Low-risk security reports

M

MailerLite

kurzemessulumeistars.mailerpage.com

76

MailerLite is a technology company providing digital marketing tools focused on email marketing and website building. Their platform offers a drag-and-drop website builder, email automation, landing pages, and e-commerce integrations, targeting small to medium businesses, creators, and agencies globally. The company positions itself as a user-friendly, all-in-one marketing solution with 24/7 award-winning support and a strong online presence. Technically, the website employs modern JavaScript frameworks such as Alpine.js and jQuery, integrates with Google Tag Manager and Cookiebot for analytics and consent management, and uses Growthbook for feature experimentation. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses cookie consent mechanisms, indicating good security hygiene. However, the absence of explicit security policies, incident response information, and vulnerability disclosure reduces transparency. The WHOIS data is unavailable, which is unusual but likely due to registry query limitations rather than privacy protection. Overall, MailerLite presents a professional, trustworthy, and technically sound web presence with minor gaps in security transparency and domain registration data. The risk level is low, but improvements in security communication and WHOIS transparency are recommended.

K

Kiwa Global

kiwa.com

83

Kiwa Global is a large, established organization specializing in testing, inspection, certification, and related quality assurance services. The company targets a global business audience requiring compliance and certification solutions. The website is professionally designed with consistent branding and clear contact information, reflecting a mature digital presence. Technically, the site uses modern technologies including Azure Application Insights for telemetry, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The hosting environment is likely Microsoft Azure, supporting a moderate performance profile with good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. Privacy compliance is moderate due to the presence of cookie consent but lack of a visible privacy policy. The WHOIS data is missing or unavailable, which reduces trustworthiness from a domain registration perspective, but the website content and professional presentation suggest a legitimate business. Strategic recommendations include publishing a privacy policy and security policy, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

velOOgre is a local bicycle shop based in Ogre, Latvia, specializing in the sale of new and used bicycles, bicycle trade-ins, and repair services. The business maintains a strong presence on Facebook, leveraging the platform to engage with customers and showcase its offerings. With nearly 10,000 likes and 10,000 followers, the page demonstrates a solid local market position and customer engagement. The business targets general consumers interested in bicycles and related services in the local area. Technically, the business operates entirely on the Facebook platform, utilizing its infrastructure, React-based frontend, and Facebook's hosting and security features. The page is well-optimized for mobile devices and provides a fast, responsive user experience. However, the page lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. From a security perspective, the site benefits from Facebook's robust HTTPS implementation and security headers, ensuring secure data transmission and protection against common web vulnerabilities. No exposed sensitive data or vulnerabilities were detected in the page content. However, the absence of a vulnerability disclosure policy or security contact limits transparency in incident response. Overall, velOOgre's Facebook page is a credible and trustworthy representation of a small local business with good technical and security posture. To enhance compliance and trust, the business should consider linking privacy and cookie policies and providing terms of service. These steps will improve user confidence and regulatory adherence.

A

AUTO1.com GmbH

auto1.com

78

AUTO1.com is a leading European digital wholesale platform specializing in used cars, serving over 60,000 partners across more than 30 countries. The platform offers comprehensive digital solutions for buying and selling used cars, including logistics and document handling, supported by dedicated account managers. The website is professionally designed, mobile-optimized, and provides extensive content and services tailored for B2B car dealers and remarketing partners. Technically, the site uses modern frameworks such as Next.js and React, with fast performance and good SEO practices. Security posture is strong with HTTPS and secure forms, though explicit security headers and policies could be more visible. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to strong branding and market presence.

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform that enables users to connect, share content, and communicate. The platform serves a broad general audience and operates an advertising-based business model, maintaining a dominant market position in social media. The website analyzed is the Facebook login page, which is professionally designed and optimized for performance and accessibility. It integrates modern web technologies such as React and Relay, ensuring a responsive and fast user experience. Security measures are robust, including HTTPS enforcement, secure cookie handling, and script nonce usage, reflecting a mature security posture. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, the site demonstrates high business credibility and technical sophistication.

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform that enables users to connect, share content, and communicate with others worldwide. The platform's business model is primarily advertising-based, leveraging extensive user data to provide targeted advertising services. Facebook holds a dominant market position in the social media industry, supported by a suite of related services including Instagram, Messenger, and Threads. The website analyzed is the login page, which requires user authentication to access personalized content and services. From a technical perspective, Facebook employs a modern and sophisticated technology stack including React, GraphQL, and advanced performance optimization techniques such as BigPipe. The site is optimized for both desktop and mobile platforms, ensuring excellent user experience and accessibility. Security is robust, with HTTPS enforced, comprehensive security headers, and secure form handling. Privacy compliance is strong, with clear and comprehensive privacy and cookie policies that align with GDPR requirements. The security posture of the website is mature, reflecting the enterprise-grade infrastructure of Meta Platforms. No vulnerabilities or security issues were detected in the analyzed content. The domain's WHOIS information is not publicly available due to privacy protections, which is typical for large corporations. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with industry standards. Strategic recommendations include maintaining rigorous security audits, enhancing transparency in incident response, and continuing to evolve privacy practices to meet emerging regulatory requirements. These measures will help sustain user trust and regulatory compliance in a dynamic threat landscape.

