Security Directory

PornPicsHub.com is an adult entertainment website offering a large collection of pornographic images and videos categorized by various explicit themes. The site targets an adults-only audience and operates primarily on an advertising-based business model, featuring third-party popunder ads. The website's technical infrastructure includes common web technologies such as JavaScript, jQuery, and Alpine.js, but lacks advanced CMS or hosting details. The site shows basic mobile optimization and SEO practices but lacks comprehensive privacy, cookie, or terms of service policies, which impacts user trust and compliance. Security posture is weak with no visible security headers, no DNSSEC, and reliance on third-party ad scripts that may introduce risks. The domain registration is transparent and consistent with the website's age but lacks detailed registrant information. Overall, the site presents moderate technical implementation but poor privacy and security compliance, resulting in a low trustworthiness score.

P

Bdsm Porno Fetish Videos - Alma

porntubely.com

59

Porntubely.com is an adult content website specializing in BDSM and fetish videos, offering users the ability to watch and download free videos. The platform appears to be a user-generated content site with video hosting and sharing features, targeting an adult audience interested in niche fetish content. The website uses modern web technologies such as Laravel Livewire and Alpine.js, and is hosted with DNS services provided by Cloudflare. The domain was registered in late 2022, consistent with a relatively new entrant in the adult media space. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices.

S

Scat Porno Fetish Video Toilet - Alma

scattoilet.cc

54

The website 'Scat Porno Fetish Video Toilet' is an adult content platform specializing in scat and toilet fetish videos and user-generated stories. It targets an adults-only audience interested in niche fetish content. The site offers a content publishing model with community features such as voting and commenting but lacks visible business or legal entity information. Technically, the site uses modern JavaScript frameworks including Laravel Livewire and Alpine.js, with integration of Google Fonts and analytics services like Google Analytics and Yandex Metrika. The site is mobile optimized with basic SEO and accessibility features but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS and CSRF tokens but missing explicit security headers and incident response information. The domain WHOIS is privacy protected, which is typical for adult content sites, but no registrant or company details are disclosed, reducing trustworthiness. Overall, the site is functional but lacks transparency and compliance documentation, which impacts its credibility and privacy compliance.

2

Categories | 2hotmilfs.com

2hotmilfs.com

45

2hotmilfs.com is an adult entertainment website specializing in MILF and mature pornographic video content. The site offers categorized video listings and links to various partner adult sites, targeting an adults-only audience. The business operates with a small-scale model, focusing on free streaming and affiliate linking within the adult niche. Technically, the site uses basic modern frontend technologies such as Alpine.js and Font Awesome, with moderate mobile optimization and basic SEO practices. However, the site lacks critical privacy, cookie, and terms of service policies, and does not provide contact or security incident response information, which negatively impacts its compliance and trustworthiness. Security posture is weak due to missing HTTPS/SSL details and absence of security headers. Overall, the site presents basic content quality and technical implementation but falls short in privacy compliance and business credibility.

D

Domains By Proxy, LLC

thiswayyy.com

75

Candy AI is a technology company specializing in AI-driven personal companions, offering chat, video, and voice interaction capabilities. The platform targets individuals seeking virtual relationships and personalized AI experiences, leveraging multimedia content and character creation features. The business operates on a freemium model with premium subscriptions and token purchases, positioning itself in a niche market with a moderate size and US-based operations. Technically, the website employs modern web technologies including Ruby on Rails, Alpine.js, and integrates advanced analytics and affiliate tracking tools. The infrastructure is supported by Cloudflare for DNS and CDN services, ensuring reliable performance and security. Security posture is solid with HTTPS enforcement, CSRF protection, and reCAPTCHA integration, though improvements in security headers and accessibility are recommended. Privacy compliance is basic with presence of privacy and cookie policies, but lacks advanced GDPR indicators and direct contact information. Overall, the website is professional and functional with moderate trustworthiness and a good user experience.

S

Sex Simulator : Meilleur Simulateur de Sexe 3D en Ligne

sex-simulator.net

52

Sex-Simulator.net is an adult-oriented website offering interactive 3D sex simulation games playable directly in web browsers without downloads. The site targets adult users seeking realistic and taboo-free adult gaming experiences, operating on a freemium business model with a limited free trial followed by paid subscriptions. Technically, the site employs modern frontend technologies including Tailwind CSS and Alpine.js, and integrates popular analytics tools such as Google Analytics and Yandex Metrika. The website is mobile optimized and provides a good user experience with clear navigation and rich multimedia content. However, the security posture is moderate due to the absence of visible security headers and lack of cookie consent mechanisms despite tracking scripts. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is functional and professionally designed but would benefit from improved privacy compliance and enhanced security practices.

