Security Directory

A

AdultForce

adultforce.com

71

AdultForce operates as a specialized adult affiliate marketing platform, connecting affiliates with leading adult entertainment brands such as Brazzers, Reality Kings, and Nutaku. The platform offers a suite of marketing tools designed to optimize affiliate revenue generation, including advanced geo statistics, autopilot technology, and exclusive offers. Positioned as a trusted and user-friendly service, AdultForce targets adult traffic monetizers seeking efficient and profitable affiliate programs. The website presents a professional and consistent brand image with clear navigation and comprehensive content, supporting its market position in the adult media sector. Technically, the website leverages modern web technologies including AngularJS, RequireJS, and Salesforce Embedded Service for live chat support. The site is mobile-optimized and employs cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in accessibility and security headers are recommended. The integration of third-party scripts and ad networks is managed with standard practices, and no critical vulnerabilities were detected in the visible content. From a security perspective, the site enforces HTTPS and provides cookie consent, but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain is a notable concern, impacting domain transparency and trust. While the website content and business presentation suggest legitimacy, the missing WHOIS information reduces confidence in domain registration authenticity. Overall, the security posture is solid but could benefit from enhanced transparency and formalized security documentation. Strategically, AdultForce should prioritize obtaining and publishing clear security and incident response policies, implement recommended security headers, and address WHOIS transparency issues to strengthen trust. Enhancing accessibility and continuous monitoring of third-party dependencies will further improve the platform's reliability and compliance posture.

C

Charles Abbott Associates, Inc.

caa.inc

61

Charles Abbott Associates, Inc. (CAA) is a well-established national alternative service provider specializing in government-related services such as building inspection, city engineering, environmental, and fire prevention. The company has a significant presence with offices in 8 states and over 220 employees, positioning itself as a trusted partner for state and local government agencies. The website reflects a professional business with clear service offerings and a consistent brand image. Technically, the site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. Performance and mobile optimization are adequate, though SEO and accessibility could be improved. Security posture is moderate with HTTPS enforced and some security hardening scripts, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent banner present but no visible privacy or terms of service pages. Overall, the site is credible and functional but could benefit from enhanced transparency and security best practices.

V

Valsts izglītības satura centrs

skolo.lv

59

Skolo.lv is a Latvian government-affiliated educational platform designed to support teachers and students with virtual learning environments, e-course creation, and interactive assignments. It serves as a national resource for structured learning content and collaboration, primarily targeting the Latvian education sector. The platform leverages Moodle CMS and modern web technologies to deliver its services. Technically, the site uses a combination of JavaScript libraries including jQuery, YUI, RequireJS, and video players like Video.js and THEOplayer, alongside Matomo for analytics. While the platform is well-structured and provides essential privacy and cookie consent mechanisms, it exhibits some accessibility shortcomings and video playback issues. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal security policies. WHOIS data is unavailable due to query limits, which slightly reduces trust confidence. Overall, the platform is credible and professionally maintained but could improve accessibility and security transparency.

P

Podravka d.d.

podravka.com

53

Podravka d.d. is a well-established Croatian food processing and pharmaceutical company with a strong international presence in over 60 markets and a portfolio of more than 1000 products. The company emphasizes sustainable development and social responsibility, targeting consumers seeking high-quality food and pharmaceutical products. The website reflects a mature digital presence with multiple language options and comprehensive content about products, corporate responsibility, and investor relations. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. The WHOIS data for the domain is missing or unavailable, which is unusual but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve trust and compliance.

I

iRobot

irobot.co.nz

64

The website www.shopirobot.co.nz serves as the official e-commerce platform for iRobot products in New Zealand, offering a range of robotic vacuum cleaners, mops, and accessories. It targets consumers seeking automated cleaning solutions and positions itself as a trusted regional outlet for iRobot's product line. The site features professional branding consistent with the iRobot corporate identity and provides customer support and warranty information to enhance trust. Technically, the website is built on the Magento 2 platform, leveraging modern web technologies including jQuery, RequireJS, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Klaviyo. The site is mobile-optimized and employs security best practices like HTTPS enforcement and security headers, contributing to a secure browsing experience. From a security perspective, the site demonstrates good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly accessible security policy and incident response information, which are important for transparency and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is professionally designed and functional, with extensive tracking and marketing integrations. The primary risk lies in the unknown domain registration status, which impacts business credibility. Strategic recommendations include verifying domain registration, publishing security policies, and enhancing direct contact information to improve trust and compliance.

