Security Directory

E

ECNG Digital, UAB

estchange.io

60

ECNG Digital is a Lithuanian-registered virtual currency exchange service provider targeting high net worth individuals and business customers. The company offers an efficient platform for on- and off-ramping of virtual currencies, positioning itself as a niche player in the Lithuanian financial technology sector. Founded in 2021, the company maintains a clear and professional online presence with comprehensive legal disclosures and policy documents. Technically, the website leverages modern frameworks such as Vue.js and Nuxt.js, with Google Tag Manager integrated for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and domain transfer protection but lacks advanced security headers and published security policies, which are recommended for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website demonstrates a solid business credibility and privacy compliance posture, though it could enhance its security transparency and incident response readiness.

H

Hotelschool The Hague

hotelschool.nl

60

Hotelschool The Hague is a well-established hospitality business school based in the Netherlands, offering specialized education and training in the hospitality sector. The website reflects a professional and modern digital presence, leveraging contemporary web technologies such as Nuxt.js and Vue.js to deliver a responsive and accessible user experience. Privacy and cookie consent mechanisms are implemented, indicating compliance with GDPR requirements. The security posture is strong, with HTTPS enforced and appropriate security headers present, although explicit security and incident response policies are not publicly available. Overall, the website demonstrates high business credibility and technical maturity, with room for improvement in publishing comprehensive security and terms of service documentation.

B

BEGA Gantenbrink-Leuchten KG

bega.de

62

BEGA Gantenbrink-Leuchten KG is a specialized company focused on lighting and illumination technology, primarily serving outdoor and architectural sectors. The company presents itself as an established player in the energy-related lighting industry with a professional and well-structured website targeting architects and lighting professionals. The website employs modern web technologies such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and clearer data protection measures. Overall, the website is functional and professional but would benefit from enhanced compliance and security disclosures.

Deep White is a communication management and public relations agency based in Latvia, offering services focused on communication and PR. The website is built using modern frontend technologies such as Nuxt.js and Vue.js, indicating a contemporary digital infrastructure. The site is professionally designed with good mobile optimization and user experience, though it lacks comprehensive metadata and structured data for enhanced SEO and social media integration. Security posture is weak due to the absence of security headers and no visible SSL/TLS configuration details. Privacy and cookie policies are not present, which may impact compliance with GDPR and other data protection regulations. Contact information and incident response details are also missing, limiting direct communication and security incident handling capabilities. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

MRS Grupa appears to be a small-scale business focused on public relations and socio-political relations, as indicated by the website's title and description. The website content is minimal, primarily consisting of branding images and a brief description in Latvian. There is no visible contact information, privacy policies, or terms of service, which limits the transparency and user trust. The technical infrastructure is based on modern web technologies such as Nuxt.js and Google Fonts, but lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to the absence of visible HTTPS enforcement and security headers, and no evidence of privacy compliance or incident response mechanisms is present. Overall, the website presents a basic digital presence with significant room for improvement in security, compliance, and content richness.

C

CoinLoan

coinloan.io

66

CoinLoan is a crypto lending platform established in 2017, offering crypto-backed loans, interest-earning accounts, and crypto exchange services. The company targets cryptocurrency holders seeking to leverage their assets for loans or to earn interest without lock-up periods. The platform is positioned as a medium-sized player in the crypto finance sector with a consistent brand and clear product offerings. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted via Cloudflare, and integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices. Security-wise, the platform enforces HTTPS, uses security headers, and maintains a clientTransferProhibited domain status, indicating a mature security posture. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are published, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website provides clear contact information and privacy compliance mechanisms, including GDPR-aligned privacy and cookie policies.

V

Valsts SIA “Latvijas Sabiedriskais medijs”

ltv.lv

60

Latvijas Sabiedriskais medijs is the national public media organization of Latvia, operating multiple television channels including LTV1 and LTV7, as well as digital platforms such as LSM.lv and REplay.lv. It serves a broad audience including general public, children, and diaspora communities, providing news, cultural, educational, and entertainment content. The organization is state-owned and holds a significant position in the Latvian media landscape, being a member of the European Broadcasting Union (EBU). The website reflects a mature digital presence with modern technologies and comprehensive content offerings. Technically, the website is built using modern JavaScript frameworks (Nuxt.js and Vue.js), employs performance and analytics tools like Chartbeat and Gemius, and uses Cloudflare for hosting and security insights. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance transparency and trust. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further strengthen security posture and compliance transparency.

