Security Directory

C

Castlerock Managed IT Services Company

castlerock.co.za

63

Castlerock Managed IT Services Company is a small-sized technology business specializing in managed IT services, cloud solutions, and network security. The company emphasizes bespoke IT solutions and partners with major technology providers such as Cisco, Dell, and Microsoft to deliver reliable and responsive managed services. Their offerings include managed networks, managed wifi, managed firewall, private cloud solutions, Microsoft 365 solutions, email protection, power backup, security solutions, VoIP, and hosting services. The website reflects a professional and consistent brand image targeting businesses seeking IT support and cloud services. Technically, the website is built on WordPress with Bootstrap and FontAwesome, hosted on a CDN associated with Pronto Marketing. It uses modern web technologies including Wistia for video content and integrates marketing and analytics tools such as Google Tag Manager and LinkedIn Insight Tag. The site is mobile optimized and has good SEO practices, though Google Analytics is present but not configured. Performance is moderate with room for improvement in accessibility. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a privacy or cookie policy. No security.txt or vulnerability disclosure policy is present. The WHOIS data is fully redacted, which is common but limits transparency. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, configuring analytics properly, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

XOmobile is a telecommunications company based in Latvia offering international mobile communication services focused on cost-effective roaming calls. The company targets mobile subscribers seeking affordable international calling options, providing services such as calls, SMS, GPRS, and service packages. The website is primarily in Russian and currently under development, with basic content and navigation available. Technical infrastructure includes common JavaScript libraries and Bootstrap CSS, but lacks advanced frameworks or CMS indications. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and lack of privacy and cookie policies, which also impacts GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website shows moderate professionalism but requires significant improvements in security and privacy compliance to meet industry standards.

J

J. Smilgas Tehnoloģiskais birojs

smtb.lv

37

J. Smilgas Tehnoloģiskais birojs (SMTB) is a Latvian technology company specializing in supplying testing and measuring equipment from notable manufacturers such as Tektronix, Keithley, and others. They also provide technological service consultations and participate in Latvian and EU-level projects, positioning themselves as a leading representative firm in Latvia within their sector. The website content is professionally presented with clear navigation and relevant business information targeting telecommunications operators and research organizations in the electronics industry. Technically, the website uses a traditional tech stack including Bootstrap, jQuery, and various JavaScript plugins, but some libraries are outdated, which may pose security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with no visible security headers and outdated libraries, and there is no evidence of privacy or cookie policies, which impacts GDPR compliance. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the website is functional and professional but would benefit from security and compliance improvements.

L'Atelier Rouge is a small, creative floral and event design business established since 2009. The company offers customized floral designs for various occasions including weddings, parties, and business events, alongside full-service event design and editorial styling. The website reflects a niche market position with a focus on artistic and bespoke services targeting individuals and businesses seeking high-quality floral and event design solutions. Technically, the website is built on WordPress 4.9.9 with common libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS but lacks modern security enhancements like DNSSEC and security headers. The site is moderately optimized for mobile and performance but shows some outdated practices such as loading scripts over HTTP, which could lead to mixed content issues. Security posture is basic with no visible advanced protections or policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility, but the presence of unrelated gambling links in the menu raises concerns about content integrity. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and content integrity to enhance trust and user safety.

M

Marketingfans

marketingfans.lv

51

Marketingfans is a small marketing and public relations consultancy focused on the Baltic region, offering services such as content creation, PR, and marketing consultations. The company emphasizes localization over translation and has partnerships in Estonia and Lithuania, positioning itself as a regional service provider. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and common marketing tools like Google Tag Manager and Facebook Pixel. While the site is professionally designed and SEO optimized, it lacks visible privacy and cookie policies, and no explicit contact emails or phone numbers are provided on the homepage. Security posture is good with HTTPS enabled and no exposed sensitive data, but security headers are missing. WHOIS data could not be retrieved due to query limits, which limits domain trust verification. Overall, the site presents a credible small business with room for improvement in privacy compliance and security best practices.

S

Sabiedrība ar ierobežotu atbildību "TELMS"

telms.lv

45

SIA TELMS is a Latvian company specializing in energy-related construction and electrical installation services. Their offerings include trenchless technologies, general construction, electrical installation design, electromontage, and conference room rentals. The company presents itself as an established local business with over 20 years of experience in the energy construction sector. The website is functional with basic content and navigation but lacks advanced features such as privacy policies or detailed security disclosures. Technically, the site uses common open-source libraries like jQuery and Bootstrap but does not demonstrate advanced security headers or HTTPS enforcement details. The presence of a cookie consent banner indicates some awareness of privacy compliance, though no formal privacy policy is found. Contact information is clearly provided, enhancing business credibility. Overall, the site is moderately professional but could benefit from improved security and privacy practices.

