Security Directory

VERS69 is a small Latvian e-commerce business specializing in unisex skincare and cosmetic products, targeting women, men, and teenagers. The website is professionally designed with clear navigation and multilingual support, hosted on the Shopify platform. It integrates various third-party services for payments, shipping, marketing, and analytics, indicating a mature digital infrastructure for a small retailer. Security posture is strong with HTTPS and standard security headers, though explicit security policies and incident response information are absent. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the website presents a trustworthy and professional online storefront with room for improvement in transparency and contact availability.

A

Ascendo klīnika

ascendo.lv

45

Ascendo klīnika is a modern and professional healthcare provider based in Latvia, offering a wide range of medical services from preventive care to specialized treatments. The website targets local patients and emphasizes patient well-being and the use of advanced technologies to ensure effective and safe treatment outcomes. The site is well-branded and consistent, with a clear focus on healthcare services. Technically, the website uses modern web technologies including Font Awesome, Google Fonts, and Laravel's Ziggy routing helper, indicating a contemporary development approach. The site is mobile-optimized and includes a cookie consent mechanism, reflecting some compliance with privacy standards. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks visible security headers and published security policies, which could be improved. WHOIS data was unavailable due to query limits, but no suspicious indicators were found on the site. Overall, the website presents a trustworthy and professional image suitable for a healthcare provider.

D

Danone

danone.lv

66

Danone.lv is the Latvian localized website for Danone, a global food company. The site serves primarily as a corporate and informational platform targeting Latvian consumers and stakeholders. The website uses WordPress CMS and integrates Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. The content is basic and consistent with Danone's branding but lacks comprehensive privacy and contact information. Security posture is moderate with cookie consent implemented but missing key security headers and visible security policies. Overall, the site appears legitimate but would benefit from enhanced transparency and security practices to improve trust and compliance.

E

Ekvilibria SIA

ekvilibria.lv

52

Ekvilibria SIA operates as a specialized physiotherapy practice located in Ogre, Latvia, providing healthcare services including physiotherapy consultations, therapeutic exercises, massages, and medical taping. The company targets both children and adults, focusing on rehabilitation and improving physical well-being. The website reflects a small but professional healthcare provider with clear service offerings and pricing, staffed by certified physiotherapists. Technically, the website is built on Angular 15, uses modern web fonts, and is mobile optimized with good SEO practices. However, it lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The WHOIS data is unavailable due to query limits, but the website content and contact details suggest a legitimate business. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

S

SIA Jūrmalas Riepu centrs

riepucentrs.lv

59

SIA Jūrmalas Riepu centrs is a Latvian company specializing in tire sales and servicing, operating since 1998. The company offers a wide range of new and used tires for various seasons and vehicle types, supported by a physical service center in Jūrmala and an online store. They provide free delivery in Riga and surrounding areas and cater to both retail customers and wholesale clients such as tire service and auto repair shops. The website is well-structured, mobile-optimized, and uses modern web technologies including Google Tag Manager and Google Analytics for tracking and marketing purposes. Cookie consent mechanisms are implemented to comply with privacy regulations. However, WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website presents a professional and trustworthy image with clear contact details and business information.

OtilieHome is a small Latvian-based e-commerce retailer specializing in home textiles, decor, and design services such as curtain design. The website is built on the Shopify platform using a modern theme and integrates various marketing and analytics tools including Facebook Pixel and Shopify Analytics. The business targets Latvian and Finnish consumers interested in home decoration products. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with domain transfer protections, though DNSSEC is not enabled. Security policies and privacy compliance documentation are absent, which is a notable gap. Overall, the site presents a professional and trustworthy front for a niche retail business.

L

LUXEGELUK

luxegel.eu

68

LUXEGELUK is a newly established UK-based e-commerce business specializing in professional nail care products including gel polish, builder gels, and related accessories. The company also offers a nail academy and distributor opportunities, targeting nail professionals and businesses seeking quality nail products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party apps for enhanced user experience and sales optimization. The technical infrastructure is solid, with good mobile optimization and integration of payment solutions such as Shopify Payments and Apple Pay. Security posture is adequate with HTTPS and some security best practices, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent mechanisms present but no visible privacy or terms of service pages. Overall, the site presents a professional and trustworthy front for a small but focused retail business.

