Security Directory

J

Johnsco LLC

statelocalgov.net

53

StateCity.ai is an online informational directory focused on providing comprehensive access to state and local government resources, business guides, and car insurance information across the United States. The platform aggregates links and topic pages to assist users in navigating government services and insurance options at both state and local levels. The business operates under Johnsco LLC, a US-based entity, and targets individuals and businesses seeking localized government and insurance information. The website content is basic but relevant, with a straightforward navigation structure and moderate mobile optimization. Technically, the website uses standard HTML, CSS, and JavaScript with Cloudflare DNS services. The site lacks advanced frameworks or CMS indications and shows basic performance and SEO optimization. Mobile responsiveness and accessibility are present but minimal. Security posture is moderate with HTTPS enabled but lacks DNSSEC, security headers, and published security or privacy policies. The domain WHOIS data presents a notable anomaly with a future creation date, which raises concerns about registration legitimacy. Overall, the website is functional and provides useful content but requires significant improvements in privacy compliance, security best practices, and domain legitimacy verification. The absence of contact information and security policies limits trustworthiness. Strategic enhancements in these areas will improve user confidence and regulatory compliance.

The website intarsbusulis.com currently serves as a minimal login portal for hosting or server management services, specifically providing access to webmail and account administration via external URLs. The domain is registered with a reputable registrar and has been active since 2005, but the website content does not represent a public-facing business or commercial site. The technical infrastructure is basic, with no HTTPS enabled on the domain itself, and the site relies on external domains for secure access. Security posture is weak due to lack of HTTPS, absence of security headers, and no visible privacy or cookie policies. Overall, the site appears to be a placeholder or control panel rather than a business website.

N

NVA Online Advertising B.V.

tkb.eu

51

The website tkb.eu is a domain sales landing page operated by NVA Online Advertising B.V., a Dutch company specializing in domain brokerage and escrow services since 2004. The site offers the domain tkb.eu for sale through the Nameshift.com platform, which provides a secure and fast domain transfer process with no fees for buyers. The business model focuses on facilitating domain ownership transfers with escrow protection, targeting domain investors and buyers. The website content is minimal but functional, emphasizing trust signals such as a Trustpilot widget and free transfer services. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, served securely over HTTPS with good performance and mobile optimization. The site uses external CDNs and integrates third-party widgets for reviews and analytics. However, it lacks explicit privacy, cookie, and security policies, which limits its privacy compliance posture. No social media or direct contact emails are provided, but a physical address and domain purchase form are present. From a security perspective, the site enforces HTTPS and uses secure form inputs but does not implement advanced security headers or publish incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the site demonstrates a moderate security posture but would benefit from enhanced privacy and security disclosures. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, adding incident response contact information, implementing security headers, and improving transparency to enhance trust and compliance.

The website hosted at unicreditbank.lv currently serves a generic CentOS placeholder page unrelated to the domain name or any banking business. The content describes CentOS Linux distribution and community resources, indicating the domain is either unused or misconfigured. There is no business-specific content, contact information, or compliance documentation present. Technically, the site lacks HTTPS and security headers, and no modern web technologies or tracking scripts are detected. The WHOIS data could not be retrieved due to query limits, preventing verification of domain ownership or legitimacy. Overall, the site appears inactive or abandoned, with minimal security posture and no privacy compliance measures.

G

Get & Post LLC

getandpost.com

29

Get & Post LLC operates a small-scale website primarily focused on sharing media content and providing simple utility links such as surveys, calendar alerts, and lost and found boards. The site is minimalistic, under construction, and lacks comprehensive business or security information. The technical infrastructure is basic, relying on jQuery and custom JavaScript with no modern frameworks or CMS detected. The site is hosted via GoDaddy with no HTTPS enabled, which significantly impacts its security posture. There are no privacy or cookie policies, no contact information, and no security headers, indicating a low maturity level in compliance and security practices. Overall, the site appears to be a hobbyist or small local business project with limited digital maturity and security readiness.

O

OCHOUNOS.COM

ochounos.com

46

Ochounos.com is a small technology service provider specializing in web development, graphic design, photography, web hosting, and software projects including game and Android app development. The company has a long-standing domain since 2008 and offers a diverse portfolio of services targeting businesses and individuals seeking custom digital solutions. The website content is well-structured and provides detailed descriptions of services and projects, reflecting a good level of professionalism and technical capability. The technical infrastructure includes a custom PHP MVC framework (Almanzor Framework), use of modern game engines like Unreal Engine 4 and CRYENGINE, and hosting via Hetzner Online GmbH. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No CMS or third-party analytics tools are detected, indicating a custom-built platform. From a security perspective, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact or incident response information is provided, limiting transparency and responsiveness to security issues. DNSSEC is not enabled, and no vulnerability disclosure or security certifications are present. Overall, the website presents a solid business offering with good technical foundations but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