I

iRobot

irobot.com.au

65

The website www.shopirobot.com.au serves as the official Australian e-commerce platform for iRobot, specializing in robotic vacuum and mop products including Roomba and Braava series. It targets Australian consumers seeking advanced home cleaning technology, offering a range of products and accessories with promotional offers and refurbished items. The site demonstrates a consistent brand presence and professional design, supporting a medium-sized retail operation in the e-commerce sector. Technically, the website is built on the Magento platform, utilizing modern JavaScript libraries such as jQuery and KnockoutJS, and integrates multiple marketing and analytics tools including Google Analytics, TikTok Pixel, Facebook Pixel, and Klaviyo. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with a comprehensive tech stack supporting e-commerce functionalities. From a security perspective, the site enforces HTTPS and employs secure form handling and reCAPTCHA for bot mitigation. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and privacy compliance is limited due to the absence of visible privacy and cookie policies. The WHOIS data is incomplete, lacking registrant details and domain age, which slightly diminishes trustworthiness but does not outweigh the professional site presentation. Overall, the site presents a solid e-commerce presence with room for improvement in privacy compliance and security header implementation. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and improving accessibility compliance to strengthen user trust and regulatory adherence.

Tazeros Global Systems is a technology company specializing in advanced data analytics and human behavior modeling. Established in 2018, the company leverages over a decade of data gathering from open sources, proprietary services, and partners to provide B2B and B2C analytics solutions. Their offerings include web analytics, geo-analytics, audience segmentation, and specialized services for sectors such as advertising, law enforcement, healthcare, and political analysis. The company targets corporate clients and is expanding services for small and medium businesses. Technically, the website employs modern JavaScript libraries and asynchronous module loading with RequireJS, delivering a moderately performant and mobile-optimized experience. However, SEO metadata is incomplete, and accessibility features are basic. Security posture is adequate with HTTPS and domain registration protections but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with no visible privacy policy or terms of service, though a cookie consent mechanism is present. Contact information includes a support email and a physical address linked to Media Zoom LLC, the legal entity behind the platform. Overall, the site is functional and professional but would benefit from enhanced security and privacy disclosures to improve trust and compliance.

E

E. & J. Gallo Winery

gallo.com

60

E. & J. Gallo Winery is a prominent family-owned enterprise specializing in the production and distribution of wines and spirits, with a significant global footprint spanning over 100 countries. Established in 1933, the company has grown to become a leader in the U.S. wine industry, offering a diverse portfolio of brands and maintaining a strong commitment to quality and innovation. Their website reflects this heritage with rich content, multimedia elements, and clear brand messaging targeting consumers, distributors, and potential employees. Technically, the website employs modern JavaScript libraries such as jQuery and RequireJS, alongside Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security headers and explicit cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The absence of WHOIS data suggests privacy protection or proxy registration, common for large enterprises, though it introduces some uncertainty. No critical vulnerabilities or compliance gaps were detected, but adding a vulnerability disclosure policy and incident response contacts would strengthen the security posture. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's market position. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to further improve compliance and user trust.

J

Jānis Roze

janisroze.lv

66

Jānis Roze operates an e-commerce platform primarily targeting Latvian consumers, offering retail products through a Magento-based website. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies and third-party monitoring tools such as New Relic and Facebook Pixel. Despite the lack of WHOIS data due to query limitations, the website's technical infrastructure and content suggest a legitimate business presence in the Latvian retail e-commerce market. However, the absence of explicit privacy, cookie, and terms of service policies, as well as contact information, indicates areas for compliance and trust improvement. Security posture is strong with HTTPS enforcement and monitoring, but could benefit from enhanced security headers and published incident response policies.

M

Marc Sommarstråle

sommarstrale.se

39

The website sommarstrale.se represents a small Swedish business specializing in advanced photo retouching services with over 20 years of experience. The business appears to be owner-operated by Marc Sommarstråle, targeting clients interested in professional image editing and graphic design, primarily in the Jönköping region. The site content is basic but functional, providing visual examples of work and navigation to contact and graphic design pages. Technically, the site uses older JavaScript libraries such as jQuery 1.8.3 and RequireJS, hosted via INLEED, with no detected CMS. The site is mobile responsive and moderately performant but lacks modern security headers and DNSSEC, which are recommended for improved security posture. Security-wise, HTTPS is enabled, but the absence of security headers and use of outdated libraries present moderate risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a contact page link, with no direct emails or phone numbers found. Overall, the site is accessible and trustworthy but would benefit from enhanced security and compliance measures.