B

beautyfor.lv

beautyfor.lv

56

The website beautyfor.lv is an e-commerce platform focused on retailing beauty products primarily targeting the Latvian market. The site uses a modern OpenCart CMS with the Journal3 theme and integrates third-party payment widgets such as Klix Pay Later. The website design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content for its audience. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. The absence of WHOIS data due to query limits restricts full domain legitimacy assessment, but the site appears consistent with a small to medium-sized retail business in Latvia. Security posture is moderate with no visible security headers or incident response information, indicating room for improvement in security best practices. Overall, the site is functional and safe for general audiences but requires enhancements in privacy compliance and security transparency.

F

Fenikss Latvija: Premium kazino un sporta derības | Lielākā spēļu izvēle

feniksscasino.lv

50

Fenikss.lv is an online gambling and sports betting platform targeting Latvian users, offering a wide selection of casino games and sports betting options. The website positions itself as a premium service with the largest game selection in Latvia. Technically, the site is built using Angular framework and modern web technologies, but the landing page content is minimal, primarily showing a loading spinner and scripts, indicating a single-page application that likely loads content dynamically. Security posture is moderate with HTTPS implied but no visible security headers or privacy policies in the provided HTML. The absence of WHOIS data due to query limits limits the ability to fully assess domain legitimacy. Overall, the site appears functional but lacks transparency in privacy and contact information, which impacts trust and compliance.

T

Tapetenshop.lv

tapetenshop.lv

65

Tapetenshop.lv is a Latvian-based e-commerce retailer specializing in wallpapers, photowallpapers, and curtains, offering a wide catalog with over 6000 wallpaper options and thousands of curtain products. The company targets general consumers in Latvia and the Baltic region, providing fast delivery and quality assurance. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Latvian. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. No WHOIS data was available due to query limits, but the website's professional presentation and operational features indicate legitimacy. Overall, the site demonstrates a good balance of business functionality, technical implementation, and privacy compliance.

S

Sparnis DS

krievuautodalas.lv

56

Sparnis DS is a Latvian small business specializing in retail sales of auto spare parts and electrical components for vehicles manufactured in Russia, Belarus, and Ukraine. The company targets vehicle owners and repair shops requiring specialized parts for these regional car brands. The website presents a professional and consistent brand image with clear contact information and business registration details, supporting its credibility in the local market. Technically, the site uses modern JavaScript modules and React framework, integrates Google Maps, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. Privacy and cookie policies are comprehensive and GDPR compliant, including a consent mechanism. However, WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is trustworthy and functional but would benefit from enhanced security headers and WHOIS transparency.

O

ObiDog

obidog.lv

68

ObiDog is a Latvian-based small business specializing in dog training and pet product retail through an e-commerce platform powered by Shopify. The company positions itself as a partner for dog owners, offering high-quality, environmentally conscious pet products and educational services to improve pet wellbeing. The website is professionally designed with good mobile optimization and uses modern web technologies and analytics tools. Security posture is solid with HTTPS and form protection via hCaptcha, though explicit privacy and cookie policies are missing, which impacts compliance. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, ObiDog presents a trustworthy and niche-focused online presence with room for improvement in privacy compliance and security headers.

D

Diamond Sky

diamondsky.lv

41

Diamond Sky is a Latvian-based e-commerce retailer specializing in jewelry and accessories featuring premium Swarovski and Preciosa crystals. The website offers a broad product catalog including earrings, rings, bracelets, and gift cards, targeting consumers primarily in Latvia and the Baltic region. The business emphasizes quality, variety, and convenient payment options such as Klix Pay Later, Apple Pay, and Google Pay, positioning itself as a leading jewelry retailer in Latvia. Technically, the site is built on OpenCart with modern JavaScript and CSS frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure payment gateways, but lacks some security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but no visible cookie consent mechanism. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

S

SIA "Ēst!"

stockpot.lv

56

Stockpot is a small hospitality business based in Latvia, specializing in offering a diverse and affordable lunch menu inspired by various international cuisines. The company operates an online platform for takeaway and pick-up orders, targeting general consumers seeking quick and quality meals. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web technologies including Google Fonts and Font Awesome icons, with JavaScript ES modules for functionality. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, though additional security headers and explicit incident response policies are absent. WHOIS data could not be retrieved due to query limits, but the website content and business information appear consistent and legitimate. Overall, the site demonstrates a good balance of usability, privacy compliance, and business credibility, suitable for its hospitality sector niche.