The website sabinevankollenburg.nl serves as a personal portfolio for the artist Sabine van Kollenburg, showcasing her artistic philosophy and work through a simple, static HTML site. The business focus is on art creation and illustration, targeting art enthusiasts and collectors. The site is modest in scale and scope, reflecting a small individual artist operation with a long domain history dating back to 2004. Technically, the website employs basic HTML, CSS, and JavaScript without any modern CMS or frameworks. The site lacks HTTPS, security headers, and mobile optimization, indicating a low level of digital maturity. Navigation is straightforward but limited, and no analytics or tracking technologies are present. From a security perspective, the absence of HTTPS is a critical vulnerability, exposing visitors to potential interception risks. No privacy or cookie policies are present, which is a compliance gap under GDPR. The site does not collect user data via forms or tracking, reducing some risk but also limiting engagement capabilities. Overall, the website presents a low-risk profile due to minimal data collection but requires urgent improvements in security and privacy compliance to enhance trust and protect visitors. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and enhancing security headers.

SIA „LAK 4” is a Latvian small-sized company specializing in ERP consulting and implementation services, particularly focused on the iScala software suite by Epicor. Founded in 2006, the company offers IT audits, training, system customization, and ongoing support to businesses seeking ERP solutions. The website content clearly communicates the company's services and contact information, targeting Latvian enterprises interested in business management software. Technically, the website is built with basic HTML, CSS, and JavaScript, incorporating Twitter widgets for social media integration. However, it lacks modern security features such as HTTPS and security headers, and no privacy or cookie policies are present, indicating limited compliance with data protection regulations. The absence of WHOIS data due to query limits restricts domain legitimacy verification, but the website content aligns with a legitimate small business profile. Overall, the site demonstrates moderate professionalism but requires significant improvements in security and privacy compliance to enhance trustworthiness and user safety.

I

Internet Invest, Ltd. dba Imena.ua

goodlift.info

43

GOODLIFT.INFO is a specialized website dedicated to providing official and verified information about powerlifting competitions, events, and athletes affiliated with the International Powerlifting Federation (IPF). The site supports competition management through the GOODLIFT software, which is the official competition management tool for IPF. The target audience includes powerlifting athletes, teams, federations, and enthusiasts seeking authoritative competition data and rankings. The business operates primarily as an information and software support service within the niche sports sector, maintaining a consistent and professional online presence since 2008. Technically, the website employs a straightforward HTML, CSS, and JavaScript stack without reliance on modern CMS or frameworks. Hosting and domain registration are managed by Internet Invest, Ltd. dba Imena.ua, a Ukrainian registrar, consistent with the site's author and content origin. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices evident in meta tags and structured navigation. However, there is room for improvement in accessibility and modern technical enhancements. From a security perspective, the site lacks advanced security headers and DNSSEC, which are recommended to enhance protection against common web threats. The domain is secured with clientTransferProhibited status, and WHOIS data is transparent and consistent, supporting legitimacy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or security policy information is published, which could be improved to strengthen trust. Overall, GOODLIFT.INFO is a credible and authoritative resource within its niche, with a solid business foundation and consistent branding. Security and privacy practices require enhancement to meet modern standards and regulatory requirements. Strategic improvements in security headers, DNSSEC, cookie consent, and published policies would elevate the site's trustworthiness and compliance posture.

I

Itero – Digitālā marketinga aģentūra

itero.lv

24

The website www.itero.lv appears to be a small business site hosted on WordPress with minimal content and limited digital maturity. The site lacks essential legal documents such as privacy policy, cookie policy, and terms of service, which are critical for compliance and user trust. Contact information and social media presence are not evident, reducing accessibility and credibility. Technically, the site uses standard web technologies but lacks advanced security headers and optimization features. The security posture is basic with no visible incident response or vulnerability disclosure mechanisms. Overall, the site presents a low-risk profile but requires significant improvements in compliance, security, and content quality to enhance trust and professionalism.

O

Online Solution Int Ltd.

rabuser.info

54

The website rabuser.info represents a small German IT service provider, Online Solution Int Ltd., specializing in web development, programming, consulting, and related services. The business targets individuals and companies seeking affordable and comprehensive web solutions including design, SEO, server administration, and software development. The company has a long-standing domain registration since 2008, indicating established operations. Technically, the website employs standard web technologies such as HTML, CSS, JavaScript, and server-side languages including PHP, Perl, and ASP.net. Hosting is via Cloudflare, providing basic HTTPS security. The site is functional with moderate performance and basic mobile optimization but lacks advanced security headers and DNSSEC, which could improve its security posture. Security-wise, the site uses HTTPS but does not publish privacy, cookie, or terms of service policies, nor does it provide explicit contact emails or phone numbers, limiting transparency and compliance with GDPR. Google Analytics is used without visible consent mechanisms, indicating privacy compliance gaps. No incident response or vulnerability disclosure information is available. Overall, the website is moderately trustworthy and functional but requires improvements in privacy compliance, security best practices, and transparency to enhance user trust and regulatory adherence.

