Security Directory

Კ

კვირის პალიტრა

kvirispalitra.ge

63

კვირის პალიტრა is a well-established Georgian news media website founded in 2014, offering a wide range of news articles, blogs, and video content across multiple categories such as politics, society, economy, and culture. The site targets Georgian-speaking audiences interested in current affairs and cultural topics. It operates primarily on an advertising-supported model with subscription options for premium content. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates multiple advertising and analytics services, and uses HTTPS for secure communication. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security-wise, the site uses HTTPS and CSRF tokens but does not implement comprehensive security headers or publish a security policy. Overall, the website is functional, professionally designed, and content-rich but would benefit from improved privacy and security transparency.

ss.ge is a leading Georgian online real estate classifieds platform offering a wide range of property listings including apartments, houses, commercial spaces, and land for sale or rent. It serves as a comprehensive marketplace connecting buyers, sellers, and renters across Georgia, with a strong focus on the local market. The platform provides additional services such as verified listings, promotional services, agent directories, and mortgage calculators, positioning itself as the largest real estate portal in the country. Technically, the website is built using modern web technologies including React and Next.js, supported by various third-party analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook SDK, and Intercom. The site demonstrates good mobile optimization and SEO practices, ensuring accessibility and usability for a broad audience. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a good baseline security posture. However, there is no explicit publication of security policies or incident response procedures, and no cookie consent mechanism is present, which impacts GDPR compliance. The WHOIS data is incomplete and lacks registrant details, which slightly reduces trustworthiness but does not negate the platform's legitimacy given its market presence and content quality. Overall, ss.ge presents a professional and functional real estate marketplace with solid technical infrastructure but could enhance its privacy compliance and transparency regarding security policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

A

მთავარი გვერდი | Ambebi.GE

ambebi.ge

57

Ambebi.ge is a Georgian-language online news portal offering a wide range of content including politics, economy, entertainment, medicine, crime, and sports. The site targets Georgian-speaking audiences interested in current affairs and lifestyle content. It maintains partnerships with several notable Georgian news outlets, enhancing its market presence. Technically, the website leverages modern JavaScript frameworks such as Vue.js and integrates multiple analytics and advertising services including Google Tag Manager, Facebook Pixel, Hotjar, and Microsoft Clarity. The site is mobile-optimized and employs HTTPS with good security headers, indicating a solid technical foundation. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, represents gaps in privacy compliance and user trust. The WHOIS data is minimal and privacy-protected, which is common but reduces transparency. Overall, the website demonstrates a moderate to good security posture and business credibility but should improve privacy compliance and incident response transparency.

A

Adult Reviews - Your guide to top porn reviews

adultreviews.com

55

Adult Reviews is a small media website focused on providing reviews of adult pornographic content, including screenshots and members area samples. The site targets adult content consumers seeking guidance to better pornographic content. The business model appears to be content review and affiliate marketing, though no explicit business or contact information is provided. The website uses common analytics and marketing technologies such as Google Analytics, Google Tag Manager, and Facebook SDK, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data and lack of privacy, cookie, or terms of service policies indicate poor compliance and transparency. Security posture is weak with no detected security headers and unknown SSL configuration. Overall, the site presents moderate content quality but lacks critical trust and compliance elements, posing risks to users and business credibility.

A

AutoŽivě.cz - Nejživější magazín o autech

autozive.cz

57

AutoŽivě.cz is a Czech-language online automotive magazine providing news, reviews, technical advice, and automotive-related content targeting car enthusiasts in the Czech Republic. The website operates on a WordPress CMS platform and integrates multiple third-party analytics and advertising services, including Google Analytics, Chartbeat, Gemius, Microsoft Clarity, and CPEX advertising networks. The site demonstrates a professional design with consistent branding and good content quality, catering to a medium-sized audience interested in automotive topics. Technically, the site is well-structured with modern web technologies and mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but explicit security headers are not detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found. The absence of WHOIS data limits domain trust assessment, but the website content and infrastructure suggest legitimacy.

Ე

ეროვნული ლიგა (National League)

eliga.ge

55

The website erovnuliliga.ge serves as the official or semi-official digital platform for the Georgian National Football League, providing comprehensive football-related content including news, match results, statistics, and multimedia. It targets football fans and the Georgian sports community, positioning itself as a key media outlet for national football. Technically, the site is built on Drupal CMS, integrates modern analytics and social media tools, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The domain registration is consistent with the business focus and shows legitimacy. Strategic recommendations include adding privacy and cookie policies, security headers, and incident response contacts to enhance compliance and security maturity.