A

Pārdodas kvalitatīvas lietotas automašīnas | www.autotev.lv

autotev.lv

76

The website www.autotev.lv is a Latvian online platform specializing in the sale of quality used cars. It targets local consumers interested in purchasing pre-owned vehicles. The site presents a basic but functional user experience with a clean design and mobile optimization. The business model focuses on vehicle sales, positioning itself as a local marketplace for used automobiles. Technical infrastructure includes modern web technologies such as Tailwind CSS and JavaScript libraries for analytics and user tracking, including Google Analytics, Hotjar, and Facebook Pixel. Cookie consent is implemented, indicating some level of privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits transparency and trustworthiness. Security posture shows basic measures like HTTPS and reCAPTCHA but lacks advanced security headers and documented policies. WHOIS data could not be retrieved due to query limits, restricting domain legitimacy verification. Overall, the site is moderately professional but would benefit from enhanced security, privacy, and business transparency measures.

E

Eleving Group

eleving.com

78

Eleving Group is a fintech company specializing in vehicle and consumer finance, operating across 16 countries on 3 continents. The website presents a professional image with a focus on financial inclusion and social mobility. The technical infrastructure is modern, leveraging Nuxt.js and Tailwind CSS frameworks, with integrated analytics and consent management tools such as Microsoft Clarity, Google Tag Manager, and Cookiebot. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of explicit privacy policies and contact information limits full compliance and trust. The WHOIS data is missing or unavailable, which reduces domain trustworthiness and raises questions about registration transparency. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.

A

ADB „Gjensidige”

gjensidige.lv

77

ADB „Gjensidige” operates the website www.gjensidige.lv as a Latvian insurance provider offering online insurance services focused on health, property, and peace of mind. The website targets Latvian-speaking customers and provides a streamlined online experience for purchasing insurance policies. The company appears to be a regional subsidiary or affiliate of the larger Gjensidige Forsikring ASA group, a well-known Nordic insurance company. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized business presence in the Latvian insurance market. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for consent management. The backend likely uses ASP.NET technology as indicated by session cookies. The site is served over HTTPS with good SSL configuration and includes accessibility features and SEO optimizations. Performance is moderate, with room for improvement in security headers and explicit security policies. From a security perspective, the site enforces HTTPS, uses cookie consent with granular controls, and implements CSRF protection tokens. However, it lacks explicit security headers like Content-Security-Policy and does not publish a security.txt or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content. Privacy compliance is strong with detailed cookie declarations and GDPR-aligned consent mechanisms. Overall, the website presents a trustworthy and professional front for an insurance company with good privacy and security practices. The absence of WHOIS data limits domain registration trust analysis, but the site’s content and external references support legitimacy. Strategic improvements include enhancing security headers, publishing vulnerability disclosure information, and providing clearer contact details for security and privacy inquiries.

Gourmet Vinothek is a small retail business specializing in the sale of specially selected wines, beers, and spirits, located in Riga, Latvia. The business operates primarily through its Facebook page, leveraging the platform's hosting and content management capabilities. The page has a moderate following and positive customer reviews, indicating a trusted local presence. Technically, the site benefits from Facebook's robust infrastructure, ensuring fast performance, mobile optimization, and secure HTTPS connections. However, the lack of direct privacy and cookie policies on the page limits privacy compliance visibility. Security posture is strong due to Facebook's platform controls, but no direct security headers or incident response information is available. Overall, the business presents a credible and professional online presence within the constraints of a social media platform.

M

Mercteil

mercteil.com

76

Mercteil is a specialized e-commerce platform offering 100% genuine Mercedes-Benz, AMG, BRABUS, and BMW tuning and spare parts. Established since 2011, it has positioned itself as a niche leader providing high-quality automotive performance components with worldwide shipping. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it leverages modern frameworks like Next.js and React, hosted behind Cloudflare for security and performance. Security posture is strong with HTTPS enforcement and security headers, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is good with clear privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, secure, and user-friendly, targeting automotive enthusiasts and owners seeking genuine parts.