The website object.center currently serves as a placeholder with minimal content, indicating it is not yet operational or publicly launched. The domain is registered since 2018 with privacy protection enabled, but the website lacks any business-related content, contact information, or policies. The only visible content is a 'Coming Soon' message and a link to the VESTA control panel, suggesting the site is hosted on a VESTA-managed server behind Cloudflare DNS. Technically, the site uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing security posture. No forms, analytics, or tracking mechanisms are present, indicating minimal digital maturity. The absence of privacy, cookie, or terms of service policies and contact details reflects poor privacy compliance and business credibility. Overall, the site scores low on content quality, security, and compliance, representing a high-risk profile for trust and professionalism.

N

Nordic Symphony Orchestra

nordicsymphony.com

45

Nordic Symphony Orchestra is a small cultural organization based in Estonia, specializing in classical symphony performances with a focus on Nordic composers and artists. The website serves primarily as an informational portal providing concert schedules, streaming links, and contact details for management and artistic leadership. The business operates in the media sector, targeting classical music audiences in Estonia and the Nordic region. The domain age of nearly two decades supports the legitimacy and established presence of the organization. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS platforms. It lacks mobile optimization and accessibility features, which limits user experience on diverse devices. There is no evidence of advanced analytics, tracking, or advertising technologies, indicating a minimalistic digital footprint. Hosting and DNS are managed through EuroDNS and elkdata name servers, but DNSSEC is not enabled, and no security headers are detected. From a security perspective, the site does not demonstrate strong security practices. There is no visible HTTPS confirmation in the provided data, no privacy or cookie policies, and no incident response or security contact information. These gaps represent compliance and security risks, especially under GDPR regulations. However, the domain registration is consistent and transparent, with no privacy protection or suspicious WHOIS patterns, which supports trustworthiness. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility standards to enhance user trust and regulatory compliance.

Trade House Co. LLC is a medium-sized, established company founded in 1975 and headquartered in Sharjah, UAE. It operates as a manufacturer, importer, and distributor of building materials such as steel, cement, timber, and plywood, serving the construction industry primarily in the UAE and globally. The company positions itself as one of the oldest and largest distributors of high tensile steel bars in the region, emphasizing operational excellence and product quality. The website content is basic but relevant, providing essential business information and navigation.

M

Mellow

mellow.ee

43

Mellow is a small creative company based in Estonia specializing in video production, photography, animation, visual effects, and graphic design. The website presents a minimalistic portfolio and contact information, targeting clients seeking creative media services. The business appears to be a small niche player with a straightforward service offering and a modest online presence. Technically, the website is built with basic HTML and CSS without any detected CMS or advanced frameworks. Hosting is provided by Zone Media OÜ, an Estonian registrar and hosting provider. The site lacks HTTPS on some assets, and no security headers or modern web technologies are detected. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. There is no evidence of privacy or cookie policies, no incident response or security policies, and no vulnerability disclosure mechanisms. The absence of HTTPS on all content and lack of security headers represent notable risks. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website scores moderately low on security and privacy compliance but maintains basic business credibility and content relevance. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

R-Systems is an Estonian software development company specializing in hydrography and spatial data software solutions, founded in 1989. The company offers services including hydrographic survey software, spatial data processing, and sensor integration, targeting sectors such as military, air surveillance, logistics, and GIS. The website reflects a small, niche technology business with a long operational history but limited online presence and content depth. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. The site lacks modern frameworks or CMS and shows basic performance and SEO optimization. Mobile optimization and accessibility are minimal, indicating room for improvement in digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are provided, limiting transparency and trust. The use of Google Analytics without a consent mechanism further impacts privacy compliance. Overall, the website presents a moderate risk profile with no critical security issues detected but several compliance and usability gaps. Strategic improvements in privacy policies, security headers, mobile optimization, and contact transparency are recommended to enhance trust and compliance.

I

interUX Usability Engineering Studio OÜ

interux.com

47

interUX Usability Engineering Studio OÜ is a small, Estonia-based consultancy specializing in user experience and usability engineering services across Estonia, Latvia, and Russia. With over 20 years of professional expertise, the company offers a comprehensive suite of UX services including user interface design, expert evaluations, field studies, usability testing, and eye tracking. Their client base spans multiple industries such as retail, insurance, travel, and telecommunications, positioning them as a trusted usability partner in the region. Technically, the website employs a basic but functional technology stack consisting of HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and SEO, with basic mobile responsiveness and accessibility features. However, there is no evidence of a CMS or advanced frameworks, indicating a relatively simple infrastructure. From a security perspective, the domain is well-established with a consistent WHOIS record and domain status protections. However, the website lacks critical security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement or privacy compliance mechanisms such as privacy or cookie policies. Google Analytics is used without a cookie consent banner, which may raise GDPR compliance concerns. Overall, the website presents a professional and credible business front but requires improvements in privacy compliance and security best practices to reduce risk and enhance trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, enforcing HTTPS, and providing incident response information.