V

Videcom Security Ltd.

videcomsecurity.co.uk

50

Videcom Security Ltd is a UK-based electronic security systems integrator and manufacturer specializing in IP Surveillance CCTV, Wireless Transmission, Integrated Access Control, and related integrated systems. Established in 2000, the company serves municipal authorities, industrial clients, housing associations, and educational institutions, positioning itself as a trusted provider with multiple industry certifications. Their key services include IP CCTV, ANPR systems, wireless networks, video content analytics, and 4G re-deployable CCTV solutions, supported by comprehensive maintenance and support offerings. The company maintains a professional online presence with clear contact information and active social media engagement. Technically, the website employs a modern JavaScript stack including jQuery, FlexSlider, Tooltipster, and LightSlider, alongside Google Analytics and Facebook SDK for analytics and marketing. The site is moderately optimized for performance and mobile use, with good SEO practices and structured data enhancing search visibility. Hosting and domain registration are consistent with the business profile, and no content blocking or WAF interference was detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting GDPR compliance awareness. However, explicit security headers and incident response policies are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were found. The presence of multiple certifications and accreditations further supports the company's trustworthiness. Overall, Videcom Security Ltd demonstrates a solid business and technical foundation with good security hygiene. Strategic enhancements in security policy transparency, mobile optimization, and accessibility could further strengthen their digital maturity and compliance posture.

W

ტურნირის ცხრილი | ქალთა ლიგა

womensleague.ge

55

Womensleague.ge is an official or semi-official website dedicated to the Women's Football League in Georgia, providing comprehensive information on match schedules, results, league tables, and club details. The site is affiliated with the Georgian Football Federation and serves football fans and stakeholders interested in women's football in the region. The website is built on Drupal CMS and leverages modern web technologies including JavaScript, jQuery, Socket.io for live updates, and integrates analytics tools such as Google Analytics and Facebook SDK for user tracking and engagement. Technically, the website demonstrates moderate performance with basic mobile optimization and accessibility features. Hosting and DNS services are provided via Cloudflare, ensuring reliable uptime and security at the network level. However, the site lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance with GDPR and other data protection regulations. No contact information or incident response channels are provided, limiting transparency and user trust. From a security perspective, the site uses HTTPS and Cloudflare DNS, which are positive indicators. The absence of security headers and privacy compliance mechanisms represents areas for improvement. No forms or user data collection points were detected on the analyzed page, reducing immediate risk exposure. The domain registration is consistent with the website's purpose, with a registration date in 2022 and a long expiry, indicating legitimacy. Overall, the website is functional and professional in its presentation but requires enhancements in privacy compliance, security best practices, and user contact transparency to improve trust and regulatory adherence.

Ე

ეროვნული ლიგა

erovnuliliga.ge

55

The website 'ეროვნული ლიგა' serves as the official digital platform for the Georgian National Football League, delivering comprehensive football-related content including news, match results, statistics, and multimedia. It targets football fans and the Georgian sports community, positioning itself as an authoritative source backed by the Georgian Football Federation. Technically, the site is built on Drupal CMS, employs modern web technologies, and is hosted with Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, indicating room for improvement in security posture and privacy compliance. The absence of privacy and cookie policies, as well as contact information, reduces compliance with GDPR and user trust. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy measures.

F

JAUNĀKAIS FITNESA PASAULĒ

fitnesablogs.lv

45

Fitnesablogs.lv is a Latvian-language fitness blog focused on delivering the latest news, advice, and industry insights related to fitness, training, and wellness. The website targets fitness enthusiasts, gym owners, and professionals primarily in Latvia. The site is built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of technical maturity. Social media integration is present with links to Facebook, Instagram, YouTube, and LinkedIn, supporting community engagement. Security posture is basic with HTTPS enabled but lacking advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the site is a functional and content-rich fitness blog with room for improvement in security and privacy compliance.

L

LEDAKCJA.pl

ledakcja.pl

59

LEDAKCJA.pl operates as a specialized e-commerce platform offering a wide range of LED lighting products including bulbs, panels, strips, and smart home lighting solutions. The company targets Polish consumers and businesses looking for quality lighting products, including Samsung branded items, positioning itself as a niche retailer in the LED lighting market. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages the Shoptet e-commerce platform, integrates Google Analytics and Facebook SDK for marketing and tracking, and uses Amazon Cloudfront CDN for content delivery. Security-wise, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms, reflecting a solid security posture. However, the absence of WHOIS data from the Polish registry limits domain trust assessment. No critical vulnerabilities or exposed sensitive data were detected, but the site lacks published security policies and incident response contacts. Overall, LEDAKCJA.pl presents a trustworthy and functional online retail presence with room for improvement in transparency and security documentation.

