Security Directory

L

Latgales Druka

druka.lv

47

Latgales Druka is a Latvian printing company specializing in premium softcover book printing with a focus on eco-friendly materials and expert craftsmanship. Founded in 2016, the company serves a worldwide audience, particularly publishers across Europe, positioning itself as a trusted and efficient manufacturer. Their business model emphasizes quality, efficiency, and artisan pride in book production, offering various binding options such as perfect binding, sewn-glued, and saddle stitch. The website reflects a professional and consistent brand image with clear contact information and environmental certifications. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, FontAwesome icons, and Tailwind CSS for styling. The site is mobile-optimized and features good SEO practices with comprehensive metadata and structured data. Security-wise, the site uses HTTPS with a CSRF token present, but lacks explicit security headers and formal privacy or cookie policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be improved by implementing security headers, privacy compliance mechanisms, and a vulnerability disclosure policy. The absence of WHOIS data limits full domain legitimacy verification, but the website content and structured data strongly indicate a legitimate small business. Strategic recommendations include enhancing privacy compliance, adding security policies, and improving accessibility features to strengthen trust and regulatory adherence.

S

Snagged

lmt.com

47

AirlineTickets.com is currently a domain sales landing page brokered by Snagged, offering the premium domain name for purchase. The website targets businesses or investors interested in acquiring a domain related to airline ticketing or travel. The business model is focused on domain brokerage rather than providing airline ticketing services. Technically, the site uses modern frontend technologies including Bootstrap 5, jQuery, Font Awesome, and Google Analytics, hosted on a platform specialized for domain sales (Efty). The site is mobile optimized and loads with moderate performance. Security posture is adequate with HTTPS enabled and secure form inputs, but lacks important security headers and privacy policies. WHOIS data is missing, indicating the domain may not be registered or is in transition, which impacts trust and legitimacy. Overall, the site is functional for its purpose but lacks comprehensive compliance and security features.

F

FirstHost

firsthost.lv

59

FirstHost is a Latvia-based technology company specializing in high-performance web hosting, dedicated servers, and cloud VPS solutions primarily targeting European businesses. With over 18 years of experience and a client base exceeding 9,000, the company positions itself as a reliable and scalable IT infrastructure provider. Their services include dedicated servers, cloud hosting, domain registration, SSL certificates, and virtual desktop infrastructure, catering to enterprises seeking robust and flexible hosting solutions. The website reflects a mature digital presence with multilingual support and multiple currency options, indicating a broad regional focus. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and performance. Integration with analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Yandex Metrika demonstrates a data-driven approach to customer engagement. The site is mobile-optimized and exhibits good SEO practices, contributing to its accessibility and reach. From a security standpoint, the site enforces HTTPS and uses reputable third-party services for live chat and analytics. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to query limits restricts full domain trust verification, though the website content and business indicators suggest legitimacy. Overall, FirstHost presents a solid business and technical profile with room to enhance transparency around security and compliance. Strategic improvements in security documentation and WHOIS data availability would strengthen trust and compliance posture.

N

Nekustamo īpašumu aģentūra Latio

latio.lv

53

Nekustamo īpašumu aģentūra Latio is a leading real estate agency in Latvia, established in 1991, offering comprehensive property transaction services including sales, rentals, valuation, legal support, and market analysis. The company operates with over 150 employees across 12 offices, positioning itself as a market leader in the Latvian real estate sector. The website reflects a professional and well-structured digital presence with multilingual support and extensive service information targeting both private and corporate clients. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Maps API, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and incorporates cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, the absence of certain security headers and lack of published security policies or incident response contacts indicate room for enhancement. The WHOIS data could not be retrieved due to query limits, limiting domain registration transparency and trust verification. Overall, Latio's website demonstrates a solid business and technical foundation with good privacy compliance and marketing integration. Strategic improvements in security policies, WHOIS transparency, and accessibility would further strengthen its digital trust and compliance posture.

AGroup is a technology company specializing in Human Capital Management solutions, offering a comprehensive suite of HR digitalization services and software modules including payroll, core HR, time and attendance, performance evaluations, recruitment, and more. The company targets businesses primarily in Latvia, Estonia, Lithuania, and Poland, positioning itself as a regional leader in HR management technology. The website is built on WordPress CMS with modern technologies and provides a professional, content-rich user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit privacy policies are missing. Tracking is done via Google Analytics and Facebook Pixel (commented out), with cookie consent managed by CookieYes. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

A

Auto 100 AKF

skoda.lv

68

Škoda Latvija, operated by Auto 100 AKF, is the official Škoda brand presence in Latvia, offering a comprehensive range of Škoda vehicles including electric and hybrid models. The website provides detailed information on models, pricing, promotions, and services such as financing, servicing, and accessories. The company targets Latvian consumers and corporate clients interested in Škoda automobiles. Technically, the website uses modern frameworks like React and Bootstrap, ensuring a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though security headers are not evident and privacy compliance documentation is lacking. The absence of WHOIS data limits full domain legitimacy verification, but the presence of structured data and consistent branding supports trustworthiness. Overall, the site is professional and functional with room for improvement in privacy and security transparency.