E

EverAI Limited

candy.ai

72

Candy AI operates as an immersive AI companion platform offering personalized virtual characters with chat, voice, image, and video interaction capabilities. The company targets users seeking companionship, emotional support, creative storytelling, and AI enthusiasts exploring conversational AI. Founded in 2017 and legally registered as EverAI Limited in Malta, Candy AI maintains a niche market position with a freemium business model supported by subscriptions and token purchases. The platform is multilingual and provides a modern, engaging user experience with strong branding consistency and trust signals such as GDPR compliance and encrypted transactions. Technically, Candy AI leverages a modern web stack including Ruby on Rails backend, Alpine.js, jQuery, and advanced analytics tools like Mixpanel and New Relic. The site is hosted behind Cloudflare CDN and DNS, ensuring good performance and security. The platform is mobile-optimized and implements progressive web app features, enhancing accessibility and user engagement. SEO and accessibility practices are well implemented, contributing to excellent content quality and navigation clarity. From a security perspective, the website enforces HTTPS, uses CSRF tokens, integrates reCAPTCHA v3 for bot mitigation, and employs domain registration protections. While explicit security headers and a public security policy are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by clear company information, contact details, and active social media presence. Overall, Candy AI presents a mature, professional, and secure online presence with a strong focus on user privacy and experience. Strategic improvements could include publishing explicit security headers, a vulnerability disclosure policy, and incident response information to further enhance trust and security transparency.

E

EverAI Limited

candyai.gg

71

Candy AI is a specialized AI companion platform offering personalized virtual characters with chat, voice, image, and video interaction capabilities. The company, EverAI Limited, operates from Malta and has established a mature online presence since 2017. The platform targets users seeking companionship, emotional support, creative storytelling, and AI exploration, leveraging a freemium subscription model with token-based purchases. Technically, the website employs modern JavaScript frameworks, PWA features, and integrates advanced analytics and monitoring tools such as Mixpanel and New Relic. Security practices include HTTPS enforcement, reCAPTCHA v3 integration, and encrypted transactions, although formal security policies and incident response disclosures are absent. Overall, the site demonstrates good design, usability, and compliance with GDPR, supported by clear contact channels and privacy protections.

H

HostZealot

hostzealot.com

72

HostZealot is a technology company specializing in providing a wide range of hosting services including dedicated servers, VPS, colocation, domain registration, SSL certificates, and VPN solutions. The company targets businesses and individuals seeking reliable and scalable hosting infrastructure with a global presence indicated by multiple data center locations. Their business model focuses on offering comprehensive hosting solutions with 24/7 support and competitive uptime guarantees. Technically, the website employs modern web technologies such as Alpine.js and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. However, some areas like accessibility and SEO could be further enhanced. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens, but lacks important security headers and published security policies, which are recommended for improved trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and service offerings appear professional and comprehensive. Overall, the site demonstrates moderate technical maturity and security posture but requires improvements in privacy compliance and domain transparency to enhance business credibility and user trust.

V

Vipbook.com.br

vipbook.com.br

51

Vipbook.com.br operates as a specialized online platform offering verified luxury escort advertisements primarily targeting the São Paulo region in Brazil. The website provides categorized listings and user registration features, including social login options via Twitter and Google. The platform emphasizes profile verification through documentation and video authorization to ensure authenticity. Technically, the site employs modern frontend technologies such as Laravel Livewire, Tailwind CSS, jQuery, and various JavaScript libraries, hosted behind Cloudflare for performance and security benefits. Security posture is adequate with HTTPS enabled and secure form handling, but lacks explicit security headers and cookie consent mechanisms, which are areas for improvement. Business credibility is moderate due to the niche market focus and presence of trust signals, although explicit contact information is not provided. Overall, the site is functional, professionally designed, and moderately compliant with privacy standards.

Crushfling.com is an adult-oriented social platform focused on connecting users for casual dating, sexting, and related interactions via popular messaging apps. Founded in 2021, it offers free access with features such as profile browsing, messaging, and interest-based matching. The platform targets adults seeking casual and consensual relationships, positioning itself as a niche player in the casual dating market. Technically, the site employs modern web technologies including Alpine.js, Livewire, jQuery, and Swiper.js, with hosting and DNS services provided by NameSilo and Cloudflare respectively. The site is mobile-optimized and provides a generally good user experience with clear navigation and responsive design. Security posture is moderate; HTTPS is enforced and a Content-Security-Policy header is present, but DNSSEC is not enabled and other security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The WHOIS data is consistent with the business age and shows no privacy protection, indicating transparency in domain registration. However, the presence of external links to suspicious affiliate domains without clear disclosure poses a risk to user trust. Overall, the site is functional and professionally designed but requires improvements in privacy compliance, security headers, and transparency around advertising partners to enhance trust and compliance.

B

Find Local Escorts, Massage Parlours & Strip Clubs | BunnyAgent

bunnyagent.com

66

BunnyAgent.com operates as an online classified ads platform specializing in adult services such as local escorts, erotic massages, strip clubs, and live cams. The website targets adults seeking quick and local access to these services, positioning itself as a leading platform with a large volume of listings and a user-friendly interface. The business appears to be relatively new, founded in 2023, and maintains a medium-sized operational scale. Technically, the site leverages modern web technologies including Laravel's Livewire, Alpine.js, Tailwind CSS, and Fathom Analytics for privacy-focused tracking. Hosting and DNS are managed via Cloudflare, providing robust HTTPS support and performance benefits. However, DNSSEC is not enabled, and security headers are absent, indicating room for security enhancements. The site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts compliance and trust. WHOIS data is consistent with the business age and shows no privacy protection, supporting legitimacy. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