J

Jumis.co

jumis.co

56

Jumis.co is a Latvian small business specializing in the installation, repair, and reconstruction of wooden roof structures and various roofing materials. The company targets private homeowners and commercial clients seeking quality roofing solutions. The website presents a professional portfolio of completed projects and partnerships, indicating a stable market presence since its founding in 2017. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Google services, hosted behind Cloudflare DNS with GoDaddy as the registrar. While the site is mobile-optimized and well-structured, it lacks explicit privacy and cookie policies, and uses an outdated jQuery version, which poses potential security risks. Security headers are not detected, and DNSSEC is not enabled, suggesting room for security improvements. Overall, the site is accessible and functional with moderate security posture and good business credibility.

C1 is a global technology solutions provider specializing in AI-powered communications, infrastructure, and security services. The company serves a broad range of sectors including education, government, healthcare, and financial services, supporting over 6,000 customers worldwide. Their offerings include unified communications, contact center solutions, enterprise networking, cybersecurity, and managed services, supported by partnerships with leading technology vendors such as Cisco, Microsoft, and AWS. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including Bootstrap, Google Tag Manager, and Vidyard for video content. The site demonstrates good mobile optimization, clear navigation, and professional design. Analytics and marketing tools are integrated, with a cookie consent mechanism in place, though explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data for the domain is unusual and slightly reduces trust, though the website content and partner ecosystem indicate a legitimate business. Overall, the website presents a professional and credible front with room for improvement in privacy transparency and security disclosures. Strategic recommendations include publishing comprehensive privacy and security policies, adding vulnerability disclosure information, and enhancing security headers to strengthen trust and compliance.

Flames Group SIA is a telecommunications company specializing in VoIP traffic operations and manufacturing VoIP-GSM gateways. Established in 2005, the company operates primarily in the Central and Eastern European markets and maintains a significant network of VoIP partners and equipment owners. Their business model focuses on buying and selling voice and SMS services, connecting providers and resellers with competitive rates. The website, currently under construction, provides basic business information and contact details, including social media links and a legal address in the UAE. Technically, the site uses modern web technologies such as Bootstrap and Google Tag Manager, with hosting provided by DreamHost. However, the site lacks comprehensive privacy and cookie policies and does not implement DNSSEC or security headers, which are areas for improvement. The security posture is moderate with HTTPS enabled but missing some best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

A

Auchan Retail

groupe-auchan.com

64

Auchan Retail is a large, established French retail company focused on food commerce, local products, franchising, and energy partnerships. The website presents a professional and consistent brand image with a clear mission to improve quality of life through healthy and sustainable food. The digital infrastructure uses modern technologies including Bootstrap and a CMS named Snowboard, delivering a good user experience with mobile optimization and structured navigation. Security posture is solid with HTTPS and secure form handling, though some security headers are missing and no cookie consent mechanism is detected. The absence of WHOIS data for the domain is unusual and slightly reduces trust, but the website content and social media presence strongly support legitimacy. Overall, the site is well-built and credible but could improve privacy compliance and security header implementation.

V

VUCA communications

vuca.lv

46

VUCA communications is a full-service integrated advertising agency based in Latvia, offering a range of creative and marketing services including advertising campaigns, branding, content marketing, and media production. The website is built on WordPress and uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, indicating a moderate level of digital maturity. The site features multimedia content including a Vimeo video background and social media integration, targeting businesses seeking creative advertising solutions. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data due to query limits limits full domain legitimacy verification. Overall, the website presents a professional image but would benefit from enhanced privacy compliance and security best practices.

S

SIA FELZER

felzer.lv

44

Felzer is a Latvian-based manufacturer specializing in HVAC and process cooling equipment, including chillers, heat pumps, and air handling units. The company emphasizes energy efficiency, environmental responsibility, and Scandinavian-inspired precision. Their market presence spans multiple European countries and beyond through direct offices and partner networks. Technically, the website uses a modern but basic tech stack with Bootstrap and jQuery, providing a responsive and navigable user experience. Security posture is adequate with HTTPS and secure forms but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data limits full domain trust verification. Overall, Felzer presents as a credible medium-sized manufacturing business with room for improvement in privacy and security transparency.