Sihtasutus RAEK is a regional development foundation based in Rapla County, Estonia, focused on supporting balanced regional growth by providing professional development services to private, public, and third sector organizations. The website clearly targets entrepreneurs, citizen associations, youth, and local governments with a variety of support services including training, mentoring, and consulting. The organization is well-established with a domain age since 2010 and is part of a national network of county development centers. The website is built on a modern WordPress platform with common web technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks advanced security headers and formal incident response or vulnerability disclosure information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a professional and trustworthy image consistent with a government/non-profit entity.

C

404 Page not found | Canary

cms-dt.com

48

The website cms-dt.com currently serves a 404 error page indicating that the requested content is not available or has been moved. There is no visible business information, contact details, or privacy-related policies on the accessible page. The domain is relatively new, registered in April 2023 via Amazon Registrar, Inc., and uses the Laravel framework with common JavaScript libraries such as jQuery and Bootstrap. The technical infrastructure appears standard but lacks advanced security configurations such as DNSSEC and security headers. The absence of privacy policies, cookie consent mechanisms, and contact information indicates low compliance with privacy regulations and poor user trust signals. Overall, the site is in an early or incomplete state, limiting its business credibility and security posture.

The Journal of Zoo and Aquarium Research (JZAR) is an open access academic journal affiliated with the European Association of Zoos and Aquaria, focusing on publishing peer-reviewed research related to zoos and aquaria. The journal operates on an open access model without publication fees, targeting researchers, academics, and professionals in the zoological and aquarium fields. The website is professionally designed and uses the Open Journal Systems platform, supported by modern web technologies such as jQuery and Bootstrap, hosted by Greenhost in the Netherlands. From a technical perspective, the site demonstrates good performance, mobile optimization, and accessibility. However, there is room for improvement in security practices, notably the absence of DNSSEC and security headers. The site enforces HTTPS and has domain transfer protections, which are positive indicators. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the security posture is moderate with no critical vulnerabilities detected, but enhancements in security headers and explicit policies would strengthen trust. The domain WHOIS data aligns well with the business, showing a consistent and legitimate registration. The site maintains a minimal user tracking footprint and does not employ advertising or tracking scripts, supporting user privacy. Strategically, the journal should prioritize publishing privacy and cookie policies, enable DNSSEC, and implement security headers to improve compliance and security posture. These steps will enhance trust and align with best practices for academic publishing platforms.

U

URRAM

lugeja.ee

47

URRAM is a specialized Estonian library portal that provides users with access to a wide range of library catalogs, articles, and library information. It integrates with national authentication services such as ID-card, Mobile-ID, and Smart-ID, enabling secure user login and management of library services like reservations and loans. The platform targets library users across Estonia, including students, researchers, and the general public, positioning itself as a key national resource in the education and public service sectors. Technically, the website employs a modern frontend stack including Bootstrap 4.4.1, jQuery 3.4.1, and various Bootstrap extensions for UI components and date pickers. It uses Google Analytics for user tracking but lacks visible cookie consent mechanisms. The site is mobile responsive and offers a good user experience with clear navigation and search functionalities. However, some technical improvements are recommended, such as updating JavaScript libraries and enhancing accessibility. From a security perspective, the site enforces HTTPS and uses secure national eID authentication methods, which are strong trust signals. However, the absence of security headers and the use of an outdated jQuery version present potential vulnerabilities. The lack of explicit privacy and cookie policies also indicates compliance gaps with GDPR requirements. Overall, URRAM is a moderately mature digital platform with a solid business credibility in the Estonian library ecosystem. Strategic improvements in privacy compliance, security headers, and library technology updates would enhance its security posture and user trust.

T

The Options Clearing Corporation

optionseducation.org

50

The Options Industry Council (OIC) is a well-established educational resource operated by The Options Clearing Corporation (OCC), providing comprehensive options trading education to investors, financial advisors, and institutional participants globally. The website offers a rich array of educational materials including webinars, podcasts, strategy guides, and real-time options quotes, positioning itself as a trusted industry leader since 1992. The business model is non-profit and supported by major participant exchanges, reinforcing its credibility and market position. Technically, the website is built on the Kentico CMS platform and leverages a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site demonstrates good performance, mobile optimization, and accessibility, with a professional and consistent design that enhances user experience and trustworthiness. From a security perspective, the site enforces HTTPS and employs secure form handling with hashed data submissions. While no critical vulnerabilities were detected, the absence of explicit security headers such as Content-Security-Policy and lack of published security or incident response policies represent areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy, but the lack of a cookie consent mechanism and GDPR-specific disclosures suggests room for enhancement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing additional security headers, publishing security policies, enhancing privacy compliance with cookie consent, and improving WHOIS transparency to further strengthen trust and compliance.