P

Privacy service provided by Withheld for Privacy ehf

vrninja.tv

53

VRNinja.tv is an adult entertainment platform specializing in virtual reality pornographic content, offering over 50,000 videos including premium and free scenes. The site targets adult users aged 18 and above, providing a broad catalog of VR scenes, pornstars, categories, studios, and VR games. The business operates in the media sector and was established in 2021, with domain registration protected by a privacy service based in Iceland. Technically, the website employs modern frontend technologies such as Alpine.js and Laravel Livewire, with good SEO practices including structured data and multilingual support. However, privacy and cookie policies are not explicitly found, and no direct contact information is provided, which may affect compliance and user trust. Security posture is moderate with some best practices like age verification and domain transfer protection, but lacks visible security headers and DNSSEC. Overall, the platform is functional and professionally designed but would benefit from enhanced privacy compliance and security transparency.

S

sextflirt.com

sextflirt.com

57

Sextflirt.com operates as a niche adult content platform specializing in user-submitted nude posts linked to social media usernames such as Snapchat, Kik, Telegram, and others. The site targets adults interested in sexting and sharing explicit content, monetizing primarily through advertising and affiliate marketing. The platform offers browsing, search, and filtering capabilities, with a focus on user-generated content and community engagement. The business appears small and has been active since 2017, with a moderate level of branding consistency and basic content quality.

M

MissAV | Watch HD JAV Online | Free & High Quality AV

missav.ws

62

MissAV is an adult entertainment website specializing in streaming high-definition Japanese adult videos (JAV) with multilingual support including English, Chinese, Japanese, and others. The platform offers free access to a large library of over 100,000 videos with daily updates and optional VIP membership upgrades. The website targets adult viewers interested in Japanese AV content and positions itself as a niche player in the adult streaming market. Technically, the site uses modern web technologies such as Alpine.js for reactive UI, lazy loading for performance optimization, and integrates Google Analytics and Google Tag Manager for tracking. Security measures include HTTPS enforcement and Google reCAPTCHA v3 for form protection, but the absence of visible security headers and privacy policies indicates room for improvement. The domain uses privacy-protected WHOIS registration, which is common in adult content sites but reduces transparency. Overall, the site provides a good user experience and content relevance but lacks in privacy compliance and explicit business credibility disclosures.

S

Spaceship, Inc.

sexcelebrity.net

59

SexCelebrity.net is an adult content platform specializing in AI-generated deepfake pornographic videos featuring popular celebrities. The site offers both free and premium content, targeting adult users interested in deepfake entertainment. The business operates under the domain registered to Spaceship, Inc. since 2018, indicating a stable presence in this niche market. The platform leverages modern frontend technologies such as Tailwind CSS and Alpine.js, and employs analytics tools including Matomo and Google Analytics to monitor user engagement. While the site is technically sound with HTTPS enabled and a consistent domain registration, it lacks critical privacy and security policies, including privacy, cookie, and terms of service documents, as well as contact information for users or security incident reporting. This absence impacts the site's compliance posture and trustworthiness.

D

Durham University

dur.ac.uk

65

Durham University operates as a prestigious higher education institution in the United Kingdom, offering a wide range of undergraduate, postgraduate, and research programs. The website reflects a mature digital presence with comprehensive content targeting prospective students, current students, researchers, and alumni. The institution emphasizes global partnerships, student support, and research impact, positioning itself as a leading academic entity. The domain's long registration history and direct registration with Nominet reinforce its legitimacy and trustworthiness. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and tracking tools, and is optimized for mobile and accessibility standards. However, explicit privacy, cookie, and security policies are not evident in the provided content, which may impact compliance and user trust. Security posture is strong with HTTPS and best practices observed, but could be improved with clearer policy disclosures and security headers. Overall, the website is professional, content-rich, and credible, with room for enhanced privacy transparency and incident response readiness.

T

The Video Consortium

videoconsortium.org

53

The Video Consortium is a global nonprofit organization dedicated to connecting and supporting nonfiction filmmakers and video journalists worldwide. Founded in 2020, it operates as a medium-sized entity within the media and nonprofit sectors, providing community resources, events, programs, and grants to empower documentary storytellers. The website reflects a professional and consistent brand presence with a clear mission to facilitate impactful storytelling through video. Technically, the site leverages modern web technologies including Craft CMS, Alpine.js, and multiple analytics platforms such as Google Analytics, Microsoft Clarity, and Plausible. Hosting and media assets are managed via reputable providers like DigitalOcean and GoDaddy. Security posture is strong with HTTPS enforcement, CSRF protections, and security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy, though terms of service and vulnerability disclosure policies are absent. Overall, the site is trustworthy, well-structured, and serves its nonprofit mission effectively.