C

Charles Abbott Associates, Inc.

caaprofessionals.com

66

Charles Abbott Associates, Inc. (CAA) is a well-established national alternative service provider to state and local government agencies, operating since 1984. The company specializes in building inspection, plan checking, city engineering, storm water management, public works, environmental, and fire prevention services. With offices in eight states and a workforce exceeding 220 employees, CAA positions itself as a trusted partner for government agencies seeking professional and value-driven services. The website reflects this professional positioning with clear service offerings and a consistent brand presence. Technically, the website is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated UI libraries. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but could be enhanced. Security measures include HTTPS enforcement and scripts to harden client-side requests, but explicit security headers and policies are absent. From a security standpoint, the site shows a reasonable posture with no detected vulnerabilities or exposed sensitive data. However, the absence of a published privacy policy, terms of service, security policy, and incident response contacts indicates gaps in compliance and transparency. The domain registration is privacy protected but aligns with the company's history and business claims, supporting legitimacy. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy compliance, explicit security policies, and improved accessibility to strengthen trust and regulatory adherence.

A

AKG Gruppe

akg-gruppe.de

51

AKG Gruppe is a globally recognized manufacturer specializing in high-performance coolers and heat exchangers, serving diverse industries including automotive, aviation, rail vehicles, renewable energy, and construction equipment. With a workforce exceeding 3,000 employees, the company emphasizes innovation, sustainability through its AKG Green initiative, and tailored thermal management solutions. The website reflects a professional digital presence built on TYPO3 CMS, featuring comprehensive product and market information, active news updates, and clear contact channels. Technically, the site employs modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, potentially impacting trust and domain legitimacy verification. Overall, AKG Group presents a credible and professional business front with room for enhanced transparency and security policy disclosures.

D

DTB group

dtb.lv

45

DTB group is a Latvian financial and legal services company specializing in providing financing solutions for individuals and legal entities. Their offerings include mortgage loans, transport financing, overdrafts, credit lines, factoring, refinancing, investment attraction, real estate acquisition, purchase of receivables, and comprehensive legal services. The company positions itself as a conservative and experienced player in the Latvian financial market, collaborating with multiple banks and financial institutions to deliver tailored financial products and legal support. The website content is primarily in Russian, targeting clients in Latvia and surrounding regions. The presence of partner logos from reputable banks enhances their market credibility. Technically, the website is built using Adobe Muse with jQuery 1.8.3 and RequireJS, indicating a static site with limited modern CMS features. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture shows room for improvement, with no explicit security headers detected and use of an outdated jQuery version that may expose vulnerabilities. The site uses HTTPS and AJAX for form submissions but lacks privacy and cookie policies, which impacts compliance. Overall, the security posture is moderate with no detected blocking or WAF interference. The lack of WHOIS data limits domain trust verification, but the website's professional content and partner affiliations suggest legitimacy. Strategic improvements in security headers, library updates, and privacy compliance would enhance trust and reduce risk.

S

SIA Arčers

arcers.lv

46

SIA Arčers is a Latvian construction company specializing in building projects with a focus on quality, smart building technologies, and social responsibility. The company positions itself as a significant player in the Latvian construction sector, supported by a large workforce and substantial annual turnover. The website reflects a professional corporate presence with clear branding and multilingual support, targeting local clients and partners in the construction and real estate markets. The parent company is the holding company UGN, indicating a structured corporate group. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and jQuery libraries. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance is moderate with good SEO practices implemented, including structured data and Open Graph tags. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, no advanced security headers were detected, and no explicit incident response or security policies are published. The WHOIS data could not be retrieved due to query limits, but no suspicious indicators were found in the website content or domain usage. Privacy and cookie policies are present and appear comprehensive and GDPR compliant. Overall, the website demonstrates a solid business and technical foundation with good security hygiene but could improve by adding security headers and incident response information. The risk level is low, and the site is trustworthy for its intended audience.

K

Korin, Inc

korin.com

48

Korin, Inc is a specialized e-commerce retailer focused on professional quality Japanese chef knives, tableware, kitchenware, and restaurant supplies. Established in 1982, the company serves professional chefs, restaurants, and culinary enthusiasts worldwide, offering a wide range of imported Japanese knives, sharpening stones, kitchen tools, and barware. The website demonstrates a strong market position in the niche culinary supply sector with worldwide shipping and additional services such as knife sharpening and custom engraving. Technically, the website is built on the NetSuite SuiteCommerce platform, utilizing modern JavaScript libraries and frameworks such as RequireJS and jQuery. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. The technical infrastructure appears stable and professional, supporting a seamless user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business presence appear credible. Overall, Korin.com is a professional and trustworthy e-commerce site with strong business credibility and good technical implementation. Addressing domain registration transparency, enhancing privacy compliance, and improving security headers would further strengthen its security posture and trustworthiness.