L

LEDAKCIJA.hr

ledakcija.hr

59

LEDAKCIJA.hr is an e-commerce retailer specializing in LED lighting products, serving primarily the Croatian market. The website offers a broad range of LED products including bulbs, panels, strips, reflectors, and accessories, positioning itself as a niche player with a focus on quality brands such as Samsung. The business is relatively new, established in 2021, and operates on the Shoptet e-commerce platform. The site is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses a mix of legacy and modern technologies, including jQuery 1.11.3 and multiple analytics and marketing scripts from Google, TikTok, and Facebook. Security posture is generally good with HTTPS and security headers, but the use of outdated libraries and lack of explicit security policies present areas for improvement. Privacy compliance is basic with cookie consent implemented but limited GDPR indicators. Overall, the site is trustworthy but could benefit from enhanced transparency and security maturity.

L

LEDAKCE.cz

ledakce.cz

59

LEDAKCE.cz operates as a specialized e-commerce retailer focused on LED lighting products, serving primarily the Czech market. The website offers a broad catalog including LED bulbs, panels, strips, reflectors, and smart home lighting accessories. It targets both individual consumers and businesses seeking energy-efficient lighting solutions. The business model is straightforward retail with an emphasis on promotions and customer engagement through reviews and ratings. Technically, the website is built on the Shoptet e-commerce platform, leveraging common web technologies such as jQuery, Google Analytics, Microsoft Clarity, and Facebook SDK for tracking and marketing. The site is well-optimized for mobile devices and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a good baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, which could be enhanced. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy despite the professional website presentation. Overall, LEDAKCE.cz presents a trustworthy and professional online retail presence with solid technical and privacy compliance foundations. The main risk lies in the lack of transparent domain registration data, which should be addressed to improve trustworthiness. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing clear security and incident response policies.

L

LEDAKCIA

ledakcia.sk

58

LEDAKCIA is a Slovakian e-commerce retailer specializing in LED lighting products for both household and professional use, supported by a physical store located in Bratislava. The website offers a comprehensive catalog of LED bulbs, panels, tubes, reflectors, strips, and related accessories, targeting consumers and professionals within the regional market. The business model combines online sales with offline retail, positioning itself as a specialized LED lighting provider in Slovakia. The site demonstrates consistent branding and good content quality, with customer reviews and trust signals enhancing credibility. Technically, the website is built on the Shoptet e-commerce platform, utilizing a range of modern technologies including jQuery, Google Analytics, TikTok Pixel, Facebook SDK, and various marketing and remarketing tools. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Hosting appears to leverage CDN services such as Cloudfront and Shoptet's infrastructure. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with CSRF tokens, and cookie consent mechanisms are implemented to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact information, which could be improved to enhance security posture. Overall, LEDAKCIA presents a trustworthy and professional online presence with a solid technical foundation and compliance with basic privacy regulations. Strategic improvements in security transparency and accessibility could further strengthen its position and reduce risk.

W

Willerby Mortgage Services Ltd

willerbymortgages.com

67

Willerby Mortgage Services Ltd is a UK-based small mortgage brokerage firm serving Hull, East Yorkshire, and Lincolnshire. The company offers a range of mortgage and insurance services including first-time buyer mortgages, remortgages, buy to let, equity release, and protection insurance products. The business operates as an appointed representative of Personal Touch Financial Services Ltd, which is FCA regulated, enhancing its credibility. The website is professionally designed with clear navigation and good content relevance, targeting local home buyers and property investors. Technically, the site uses a modern CMS platform with CDN hosting, employs jQuery and Facebook SDK, and integrates Snowplow analytics for user tracking. Security posture is adequate with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a downloadable privacy and terms document but no cookie consent mechanism. Overall, the site is trustworthy and functional but could improve in privacy and security transparency.

Finska Missionssällskapet is a Finnish non-profit mission society focused on humanitarian aid, mission work, development cooperation, and peace efforts in over 20 countries. The organization positions itself as a major actor in Finland's development cooperation sector and serves congregations and donors interested in global mission and aid. The website is professionally designed using WordPress with modern SEO and accessibility features, supporting multiple languages and active social media engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms policies are missing. The WHOIS data confirms legitimacy with consistent registrant information matching the organization's identity. Overall, the site is trustworthy and functional but could improve privacy compliance and incident response transparency.