P

Privacy Protect, LLC (PrivacyProtect.org)

fiplatina.press

51

FIP Latina is a Spanish-language media platform focused on journalism and union-related news and campaigns in Latin America. It serves as a regional voice for journalists, providing news articles, union updates, and resources. The website is professionally designed with modern frontend technologies such as Tailwind CSS and Livewire, hosted on DigitalOcean. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is decent with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Contact information is limited to a contact form without direct emails or phone numbers. Social media presence is strong with official Facebook, Instagram, Twitter, and YouTube accounts. The domain is privacy protected, which is justified given the site's focus on journalism and sensitive topics. Overall, the website is a legitimate and functional media platform with room for improvement in privacy and security transparency.

A

adorsys GmbH & Co. KG

adorsys.de

59

adorsys GmbH & Co. KG is a specialized boutique IT architecture and software engineering consultancy focused on delivering secure, compliant, and innovative digital solutions primarily for highly-regulated industries such as banking and finance. Established in 2006, the company positions itself as a trusted sparring partner for management teams, emphasizing quality, compliance, and technological excellence. Their service portfolio spans secure software engineering, business analysis, cloud technologies, digital finance, data & AI, API management, cybersecurity, blockchain, and global delivery capabilities. Technically, the website is built on WordPress with modern enhancements including Yoast SEO for search optimization, WP Rocket for performance, and Alpine.js for frontend interactivity. Hosting and domain registration are managed via Amazon Registrar and AWS DNS infrastructure, ensuring reliable and scalable hosting. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, supported by structured data and comprehensive content. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized changes. While no critical vulnerabilities or exposed sensitive data were detected, the absence of DNSSEC, security headers, and explicit incident response or vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Overall, adorsys presents a mature, professional, and trustworthy digital presence aligned with its business focus. Strategic recommendations include enhancing DNS security, implementing security headers, publishing vulnerability disclosure information, and adding cookie consent to further strengthen compliance and trust.

B

B2F Srl

b2f.it

49

B2F Srl is a specialized fintech digital solution provider based in Italy, with nearly two decades of experience integrating financial services into sales processes through pay-per-use digital platforms. Their offerings target both territorial networks (companies, agents, points of sale) and virtual networks (e-commerce sites, marketplaces), providing customizable and versatile fintech integration solutions. The company positions itself as a game changer in the fintech arena, emphasizing simplicity, customization, and versatility in its platform architecture. Technically, the website employs modern frontend technologies including Tailwind CSS and Alpine.js, with Google Tag Manager and Iubenda for analytics and cookie consent management. The site is mobile optimized and SEO friendly, with good performance and accessibility basics. Security practices include HTTPS enforcement and CSRF protection on forms, though formal security policies and incident response details are not published. The security posture is solid with no detected vulnerabilities or exposed sensitive data, but could be improved by adding security headers and formal security documentation. Privacy compliance is strong with comprehensive privacy and cookie policies and active consent mechanisms. Business credibility is supported by clear company information, professional content, and trust indicators. Overall, B2F presents a professional, secure, and compliant online presence aligned with its fintech business focus, with recommendations to enhance security transparency and accessibility for further trust and compliance improvements.

V

VIVID TECH

vividtech.eu

58

VIVID TECH is a technology company specializing in smart shelf labels with interactive full-color displays designed to enhance retail environments by increasing customer engagement and sales. Their solutions target a variety of retail sectors including airports, pharmacies, tourist shops, wine and beverage stores, restaurants, home & DIY stores, shoes & apparel, hotels, and electronics stores. The company offers a B2B model focusing on hardware and software integration, including API connectivity and customer analytics. The website demonstrates a moderate level of digital maturity, employing modern JavaScript libraries such as Alpine.js, Flowbite, and FancyApps UI, alongside analytics tools like Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and content relevance, though some accessibility features could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, limiting the ability to fully verify domain registration details. Overall, the website presents a professional and trustworthy front with clear contact information and social media presence. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and privacy compliance to strengthen trust and compliance posture.

S

SIA Hidronex

hidronex.lv

44

Hidronex is a Latvian-based company specializing in hydraulic system maintenance, repair, and supply of hydraulic products. With over 10 years of experience, they serve a regional market including 15+ countries and have completed over 250 projects. They hold official distributor status for Parker Hannifin products and maintain strategic partnerships with Italian manufacturers Vitillo and MP Filtri, positioning them as a trusted regional player in the manufacturing and hydraulic services sector. The website is professionally designed, multilingual, and provides detailed information about their services and products, targeting industrial and business customers requiring hydraulic solutions. Technically, the website employs modern JavaScript frameworks like Alpine.js and integrates analytics tools such as Yandex Metrika and Google Analytics via Google Tag Manager. The site is mobile-optimized and SEO-friendly with clear navigation. However, some technical improvements are recommended, including enhanced security headers and accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No privacy or cookie policies are present, which impacts GDPR compliance. The absence of WHOIS data due to query limits reduces confidence in domain legitimacy verification, though the business information on the site appears consistent and credible. Overall, the website presents a solid business presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response or vulnerability disclosure information to strengthen trust and compliance.

D

Datadog

sqreen.io

79

Datadog is a leading technology company specializing in cloud monitoring and security solutions. Their App and API Protection product offers comprehensive security features for web applications and APIs, targeting security and DevOps teams. The website reflects a mature, enterprise-grade SaaS platform with strong branding and professional content. Technically, the site uses modern frameworks like Tailwind CSS and Alpine.js, integrates multiple analytics and marketing tools, and is optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though privacy compliance could be improved by adding explicit privacy and terms of service pages. The absence of WHOIS data limits domain trust analysis but given the brand recognition, the domain is likely legitimate. Overall, the website is professional, secure, and well-positioned in the market.

