Security Directory

T

Tet

tetcloud.com

69

Tet is a leading IT&T company in the Baltic region offering a comprehensive range of services including colocation, cloud services, hardware rental, and security solutions. The company operates multiple certified data centers and partners with major European data center providers, positioning itself as a reliable infrastructure provider for business clients. The website reflects a mature digital presence with modern technologies and good content quality. Security posture is solid with HTTPS, reCAPTCHA, and recognized certifications, though DNSSEC is not enabled and some security policies are not explicitly published. Overall, Tet demonstrates a strong market position with trustworthy business practices and professional online representation.

F

Fin Flow Solutions Limited

finflowsoft.com

55

Fin Flow Solutions Limited is a Hong Kong-based software company specializing in financial technology solutions, including AML and KYC compliance systems, multiple API integrations, payment core systems, settlement platforms, and e-payment solutions. The company targets financial service providers and businesses seeking to automate and secure their payment and compliance operations. The website reflects a professional and focused business presence with clear service offerings and flexible pricing models. Technically, the website is built on Orchard CMS using modern web technologies such as Bootstrap and jQuery, hosted with DNS services via Cloudflare. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. However, some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the website uses HTTPS with a valid SSL certificate and implements a cookie consent mechanism indicating GDPR awareness. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information, which are important for trust and compliance in the financial sector. Overall, the website is legitimate, professional, and safe with moderate security maturity. Strategic improvements in security transparency and technical hardening are recommended to strengthen trust and compliance.

DOBNĪCA is a small Latvian business offering interactive garden plot rentals near the Daugava river, targeting individuals interested in ecological gardening but lacking time for continuous garden maintenance. The website presents a clear business model with detailed service descriptions, including garden rental, maintenance options, and vegetable/herb seedling packages. The site uses modern frontend technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. While the website is professionally designed with good navigation and mobile optimization, it lacks privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with no visible vulnerabilities but missing security headers and formal security policies. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the website is functional, relevant, and safe for general audiences, but improvements in privacy compliance and security headers are recommended.

U

UniCon Group

unicon.lv

55

UniCon Group operates a well-established fan convention in Riga, Latvia, focusing on geek culture including cosplay, K-pop, gaming, and comics. The website for UniCon 2025 is professionally designed, mobile-optimized, and rich in content, targeting a broad audience of pop culture enthusiasts. The event is scheduled for August 15-17, 2025, at the Kipsala International Exhibition Centre, with detailed program and ticketing information available. The business model centers on event organization and ticket sales, leveraging partnerships such as with Bilesu Serviss for ticketing services. Technically, the site uses modern web technologies including Webflow CMS, Google Fonts, and analytics tools like Yandex Metrika and Google Tag Manager, ensuring good performance and SEO. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and formal policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

G

Gulbenes - Alūksnes bānītis

banitis.lv

57

Gulbenes - Alūksnes bānītis operates the only narrow-gauge railway in the Baltic states offering regular passenger services and special steam locomotive rides, positioning itself as a unique transportation and tourism provider in Latvia. The website presents comprehensive information about train schedules, special events, and additional services such as guest house accommodation and electric vehicle charging, targeting tourists and local travelers interested in cultural and historical experiences. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and FontAwesome, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and well-structured, though lacks some advanced accessibility features. Security-wise, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, indicating room for improvement in compliance and security posture. No forms or input fields reduce attack surface, but absence of privacy documentation may pose GDPR compliance risks. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

TUKKU MAGI is a small cultural institution and museum based in Tukums, Latvia, dedicated to fostering cultural dialogue between Northern Europe, Africa, and America through art. The organization operates as a non-profit relying on donations and community support, with a focus on exhibitions, cultural programs, and art collections. The website reflects this mission with good content quality and clear presentation of team members and benefactors. Technically, the site uses a modern stack including Bootstrap and jQuery, with Google reCAPTCHA for form security, but lacks some advanced security headers and DNSSEC. The absence of privacy and cookie policies indicates compliance gaps, and HTTPS enforcement is not clearly visible in the HTML metadata. Overall, the security posture is moderate with room for improvement in policy transparency and technical hardening. The domain registration is privacy protected but consistent with the organization's profile and age. No adult or unsafe content is present, making the site safe for general audiences.