L

LUMAS

eu.lumas.com

77

LUMAS operates a professional e-commerce platform specializing in the sale of gallery-quality, hand-signed, limited edition art prints and objects. The company targets discerning art lovers and collectors across Europe and North America, supported by multiple regional subdomains and physical galleries. Their market position is that of a leading online photo art gallery with a curated selection of photography, painting, digital art, and lifestyle objects. Technically, the website employs modern JavaScript frameworks, third-party marketing and analytics tools such as Klaviyo and Cookiebot, and demonstrates excellent mobile optimization and performance. Security posture is strong with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, though WHOIS data for the subdomain is unavailable, likely due to privacy or subdomain usage. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officers.

C

Costa

costa.lv

79

Costa.lv is a Latvian coffee retail and hospitality business operating multiple cafes primarily in Riga. The website presents a professional and well-structured digital presence, leveraging WordPress CMS and modern JavaScript libraries. The company targets general coffee consumers and cafe visitors, offering coffee products and cafe services. The site includes comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance. Security posture is solid with HTTPS and security headers, though no explicit security policy or incident response information is published. Overall, the website is trustworthy and professionally maintained, with moderate technical performance and good user experience.

L

Leo Express Global a. s.

leoexpress.com

78

Leo Express is a transportation company specializing in train and bus ticket sales across Central Europe, offering travel to over 120 destinations. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, ensuring a responsive and performant platform. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional front for its business operations.

M

METRO PROPERTIES

metro-properties.de

76

METRO PROPERTIES is the real estate arm of METRO AG, specializing in the active management, development, and maintenance of wholesale and retail properties internationally. The company leverages extensive retail and real estate expertise to increase the long-term value of its portfolio. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on corporate real estate services. Technically, the site uses modern frameworks and analytics tools, hosted on a reputable CDN provider (Akamai), ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism and trustworthiness, suitable for investors, partners, and real estate professionals.

M

METRO Global Solution Center Poland

metro-gsc.pl

77

METRO Global Solution Center Poland operates as a specialized accounting and finance solutions hub within the global METRO AG group, a leader in wholesale trade and owner of the MAKRO chain. The company focuses on delivering high-quality accounting services, process automation, and career development opportunities in an international environment. Their website reflects a professional and consistent brand image, targeting accounting professionals and job seekers interested in finance careers. Technically, the site uses modern frameworks such as Sitecore CMS, Google Analytics, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response contacts are not publicly detailed. Overall, the site is trustworthy and well-maintained, supporting METRO's global growth strategy.

M

METRO SOURCING International Limited

metro-sourcing.hk

77

METRO SOURCING International Limited is a Hong Kong headquartered wholly owned subsidiary of METRO AG, specializing in global sourcing and supply chain solutions for METRO's wholesale divisions and third-party customers. Established in 1976, it operates a broad supplier network across multiple countries, providing a wide range of products including non-food, near food, and fresh/frozen food categories. The company positions itself as a strategic buying organization within the retail sector, leveraging its international procurement expertise to serve a diverse customer base. Technically, the website is built on a modern stack including Bootstrap and Sitecore CMS, with integrated analytics tools such as Google Analytics and Siteimprove. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with corporate branding. Cookie consent mechanisms are implemented with detailed categories, reflecting compliance with GDPR and privacy best practices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security practices such as request verification tokens and cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website reflects a mature digital presence with strong business credibility and compliance adherence. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security culture.

M

METRO AG

mpulse.de

76

MPULSE is the official online magazine of METRO AG, providing rich content focused on wholesale, gastronomy, and independent entrepreneurs. The website serves as a content marketing platform to engage METRO's target audience with industry insights, customer stories, and trends. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, Google Tag Manager, and Akamai CDN for performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting METRO AG's brand integrity.

C

ConnectWise, LLC

connectwise.com

78

ConnectWise, LLC is a leading enterprise technology company specializing in IT management software and solutions tailored for Managed Service Providers (MSPs) and IT professionals. Their platform offers comprehensive tools including Remote Monitoring and Management (RMM), Unified Management and Monitoring (UMM), Security Operations Center (SOC), Network Operations Center (NOC), and cybersecurity services. Positioned as a market leader, ConnectWise supports a thriving community and ecosystem to help MSPs grow and manage their businesses effectively. The website demonstrates a mature technical infrastructure leveraging modern technologies such as Episerver CMS, AWS Cloudfront CDN, and advanced analytics and marketing tools including Google Tag Manager, Microsoft Application Insights, and OneTrust for consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, ConnectWise employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms, indicating a robust security posture. However, the absence of a publicly available security policy, incident response information, and vulnerability disclosure program suggests areas for improvement in transparency and security communication. Overall, ConnectWise presents a professional, trustworthy, and secure online presence consistent with an established enterprise technology provider. The lack of WHOIS data is noted but does not detract significantly from the legitimacy given the company's market presence and website quality. Strategic recommendations include enhancing security transparency and providing explicit incident response contacts to further strengthen trust and compliance.