D

Drive eO

driveeo.com

49

Drive eO is a specialized engineering and consulting company focused on the design and manufacture of prototype electric and hybrid vehicles, particularly in the high-performance and racing sectors. Their services include integration of electric drive systems, motor controllers, custom battery packs, and supervisory controllers. The company targets electric vehicle enthusiasts, racing teams, and prototype developers, positioning itself as a niche provider in sustainable transportation technology. The website reflects a small but professional operation with consistent branding and good content quality. Technically, the website is built on WordPress with modern SEO tools like Yoast and integrates social media platforms such as Twitter and Facebook. Hosting and DNS services are provided via Cloudflare, ensuring good performance and HTTPS security. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. Analytics usage is moderate with Google Analytics tracking but lacks clear privacy and cookie policies. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit privacy, cookie, and security policies, as well as incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is functional, professional, and secure at a basic level but would benefit from enhanced privacy compliance, security headers, and transparency around data protection and incident response to improve trust and compliance posture.

Mediaplans Ltd. operates as a full service digital marketing agency based in Latvia, focusing on connecting people and products through strategy and technology. Their website positions them as a provider of digital services tailored to startups and large companies, emphasizing innovative ideas, quality production, and customer success. The company was founded in 2015 and maintains a professional online presence with clear contact information and active social media profiles. Technically, the website is built on WordPress with modern JavaScript libraries and SEO tools, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, suggesting a need for better domain registration transparency. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security disclosures.

D

Durham University

dur.ac.uk

65

Durham University operates as a prestigious higher education institution in the United Kingdom, offering a wide range of undergraduate, postgraduate, and research programs. The website reflects a mature digital presence with comprehensive content targeting prospective students, current students, researchers, and alumni. The institution emphasizes global partnerships, student support, and research impact, positioning itself as a leading academic entity. The domain's long registration history and direct registration with Nominet reinforce its legitimacy and trustworthiness. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and tracking tools, and is optimized for mobile and accessibility standards. However, explicit privacy, cookie, and security policies are not evident in the provided content, which may impact compliance and user trust. Security posture is strong with HTTPS and best practices observed, but could be improved with clearer policy disclosures and security headers. Overall, the website is professional, content-rich, and credible, with room for enhanced privacy transparency and incident response readiness.

N

Neomājas

neomajas.lv

47

Neomājas is a Latvian company specializing in the sale and installation of wooden garden houses, saunas, garages, playgrounds, and related wooden constructions. The company targets customers in Latvia and surrounding regions seeking quality wooden leisure and garden products. Their business model combines e-commerce with direct sales and installation services, positioning them as a medium-sized regional supplier with a diverse product catalog. Technically, the website is built on the Magento platform, utilizing common JavaScript libraries such as jQuery and Prototype.js, and integrates marketing and analytics tools like Google Analytics, Google Tag Manager, and Facebook SDK. The site employs HTTPS and a cookie consent mechanism, indicating basic privacy compliance. However, explicit security policies and incident response information are not found, and WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website demonstrates good content quality, technical implementation, and business credibility, with room for improvement in security headers and privacy transparency.

A

Austell.com

austell.com

38

Austell.com is a local online city guide focused on Austell, Georgia, providing residents and visitors with information about attractions, restaurants, hotels, real estate, and community news. The website operates as a media platform with a content and advertising-based business model, targeting local audiences interested in exploring and living in Austell. The site maintains a consistent brand presence and offers regularly updated local news and advertisements from regional businesses. Technically, the website is built on WordPress CMS using the Newsmag theme and WPBakery Page Builder, integrating common technologies such as jQuery, Google Analytics, and Facebook SDK. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site has HTTPS enabled and does not expose sensitive data in the HTML. However, it lacks important security headers and does not provide a security policy or vulnerability disclosure mechanism. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose compliance risks under GDPR or similar regulations. Overall, Austell.com presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

SIA "KRISTĪNE 1"

medveikals.lv

47

Medveikals.lv operates as a specialized Latvian e-commerce platform offering a wide range of medical supplies focused on physiotherapy, rehabilitation, and healthcare products. The company behind the site is SIA "KRISTĪNE 1", with clear contact details and a physical presence in Riga and Valdlauči. The website targets healthcare professionals, patients, and medical institutions within Latvia, providing both retail and professional medical products. The business model centers on online sales complemented by a physical store presence, positioning itself as a niche player in the Latvian healthcare retail market. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook SDK for marketing and analytics. The site is mobile-optimized with a structured navigation system and good SEO practices. Performance is moderate, with room for improvement in accessibility and modernizing some libraries. From a security perspective, the site enforces HTTPS and uses secure form tokens, but lacks advanced security headers and explicit incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is addressed with GDPR-aligned privacy and cookie policies, including a consent banner. Overall, the website presents a professional and trustworthy front for a small healthcare retail business. The lack of WHOIS data limits domain legitimacy verification, but the consistent business information and secure infrastructure reduce risk. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would strengthen the security posture and trustworthiness.