TIIB Kindlustusmaakler OÜ is an Estonian insurance brokerage firm established in 2010, offering various insurance products such as traffic, casco, home, and property insurance. The company maintains a basic but functional website providing essential business and contact information, including financial reports and legal documents, which supports its credibility in the local market. The website targets Estonian customers seeking insurance brokerage services and positions itself as a trusted local player in the finance sector. From a technical perspective, the website is built using basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced accessibility features, indicating a need for modernization. No analytics or tracking technologies are present, suggesting minimal user data collection. Hosting and domain registration are stable and consistent with the business profile, registered through Telia Eesti AS. Security posture is weak due to the absence of visible HTTPS confirmation, security headers, privacy and cookie policies, and incident response information. No forms or interactive elements are present, reducing attack surface but also limiting user engagement. The lack of GDPR compliance indicators and cookie consent mechanisms poses regulatory risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

The website bytetrain.com currently serves as a login portal for konsoleH, a server and account administration interface likely associated with the Hetzner hosting provider. The site provides minimal content focused on navigation to webmail and account administration services, with no direct business description or contact information visible. The domain is well-established, registered since 2012, and shows stable registration status, but the website itself lacks modern security and privacy features. Technically, the site uses basic HTML and CSS without any detected modern frameworks or CMS. It is hosted likely by Hetzner, as inferred from URLs and copyright notices. The site lacks HTTPS, DNSSEC, security headers, and any form of privacy or cookie policy, indicating a low level of digital maturity and security posture. No analytics or tracking technologies are present, and the site is not optimized for mobile or accessibility. From a security perspective, the absence of HTTPS is a critical issue, exposing users to potential interception risks. The lack of security headers and privacy policies further reduces trust and compliance with GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and legitimate, but the website's security and privacy posture require significant improvement. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include immediate HTTPS enablement, publishing privacy and cookie policies, adding security headers, and improving content and contact transparency to enhance trust and compliance.

A

Welcome!

aluminium.ee

25

The website aluminium.ee currently serves as a default placeholder page with no substantive business content or branding. The domain is registered to Compic OÜ, an Estonian registrar, with a creation date in 2013, indicating a legitimate and established domain. However, the lack of any customized content, contact information, or policies suggests the site is either inactive or under initial development. The technical infrastructure is minimal, relying on basic HTML and CSS served via ISPConfig hosting, with no detected CMS or advanced frameworks. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the site lacks trust signals and professional presentation, limiting its credibility and user trust.

FB GROUPE is a French company specializing in concrete flooring solutions with a significant installed base in France. The company provides manufacturing, delivery, and technical support services primarily targeting construction professionals such as contractors, architects, and engineering offices. The website content is basic but functional, offering navigation through product ranges and company information. Technically, the site uses standard HTML, CSS, and JavaScript without modern frameworks or CMS, hosted behind Cloudflare DNS but lacking advanced security headers and cookie consent mechanisms. Security posture is moderate with domain registration protections but missing DNSSEC and security headers. Overall, the site is accessible and trustworthy but would benefit from enhanced security and privacy compliance features.

T

Thibault Bâtiment Industriel

thibaultbatimentindustriel.fr

43

Thibault Bâtiment Industriel is a French industrial building manufacturer and constructor, serving clients in the industrial construction sector. The website presents a professional design built on WordPress with Elementor, targeting a niche market in France. The technical infrastructure is moderate, with basic performance and mobile optimization. However, the absence of WHOIS data limits the ability to verify domain legitimacy and trustworthiness. Security posture is average, with no detected security headers and no explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

Hey.lt is a Lithuanian website offering a free visitor counter service aimed at website owners who want to track visitor numbers, compare site popularity, and receive daily visitor statistics. The service operates in a niche market focused on web analytics for Lithuanian websites. The website content is primarily in Lithuanian and provides basic navigation and service descriptions. Technically, the site uses simple HTML, CSS, and JavaScript without modern frameworks or CMS platforms. Hosting appears to be provided by Lithuanian hosting companies linked on the site. Security posture is weak, with no HTTPS detected, no security headers, and no privacy or cookie policies, which poses risks for user data protection and trust. The WHOIS data for the domain is unavailable or inaccessible, raising some concerns about domain registration legitimacy. Overall, the site is functional but lacks modern security and privacy compliance features.

Ekonominių tyrimų centras is a Lithuanian private non-profit organization specializing in social and economic research, strategic planning, and consultancy services primarily for public sector institutions, NGOs, and SMEs. The organization has a long-standing presence since 1992 and maintains a professional website with clear contact information and social media presence. Technically, the website is built with basic HTML and CSS, lacks modern frameworks or CMS, and shows moderate performance and basic mobile optimization. Security posture is limited due to absence of visible HTTPS enforcement, security headers, and published security policies. Privacy compliance is weak with no privacy or cookie policies available. Overall, the website is trustworthy and credible but would benefit from enhanced security and compliance measures.

Š

Šilutės reklama

silutesreklama.lt

40

Šilutės reklama is a small Lithuanian web development agency specializing in creating websites, e-commerce platforms, and providing online advertising and programming services. With over 10 years of experience and a portfolio exceeding 250 websites, the company targets local businesses and individuals seeking professional digital presence solutions. Their offerings include website audits, SEO optimization, and social media administration, positioning them as a comprehensive digital service provider in their regional market. Technically, the website employs a traditional tech stack including HTML, CSS, PHP, jQuery, and Bootstrap, with integration of Facebook SDK and Google Analytics for marketing and tracking purposes. While the site is functional and professionally designed, it uses somewhat outdated libraries and lacks modern security headers and privacy policies, which could impact compliance and security posture. The security posture is moderate with HTTPS usage but missing advanced headers and updated libraries. Overall, the website is accessible and trustworthy but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include updating technology stack, implementing security headers, and publishing privacy and cookie policies to improve user trust and regulatory compliance.