C

Cenuklubs

cenuklubs.lv

61

Cenuklubs.lv is a Latvian retail company operating both physical stores and an online e-commerce platform. The business focuses on household goods, garden and lighting products, and alcoholic beverages, targeting Latvian consumers. The website is built on the Magento 2 platform, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, indicating a mature digital infrastructure. The site is mobile-optimized and provides a structured navigation experience. Security-wise, the site enforces HTTPS and includes standard security headers, with cookie consent mechanisms in place, reflecting a good security posture. However, explicit security policies and incident response contacts are not found, which could be improved. The absence of WHOIS data limits domain legitimacy assessment, but the website content and structure suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

DEGO Interactive is a Latvian-based company specializing in digital and e-commerce project design, development, and support services. Established in 2005, the company targets businesses seeking to create and develop digital products and e-commerce platforms. The website presents a professional brand identity but is currently inaccessible due to a server-side HTTP 505 error, limiting user engagement and business operations. The technical infrastructure is based on WordPress CMS with AngularJS and Bootstrap frameworks, indicating a moderately modern but somewhat outdated technology stack. Analytics tools such as Yandex Metrika and Google Analytics are integrated, reflecting moderate user tracking practices. Security posture is basic with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. Overall, the website's current inaccessibility and lack of compliance documentation present risks to business credibility and user trust.

襄樊富仕纺织服饰有限公司 is a large Chinese textile manufacturing company established in 2001, specializing in spinning and weaving with significant production capacity. The company holds multiple provincial and national certifications, positioning it as a reputable player in the manufacturing sector. The website presents a professional design with clear navigation and relevant business content targeting industry clients and partners. Technically, the site uses a SaaS platform with common web technologies like jQuery and Swiper.js, but mobile optimization and accessibility are basic. Security posture is weak due to lack of security headers and unclear SSL configuration. Privacy compliance is poor, with no visible privacy or cookie policies. The domain WHOIS data is unavailable, raising concerns about domain legitimacy. Suspicious external domains embedded in scripts and iframes further reduce trust. Overall, the site is functional and business-oriented but requires improvements in security, privacy, and domain registration transparency.

J

Jānis Roze

jr.lv

66

Jānis Roze is a well-established Latvian retail company specializing in books, stationery, and office supplies, operating a professional e-commerce platform targeting local consumers and businesses. The website demonstrates a solid technical infrastructure built on Magento with modern web technologies and performance optimizations. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is generally good with HTTPS enforcement, security headers, and monitoring tools like New Relic, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. The absence of WHOIS data limits full domain trust assessment but the website content and technical indicators suggest a legitimate and professional business. Overall, the site is functional, secure, and compliant with relevant regulations, serving its target market effectively.

H

Hokeja Pasaule - Hokeja Veikals | Hokejapasaule.lv

hokejapasaule.lv

53

Hokejapasaule.lv is an e-commerce website specializing in the retail of hockey equipment and accessories targeted primarily at Latvian hockey players and enthusiasts, including both children and adults. The site offers a wide range of products such as hockey skates, sticks, protective gear, bags, and clothing. The business operates in the retail sector with a medium-sized market presence in Latvia. The website is built on the Magento 2 platform, leveraging modern JavaScript libraries and third-party services like Doofinder for search and Hotjar for analytics, indicating a moderate level of digital maturity. From a security perspective, the website employs HTTPS, ensuring encrypted communications. However, the absence of key security headers and lack of visible privacy and cookie policies suggest room for improvement in security best practices and compliance. No WHOIS data was available due to query limits, limiting the ability to fully verify domain legitimacy and registrant information. The site does not display explicit contact information or incident response channels, which could impact user trust and compliance with data protection regulations. Overall, the website presents a professional and well-structured e-commerce platform with good content quality and user experience. However, it requires enhancements in privacy compliance, security headers, and transparency regarding business and security policies to strengthen its security posture and trustworthiness.