T

Trend News Agency

trend.az

70

Trend.az is a leading regional news agency focused on Azerbaijan and neighboring countries, providing news content in Russian with alternate language versions. The website offers news articles, video content via Trend TV, and a subscription-based news terminal service. The business model relies on advertising and subscription revenues, targeting Russian-speaking audiences interested in regional politics, economy, and society. Technically, the site employs modern analytics and advertising technologies including Google Analytics 4, Yandex Metrika, Google Publisher Tags, and Facebook SDK, with a cookie consent mechanism powered by CookieYes. Security posture is strong with HTTPS enforced, security headers present, and bot protection via Google reCAPTCHA. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact or incident response information is available. Overall, the site is professional, well-branded, and trustworthy, but could improve compliance transparency and accessibility.

Technics is a premium audio brand operating under Panasonic, targeting Finnish consumers with high-fidelity audio products such as headphones, turntables, and amplifiers. The website is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Manager CMS, jQuery, and Google Tag Manager. It implements a cookie consent mechanism via OneTrust, indicating awareness of privacy compliance requirements. However, the absence of visible privacy policy and terms of service pages, as well as missing WHOIS registration data for the domain, raise concerns about transparency and domain legitimacy. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and vulnerability disclosure information. Overall, the site presents a trustworthy and professional front but would benefit from enhanced compliance and security disclosures.

F

FICSA

ficsa.org

49

FICSA is a well-established federation representing international civil servants, advocating for their rights and working conditions within interagency bodies and legislative organs of the common system. The organization operates primarily as a non-profit entity based in Switzerland, with a global membership and over 70 years of history. Their key services include advocacy, training, webinars, publications, and organizing meetings and councils. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at international civil servants and related stakeholders. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Slick Carousel, and Select2. It uses Google Fonts and integrates social media SDKs for Facebook and Twitter, alongside AddThis for sharing. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and there is no visible security policy or incident response information. The site includes a cookie consent mechanism and privacy policy, indicating basic GDPR compliance. No critical vulnerabilities or suspicious domains were found. WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website presents a trustworthy and credible digital presence with good content quality and technical implementation. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and enhancing accessibility features to improve compliance and user experience.

M

MadSword Studios

madsword.com

57

MadSword Studios is a small technology company based in Latvia specializing in the development of mobile and VR games across platforms including iOS, Android, and Windows Phone. Their portfolio includes a variety of casual, puzzle, and VR games targeting mobile users and social network gamers. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses common JavaScript libraries and Google services, hosted behind Cloudflare DNS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain registration protections in place, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Business credibility is supported by clear contact information and social media presence. Overall, the website is functional and trustworthy but could improve in privacy compliance and security best practices.

Latvijas Universitātes Studentu padome (LU SP) serves as the official student council of the University of Latvia, providing representation and support to the student body. The organization offers a variety of services including mentorship programs, social initiatives, project competitions, and cultural events, targeting university students primarily. The website is bilingual (Latvian and English) and well-structured to serve its academic community. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Google Fonts, jQuery, and Bootstrap, ensuring a responsive and accessible user experience. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and explicit security policies or incident response contacts, which are recommended for enhanced security posture. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website's affiliation with the University of Latvia and consistent branding provide strong trust signals. Overall, the site demonstrates good digital maturity and compliance, with room for improvement in security transparency and domain registration visibility.

B

Burzum

burzum.lv

59

Burzum is a Latvian digital agency specializing in web development, application development, and digital advertising services. The company targets clients seeking creative and human-centered digital solutions primarily in Latvia. The website presents a professional portfolio showcasing various projects, indicating a small but focused business model. The site is bilingual with Latvian as the primary language and an English option, supporting a regional audience. Technically, the website uses standard web technologies including jQuery, Facebook SDK, and Google DoubleClick for analytics and advertising. The site is served over HTTPS with no visible security issues in the HTML content, indicating a good baseline security posture. However, the absence of privacy and cookie policies, as well as missing security headers, suggests room for improvement in compliance and security best practices. Contact information is clearly provided, enhancing business credibility. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification.

L

Latvijas Privātā un Iespējkapitāla asociācija

lvca.lv

38

Latvijas Privātā un Iespējkapitāla asociācija (LVCA) is a Latvian private equity and venture capital association representing 40 organizations in the finance sector. Founded in 2003, it serves as a key industry body promoting private equity financing, facilitating member collaboration, and advocating with government institutions. The website presents a professional image with clear business information, leadership team details, and event news. Technically, the site uses modern web standards, including HTTPS, external trusted scripts, and responsive design, though it lacks advanced CMS or frameworks. Security posture is generally good with HTTPS enforced, but absence of security headers and cookie consent mechanisms indicate room for improvement. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is credible and functional, serving its target audience effectively.

