Security Directory

I

International Federation of Journalists

ifj.org

63

The International Federation of Journalists (IFJ) is a well-established global non-profit organization founded in 1926, representing over 600,000 media professionals worldwide. It serves as the global voice for journalists, advocating for press freedom, journalists' rights, and safety. The organization operates through various regional offices and campaigns, providing insurance schemes, safety funds, and resources to journalists, especially in conflict zones and challenging environments. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting journalists, media unions, and advocacy groups globally. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Security posture is strong with HTTPS enforced and secure form validation, though some security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is not publicly available due to privacy protection, which is common and justified for non-profit international organizations. No suspicious or malicious indicators were found. The website maintains a high level of trustworthiness and professionalism, supported by extensive social media presence and transparent contact information. Overall, IFJ's website demonstrates a robust digital infrastructure supporting its mission, with good security and privacy practices. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

Institut pour une culture de sécurité industrielle (Icsi) is a French non-profit association dedicated to improving industrial safety culture within companies and promoting open, civic debate on safety issues. The website presents a professional and comprehensive platform offering educational resources, discussion groups, events, and publications focused on safety culture, leadership, and accident prevention. The organization targets enterprises and professionals in the energy and industrial sectors, as well as the general public interested in safety culture. Technically, the site is built on Drupal 10 with modern analytics and tracking tools such as Google Tag Manager, Hotjar, and Matomo, complemented by a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is unavailable, limiting domain trust verification, but the website content and structure strongly indicate a legitimate and established entity. Contact information is clearly provided, including phone, physical address, and contact forms, enhancing business credibility.

RADIO SKONTO LV operates a portfolio of radio stations and digital media platforms under the Skonto Mediju Grupa umbrella, targeting Russian-speaking audiences primarily in Latvia. The company focuses on radio broadcasting, digital streaming, interviews, contests, and mobile app distribution. The website reflects a modern digital presence with multimedia content and EU-backed digital transformation initiatives. Technically, the site employs contemporary frontend technologies and integrates multiple third-party analytics and marketing tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly evident. Overall, the site is professionally designed and functional, supporting the company's media business model and audience engagement strategies.

SKONTO MEDIJU GRUPA operates as a leading Latvian commercial radio group, managing multiple radio stations including RADIO SKONTO, RADIO TEV, LOUNGE FM, SKONTO PLUS, and RADIO 9. The group focuses on delivering diverse music content, news, and entertainment to a broad Latvian audience, leveraging both traditional radio and digital streaming platforms. Their market position is strong within Latvia's media sector, supported by a professional website with integrated streaming, podcasts, and interactive contests. Technically, the website employs modern web technologies and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the business demonstrates credible digital maturity and a trustworthy online presence.

L

Loadero, Inc.

loadero.com

66

Loadero, Inc. operates a cloud-based platform specializing in end-to-end load and performance testing for web applications, including WebRTC applications. The company offers a comprehensive suite of services such as load testing, performance monitoring, test creation, and validation, targeting businesses and developers seeking to ensure scalability and reliability of their web applications. Positioned as a versatile and feature-rich solution, Loadero emphasizes real-world simulation and detailed metrics to help clients optimize user experience and application performance. Technically, the website is built on modern frameworks like Next.js and React, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital presence. Security-wise, the platform enforces HTTPS, displays an ISO 27001 certification badge, and employs best practices in script loading and domain registration. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose a security policy or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency around security and incident management.

S

Swaper

swaper.com

72

Swaper operates as a loan marketplace platform specializing in unsecured consumer loans, offering investors the opportunity to earn up to 16% annually. The platform targets investors interested in peer-to-peer lending and positions itself as a transparent and easy-to-use service within the finance sector. The website content and branding are consistent and professional, supporting a medium-sized business with a mature domain age dating back to 1997. Technically, the website is built on modern web technologies including React and Next.js, hosted likely behind Cloudflare DNS services. It integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Zendesk, and employs Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS with strong security headers and does not expose sensitive data in the HTML content. However, DNSSEC is not enabled, and there is no published security policy or incident response contact information, which are areas for improvement. The WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, appropriate for the business type. Overall, Swaper presents a solid digital presence with good security and privacy compliance, though it could enhance transparency around security policies and incident response. The risk profile is low, with recommendations focusing on DNS security enhancements and formalizing security governance documentation.

L

Latvijas Bankas Naudas skola

naudasskola.lv

58

Latvijas Bankas Naudas skola is an official educational website operated by Latvijas Banka, aimed at improving financial literacy among Latvian citizens, including students and teachers. The platform offers a wide range of resources such as budgeting tools, savings and investment information, insurance, credit guidance, fraud awareness, games, podcasts, videos, and infographics. The website is well-branded, professionally designed, and provides comprehensive content in the Latvian language. Technically, it is built on Drupal 10 and integrates modern analytics and user experience tools like Google Analytics, Microsoft Clarity, Hotjar, and ReadSpeaker, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and uses cookie consent mechanisms, reflecting good security hygiene. However, the absence of explicit contact information and terms of service pages, along with unavailable WHOIS data due to query limits, slightly reduce the overall trust score. Overall, the site presents a low-risk profile with strong educational and governmental backing.