T

Toyota Eesti

toyota.ee

72

Toyota Eesti operates as the official Toyota brand presence in Estonia, offering a comprehensive range of automotive products including hybrid and electric vehicles, SUVs, commercial vehicles, and special offers. The website serves as a digital storefront and information hub for Estonian consumers and businesses interested in Toyota's mobility solutions. It reflects Toyota's global brand standards and local market adaptation. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies such as Adobe Launch for tag management, Datadog for real user monitoring, and OneTrust for cookie consent management. The infrastructure is robust, with CDN usage and integration with Toyota Europe services. Security posture is strong, with HTTPS enforced, privacy-conscious tracking, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service documents are not detected in the provided content, which is a compliance gap. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

A

AS FEB

feb.ee

54

AS FEB is a leading Estonian company specializing in the sale of sanitary technology, electrical systems, heating, tools, and ventilation products. The company operates a comprehensive e-commerce platform complemented by multiple physical stores across Estonia, targeting both retail consumers and business clients. Their market position is strong within Estonia, supported by a broad product range and a dedicated B2B portal. The website is professionally designed, mobile-optimized, and integrates modern e-commerce technologies such as Magento 2, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, ensuring a secure user experience. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance and transparency. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

T

The Hertz Corporation

hertz.ie

70

The website www.hertz.ie is the Irish regional portal for The Hertz Corporation, a globally recognized car rental company. It offers car and van rental services across Ireland with a focus on quality and convenience, including electric vehicle options. The site supports multiple languages and internationalization, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks, asynchronous script loading, and integrates Google services such as Tag Manager and Analytics, alongside Stripe for payments and reCAPTCHA for bot protection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not evident. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. Business credibility is supported by consistent branding and professional content, though direct contact details are not prominently displayed on the analyzed page. Overall, the site is professionally designed, functional, and secure, suitable for enterprise-level operations in the transportation sector.

T

The Hertz Corporation

hertz.es

71

The website www.hertz.es is the official Spanish portal for The Hertz Corporation, a globally recognized car and van rental company. It offers online reservation services tailored to the Spanish market and integrates with a broad international network of Hertz websites. The site targets consumers and businesses seeking vehicle rentals in Spain and worldwide, providing a professional and localized user experience. The business model centers on vehicle rental services supported by a loyalty program and business rental solutions. Technically, the site employs modern JavaScript frameworks, Google analytics and tag management, and security tools such as reCAPTCHA Enterprise, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with a comprehensive privacy policy and GDPR-aligned cookie consent. However, WHOIS data is restricted due to .es registry policies, limiting public domain registration transparency. Overall, the site is professional, secure, and trustworthy, suitable for enterprise-level operations.

T

The Hertz Corporation

hertz.co.uk

67

The Hertz Corporation operates a comprehensive car and van rental service platform targeting customers primarily in the UK and worldwide. The website offers a broad range of services including daily car hire, electric vehicles, long-term business rentals, and van hire, supported by loyalty programs such as Gold Plus Rewards. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the platform leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Stripe for payments, alongside security tools like Google reCAPTCHA Enterprise and a cookie consent mechanism powered by Securiti.ai. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. WHOIS data for the subdomain queried is unavailable due to Nominet rules, but the main domain is legitimate and consistent with the business. Overall, the website demonstrates a mature digital presence with robust security and privacy practices.

B

Burpee

burpee.com

70

Burpee is a well-established company specializing in seeds, plants, and gardening supplies with a history dating back to 1876. The company operates a large-scale e-commerce platform built on Magento 2, serving home gardeners and plant enthusiasts primarily in the United States. The website demonstrates a mature digital presence with integrated marketing, analytics, and personalization technologies. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Burpee presents a trustworthy and professional online presence aligned with its brand legacy.

Z

Zone Media OÜ

tellimine.ee

53

Tellimine.ee is an Estonian e-commerce platform specializing in online subscriptions for newspapers and magazines. Operated by Zone Media OÜ since 2010, the website targets Estonian-speaking customers interested in print media subscriptions. The platform offers a range of products including newspapers, magazines, and gift subscriptions, positioning itself as a niche player in the local media subscription market. The website uses Magento 2 with a custom Olegnax theme and integrates GDPR compliance modules to manage cookie consent and user privacy. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, KnockoutJS, and RequireJS, and includes Google reCAPTCHA for bot protection on login forms. Security posture is generally good with HTTPS enforced and no exposed sensitive data, although some security headers are missing and DNSSEC is not enabled. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Contact information is not directly available on the site, which may impact user trust. Overall, the website is functional, professionally designed, and moderately secure, but could improve transparency and compliance documentation.

Fleximed as operates the Fleximoover.no website, offering a specialized mobility aid designed for patients with Huntington's disease. The company is positioned in the healthcare sector in Norway, targeting a niche patient group with a unique product. The website provides basic information about the product concept, features, and accessories, with clear contact details and some language options for international visitors. Technically, the site is built using Adobe Muse with standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.8.3, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is average; HTTPS is used, but no advanced security headers are detected, and the use of an outdated jQuery version presents potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent WHOIS data, domain age, and clear contact information. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and modernization of its technical stack.

