-sized audience interested in construction and interior design. Technically, the site runs on WordPress 6.8.1 with modern JavaScript libraries and uses Google Tag Manager and Usercentrics for analytics and cookie consent management. The site is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is missing, which reduces domain transparency and trust but the site itself appears legitimate and professionally maintained. No direct contact emails or phone numbers are found on the homepage, which could be improved for business credibility. Overall, the site is safe, suitable for general audiences, and uses standard advertising and tracking services.

M

Materiály pro stavbu

imaterialy.cz

53

Materiály pro stavbu is a Czech-language online media platform specializing in construction materials, technologies, and industry news. Established in 2006, it serves construction professionals, architects, engineers, and manufacturers primarily in the Czech Republic. The website offers categorized articles, event information, and product insights, supported by industry partnerships. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms with no explicit emails or phone numbers displayed. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

T

Teljäntori Oy

teljantori.fi

44

Teljäntori Oy operates a well-established shopping center located in the heart of Pori, Finland, hosting over 60 businesses including retail shops, dining options, banking, and professional services. The website reflects a mature local business with a strong community presence and a diverse tenant mix. Technically, the site is built on WordPress using modern plugins such as Beaver Builder and Yoast SEO, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies, indicating room for improvement in compliance and security transparency. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to align with GDPR and best practices.

W

WP-Ensure Ltd.

wpensure.com

67

WP-Ensure Ltd. is a Finland-based small technology company specializing in website security, maintenance, and optimization services primarily for WordPress websites. Established in 2014, the company offers subscription-based solutions including comprehensive website audits and a continuous protection platform. Their market position is that of a niche provider focused on delivering technical excellence and security to solopreneurs, small businesses, and enterprises. The website is professionally designed, mobile-optimized, and demonstrates consistent branding with clear navigation and relevant content. Technically, the site runs on WordPress 6.8.1 with modern libraries like jQuery and uses Cloudflare for DNS and security, alongside Matomo for privacy-conscious analytics. The hosting partner is UpCloud, indicating a robust infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security policies are not publicly documented. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, adding cookie consent, and enhancing security headers to further strengthen the security posture.

V

Vegan Society of Ireland

vegansociety.ie

44

The Vegan Society of Ireland is a small non-profit organization dedicated to promoting veganism as an ethical and sustainable lifestyle in Ireland. It evolved from the Vegetarian Society of Ireland, rebranding in 2022 to focus exclusively on vegan advocacy. The website serves as an authoritative platform offering membership, discounts, volunteer opportunities, events, and educational resources. The target audience includes the Irish public interested in animal rights, sustainability, and veganism. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and integrates Google Analytics for visitor tracking. Hosting and domain registration are managed by Blacknight Solutions, an Irish provider, aligning with the organization's geographic focus. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy transparency and security hardening.

A

AVF (Association Végétarienne de France)

vegetarisme.fr

59

The Association Végétarienne de France (AVF) is a well-established French non-profit organization dedicated to promoting vegetarianism and supporting the transition to plant-based diets. The website serves as a comprehensive platform offering educational resources, advocacy campaigns, community engagement, and an online shop. AVF maintains a strong digital presence with multiple related domains and active social media channels, reinforcing its position as a key player in the vegetarian advocacy space in France. Technically, the website is built on a modern WordPress CMS with WooCommerce integration for e-commerce capabilities. It employs a variety of contemporary web technologies including Bootstrap, jQuery, Leaflet.js for maps, and Google services for analytics and tag management. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms. While some standard security headers are not explicitly visible, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data limits domain registration trust assessment, but the website's content and business information support its legitimacy. Overall, AVF's website is a professional, content-rich platform with a solid security posture and good privacy practices. It effectively supports the organization's mission and community engagement efforts.