P

Purple Trading

purpletrading.cz

79

Purple Trading is an online Forex and CFD brokerage targeting retail and professional traders primarily in the Czech Republic. The website presents itself as a leading global Forex broker offering premium quality trading services, reliable technology, and a fair approach to clients. The content is professionally structured and localized in Czech, indicating a mature digital presence. The company emphasizes client success and provides extensive cookie consent and privacy mechanisms, reflecting compliance with GDPR requirements. Technically, the site uses modern JavaScript libraries and analytics tools such as Google Tag Manager, Segment, and Smartlook, integrated with a Joomla CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

E

Element Fleet Management

elementfleet.com

78

Element Fleet Management is a leading global fleet management company specializing in intelligent mobility solutions and comprehensive fleet services. The company serves a broad range of industries with a focus on optimizing fleet costs, safety, and productivity. With over 1.5 million vehicles under management and thousands of clients, Element holds a strong market position in North America and Australia/New Zealand. Their business model centers on providing end-to-end fleet lifecycle services including acquisition, management, optimization, and remarketing. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools, and video platforms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. The use of multiple tracking and marketing tools indicates extensive user engagement monitoring, balanced with privacy compliance through clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs reCAPTCHA for form security. However, it lacks visible security headers and a public incident response or vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding. Overall, Element Fleet Management presents a professional, trustworthy, and well-structured online presence suitable for its enterprise clientele. Strategic improvements in security transparency and WHOIS data availability would further strengthen trust and compliance.

n2eyes Agencja Interaktywna is a small interactive web agency based in Gniezno, Poland, specializing in creating unique websites. Their market position is that of a local service provider with a social media presence on Facebook, where they engage with a modest audience. The business model focuses on providing web design and interactive website creation services to businesses and individuals. Technically, the company leverages the Facebook platform for its online presence, utilizing modern web technologies such as React and JavaScript, with hosting and infrastructure managed by Facebook. The page is mobile optimized and performs well, though SEO is basic due to platform constraints. Security posture benefits from Facebook's robust HTTPS and platform security, with no direct vulnerabilities observed on the page. However, the absence of privacy, cookie, and terms of service policies on the page indicates a gap in compliance and transparency. Overall, the risk is low given the platform's protections, but the company should consider linking or publishing these policies to enhance trust and compliance.

Raken, Inc. operates a professional and comprehensive cloud-based construction management software platform designed to streamline field workflows for contractors. The website demonstrates a mature digital presence with extensive features including daily reports, time tracking, safety management, and integrations. The technical infrastructure leverages modern JavaScript frameworks and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS, reCAPTCHA, and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall website professionalism and business information support legitimacy. Strategic recommendations include publishing security and incident response policies and verifying domain registration details to enhance trust.

O

Office of the Comptroller of the Currency

occ.gov

81

The Office of the Comptroller of the Currency (OCC) is a U.S. federal government agency responsible for ensuring a safe, sound, and fair federal banking system. The website serves as the official digital presence of the OCC, providing regulatory information, news, publications, and tools for bankers, consumers, and other stakeholders. It holds a strong market position as a key regulator within the U.S. banking sector, operating under the Department of the Treasury. The site targets a broad audience including banking professionals, federal institutions, and the general public seeking regulatory guidance and banking information. Technically, the website is built on the Percussion Content Management System and leverages modern web technologies including jQuery, Google Analytics, Crazy Egg, and the U.S. Web Design System (USWDS) to ensure accessibility, responsiveness, and usability. The site demonstrates good performance and SEO practices, with comprehensive metadata and structured navigation. Mobile optimization and accessibility features are well implemented, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs domain transfer protections, indicating a secure baseline. However, DNSSEC is not enabled, representing a minor security gap. The presence of a vulnerability disclosure policy is a positive indicator of security awareness, though explicit incident response contacts and security headers are not evident. Privacy compliance is moderate, with a comprehensive privacy policy but lacking a cookie consent mechanism despite the use of tracking scripts. Overall, the OCC website is a professional, trustworthy, and authoritative government resource with strong content quality and business credibility. Minor improvements in security headers, DNSSEC implementation, and privacy consent mechanisms would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its role as a federal regulatory agency.