Y

Yan Metelitsa

yanmet.com

53

Yanmet.com is a professionally designed website representing Yan Metelitsa, a full-stack web developer specializing in comprehensive web solutions including frontend, backend, design, and additional web services. The site features a detailed portfolio showcasing various projects such as websites, web applications, and WordPress plugins, targeting businesses and projects seeking modern web development services. The business appears to be a small, independent operation founded in 2022, with a clear focus on quality and client engagement. Technically, the website is built on WordPress CMS with a custom theme and leverages modern web technologies including HTML, SCSS, JavaScript, PHP, and WooCommerce. Hosting is provided via hostfly.by as indicated by the nameservers. The site is well optimized for performance, mobile responsiveness, and SEO, with structured data and Open Graph metadata implemented effectively. Analytics are handled through Yandex.Metrika, providing moderate user tracking capabilities. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited, enhancing domain security. However, DNSSEC is not enabled and no explicit security headers were detected in the HTML content. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or security policy pages were found, indicating room for improvement in formal security governance. Overall, yanmet.com presents a trustworthy and professional web presence for a small web development business with strong technical implementation and good business credibility. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance the security posture and compliance standing further.

UNITRACESOFT is a small Australian engineering company specializing in software and electronic solutions for industrial, commercial, and financial sectors. Their offerings include process automation, quality assurance, custom software development, and website design. The company targets businesses seeking affordable and flexible automation solutions, leveraging modules like u-BOX10 and NEXUS10 for process automation. The website content is informative and business-focused, though the design is basic and somewhat dated. Technically, the website uses standard HTML, CSS, and JavaScript with Google Analytics for tracking. There is no evidence of modern frameworks or CMS platforms. The site is moderately performant but lacks advanced mobile optimization and accessibility features. No forms or complex interactive elements are present, reducing attack surface but also limiting user engagement. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating low privacy compliance. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration status. No incident response or vulnerability disclosure information is provided. Overall, while the business appears legitimate and provides clear contact information, the lack of domain WHOIS data and security best practices lowers trustworthiness. Strategic improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance credibility and reduce risk.

U

UAB GRENS CARGO

grenscargo.com

52

UAB GRENS CARGO is a Lithuanian logistics company specializing in large cargo forwarding services primarily by road transport, coordinating shipments from the European Union to the Baltic states and Russia. The company targets business clients requiring export and freight forwarding services. The website content is basic and primarily in Lithuanian, with limited technical sophistication and dated design. The technical infrastructure includes standard HTML, CSS, JavaScript, and Google Analytics for tracking, hosted on hostex.lt servers. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no visible privacy or cookie policies, which also impacts GDPR compliance. Contact information is clearly provided, but no incident response or security contact channels are present. Overall, the website reflects a small-sized company with moderate trustworthiness but requires significant improvements in security and privacy compliance to meet modern standards.

The website cmorganresume.com serves as a personal portfolio and resume site for Charles Morgan, showcasing various professional works including web portfolio, flash commercials, training documents, and graphics. The site targets potential employers and clients interested in Charles Morgan's multimedia and web development skills. The business model is focused on personal branding and professional presentation, with a small-scale, individual operation. The website content and design are basic and somewhat dated, relying on deprecated Adobe Flash technology which limits accessibility and modern usability. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with embedded Flash content. Hosting is provided via HostPapa as indicated by the nameservers. The site lacks modern web development practices such as mobile optimization, accessibility features, and SEO best practices. Performance is moderate but could be improved by removing Flash and updating the technology stack. Security posture is weak, with no visible HTTPS enforcement, no security headers, and no DNSSEC enabled. The use of Flash introduces potential vulnerabilities and compatibility issues. No privacy, cookie, or terms of service policies are present, indicating poor compliance with modern privacy regulations such as GDPR. No contact information or incident response channels are provided, limiting trust and transparency. Overall, the website presents a low-risk profile due to its personal nature and limited data collection, but it suffers from outdated technology and lack of security and privacy best practices. Strategic improvements should focus on modernizing the technology stack, enabling HTTPS, adding privacy and cookie policies, and improving accessibility and trust indicators.

I

Interneto vizijos klientas

prodiuseris.lt

38

The website prodiuseris.lt is a parked domain page confirming successful registration and activation under the Lithuanian hosting provider Interneto vizija. The site primarily serves as a placeholder with information on how to redirect the domain and hosting plans offered by Interneto vizija. There is no active business website or content beyond domain registration and hosting service promotion. Technically, the site uses basic HTML and CSS with iframes loading header and footer content from assets.iv.lt. There is no evidence of HTTPS or advanced security headers, and no privacy or cookie policies are present. The WHOIS data is unavailable due to query limits, but the domain appears legitimate and consistent with the hosting provider's client domains. Overall, the site is functional as a parked domain but lacks business, security, and privacy maturity.