D

Developer conferences 2025 / 2026

devternity.com

63

dev.events is a specialized online platform dedicated to curating and listing developer conferences, meetups, and hackathons globally for the years 2025 and 2026. The platform targets software developers, tech leads, and IT professionals seeking comprehensive event information. It positions itself as a trusted, ad-free resource curated by the tech community. Technically, the website employs modern frontend technologies such as htmx, Alpine.js, Flatpickr, and Choices.js, ensuring a responsive, fast-loading, and accessible user experience. The site is hosted behind Cloudflare DNS and CDN services, enhancing performance and security. Security-wise, the site enforces HTTPS and uses domain privacy protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is currently weak due to the absence of privacy and cookie policies and consent mechanisms. Business credibility is supported by consistent branding, structured data usage, and social media presence, though direct contact information is missing. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

D

Durham University

durham.ac.uk

66

Durham University is a well-established higher education institution in the United Kingdom, offering a broad range of undergraduate, postgraduate, and international study programs. The website reflects a strong market position with a focus on research impact, student support, and global partnerships. The domain's long registration history and direct registration with Nominet reinforce its legitimacy. Technically, the site employs modern web technologies including Alpine.js, Google Tag Manager, and various analytics and tracking tools, managed via the Terminalfour CMS platform. The website is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure form practices but lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance in privacy and security disclosures.

B

Home Page for Latvian LV

bklatvia.lv

64

The website bklatvia.lv operates as an e-commerce platform specializing in security and surveillance equipment, targeting primarily Latvian businesses and consumers. It offers a range of products including video surveillance systems, alarm systems, and access control solutions. The site is built on Magento with a modern Hyvä UI frontend, leveraging Alpine.js and various third-party marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The technical infrastructure demonstrates a moderate level of digital maturity with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent management, indicating awareness of privacy regulations. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible security or incident response policies, suggests room for improvement in compliance and transparency. The WHOIS data could not be retrieved due to query limits, limiting the ability to fully assess domain legitimacy and registration consistency. Overall, the website presents a professional and functional e-commerce presence with moderate security posture and privacy compliance. Strategic enhancements in policy disclosures, security headers, and incident response readiness would strengthen trust and regulatory adherence.

A

AS Capital - Datortehnika, IT risinājumi, Serviss

capital.lv

65

AS Capital is a Latvian IT company specializing in providing comprehensive IT hardware, solutions, and servicing for businesses and private individuals. The company positions itself as a full-service IT partner offering standard and custom IT solutions, including authorized service for major brands like Apple, Dell, and Lenovo. Their market presence is well-established in Latvia, targeting a broad range of business clients and consumers with a focus on quality and reliability. The website reflects a professional e-commerce platform built on Magento with a modern Hyvä theme, supporting both desktop and mobile users effectively. The company leverages multiple marketing and analytics tools such as Google Tag Manager, Hotjar, TikTok Pixel, LinkedIn Insight, and Klaviyo to optimize user engagement and marketing efforts. Security posture is solid with HTTPS enforced and client-side form validation, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent mechanisms but lacks a clearly accessible privacy policy page. Overall, the website and business appear credible and professional, with moderate technical maturity and good user experience.

O

OpenCraft

opencraft.com

60

OpenCraft is a specialized company focused on Open edX® platform design, development, hosting, and support services. Established in 2011, they have positioned themselves as an official Open edX® Partner with a global client base including prestigious academic institutions and corporations. Their key offerings include fully managed hosting, bespoke learning solutions, and full product design services tailored to online education providers. The website reflects a professional and consistent brand image with high-quality content and clear navigation aimed at learning providers, academic institutions, corporations, and governments. Technically, the site is built on WordPress using Oxygen Builder, with modern JavaScript libraries such as Alpine.js and jQuery, and integrates Matomo analytics and Google reCAPTCHA for security and tracking. Hosting is managed via Gandi SAS, consistent with the domain registration data. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy, professional, and well-positioned in the education technology sector.

D

DTS LTD

dts.lv

67

DTS LTD operates a professional e-commerce platform specializing in original OEM auto spare parts for a wide range of car manufacturers. With over 25 years of experience and more than 500 active B2B clients, the company positions itself as a reliable supplier offering fast worldwide deliveries and technical expertise. The website is well-structured, multilingual, and provides comprehensive catalogs and inquiry services to assist customers in finding genuine parts efficiently. Technically, the website employs modern JavaScript libraries such as jQuery, Flatpickr, Font Awesome, Alpine.js, and Swiper.js, alongside analytics tools like Google Analytics and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism implemented via Usercentrics CMP. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices including secure forms with CSRF tokens and no exposed sensitive data. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data due to query limits limits full domain legitimacy verification, but the website content and trust indicators suggest a legitimate and established business. Overall, DTS LTD presents a strong digital presence with professional design, solid technical infrastructure, and good privacy compliance. Strategic improvements in security transparency and WHOIS data availability would further enhance trust and compliance.