Philip Morris International (PMI) is a leading global tobacco company focused on transitioning its business towards smoke-free products that are positioned as better alternatives to traditional cigarettes. The company operates at an enterprise scale with a strong global presence and a clear vision to replace cigarettes with reduced-risk products. The website reflects this strategic direction with comprehensive corporate content, investor information, and product details aimed at a mature, global audience. Technically, the website is built on the Sitefinity CMS platform, leveraging modern technologies such as Google Tag Manager, Adobe Target, and Gigya for customer identity management. The site is well optimized for performance, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs advanced security headers, and integrates reCAPTCHA Enterprise to protect forms, demonstrating a strong security posture. However, there is no publicly available dedicated security policy or incident response page, which could be improved to enhance transparency. The domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a multinational corporation of PMI's stature. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR, supported by clear privacy and cookie policies with consent mechanisms.

E

Engageware

engageware.com

76

Engageware is an enterprise-grade AI-powered customer engagement platform specializing in conversational and generative AI technologies to enhance sales, customer service, and employee efficiency. The company serves over 700 clients across finance, retail, and technology sectors, offering solutions such as virtual assistants, appointment scheduling, knowledge management, and digital communications. Their market position is strong, supported by trusted partnerships and a comprehensive product suite tailored for enterprise needs. Technically, Engageware leverages a modern WordPress-based infrastructure enhanced with advanced marketing and analytics tools including Google Analytics, HubSpot, and Facebook Pixel. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital presence. Hosting and DNS services are managed via Amazon Registrar, indicating reliable infrastructure. From a security perspective, the website enforces HTTPS and domain registration protections, though it lacks DNSSEC and some advanced security headers. Privacy compliance is robust with clear policies and consent mechanisms aligned with GDPR standards. However, incident response contact details and security.txt files are not explicitly provided, representing an area for improvement. Overall, Engageware presents a low-risk profile with high business credibility and technical maturity. Strategic recommendations include enhancing DNS security, publishing vulnerability disclosure mechanisms, and strengthening security headers to further improve trust and compliance.

E

Engageware

timetrade.com

76

Engageware is an established enterprise technology company founded in 2014, specializing in AI-powered customer engagement platforms. Their solutions focus on virtual and human agents, appointment scheduling, knowledge management, and digital communications, serving over 700 companies across finance, retail, and technology sectors. The company maintains a strong market position with a comprehensive product suite designed to improve sales, customer service automation, and employee efficiency. Technically, the website is built on WordPress with modern frameworks like Elementor and integrates advanced analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. The site is well-optimized for performance and mobile use, reflecting a mature digital infrastructure. Security-wise, Engageware enforces HTTPS, employs domain registration protections, and provides clear privacy and security policies, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting Engageware's credibility as a leading AI engagement platform provider.

C

Coursera, Inc.

coursera.org

80

Coursera, Inc. is a leading global online education platform founded in 2012, offering a wide range of courses, professional certificates, and degree programs in partnership with top universities and industry leaders such as Google, IBM, and Meta. The platform targets students, professionals, and lifelong learners seeking to advance their careers and acquire new skills. Coursera holds a strong market position as a trusted provider of accessible, high-quality education worldwide. Technically, Coursera employs a modern web technology stack including React, Webpack, and Amazon Cloudfront for hosting and content delivery. The website demonstrates excellent performance, mobile optimization, and accessibility features, supported by comprehensive SEO and metadata implementation. Privacy and cookie policies are clearly presented with GDPR compliance and user consent mechanisms in place. From a security perspective, Coursera enforces HTTPS, implements robust security headers, and follows best practices to protect user data and maintain platform integrity. No significant vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available incident response or vulnerability disclosure policy suggests room for improvement in transparency and security communication. Overall, Coursera presents a low-risk profile with a professional, secure, and user-friendly online presence. Strategic recommendations include enhancing incident response visibility, publishing a vulnerability disclosure policy, and maintaining continuous security audits to uphold trust and compliance.

McKesson Corporation operates as a leading healthcare company specializing in wholesale distribution of medical supplies, pharmaceuticals, and healthcare technology solutions. The company holds a strong market position as a major distributor and technology provider to healthcare providers and pharmaceutical companies. The website reflects a mature enterprise with comprehensive service offerings and a clear focus on healthcare industry stakeholders. Technically, the website employs modern JavaScript libraries, analytics tools, and is hosted on Microsoft Azure, indicating a robust digital infrastructure. The site is well optimized for SEO, mobile devices, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. WHOIS data is not accessible, likely due to privacy protection, which slightly reduces transparency but is common for large enterprises. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting McKesson's reputation as a healthcare industry leader.