A

Aesthetika Seevetal Kosmetikinstitut

kosmetik-treff.de

51

Aesthetika Seevetal Kosmetikinstitut is a small local beauty and cosmetic service provider based in Seevetal, Germany. The business offers a range of cosmetic treatments including facial care, foot care, make-up, depilation, permanent make-up, and nail care, targeting a broad audience interested in personal care and beauty. The website serves as an informational portal with basic navigation and contact details, reflecting a modest digital presence appropriate for a small service business. Technically, the website is built using basic HTML, CSS, and JavaScript, with the phpWebEd CMS platform. It includes legacy technology such as SWFObject for Flash content, which is outdated and poses security and compatibility risks. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, indicating gaps in privacy compliance. The site shows moderate performance and basic accessibility but lacks mobile optimization. From a security perspective, the site uses HTTPS as implied by the Google Analytics script source, but no security headers were detected in the provided data. The absence of privacy and cookie policies, combined with outdated Flash usage and lack of security headers, lowers the overall security posture. Contact information is clearly provided, but no incident response or security policy information is available. Overall, the website is functional and provides essential business information but requires improvements in privacy compliance, security best practices, and modernization of technical components to enhance trustworthiness and regulatory adherence.

The website landmapp.net currently serves as a minimal placeholder page indicating a 'coming soon' status for an online games related service. The site lacks substantive content, business descriptions, or contact information, which limits its ability to convey trust or professionalism. The domain is registered since 2014 with a reputable registrar, Gandi SAS, and uses Amazon AWS DNS servers, indicating a stable technical foundation. However, the absence of HTTPS information and security headers suggests potential security weaknesses. No privacy or cookie policies are present, and no data collection mechanisms are implemented, which reduces compliance with privacy regulations. Overall, the website's digital maturity is low, with significant room for improvement in content, security, and compliance aspects.

O

ORIENTIS, UAB (Mama reklama)

mamareklama.lt

28

Mama reklama, operated by ORIENTIS, UAB, is a Lithuanian advertising agency specializing in promotional products, business gifts, and advertising design services. The company offers a wide range of products including branded mugs, pens, USB drives, bags, and mobile stands, targeting businesses seeking to enhance their brand visibility. The website demonstrates a solid market position with clear company information, partner affiliations, and a variety of related projects, indicating an established presence in the local retail and advertising sector. Technically, the website is built on a custom CMS with a technology stack including HTML, CSS, JavaScript, jQuery 1.7.1, and various UI libraries such as Fancybox and Nivo Slider. It integrates Google Analytics and Zopim Live Chat for user engagement and tracking. While the site is moderately optimized for performance and SEO, it lacks modern security features such as HTTPS and updated libraries, which impacts its overall digital maturity. From a security perspective, the absence of HTTPS and security headers, along with the use of outdated JavaScript libraries, presents vulnerabilities that could be exploited. Additionally, the lack of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. However, the site does not expose sensitive data and includes clear company contact details, which supports trustworthiness. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to reduce risk and enhance user trust. Strategic recommendations include implementing HTTPS, updating technical components, and establishing comprehensive privacy policies.

The website mera.com currently hosts a default CentOS welcome page, indicating it is either parked or used as a placeholder for the CentOS Linux distribution community. CentOS is a well-known open-source enterprise Linux distribution derived from Red Hat Enterprise Linux, targeting system administrators, enterprise users, and Linux enthusiasts. The site provides links to official CentOS resources but lacks unique business content or services. Technically, the site is very basic, using simple HTML and CSS without modern frameworks or CMS. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, which limits compliance and security posture. The WHOIS data shows the domain is long-established and registered through a reputable registrar, supporting legitimacy but not active business use. Overall, the site has minimal content and technical sophistication, with significant room for improvement in security, privacy, and user engagement.

I

Interneto vizija

propius.lt

38

The website propius.lt is a parked domain page hosted by Interneto vizija, a well-established Lithuanian domain registrar and hosting provider with over 20 years of experience. The page confirms successful domain registration and provides information about hosting plans and services offered by Interneto vizija. The site content is minimal and primarily serves as a placeholder with links to the hosting provider's main website and client portal. Technical infrastructure is basic, relying on standard HTML and CSS with iframe elements to embed header and footer content from the hosting provider's assets. There is no evidence of advanced CMS or modern web frameworks. Security posture is weak due to lack of HTTPS information, absence of security headers, and no visible privacy or cookie policies. No contact information or forms are present, limiting user engagement and compliance with privacy regulations. Overall, the site functions as a domain parking page rather than a full business website.

The website spekas.lt is a minimal informational page primarily serving as a status or access point for hosting customers, linking to a web console hosted at partnet.lt. The business appears to be a small hosting service provider targeting existing clients who need self-service access. The technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS. The site lacks mobile optimization, accessibility features, and SEO enhancements. Security posture is weak, with no HTTPS detected and no security headers present. Privacy compliance is absent, with no privacy or cookie policies found. Contact information is minimal and contains a typographical error in the email link. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the site is functional but lacks professionalism, security, and compliance maturity.