Granat Holding is an international multi-disciplinary investment holding company focusing on sectors such as finance, real estate, production, social projects, and development. The company positions itself as a trusted private investor with a presence in multiple countries, targeting investors and business partners interested in diversified investment opportunities. The website reflects a professional and consistent brand image with clear navigation and good content quality, although some areas like privacy compliance and direct contact information could be improved. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Google Maps API, with good mobile optimization and moderate performance. However, there is a lack of advanced security headers and DNSSEC is not enabled, which are areas for improvement. The site uses HTTPS and has a stable domain registration, which supports its legitimacy. From a security perspective, the site has a moderate posture with HTTPS enabled and domain transfer protection, but lacks security headers and cookie consent mechanisms. No incident response or security policies are published, and no direct company contact emails or phone numbers are provided, which may impact user trust and compliance with privacy regulations. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security practices, and more transparent contact information to strengthen trust and regulatory adherence.

Attirance.com is an established e-commerce website specializing in personal care products such as facecare, haircare, oralcare, and odour-control items. The site targets consumers interested in beauty and wellness products, offering a broad catalog of skincare and hygiene products. The business model is retail-focused, with a niche market position in personal care. The domain has been active since 2002, indicating a mature presence in the market. Technically, the website employs common front-end technologies including Bootstrap, Font Awesome, and Swiper.js, providing a responsive and user-friendly interface. The site demonstrates moderate performance and basic SEO and accessibility features. Hosting and domain registration are managed via GoDaddy, a reputable provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to enhance security posture. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Contact and incident response information are also absent, which could impact user trust and security incident handling. Overall, the website is functional and professionally designed but would benefit from improved security practices, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

D

DYNINNO

dyninno.com

65

Dyninno is a well-established global technology group with over 20 years of experience operating in travel, finance, entertainment, and technology sectors. The company operates multiple divisions and brands, serving retail and corporate clients worldwide. Their website reflects a professional and modern digital presence with comprehensive content about their business divisions, career opportunities, and global markets. The company is headquartered in Malta and maintains a consistent brand identity across its digital assets. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, GDPR compliance plugins, and analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile-optimized, SEO-friendly, and hosted on AWS infrastructure, indicating a mature digital infrastructure. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, security headers are not explicitly detected, and DNSSEC is not enabled, suggesting room for improvement in hardening the security posture. No critical vulnerabilities or exposed sensitive data were found. The domain registration is consistent with the business claims, registered since 2010 with GoDaddy and DNS hosted on AWS. Overall, Dyninno's website demonstrates a strong business credibility and digital maturity with good privacy compliance. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security policies or vulnerability disclosure information to further strengthen trust and security posture.

M

MetArt

met-art.com

71

MetArt is a leading adult content platform specializing in artistic nude photography and erotic films, boasting over 25 years of history and a vast collection of high-quality content. The website is professionally designed with excellent user experience, mobile optimization, and clear navigation. Technically, it employs modern web technologies including React, Google Tag Manager, and OneTrust for privacy compliance, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, but the overall brand and content quality indicate a reputable business. Strategic recommendations include enhancing transparency around security policies and business contact information to further build trust.

C

CSL Computer Service Langenbach GmbH

rpksoft.com

39

The website rpksoft.com is currently a parked domain hosted by Joker.com, a domain registration and reseller platform operated by CSL Computer Service Langenbach GmbH. The site primarily promotes domain registration services with a simple landing page and no active business content. The target audience includes individuals and businesses looking to register or manage domain names. The business model is focused on domain registration and reseller services, with key offerings such as domain management control panels, reseller APIs, email forwarding, and URL forwarding. The company behind the registrar is based in Germany and has been operating since 2009. From a technical perspective, the website uses basic HTML5 and Bootstrap CSS for layout and styling. The site is mobile optimized and has moderate performance but lacks advanced technical features or CMS integration. No analytics or tracking technologies are detected, indicating minimal data collection. However, the site does not enforce HTTPS in the provided content, and DNSSEC is not enabled, which are notable security gaps. Security posture is limited with no visible security headers or HTTPS enforcement in the provided HTML content. The domain status clientTransferProhibited is a positive indicator against unauthorized transfers. No privacy or cookie policies are present, and no contact information is provided, which impacts compliance and trust. Overall, the site is low risk but lacks maturity in security and privacy practices. Strategically, the domain appears to be parked and not actively used for business operations, which limits exposure but also reduces trust signals. Recommendations include enabling HTTPS, adding privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

I

International Virotherapy Center Limited

virotherapy.eu

50

International Virotherapy Center Limited operates a professional website dedicated to oncolytic virotherapy, a novel cancer treatment approach using live viruses. The site provides extensive educational content, clinical publications, treatment and prevention information, and a contact center for patient inquiries. The company targets cancer patients, healthcare professionals, and researchers globally, positioning itself as a niche healthcare information provider. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, RoyalSlider, and Swiper.js, with integrated analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used but no explicit security headers or published security policies are found. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing or unavailable, raising concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and credible but would benefit from enhanced security and compliance transparency.