S

SIA "Longo Latvia"

longo.lv

61

Longo.lv is a Latvian-based used car dealership operating under SIA "Longo Latvia", part of the international Longo Group. The company specializes in selling used and slightly used cars with verified mileage, service history, and warranty. Their business model includes sourcing vehicles primarily from the Netherlands, performing technical inspections, and offering financing options including leasing. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and customer testimonials, positioning Longo.lv as a trusted player in the Latvian automotive market. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates multiple analytics and marketing tools including Google Tag Manager and TikTok Analytics, and employs cookie consent management via Cookiebot. Performance is moderate with good SEO and mobile responsiveness. Security posture is strong with HTTPS enforced and standard security headers present, though no explicit security policy or incident response information is published. The absence of WHOIS data due to query limits restricts domain registration verification, but the website's structured data and consistent branding support legitimacy. Privacy and cookie policies are present and GDPR compliance is indicated. Overall, Longo.lv demonstrates a mature digital presence with solid business credibility and security practices. Strategic recommendations include publishing a dedicated security policy, establishing an incident response contact, enhancing accessibility features, and maintaining vigilance on third-party scripts to mitigate potential vulnerabilities.

A

AS TWINO Investments

twino.eu

59

AS TWINO Investments operates the TWINO investment platform, a pioneering European fintech company specializing in peer-to-peer lending with buyback guarantees. The platform offers retail and professional investors access to unsecured consumer loans and real estate securities, boasting over €1 billion in originated loans since 2009. Licensed and supervised by Latvijas Banka, TWINO emphasizes investor protection and regulatory compliance. The website demonstrates a mature digital presence with modern technologies such as Vue.js and Nuxt.js, delivering a user-friendly and mobile-optimized experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though additional security headers and a public security policy could enhance posture. WHOIS data is privacy protected, typical for .eu domains, but the company's transparency through licensing and media coverage supports legitimacy. Overall, TWINO presents a credible, professional, and well-structured investment platform with strong business and technical foundations.

N

NJ TRANSIT

njtransit.com

69

NJ TRANSIT is the primary public transportation corporation serving New Jersey, offering a comprehensive range of transit services including trains, buses, light rail, and ADA paratransit services. The website reflects a mature, enterprise-level public service entity with a strong market position in the transportation sector. It targets commuters and travelers within New Jersey and neighboring regions, providing trip planning tools, fare information, and real-time service status updates. The business model is focused on public transit operations and customer service facilitation. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Google Fonts, Google Analytics, and various marketing and tracking tools like HubSpot and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a clean and professional design. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs multiple security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data is noted but likely due to privacy or registry protection rather than malicious intent. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing incident response visibility to further strengthen security posture and user trust.

P

ParaVolley EUROPE - Sitting & Standing Volleyball in Europe

paravolley.eu

51

ParaVolley Europe is a regional sports organization dedicated to promoting and organizing sitting and standing volleyball competitions across Europe. The website serves as a hub for news, competitions, and member federations, targeting athletes, sports enthusiasts, and stakeholders in the ParaVolley community. The organization positions itself as a key promoter of inclusive sports within the European region. Technically, the website is built on a modern stack using Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and incorporates popular libraries such as Swiper.js and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

C

Churnkey

churnkey.co

64

Churnkey is a technology company founded in 2020, specializing in SaaS solutions aimed at reducing customer churn and enhancing subscriber retention for subscription-based businesses. The website presents a professional and modern design, leveraging advanced frontend frameworks such as Vue.js and Nuxt.js, and is hosted with Cloudflare for performance and security benefits. The company integrates multiple marketing and analytics tools including HubSpot, Dreamdata, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. However, the site lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and user trust. Security posture is generally good with HTTPS enabled and Cloudflare protection, but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.

S

Siseministeeriumi infotehnoloogia- ja arenduskeskus

smit.ee

65

Siseministeeriumi infotehnoloogia- ja arenduskeskus (SMIT) is the largest governmental IT institution in Estonia focused on developing and managing critical information systems for internal security and emergency services. It serves key government agencies such as the Police and Border Guard Board, Rescue Board, and Ministry of the Interior, providing vital communication and ICT services nationwide. The website reflects a professional government entity with clear service offerings and a strong market position as a trusted IT service provider for public safety. Technically, the site uses modern frameworks like Vue.js and Nuxt.js, ensuring a responsive and moderately performant user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and policies could be enhanced. Privacy compliance is basic with cookie policy present but lacking explicit consent mechanisms. Overall, the site is trustworthy and well-aligned with its government mission.