S

SentiLink

sentilink.com

77

SentiLink is a technology company specializing in identity fraud prevention solutions targeted at financial institutions. Their platform combines advanced technology and expertise to detect and stop identity theft at the application stage, positioning them as a leading provider in the finance sector. The website is professionally designed using modern web technologies such as Next.js and React, hosted likely on WPEngine, and integrates multiple marketing and analytics tools including HubSpot, Google Tag Manager, and social media pixels. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers and policies are not published. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and branding suggest a credible business. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy or terms of service pages found. Overall, the site is well-built and trustworthy from a user perspective but would benefit from improved transparency and domain registration clarity.

S

Suomen Terveystalo Oy

terveystalo.fi

79

Terveystalo is a prominent Finnish healthcare organization offering a wide range of health and wellbeing services through over 300 locations across Finland, including comprehensive remote services available 24/7. The website is professionally designed, mobile-optimized, and provides clear information about its services and contact options, targeting Finnish residents seeking healthcare solutions. The company leverages modern web technologies including Episerver CMS, Piwik Pro analytics, and Visual Website Optimizer for performance and user experience enhancements. Cookie consent and privacy compliance are well implemented, reflecting adherence to GDPR requirements. However, WHOIS data for the domain is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the professional presentation and detailed privacy disclosures. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. Overall, Terveystalo's digital presence is robust, trustworthy, and aligned with industry best practices.

S

Supplier.io

supplierone.co

76

SupplierOne is a supplier registration portal operated by Supplier.io, a leading supplier intelligence platform serving over 1,000 corporate buyers. The platform enables suppliers to create profiles, showcase capabilities, and connect with procurement teams seeking diverse and small business suppliers. The website is professionally designed with a clear business focus and good user experience. Technically, it leverages modern JavaScript libraries, Bootstrap, and integrates marketing and analytics tools such as HubSpot and Clicky. Security posture is solid with HTTPS, anti-CSRF tokens, and Cloudflare protection, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

T

TOPdesk

topdesk.com

79

TOPdesk is a technology company specializing in service management software, offering an easy-to-use ticketing system complemented by consulting and support services. With over 600 specialists across 10 countries and more than 4000 customers, TOPdesk positions itself as a significant player in the service management SaaS market. The website reflects a professional and consistent brand image, targeting organizations seeking to improve their service management capabilities. Technically, the site is built on WordPress with Bootstrap and uses modern marketing and analytics tools such as Google Tag Manager, Cookiebot, and Visual Website Optimizer. The site is mobile-optimized and SEO-friendly, though accessibility features are basic.

A

A-LIGN

a-lign.com

78

A-LIGN is a professional compliance, cybersecurity, cyber risk, and privacy service provider specializing in audits and certifications such as SOC 1, SOC 2, ISO 27001, HITRUST, FedRAMP, and more. The company targets organizations requiring high-quality, efficient compliance and security assessments. Their market position is strong, with a broad portfolio of certifications and services tailored to technology, healthcare, and government sectors. Technically, the website is built on WordPress with modern technologies like React and optimized with WP Rocket, delivering excellent performance and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy, but WHOIS data absence slightly reduces domain trust. Strategic recommendations include enhancing privacy disclosures, security headers, and incident response transparency.

O

Owlet US

owletcare.com

76

Owlet US operates a well-established e-commerce platform specializing in FDA-cleared smart baby monitors, including the Dream Sock®, Dream Duo 2, and Owlet Cam 2. The company targets parents and caregivers seeking advanced infant monitoring solutions that provide live health readings and HD video for peace of mind. Owlet holds a strong market position as an innovator in infant healthcare technology with a focus on safety and reliability. The website is professionally designed, mobile-optimized, and leverages Shopify's robust platform and third-party marketing tools such as Klaviyo and Bazaarvoice to enhance customer engagement and sales. Technically, the website is built on Shopify with modern web technologies including jQuery and video media elements. It uses Cloudflare DNS and Shopify CDN for hosting, ensuring fast performance and good availability. SEO and accessibility features are well implemented, and the site includes structured data for enhanced search engine understanding. Privacy and cookie policies are present with consent mechanisms, reflecting good compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS with strong domain registration protections and no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information, which could be improved. The domain registration is consistent with the business claims, showing a mature and legitimate online presence. Overall, Owlet US presents a low-risk profile with a strong security posture, good privacy compliance, and a professional e-commerce presence. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure information to further enhance trust and security transparency.

O

Outreach

outreach.io

77

Outreach is an enterprise-level SaaS company specializing in AI-powered revenue workflow and sales engagement platforms. Their website clearly targets sales, marketing, revenue operations, and go-to-market teams, positioning themselves as a leader in the sales engagement technology space. The platform offers AI-driven workflows to optimize revenue success, supported by a professional and well-branded digital presence. The technical infrastructure is modern, leveraging React and Next.js frameworks, with extensive use of analytics and consent management tools, indicating a mature digital strategy. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting a credible and established business.