N

Nadační fond Dvojka srdcem

dvojkasrdcem.cz

44

Nadační fond Dvojka srdcem is a Czech non-profit foundation focused on providing social and financial assistance to residents of Prague 2, particularly families and individuals in need. The foundation offers support such as financial contributions for school supplies, extracurricular activities, and aid for individuals with health challenges. The website presents beneficiary stories and donation progress, reinforcing transparency and community engagement. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by a Czech hosting provider, aligning with the foundation's local focus. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional, trustworthy, and well-structured, though improvements in privacy compliance and security headers are recommended.

D

Didaktikon

didaktikon.cz

63

Didaktikon is an educational and popularization center affiliated with Charles University in the Czech Republic, established in 2021. It offers science exhibitions and workshops primarily targeting school children, teachers, and the general public interested in science education. The website reflects a well-structured and professionally branded presence consistent with its academic partnerships and mission. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Matomo analytics, hosted likely on university infrastructure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks published security policies and security headers. Privacy compliance is basic with no explicit privacy policy found on the main page. Overall, the site is safe, accessible, and trustworthy for its intended audience.

I

Iittala Village

iittalavillage.fi

46

Iittala Village is a cultural and tourism-focused website representing a regional artisan and design village in Hämeenlinna, Finland. It aggregates information about local attractions, events, shops, and cultural heritage related to glassmaking and artisan crafts. The website targets tourists and visitors interested in Finnish design and culture, providing comprehensive event listings, visitor information, and local business promotion. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and privacy compliance. It is hosted by a reputable registrar and uses HTTPS with good security practices. Privacy and cookie policies are implemented with GDPR compliance in mind. The security posture is solid with no critical vulnerabilities detected. Overall, the site is professional, trustworthy, and well-maintained, serving as a valuable resource for cultural tourism in the region.

Hämeenlinnan kaupungin museo operates as a regional cultural heritage museum in Finland, managing multiple museum sites including Museo Skogster, Sibelius's birthplace, Palanderin talo, and the Savings Bank Museum. The institution targets general public audiences interested in history, culture, and regional heritage, offering exhibitions, events, educational programs, and a museum shop. The website reflects a well-maintained digital presence with multilingual support and clear navigation. Technically, the website is built on WordPress 6.8.1, utilizing standard plugins such as Cookie Law Info for GDPR compliance and Matomo for analytics. Hosting and DNS services leverage Cloudflare, providing CDN and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks published privacy policy and terms of service pages, which are recommended for full compliance and transparency. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is legitimately registered to the museum organization with consistent details. Overall, the website is trustworthy, professionally managed, and compliant with basic privacy regulations. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen trust and compliance.

S

StavbaWeb

stavbaweb.cz

51

StavbaWeb is a Czech-language online platform dedicated to sharing information about construction products, architectural projects, and companies in the architecture and construction sectors. It serves as a niche media outlet providing news, project showcases, and industry insights primarily targeting architects, construction professionals, and related stakeholders in the Czech Republic. The website features a modern WordPress-based infrastructure with various plugins supporting GDPR compliance and user engagement. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. Security posture is moderate with HTTPS enforced and some security plugins in place, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the site appears professional and well-maintained. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. Overall, the site is a credible resource within its industry niche but would benefit from enhanced transparency and security documentation.

S

Synology Inc.

sy.to

76

Synology Inc. is a well-established technology company specializing in data management, storage, backup, and cloud solutions. The company offers a broad portfolio of products including NAS and SAN storage systems, backup and recovery solutions, surveillance systems, networking devices, and productivity software. Positioned as a global leader in the data storage industry, Synology targets both business and individual users seeking scalable and secure data management platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the website employs modern web technologies such as Vue.js and jQuery, integrates Google Tag Manager and LiveChat for analytics and customer engagement, and demonstrates good performance and mobile optimization. The site is well-structured with proper SEO and accessibility considerations, indicating a high level of digital maturity. From a security perspective, Synology demonstrates strong commitment through HTTPS enforcement, detailed security policies, a secure development lifecycle, supply chain risk management, and a public bounty program. Cookie consent mechanisms and privacy policies align with GDPR compliance, enhancing user trust. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility, technical robustness, and privacy compliance. Strategic recommendations include publishing a security.txt file to facilitate vulnerability reporting and explicitly listing a Data Protection Officer contact to further enhance compliance transparency.