A

ABCS Insights

abcsinsights.com

60

ABCS Insights is a data analytics and marketing measurement company founded in 2020, specializing in leveraging a large single-source database of North American retail sales data to optimize marketing campaigns across multiple channels. The company targets marketing professionals and media companies seeking data-driven insights to improve campaign effectiveness. The website presents a professional and consistent brand image with clear navigation and good content quality, emphasizing their key services such as ad measurement, audience optimization, brand awareness tracking, and sales impact analysis. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Cloudflare services, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, Cloudflare DNS and bot protection via Turnstile captcha, and a cookie consent mechanism supporting GDPR compliance. However, there is room for improvement in DNS security (DNSSEC not enabled), security headers, and publishing formal security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, showing a consistent and legitimate online presence.

A

Alma Career

careerexpo.cz

59

Career Expo is a major career opportunities festival organized by Alma Career Czechia s.r.o., targeting job seekers and employers primarily in the Czech Republic. The website presents a professional and content-rich platform promoting the event, workshops, and networking opportunities. The company positions itself as a leading organizer in the career event space with partnerships including Jobs.cz and Prace.cz. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, though lacks some security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms pages. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence is consistent and professional.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

Alfasilver.cz is the official website for Alfasilver HA+, a medical device product designed for wound care, including treatment of abrasions, minor burns, and skin injuries. The product is distributed by Glenmark Pharmaceuticals Distribution, s. r. o., based in Prague, Czech Republic. The website targets consumers seeking effective and easy-to-use wound care solutions, offering sprays and creams with antimicrobial properties and tissue hydration support. The site also provides educational content and retail partner links for product purchase. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. Cookie consent is managed via CookieScript, ensuring GDPR compliance with granular user consent options. The site is mobile-optimized and features clear navigation and professional design, though no CMS or backend platform is explicitly detected. Hosting and domain registration are consistent with the business location and history. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with a registration date in 2016 and no privacy protection, aligning with the business profile. Contact information is clearly provided, including company address, phone, and official emails, with a dedicated channel for reporting adverse effects. Overall, Alfasilver.cz presents a trustworthy, professional, and compliant online presence for a niche healthcare product. Strategic improvements could include enhanced security headers and explicit security policies to further strengthen trust and compliance.

O

OnlyU - Web s články o vztazích, společnosti a zdraví.

onlyu.cz

55

OnlyU is a Czech-language media website focused on publishing articles related to relationships, society, and health. The site targets Czech-speaking users interested in these topics and monetizes primarily through advertising networks such as Google Adsense and Taboola. The website is built on WordPress CMS and integrates multiple third-party analytics and marketing tools, including Google Analytics, Gemius, and ShareThis, indicating a mature digital marketing infrastructure. However, the absence of publicly available WHOIS data limits the ability to fully verify domain ownership and legitimacy. The site implements a cookie consent banner, showing some compliance with GDPR requirements, but lacks an explicit privacy policy or terms of service in the analyzed content. Technically, the site shows moderate performance and good mobile optimization but has minor backend issues such as visible PHP warnings. Security posture is moderate with HTTPS enabled but missing security headers and some code hygiene issues. Overall, the website is functional and professionally presented but would benefit from improved transparency, security hardening, and compliance documentation.

U

UAB "Švaros spektras"

svarosspektras.lt

38

UAB "Švaros spektras" is a Lithuanian company specializing in professional cleaning services across Lithuania, including carpet, mattress, sofa, leather furniture, window cleaning, and hygiene product supply. The company has a well-established market presence since 2012, targeting both residential and commercial clients. Their website reflects a professional service offering with clear pricing and service descriptions. Technically, the website uses modern frameworks such as Bootstrap and integrates Google services for analytics and security, including reCAPTCHA. The site is hosted on AWS Cloudfront CDN, ensuring good performance and availability. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

A

API FOOTBALL

api-football.com

51

API-Football is a technology company providing a comprehensive RESTful API service for football and other sports data, covering over 1,100 competitions worldwide. Their platform offers real-time livescore, standings, teams, odds, fixtures, events, player statistics, and prediction data, targeting developers and businesses requiring sports data integration. The company operates a subscription-based business model with free and paid plans, and integrates with RapidAPI to enhance accessibility and security. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience.

N

NDA

nda.lt

67

NDA is a privacy-focused web analytics service offering comprehensive user session analytics, heatmaps, session replay, and real-time visitor tracking. The platform targets website owners and digital marketers who require GDPR, CCPA, and PECR compliant analytics solutions. The website presents a professional and consistent brand image, emphasizing respect for user data and privacy. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with responsive design and cookie consent mechanisms implemented. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and detailed security policies are absent. WHOIS data is unavailable due to query limits, which slightly impacts trust but the overall legitimacy appears sound based on website content.