Z

Zone Media OÜ

tooriistamarket.ee

48

Tooriistamarket.ee is a well-established Estonian retail business specializing in tools, workwear, chemicals, and related equipment, serving both professional tradespeople and general consumers. Founded in 2010 and operated by Zone Media OÜ, the company combines e-commerce with physical retail locations, offering a broad product range and additional services such as tool rental and installment payment options. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools including Google Analytics, Facebook Pixel, and TikTok Pixel. The infrastructure is hosted and registered by Zone Media OÜ, ensuring consistency and control over the domain and hosting environment. Performance is moderate with room for optimization, and SEO practices are well implemented. Security posture is strong with HTTPS enforced, CSRF protections, and GDPR-compliant cookie consent mechanisms. However, explicit security headers like X-Frame-Options and Content Security Policy could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy policy and cookie management, though incident response and security policy disclosures are absent. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining regular audits of third-party scripts to sustain security and compliance.

C

Citadele

xrewards.ee

68

The website www.xrewards.ee represents the C REWARDS loyalty and discount program affiliated with Citadele bank, targeting C card holders primarily in Estonia and the Baltic region. The platform offers users the ability to earn points on purchases and redeem them for discounts and prizes, integrating banking services with retail loyalty. The website is built on Magento CMS with modern frontend technologies including RequireJS and jQuery, and is monitored using New Relic and Google Tag Manager. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site demonstrates a mature digital infrastructure aligned with the business goals of Citadele bank's loyalty program.

M

Medline

medline.eu

73

Medline Europe operates as a significant healthcare supplier supporting clinicians, patients, and communities. The website presents a professional and consistent brand image with a focus on medical supplies and healthcare services. The company targets healthcare professionals and institutions across Europe, positioning itself as a trusted business partner in the healthcare sector. The digital presence is built on a Magento e-commerce platform, leveraging modern web technologies and third-party services such as Algolia for search and Cookiebot for privacy compliance. The technical infrastructure is mature, with good mobile optimization and SEO practices, although some improvements in accessibility and security headers could enhance the overall quality. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the website is trustworthy and professionally maintained, though WHOIS data is privacy protected, limiting domain age and registrant verification.

P

PlastisolTransfer24.com

plastisoltransfer24.com

63

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

Y

Yliopiston Apteekki

yliopistonapteekki.fi

63

Yliopiston Apteekki operates Finland's largest online pharmacy, offering prescription medicines, over-the-counter products, and cosmetics with a focus on fast delivery and customer service. The business model centers on e-commerce pharmacy retail, targeting Finnish consumers seeking convenient pharmaceutical services. The website demonstrates a mature digital infrastructure built on Magento 2, leveraging modern JavaScript frameworks and analytics tools such as Piwik PRO and Cookiebot for privacy compliance. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure cookie practices, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility, supporting a high level of user trust and engagement.

C

C&C EE OÜ (endine iDeal Group AS)

ideal.ee

51

iDeal (operated by C&C EE OÜ) is Estonia's largest reseller and service partner for Apple products, offering a comprehensive range of Apple devices and accessories through both e-commerce and physical stores. The company targets consumers, students, and business clients with services including device sales, repairs, trade-in programs, and financing options. The website demonstrates a mature digital infrastructure built on Magento with modern JavaScript frameworks and integrates multiple marketing and analytics tools. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

B

Büroomaailm

byroomaailm.ee

67

Büroomaailm is an established Estonian e-commerce retailer specializing in office supplies, office technology, furniture, and school and art supplies. The website targets both retail and wholesale customers within Estonia, offering a broad product range and a professional online shopping experience. The platform is built on Magento 2 with various extensions enhancing functionality, including wishlist management and advanced search features. The site employs modern JavaScript libraries and tracking tools such as Hotjar, Microsoft Clarity, and Google Tag Manager to monitor user behavior and optimize marketing efforts. Security-wise, the site enforces HTTPS with a good SSL configuration but lacks visible security headers and published security policies. Privacy compliance is weak, with no explicit privacy or cookie policies detected, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

M

Miterassa

miterassa.ee

56

Miterassa operates a professional e-commerce platform specializing in consumer electronics, including audio, video, and smart devices, targeting customers primarily in Estonia. The website presents a well-structured catalog with clear navigation and a consistent brand presence. The business model focuses on retail sales supported by extended warranty and installation services, positioning Miterassa as a reputable regional player in the electronics retail market. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for consent management. The site is mobile-optimized and employs HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing cookie consent, and using security headers. However, it lacks publicly available security policies and incident response contacts, which are recommended for enhanced transparency and compliance. No critical vulnerabilities or suspicious indicators were detected. Overall, the website is professional, secure, and compliant with privacy regulations, reflecting a trustworthy business. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party scripts to sustain security posture.