L

Latvijas Banka

makroekonomika.lv

72

The website makroekonomika.lv is an official macroeconomic analysis platform maintained by Latvijas Banka, the central bank of Latvia. It provides a comprehensive range of economic articles, expert commentary, research publications, forecasts, and educational resources targeted at economists, researchers, students, and policymakers. The site is well-positioned as a trusted government source for macroeconomic data and analysis in Latvia. Technically, the site is built on Drupal 10 CMS and incorporates modern web technologies including jQuery, Google Tag Manager, Hotjar for analytics, and Highcharts for data visualization. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with asynchronous loading of scripts and lazy loading of images. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. While explicit security headers are not fully visible in the HTML, the overall posture is good with no exposed sensitive data or vulnerabilities detected. The absence of WHOIS data limits domain trust analysis, but the strong affiliation with Latvijas Banka and professional presentation support legitimacy. Overall, makroekonomika.lv is a high-quality, authoritative resource for macroeconomic information in Latvia with a solid technical foundation and good security and privacy practices. Continued monitoring of security headers and third-party scripts is recommended to maintain security posture.

D

Dukascopy Bank SA

dukascopy.bank

72

Dukascopy Bank SA is a Swiss financial institution offering a broad range of banking services including multi-currency accounts, private and corporate banking, investment options, and payment card solutions. The bank emphasizes Swiss precision and innovation, providing a mobile app for seamless banking access. The website reflects a mature digital presence with professional design and comprehensive content targeting individuals and businesses seeking Swiss banking services. Technically, the site employs modern JavaScript libraries, analytics tools, and security best practices including HTTPS and security headers. However, public WHOIS data is unavailable due to .bank domain privacy policies, which is typical for regulated banking domains. The security posture is strong with no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

E

EXL Service

exlservice.com

73

EXL Service is a global enterprise specializing in analytics, AI, and digital transformation solutions across multiple industries including finance, healthcare, and energy. The company positions itself as a leader in AI innovation and data modernization, supported by industry recognitions and a comprehensive service portfolio. Technically, the website is built on Drupal 11 and integrates modern analytics and marketing technologies, providing a professional and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust despite the professional presentation. Strategic recommendations include publishing security policies, incident response contacts, and improving transparency around domain registration.

G

Grupo Nacional Provincial S.A.B.

gnp.com.mx

67

Grupo Nacional Provincial S.A.B. (GNP Seguros) is a leading Mexican insurance company offering a broad portfolio of insurance products including auto, medical, life, home, and pet insurance. The company targets both individual and business customers within Mexico, positioning itself as a financially solid and trusted insurer. The website reflects a mature digital presence with comprehensive product information, online quoting tools, and client portals. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools such as Google Tag Manager, Adobe Analytics, Facebook Pixel, and Hotjar, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and bot protection via reCAPTCHA, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, well-branded, and trustworthy, supporting GNP's market position as a major insurance provider in Mexico.

J

JSJ Corp

jsjcorp.com

58

JSJ Corporation is a well-established growth firm and holding company specializing in manufacturing, distribution, and service businesses with a global footprint. The company emphasizes long-term investment and partnership with innovative companies aligned with its core values. The website reflects a professional corporate presence with clear business descriptions, portfolio highlights, and community impact initiatives. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though no explicit security policy or incident response information is published. The absence of WHOIS registration data is a notable concern for domain legitimacy, warranting further verification. Overall, the website presents a credible and professional image with minor gaps in security transparency and legal documentation.

A

Anthony Veder

anthonyveder.com

58

Anthony Veder is a well-established gas shipping company with a strong focus on sustainability and innovation in the energy transportation sector. The company operates a majority-owned fleet of gas tankers worldwide, providing high-quality and flexible services to leading clients. Their website reflects a professional digital presence with clear branding and relevant content aimed at clients, partners, and potential employees. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and uses popular plugins like Gravity Forms and Yoast SEO. The site is mobile-optimized and integrates analytics tools including Google Analytics and Hotjar, supported by a cookie consent mechanism ensuring privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, DNSSEC is not enabled, and additional HTTP security headers could enhance the security posture. No explicit security policies or incident response contacts are published, which could be improved to strengthen trust. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The domain WHOIS data supports the legitimacy and long history of the business. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing security and incident response policies to further improve security and compliance.