O

Olevalmis.ee

olevalmis.ee

63

Olevalmis.ee is a government-affiliated Estonian crisis preparedness information portal operated under the auspices of the Estonian Rescue Board (Päästeamet). The website provides practical guidance on handling various crises, behavioral instructions, emergency contact information, and news updates relevant to public safety. It targets Estonian residents seeking reliable and official information on crisis readiness. The business model is informational and public service oriented, positioning itself as a trusted government resource in the emergency preparedness sector. Technically, the website is built on modern web technologies including Nuxt.js and Vue.js frameworks, leveraging Cloudinary for media delivery and Matomo for analytics. The site demonstrates good mobile optimization, accessibility at a basic level, and solid SEO practices. Performance is moderate with no critical technical issues detected. The infrastructure reflects a mature digital presence suitable for a government service. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers. No exposed sensitive data or vulnerable libraries were found. However, the site lacks explicit cookie consent mechanisms and does not publish dedicated security or incident response policies, which are areas for improvement. The WHOIS data confirms the domain's legitimacy and consistency with the website's government affiliation. Overall, Olevalmis.ee presents a trustworthy, professional, and well-maintained platform for crisis information in Estonia. Strategic recommendations include implementing explicit cookie consent, publishing security and incident response policies, enhancing accessibility, and adding vulnerability disclosure information to further strengthen trust and compliance.

H

Häirekeskus

112.ee

65

Häirekeskus is the official Estonian Emergency Response Center responsible for managing emergency calls and coordinating emergency services such as ambulance, police, and rescue. The website serves as a public information portal providing emergency contact numbers, career opportunities, and safety guidance. It targets Estonian residents and visitors requiring emergency assistance, positioning itself as a critical government agency in public safety. The site is well-branded and consistent with government standards, offering content primarily in Estonian with English and Russian alternatives. Technically, the website is built on modern web technologies including Nuxt.js and Vue.js, ensuring good mobile optimization, accessibility, and SEO. The site loads with moderate performance and includes security best practices such as HTTPS enforcement and security headers. No major vulnerabilities or exposed sensitive data were detected. However, explicit cookie consent mechanisms and security policy disclosures could be improved. The security posture is strong with excellent SSL configuration and standard security headers. The absence of a published incident response or vulnerability disclosure policy is noted but not critical. WHOIS data confirms the domain's legitimacy and consistency with the Estonian government entity. Overall, the website demonstrates a mature digital presence with a high level of trustworthiness and professionalism. Strategic recommendations include implementing explicit cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to enhance transparency and compliance. These improvements will further strengthen the site's security posture and user trust.

KOOS.io is a technology company founded in 2021 and registered in Estonia as Programmable Equity OU. The company offers a SaaS platform designed to motivate and reward contributors within platforms and marketplaces by sharing success through legal and technological solutions. Their key services include a company portal and shareholder app that enable tracking contributor impact and distributing rewards fairly. The website is professionally designed using modern frameworks such as Nuxt.js and Tailwind CSS, with integrations for analytics and user behavior tracking tools like Google Analytics, Hotjar, and Crazy Egg. Security is reasonably well implemented with HTTPS and domain transfer protections, but lacks published privacy, cookie, and security policies, which impacts compliance and trust. No WAF or blocking mechanisms were detected, and the domain registration data is consistent and transparent, supporting legitimacy.

R

Raison FinTechnologies Inc.

raison.app

68

Raison FinTechnologies Inc. operates raison.app as a comprehensive digital family office platform offering investment opportunities across venture deals, public stocks, crypto-assets, structured products, and asset management services. The company targets both individual and institutional investors, providing tiered account plans and a broad range of financial instruments. With over 30,000 users globally and regulatory licenses from multiple jurisdictions, Raison positions itself as a trusted fintech innovator in the investment space. Technically, the website is built on a modern Nuxt.js and Vue.js stack, optimized for performance and mobile responsiveness. It integrates essential third-party services such as Google Tag Manager, reCAPTCHA, and Intercom for analytics, security, and customer engagement. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and structured content. From a security perspective, the platform enforces HTTPS, employs security headers, and uses CAPTCHA to protect forms. It holds multiple financial regulatory licenses, enhancing trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly detailed. Overall, raison.app presents a professional, secure, and user-friendly investment platform with strong regulatory backing and a clear business model. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection roles to further strengthen trust and compliance.