C

CV Market

cvmarket.lv

57

CV Market is a well-established Latvian online job portal serving both job seekers and employers. It offers a comprehensive platform for job listings, resume databases, and employer branding, positioning itself as a leading player in the Latvian employment market. The website is professionally designed with good content quality and clear navigation, targeting primarily the Latvian market. Technically, the site employs modern JavaScript libraries and integrates advanced marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Google Optimize, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes a Content Security Policy, although the policy is somewhat permissive and could be tightened to enhance protection. Privacy compliance is robust, featuring a cookie consent mechanism and detailed privacy policies aligned with GDPR requirements. Overall, the site demonstrates a strong business credibility and a good security posture, with room for improvement in security policy transparency and CSP configuration.

Teva Lithuania operates as a regional branch of the global pharmaceutical company Teva Pharmaceutical Industries, providing a wide range of generic and specialty medicines. The website serves as a corporate and informational platform targeting patients, healthcare professionals, and caregivers in Lithuania. It emphasizes patient safety, social responsibility, and product quality. The digital infrastructure employs modern JavaScript libraries and analytics tools such as Microsoft Clarity and Application Insights, alongside a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The domain WHOIS data is unavailable due to query limits, but the website's branding and external links strongly indicate legitimacy. Overall, the site is professional, well-structured, and compliant with privacy regulations, supporting Teva's market position in healthcare.

Gaja.lt is a Lithuanian online retail store offering a wide range of products including home furniture, accessories, and electronics. The website targets general consumers primarily in Lithuania, providing services such as free worldwide shipping, money-back guarantees, and 24/7 online support. The business model is typical for e-commerce, focusing on direct sales to consumers with a diverse product catalog. Technically, the site uses common web technologies like jQuery, Bootstrap, and Google Fonts, with a moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and SEO and accessibility features are basic. Security posture is moderate; while forms use POST methods, there is a lack of security headers and no visible cookie consent mechanism, which impacts privacy compliance. WHOIS data is unavailable due to query limits, with privacy protection likely in place, which slightly reduces trust but is understandable for a small e-commerce business. Overall, the site is functional and professional but could improve in security and privacy transparency.

D

Deutsche Hauptstelle für Suchtfragen e. V.

aktionstag-suchtberatung.de

45

The website www.aktionstag-suchtberatung.de serves as an official information platform for the Deutsche Hauptstelle für Suchtfragen e. V. (DHS), focusing on the annual Aktionstag Suchtberatung event. It targets addiction counseling centers, affected individuals, and their families in Germany, providing resources, event information, and materials to support public awareness and coordination. The site is well-branded, consistent, and professionally maintained using TYPO3 CMS and modern frontend technologies such as Bootstrap and jQuery. The content is relevant and structured for easy navigation, with a clear focus on non-profit public health communication. From a technical perspective, the website employs HTTPS with strong SSL configuration, uses a modern tech stack, and demonstrates good mobile optimization and accessibility. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is consistent with the organization's identity and domain usage, supporting legitimacy. Contact information is clearly provided, including a physical address and phone number, but no email addresses or social media links were found. The absence of a terms of service page and security/incident response policies suggests areas for improvement. Overall, the website is a credible, well-maintained resource for addiction counseling awareness in Germany, with a solid technical foundation but some gaps in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen trust and compliance.

S

State of Nevada

nv.gov

60

The State of Nevada official website serves as a comprehensive portal for residents, businesses, visitors, and government employees, providing access to a wide range of services including online government services, job listings, tourism information, business resources, and education. The site is well-positioned as the authoritative source for Nevada state information, reflecting a large government entity with a long-standing domain registration since 2002. The business model is focused on public service and information dissemination. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Popper.js, and Google services such as Analytics and Custom Search Engine. The site is mobile-optimized with responsive design and good SEO practices, although accessibility features are basic. Hosting details are not explicitly disclosed, but DNS uses foundationdns.com name servers. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected in the HTML source, representing areas for improvement. No exposed sensitive data or vulnerable libraries were found. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is primarily via web forms and official linked pages, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional, with a strong business credibility score. The security posture is adequate but could be enhanced with additional security headers and DNSSEC. Privacy compliance should be improved to meet modern standards. The site is not blocked or behind a WAF, allowing full content access and analysis.

Whistlebl.com is a specialized whistleblowing platform focused on providing confidential and secure channels for staff and partners to report misconduct, corruption, and fraud within organizations. The website is relatively new, founded in 2022, and targets organizations seeking to uphold integrity through anonymous reporting mechanisms. The platform emphasizes privacy and GDPR compliance, offering a clear privacy policy and cookie consent mechanism. Technically, the site is built on WordPress 6.8.1 with a modern tech stack including Bootstrap, jQuery, and Google reCAPTCHA v3 for security. Hosting is provided by InMotion Hosting, and the site uses HTTPS with a good SSL configuration. However, some security best practices such as DNSSEC and security headers are missing, which could be improved to enhance security posture. The site lacks explicit terms of service and security policy pages, and no direct contact emails or phone numbers are provided, relying instead on contact forms. Overall, the website is functional, professional, and moderately secure, suitable for its niche purpose but with room for security and compliance enhancements.