Š

Škola kreativní fotografie s.r.o.

nauctesefotit.cz

44

Škola kreativní fotografie s.r.o. is a private photography school based in Prague, Czech Republic, offering a variety of photography courses, workshops, and certification programs primarily targeting photography enthusiasts and students preparing for art schools. The website is professionally designed using WordPress with modern plugins and technologies such as Yoast SEO and Google reCAPTCHA, ensuring a secure and user-friendly experience. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. The site demonstrates good security posture with HTTPS and form protections but lacks some security headers and formal privacy documentation. Overall, the business appears legitimate and well-established with a strong local presence and partnerships, though domain registration details should be clarified to enhance trust.

C

Czech Repubrick

czechrepubrick.cz

55

Czech Repubrick is a small retail and educational business focused on Lego products, exhibitions, and educational programs for schools and companies. The website is built on the Wix platform, featuring a professional design and moderate technical maturity. It uses standard web technologies including JavaScript, jQuery, Google Analytics, and Poptin for marketing and analytics. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy policies. The absence of WHOIS registrant data reduces transparency and trustworthiness. Overall, the website is accessible and content is family-friendly, targeting Lego enthusiasts and educational institutions.

O

Open House Europe

openhouseeurope.org

47

Open House Europe is a non-profit cultural organization founded in 2023 and coordinated by the Public institution Architektūros fondas in Lithuania. It operates a network of architecture festivals across Europe, focusing on themes such as sustainability, accessibility, inclusion, and future heritage. The organization engages the public through events, volunteer programs, and annual summits, supported by European cultural funding and media partnerships. The website reflects a professional and consistent brand presence with rich content targeting architecture enthusiasts and the general public interested in urban heritage. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, and Lottie animations. It uses Yoast SEO for optimization and integrates Google Analytics and MailerLite for marketing and analytics. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs secure form handling with nonce tokens. However, DNSSEC is not enabled, and security headers are not explicitly detected. There is no visible security or incident response policy, and no cookie consent mechanism is implemented, which may impact GDPR compliance. The WHOIS data is consistent with the organization's claims, showing a legitimate and recently registered domain. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation but could improve in privacy compliance and security best practices to enhance trust and regulatory adherence.

H

Hrvatski Crveni križ Društvo Crvenog križa Osječko-baranjske županije

dckobz.hr

48

Hrvatski Crveni križ Društvo Crvenog križa Osječko-baranjske županije is a regional humanitarian non-profit organization operating in Croatia's Osječko-baranjska županija. The organization focuses on community support, youth engagement, first aid training, disaster response, blood donation, and social welfare activities. Their website reflects a well-structured and content-rich platform that communicates their mission, projects, and news effectively to the general public and stakeholders. The organization maintains a consistent brand presence and provides multiple contact channels including email, phone, and a contact form, supported by active social media profiles.

R

Ruskon kunta

rusko.fi

49

Ruskon kunta is the official municipal government entity for the Rusko region in Finland, providing a comprehensive digital platform for residents and stakeholders. The website offers extensive information on local government services, community events, employment, education, and wellbeing. It serves as a key communication channel for municipal announcements and public engagement. The technical infrastructure is based on a modern WordPress CMS with integrated SEO and accessibility features, hosted with Azure DNS and secured with DNSSEC and HTTPS. The site demonstrates good privacy compliance with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is strong with no critical vulnerabilities detected, although some security headers could be enhanced. Overall, the website is trustworthy, professionally maintained, and aligned with the official registrant data, reflecting a mature and credible municipal digital presence.