W

WebSecured AS

websecured.io

77

WebSecured AS is a Norwegian cybersecurity service provider specializing in penetration testing, security audits, code review, and physical security testing. The company serves a diverse clientele including major organizations such as Microsoft, Vipps, and the Norwegian Tax Administration, positioning itself as a trusted small business in the cybersecurity sector. Their website reflects a professional and modern digital presence built on Vue.js and Nuxt.js frameworks, with good mobile optimization and SEO practices. The use of Cloudflare for DNS and CDN enhances their hosting reliability and security. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements are recommended in security headers and explicit security policies. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is clearly provided, including email, phone, and physical address. Overall, WebSecured demonstrates a credible and trustworthy business with a good balance of technical maturity and client trust.

K

Kompas.id

kompas.id

63

Kompas.id is a prominent Indonesian digital news platform offering comprehensive coverage across various domains including politics, economy, sports, and international news. The platform operates on a subscription-based model providing premium content to its audience. It targets Indonesian readers seeking quality journalism and up-to-date news. The website demonstrates a professional design with consistent branding and clear navigation, supporting a good user experience. Technically, Kompas.id leverages modern web frameworks such as Nuxt.js and Vue.js, and integrates multiple analytics and advertising technologies to optimize performance and marketing efforts. Security-wise, the site enforces HTTPS and employs several security best practices, though there is room for improvement in implementing comprehensive security headers and explicit security policies. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks visible privacy and terms of service documentation in the provided content. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and established media entity.

B

Brand Archive

brandarchive.xyz

64

Brand Archive is a technology-driven platform launched in 2023 that provides a comprehensive digital archive of brand assets including logos, art direction, and fonts. It targets brand researchers, designers, and marketers seeking inspiration and historical brand data. The platform operates on a subscription model offering free and pro tiers, positioning itself as a niche service in the brand research market. Technically, the website leverages modern JavaScript frameworks such as Nuxt.js and integrates payment processing via Stripe and analytics through RudderStack and Plausible Analytics. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses domain privacy protection, but lacks some recommended security headers and does not publish privacy or cookie policies, which are compliance gaps. Overall, the website is functional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

Connect.ge is a Georgian digital agency specializing in comprehensive web services including website development, UX/UI design, hosting, SEO, and digital marketing. Established in 2011, the company targets businesses seeking to enhance their online presence with professional and innovative digital solutions. Their market position is that of a trusted local provider with a strong portfolio and active social media presence. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and GDPR alignment. Overall, Connect.ge presents a professional, trustworthy, and technically mature digital presence.

O

OpenCall AI

opencall.ai

52

OpenCall AI is a US-based technology startup founded in 2023, offering an AI-powered communications platform that automates telephone conversations to accelerate sales and improve customer experience. The company positions itself as an innovative player in the AI communications space, targeting businesses seeking sales automation and enhanced customer interactions. The website is professionally designed using modern JavaScript frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No incident response or vulnerability disclosure information is published. Social media presence on LinkedIn and Twitter supports business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

F

Forlle'd

forlle-d.com

54

Forlle'd appears to be a skincare brand with a website built on modern JavaScript frameworks such as Nuxt.js and Vue.js. The site includes product showcases and professional/scientific content related to skincare. The technical infrastructure is moderately modern with Google Analytics and Tag Manager integrated for tracking. However, the website lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain is well-established, registered since 2004 with a reputable registrar, indicating business stability. Security posture is weak due to missing headers and lack of explicit security policies. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

E

Eesti Advokatuur

advokatuur.ee

55

Eesti Advokatuur is an official Estonian public-law professional association responsible for organizing legal services and protecting the professional rights of advocates. The website serves as an information portal for advocates, law firms, and the public seeking legal assistance. It offers structured content about the organization's structure, services, news, and events. The technical infrastructure is modern, leveraging Vue.js and Nuxt.js frameworks with Tailwind CSS for styling, hosted by Zone Media OÜ. The site is well-optimized for performance and mobile devices, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and detailed privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency. Overall, the domain registration and website content align well, supporting the legitimacy and credibility of the organization.