V

Vertimų biuras Mažas Pasaulis

mp-vertimai.lt

38

Vertimų biuras Mažas Pasaulis is a Lithuanian translation agency established in 2008, offering a wide range of linguistic services including written and oral translations, editing, proofreading, transcription, and notarized document certification. The company operates multiple offices across Lithuania and serves clients both locally and internationally, emphasizing timely and high-quality service. The website reflects a regional market position with a focus on comprehensive language coverage and customer service. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced CMS or modern frameworks. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business credibility is strong with transparent contact information and consistent WHOIS data.

ManchesterCity.com is a small-scale informational website serving as a tourist guide to the City of Manchester, UK. It provides visitors with details on local attractions, restaurants, hotels, and cultural sites, emphasizing Manchester's rich industrial heritage and modern leisure offerings. The site targets tourists and visitors seeking comprehensive city information but lacks modern interactive features or dynamic content. Technically, the website is built on legacy HTML and CSS without evidence of modern frameworks or CMS platforms. It lacks mobile optimization and accessibility features, and performance is moderate. The site embeds an Amazon UK affiliate iframe for advertising but does not utilize analytics or tracking services visibly. Security infrastructure is minimal, with no HTTPS enforcement or security headers detected, and DNSSEC is not enabled. From a security perspective, the site exhibits several weaknesses including lack of HTTPS, absence of privacy and cookie policies, and no visible contact or incident response information. The WHOIS data shows a long-registered domain consistent with the website's history, registered through a reputable registrar without privacy protection, supporting legitimacy. However, the lack of modern security practices and compliance measures presents risks. Overall, the website is functional for basic informational purposes but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website at investing-classroom.com currently serves as a placeholder or default hosting login page rather than an active business site. It lacks meaningful content, business descriptions, or user-facing features. The domain is registered with a reputable registrar and hosting provider, but the absence of HTTPS and security best practices exposes visitors to risks. No privacy or cookie policies are present, and no contact information is provided, which further diminishes trust and compliance posture. Overall, the site appears inactive or under development with minimal digital maturity.

The domain adorableattention.com currently serves a 404 Not Found error page hosted by Admiral, a service provider specializing in copyright access control and privacy compliance for digital publishers. The page content is minimal and primarily informational about Admiral's service offering rather than the business behind the domain. The technical infrastructure is modern, hosted on Google Cloud Platform with AWS DNS, and uses HTTPS with frequent certificate rotation. Security practices are sound, with no executable content hosted and regular scanning for vulnerabilities. However, the absence of DNSSEC and security headers represents minor gaps. Privacy compliance is addressed at a basic level with statements about GDPR and cookie policies, but no active consent mechanisms are implemented. No contact information or business details are provided, limiting business credibility and user trust. Overall, the site is not accessible as a business website and functions as a service endpoint for Admiral's copyright control platform.

Fullmakt.nu is a Swedish website operated by Svenska Försäkringsfabriken, providing services related to power of attorney matters. The site is minimalistic, offering basic information and a contact email for support. The business appears to be a small, niche service provider focused on legal and insurance-related assistance in Sweden. The domain is well-established, registered since 2007, and hosted by a reputable Swedish registrar, Loopia AB. Technically, the website is simple, with no advanced frameworks or CMS detected, and limited optimization for mobile or SEO. Security posture is basic, with no DNSSEC enabled and no security headers present, indicating room for improvement. Privacy and cookie policies are absent, which impacts compliance with GDPR and related regulations. Overall, the site is functional but lacks depth in content, security, and privacy features.

U

Uddannelseshuset

uddannelseshuset.dk

47

Uddannelseshuset.dk is an established Danish educational website offering courses primarily for leaders and employees. The business has been active since 1998, indicating a mature presence in the education sector. The website uses WordPress with the Divi theme and integrates Yoast SEO for search engine optimization. Google Tag Manager is employed for analytics and marketing purposes. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security measures such as DNSSEC and security headers are absent, representing potential areas for improvement. Overall, the website presents a professional image but would benefit from enhanced privacy and security practices to strengthen trust and compliance.

R

Remotely v/ Anders Hallundbæk Mortensen

remotely.dk

50

Remotely v/ Anders Hallundbæk Mortensen is a small freelance frontend development business based in Denmark, specializing in HTML, CSS, and JavaScript with expertise in ReactJS and VueJS. The website serves as a professional portfolio showcasing a variety of projects for notable clients, emphasizing web development, digitalization, and business-critical IT solutions. The business model is service-oriented, targeting clients needing expert frontend development and consulting. Technically, the site is built using modern frameworks including Gatsby, ReactJS, and VueJS, delivering a fast and mobile-optimized experience with good SEO practices. However, accessibility features are basic and could be improved. Security posture is moderate with HTTPS enabled but lacks security headers and DNSSEC, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

NAVICON A/S is a specialized software company providing maritime surveillance and navigation system software, serving professional users including the Royal Danish Navy and international maritime operators. The company has a long-standing market presence since 1997, focusing on AIS, VTS, command and control, and maritime data analysis solutions. Their niche expertise positions them as a trusted provider in the transportation and technology sectors. Technically, the website uses legacy technologies such as jQuery 1.3.2 and Cufon font replacement, indicating an outdated technical infrastructure with moderate performance and limited mobile optimization. Security posture is moderate with no visible HTTPS enforcement or security headers and use of outdated libraries, posing potential risks. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism or GDPR indicators. Business credibility is supported by the domain age, professional content, and known contracts with the Royal Danish Navy. Overall, the website is functional but would benefit from modernization and enhanced security and privacy practices.