P

Paade Mode

paademode.com

72

Paade Mode is a specialized e-commerce retailer focused on unique and trendy children's and women's clothing, operating primarily through a Shopify platform. The company has established a niche market presence with award-winning designs and a curated product offering targeting parents and gift buyers. The website demonstrates a mature digital infrastructure leveraging modern e-commerce technologies and marketing tools such as Klaviyo and Judge.me for customer engagement and analytics. Security posture is solid with HTTPS enforced, domain registration locked, and cookie consent mechanisms in place, although some improvements like DNSSEC and explicit security policies could enhance trust further. Overall, the business presents a professional and trustworthy online presence with good compliance to privacy regulations.

L

Latvijas Hemofilijas biedrība

hemofilija.lv

42

Latvijas Hemofilijas biedrība is a Latvian non-profit patient organization dedicated to supporting individuals with inherited blood coagulation disorders such as hemophilia and von Willebrand disease. Established in 1993, it provides educational resources, advocacy, and community support to patients and caregivers. The website serves as a comprehensive information hub in Latvian, offering guidance on symptoms, treatments, and living with these rare diseases. Technically, the site is built on WordPress with modern optimizations and is hosted likely on SiteGround. It is mobile-optimized and accessible, with a clear navigation structure and good content quality. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification, but the site’s content and social presence indicate a trustworthy entity. Overall, the site is a valuable resource for its target audience but could improve privacy compliance and security transparency.

S

Stopka

stopka.cz

47

Stopka is a well-established interior design and realization company based in the Czech Republic, with over 35 years of experience in premium residential and commercial projects. The company offers tailored interior design services, showroom sales, and partnerships with renowned global brands. Their website reflects a high level of professionalism, showcasing their projects, product categories, and brand collaborations. Technically, the site uses modern web technologies including lazy loading, video content, and cookie consent mechanisms, hosted by Active24. Security posture is good with HTTPS and consent mechanisms, though improvements can be made by adding security headers and explicit privacy policies. Overall, the website is trustworthy and well-positioned in its market niche.

B

BBC, budova BETA

savencia-fd.cz

52

Savencia Fromage & Dairy Czech Republic operates as a leading manufacturer and brand owner of cheese specialties, serving markets in the Czech Republic, Slovakia, and globally. The company emphasizes innovation and high-quality products supported by strong brand stories. The website reflects a mature digital presence with modern technologies such as Google Tag Manager, Facebook Pixel, and reCAPTCHA integration, indicating a focus on user experience and security. Contact information is clearly provided, enhancing business credibility. However, the absence of explicit privacy and security policies suggests room for improvement in compliance and transparency. Overall, the website is professional, well-structured, and trustworthy, supporting the company's market position as a global leader in cheese specialties.

G

GiveGreen

givegreen.com

69

GiveGreen is a non-profit platform dedicated to mobilizing climate-conscious donors to support pro-environment political candidates across the United States. The website offers a candidate directory, donation processing, and impact reporting to facilitate climate-focused political fundraising. The platform targets environmentally aware individuals seeking to influence elections and climate policy through financial contributions. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates with Google Analytics and Tag Manager for tracking, and uses Algolia for search functionality. The site is built on Craft CMS and demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and includes standard security headers, reflecting a solid security posture. However, the absence of visible privacy, cookie, and terms of service policies, as well as missing contact information and WHOIS data, reduces overall trust and compliance scores. The domain's registration status is unclear due to lack of WHOIS data, which warrants further verification. Overall, GiveGreen presents as a professional and trustworthy platform with room for improvement in privacy compliance and transparency.

G

Green Business Benchmark

greenbusinessbureau.com

59

Green Business Benchmark is a sustainability-focused SaaS platform operated by Clearyst GBB LLC, offering businesses tools to assess, manage, and certify their sustainability programs. The platform supports multiple industries with tailored initiatives, benchmarking dashboards, and certification advocacy, positioning itself as a trusted partner for sustainability growth and compliance. The website demonstrates a mature digital presence with modern technologies such as Webflow CMS, HubSpot forms, and Google Tag Manager integrations, ensuring a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the professional content, certifications, and business affiliations mitigate this concern. Overall, the website is well-designed, content-rich, and trustworthy for its target audience.