SDF Group is a globally recognized manufacturer and distributor of tractors, diesel engines, and agricultural machinery, operating under multiple well-known brands. The company targets farmers and contractors seeking advanced farming technology and precision agriculture solutions. The website demonstrates a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, incorporating analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response policies could be improved. The absence of WHOIS data reduces domain registration trust but is offset by professional branding and comprehensive content. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a strong business credibility profile.

D

Delfi Meedia AS

epl.ee

57

Eesti Päevaleht, operated by Delfi Meedia AS, is a leading Estonian news media outlet offering comprehensive news, opinion, and cultural content. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, supported by reputable advertising and analytics providers. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

C

CYBERNETICA AS

cyber.ee

57

Cybernetica AS is a well-established Estonian technology company specializing in secure digital society technologies, including e-governance, cybersecurity, digital identity, and maritime surveillance. The company has a strong market position as the architect of e-Estonia and serves governments and enterprises globally. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional design. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Cybernetica demonstrates high business credibility and technical maturity, making it a trustworthy and professional entity in its sector.

D

Delfi Meedia AS

ekspress.ee

56

Eesti Ekspress, operated by Delfi Meedia AS, is a leading Estonian investigative and analytical news portal targeting discerning readers who value in-depth journalism and diverse perspectives. The website leverages modern web technologies including Nuxt.js and Vue.js, and integrates multiple advertising and tracking services from reputable providers. The site is well-structured, mobile-optimized, and maintains a professional design with consistent branding. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not prominently provided. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website demonstrates a mature digital presence with high trustworthiness and business credibility.

P

Patron dětí

patrondeti.cz

47

Patron dětí is a Czech non-profit organization established in 2017, dedicated to supporting children who have faced adversity. The website serves as a platform to share stories of these children and connect donors and volunteers willing to help. The organization positions itself as a trusted charity within the Czech Republic, leveraging modern web technologies such as Nuxt.js and Vue.js to provide a responsive and user-friendly experience. The site integrates standard analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response procedures are not publicly disclosed. Overall, the website demonstrates a good balance of professional design, technical implementation, and privacy compliance, supporting its mission effectively.

The website bijvoorbeeldlease under the domain www.mobilityonline.eu is an online platform focused on providing mobility leasing solutions primarily targeting Dutch-speaking business users. The platform is branded under AutoDisk B.V., which appears to be the parent company. The site offers a login mechanism based on email magic links, indicating a modern approach to user authentication. The business model revolves around facilitating mobility leasing arrangements digitally, positioning itself as a niche player in the Dutch transportation leasing market. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, leveraging popular libraries like FontAwesome and Material Design Icons for UI elements. Static assets are hosted on Microsoft Azure Blob Storage, and Google Analytics and Tag Manager are used for tracking. The site is mobile-optimized and performs moderately well, though SEO and accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a passwordless login approach, which reduces password-related risks. However, no explicit security headers such as Content-Security-Policy or HSTS were detected, and no privacy or cookie policies are present on the login page, indicating gaps in compliance and security best practices. The WHOIS data is fully redacted due to EURid privacy protection, which is common but reduces transparency. Overall, the website is functional and professionally presented but would benefit from enhanced security headers, clear privacy and cookie policies, and improved transparency to increase trust and compliance. Strategic recommendations include implementing security headers, publishing privacy documentation, and providing clear contact information for security incidents.

V

Van Mossel Automotive Group

vanmossel.lu

61

Van Mossel Automotive Group is a major automotive distributor operating in Luxembourg and several European countries, representing 43 automotive brands. The company offers vehicle sales, leasing, and dealership services, targeting customers in the transportation sector. The website is professionally designed using modern technologies such as Nuxt.js and Tailwind CSS, with integrations for Google Tag Manager and Google Maps API, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks comprehensive security headers and explicit privacy and terms policies. The absence of WHOIS data limits domain trust verification, though the website's professional presentation supports legitimacy. Strategic improvements in privacy transparency, security header implementation, and contact information publication would enhance trust and compliance.

V

Van Mossel Automotive Group

vanmossel.com

64

Van Mossel Automotive Group is a major European automotive company with a strong presence across multiple countries, offering a wide range of vehicle sales, leasing, and related services. The website is professionally designed using modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy, which impacts overall business credibility scoring. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing clear company contact details to enhance trust.