B

Bauer Hockey, LLC

bauer.com

76

Bauer Hockey, LLC is a well-established company specializing in hockey equipment and apparel with over 90 years of market presence. The company operates a professional e-commerce website primarily targeting hockey players and enthusiasts, offering a wide range of products including sticks, gloves, pads, helmets, skates, base layers, bags, and apparel. The website is built on the Shopify platform, leveraging modern web technologies and multiple third-party marketing and analytics tools to enhance user experience and business intelligence. The technical infrastructure is robust, featuring a modern tech stack with integrations such as Google Tag Manager, Yotpo, Klaviyo, and Visual Website Optimizer. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, comprehensive security headers, and cookie consent mechanisms in place. However, the absence of publicly available WHOIS data for the main domain introduces some uncertainty regarding domain registration legitimacy. Overall, the website presents a secure and professional front for Bauer Hockey's e-commerce operations, with strong privacy compliance and extensive user tracking for marketing optimization. The lack of direct contact information and security policy pages suggests areas for improvement in transparency and customer trust. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilant third-party script audits to mitigate potential vulnerabilities.

S

SiteSpeakAI

sitespeak.ai

60

SiteSpeakAI is a technology startup founded in 2023 that offers an AI-powered customer support chatbot builder. Their platform enables businesses to create custom-trained GPT-like AI agents that can be deployed across multiple platforms including websites, Slack, Telegram, and Discord to reduce support tickets and improve user experience. The company positions itself as an innovative provider in the AI customer support automation market, targeting businesses seeking to automate and enhance their customer service operations. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates analytics via PostHog and New Relic, and uses Cloudflare for DNS services, indicating a mature and performant digital infrastructure. Security-wise, the site enforces HTTPS and uses domain transfer protection, but lacks visible security policies, privacy and cookie policies, and incident response information, which are areas for improvement. Overall, the website is professional and functional but would benefit from enhanced transparency and compliance documentation to improve trust and privacy posture.

J

Jazz Pesulad OÜ

jazzpesulad.ee

51

Jazz Pesulad OÜ operates a well-established car wash chain in Estonia, providing a variety of vehicle cleaning services including self-service, hand wash, and drive-through options. The company has a strong market presence with 23 locations across multiple cities and serves thousands of customers daily. Their business model includes loyalty and prepaid card programs to enhance customer retention and convenience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and standard security headers, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive digital maturity profile.

The website 'Maardu 45' serves as a dedicated platform for celebrating the 45th anniversary of Maardu city in Estonia. It provides residents and visitors with information about the city's history, culture, events, and local government contacts. The site is positioned as a local government information portal aimed at community engagement and city promotion. Technically, the site leverages a modern tech stack including Alpine.js, jQuery, Leaflet for maps, and multiple analytics tools such as Google Analytics and Matomo, hosted likely by Telia Eesti AS. The website is mobile optimized and offers a good user experience with clear navigation and consistent branding. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies, which are important for GDPR compliance. The domain is very recently registered, which is somewhat unusual for a city site but may reflect a new dedicated event domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

D

DinoMatic

dinomatic.com

68

DinoMatic is a specialized technology company providing WordPress themes, plugins, and custom CMS solutions tailored for gambling affiliate marketers focusing on casino, sports betting, and Forex niches. The company offers a comprehensive toolkit including starter websites and custom development services, positioning itself as a niche leader with a strong emphasis on performance, SEO, and affiliate conversion optimization. The website is professionally designed with excellent content quality, clear navigation, and mobile responsiveness, targeting small to medium-sized affiliate businesses. Technically, the site uses modern web technologies including Tailwind CSS and Alpine.js, hosted with Cloudflare, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, DinoMatic presents a trustworthy and credible online presence with a high level of professionalism and user engagement.

F

FORT Legal

fortlegal.com

52

FORT Legal is a reputable Lithuanian law firm established in 2013, specializing in a broad range of legal services including corporate advisory, finance, real estate, and dispute resolution. The firm emphasizes client-centric service, practical solutions, and long-term partnerships. Their website reflects a professional and modern digital presence using contemporary frontend technologies such as Alpine.js and Tailwind CSS, hosted on a provider indicated by their nameservers. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with no visible advanced security headers or DNSSEC enabled, suggesting room for improvement in technical security measures. The domain registration is consistent with the firm's history, enhancing credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

O

OBRAZ – Obránci zvířat, z. s.

albertovakrutost.cz

54

The website albertovakrutost.cz is a campaign platform run by the non-profit organization OBRAZ – Obránci zvířat, z. s., focused on raising awareness and advocating against animal cruelty in supermarket Albert's chicken supply chain in the Czech Republic. The site provides detailed information about the campaign, including calls to action such as signing petitions. The organization positions itself as an animal welfare advocate with a clear mission and target audience of concerned consumers and animal rights supporters. Technically, the site uses modern frontend technologies including Vue.js, Alpine.js, and SwiperJS, supported by analytics and tracking tools like Google Analytics, Microsoft Clarity, and Ecomail. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies presented in Czech language. Contact information is transparent, including emails, phone number, and physical address. No terms of service or vulnerability disclosure policies were found. The domain is newly registered but consistent with the campaign's recent launch. Overall, the website is professional, trustworthy, and well-structured for its advocacy purpose.