A

Autoparks

apauto.lv

43

Autoparks is a small Latvian used car dealership based in Talsi, offering a variety of used vehicles from popular brands such as Audi, BMW, Volvo, and Volkswagen. The website provides a catalog of cars with detailed listings and contact information, targeting local car buyers. The business operates primarily through retail sales of used vehicles, positioning itself as a regional player in the transportation sector. Technically, the website is built using standard web technologies including Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced hosting details. Security posture is moderate; while HTTPS is likely used, no security headers or privacy policies are present, indicating room for improvement in compliance and security best practices. The absence of WHOIS data due to query limits limits full domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

S

Par mums - sāls istaba - limfodrenāžas masāža - Salaspilī

salsistaba-masaza.lv

42

The website 'Sāls istaba un masāža Salaspilī' offers wellness and health-related services including halotherapy, lymphatic drainage massage, and oxygen cocktails, targeting residents of Salaspils and surrounding areas. The business emphasizes family-friendly services and collaborates with local producers and community partners. The site is well-structured with good content quality and consistent branding, reflecting a small local hospitality business. Technically, the site uses modern frontend technologies such as Bootstrap 5, Facebook Pixel, and Google Analytics, with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, which impacts compliance and trust. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

Elkšņi Serviss SIA is a small automotive repair service provider based in Ogre, Latvia, specializing in quality maintenance and repair of passenger cars and minibuses, including specialized services for Tesla and electric vehicles. The company emphasizes transparent communication, professional service, and offers additional conveniences such as rental cars and towing. Their website reflects a local business with clear service offerings and partner affiliations. Technically, the website uses a modern frontend stack including Bootstrap and jQuery, with responsive design and embedded Google Maps for location. However, it lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies, which are critical for GDPR compliance in the EU. The absence of WHOIS data due to query limits restricts full domain legitimacy verification. Security posture is moderate with no visible critical vulnerabilities but missing key security best practices and policies. Contact information is clearly presented, supporting business credibility. Overall, the website is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence. Recommendations include implementing security headers, enforcing HTTPS, adding privacy and cookie policies, and establishing incident response contacts to improve security posture and compliance.

H

Hotel Leo

hotelleo.lv

44

Hotel Leo is a small hospitality business operating a boutique hotel located in the city center of Daugavpils, Latvia. The hotel offers comfortable accommodation with amenities such as free Wi-Fi, cable TV, breakfast included, and parking. The website is professionally designed, targeting Russian-speaking customers, and provides clear information about rooms and services. The business positions itself as a cozy, three-star hotel with personalized service and a warm atmosphere. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics for tracking. The site is mobile-optimized and loads with moderate performance. However, there is room for improvement in accessibility and SEO optimization. The website employs HTTPS but lacks advanced security headers and detailed privacy or security policies. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of privacy and terms of service pages, as well as missing WHOIS transparency due to query limits, slightly reduces trustworthiness. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better transparency in domain registration data. Strategic recommendations include implementing comprehensive privacy and terms policies, adding security headers, and publishing vulnerability disclosure information to build trust and compliance.

L

Latsweets

latsweets.lv

46

Latsweets.lv is the online presence of Latsweets, a Latvian confectionery manufacturer established in 1996. The company specializes in producing Oriental sweets, dragees, honey cakes, biscuits, and other confectionery products, exporting to eight countries. The website is multilingual, supporting English, Latvian, and Russian, targeting a broad audience interested in confectionery products. The business model focuses on manufacturing and retail with export activities, emphasizing quality and natural raw materials. The website content is well-structured and professionally presented, reflecting a small but established business in the retail and manufacturing sectors. Technically, the website is built on Drupal 8 CMS, utilizing modern frontend libraries such as Bootstrap 4, jQuery Fancybox, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism indicating some GDPR compliance. However, no privacy policy or terms of service pages were found, and no security.txt or vulnerability disclosure information is present. The absence of security headers and incomplete WHOIS data limits the full security assessment. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk assessment suggests a legitimate and professional business with moderate digital maturity. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and improving compliance documentation to strengthen trust and security posture.

S

SIA Vidzemes riepu centrs

vrc.lv

37

SIA Vidzemes riepu centrs operates as a local Latvian business specializing in the sale and servicing of automotive tires and disks. Their offerings include new and used tires, tire mounting, wheel balancing, disk straightening, and tire repair services. The company targets a broad audience including passenger cars, commercial vehicles, agricultural machinery, and other equipment owners. The website reflects a small business with a clear local market focus and provides essential contact information and service descriptions. Technically, the website employs a modern frontend stack with Bootstrap 4, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile responsive and has a good user experience, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS and includes standard tracking scripts but lacks visible security headers and cookie consent mechanisms. No forms collecting sensitive data are present on the homepage, reducing immediate risk. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the security posture is moderate but could be improved with better header implementation and privacy compliance. The overall risk is low given the business nature and content safety, but the lack of WHOIS transparency and cookie consent are notable gaps. Strategic improvements in privacy compliance and security headers would enhance trust and reduce potential vulnerabilities.