VELUXshop.lt is the official Lithuanian online store for VELUX branded window blinds, accessories, and related products. The website offers a comprehensive catalog of blackout blinds, energy-saving blinds, insect screens, and external heat protection products, targeting homeowners and consumers in Lithuania. The business operates an e-commerce model with free delivery for orders over 150 euros and provides customer support and installation guidance. The site is well-branded and consistent with VELUX's global identity, indicating a strong market position within its niche. Technically, the website is built using modern frontend frameworks such as Vue.js and Nuxt.js, with Sitecore CMS inferred from the data structure. It employs Google Tag Manager for analytics and marketing. The site is mobile-optimized, has good SEO practices, and includes accessibility features, although some areas could be improved. Performance is moderate, with a well-structured navigation and professional design. From a security perspective, the site enforces HTTPS, includes essential security headers, and does not expose sensitive data. However, explicit cookie consent mechanisms are not present, which could be improved for GDPR compliance. No security policies or incident response contacts are published, and no vulnerability disclosure information is available. The WHOIS data for the domain is unavailable, which limits domain legitimacy verification and slightly reduces trust. Overall, VELUXshop.lt presents a professional, secure, and user-friendly e-commerce platform for VELUX products in Lithuania. Strategic improvements in privacy compliance and domain registration transparency would enhance trust and regulatory adherence.

K

Kainų palyginimo portalas | Kainoteka.lt

kainoteka.lt

59

Kainoteka.lt is a Lithuanian price comparison portal offering consumers the ability to compare prices across over 400 stores and more than 6 million products. The website targets Lithuanian consumers seeking the best deals and operates as an aggregator of product offers, positioning itself as a significant player in the local e-commerce ecosystem. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with analytics implemented via Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and provides a good user experience with clear navigation and search capabilities. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published privacy or security policies, which are areas for improvement. WHOIS data was unavailable due to query limits, limiting domain trust assessment. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

I

Improbable

improbable.io

60

Improbable is a technology company specializing in metaverse infrastructure, venture building, and frontier ecosystems such as AI and web3. With over a decade of experience, they support founders and entrepreneurs in creating immersive virtual worlds and enterprise applications. Their market position is strong, supported by partnerships with major brands like Major League Baseball. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and policies could be improved. The WHOIS data is privacy protected, which is typical for tech companies, and no suspicious patterns were found. Overall, the website reflects a professional and credible business with a clear focus on metaverse technology and venture development.

U

UAB digitouch

digitouch.lt

15

UAB digitouch is a Lithuanian digital agency specializing in website creation, application development, and online marketing with unique WordPress solutions. The company targets businesses seeking creative digital innovation and offers a portfolio showcasing diverse projects including AI, service platforms, e-commerce, and applications. The website demonstrates a moderate to advanced technical infrastructure using modern frontend frameworks such as Vue.js and Nuxt.js, integrated with Google Tag Manager and Crazy Egg for analytics and user behavior tracking. While the site is well-designed and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and trust. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and vulnerability disclosure policies. Overall, the domain appears legitimate despite unavailable WHOIS data, and the company maintains a professional online presence with clear contact information and social media links.

K

Kauno Grūdai

kauno-grudai.lt

72

Kauno Grūdai is a major Lithuanian company specializing in the manufacturing of food products and animal feed. The website presents a professional and modern digital presence using Vue.js and Nuxt.js frameworks, with integrated analytics via Google Tag Manager and a cookie consent mechanism powered by Cookiebot, indicating compliance efforts with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, limits the transparency and user trust aspects. The website is fully accessible without any detected WAF or blocking mechanisms, and it uses HTTPS, ensuring secure communications. The lack of WHOIS data due to query limits restricts the ability to fully verify domain registration legitimacy, which slightly reduces the overall trust score.

M

Macmillan Education Limited

macmillanenglish.com

59

Macmillan Education Limited, a subsidiary of Springer Nature, operates the website macmillanenglish.com offering English Language Teaching (ELT) courses, digital solutions, and educational materials. The company targets learners and educators globally, providing a comprehensive catalogue of courses and resources. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and Vue.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. The absence of WHOIS domain registration data raises concerns about domain legitimacy, but the website content and branding strongly indicate a reputable educational publisher. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure policy to enhance trust and compliance.