V.L.S Systems, Inc. is an established IT products and services company founded in 1995, providing software products, contingent IT staffing, custom software development, and IT solutions primarily to government agencies, Fortune 500 companies, and emerging businesses across diverse sectors such as financial services, healthcare, manufacturing, and telecommunications. The company holds a SEI CMMi Level 3 certification, indicating a mature software development process. The website reflects a basic digital presence with legacy design elements and limited modern features. Technical infrastructure includes use of jQuery, Google Analytics, and Facebook SDK, but lacks modern security practices such as HTTPS enforcement and security headers. The security posture is weak, with no visible privacy or cookie policies and no incident response contacts, which poses compliance and trust risks. Overall, the website is functional but requires significant improvements in security, privacy compliance, and user engagement to enhance trust and professionalism.

L

Libertu

sula.lv

50

The website sula.lv is a small business platform operated by the Libertu family, specializing in organic birch sap products including beverages, tapping kits, and related accessories. The business has an international presence with exports to countries such as Germany, Taiwan, and China, and participates in various trade shows and expos. The website is hosted on the Posthaven platform with media assets served from Amazon S3, featuring bilingual content in Latvian and English. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a legitimate small business with good content quality and moderate technical maturity but needs improvements in privacy compliance and security best practices.

A

Adgett - Marketing communication agency

adgett.com

49

Adgett is a Latvia-based marketing communication and design agency established in 2013, offering a range of services including advertising campaigns, brand activation, in-store activities, digital communication, and POS material production. The company targets businesses seeking comprehensive marketing solutions and positions itself as a provider delivering more value and perfection in design and campaign execution. The website reflects a professional and consistent brand image with active social media integration and clear contact information. Technically, the website is built on WordPress using popular frameworks and plugins such as WPBakery, Elementor, and Yoast SEO, indicating a modern and maintainable infrastructure. Hosting appears to be Latvia-based, consistent with the business location. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security headers were detected, suggesting room for improvement. The cookie consent mechanism is implemented, supporting GDPR compliance, but no privacy policy or terms of service pages were found, which is a compliance gap. No incident response or security policy information is present. Overall, the website is trustworthy and professional with a solid business presence. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and terms policies, and formalizing incident response information to improve compliance and security posture.

N

Nippon Auto UAB

nipponauto.lt

38

Nippon Auto UAB operates as the official Honda dealership in Lithuania, offering a wide range of Honda automobiles, motorcycles, spare parts, and servicing solutions. The company targets Lithuanian consumers interested in Honda vehicles, providing both new and used vehicle sales alongside after-sales services such as repairs and maintenance. The website reflects a medium-sized business with a consistent brand presence and a clear market position as Honda's official representative in the region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK. The site is mobile-optimized and provides good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some advanced security headers and incident response disclosures. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is professional and trustworthy, with room for improvement in security and privacy transparency.

C

CAVIO CASA

cavio.it

56

CAVIO CASA is a small-sized Italian furniture producer specializing in contemporary Italian furniture and interior design products. The company offers a range of products including beds, sofas, tables, chairs, lighting, carpets, and mirrors, targeting consumers and businesses interested in high-quality Italian design. The website is professionally designed with clear navigation, multiple language support, and an online catalogue facilitating e-commerce and showroom sales. Technically, the site uses modern JavaScript libraries and tracking tools, hosted by A2 Hosting, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and some security headers. Privacy and cookie policies are present and GDPR compliant, though incident response and security policies are not explicitly published. Overall, the website is trustworthy and credible with room for security enhancements.

S

Solspace

solspace.com

65

Solspace is a specialized web development company with over 20 years of experience, focusing on Craft CMS, ExpressionEngine, and custom web solutions. They serve primarily small to medium-sized businesses seeking reliable, scalable, and revenue-driving websites. The company positions itself as a strategic partner offering proactive support and innovative web technologies. Technically, the website is well-built with modern tracking and analytics tools, optimized for performance and mobile use. Security posture is strong with HTTPS and domain protections, though improvements can be made in DNSSEC and visible privacy compliance mechanisms. Overall, the site reflects a mature, professional business with a strong market presence and trustworthy domain registration.

P

Privātskola Patnis

patnis.lv

48

Privātskola Patnis is a Latvian private educational institution offering a STEAM-based curriculum from preschool through 12th grade, including an arts school. The institution emphasizes creativity, interdisciplinary learning, and personalized education, positioning itself as an innovative leader in Latvia's education sector. The website is well-structured, content-rich, and targets parents seeking modern educational options for their children. Technically, the site is built on Drupal 10 with Bootstrap 5, integrates Google Analytics and Facebook SDK for tracking, and is mobile optimized with good accessibility and SEO practices. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal security policies. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the site is professional and trustworthy with room for security and compliance improvements.