SIA "Ceplis V.S." is a small Latvian company specializing in natural wood flooring services including installation, sanding, finishing, renovation, and restoration. They also retail certified European materials and equipment related to flooring and provide professional glass surface cleaning services. The company targets both residential and commercial clients such as offices, private homes, public interiors, concert halls, and sports complexes. Their website reflects a local business with a clear service offering and contact information. Technically, the site uses modern frontend technologies like Bootstrap, jQuery, and integrates Facebook SDK and Google Maps API, though the map is currently broken due to API issues. Security posture is basic with no visible security headers or privacy policies, and WHOIS data could not be retrieved due to query limits, limiting domain trust analysis. Overall, the site is functional and professional but lacks advanced security and privacy compliance features.

D

Doma SIA

domagroup.eu

61

Domagroup is a small-sized business specializing in supplying measuring instruments, educational solutions, and laboratory and technological equipment primarily targeting business and institutional clients in Latvia and the Baltic region. The company operates through multiple subsidiaries, including Est-Doma OÜ and Vildoma UAB, indicating a regional presence. Their website reflects a professional and consistent brand image with clear contact information and a focus on B2B services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Privacy compliance is addressed through a cookie consent banner and a privacy policy page, demonstrating awareness of GDPR requirements. However, the absence of explicit security headers and incident response information suggests room for improvement in security transparency. The WHOIS data is not publicly available due to EURid privacy policies, but the website's professional presentation and business details support its legitimacy. Overall, the site scores well in content quality, technical implementation, and business credibility, with moderate security posture and privacy compliance.

P

Publicis Groupe

publicisgroupe.lv

70

Publicis Groupe Latvia is a professional communication and marketing group specializing in integrated marketing solutions including data, brand, media, e-commerce, design, and production services. The company operates as part of the global Publicis Groupe network, which is a leading communication group worldwide. The website demonstrates a strong market position with a medium-sized local presence and a comprehensive portfolio of services and clients. Technically, the website uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and employs a cookie consent mechanism indicating GDPR compliance. Security posture is moderate with HTTPS usage implied but lacks visible security headers and formal security policies. The absence of WHOIS data due to query limits limits full domain legitimacy verification, but the website content and branding strongly indicate a legitimate and professional business. Overall, the site is well-designed, content-rich, and trustworthy with room for improvement in security best practices and transparency.

Telpu Uzkopšanas Serviss is a Latvian cleaning service company specializing in residential and commercial cleaning, including general cleaning, post-construction cleaning, and disinfection services. It operates primarily in Riga and the surrounding Pieriga region and is a division of SIA "Dream Property Management". The website presents a professional image with clear service descriptions, client testimonials, and partner affiliations, positioning the company as a trusted local service provider. Technically, the website uses modern frontend technologies such as Bootstrap and Google Tag Manager, ensuring mobile responsiveness and moderate performance. However, the absence of privacy and cookie policies indicates a gap in GDPR compliance. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosure policies. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security measures.

M

Mārupes novada pašvaldības Babītes vidusskola

babitesvidusskola.lv

58

Mārupes novada pašvaldības Babītes vidusskola is a local public secondary school in Latvia providing educational services to students and support to parents. The website serves as an information portal with news, admission details, project descriptions, and contact information. Technically, the site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking important security headers and visible privacy or cookie policies. The absence of WHOIS data limits full domain legitimacy verification, but the site content and contact details align with a legitimate educational institution. Overall, the site is professional and trustworthy but could improve compliance and security practices.

Rīgas 95. vidusskola is a Latvian secondary educational institution providing a variety of academic programs and student services. The website serves as an information portal for students, parents, and staff, offering news, event updates, and access to educational resources. The site is well-structured with clear navigation and a focus on local community engagement. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a responsive and user-friendly experience. Security measures include HTTPS and CSRF tokens, but lack advanced security headers and explicit privacy policies. The absence of WHOIS data limits full domain legitimacy verification, but the site content and external links suggest a trustworthy institution. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

S

SIA RBaltic

remak.lv

44

SIA RBaltic operates as a major dealer and technical representative of a Czech manufacturer specializing in high-quality ventilation equipment. Established in 1992, the company has a significant presence in Latvia and exports approximately 60% of its products through a network of distributors across Europe and Asia. Their website reflects a professional business model focused on manufacturing representation, sales, and after-sales services including warranty extensions and testing laboratory support. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good navigation and content relevance. However, some security best practices like security headers and advanced form protections are missing, which could be improved to enhance the security posture. From a security perspective, the site uses HTTPS and has basic form validation, but lacks visible security headers and anti-CSRF tokens. No WHOIS data was available due to query limits, limiting domain trust verification. The cookie consent mechanism is present, but no explicit privacy policy page was found, indicating partial privacy compliance. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in security headers, privacy policy publication, and WHOIS transparency would enhance trust and compliance.