M

Mantinga

mantinga.lt

58

Mantinga is a Lithuanian food company specializing in bakery and confectionery products, offering a diverse range of items and recipes through its website. The company targets consumers interested in quality food products within Lithuania, operating a retail and e-commerce business model. The website is built using modern web technologies such as Vue.js and Nuxt.js, integrating analytics and marketing tools like Google Tag Manager and Facebook Pixel. Privacy and cookie policies are implemented with GDPR compliance in mind. Security posture is good with HTTPS and security headers in place, though no explicit security or incident response policies are published. WHOIS data is unavailable, which limits domain trust verification. Overall, the website is professional and functional, with moderate risk due to missing domain registration transparency.

I

iPassportPhoto

ipassportphoto.com

58

iPassportPhoto is an AI-driven online service specializing in generating compliant passport, visa, and ID photos quickly and conveniently. The platform targets individuals worldwide who need biometric photos that meet official government requirements. The business operates as a small technology startup launched in 2024, leveraging AI to automate photo cropping, background adjustment, and compliance validation. The website is built on modern frameworks like Nuxt.js and hosted via Alibaba Cloud, indicating a contemporary technical infrastructure. Analytics tools such as Google Tag Manager and TalkingData are used for user behavior tracking, though privacy compliance could be improved with cookie consent mechanisms. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. No direct contact or incident response information is published, which may affect trust. Overall, the site is professional and functional but would benefit from enhanced privacy and security practices to strengthen user confidence and compliance.

W

WST Präzisionstechnik GmbH

wst-willmann.de

70

WST Präzisionstechnik GmbH is a leading manufacturer specializing in precision milling and turning parts, serving a broad industrial customer base including automotive, medical technology, and machinery sectors. With over 30 years of experience and a strong international presence, WST offers innovative and automated manufacturing solutions tailored to complex industrial needs. The company emphasizes quality, process security, and customer-centric service. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, supported by a Strapi CMS backend, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional, trustworthy, and GDPR-compliant digital presence.

W

Weilbach A/S

weilbach.dk

67

Weilbach A/S is a specialized provider of nautical software, services, data, and products tailored for the maritime industry. The company emphasizes improving workflows onboard ships and offers 24/7 support, positioning itself as a niche B2B service provider within the transportation sector. The website reflects a professional and consistent brand image, targeting maritime professionals and ship operators primarily in Denmark. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates Google Tag Manager for analytics, and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly, raising questions about domain legitimacy despite the professional online presence. Overall, the website is functional, well-designed, and trustworthy but would benefit from enhanced transparency and security practices.

Salonsupport A/S operates a professional B2B e-commerce platform serving Denmark's hairdressing industry, offering a wide range of hair care products, accessories, and stylist education. Established in 2004, it holds a strong market position as one of the largest suppliers in its sector. The website is built on modern web technologies including Nuxt.js and Tailwind CSS, providing a responsive and user-friendly experience. Marketing and tracking are managed via Klaviyo, indicating a focus on customer engagement. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

S

Signifly

signifly.com

63

Signifly is a digital marketing and innovation agency focused on helping ambitious brands become digital leaders through marketing strategy, branding, website development, and growth marketing. The company positions itself as a digital innovation partner with a hands-on approach to strategy, design, technology, and e-commerce. The website is professionally designed, mobile optimized, and uses modern web technologies including Nuxt.js, Vue.js, and DatoCMS. It integrates marketing and analytics tools such as HubSpot forms, Google Tag Manager, and Facebook Pixel to support business growth and user engagement. Security posture is good with HTTPS and key security headers implemented, though improvements such as CSP and HSTS are recommended. However, the absence of WHOIS registration data and lack of privacy, cookie, and terms of service policies reduce overall trust and compliance standing. No direct company contact emails or phone numbers were found, which may impact user trust and communication. Overall, the website is functional and professional but requires enhancements in transparency, compliance, and domain legitimacy to improve business credibility and security assurance.

W

Whitehouse Post

capguncollective.com

57

Whitehouse Post is a well-established media company specializing in video editing and post production services with offices in major cities including London, New York, Chicago, and Los Angeles. The website showcases a portfolio of featured works and targets clients in the media production and advertising sectors. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on Amazon AWS infrastructure, and integrates Vimeo for video playback. Google Analytics and Google Tag Manager are employed for user tracking, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact information or security incident response details are provided. Overall, the website is professional and functional but would benefit from improved privacy and security practices to enhance trust and compliance.