A

AdviceWorks Client Portal

adviceworks.net

64

AdviceWorks.net is a digital platform designed to facilitate collaboration between financial professionals and their clients by providing a centralized client portal to view finances, set goals, and track progress. The platform targets financial professionals and their clients, positioning itself as a tool to enhance financial management and communication. The website content is minimal, primarily serving as a client portal entry point with limited public-facing information. Technically, the site uses modern JavaScript modules and is hosted on AWS infrastructure, indicating a moderate level of digital maturity. However, the site lacks visible content beyond the portal shell, and no CMS or additional frameworks are detected. Security posture is basic; the domain is registered with a reputable registrar and has a long registration period, but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, which limits trust and compliance. Overall, the site is functional but minimal, with opportunities to improve transparency, security, and user engagement.

E

Evergreen Podcasts

killerpodcasts.com

66

Evergreen Podcasts is a medium-sized, fast-growing podcast network based in Cleveland, Ohio, specializing in original, branded, and partner podcasts across diverse genres including true crime. The company operates under Front Porch Media Company and offers advertising and recording studio services. Their market position is strong within the podcast media industry, supported by a collaborative creative team and a growing catalog of shows. Technically, the website is built on Craft CMS, uses Cloudflare for DNS and CDN, and integrates modern tools like Google Tag Manager and HubSpot forms, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a credible platform for podcast listeners, advertisers, and partners.

The website domenovyprohlizec.cz is a Czech domain browsing service established in 2013. It provides domain lookup functionalities targeting a general audience interested in domain information. The site uses modern frontend technologies such as Vue.js and PrimeVue, indicating a contemporary technical infrastructure. However, the website lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and security headers. No contact or incident response information is provided, which limits trust and transparency. The domain registration data aligns well with the website's language and purpose, supporting its legitimacy. Overall, the site is functional and safe but requires improvements in security posture and privacy compliance to enhance trustworthiness and regulatory adherence.

F

FIN (Vereniging van Fondsen in Nederland)

fondseninnederland.nl

50

FIN (Vereniging van Fondsen in Nederland) is a Dutch non-profit association representing over 365 philanthropic funds and foundations dedicated to societal improvement. The organization provides advocacy, quality enhancement, knowledge exchange, and governance standards to its members. The website reflects a professional and consistent brand presence targeting philanthropic organizations and stakeholders in the Netherlands. Technically, the site is built on a Laravel framework with Livewire components, uses modern web technologies, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, DNSSEC, CSRF protections, and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its business purpose.

F

Feelingz

mijnfeelingz.nl

47

MijnFeelingz.nl is an e-commerce platform based in the Netherlands specializing in personalized gift selection accessible via a personal order code. The website presents a clean, modern login interface with a focus on privacy and compliance with GDPR, as evidenced by the cookie consent banner and privacy policy. The business holds the Thuiswinkel Waarborg certification, a recognized trust mark in Dutch e-commerce, enhancing its credibility. The domain has been active since 2013, indicating a stable online presence. Technically, the site uses modern JavaScript modules and CSS with some React-like structure implied. Hosting appears to be managed by Novulo, a known hosting provider. The site is mobile-optimized with good design quality and basic accessibility features. However, no advanced SEO or structured data markup was detected, which could be improved for better search visibility. From a security perspective, HTTPS is used, and cookie policies are transparent with no third-party tracking cookies detected. However, the absence of explicit security headers such as CSP and HSTS is a gap. No incident response or vulnerability disclosure information is provided, which could be a concern for security maturity. The site does not expose sensitive data or show signs of vulnerabilities in the analyzed content. Overall, the website scores well in content quality, privacy compliance, and business credibility but has room for improvement in security posture and technical SEO. Strategic recommendations include implementing security headers, publishing incident response contacts, enhancing SEO with structured data, and maintaining transparency in data protection practices.

N

Netzbegruenung - Verein fuer gruene Netzkultur e.V.

gruene.social

66

gruene.social is a Mastodon social networking instance operated by Netzbegruenung - Verein fuer gruene Netzkultur e.V., a German non-profit organization aligned with the Green Party. The platform serves a niche audience interested in green politics and federated social media, providing a community-focused environment without commercial advertising or intrusive tracking. The website uses Mastodon version 4.4.2 with a modern React-based frontend, indicating a contemporary technical infrastructure with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service published. Overall, the site is trustworthy and professionally maintained, suitable for its target audience and business model.

G

Good Enough

pika.page

62

Pika.page is a small technology company offering a blogging platform designed to provide a happy and simple blogging experience. The platform is built using modern web technologies such as Ruby on Rails, Hotwired Turbo, and Stimulus, with a focus on performance and mobile optimization. The website demonstrates good design quality and user experience, with clear navigation and relevant content for bloggers and content creators. Security posture is adequate with HTTPS and CSRF protections in place, but lacks visible security policies and incident response information. Privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the website appears legitimate and trustworthy, with consistent WHOIS data matching the company branding.