S

SIA "Froks"

milzkalns.lv

44

Milzkalns is a Latvian hospitality and recreational business specializing in winter and summer outdoor activities such as skiing, snowboarding, wakeboarding, and related services including equipment rental, instruction, sauna, and accommodation. The website presents a professional and consistent brand image targeting active leisure seekers and tourists in the region. The business operates seasonally with offerings tailored to winter sports and summer events, supported by gift card sales and online booking links. Technically, the site uses modern frameworks like Bootstrap and integrates common analytics and social media SDKs, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS usage but lacks visible security headers and privacy compliance mechanisms such as cookie consent and privacy policy pages. Contact information is comprehensive and transparent, enhancing business credibility. WHOIS data is unavailable due to query limits, but the website content and structured data indicate a legitimate small hospitality business. Recommendations include improving privacy compliance, adding security headers, and enhancing incident response visibility.

K

Kapitel

kapitel.lv

50

Kapitel is a prominent real estate company operating in the Baltic region, specializing in the development, ownership, and management of commercial properties including retail, office, hotel, and industrial spaces. The company positions itself as a long-term partner for tenants, emphasizing quality and scale. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap and Google Tag Manager, supporting multilingual content and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market position.

V

Veterinārā klīnika VINNI

vinni-vet.eu

53

Veterinārā klīnika VINNI is a small veterinary clinic based in Liepāja, Latvia, offering a comprehensive range of veterinary services including consultations, surgeries, laboratory diagnostics, and pet care products. The website is professionally designed with clear navigation and detailed service and pricing information, targeting local pet owners. The business maintains an active Facebook presence and provides multiple contact channels including phone, email, and a contact form. Technically, the website uses common web technologies such as jQuery, Bootstrap, Google Analytics, and Facebook SDK, indicating a moderate level of digital maturity. However, there is room for improvement in security posture, as no security headers are detected and cookie consent mechanisms are absent, which may impact GDPR compliance. The WHOIS data is unavailable due to privacy protection by EURid, which is typical for small businesses and does not raise immediate concerns. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy features.

S

SELF STORAGE

selfstorage.lv

65

SELF STORAGE is a self-storage service provider based in Riga, Latvia, offering secure and convenient storage solutions with 24/7 access enabled by smart lock technology. The company targets individuals and businesses in need of flexible storage space near the city center. The website presents a professional and user-friendly interface with clear navigation and relevant content, supported by structured data indicating positive customer ratings. Technically, the site is built on a modern Ruby on Rails stack with Bootstrap and jQuery, providing good mobile optimization and moderate performance. Security posture is adequate with HTTPS and CSRF protections, though additional security headers and policies could enhance resilience. Privacy compliance is well addressed with visible cookie consent and privacy policy documentation. Overall, the business appears credible and trustworthy, though WHOIS data is unavailable due to query limits, limiting domain registration verification.

S

Saluds

saluds.lv

57

Saluds is a Latvian manufacturing company specializing in the production and sale of PVC and aluminum windows and doors. The company targets both private customers and business clients such as construction firms and dealers, offering a wide range of products including REHAU, ALUPROF, and PONZIO systems. Their website demonstrates a moderate level of digital maturity, utilizing modern frontend technologies and a CMS platform (MyraneaCMS). The site is well-structured, mobile-optimized, and includes multimedia content to engage visitors. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks advanced security headers and published incident response policies. Privacy compliance is basic with cookie consent and a privacy policy present, though more comprehensive GDPR documentation could improve compliance. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information align with a legitimate business. Overall, the site scores well in content quality and business credibility, with room for improvement in security and privacy practices.

Villa Anna is a small hospitality business operating a cozy hotel and restaurant located by the sea in Latvia. The website presents a professional and user-friendly interface with clear information about accommodation, dining, conference, and banquet services. The business targets tourists seeking a peaceful seaside stay with local cuisine. Technically, the site is built on GravCMS and uses modern JavaScript libraries and frameworks to enhance user experience. The site is mobile-optimized and includes essential SEO and accessibility features. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected in the HTML content, and no advanced security policies are published. Privacy compliance is good with a clear cookie consent mechanism and privacy policy in place. WHOIS data could not be retrieved due to query limits, but the website content and contact details appear consistent and legitimate. Overall, the site is functional and trustworthy for its business purpose.