G

GSR Ventiltechnik GmbH & Co. KG

gsrvalves.com

56

GSR Ventiltechnik GmbH & Co. KG is a German manufacturer specializing in the development and production of solenoid- and pressure-controlled valves for liquids and gases, serving diverse industrial sectors including energy, transport, and manufacturing. With over 50 years of experience and a broad product portfolio exceeding 1,000 valve options, the company positions itself as a reliable partner for specialized valve solutions. The website reflects a professional digital presence powered by TYPO3 CMS and Bootstrap, featuring multilingual support and comprehensive product and application information. Security posture is solid with HTTPS, cookie consent, and secure forms, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data slightly reduces trust but is mitigated by the presence of a reputable parent company, INDUS HOLDING AG, and consistent branding. Overall, the site demonstrates good technical maturity and business credibility, with room for improvement in security transparency and domain registration clarity.

The Virtuele Gemeente Assistent website serves as a virtual municipal assistant platform targeting residents of Dutch municipalities such as Utrecht, Tilburg, and Dongen. It offers chatbot-based support to facilitate access to municipal information and services. The platform appears to be a niche government service tool established in 2020, focusing on digital assistance for local government interactions. The website content is basic but functional, with moderate branding consistency and a clear target audience within the Netherlands. Technically, the site uses a combination of Bootstrap and jQuery libraries, with some Vue.js and BotUI scripts commented out, indicating potential future enhancements or incomplete features. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Hosting and CMS details are not explicitly identified. The site benefits from HTTPS and DNSSEC, ensuring secure domain resolution and encrypted communications. From a security perspective, the website has a good SSL configuration but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Forms are present but commented out, indicating inactive user input mechanisms and potential gaps in secure data handling. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the security posture is moderate but requires improvements to meet best practices and regulatory requirements. The overall risk assessment suggests a moderately trustworthy site with no critical vulnerabilities detected but notable compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, activating secure forms with CSRF protection, and enhancing transparency with contact and incident response information to improve user trust and regulatory compliance.

G

Gastech-Energi A/S

gastech.dk

63

Gastech-Energi A/S is a Danish energy company specializing in the sale, installation, and maintenance of gas boilers and heat pumps. The company offers service agreements that provide customers with reliable support and maintenance throughout the heating season. Positioned as a trusted provider in Denmark, Gastech-Energi leverages a strong brand presence supported by customer reviews and active social media channels. The website is designed to serve both private and commercial customers, providing tools such as savings calculators and self-service portals to enhance customer engagement. Technically, the website is built on WordPress using the Understrap theme framework and integrates modern technologies including Google Tag Manager, Google Analytics, and CookieInformation for privacy compliance. The site demonstrates good SEO practices with comprehensive metadata and structured data, ensuring strong search engine visibility. Mobile optimization and user experience are well addressed, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs a detailed cookie consent mechanism aligned with GDPR requirements. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data limits domain trust verification, but the overall digital footprint and compliance posture suggest a legitimate and professionally managed online presence. Overall, Gastech-Energi's website reflects a mature digital infrastructure supporting its business goals, with room for enhancements in security headers and accessibility to further strengthen its security posture and user inclusivity.

ETEVERS E&L is a South Korean technology and logistics company specializing in integrated device and service management solutions, fulfillment services, and E-Commerce logistics. The company has a stable financial structure, a specialized workforce, and a broad portfolio of related subsidiaries and partner sites, indicating a well-established market presence. The website is professionally designed with good content quality and clear navigation, targeting IT service users and logistics clients. Technically, the site uses a mix of legacy and modern JavaScript libraries hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy with a legitimacy score of 85 based on WHOIS and content consistency.

ETEVERSePA is a South Korean IT solutions company specializing in digital transformation services including infrastructure integration, cloud migration, and big data solutions. Founded in 2007, the company presents itself as a stable and experienced player in the technology sector with a medium-sized workforce and multiple partnerships. The website reflects a professional business model targeting IT industry clients seeking comprehensive IT infrastructure and cloud services. Technically, the site uses a mix of legacy and modern JavaScript libraries and frameworks, hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate with some concerns due to outdated libraries and lack of visible security headers or cookie consent mechanisms. The domain registration is consistent with the business location and claims, enhancing trustworthiness. Overall, the website is functional and professional but would benefit from security and privacy improvements.