S

Spliethoff

spliethoff.com

76

Spliethoff is a well-established Dutch shipping company specializing in worldwide dry cargo ocean transport. With a fleet of over 50 modern vessels and a history dating back to 1921, the company positions itself as a reliable and high-quality partner in the maritime transport sector. Their website reflects a professional and comprehensive digital presence, targeting businesses requiring specialized cargo shipping services across various market segments including bulk cargo, containers, metals, and project cargo. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Swiper JS, alongside Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Privacy compliance is evident through a cookie consent banner and a detailed privacy policy, indicating adherence to GDPR standards. From a security perspective, the site uses HTTPS and implements secure forms with anti-forgery tokens. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. The absence of WHOIS data transparency reduces domain trust slightly, though the website content and business information strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security posture.

C

CyberCube

cybcube.com

72

CyberCube is a leading provider of cyber risk analytics and modeling solutions tailored for the insurance market. The company offers a suite of products and services including underwriting tools, portfolio management, consulting, and event response services. Their technology leverages artificial intelligence and extensive data to quantify cyber risk and support decision-making for insurers, reinsurers, brokers, and investment entities. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting industry professionals. Technically, the site is built on HubSpot CMS with modern JavaScript frameworks and integrates multiple analytics and marketing tools. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable gap, reducing domain transparency and trust slightly. Overall, CyberCube presents as a credible and authoritative player in the cyber risk analytics space with a well-executed online presence.

P

PoliLingua

neontranslations.com

70

PoliLingua is a professional translation agency established in 2002, offering a wide range of language services including translation, localization, voice-over, subtitling, and interpreting. The company serves corporate, government, and private sector clients globally, with specialization in over 100 languages and multiple industry sectors. The website demonstrates a mature digital presence with comprehensive service descriptions, certifications, and client testimonials, positioning PoliLingua as a reputable player in the language services market. Technically, the website employs modern JavaScript frameworks such as Alpine.js and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices, although some HTTP security headers are not explicitly detected. Cookie consent and privacy policies are implemented with GDPR compliance. From a security perspective, PoliLingua shows a solid posture with ISO 17100 certification indicating quality management. However, the absence of WHOIS registration data and lack of visible contact emails or incident response information slightly reduce trust. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, PoliLingua presents a professional and trustworthy online presence with minor areas for improvement in transparency and security disclosures. The domain WHOIS inconsistency warrants further verification to ensure full legitimacy.

Avor Kindlustusmaakler OÜ is an established insurance brokerage firm based in Estonia, founded in 2010. The company specializes in providing insurance brokerage services to both private individuals and corporate clients, focusing on risk reduction, insurance planning, contract management, and claims assistance. Their market position is that of a trusted intermediary registered with the Estonian financial supervisory authority, offering tailored insurance solutions. The website is professionally designed, primarily in Finnish, and targets the Estonian market with clear navigation and relevant content. Technically, the site uses modern web technologies including Alpine.js, jQuery, and Google Analytics, hosted on the Voog CMS platform, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the website reflects a credible and professional business with appropriate digital maturity and compliance awareness.

A

Advokaadibüroo Concordia

concordia.ee

45

Advokaadibüroo Concordia is an established Estonian law firm founded in 2010, providing legal services primarily in Estonia and across the European Union through its membership in the European Law Firm network. The firm targets clients requiring professional legal representation and consulting services with a cross-border reach within the EU. The website reflects a professional and consistent brand image with clear contact details and multilingual support (Estonian and English). Technically, the website employs a modern technology stack including Laravel Livewire, Alpine.js, jQuery, and integrates Google reCAPTCHA for bot protection. The site is hosted by Zone Media OÜ, a known Estonian hosting provider, and uses HTTPS with a valid SSL configuration. Performance and mobile optimization are good, though accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph properties. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF token usage, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, which could be improved to enhance security posture. Overall, the website is trustworthy and professionally maintained with a strong domain registration history consistent with the business claims. Recommendations include enhancing security headers, publishing formal security and incident response policies, and adding a vulnerability disclosure page to improve transparency and security maturity.

O

Onboardee.io

onbee.app

64

Onboardee.io operates the Onbee.app platform, a SaaS solution focused on digitizing and modernizing employee onboarding, offboarding, and HRIS processes. The platform targets HR professionals and team leaders, offering features such as onboarding plan templates, digital employee cards, contract templates with digital signatures, and integrations with popular ATS and SSO providers. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, it leverages modern web technologies including Alpine.js and Astro framework, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers properly configured, though explicit privacy and terms policies are missing. The domain uses privacy protection in WHOIS, which is common for startups but limits transparency. Overall, the platform appears legitimate and well-positioned in the HR technology niche.