D

DSV

dsv.com

78

DSV is a leading global transport and logistics company specializing in road, air, sea, and rail freight as well as warehousing services. The company operates at an enterprise scale with a strong international presence, targeting businesses requiring comprehensive logistics solutions. The website reflects a mature digital infrastructure with modern technologies such as Azure CDN, Google Tag Manager, and a robust cookie consent mechanism, indicating a high level of digital maturity and compliance with privacy regulations including GDPR. Security posture is strong with HTTPS enforced and Content Security Policy implemented, although additional security headers could enhance protection. The absence of WHOIS data is noted but does not detract significantly from the overall trustworthiness given the company's established market position and certifications. Overall, DSV's website is professional, secure, and compliant, supporting its role as a major player in the transportation sector.

P

ProRail

prorail.nl

78

ProRail is the Dutch government agency responsible for managing and maintaining the national railway infrastructure. The website clearly communicates its mission to ensure safe, timely, and sustainable rail transport for passengers and freight. The site targets a broad audience including travelers, freight operators, and government stakeholders. Technically, the site uses modern web technologies including JavaScript modules, consent management via Cookiebot, push notifications with OneSignal, and analytics tools such as Google Analytics and Hotjar. The site is hosted securely with HTTPS and employs multiple security headers, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, with a strong alignment between domain registration data and business identity.

A

ASN Bank

devolksbank.nl

79

ASN Bank is a well-established Dutch financial institution focused on sustainable and socially responsible banking. The website clearly communicates its mission to contribute to a sustainable and just future, targeting a general audience interested in ethical banking solutions. The bank maintains a strong market position within the Netherlands, supported by its parent company De Volksbank. Key services include banking and investor relations with a focus on sustainability. Technically, the website is built on modern technologies including Craft CMS, uses Google Tag Manager for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Bath Iron Works

gdbiw.com

78

Bath Iron Works is a full-service shipyard specializing in the design, construction, and support of complex surface combatants for the U.S. Navy. As a subsidiary of General Dynamics Marine Systems, it holds a significant position in the defense and transportation sectors, serving government and military clients. The website reflects a professional corporate presence with consistent branding and a focus on its core shipbuilding services. Technically, the site is built on WordPress with modern JavaScript frameworks and includes SEO and cookie consent tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data is a notable concern, though the website content and social media presence strongly support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

N

Northeastern University

northeastern.edu

83

Northeastern University is a well-established global research and experiential learning institution founded in 1898, serving a broad academic audience including students and researchers. The website reflects a mature digital presence with modern technologies such as React and WordPress CMS, enhanced by SEO tools like Yoast SEO Premium and analytics via Google Analytics. The site is professionally designed, mobile-optimized, and accessible, providing a high-quality user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are absent in the provided content. WHOIS data for the subdomain 'www.northeastern.edu' was not found, which is likely due to querying a subdomain rather than the root domain, but this limits domain registration trust analysis. Overall, the site is credible and trustworthy, representing a major educational institution with strong branding and social media presence.

F

Flatlogic LLC

flatlogic.com

76

Flatlogic LLC is a technology company specializing in AI-powered software development for startups and businesses. Their platform enables rapid generation and deployment of full-stack web applications including SaaS, CRM, and ERP solutions. The company emphasizes ownership of the generated code, allowing clients full customization and control. The website demonstrates a strong market position with notable clients and positive reviews, positioning Flatlogic as an innovative player in AI-driven software development. Technically, the website is built on a modern stack including Next.js, React, Node.js, and PostgreSQL, hosted on Cloudflare infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO. It integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and benefits from Cloudflare DNS protection. However, DNSSEC is not enabled, and some security headers are not explicitly visible in the HTML. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, Flatlogic's website reflects a mature, professional, and trustworthy business with a solid technical foundation and good security posture. Minor improvements in DNS security and explicit security policy publication are recommended to further enhance trust and compliance.

G

Gensler

gensler.com

78

Gensler is a globally recognized architecture, design, and planning firm with a significant international footprint, operating 57 offices and employing over 6,000 professionals. The company offers a broad range of services including architecture, urban design, brand design, sustainability consulting, and interior design, targeting corporate clients, real estate developers, and urban planners. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation, supporting its market leadership position. Technically, the website employs modern web technologies such as JavaScript frameworks, Matomo analytics, and Sentry for error tracking. It is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a high level of professionalism and trustworthiness, with privacy and cookie policies implemented in compliance with GDPR. The absence of WHOIS data suggests domain privacy protection, which is common for large enterprises. No critical vulnerabilities or suspicious content were detected, indicating a low risk profile. Strategic recommendations include publishing detailed security and incident response policies, adding a vulnerability disclosure program, and enhancing transparency around data protection officer contacts and certifications to further strengthen trust and compliance.