진

진인프라 JIN INFRA

jininfra.com

42

JIN INFRA is a South Korean technology company founded in 2023, specializing in cloud and network solutions under the branding of IT smart convergence. The website content is minimal, primarily serving as a basic landing page with limited information about the business services or contact details. The technical infrastructure is outdated, relying on deprecated HTML frameset elements and lacking modern web standards such as responsive design and accessibility features. Hosting is provided by Gabia, Inc., a reputable Korean registrar and hosting provider. Security posture is weak due to the absence of HTTPS, security headers, and DNSSEC, exposing the site to potential risks. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the website lacks professionalism and trust signals, which may impact user confidence and business credibility.

The website www.anymedia.lv operates as a basic advertising system platform primarily targeting advertisers, agencies, and media owners in Latvia. It offers services such as ad placement, banner management, discount scale creation, and supports unconventional advertising formats. The site content is minimal and presented in Latvian, with limited navigation and no advanced interactive features. Technically, the site is built with simple HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak, with no evidence of HTTPS, security headers, or privacy and cookie policies. Contact information is limited to a single email address, and no incident response or security policies are disclosed. Overall, the site appears functional but basic, with significant room for improvement in security, privacy compliance, and technical sophistication.

The website https://www.engie-axima.fr is a minimal WordPress blog with very limited content, primarily consisting of a default 'Hello world!' post. There is no clear business description, contact information, or security and privacy policies published on the site. The technical infrastructure is based on WordPress CMS with standard JavaScript and CSS assets, and the site is served over HTTPS, indicating basic security configuration. However, advanced security headers and compliance mechanisms are absent. The lack of business and contact details, privacy policies, and security disclosures suggests the site is either under development or not actively maintained as a professional business presence. Overall, the site exhibits a low level of digital maturity and trustworthiness.

Lindentree Associates is a small, specialized consultancy and training provider focused on real-time embedded systems, founded in 1998 by Jim Cooling. The company offers expert services in system analysis, software and electronic design, control engineering, and mentoring, targeting industry professionals and companies requiring deep expertise in embedded systems. The website content is informative and relevant but lacks modern digital maturity features such as privacy policies, contact details, and security certifications. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS, and no evidence of HTTPS or security headers was found, indicating a low level of technical security maturity. The site performs moderately but lacks mobile optimization and accessibility features. From a security perspective, the absence of HTTPS, privacy and cookie policies, and contact information for incident response represent significant gaps. No security best practices or vulnerability disclosures are present, which could expose the business to compliance and trust risks. Overall, the website presents a moderate risk profile due to missing security and privacy controls, limited technical sophistication, and lack of transparency in contact and compliance information. Strategic improvements in security posture, privacy compliance, and digital presence are recommended to enhance trust and reduce risk.

ATM Consulting is a small local business providing on-site computer repair, support, and security services primarily to Toronto businesses and residents. The company focuses on IBM and compatible computers, offering network setup and virus removal among its key services. The website content is basic but relevant, targeting a local audience seeking expert computer services. The market position is that of a local trusted provider with a straightforward business model centered on direct service delivery. Technically, the website is simple, built with basic HTML and CSS without modern frameworks or CMS detected. There is no evidence of HTTPS or advanced security measures, and the site lacks privacy and cookie policies, which indicates low digital maturity and compliance gaps. The site has minimal tracking or analytics, suggesting limited data collection practices. From a security perspective, the absence of HTTPS and security headers is a significant weakness, exposing users to potential risks. No incident response or vulnerability disclosure information is provided, and no certifications or compliance frameworks are referenced. Contact information is clearly presented, which supports business credibility but does not compensate for the security shortcomings. Overall, the website scores low to moderate on security and privacy compliance, with basic content quality and business credibility. Strategic improvements in security infrastructure, privacy compliance, and technical modernization are recommended to enhance trust and protect users.

Decoro Resource is a small business consultancy focused on risk, finance, and management systems development. The website content emphasizes the meaning of 'Decoro' as orderliness, technique, and integrity, positioning the company as a provider of business improvement services. The site is a basic static HTML page with minimal technical sophistication and no dynamic features or interactive elements. There is no evidence of modern web technologies, CMS, or analytics tools. Security posture is weak, with no HTTPS detected, no security headers, and no privacy or cookie policies. Contact information and compliance documentation are absent, limiting trust and credibility. Overall, the website appears to be an informational brochure site with limited digital maturity and security awareness.