M

mave.io B.V.

mave.io

65

mave.io B.V. operates a European-focused video platform emphasizing privacy, user experience, and developer-friendly integration. The company offers a cookieless video streaming solution with features such as adaptive streaming, accessibility enhancements, API access, and open-source components. Positioned as a European alternative to major video platforms, mave.io targets developers and businesses seeking GDPR-compliant, customizable video solutions. The website reflects a modern, professional SaaS business with strong branding and customer testimonials from reputable clients like Sketch and Freedom Internet. Technically, the site is built using Hugo CMS, Alpine.js, Chart.js, and custom web components, delivering fast performance, excellent mobile optimization, and good accessibility. The platform uses HTTPS exclusively and avoids exposing sensitive data. However, explicit security headers and a published security policy are absent, representing areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. Security posture is solid but could be enhanced by publishing incident response contacts and vulnerability disclosure programs. The WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, the site demonstrates high trustworthiness, professional content, and a strong commitment to privacy and user experience.

Koninklijke PostNL operates as the leading postal and parcel delivery service provider in the Netherlands, catering to both consumer and business markets. The company offers a broad range of services including parcel sending and receiving, track and trace, online postage purchasing, and business logistics solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service information tailored to its target audience. Technically, the site leverages modern web technologies such as Next.js, web components, and JSON-LD structured data to enhance performance, SEO, and user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high trustworthiness and compliance with privacy regulations, making it a reliable digital platform for its users.

F

Future Fonts

futurefonts.xyz

64

Future Fonts is an innovative online platform specializing in licensing typefaces while they are still in development. The website targets designers, foundries, and typography enthusiasts, offering a unique marketplace for early access to fonts. The platform leverages modern web technologies including React and Stripe for payment processing, indicating a contemporary digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks comprehensive security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and design quality suggest a professional operation. Overall, the site presents a moderate risk profile with room for improvement in transparency and security practices.

T

The Joinery

thejoinery.com

71

The Joinery is a well-established handcrafted solid wood furniture manufacturer and retailer based in Portland, Oregon. With a domain age dating back to 1997 and a strong emphasis on sustainability and craftsmanship, the company operates a professional e-commerce website powered by Shopify. The site offers a comprehensive product catalog, online ordering, and showroom information, targeting consumers seeking high-quality, sustainable furniture. The presence of a Certified B Corporation badge and multiple press features further solidify its market position. Technically, the website leverages modern web technologies including Shopify's Dawn theme, JavaScript ES modules, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a clear navigation structure and comprehensive metadata for SEO. From a security perspective, the site enforces HTTPS, uses domain transfer locks, and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, and there is no explicit security policy or incident response contact information published, which could be improved. Overall, The Joinery's website demonstrates a mature digital presence with strong business credibility and good security hygiene. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure information to enhance trust and compliance further.

B

Betonstunter

betonstunter.be

62

Betonstunter is a specialized e-commerce retailer focused on concrete finishing products such as Beton Ciré, Betonstuc, and related paints. The company operates primarily in Belgium and the Netherlands, positioning itself as a leading webshop in this niche market. Their website is built on Shopify, leveraging modern web technologies and marketing tools to provide a professional and user-friendly shopping experience. The site includes detailed project inquiry forms to assist customers in obtaining accurate price indications, reflecting a customer-centric approach. Technically, the site is well-implemented with HTTPS, consent management, and integration of analytics and live chat services. However, explicit privacy and terms of service pages were not detected in the provided content, indicating an area for compliance improvement. Security posture is solid with no critical vulnerabilities detected, but could benefit from enhanced security headers and published policies. Overall, Betonstunter presents a trustworthy and professional online presence suitable for its target market.

C

Changelog

changelog.social

64

Changelog.social operates as an independent Mastodon server focused on delivering news and podcasts tailored for developers. It positions itself within the fediverse as a niche community platform, leveraging the Mastodon open-source social networking software. The site provides a curated experience for technology enthusiasts and developers, emphasizing content relevance and community engagement. The business model centers on community participation without evident monetization or advertising, reflecting a small-scale, focused service launched in 2022. Technically, the website employs Mastodon version 4.4.1 with a React-based frontend, utilizing modern JavaScript modules and a CDN for asset delivery. The domain is registered through Tucows with privacy protection, and DNS is managed via DNSimple. Performance and mobile optimization are moderate to good, though SEO and accessibility features are basic. The site lacks a CMS and appears self-hosted or hosted by an unknown provider. From a security perspective, the site enforces HTTPS and has domain transfer protections enabled. However, it lacks DNSSEC, security headers, and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and compliance documentation are recommended. Privacy compliance is partial, with a basic privacy policy present but no cookie consent or terms of service. Overall, changelog.social presents a trustworthy, niche community platform with good technical foundations but room for improvement in privacy compliance and security best practices. Strategic enhancements in security policies, consent mechanisms, and transparency would strengthen its risk posture and user trust.