S

SK hynix

skhynix.com

67

SK hynix is a leading global semiconductor company specializing in memory products such as DRAM, NAND storage, and SSDs. The company serves diverse markets including AI, server, networking, mobile, PC, consumer electronics, and automotive sectors. Their website reflects a mature enterprise with a focus on sustainability, investor relations, and corporate governance. Technically, the site uses modern frameworks like Nuxt.js and is hosted on Azure CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are lacking. The absence of WHOIS data is a concern but does not outweigh the professional presentation and trust signals on the site. Overall, the website is reliable and well-maintained, suitable for enterprise-level operations.

K

Kakao Corp

kakao.ai

57

Kakao i is the AI brand site of Kakao Corp, a major South Korean technology company. The site showcases AI services including voice recognition, voice commands, and smart AI devices such as smart speakers. The company targets consumers and partners interested in AI technology and smart home devices, positioning itself as a leader in the Korean AI technology market. The website is well-branded, professionally designed, and provides clear navigation and relevant content in Korean. Technically, the site uses modern JavaScript frameworks like Nuxt.js and integrates official Kakao SDKs and Facebook Pixel for marketing and analytics. Hosting is provided by Megazone Corp., a reputable Korean hosting provider. Security posture is good with HTTPS enabled and no exposed sensitive data, though some security headers and DNSSEC are missing. Privacy compliance is partially met with a comprehensive privacy policy and terms of service but lacks a cookie consent mechanism. Contact information is limited to forms and support pages without explicit emails or phone numbers. Overall, the site is legitimate, consistent with the WHOIS data, and reflects a mature digital presence.

㈜

㈜디케이테크인

kakaowork.com

55

카카오워크는 ㈜디케이테크인이 운영하는 한국 내 대표적인 업무용 협업 플랫폼으로, 무료 화상회의, 메일, 캘린더, AI 기반 통합검색 등 다양한 기능을 제공합니다. 카카오 그룹의 기술력과 브랜드 신뢰를 기반으로 국내 기업 및 조직을 대상으로 한 SaaS 비즈니스 모델을 운영하고 있습니다. 웹사이트는 최신 웹 기술인 Nuxt.js와 Vue.js를 활용하여 빠르고 모바일 최적화된 사용자 경험을 제공하며, Google Tag Manager, Facebook Pixel, Naver Analytics 등 다양한 분석 도구를 통합해 마케팅과 사용자 행동 분석에 집중하고 있습니다. 보안 측면에서는 HTTPS가 적용되어 있으며, 민감한 정보 노출은 없으나 보안 헤더 강화 및 명확한 취약점 신고 정책 도입이 권장됩니다. WHOIS 정보가 부재하여 도메인 신뢰성 검증에 한계가 있으나, 회사 정보와 정책 페이지의 투명성은 신뢰도를 높입니다.

The Cre8ion Lab is a professional creative agency based in the Netherlands, specializing in fully integrated branding, strategy, concept design, digital development, and content creation services. The company targets meaningful brands seeking impactful marketing and digital presence, with a strong focus on culture, festivals, and retail sectors. Their website demonstrates a high level of digital maturity, utilizing modern frameworks such as Vue.js and Nuxt.js, and embedding multimedia content effectively. Security posture is strong with HTTPS enforcement and comprehensive security headers, alongside a well-implemented privacy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and contact information support business legitimacy. Overall, the site presents a trustworthy and professional digital front for the agency.

N

Nederlandse politie

politie.nl

74

The website politie.nl is the official online presence of the Dutch national police, providing authoritative information on law enforcement, public safety, and community engagement. It serves a broad audience including Dutch citizens and international visitors, offering services such as crime reporting, news updates, and recruitment information. The site is positioned as a trusted government resource with a comprehensive content offering and consistent branding. Technically, the site is built on modern web technologies including Nuxt.js and Vue.js frameworks, supported by a Hippo CMS backend. It employs privacy-respecting analytics (Matomo) and includes accessibility and mobile optimization features, ensuring a high-quality user experience. The site is performant and well-structured with clear navigation. From a security perspective, the site enforces HTTPS, uses secure forms, and implements cookie consent mechanisms. While explicit security policies and incident response details are not published, the site shows no signs of vulnerabilities or exposed sensitive data. The domain registration aligns with the official police organization, reinforcing legitimacy. Overall, politie.nl demonstrates a strong security posture, excellent content quality, and good privacy compliance. Strategic improvements could include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.