Printful is a leading e-commerce platform specializing in custom print-on-demand and dropshipping services. It enables entrepreneurs and online store owners to design and sell custom products without managing inventory, positioning itself strongly in the print-on-demand market with extensive product offerings and integrations. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Vue.js, Bootstrap, and advanced analytics tools including Google Analytics, Google Tag Manager, and Sentry for error monitoring. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is solid with HTTPS enforcement, CSRF protection, and error tracking, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with strong branding and customer trust signals.

T

Trypet

trypet.lv

28

Trypet is a Latvian manufacturing company specializing in PET containers such as jars and bottles, offering comprehensive packaging solutions including design, testing, and production of PET preforms and plastic closures. Established in 2005, the company positions itself as a flexible provider capable of handling small to large orders with a unique approach combining two main PET production technologies. The website reflects a small-sized manufacturing business with a focus on customized packaging solutions for business clients. Technically, the website uses a moderately modern stack including Bootstrap, jQuery, Google Analytics, and Google Maps API, but some components like jQuery are outdated. The site is accessible, mobile-optimized, and professionally designed with clear navigation. Security posture is moderate with HTTPS implied but lacking security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website is functional and professional but would benefit from improved security and privacy practices.

Z

Zeew delivery scripts

zeew.eu

66

Zeew.eu is a European-based technology company specializing in white-label delivery system software for food, grocery, pharmacy, and home services businesses. The company offers SaaS and source code licensing models targeting startups, chains, and marketplaces, enabling rapid deployment of AI-powered delivery platforms. Their market position is strong with presence in over 100 countries and notable clients such as OLM Foods. Technically, the website is built on WordPress with modern plugins and tracking tools, demonstrating good digital maturity. Security posture is solid with HTTPS and some security best practices, though explicit security policies and headers could be improved. Privacy compliance is basic with cookie policies present but lacking full consent mechanisms. Overall, the website is professional and trustworthy but could enhance transparency and compliance documentation.

B

Baltic Scientific Instruments

bsi.lv

46

Baltic Scientific Instruments (BSI) is a specialized company established in 1994 with historical roots dating back to 1966. The company focuses on the development and manufacturing of spectrometric devices and detectors used in nuclear energy, ecology, geology, medicine, and security. Their product portfolio includes HPGe detectors, scintillation detectors, nuclear electronics, and analytical software, serving a niche market with technical expertise. The website reflects a professional and consistent brand image with clear product and application information, targeting scientific and industrial customers. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts, Google Analytics for tracking, and Google reCAPTCHA for form security. The site is mobile-optimized and offers good navigation and content relevance. However, some security best practices such as security headers are missing, and there is no explicit cookie consent mechanism despite having a cookie policy page. From a security perspective, the site uses HTTPS and standard bot protection, but lacks visible security policies or incident response information. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid security posture with room for improvement in transparency and compliance. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

E

Elsana SIA

elsana.lv

43

Elsana SIA is a Latvian company specializing in the construction and reconstruction of energy infrastructure, including electric power transmission lines, cable networks, transformer substations, and KTP installations. The company also offers services related to solar panel installation and helicopter services, positioning itself as a regional player in the energy sector. The website is professionally designed, built on WordPress, and incorporates modern technologies such as Bootstrap and Swiper.js, with SEO optimization via Yoast and user tracking through Google Analytics. Contact information is clearly provided, enhancing business credibility. However, the absence of privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a legitimate and professional business presence with moderate technical and security maturity.

襄樊富仕纺织服饰有限公司 is a large Chinese textile manufacturing company established in 2001, specializing in spinning and weaving with significant production capacity. The company holds multiple provincial and national certifications, positioning it as a reputable player in the manufacturing sector. The website presents a professional design with clear navigation and relevant business content targeting industry clients and partners. Technically, the site uses a SaaS platform with common web technologies like jQuery and Swiper.js, but mobile optimization and accessibility are basic. Security posture is weak due to lack of security headers and unclear SSL configuration. Privacy compliance is poor, with no visible privacy or cookie policies. The domain WHOIS data is unavailable, raising concerns about domain legitimacy. Suspicious external domains embedded in scripts and iframes further reduce trust. Overall, the site is functional and business-oriented but requires improvements in security, privacy, and domain registration transparency.