R

Raiola Networks

raiolanetworks.com

78

Raiola Networks is a Spanish web hosting and domain registration company established in 2014, offering high-quality SSD hosting, VPS, dedicated servers, and specialized WordPress hosting. The company targets Spanish-speaking customers seeking reliable and fast hosting solutions with 24/7 technical support. Their market position is solid within Spain, supported by a consistent brand presence and active social media engagement. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies such as Livewire, Cookiebot, and multiple tracking pixels for analytics and marketing. Security posture is good with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and a detailed privacy/legal notice. Overall, Raiola Networks demonstrates a professional and trustworthy online presence with room for enhanced security policies and incident response transparency.

U

Upper Left Roasters

upperleftroasters.com

64

Upper Left Roasters is a small, local coffee roaster and retailer based in Portland, Oregon, specializing in seasonally sourced single-origin and blend coffees. The business operates both a physical café in the Ladd's Addition neighborhood and an online e-commerce platform powered by Shopify. They offer subscription services through a third-party platform (Table 22) and provide wholesale options. The website reflects a well-maintained, modern e-commerce infrastructure with good design, mobile optimization, and clear navigation. Social media integration and marketing tools like Facebook Pixel and Mailchimp are used to support customer engagement and analytics. Security posture is generally good with HTTPS enforced and form protection via hCaptcha, though some security headers and DNSSEC are missing. Privacy and cookie policies are not explicitly presented, indicating room for compliance improvement. Overall, the domain registration is consistent with the business age and type, supporting legitimacy.

S

Shade Catalog

shadecoffee.org

59

Shade Catalog is an informational website dedicated to providing resources about shade tree species in coffee landscapes, targeting coffee farmers and agricultural professionals. It is a collaborative effort by Conservation International, Smithsonian Migratory Bird Center, and World Coffee Research, positioning itself as a niche resource in environmental conservation and sustainable coffee farming. The website offers catalogs for Colombia, Indonesia, and Peru, including browsing, downloads, and distribution information. Technically, the site is well-implemented with modern JavaScript, responsive design, and fast performance via AWS Cloudfront CDN. However, it lacks some security headers and privacy compliance documentation. The security posture is generally good with HTTPS enforced but could be improved by adding security headers and publishing privacy and cookie policies. No contact information or incident response details are provided, which limits transparency. Overall, the site is trustworthy, professional, and safe for general audiences, with minimal user tracking and no advertising. Strategic recommendations include enhancing privacy compliance, adding security headers, and providing clear contact and incident response information.

C

AI pro zákaznickou komunikaci | coworkers.ai

coworkers.ai

66

coworkers.ai is a technology company specializing in AI-powered customer communication assistants, including chatbots, voicebots, and emailbots. Their solutions aim to automate over 85% of customer queries, enabling businesses to reduce costs, increase sales, and improve customer satisfaction. The company targets sectors such as finance, e-commerce, and hospitality, positioning itself as an innovative provider of AI-driven customer service automation. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, Google Cloud services, and advanced JavaScript frameworks, reflecting a mature digital presence. Security measures include HTTPS, Google reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security headers and policies are not fully disclosed. Overall, the security posture is good but could be enhanced with additional transparency and formal policies. The domain WHOIS data is privacy protected, which is justified given the business context, but limits direct verification of registrant details. The website is professional, well-branded, and trustworthy, with no signs of malicious activity or content blocking.

E

Effect.app — Online Image & Video Effects

effect.app

47

Effect.app is a small technology company offering an online platform for applying visual effects to images and videos. The service targets creators and designers seeking easy-to-use tools with both free and paid subscription options. The website is professionally designed with good content relevance and user experience, supporting modern JavaScript technologies and analytics integrations. Security posture is moderate with HTTPS usage and secure form practices, but lacks explicit security headers and published security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Overall, the website is trustworthy and functional with room for improvement in security and privacy transparency.