S

SIA Norde

norde.lv

49

SIA Norde is a well-established Latvian automotive dealership specializing in Nissan, Renault, and Dacia vehicles. Founded in 1991, it offers a comprehensive range of services including new and used car sales, servicing, body repairs, spare parts, leasing, and insurance brokerage. The website reflects a mature digital presence with multimedia content, clear navigation, and integration of official brand partner domains. Technically, the site employs modern JavaScript libraries and analytics tools, with a strong emphasis on user privacy through a detailed cookie consent mechanism. Security posture is good with HTTPS and bot protection measures, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional presentation indicate a legitimate and reputable company.

F

Freidesk

freidesk.com

61

Freidesk is a logistics automation software provider founded in 2019, targeting shippers, carriers, and warehouses primarily in Lithuania and Poland. The company offers a SaaS platform that streamlines supply chain operations including order management, freight bookings, warehouse planning, document handling, and invoicing automation. With over 90 satisfied customers and 200,000+ placed orders, Freidesk holds a solid market position supported by positive client testimonials and recognized trust badges. Technically, the website is built on Webflow CMS with modern JavaScript frameworks like React and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is hosted via Cloudflare ensuring good performance and security. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present but no advanced GDPR indicators. Overall, the website is professional, trustworthy, and well-structured, supporting Freidesk’s business credibility.

C

Compensa Life

compensalife.lv

71

Compensa Life is a medium-sized insurance company operating primarily in Latvia, offering a range of insurance products including life insurance, health insurance, pension plans, and specialized oncology insurance. The website targets private individuals and provides detailed product information and consent management compliant with GDPR. The company appears to be well-positioned in the regional insurance market with a focus on customer-centric insurance solutions. Technically, the website is built on the DotNetNuke CMS platform using ASP.NET WebForms and incorporates modern JavaScript libraries such as jQuery and jQuery UI. It integrates third-party services including Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for analytics, marketing, and cookie consent management. The site demonstrates moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration verification, but the website content and external references suggest legitimacy. Overall, the website presents a professional and trustworthy front for Compensa Life, with good privacy compliance and marketing transparency. Strategic improvements in security headers, mobile optimization, and explicit contact information would enhance trust and security posture.

K

KORTE.LV SIA

korte.lv

51

KORTE.LV SIA is a Latvian small manufacturing and retail company specializing in artificial stone products for kitchens, bathrooms, commercial spaces, offices, horeca, medical, and ship interiors. The company offers a broad range of products including kitchen surfaces, sinks, shower trays, and design items made from materials such as Corian®, Meganite®, and STARON®. The website is multilingual, targeting Latvian, English, and Russian-speaking customers, and presents clear contact information and product categories. Technically, the site is built on WordPress using the Impreza theme and several plugins including Contact Form 7 and Ultimate VC Addons. It integrates Google reCAPTCHA v3 for form security and uses Hotjar and HubSpot for analytics and marketing. Security posture is moderate with HTTPS enforced but lacks standard security headers and a cookie consent mechanism. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site is professional and functional with room for security and privacy improvements.

T

Thomson Furniture

thomsonfurniture.lv

55

Thomson Furniture is a leading Latvian office furniture provider offering a comprehensive range of high-quality office furniture products and services, including design, project implementation, and long-term furniture rental. The company targets business clients, public institutions, and private customers, positioning itself as a trusted partner with a strong market presence. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and could improve in this area. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits full domain legitimacy verification.

C

CHOICE Australia

choice.com.au

62

CHOICE Australia is a well-established non-profit consumer advocacy organization founded in 1959, providing independent product reviews, consumer advice, and advocacy services to Australian consumers. The website demonstrates a strong market position with a large membership base and comprehensive content offerings. Technically, the site employs modern JavaScript frameworks, analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and performance monitoring via New Relic, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly, with room for enhanced transparency in privacy and security disclosures.

N

New Horizons Worldwide, LLC

newhorizons.com

79

New Horizons Worldwide, LLC is a well-established enterprise providing modern IT training solutions with a strong market position supported by over 40 years of experience. The company offers a broad catalog of IT and professional development courses, including certifications from major industry players such as Microsoft, AWS, and CompTIA. Their target audience includes IT professionals, corporate teams, and government personnel seeking upskilling and certification. The business operates under the parent company Educate 360, with multiple subsidiaries enhancing its service portfolio. Technically, the website is built on the DNN CMS platform and leverages a mature technology stack including jQuery, HubSpot, Google Tag Manager, and analytics tools like Hotjar and Microsoft Clarity. The site is mobile-optimized, well-structured, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. However, explicit security policies and incident response contacts are not found, which could be enhanced. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility. The missing WHOIS data is a notable gap but likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and compliance.