ETEVERSeBT is a South Korean IT solutions company founded in 2022, specializing in providing optimized business IT solutions through partnerships with leading software, hardware, and network manufacturers. The company positions itself as a customer-centric business IT solutions provider with a medium-sized operation and a growing partnership ecosystem. The website is professionally designed, primarily in Korean, and targets IT industry clients and partners. Technically, the website uses a legacy jQuery version alongside modern libraries like Swiper.js and fullpage.js, hosted on AWS infrastructure. While the site is mobile-optimized and SEO-friendly, it lacks some modern security best practices such as security headers and cookie consent mechanisms. The security posture is moderate but could be improved by updating outdated libraries and enhancing domain security features. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

ETECH SYSTEM, operated by Young Woo Digital, is a Korean IT company specializing in digital transformation solutions and IT services. Established in 2010, the company has a medium-sized presence with overseas offices in China, Japan, India, and the USA. Their offerings include IT consulting, infrastructure system integration, cloud and big data services, and maintenance. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting corporate clients seeking IT innovation. Technically, the website uses a modern but somewhat dated technology stack including jQuery 1.7.1, Bootstrap, and fullpage.js, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and some modern security headers. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed from domain and AWS hosting), but no explicit security headers were found in the HTML. The use of an outdated jQuery version poses a minor risk. There is no visible cookie consent mechanism or published security policy, which may impact privacy compliance. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is functional and professional with moderate security and privacy compliance. Strategic improvements in security headers, updated libraries, and privacy mechanisms would enhance trust and compliance.

ETEVERS is a South Korean IT innovation company specializing in providing optimized IT infrastructure and solutions to support sustainable growth and transformation. The company has a solid market presence with multiple partnerships with major technology providers such as Cisco, Oracle, AWS, and others. Their website reflects an active business with recent news updates and a clear focus on partnership and innovation. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, Swiper, and fullPage.js, hosted on AWS infrastructure, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the domain is registered with a reputable Korean registrar and has a long registration period with transfer protection enabled, supporting legitimacy. However, the site lacks DNSSEC and visible security headers, and no cookie consent mechanism is implemented despite cookie usage, which are areas for improvement. No incident response or security policy information is published, limiting transparency in security posture. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is moderate with no critical vulnerabilities or blocking detected. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for compliance, and publishing security policies to improve trust and compliance. The company demonstrates a professional online presence with consistent branding and active engagement with partners and customers.

N

Nemzetközi Gyermekmentő Szolgálat

biztonsagosinternet.hu

56

Biztonsagosinternet.hu is a Hungarian non-profit online platform operated by the Nemzetközi Gyermekmentő Szolgálat (International Child Rescue Service). It provides a secure and anonymous reporting hotline for illegal and harmful internet content, primarily focusing on protecting children and young people. The website also offers educational tips and advice on safe internet usage. The platform holds a trusted position in the Hungarian market, supported by partnerships with governmental and international organizations such as Saferinternet.hu, INHOPE, and national law enforcement agencies. Technically, the site is built on Drupal 10 with modern frontend libraries, ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS and some security modules in place, though explicit security headers could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence aligned with its mission to safeguard children online.

M

Mijn Kinddossier

mijnkinddossier.nl

48

Mijn Kinddossier is a Dutch healthcare digital portal focused on providing parents access to their children's health data and youth healthcare services. The platform offers functionalities such as questionnaire completion, personalized advice, growth tracking, appointment scheduling, and vaccination record viewing. It integrates DigiD authentication, a trusted Dutch government identity system, enhancing user trust and security. The website is well-branded and targets Dutch parents and youth healthcare organizations, positioning itself as a specialized service in the healthcare sector. Technically, the website uses a modern JavaScript stack including jQuery, jQuery UI, Pickadate, Slick Carousel, Popper.js, Tippy.js, Cropper.js, and Modernizr, built on the Wicket Java web framework. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. However, no CMS or hosting provider information is evident, and SEO and accessibility features are basic. From a security perspective, the site uses HTTPS and DigiD authentication, which are positive indicators. A responsible disclosure link is present, showing some security awareness. However, no privacy or cookie policies are found, no contact information is provided, and no security headers are detected, which are gaps in compliance and security best practices. The use of Sentry indicates error tracking but no extensive analytics or tracking is observed. Overall, the website is functional and professional but would benefit from improved privacy compliance, explicit security policies, and enhanced transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear contact and incident response information to strengthen trust and compliance.

S

Sveučilište u Splitu

unist.hr

64

Sveučilište u Splitu is a well-established public university in Croatia, founded in 1974, serving over 20,000 students across multiple faculties and departments. The website reflects a mature digital presence with comprehensive information about academic programs, research, community engagement, and international cooperation. The institution holds the HR Excellence in Research certification, indicating a commitment to research quality and human resources standards. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site projects high professionalism and trustworthiness, supporting the university's reputation and operational needs.

Trafic.ro is a Romanian web analytics platform operated by EXTREME SOLUTIONS SRL, providing real-time monitoring and statistics of online audiences in Romania. The platform targets website owners and digital marketers seeking detailed traffic insights and SEO benefits. It holds a strong market position as a leading private analytics site in Romania, supported by a domain age of over 15 years and authoritative claims backed by AHREFS data. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS, ensuring moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which impacts its privacy compliance and security posture. The WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

6

6 Degrees Media Group B.V.

sixdagency.com

63

SIXD’ is a creative agency group based in the Netherlands, founded in 2021 and operating under the parent company 6 Degrees Media Group B.V. The company bundles multiple specialist agencies offering services in branding, marketing, digital development, and publishing to connect brands with their audiences through integrated storytelling and strategic planning. Their market position is that of a collaborative agency network providing comprehensive brand engagement solutions to medium-sized clients. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and analytics tools, hosted with a reputable registrar and DNS via Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with detailed policies and cookie consent mechanisms. Contact information is complete and transparent, supporting business credibility.