Y

Youtooz Collectibles

youtooz.com

68

Youtooz Collectibles is an e-commerce business specializing in pop culture and internet-themed collectibles. Founded in 2019, it operates a professionally designed Shopify-based website targeting collectors and fans of internet culture. The company maintains a strong market position within its niche, offering limited edition merchandise and leveraging social media channels for marketing and customer engagement. Technically, the website is well-implemented with modern JavaScript modules, Shopify platform integration, and CDN hosting via Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement, clientTransferProhibited domain status, and use of CAPTCHA for form protection, although some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies and GDPR considerations. Overall, the website demonstrates a mature digital presence with extensive analytics and marketing tools, supporting a trustworthy and professional e-commerce operation.

C

C.IM

c.im

74

C.IM operates as an independent Mastodon server hosted in the EU, targeting open-minded English-speaking users interested in federated social networking. The platform offers trending posts, profile directories, and live feeds, positioning itself as a niche social network within the broader Mastodon ecosystem. The website is well-branded and consistent, with clear business focus and active user engagement indicators. Technically, the site leverages modern web technologies including React and ES modules, with Cloudflare DNS and hosting infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security is robust with HTTPS enforced and script integrity checks, though explicit security headers and cookie consent mechanisms are absent. From a security perspective, the site shows good practices but lacks published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with privacy and terms pages present, but cookie consent is missing despite EU hosting. Overall, C.IM presents a trustworthy and professional social networking platform with solid technical foundations and a clear business model. Strategic improvements in security policy transparency and privacy mechanisms would enhance compliance and user trust.

T

Timex Group USA, Inc.

timex.com

66

Timex.com is the official e-commerce website for Timex Group USA, Inc., a well-established global watch brand. The site offers a wide range of watches for men, women, boys, and girls, emphasizing quality and free standard shipping. The brand targets a broad general audience interested in digital, analog, and water-resistant watches. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations to provide a seamless shopping experience. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure.

B

Betonstunter

betonstunter.nl

56

Betonstunter is a small Dutch e-commerce business specializing in Beton Ciré, Betonstuc, and related concrete finishing products. The company positions itself as the market leader in its niche within the Netherlands, offering competitive pricing and a variety of color options. The website is built on Shopify, leveraging modern web technologies and third-party apps for form handling and analytics. While the site employs HTTPS and DNSSEC, and includes cookie consent mechanisms, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is generally good with no obvious vulnerabilities detected, but the absence of a vulnerability disclosure policy and security contact information is a gap. Overall, the website is professional, user-friendly, and safe for general audiences, but could improve privacy transparency and security communication.

S

Site Editor

edit.site

66

Site Editor operates as a SaaS platform providing website building and publishing services primarily targeting general users seeking easy-to-use website creation tools. The platform is positioned within the technology sector and appears to be a small-sized business founded in 2018. The website content is minimal, focusing on user login functionality, with basic legal compliance links such as privacy policy, terms of service, and GDPR information. Technically, the site employs modern web technologies including React and JavaScript ES modules, hosted on Cloudflare infrastructure, ensuring good SSL configuration and moderate performance. However, DNSSEC is not enabled, and security headers are absent, indicating room for security enhancements. Privacy compliance is partially met with legal documents present but lacks cookie consent mechanisms. No direct contact information or incident response policies are visible, which may impact user trust and compliance. Overall, the site is functional and moderately secure but would benefit from improved security practices and transparency.

A

Aleem Shaun

aleemshaun.com

60

Aleem Shaun's website is a personal blog and portfolio site focused on themes such as belonging, creativity, enterprise, faith, justice, leadership, and technology. The site features a large archive of blog posts dating back to 2000, indicating a long-term personal content creation effort. The business model is centered on personal branding and thought leadership rather than commercial services. The site is hosted on a custom Ruby on Rails platform with modern JavaScript frameworks and libraries, showing a moderate level of technical maturity. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and CSRF protection but lacks DNSSEC and security headers, which are recommended for improvement. Privacy and cookie policies are absent, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy as a personal blog but would benefit from enhanced security and privacy compliance measures.