R

Raiola Networks

raiolanetworks.com

78

Raiola Networks is a Spanish web hosting and domain registration company established in 2014, offering high-quality SSD hosting, VPS, dedicated servers, and specialized WordPress hosting. The company targets Spanish-speaking customers seeking reliable and fast hosting solutions with 24/7 technical support. Their market position is solid within Spain, supported by a consistent brand presence and active social media engagement. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies such as Livewire, Cookiebot, and multiple tracking pixels for analytics and marketing. Security posture is good with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and a detailed privacy/legal notice. Overall, Raiola Networks demonstrates a professional and trustworthy online presence with room for enhanced security policies and incident response transparency.

G

Google LLC

scheibo.com

79

YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform, serving a global audience with diverse content ranging from entertainment to education. The platform operates on a robust advertising-based business model supplemented by premium subscription services. It holds a dominant market position in the technology and media sectors, supported by its parent company Alphabet Inc. The website demonstrates a high level of digital maturity with modern web technologies, fast performance, and excellent mobile optimization. Security measures are strong, including HTTPS enforcement and comprehensive security headers, ensuring user data protection and platform integrity. Privacy policies are comprehensive and GDPR compliant, reflecting a commitment to regulatory adherence. Overall, YouTube presents a trustworthy, professional, and secure online presence with extensive user engagement and business credibility.

P

Pentagram

pentagram.com

76

Pentagram is the world’s largest independent design consultancy, operating as a partnership of 24 leaders in their fields. The company offers a broad range of design services including brand identity, strategy, campaigns, digital experiences, and product design. The website reflects a mature, professional brand with excellent design quality and user experience, targeting businesses and organizations seeking high-end design consultancy. Technically, the site uses modern web technologies and analytics tools like Microsoft Clarity, with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers, though some compliance aspects like cookie consent and terms of service could be improved. The absence of WHOIS data reduces domain trustworthiness, but the overall digital presence and content quality support legitimacy. Strategic recommendations include enhancing privacy compliance and publishing security policies to strengthen trust and compliance.

B

Better Impact

betterimpact.com

76

Better Impact is a technology company specializing in SaaS solutions for volunteer, donor, client, and member management primarily targeting non-profit organizations. The company has a strong market presence with over 25,000 organizations using its software globally. Their website is professionally designed, mobile-optimized, and rich in relevant content including testimonials, case studies, and detailed product descriptions. The technical infrastructure leverages HubSpot CMS and integrates modern analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Intercom, with appropriate cookie consent mechanisms in place. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses secure forms integrated with HubSpot. However, there is no dedicated security policy or incident response page publicly available, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. Overall, the website demonstrates a mature digital presence with good security posture and privacy practices. The business credibility is high, supported by consistent WHOIS data and strong trust signals. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen security transparency.

T

Ticket Tailor

buytickets.at

76

Ticket Tailor operates as a comprehensive ticketing platform enabling event creators to build, promote, and manage live events with ease. The platform supports a wide range of event types and offers features such as event page building, payment processing, email automation, and analytics. The website demonstrates a mature digital presence with modern technologies like Next.js and React, and integrates marketing and analytics tools such as Google Tag Manager and Intercom. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the professional website and compliance with privacy regulations support a trustworthy business profile.

R

Rebrandly

rbnd.ly

80

Rebrandly is a leading technology company specializing in branded URL shortening and link management services. Their platform offers secure, customizable short links with advanced tracking and analytics, targeting businesses and teams seeking to enhance their digital marketing and brand visibility. The company holds a strong market position with millions of users and notable enterprise clients, supported by a professional and well-designed website that reflects their brand consistency and trustworthiness. Technically, Rebrandly leverages modern web technologies including React and Astro, hosted on AWS, ensuring fast performance and mobile optimization. Security posture is robust, with HTTPS enforced, SOC2 Type 2 certification, GDPR compliance, and use of Google reCAPTCHA for bot protection. Privacy and cookie policies are comprehensive, and contact information is clearly provided, enhancing user trust. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy based on website content and trust signals.

M

Meetup

meetu.ps

77

Meetup is a well-established online platform that facilitates local and online community events, enabling people to connect over shared interests. The website presents a professional and user-friendly interface, showcasing a wide range of events and groups, targeting individuals seeking social, hobby, and professional networking opportunities. The platform leverages modern web technologies including React and Next.js, ensuring fast performance and mobile optimization. Security practices are robust with HTTPS enforcement and comprehensive security headers, although no explicit vulnerability disclosure or incident response contacts are publicly visible. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. However, the absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the website's content and branding strongly indicate a trustworthy and reputable business.