Eurosan.lv is a Latvian e-commerce retail platform offering a broad range of consumer products including home goods, sports equipment, electronics, beauty products, and more. The website targets Latvian-speaking customers and provides features such as user accounts, wishlists, shopping carts, and promotional discounts. The site is professionally designed with clear navigation and mobile optimization, supporting a moderate level of technical sophistication through modern JavaScript libraries and CSS frameworks. However, the absence of explicit privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security best practices. The website uses HTTPS, which is a positive security indicator, but lacks visible incident response or vulnerability disclosure information. Overall, the site appears legitimate and functional but would benefit from enhanced privacy compliance and security hardening.

P

Padures Muiža

paduremanor.com

51

Padures Manor is a hospitality and event venue business offering a historic manor setting for celebrations and gatherings. The website presents a professional and visually appealing experience built on WordPress with the Divi theme, integrating modern tracking and cookie consent technologies. The site provides clear contact information and a comprehensive privacy and cookie policy, demonstrating good privacy compliance. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is solid with HTTPS and cookie consent, but could be improved with additional security headers and policies. Overall, the website is functional, trustworthy, and well-positioned in its niche market.

O

Oxford University Press

oed.com

67

Oxford English Dictionary (OED) is a flagship product of Oxford University Press, providing an authoritative and comprehensive record of the English language. The website serves researchers, academics, and language enthusiasts with extensive dictionary entries, historical thesaurus, and linguistic resources. The site is well-branded, professionally designed, and offers both personal and institutional subscription services. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Security posture is solid with HTTPS enforced, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, but the site’s legitimacy is supported by consistent branding and authoritative content. Overall, the site demonstrates a mature digital presence with strong business credibility and good technical implementation.

F

Franklin Electric

franklin-electric.com

74

Franklin Electric is a well-established global manufacturer and distributor specializing in systems and technologies for moving and protecting critical resources such as water, fuel, and electricity. The company serves a diverse range of sectors including residential, commercial, agricultural, industrial, municipal, and energy applications. With over 80 years of history and multiple industry recognitions, Franklin Electric holds a strong market position as a leader in its field. The website reflects a professional corporate presence with clear navigation and comprehensive content about its products, services, and corporate social responsibility initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Microsoft Application Insights for analytics and telemetry, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-maintained, supporting the company's credibility and business objectives.

Z

Základní škola Velké Němčice

zsvelkenemcice.cz

52

Základní škola Velké Němčice operates as a local primary educational institution serving the community of Velké Němčice in the Czech Republic. The website provides comprehensive information about the school, including news, events, schedules, photo galleries, and contact details, targeting students, parents, and staff. The business model is that of a public educational entity with a clear focus on community engagement and educational services. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Swiper, and other JavaScript libraries, hosted on a CMS platform provided by Galileo Corporation. The site is mobile optimized, accessible, and demonstrates good SEO practices. However, there is no evidence of advanced analytics or tracking, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces transparency but does not necessarily indicate illegitimacy given the official nature of the site. Overall, the website is professional, trustworthy, and serves its educational purpose well. Strategic improvements in privacy disclosures and security headers would enhance compliance and user trust.

M

Město Rakovník

mesto-rakovnik.cz

46

Město Rakovník operates an official municipal website serving the residents and visitors of the city of Rakovník in the Czech Republic. The site provides comprehensive information about city administration, urban planning, social services, cultural events, and citizen resources. It functions as a key communication channel for the local government, offering access to official documents, news updates, and contact information. The website targets local citizens, government employees, and visitors seeking municipal services or information. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and jQuery.mmenu for responsive navigation. The site is mobile-optimized and uses HTTPS to secure communications. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. However, no advanced analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No signs of WAF or content blocking were found, and no vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for the city government, with good content quality and user experience. The main risk lies in the missing WHOIS data and lack of some security best practices. Strategic improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

C

CZ.NIC

skenerwebu.cz

50

SkenerWebu.cz is a web vulnerability scanning service operated by CZ.NIC, the Czech domain registry association. The service focuses on identifying critical web application vulnerabilities, particularly those listed in the OWASP Top 10, targeting primarily the Czech internet and .CZ domains. The website presents a professional and consistent brand image with clear messaging about its mission to improve web security in the Czech Republic. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, and employs Matomo analytics with privacy-conscious settings. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy documentation. The domain registration data aligns well with the website's claims, reinforcing legitimacy and trustworthiness.

D

Divadlo Oskara Nedbala Tábor

divadlotabor.cz

46

Divadlo Oskara Nedbala Tábor is a well-established cultural institution in the Czech Republic offering a diverse range of theatrical, musical, and dance performances, as well as exhibitions and educational programs. It serves a broad audience with over 60,000 visitors annually, positioning itself as a key regional player in the cultural media sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site employs modern web technologies including Google Analytics, reCAPTCHA, and Google Maps API, ensuring a functional and moderately performant user experience with good mobile optimization. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection but lacks visible security headers and formal privacy and cookie policies, indicating areas for improvement in compliance and security posture. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is safe, professional, and user-friendly but would benefit from enhanced transparency and security practices.