I

Intercell Virtual Mentoring Platform

intercellworld.com

64

Intercell Virtual Mentoring Platform operates an online career mentorship service offering 1-1 exclusive mentoring from mentors associated with over 5000 brands and covering more than 250 career specializations. The platform targets individuals seeking career guidance and mentorship, positioning itself as a global player in the education sector. The website presents a professional design with good user experience and mobile optimization, leveraging modern web technologies including Bootstrap, Flatpickr, and integration with Google Analytics and Facebook Pixel for tracking and marketing purposes. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no explicit GDPR compliance indicators. Overall, the website is functional and professional but requires improvements in transparency, privacy, and security documentation to enhance trustworthiness and compliance.

S

SIA “FRESH MEDIA"

armadillo.lv

52

Armadillo.lv is a Latvian marketing and media agency operating under the legal entity SIA “FRESH MEDIA". The company offers a range of creative services including marketing materials design, web development, social media communication, and campaign management, targeting local Latvian clients. The website is professionally designed with a clear portfolio showcasing their work, indicating a small but established presence in the Latvian media sector. Technically, the site uses a PyroCMS backend with a variety of JavaScript libraries including jQuery, Bootstrap, and Owl Carousel, though some libraries like jQuery are outdated, posing potential security risks. The site is accessible over HTTPS and integrates common marketing and analytics tools such as Facebook Pixel and Google Analytics, but lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers and no forms on the homepage, reducing attack surface but also limiting user interaction. Overall, the site is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and reduce risk.

R

Runas Kursi

runaskursi.lv

53

Runas Kursi is a Latvian-based education provider specializing in public speaking and presentation skills training. The company offers group courses, VIP training, individual consultations, and event moderation services. The website demonstrates a professional presence with client testimonials and logos from reputable companies, indicating a solid market position within the education sector. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook SDK, and marketing tools like Mailchimp and AddThis. The site is HTTPS secured with reCAPTCHA protecting forms, but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. Overall, the security posture is moderate with no visible vulnerabilities, but privacy compliance is weak due to missing policies. The domain WHOIS data is unavailable due to query limits, but the website content suggests legitimacy and consistent operation since 2015. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

M

MTX Connect

mtxc.eu

50

MTX Connect is a telecommunications provider specializing in global mobile internet connectivity for travelers through 4G/5G eSIM and SIM card offerings. The company positions itself as a private mobile operator with flat rate pricing worldwide and additional features such as free chat. The website is professionally designed with clear navigation and multiple data package options tailored for different regions and durations. The presence of Trustpilot customer reviews enhances trustworthiness. Technically, the site uses modern frameworks like UIkit and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Mixpanel, and Yandex Metrika, indicating a mature digital marketing approach. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is partial with cookie consent implemented but no visible privacy policy in the provided content. WHOIS data is privacy protected, which is common for telecom businesses, but limits full trust assessment. Overall, the site is functional and credible but could improve transparency and security documentation.

AS Neo is a Latvian company specializing in providing a wide range of high-quality food additives and raw materials to food manufacturers. Established in 1998, the company has positioned itself as a strong and dynamic player in the manufacturing and retail sectors, offering products such as flavorings, enzymes, stabilizers, antibiotic and allergen testing kits, and logistics services. The website reflects a professional business model focused on B2B sales, supported by a knowledgeable team and multiple subsidiary e-commerce platforms. Technically, the site is built on Joomla CMS with modern frameworks like UIkit and Bootstrap, and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. The security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is well-structured, GDPR compliant, and demonstrates trustworthiness through certifications and comprehensive contact information.

D

Durham University

durham.ac.uk

66

Durham University is a well-established higher education institution in the United Kingdom, offering a broad range of undergraduate, postgraduate, and international study programs. The website reflects a strong market position with a focus on research impact, student support, and global partnerships. The domain's long registration history and direct registration with Nominet reinforce its legitimacy. Technically, the site employs modern web technologies including Alpine.js, Google Tag Manager, and various analytics and tracking tools, managed via the Terminalfour CMS platform. The website is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure form practices but lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance in privacy and security disclosures.

S

SIA „Patrika“

barbora.lv

71

Barbora.lv is a professional online grocery and daily goods retailer operating primarily in Latvia. The website offers a comprehensive e-commerce platform with home delivery and pickup options, supported by a robust technical infrastructure including modern JavaScript frameworks, multiple payment gateways (Adyen, NeoPay, Kevin), and social login capabilities. The company behind the site is SIA „Patrika“, a large entity in the retail sector. The site demonstrates good digital maturity with mobile optimization, clear navigation, and extensive use of analytics and marketing tools. Security posture is solid with HTTPS enforcement, cookie consent via Cookiebot, and integration of secure payment providers, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, the site is trustworthy and professionally managed, serving a large customer base in Latvia.