R

RTV Slovenija

rtvslo.si

61

RTV Slovenija operates the website rtvslo.si as a comprehensive multimedia news portal serving the Slovenian public. It provides a wide range of services including news articles, live TV and radio streaming, podcasts, and video on demand. The site is a leading national public broadcaster platform with a strong market position and a large audience. The technical infrastructure leverages modern web technologies such as Bootstrap, Matomo analytics, and supports mobile and PWA features, ensuring good performance and accessibility. Security posture is strong with HTTPS enforced, secure cookie practices, and cookie consent mechanisms, although some security headers could be improved. The website is well-branded, professionally designed, and offers a consistent user experience with clear navigation and extensive content. No blocking or WAF challenges were detected, and the domain registration data aligns well with the public broadcaster's identity, supporting high legitimacy.

A

AERMEC

aermec.fr

50

AERMEC is a well-established French company specializing in HVAC solutions, particularly terminal units and chillers. With over 55 years of experience and a strong market position, it serves diverse sectors including residential, commercial, industrial, and data centers. The website reflects a mature digital presence with detailed regional contacts and product information. Technically, the site uses Joomla CMS with modern front-end frameworks and includes standard security measures such as HTTPS and CAPTCHA-protected forms. However, there is room for improvement in security headers and explicit security policies. Privacy compliance is addressed with cookie consent and a privacy policy accessible via legal mentions. Overall, the site demonstrates good business credibility and technical implementation, suitable for its industry and audience.

R

Refrion

refrion.com

70

Refrion is a leading company specializing in industrial refrigeration and ventilated equipment for industrial use worldwide. As part of the LU-VE Group, it holds a strong market position in the energy and manufacturing sectors, offering a range of products including dry coolers, condensers, and batteries. The website reflects a professional B2B business model targeting industrial clients requiring advanced cooling solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates key marketing and analytics tools such as Google Analytics and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a good user experience and trustworthiness. The lack of WHOIS data for the subdomain is consistent with it being a subdomain of luvegroup.com, which aligns with the corporate structure. Strategic recommendations include enhancing security headers, expanding contact information visibility, and maintaining compliance with evolving privacy regulations.

A

Adrenaator Grupp

adrenaator.ee

40

Adrenaator Grupp operates the website adrenaator.ee, providing adventure and outdoor experiences such as canoe trips, hiking, and team events primarily in the Aidu quarry area in Estonia. The company targets families, friends, and corporate groups seeking unique adventure activities. The business is positioned as a niche local provider with a focus on experiential tourism and event hosting. The website is built on WordPress with modern SEO and GDPR compliance plugins, indicating a moderate level of digital maturity. Technical infrastructure includes Google Analytics and Tag Manager for tracking, and the site is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional and trustworthy with room for improvement in security and contact transparency.

S

Siseturvalisus

siseturvalisus.ee

44

Siseturvalisus.ee is a government-affiliated career portal dedicated to internal security in Estonia, providing job opportunities and career information across seven key security agencies. The website serves as a centralized platform for recruitment and career development in the Estonian internal security sector, targeting job seekers interested in contributing to national security. Technically, the site is built on WordPress with modern frontend libraries such as jQuery, Fancybox, and Splide.js, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and explicit incident response contacts. Privacy compliance is adequate with privacy and cookie policies present, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its government sector mission.

G

Goldcar Spain S.L.

goldcar.es

63

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Southern Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental sector. The website offers multilingual support, currency selection, and a comprehensive booking system, targeting travelers seeking affordable car rentals. Technically, the site uses modern frameworks such as Bootstrap and integrates performance and consent management tools like Akamai Boomerang and Didomi SDK. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be verified further. The absence of WHOIS domain registration data is a transparency concern but does not detract from the overall legitimacy indicated by the brand presence and structured data. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

G

Goldcar

ongoldroad.com

63

Goldcar is a large car rental company operating over 115 offices primarily in Europe and the United States, targeting travelers and tourists. The company is part of the Europcar Mobility Group, which enhances its market credibility and operational scale. The website is professionally designed, mobile-optimized, and provides comprehensive information about office locations and services. Technically, the site uses modern frameworks such as Bootstrap, integrates Google Tag Manager and Akamai Boomerang for analytics and performance monitoring, and employs Didomi for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and association with Europcar support its legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

G

Goldcar Spain S.L.

goldcar.com

63

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental industry. The website is professionally designed, mobile-optimized, and provides comprehensive content including offers, destinations, and customer reviews. Technically, the site uses modern frameworks like Bootstrap and integrates third-party services such as Google Tag Manager and Didomi for consent management, hosted likely on Akamai infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and corporate affiliations. Privacy compliance is well addressed with GDPR-consistent cookie policies and consent banners.