U

University of Iowa Center for Advancement

foriowa.org

60

The University of Iowa Center for Advancement website serves as a digital platform for the university's advancement and fundraising activities. It targets alumni, donors, and the university community, providing information and engagement opportunities to support the institution. The site reflects a large, established educational entity with consistent branding and professional content. Technically, the website employs modern JavaScript libraries such as jQuery, AngularJS, and Bootstrap, indicating a moderate level of digital maturity. However, some areas such as accessibility and SEO could be improved. Security posture is moderate; while HTTPS is presumably enabled, the absence of security headers and privacy policies indicates room for enhancement. The lack of WHOIS data limits domain trust assessment but does not detract significantly from the site's legitimacy given its university affiliation. Overall, the site is functional and professional but would benefit from improved privacy compliance and security best practices.

MassMutual is a well-established mutual life insurance and financial services company offering a broad range of products including life insurance, retirement planning, investment services, and financial wellness tools. The website reflects a mature enterprise with a strong market position and a focus on serving individuals, businesses, and financial professionals. The digital infrastructure leverages modern technologies such as React, New Relic monitoring, and Tealium tag management, indicating a high level of digital maturity and performance optimization. Security practices are robust with HTTPS enforcement, security headers, and session replay masking, although explicit incident response and vulnerability disclosure information could be improved. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with industry standards.

A

AS207960 Cyfyngedig

glauca.digital

65

Glauca Digital is a UK-based technology company specializing in domain registration, DNS management, VPS hosting, and related internet infrastructure services. Founded in 2020 and operating under the legal entity AS207960 Cyfyngedig, the company positions itself as a transparent, tech-savvy provider with a focus on ease of use and clear pricing. It is a member of the RIPE NCC, indicating a strong presence in IP address and ASN allocation services. The website reflects a professional and consistent brand image with a clear target audience of technical users and businesses seeking reliable domain and hosting solutions. Technically, the website employs modern web technologies including Bootstrap 4, jQuery, and Keycloak for authentication, with support for passkeys enhancing security. The infrastructure appears custom-built and hosted within the AS207960 network, ensuring control and reliability. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and uses advanced authentication mechanisms. DNSSEC is enabled by default for DNS zones, and hCaptcha is used to mitigate automated abuse. However, the absence of explicit security policies, incident response plans, and cookie consent mechanisms indicates areas for improvement in compliance and transparency. The domain WHOIS data is consistent with the business identity, though the domain is currently expired, which could pose operational risks if not addressed promptly. Overall, Glauca Digital presents a trustworthy and professional online presence with strong technical foundations and a clear business focus. Strategic enhancements in privacy compliance and formal security documentation would further strengthen its market position and customer trust.

International Scientific Indexing (ISI) operates a website focused on indexing and listing scientific journals across various disciplines and countries. The platform offers citation values and master journal lists by year, targeting researchers, academics, and journal publishers. The business model appears to be based on journal submissions and possibly payment processing for evaluations. Technically, the site uses modern frameworks such as Bootstrap 5 and integrates Google Adsense for monetization. The website is mobile responsive and has a professional design, but lacks comprehensive privacy, cookie, and terms of service policies. Security posture is weak due to missing security headers and lack of visible incident response or data protection policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site provides valuable academic content but requires improvements in security, privacy compliance, and business transparency.

T

Toyota France

toyota.fr

64

Toyota France operates as the official French branch of the global Toyota Motor Corporation, specializing in the manufacture and sale of automobiles including new, used, hybrid, and electric vehicles. The company holds a strong market position in France, notably with its hybrid models Yaris and Yaris Cross being top sellers in 2024. The website reflects a mature digital presence with comprehensive product offerings and dealer network information targeted at both individual consumers and professionals. Technically, the site leverages advanced web technologies such as Adobe Experience Manager, Google Tag Manager, and Datadog for performance monitoring and user analytics, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, cookie consent mechanisms, and monitoring scripts, although explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data is typical for AFNIC-managed domains but slightly reduces transparency. Overall, the site is professional, trustworthy, and well-optimized for its audience.