F

FIZZ | Digital Agency

fizz.nl

61

FIZZ | Digital Agency is a well-established Dutch creative agency specializing in brand strategy, concept development, website development, and digital marketing. Founded in 1999, the agency serves a diverse clientele including notable organizations such as CNV, FNV, and Alfa College. Their market position is strengthened by certifications like ISO 9001:2015 and recognition as a Google Partner, reflecting a commitment to quality and professionalism. The website presents a strong brand identity with consistent messaging and a user-friendly design optimized for both desktop and mobile users. Technically, the website leverages modern web technologies including Bootstrap, jQuery, FontAwesome Pro, and analytics tools such as Google Analytics and Hotjar. The site is well-structured with SEO best practices and includes interactive elements like video backgrounds and animated content. Performance is moderate with room for optimization, and accessibility features are basic but present. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling, including explicit user consent for data collection. However, there is no evidence of advanced security headers or published security policies and incident response procedures. The absence of a security.txt file and vulnerability disclosure policy suggests areas for improvement in transparency and security maturity. Overall, FIZZ demonstrates a strong digital presence with high business credibility and good privacy compliance. The risk profile is low with no critical vulnerabilities detected, but strategic enhancements in security policies and DNS security (DNSSEC) would further strengthen their posture.

S

SilverDome Investment Partners

silverdomeip.com

59

SilverDome Investment Partners is a Swedish-based investment fund company specializing in alternative absolute return strategies, offering a daily traded UCITS fund named SilverDome One. The company targets investors seeking stable, diversified, and capital-preserving investment options. The website is built on WordPress with Elementor, featuring professional design and clear navigation. It uses Google Tag Manager for analytics and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled but lacks published security policies and security headers. The domain registration is consistent with the business founding date and shows no suspicious patterns. Overall, the website presents a credible and professional investment service with room for improvement in privacy and security transparency.

Robb Brothers Wine Merchants Limited is a UK-based small retail and wholesale wine merchant specializing in a curated portfolio of wines sourced directly from vineyards, including exclusive selections for restaurants and hotels. The company positions itself as a niche player with a focus on quality and partnerships with both large and boutique wineries. Their website provides detailed product listings and clear contact information, targeting wine consumers and hospitality businesses. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, with Google Analytics for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. Overall, the website is functional and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

S

Safenames

safenames.net

81

Safenames is a well-established UK-based company specializing in global domain registration, brand protection, hosting, and cybersecurity services. With over 25 years of experience, they serve a broad business audience seeking comprehensive domain and brand management solutions. Their market position is strong, supported by certifications such as ISO 9001 and ISO 27001, ICANN accreditation, and partnerships with DigiCert. The website reflects a professional and trustworthy brand with clear service offerings and client testimonials. Technically, the website is built on the Sitefinity CMS platform with modern JavaScript libraries and frameworks including Bootstrap and jQuery. It integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot, indicating a mature digital infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, Safenames demonstrates a solid posture with HTTPS enforced, security headers present, CAPTCHA on forms, and compliance with privacy regulations including GDPR. The presence of a cookie consent banner and detailed privacy and terms policies further support their compliance stance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Safenames presents a low-risk profile with strong business credibility and a secure, compliant web presence. Strategic recommendations include adding a public vulnerability disclosure policy, enhancing accessibility features, and publishing explicit data protection officer contact details to further strengthen trust and compliance.

L

LU MII Mākslīgā intelekta laboratorija

tezaurs.lv

41

The website www.tezaurs.lv serves as a comprehensive Latvian language thesaurus and dictionary platform, managed by the Artificial Intelligence Laboratory of the University of Latvia's Mathematics and Computer Science Institute. It offers over 400,000 dictionary entries, including explanatory and synonym dictionaries, targeting Latvian language users, researchers, and students. The site is positioned as a leading academic resource in its niche, providing API access and integration with WordNet, reflecting a strong commitment to linguistic research and education. Technically, the site employs a modern JavaScript stack including jQuery, Modernizr, Popper.js, and Tippy.js, alongside Google Fonts and FontAwesome for UI elements. Google Analytics is used for user tracking. The site is served over HTTPS with good SSL configuration, though it lacks explicit security headers. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure form inputs but lacks several security headers and does not provide privacy or cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is available. The absence of explicit contact information for security or privacy concerns is noted. Overall, the security posture is solid but could be improved with better policy transparency and header implementation. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory adherence. The domain registration aligns well with the academic institution, supporting legitimacy and trustworthiness.