C

Cory Gibbons

corygibbons.com

59

Cory Gibbons is an individual freelance developer and designer focused on creating fast, scalable, and enjoyable digital experiences. The website serves as a personal portfolio and contact point for limited freelance opportunities. The business model is straightforward, targeting clients seeking development and design services. The market position is that of a small-scale independent professional without broader corporate affiliations. Technically, the website is built using modern JavaScript frameworks, specifically React with React Router, and is hosted on Vercel, ensuring fast performance and good mobile optimization. The site uses module preloading and modern ES modules, indicating a contemporary tech stack. However, accessibility and SEO optimizations are basic, and no CMS or analytics tools are detected. From a security perspective, the site benefits from HTTPS and domain registrar protections but lacks DNSSEC and security headers, which are recommended for enhanced security. There are no privacy or cookie policies, which limits compliance with GDPR and related regulations. No incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance trust and security posture. Overall, the website is professional and functional for its purpose but could benefit from improved privacy compliance and security best practices to increase trustworthiness and reduce risk.

T

toki.social

toki.social

62

toki.social is an independent Mastodon social networking server focused on the Toki Pona language community. It operates as part of the federated fediverse, providing users with a decentralized platform for social interaction. The website is relatively new, founded in 2021, and serves a niche audience interested in the Toki Pona language and culture. The platform leverages the open-source Mastodon software, currently running version 4.4.2, and uses modern web technologies including React and ES modules for its frontend. The hosting and domain registration are managed via NameCheap with privacy protection enabled, which is common for small independent social platforms.

P

Private by Design, LLC

unseen.ninja

57

The website unseen.ninja is a personal portfolio site representing an individual or small entity focused on design and coding services. The site presents a modern, clean design with SVG-based branding and uses Vue.js framework for frontend interactivity. The content is minimal but relevant, targeting a general audience interested in design and code. The domain is newly registered in early 2024, consistent with the site's apparent purpose as a personal portfolio. Technically, the site employs modern web technologies including ES modules, web fonts, and SVG graphics. It is hosted under a reputable registrar Porkbun LLC, though the hosting provider is not explicitly identified. The site is mobile optimized and has basic accessibility features. SEO is basic but includes proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. No privacy or cookie policies are provided, which is a compliance gap. The WHOIS data is consistent and transparent, with no privacy protection, appropriate for this type of site. Overall, the site is low risk with moderate trustworthiness but would benefit from improved security headers, privacy compliance, and contact transparency to enhance credibility and user trust.

S

Stalwart Management

chpu.eu

42

The website 'Stalwart Management' appears to be a minimalistic login portal with no publicly available business description or contact information. The site uses modern web technologies such as WebAssembly and JavaScript ES modules, indicating a contemporary technical infrastructure. However, the lack of visible content beyond the login form limits the ability to fully assess the business model or market position. Security posture is moderate with HTTPS assumed but no explicit security headers or policies detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site presents a basic professional appearance but requires enhancements in transparency, security, and compliance to improve trustworthiness and user confidence.

F

Fangamer

fangamer.com

69

Fangamer operates a professional e-commerce website specializing in licensed video game merchandise including apparel, plushes, figures, books, and accessories. The site targets video game enthusiasts and collectors, positioning itself as a niche leader in this market segment. The business model is retail-focused, leveraging the Shopify platform for online sales and distribution. The website demonstrates strong branding consistency and excellent content quality, with clear navigation and mobile optimization.

P

Private by Design, LLC

is-quite.gay

58

The website is a niche, invite-only social platform branded as 'is-quite.gay', targeting individuals who identify as quite gay. It operates as a federated social media instance powered by the Misskey software, which supports ActivityPub federation. The platform is small with limited users and notes, emphasizing community exclusivity through invite codes. The business behind the domain is registered as Private by Design, LLC, a US-based entity, with the domain newly created in June 2024. The site content is consistent with its stated purpose and audience, with no adult or explicit content detected. Technically, the website uses modern web technologies including JavaScript ES modules, Vite bundler, and icon fonts. It leverages Cloudflare for DNS services but does not enable DNSSEC, which is a minor security gap. The site is served over HTTPS with domain status protections to prevent unauthorized changes. However, no security headers were detected in the HTML content, and no privacy or cookie policies are published, indicating room for compliance improvements. The site does not use advertising or tracking services, reflecting a privacy-conscious approach. From a security perspective, the platform shows a moderate security posture with HTTPS and domain protections but lacks published policies and security headers that would enhance trust and compliance. No vulnerabilities or exposed sensitive data were found. The absence of a privacy policy and cookie consent mechanism lowers the privacy compliance score. The domain registration details align well with the website content, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is a professionally presented, small-scale social platform with a clear niche audience and a solid technical foundation. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to improve security and compliance posture.