C

ConvexityShares

convexityshares.com

44

ConvexityShares is a small ETF issuer based in the USA, founded in 2020, currently without active products in the market. The company operates under the parent company Teucrium and targets investors interested in exchange-traded funds. The website provides basic business information, tax package support resources, and contact options primarily through a contact form and physical address. The digital infrastructure employs modern web technologies including Google Tag Manager and Twitter tracking pixels, indicating moderate digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts privacy compliance ratings. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection, enhancing trustworthiness. Nonetheless, it lacks advanced security headers and explicit incident response contacts, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected during analysis. The website is accessible without any WAF or blocking mechanisms, allowing full content inspection. Overall, ConvexityShares presents a basic but functional online presence consistent with a small financial services business. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory alignment. The company’s partnership with tax package support services adds value to its investor audience.

M

Miami International Holdings, Inc.

miaxoptions.com

62

Miami International Holdings, Inc. operates a global exchange group providing access to U.S. and international capital markets through multiple electronic exchanges specializing in options, equities, futures, and international securities. The company leverages award-winning technology platforms to deliver superior customer service tailored to financial market participants. The website reflects a mature business with a broad market presence and a diverse product portfolio. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses advanced charting libraries such as Highcharts. It integrates Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized and offers good navigation and content quality, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, there is a lack of visible security headers and no published security or incident response policies. Privacy compliance is minimal with no explicit privacy or cookie policies detected on the main page. The absence of WHOIS data raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the website presents a professional and credible business front but should improve transparency around domain registration and privacy compliance to enhance trust and security posture.

T

Tervise Arengu Instituut

nutridata.ee

50

NutriData is a government-operated nutrition information system managed by the Estonian Health Development Institute (Tervise Arengu Instituut). It offers a suite of nutrition-related applications including diet analysis programs, food composition databases, product calculation tools, and nutrition survey software. The platform serves a broad audience ranging from individual users and healthcare professionals to food producers and researchers, positioning itself as an authoritative national resource for nutrition data and analysis in Estonia. The website is well-structured, content-rich, and provides comprehensive information about its services, training, and team members. Technically, the website is built as a modern Angular single-page application leveraging Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile-optimized and uses standard web fonts and icons for a professional appearance. While the site uses HTTPS and some security best practices, it lacks certain HTTP security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates good practices such as encrypted connections and form protection via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the domain's legitimacy and consistency with the official institution managing the site. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security transparency and incident readiness. Overall, NutriData presents a trustworthy, professional, and functional nutrition information platform with strong government backing. Strategic enhancements in privacy compliance, security headers, and incident response documentation would further strengthen its security posture and user trust.

S

Starptautisko izstāžu rīkotājsabiedrība BT 1

balttour.lv

52

Balttour.lv represents the Baltic region's premier international tourism exhibition organized by Starptautisko izstāžu rīkotājsabiedrība BT 1 in partnership with ALTA. The website showcases detailed event information, participant lists, news, and visitor guidance, targeting tourism professionals and general visitors interested in travel opportunities. The business holds a strong market position as a leading event organizer in the hospitality and tourism sector in Latvia. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and well-structured, though some older libraries like jQuery 1.11.2 are used, which may pose security risks. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and dedicated security or privacy policy pages. WHOIS data confirms domain legitimacy with consistent registrant information matching the business claims. Overall, the website is professional and trustworthy but could improve compliance and security practices.

Clinical Research News Online is a specialized digital publication focused on delivering news, analysis, and insights related to clinical trials, patient recruitment, and clinical research technologies. It operates under the umbrella of Cambridge Innovation Institute, a reputable organization in the healthcare and life sciences sector. The website targets professionals in clinical research, pharmaceutical companies, and healthcare providers, offering a range of services including news articles, press releases, advertising, webinars, and podcasts. The business model is primarily advertising and lead generation driven, supported by event promotion and content marketing. Technically, the website is built on the Sitefinity CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and integration with social media platforms. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks several recommended security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or a WHOIS query limitation, which slightly impacts the trustworthiness assessment. Overall, Clinical Research News Online presents as a professional and credible source within its niche, with a solid technical foundation and privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and resolving WHOIS data inconsistencies to improve domain legitimacy and trust.