KeMeK is a consultancy focused on providing technology, marketing, and production services primarily to small and mid-size businesses. The website positions the company as a service provider with a moderate market presence but lacks detailed business information such as founding year or physical location. Technically, the site uses a modern frontend stack including Bootstrap 4.3.1, jQuery, and Google Analytics for tracking. The site is accessible and moderately optimized for mobile devices but lacks advanced accessibility features and comprehensive SEO elements. Security posture is basic with HTTPS implied but no security headers detected and no published security or privacy policies. The absence of contact information and compliance documentation reduces trust and privacy compliance scores. Overall, the site is functional but would benefit from enhanced transparency and security practices.

E

Elklan Training Limited

elklan.co.uk

42

Elklan Training Limited is a UK-based educational training provider specializing in speech, language, and communication development for children. The company offers a broad range of accredited courses and resources targeting practitioners, schools, parents, carers, and specialist teachers. With over 85,000 practitioners trained and funding from the Department of Education, Elklan holds a strong market position in the education sector. Their offerings include practitioner courses, whole-setting training, parent courses, tutor training, and CPD workshops, supported by a professional and user-friendly website. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, Font Awesome 6 Pro, and various UI enhancement libraries. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Analytics and marketing tools such as Google Analytics and Facebook Pixel are used with appropriate cookie consent mechanisms. From a security perspective, the site uses HTTPS and implements privacy consent for cookies and data collection. However, explicit security headers and detailed security policies are not evident. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, Elklan Training Limited demonstrates a mature digital presence with strong business credibility and good privacy compliance. Security posture is adequate but could be improved with additional headers and incident response information. The website effectively supports its educational mission and target audiences.

BUBU.net S.a.s. di Sordi Paolo is a small Italian digital strategy consultancy operated by Paolo Sordi, a digital strategist with a career starting in 1988 and full-time internet involvement since 1998. The website serves as a professional personal brand platform offering digital strategy services to national and international companies, focusing on digital presence management and business model innovation. The site is modest but professionally designed, targeting businesses seeking digital transformation support. Technically, the website uses a standard modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Analytics. It is mobile-optimized and structured with clear navigation, though accessibility and SEO features are basic. No CMS or hosting provider details are evident. Performance is moderate, with no critical technical issues detected. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. HTTPS status is not confirmed from the data, which is a critical security aspect. No forms collect sensitive data, reducing immediate risk, but the absence of security best practices and incident response information suggests room for improvement. Overall, the website is moderately trustworthy and professional but would benefit from enhanced security measures, privacy compliance, and transparency to improve user trust and regulatory adherence.

S

Subhanu Technologies & Solutions

subhanu.com

37

Subhanu Technologies & Solutions is a small technology company based in Bengaluru, India, specializing in consulting, HR services, IT services, training, and STEM educational products. The company positions itself as an ethical and responsible IT solutions provider with a focus on empowering future generations through STEM education and professional training. Their website reflects a moderate level of digital maturity, utilizing popular frontend frameworks such as Bootstrap, UIKit, and Swiper.js for UI components and interactivity. However, the site lacks HTTPS, privacy policies, and advanced SEO or accessibility features, which limits its security posture and compliance standing. Contact information and social media presence are clearly provided, enhancing business credibility, but the absence of security policies and vulnerability disclosures indicates room for improvement in security governance. Overall, the website is functional and professional but requires significant enhancements in security and privacy compliance to meet modern standards.

A

Aurobindo Pharma Limited

aurobindo.com

58

Aurobindo Pharma Limited is a leading global pharmaceutical company specializing in generic drugs, biosimilars, and active pharmaceutical ingredients. With a significant manufacturing footprint and a strong R&D pipeline, the company serves over 150 global markets including the US and Europe. The website reflects a mature digital presence with comprehensive business, investor, and sustainability information. Technically, the site uses modern frameworks such as Next.js and Bootstrap, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business stature.

N

Net Business Ltd

gambling-affiliation.com

46

Gambling Affiliation operates as a leading independent affiliate network dedicated to the iGaming industry since 2005. The platform connects affiliates and operators globally, offering over 350 campaigns and access to more than 9000 affiliates. Their services include campaign management, marketing material provision, detailed reporting, and commission tracking, supported by dedicated affiliate managers. The company is based in Malta and positions itself as a trusted intermediary in the iGaming affiliate marketing space. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, Select2, and Google reCAPTCHA for security. The site is mobile optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and a cookie consent mechanism, though some security headers and explicit security policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy and incident response contacts suggests room for improvement in transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, the website presents a professional, trustworthy, and functional platform with a strong business model and good technical implementation. Strategic enhancements in security policy transparency and incident response readiness would further strengthen its risk profile.

A

AICEP

portugalglobal.pt

47

AICEP is a Portuguese public agency dedicated to promoting productive investment and the internationalization of the Portuguese economy. It supports export growth and the international expansion of companies through its offices in Portugal and an external network spanning approximately 50 markets. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. The technical infrastructure leverages modern JavaScript libraries, marketing automation via Mautic, and cookie consent management through OneTrust, ensuring compliance with GDPR and user privacy standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. Overall, the site presents a trustworthy, professional, and well-maintained platform aligned with its government agency role.