V

Valge Klaar

valgeklaar.ee

45

Valge Klaar is a reputable Estonian company operating as an official Apple reseller, service partner, and trainer. Their website demonstrates a strong market position with a comprehensive e-commerce platform offering Apple products, accessories, and business leasing solutions. The company targets both retail consumers and business clients, providing trade-in programs and tailored business services such as SmartDeal leasing. The website content is well-structured, professionally designed, and localized in Estonian with multi-language support.

D

DETAIL

detail.de

70

DETAIL is an established international media platform focused on architecture, construction, and design. It offers rich editorial content, a magazine, an online shop, and organizes events and awards targeting professionals in architecture and design sectors. The website is built on Magento 2, leveraging modern JavaScript frameworks and third-party services for analytics, advertising, and user consent management. The platform demonstrates a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CAPTCHA protections, and error tracking, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the site is professional, trustworthy, and well-positioned in its niche media market.

Stanno.com/uk is an official e-commerce website specializing in sportswear and sports equipment targeted primarily at UK customers. The site serves as a direct retail channel for the brand, offering a range of sports apparel and accessories. The business model is focused on online sales with a medium-sized market presence in the retail sector. The website demonstrates consistent branding and good content quality, supported by official social media channels and trust indicators such as Trustpilot integration. Technically, the website is built on the Magento 2 platform, leveraging modern JavaScript libraries including RequireJS and jQuery, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-related cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements key security headers, indicating a good security posture. Captcha mechanisms are in place to mitigate automated abuse. However, the absence of a published privacy policy and terms of service pages reduces privacy compliance confidence. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy from a user perspective but lacks transparency in domain registration and privacy documentation. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing accessibility, and verifying domain registration details to improve trust and compliance.

S

Seizoensboxen NL

seizoensboxen.nl

57

Seizoensboxen NL operates an e-commerce platform specializing in delivering complete seasonal meal boxes and catering services across the Netherlands. Their business model focuses on providing convenient, high-quality home dining experiences with free delivery and additional services such as dishwashing. The website is built on Magento 2 and integrates multiple marketing and analytics tools, including Google Analytics 4 and eTrusted reviews, indicating a mature digital infrastructure. The site is well-branded, mobile-optimized, and offers a good user experience with clear navigation and professional design. However, explicit privacy policies and terms of service are not found in the provided content, which may impact compliance and user trust.

A

A-Z Gourmet Service

gourmetten.nl

53

A-Z Gourmet Service is a well-established Dutch company specializing in gourmet meal delivery and catering services, operating since 1986. The company targets consumers and groups in the Netherlands, Belgium, and Germany, offering fully catered gourmet packages including equipment and dishwashing services. Their market position is strong as a leading gourmet service provider in the Netherlands, supported by certifications such as ISO-22000 and positive customer reviews. Technically, the website is built on a robust Magento 2 platform with modern JavaScript frameworks and integrates multiple marketing and analytics tools, ensuring a good digital maturity level. Security posture is solid with HTTPS, cookie consent mechanisms, and security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sportdirect.com

sportdirect.com

68

Sportdirect.com is a Dutch e-commerce retailer specializing in sports clothing, sports articles, and teamwear. The website targets sports enthusiasts and teams primarily in the Netherlands, offering a broad range of sports-related products. The business operates on a Magento 2 platform, indicating a mature e-commerce infrastructure with integrations for marketing and analytics tools such as Google Tag Manager and Trustpilot. The website demonstrates good design quality, mobile optimization, and user experience, supporting its position as a large online retailer in the sports retail sector. However, the absence of explicit privacy and terms of service pages and the lack of visible WHOIS domain registration data introduce some concerns regarding transparency and compliance. Security-wise, the site enforces HTTPS and uses CAPTCHA protections but lacks visible security headers and formal security policies, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

S

Sravni.bg

sravni.bg

56

Sravni.bg is a well-established Bulgarian online price comparison platform founded in 1998 and operated by Нет Инфо ЕАД. The website offers users the ability to browse and compare product offers from various online merchants, providing verified merchant listings, user reviews, price alerts, and financing options. The platform targets Bulgarian online shoppers seeking reliable and comprehensive product pricing information. Technically, the site leverages AngularJS, Bootstrap, jQuery, and integrates Google services such as Tag Manager, reCAPTCHA, and Maps API, alongside advertising networks like SmartAdServer and Google AdSense. The site is mobile-optimized with good SEO practices and moderate performance.