S

Synology Inc.

synology.com

76

Synology Inc. is a prominent technology company specializing in network-attached storage (NAS), data management, backup, surveillance, networking, and cloud solutions. The company positions itself as a leader in providing scalable and secure data management platforms for both business and individual users. Their website reflects a mature digital presence with comprehensive product offerings, customer resources, and a strong emphasis on data security and privacy. Technically, the site employs modern JavaScript frameworks such as Vue.js and jQuery, integrates Google Tag Manager for analytics, and uses LiveChat for customer engagement. The site is well-optimized for mobile devices and provides clear navigation and professional design. From a security perspective, Synology demonstrates good practices including HTTPS enforcement, detailed privacy and cookie policies with consent mechanisms, and public disclosure of security programs such as a bounty program. No critical vulnerabilities or exposed sensitive data were detected in the website content. WHOIS data for the domain is unavailable or restricted, which is common for privacy-conscious enterprises, but the website content and external trust signals strongly support the legitimacy of the domain. Overall, Synology's website reflects a robust security posture, strong privacy compliance, and a high level of business credibility. The company effectively communicates its value proposition and maintains transparency in security and data protection matters, making it a trustworthy technology provider in its market segment.

V

Volontaires.lu

volontaires.lu

52

Volontaires.lu is a Luxembourg-based volunteer service platform aimed at engaging youth in meaningful volunteer projects both locally and internationally. The website serves as an informational hub providing access to volunteer programs, mission listings, and training opportunities. It appears to be affiliated with government or official entities, supported by the presence of government logos and social media channels. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and uses Google Tag Manager and Matomo for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data is unavailable due to a malformed query, which slightly reduces trustworthiness but does not negate the legitimacy suggested by the content and branding. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

B

Base1

base1.lu

52

Base1 is a youth-focused makerspace and creativity hub based in Luxembourg, offering open access to a makerspace, workshops, and events for young people aged 8 to 30. The organization supports a wide range of creative projects including drone building, coding, video production, and more, fostering innovation and learning in a community environment. The website is multilingual, primarily in French, and integrates modern web technologies with WordPress CMS and various plugins for multilingual support, forms, and cookie management. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy and security policies. The domain registration aligns well with the organization's Luxembourg location and youth focus, indicating legitimacy. Overall, the site is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security transparency are recommended.

Maison Eisenborn is a government-affiliated non-profit organization providing accommodation and support services to young adults involved in international mobility programs in Luxembourg. The website is professionally designed using WordPress and integrates standard technologies such as jQuery, Ninja Forms, and Google Maps API. The site includes a comprehensive application form collecting detailed personal and financial information, indicating a structured approach to service delivery. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit privacy policies are recommended. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate government service.

S

Service national de la jeunesse

colonies.lu

57

The website colonies.lu is an official government-operated portal managed by the Service national de la jeunesse in Luxembourg. It serves as a centralized platform aggregating a wide variety of leisure activities such as weekends, camps, and colonies organized by multiple partner organizations. The portal targets children and youth in Luxembourg, providing event listings, registration capabilities, and practical information. The site is well-branded with consistent government logos and clear navigation, reflecting a professional and trustworthy presence. Technically, the site is built on WordPress 6.8.1 with modern plugins including Yoast SEO and Complianz GDPR for privacy compliance. It uses Bootstrap for responsive design and integrates Google Maps for location services. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Analytics are handled via Matomo with anonymized statistics, respecting user privacy. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with opt-in for non-essential cookies. However, it lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration data aligns well with the website’s government affiliation and Luxembourg location, indicating high legitimacy. Overall, colonies.lu is a well-maintained, secure, and privacy-conscious government portal providing valuable services to youth in Luxembourg. Strategic improvements include adding security headers, publishing a security policy, and providing incident response contact information to enhance trust and compliance.