T

Toyota Казахстан

toyotakz.com

67

Toyota Казахстан operates as the official regional website for Toyota vehicles in Kazakhstan, providing comprehensive information on new and used Toyota cars, dealer locations, and customer support. The website targets consumers in Kazakhstan interested in Toyota automobiles and serves as a digital brand presence for Toyota Motor Corporation in the region. The site is professionally designed with consistent branding and offers a good user experience with clear navigation and mobile optimization. Technically, the website leverages Adobe Experience Manager CMS, integrates modern analytics and tag management tools such as Datadog RUM and Google Tag Manager, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though explicit security headers and policies could be improved. The WHOIS data for the domain is missing or unavailable, which is unusual for an official brand site and slightly reduces trustworthiness. Overall, the site is a credible and professional digital asset for Toyota in Kazakhstan, but verification of domain registration details is recommended.

The website varuh-rs.si is the official online presence of the Slovenian Human Rights Ombudsman institution, a government entity established in 1998. It provides comprehensive information on human rights protection, legal frameworks, public reports, and support services for vulnerable groups such as children, elderly, and persons with disabilities. The site is well-structured, professionally designed, and uses modern web technologies including TYPO3 CMS and Bootstrap. It demonstrates strong compliance with GDPR and cookie consent regulations, featuring a clear cookie consent mechanism and a detailed privacy policy. Contact information is prominently displayed with multiple phone numbers and an obfuscated email address to reduce spam. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration data aligns with the official government ownership, enhancing trust and legitimacy. Overall, the site is a reliable, secure, and authoritative resource for human rights information in Slovenia.

S

Schwarzwald-Baar-Heuberg Economic Development Corporation mbH

wirtschaftsfoerderung-sbh.de

50

The Schwarzwald-Baar-Heuberg Economic Development Corporation mbH operates as a regional economic development agency focused on strengthening the Schwarzwald-Baar-Heuberg region in Germany. The organization provides a range of services including consulting, location marketing, funding advice, and support for companies, startups, skilled workers, and municipalities. Their digital presence is professional and consistent, targeting businesses and local government entities to foster economic growth and innovation in the region. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, offering a responsive and user-friendly experience. The site includes interactive elements like sliders and a contact form secured with CSRF tokens and CAPTCHA. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and implements basic form security but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in privacy compliance and security best practices would further strengthen its posture.

Online Kongre, operated by LookUs Scientific, is a professional service provider specializing in online meetings and live broadcasts, offering high-quality streaming, simultaneous translation, secure access compliant with health regulations, moderated Q&A, and detailed analytics. The company targets corporate clients and organizations requiring professional webinar solutions. The website is well designed with consistent branding and multiple client references, indicating a stable market position. Technically, the site uses an older AngularJS framework alongside modern libraries like Bootstrap and Google Analytics, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no published privacy or cookie policies, which impacts compliance. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is functional and professional but would benefit from improved security practices and privacy compliance.

S

Saylor Academy

saylor.org

67

Saylor Academy is a well-established nonprofit organization dedicated to providing free and open online education globally. With over 2.4 million students served, it offers a broad catalog of college and professional level courses designed by experts. The organization partners with recognized universities to facilitate college credit transfer and graduate degree pathways, enhancing its market position as a leader in accessible education. Technically, the website is built on a modern WordPress CMS platform with a robust tech stack including Google Analytics, Tag Manager, and reCAPTCHA for security. The site demonstrates good performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS and employs security best practices such as reCAPTCHA and Jetpack security features. However, it lacks some HTTP security headers and does not publish a security policy or vulnerability disclosure, which could be improved to enhance trust and compliance. Overall, the website presents a low risk profile with strong legitimacy indicators, professional content, and transparent business practices. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving cookie consent mechanisms to further strengthen privacy compliance and user trust.

L

LookUs Scientific

elektronikposter.com

48

Elektronik Poster (e-poster) is a specialized technology platform based in Turkey that provides an advanced online system for authors to prepare and present scientific posters digitally. The platform integrates with online abstract submission systems and offers features such as reporting, user interaction, voting, and full-text access stations, targeting academic conference organizers and participants. The website is professionally designed with consistent branding and moderate technical sophistication, leveraging Bootstrap, jQuery, and Google Analytics. Security posture is moderate but lacks key elements such as DNSSEC, security headers, and published privacy policies, which impacts compliance and trust. The domain is well-established since 2010, consistent with the business history, and uses Cloudflare DNS services. Overall, the site is functional and credible but requires improvements in privacy compliance and security best practices.

B

BNP Paribas

mabanqueentreprise.bnpparibas

73

BNP Paribas' Ma Banque Entreprise website serves as a secure corporate banking portal offering multiple authentication methods including Corporate Digital Key, Secure Browsing, and Certificate-based login. The site targets business clients, providing tools for account management, financial reporting, and fraud awareness. The branding and content align with BNP Paribas' position as a leading European financial institution. Technically, the site employs modern web technologies such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security measures include HTTPS enforcement and multi-factor authentication, though explicit security headers are not evident in the HTML source. Privacy compliance is supported by clear privacy and cookie policies, with GDPR adherence implied. Overall, the site demonstrates a strong business credibility and trustworthy user experience.