K

KNVBshop.nl

knvbshop.nl

65

KNVBshop.nl is the official e-commerce platform for the Royal Dutch Football Association (KNVB), specializing in licensed merchandise including official team kits, fan articles, and specialized products for referees, trainers, and players. The website targets football fans and stakeholders in the Dutch football ecosystem, offering a comprehensive Nike collection and other official products. The site is built on Magento 2, leveraging modern JavaScript libraries and integrations such as Clerk.io for product recommendations and Trustpilot for customer reviews, reflecting a mature digital infrastructure.

I

Institutional Property Advisors

institutionalpropertyadvisors.com

67

Institutional Property Advisors (IPA), a division of Marcus & Millichap, operates as a leading commercial real estate services firm specializing in investment sales, capital markets, and market research across the United States and Canada. The website reflects a professional and well-branded digital presence targeting institutional investors and commercial real estate clients. The business model focuses on providing customized solutions for acquisition, disposition, and financing of commercial properties and portfolios. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and reCAPTCHA for form security, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and published incident response or vulnerability disclosure information. The absence of WHOIS registration data is a notable anomaly, though the website's content and parent company association support its legitimacy. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is moderate with recommendations to enhance security headers, publish incident response policies, and clarify domain registration details to improve trust and compliance posture.

N

NOVUS

novus.ua

52

NOVUS is a large Ukrainian retail supermarket chain offering a wide assortment of fresh products, promotions, and online shopping services. The website is professionally designed using Magento platform, integrating modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and provides customer engagement through contact forms and social media channels. Security posture is good with HTTPS, reCAPTCHA, and standard security headers, though explicit cookie consent and security policies are lacking. WHOIS data confirms legitimate registration consistent with the business claims. Overall, NOVUS demonstrates a mature digital presence suitable for its market position.

S

Sil

sil.lt

56

Sil.lt is an established Lithuanian e-commerce retailer specializing in sports and leisure footwear, apparel, and accessories for men, women, and children. The website offers a wide range of original branded products including Nike, adidas, Jordan, and Puma, positioning itself as a key player in the Lithuanian sports retail market. The business model focuses on online sales with fast delivery and a customer-friendly return policy, targeting sports enthusiasts and casual consumers alike. Technically, the site is built on Magento with a modern tech stack including RequireJS, jQuery, and multiple marketing and analytics integrations such as Google Tag Manager, Hotjar, and Criteo. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and secure cookie settings, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is partial; a cookie policy and consent mechanism exist, but no privacy policy page was detected in the analyzed content. WHOIS data is unavailable, which limits domain trust analysis but the website content and branding appear consistent with a legitimate business. Overall, Sil.lt presents a professional e-commerce presence with room for improvement in privacy transparency and security best practices.

B

BEE WEB SRL

beeweb.eu

38

BEE WEB SRL is a Romanian-based small enterprise specializing in digital marketing education and services, including web design, SEO & SEM, email marketing, social media marketing, and web analytics. The company targets individuals and businesses seeking to enhance their digital marketing skills and online presence. The website serves as an informational and promotional platform for their e-learning courses and marketing services. Technically, the website is built using Adobe Muse with HTML5, CSS3, and JavaScript, including jQuery 1.8.3 and RequireJS. It is hosted by Aruba S.p.A., a reputable registrar and hosting provider. The site is mobile responsive and has a moderate performance profile but lacks advanced SEO and accessibility features. Security posture is limited; no HTTPS status or security headers were identified in the provided data, and the site uses an outdated JavaScript library version. Privacy and cookie policies are absent, and no incident response or security contact information is provided, indicating gaps in compliance and security readiness. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience.

V

VšĮ „Tarptautinis maratonas“

vilniusmarathon.lt

42

Vilniaus maratonas is a well-established marathon event organizer based in Lithuania, focusing on running events for a broad audience including children and seniors. The website presents a professional and consistent brand image with active social media engagement and event history, positioning itself as a leading sports event in the region. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and tracking implementations, but lacks some security headers and explicit privacy/cookie policies. Overall, the site is legitimate and functional but could improve privacy compliance and security best practices.