C

Contract Pharma

contractpharma.com

61

Contract Pharma operates as a specialized media outlet focused on connecting contract service providers with pharmaceutical and biopharmaceutical sponsors. The website offers a comprehensive range of services including industry news, digital and print magazine editions, directories, event information, and sponsored content. It targets professionals and companies within the pharma and biopharma sectors, positioning itself as a premier information and networking platform in this niche. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Analytics, HubSpot, and AdRoll. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with responsive design elements. Performance is moderate, with standard ad integrations and tracking scripts. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, explicit security policies and incident response information are not publicly available. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site presents a professional and trustworthy front for its business model, but the lack of WHOIS transparency and absence of direct contact information on the homepage slightly reduce its trustworthiness. Strategic improvements in security transparency and contact availability would enhance credibility and compliance.

A

Art Media Agency

artmedia.ee

50

Art Media Agency is a small Estonian digital agency specializing in website creation services, catering to notable clients including marketers, digital agencies, and advertising bureaus. The website demonstrates a professional and consistent brand presence with good content quality and clear target audience focus. The business model revolves around providing tailored website development solutions, positioning itself as a trusted service provider in its niche. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as Google reCAPTCHA for bot protection, Cookiebot for cookie consent management, and common frontend libraries including jQuery and Bootstrap. The site is mobile-optimized and exhibits good SEO practices with structured data and meta tags, although some accessibility features could be enhanced. From a security perspective, the website employs HTTPS and integrates reCAPTCHA to secure forms, alongside a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for improving its security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic improvements in security headers, privacy policy publication, and incident response readiness would further enhance trust and compliance.

R

Recommender OÜ

recommy.com

52

Recommender OÜ operates the Recommy platform, a SaaS solution focused on collecting customer feedback and calculating a recommendation index to measure customer loyalty. The platform targets businesses in Estonia and provides automated survey integration to improve service quality and customer retention. The website is professionally designed using ASP.NET Web Forms with Bootstrap and jQuery, offering a responsive and user-friendly experience. However, the absence of WHOIS data for the domain app.recommy.com raises questions about domain registration legitimacy, though the active website and presence of known partner companies mitigate some concerns. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. Privacy policy exists but is basic and in Estonian, with no visible GDPR compliance features or incident response contacts. Overall, the website is functional and credible but would benefit from enhanced security and privacy compliance measures.

Power-Plaza.com is an online portal operated by Kumera Corporation, specializing in gearboxes and spare parts for industrial customers, primarily in the energy sector. The platform offers a comprehensive gearbox configurator, access to catalogues and documentation, and additional services such as remote monitoring and customer group management. The business model is B2B e-commerce and service-oriented, targeting industrial clients requiring specialized gearbox solutions. The company is established with a domain age of over 20 years, indicating a mature market presence. Technically, the website leverages modern web technologies including Blazor WebAssembly and Telerik UI components, hosted behind Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Telemetry via Microsoft Application Insights is present but disabled, reflecting a cautious approach to user data collection. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for compliance and defense-in-depth. No incident response or vulnerability disclosure information is provided, representing an area for improvement. The absence of WAF or blocking mechanisms indicates open accessibility. Overall, the website is professionally designed and credible, with a solid business foundation. Key recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure details to enhance trust and compliance.

S

Suomen Hostingpalvelu Oy

hostingpalvelu.fi

63

Suomen Hostingpalvelu Oy is a Finnish technology company specializing in domain registration, web hosting, and website building services. Established in 2008, it has positioned itself as a trusted local provider with a strong emphasis on customer service and technical reliability. The company offers a range of hosting packages, including AI-assisted WordPress hosting, targeting both individual and business customers in Finland. Their partnership with Suomen Yrittäjät further strengthens their market credibility. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, and integrates multiple analytics and marketing tools like Google Analytics, Hotjar, and Trustmary. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Hosting servers are located in Finland, ensuring good performance and compliance with local data regulations. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, Suomen Hostingpalvelu Oy demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the Finnish hosting market. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture.

I

Initiative „Schulen: Partner der Zukunft“ (PASCH)

pasch-net.de

67

The PASCH-Initiative website represents a well-established global educational network promoting German language learning through over 2,000 partner schools worldwide. The initiative offers diverse services including learning materials, competitions, school partnerships, youth courses, and alumni projects. The website is professionally designed with consistent branding and targets German language learners and educational institutions globally. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Bitmovin Player, and a consent management platform (Usercentrics), hosted on Microsoft Azure DNS infrastructure. Performance and mobile optimization are good, with accessibility and SEO well addressed. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact is primarily via a contact form; no direct emails or phone numbers are published. Overall, the site is trustworthy, professional, and aligned with its educational mission.