U

Universität Stuttgart

uni-stuttgart.de

62

The Universität Stuttgart is a leading technical university in Germany with a strong international reputation. The website reflects its mission to integrate engineering, natural sciences, humanities, and social sciences through top-tier research and education. The site targets prospective students, current students, researchers, entrepreneurs, employees, alumni, and media professionals, offering comprehensive information on study programs, research initiatives, and technology transfer. The university operates a large-scale digital presence with consistent branding and professional content quality. Technically, the website employs modern JavaScript libraries such as Bootstrap, jQuery UI, Fancybox, and Tippy.js, alongside Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS backend. Performance is moderate, with asynchronous script loading enhancing user experience. Security posture is solid with HTTPS enforced and standard security headers likely in place, though explicit Content-Security-Policy headers and incident response contacts are absent. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and well-maintained, supporting the university's stature. Strategic improvements include implementing a cookie consent banner, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

diabetesnetz.info

70

Diabetesnetz Deutschland is a public health network initiative coordinated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) aimed at strengthening diabetes prevention efforts across Germany. The website serves as a platform to connect key stakeholders, disseminate educational materials, and promote national diabetes awareness campaigns. It is supported by the German Federal Ministry of Health, reflecting a strong governmental backing and positioning within the healthcare sector. The business model is non-profit and focused on public health impact rather than commercial gain. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap 5 and uses Matomo for privacy-conscious web analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. However, some security best practices such as HTTP security headers and explicit incident response policies are not evident from the content. From a security perspective, the site employs GDPR-compliant cookie consent mechanisms and anonymizes IP addresses in analytics, reflecting a mature privacy posture. The absence of WHOIS data due to malformed responses suggests privacy protection, which is reasonable for a public health entity. No critical vulnerabilities or suspicious content were detected, indicating a generally secure and trustworthy platform. Overall, Diabetesnetz Deutschland presents a credible, well-maintained, and professionally managed website that aligns with its public health mission. Strategic improvements in security headers, incident response transparency, and WHOIS data availability could further enhance trust and compliance.

L

Let's Make Your Website Amazing

ottawawebdesign.ca

46

Ignite Web Solutions, operating under the brand 'Let's Make Your Website Amazing', is a small Canadian technology service provider specializing in custom responsive web design, CRM, and database solutions primarily targeting associations, small and medium businesses, and charities in Ottawa and beyond. The company has a strong local market position with over 100 projects completed and more than $200 million in transactions processed, demonstrating significant operational experience and client trust. Their business model focuses on delivering comprehensive digital platforms including web hosting, SEO, branding, and e-commerce, supported by a free strategy call to engage potential clients. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO and accessibility practices, though performance is moderate. Hosting and domain registration are managed by Rebel.ca Corp., with domain age consistent with the company's operational history. However, some technical security enhancements like DNSSEC and security headers are missing. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA, but lacks published privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. The WHOIS data is privacy protected but shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-positioned in its niche, but would benefit from enhanced privacy compliance and security best practices to further strengthen its risk posture and user confidence.

Indikatori.rs is a Serbian national government portal managed by the Republic Statistical Office, designed to aggregate and provide access to various statistical indicators from multiple sources. The platform aims to facilitate easy access to indicator data, quality reports, metadata, and comparative statistics for Serbia and other countries. The website is funded by the European Union and targets data producers and users including government entities and researchers. Technically, the site uses Bootstrap and jQuery for frontend presentation, with a moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed but lacking DNSSEC and security headers. No privacy or cookie policies are present, which impacts compliance. The domain registration is consistent and legitimate, with no suspicious patterns. Overall, the site is professional and trustworthy but could improve privacy and security practices.

N

Nelnet Inc

nelnetinc.com

68

Nelnet Inc is a diversified enterprise primarily focused on student loan servicing, education technology, government services, consumer financial services, and renewable energy investments. Founded in 2000 and publicly traded on the NYSE (NNI), Nelnet serves millions of customers across multiple sectors including education, government, and finance. The company operates numerous subsidiaries and business units, offering a broad range of services from loan servicing to payment processing and fiber communications. Their market position is strong, supported by decades of experience and a large associate base. Technically, Nelnet's website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with company history. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, it lacks visible security headers and published security policies or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Tracking technologies such as Google Tag Manager and Facebook Pixel are used, indicating moderate user tracking. Overall, Nelnet presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Security posture is solid but could be enhanced by adding security headers and formal incident response disclosures. No critical vulnerabilities or blocking mechanisms were detected, and the content is safe for general audiences.