Z

Zentrum Fünfbrunnen / Centre Cinqfontaines

cinqfontaines.lu

58

The website cinqfontaines.lu represents a Luxembourg government-operated educational and memorial center focused on Holocaust remembrance, antisemitism, racism, democracy, and human rights education. The site serves children, youth, educators, and the general public interested in historical and human rights topics. It is managed by the Luxembourg government and related youth and political education services, positioning itself as a niche cultural and educational institution. The content is well-structured, multilingual, and professionally presented with clear navigation and consistent branding. Technically, the website is built on WordPress 6.8.1 with jQuery, Google Maps API, and Font Awesome. It uses Matomo for analytics and implements a cookie consent mechanism compliant with GDPR principles. The site is hosted likely on Luxembourg infrastructure, uses HTTPS with excellent SSL configuration, and shows moderate performance and good mobile optimization. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS, uses cookie consent, and does not expose sensitive data. No vulnerabilities or WAF blocking were detected. Privacy compliance is partial due to the absence of an explicit privacy policy page and terms of service. Contact information is available but lacks email addresses and security incident contacts. Overall, the website is trustworthy, professional, and serves its educational and memorial purpose effectively. Strategic improvements include publishing a privacy policy and terms of service, adding security headers, and providing incident response contact information to enhance security posture and compliance.

F

Festival des Cabanes

cabanes.lu

56

The Festival des Cabanes website represents a youth-focused architecture competition organized in Luxembourg, targeting young people aged 12 to 26. The event is supported by recognized local organizations such as the Service national de la jeunesse and the Ordre des Architectes et Ingénieurs-conseils, positioning it as a niche cultural and educational initiative. The website content is professionally presented, with clear information about the event, its objectives, and timelines, supporting good user engagement and trust. Technically, the site is built on WordPress with modern front-end technologies and is mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is trustworthy and well-suited for its purpose but would benefit from enhanced privacy compliance and security hardening.

D

Domainhotelli

domainhotelli.fi

56

Domainhotelli is a Finnish-based domain registrar and web hosting provider offering affordable and reliable services primarily targeting Finnish-speaking customers. The company emphasizes ease of use, local language support, and competitive pricing, positioning itself as a trusted local alternative in the domain and hosting market. Their key services include domain registration, DNS management, web hosting optimized for WordPress, and customer support in Finnish. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the website runs on WordPress with modern plugins such as Yoast SEO and integrates third-party services like Google Tag Manager and Iubenda for cookie management. Hosting infrastructure is located in Finland, ensuring performance and compliance with local data regulations. Accessibility and user experience are well addressed, with clear navigation and responsive design. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, and security headers are not evident in the HTML content. No vulnerabilities or suspicious activities were detected. WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, Domainhotelli presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policy transparency and incident response communication would further enhance trust and compliance.

I

Indiana University

iu.edu

72

Indiana University is a large, established public educational institution in the United States offering over 930 academic programs across nine campuses. The university emphasizes world-class research, global impact, and a comprehensive student experience. The website reflects a mature digital presence with a professional design, clear navigation, and rich content targeting prospective and current students, researchers, and alumni. Technically, the site uses modern web technologies including Rivet UI framework, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are lacking. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

W

Wiener Städtische Versicherungsverein

airt.at

48

The website www.airt.at represents the cultural exhibition series "Architektur im Ringturm" managed by the Wiener Städtische Versicherungsverein, part of the Vienna Insurance Group. It serves as a platform to showcase architectural and cultural exhibitions primarily focused on Central and Eastern Europe. The site offers detailed information about current and past exhibitions, architecture talks, and historical context of the Ringturm building. It targets architecture and culture enthusiasts and operates as a free-entry exhibition series supported by sponsorships. Technically, the site is built on WordPress with modern plugins and libraries, including multilingual support and spam protection via Google reCAPTCHA. The website demonstrates good digital maturity with responsive design, SEO optimization, and accessibility considerations. Security posture is solid with HTTPS enforced and spam prevention on forms, though some security headers could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent banner with opt-in, and GDPR-aligned data collection practices. Overall, the site is professional, trustworthy, and well-maintained, reflecting the reputable parent organization. No critical security or compliance issues were detected.