N

Nyrstar

nyrstar.com

59

Nyrstar is a well-established company specializing in the manufacturing and processing of zinc, lead, and other metals with a strong commitment to sustainability. The website presents a professional and comprehensive overview of their operations, products, and corporate responsibility initiatives, targeting industrial customers and partners in the metals and mining sectors. The company positions itself as a leading player with over 150 years of history, although domain registration data is not available to confirm this age. Technically, the website uses modern JavaScript frameworks such as Alpine.js and integrates analytics and tracking tools like Google Analytics and Hotjar. The presence of a cookie consent banner indicates some level of privacy compliance, but explicit privacy and terms of service policies are not found in the provided content. Security posture appears adequate with HTTPS usage and CSRF protections, but lacks visible security headers and incident response information. Overall, the website is functional and professional but would benefit from improved transparency in domain registration, privacy policies, and contact information to enhance trust and compliance.

T

Technische Hochschule Nürnberg Georg Simon Ohm

studiengangstest.de

51

The website studiengangstest.de is an official online self-assessment platform operated by the Technische Hochschule Nürnberg Georg Simon Ohm. It provides prospective students with tools to evaluate their suitability and motivation for various study programs, supporting their decision-making process. The platform is clearly targeted at future students, especially those interested in studying at TH Nürnberg, and offers both general and subject-specific tests. The business model focuses on educational support and guidance rather than commercial services. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Font Awesome, ensuring a responsive and visually consistent user experience. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is present but minimal. No CMS or hosting provider details were explicitly identified from the content. From a security perspective, the site lacks visible security headers and does not display cookie consent mechanisms, which are important for GDPR compliance. No forms or sensitive data collection points were detected on the main page, reducing immediate risk exposure. WHOIS data indicates a consistent and legitimate domain registration aligned with the educational institution. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and security posture. Overall, the website is professionally designed and trustworthy for its educational purpose but would benefit from enhanced privacy compliance features and security best practices to strengthen user trust and regulatory adherence.

S

SelectLeaders

selectleaders.com

73

SelectLeaders operates as a specialized commercial real estate job network, providing a platform for job seekers and employers within the commercial real estate industry. The website offers services such as job search, resume uploads, and job postings across multiple real estate associations, positioning itself as a market leader in this niche. The affiliation with Bisnow enhances its credibility and market reach. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and integrates analytics tools like Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contacts. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but does not detract significantly from the overall legitimacy given the professional presentation and business context. Overall, the site demonstrates a solid security posture and compliance with privacy regulations, though improvements in transparency and security headers are recommended.

C

CloserStill Media

cloudexpoeurope.de

72

Tech Show Frankfurt 2025, organized by CloserStill Media, is a leading technology event focusing on cloud and AI infrastructure in the DACH region. The website presents a professional and content-rich platform showcasing event details, speakers, exhibitors, and sponsors. The technical infrastructure leverages modern JavaScript libraries and analytics tools, indicating a mature digital presence. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit privacy and cookie policies, which impacts compliance. Overall, the site is credible and well-positioned in its market segment but would benefit from enhanced privacy and security disclosures.

C

Click Guardian

clickguardian.app

64

Click Guardian is a UK-based technology company specializing in click fraud detection and protection services for PPC advertising campaigns on platforms such as Google Ads and Bing Ads. Established in 2015 and operating under the parent company Further Forward Innovation Ltd., it offers subscription-based SaaS solutions designed to monitor, detect, and automatically block fraudulent clicks from competitors, bots, and malicious users. The company positions itself as a market leader in the UK with a strong focus on protecting advertising budgets and improving campaign ROI for businesses. Technically, the website employs modern web technologies including Alpine.js for frontend interactivity, PostHog and Google Tag Manager for analytics, and Intercom for customer engagement. Hosting and asset delivery leverage Amazon S3 and Cloudflare CDN, ensuring fast performance and global availability. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses security best practices such as asynchronous loading of trusted third-party scripts and CAPTCHA challenges via Cloudflare Turnstile. However, explicit security headers like Content-Security-Policy are not visibly declared, and there is no public security policy or incident response information, which could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, Click Guardian presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security transparency would further enhance its risk posture and customer trust.

C

CSS Ship Services

css-shipservices.com

47

CSS Ship Services is a specialized offshore maritime recruitment company headquartered in Jersey, Channel Islands. Established in 2013, it offers recruitment and placement services across sectors such as ROV, seismic, survey, and maritime operations. The company targets both job seekers and maritime companies, providing a global network of personnel and emphasizing quality and client satisfaction. The website reflects a professional and consistent brand with clear navigation and relevant content tailored to its niche market. Technically, the site uses modern JavaScript frameworks and tools, including Vite, Alpine.js, and integrates Google Analytics and Klaviyo for marketing and analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and CSRF protection on forms, but lacks DNSSEC and security headers. Privacy compliance is partial, with a basic privacy policy but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

C

City Service

cityservice.eu

66

City Service is a property management and maintenance company focused on residential and commercial buildings, emphasizing sustainability and operational efficiency. The company operates in Lithuania and has several subsidiaries and partner companies, indicating a large organizational structure. The website is built on WordPress with modern frontend technologies and includes multilingual support. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers, privacy policies, and incident response information. Overall, the site is professional and functional but could improve in compliance and security transparency.