H

Hukot.net

hukot.net

56

Hukot.net is a small Czech Republic-based hosting service provider offering a comprehensive range of hosting solutions including domain registration, webhosting, VPS, dedicated servers, and storage services. The company positions itself as a reliable and experienced player with over 17 years of hosting experience and a strong focus on performance, availability, and customer support. Their target audience includes individuals and businesses seeking scalable and GDPR-compliant hosting solutions. Technically, the website is built on modern frameworks such as Bootstrap and uses Google Tag Manager for analytics, indicating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, which impacts the overall risk assessment. Strategic recommendations include improving transparency around domain registration, implementing cookie consent mechanisms, enhancing security headers, and publishing incident response contacts to strengthen compliance and trust.

The website yemenfox.net operates as a small-scale Indonesian language blog focused on online slot and togel gambling news, tips, and predictions. It targets Indonesian bettors interested in online gambling, providing content such as betting strategies and links to gambling prediction sites. The site is built on WordPress 6.8.1 with common plugins like Yoast SEO and uses Cloudflare DNS services. The technical infrastructure is moderate with basic mobile optimization and SEO practices. However, the site lacks critical security features such as security headers, DNSSEC, and explicit HTTPS status confirmation. There are no visible privacy, cookie, or terms of service policies, nor any contact information or business identity disclosures. This limits trust and compliance with data protection regulations. Overall, the security posture is weak, and the site shows minimal privacy compliance. The domain registration is consistent and appropriate for the business age, but the lack of transparency and security controls poses risks. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

H

Hukot.net

hukot.cz

60

Hukot.net is a Czech Republic-based hosting service provider with over 21 years of market presence, offering a comprehensive range of services including domain registration, webhosting, VPS, dedicated servers, and storage solutions. The company targets both individual users and businesses requiring reliable and scalable hosting infrastructure. Their business model focuses on providing high-performance hosting backed by 24/7 human customer support and GDPR compliance. The website reflects a professional and consistent brand image, supported by a parent company, SecurityNet.cz s.r.o. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, and Google Tag Manager, ensuring good performance, mobile responsiveness, and SEO optimization. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, though it lacks explicit published security policies or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and clarifying domain registration details to improve credibility and compliance.

J

JMP s.r.o.

loznice.cz

50

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

Lao Brewery Co,Ltd is a leading beverage manufacturer in Laos, known primarily for its flagship brand Beerlao. Established in 1973 as a joint venture between the Lao Government and Carlsberg Group, the company has expanded its portfolio to include beer, drinking water, carbonated soft drinks (as the PepsiCo bottler), snacks, and wine. The company enjoys a strong market position domestically and has received international recognition for product quality. The website reflects a professional and consistent brand image, targeting consumers and visitors interested in Lao beverages and brewery experiences. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Flickity, and Google APIs, hosted on DNS servers without DNSSEC enabled. The site is mobile optimized with good SEO and accessibility features, though some security headers could be improved. Compliance with privacy and cookie policies is evident, with GDPR considerations addressed. The WHOIS data confirms the domain's legitimacy and long-standing presence, matching the business claims. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but improvements such as enabling DNSSEC and adding security headers are recommended. No incident response or security policy pages were found, indicating an area for enhancement. Overall, the website is trustworthy and professionally maintained, supporting the company's market credibility.

Carlsberg Ukraine is a large manufacturing company operating as part of the global Carlsberg Group. It produces and distributes beer and beverages in Ukraine with a strong market position and a portfolio of well-known brands. The website provides comprehensive corporate information, news, and sustainability goals, targeting consumers and stakeholders in Ukraine. Technically, the site uses a mix of modern and legacy JavaScript libraries, is mobile optimized, and employs HTTPS with some security best practices, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business credibility and digital presence.

Carlsberg Srbija d.o.o. is a large manufacturing company operating as part of the global Carlsberg Group, specializing in beer production and distribution within Serbia. The website reflects a mature digital presence with good content quality, clear navigation, and localized Serbian language content. The technical infrastructure employs a mix of modern JavaScript libraries and CSS frameworks, with Umbraco CMS inferred as the platform. The site is mobile optimized and includes compliance mechanisms for privacy and cookie policies, indicating a good level of digital maturity. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.