T

tinyBuild

tinybuild.com

65

tinyBuild is a recognized game label specializing in publishing and developing popular indie video games such as Hello Neighbor and Potion Craft. The company targets gamers and indie game enthusiasts, positioning itself as a key player in the indie gaming market. The website is professionally designed using the Wix platform, featuring good content quality and clear navigation. Technical infrastructure leverages Wix's Thunderbolt framework along with common analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforcement and standard security headers, though the absence of a public security policy and incident response details suggests room for improvement. Privacy compliance is addressed with comprehensive privacy and cookie policies including consent mechanisms. Overall, the site is trustworthy and professional, but the lack of WHOIS data and direct contact information slightly reduces business credibility. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure, and improving contact accessibility.

C

CINAMON | Kino piletid, Kino bilietai, Kinoteātra biļetes, Билеты в кино, Cinema tickets

cinamon.ee

60

CINAMON is an online cinema ticketing platform serving a multilingual audience primarily in the Baltic region. The website offers cinema ticket sales with a focus on regional languages and markets. The technical infrastructure is modern, leveraging Vue.js and popular video playback and analytics libraries, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but requires improvements in privacy and security transparency to enhance trust and compliance.

N

New Basket Brindisi

newbasketbrindisi.it

47

New Basket Brindisi is the official website of the primary basketball club in Brindisi and the Puglia region of Italy. The club, sponsored by Valtur, has a strong local presence and provides comprehensive information about its team roster, staff, news, ticketing, and merchandise. The website targets basketball fans and local sports enthusiasts, offering a professional and well-branded digital presence. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and SportsPress Pro, and integrates analytics and social media SDKs for user engagement and tracking. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and shows deprecated PHP warnings in plugins, indicating areas for improvement. Privacy compliance is weak, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy practices.

A

Aftermarket.pl Limited

pdk.pl

67

Aftermarket.pl Limited operates the largest domain marketplace in Poland, providing a platform for buying, selling, and auctioning internet domain names. The company also offers complementary services such as hosting, mail, SSL certificates, and website creation tools, targeting domain investors, businesses, and internet entrepreneurs. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site employs modern JavaScript technologies, integrates with major social and analytics platforms, and uses HTTPS with secure form handling, although security headers could be enhanced. Privacy and cookie consent mechanisms are robust and GDPR compliant, supporting user data protection. The domain offered for sale (pdk.pl) lacks public WHOIS data, which is typical for domains listed on marketplaces and does not indicate suspicious activity. Overall, the platform demonstrates a strong market position in the Polish domain industry with good security and privacy practices.

L

Latvijas Radio

latvijasradio.lv

58

Latvijas Radio is a well-established public service media broadcaster in Latvia, operating since 1925. It offers multiple radio channels and a broad range of cultural, news, and entertainment content targeting Latvian-speaking audiences. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure includes modern web technologies and analytics tools, ensuring a good user experience. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with cookie consent and comprehensive privacy policies. Overall, the site demonstrates high trustworthiness and professionalism consistent with a national public broadcaster.

D

Dingo&Schwarz

dingoschwarz.com

57

Dingo&Schwarz is a creatively effective full-service advertising agency based in Riga, Latvia, operating under the parent company mixd.group. The company specializes in blending sharp strategies with creative excellence to deliver impactful advertising campaigns across traditional and digital channels. Their portfolio includes diverse projects for notable clients, showcasing their expertise in creative direction, strategy, and production. The website reflects a professional and modern digital presence with rich multimedia content and clear navigation. Technically, the site uses modern JavaScript libraries, integrates social media and analytics tools, and is optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and business information. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response. Overall, the website and business demonstrate a mature digital footprint with room for security and compliance improvements.

S

S-Print Baltic

s-print.lv

27

S-Print Baltic is a small Latvian company specializing in printing and advertising services, including commercial spaces, exhibitions, industrial screen-printing, and polygraphy. The website indicates a service-oriented business model targeting organizations needing various printing solutions. The digital infrastructure is based on WordPress with the Enfold theme, utilizing common web technologies such as jQuery, Google Fonts, and Facebook SDK. However, the site lacks HTTPS, which is a critical security shortfall. Security measures include Google reCAPTCHA v3 for form protection, but no advanced security headers or policies are evident. The absence of privacy and cookie policies, contact information, and WHOIS transparency reduces trust and compliance posture. Overall, the website is functional but basic, with moderate technical implementation and poor privacy compliance.