E

ENME

enmehr.com

68

ENME is a technology company specializing in employee engagement software, offering a manager-first SaaS platform that uses pulse surveys to help organizations increase employee engagement, loyalty, and retention. The website positions ENME as a leading solution in the employee engagement market, targeting HR professionals and managers. The platform emphasizes real-time results and anonymous weekly questionnaires to employees. Technically, the website is built on the Unbounce platform, leveraging common web technologies such as jQuery and OwlCarousel, and integrates analytics tools like Google Analytics, Hotjar, and Leadfeeder. The site is mobile optimized and presents a professional design with consistent branding. Security-wise, the site uses HTTPS and standard tracking scripts but lacks advanced security headers and DNSSEC, which could be improved. Privacy and cookie policies are absent, indicating a gap in compliance. The domain is registered with GoDaddy since 2017, consistent with the business age and legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

Latina.pe is the official website of Latina Televisión, a prominent Peruvian television channel offering live streaming of its programming including news, sports, and entertainment. The website targets Peruvian viewers seeking online access to traditional TV content. It features a modern technical infrastructure with integration of multiple advertising and analytics platforms such as Google Tag Manager, TikTok Pixel, Facebook Pixel, Hotjar, and Taboola, indicating a mature digital marketing approach. The site is well-branded and provides a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly reduces transparency but is common for some country code domains. Overall, the site is a credible media platform with room for improvement in privacy and security disclosures.

G

GRENARDI LATVIA, SIA

grenardi.lv

57

Grenardi.lv is a well-established premium jewelry retailer operating primarily in the Baltic region with a strong online presence and physical stores. The company emphasizes trust and quality with over 20 years in business, offering a wide range of exclusive jewelry brands and collections. Their website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and multiple language options. The business model focuses on retail e-commerce complemented by customer support and European-wide delivery services. Technically, the site employs modern JavaScript libraries and analytics tools, including Cloudflare Turnstile for bot protection, Hotjar, Microsoft Clarity, and Piwik PRO for user behavior tracking, and integrates marketing automation via Klaviyo and Brevo.

S

Södra

sodra.com

66

Södra is Sweden's largest forest owners' association and an international forest industry group focused on processing its members' forest raw materials. The website reflects a mature business with a clear market position in the forestry and energy sectors, offering products such as timber, pulp, bioproducts, and energy. The digital infrastructure is built on Microsoft Azure cloud services, leveraging modern technologies including ASP.NET and Episerver CMS, with integrations for analytics and marketing via Google, Hotjar, and LinkedIn. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and content security policies in place, although additional security headers and incident response visibility could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional and trustworthy, supporting the organization's business objectives effectively.

K

KOLONNA

kolonna.com

55

KOLONNA is a well-established Latvian beauty and wellness brand operating since 1991, offering a broad range of professional beauty, spa, fitness, and cosmetic retail services across multiple salon locations in Latvia. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, the site uses modern analytics and tracking tools such as Google Analytics, Google Tag Manager, and Hotjar, and is hosted with reputable providers including Cloudflare DNS. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic but includes GDPR consent mechanisms and a data processing policy. Overall, the site is trustworthy and professionally maintained, supporting a large customer base in the hospitality sector.

A

Autentika

autentika.pl

50

Autentika is a specialized digital services company focusing on UX/UI design and Payload CMS-based web and application development. The company positions itself as a responsive, high-end digital product team with a history dating back to 2005, serving businesses seeking modern web solutions. Their website reflects a professional design and clear service offerings, targeting organizations needing tailored digital tools, portals, and platforms. Technically, the website leverages modern frameworks such as React and Next.js, integrates multiple analytics and tracking tools, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is credible and functional but would benefit from improved transparency and security practices.

CT Production Ltd is a UK-based contract electronics manufacturing company specializing in providing high-quality electronics manufacturing services including prototype assembly and full turnkey production. With over 35 years of industry experience, the company serves diverse sectors such as medical, aerospace, transport, and industrial markets. The website presents a professional image with clear navigation, customer testimonials, and certifications like AS9100 and ISO 9001, reinforcing its market position as a trusted manufacturer. Technically, the website employs a custom CMS by Intergage, uses HTTPS with no visible SSL issues, and integrates common analytics and tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The site is moderately performant and mobile-optimized, though it uses an outdated jQuery version and lacks some modern security headers, which could be improved. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and a cookie consent mechanism, which are important for compliance and security best practices. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying an invalid domain variant, but the website content and business information appear legitimate and professional. Overall, CT Production Ltd's website is well-structured and credible, with room for improvement in security headers, privacy compliance, and updating legacy libraries to enhance security posture and regulatory adherence.

C

Cargo

thecargoagency.com

63

Cargo operates a professional website focused on cargo and logistics agency services, targeting businesses and individuals in need of transportation solutions. The site is built on WordPress and employs a modern technology stack including jQuery, Font Awesome, Google Tag Manager, and various analytics and tracking tools. The website demonstrates good design quality, mobile optimization, and SEO practices, with structured data implemented for enhanced search engine understanding. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security measures such as HTTPS and reCAPTCHA are in place, but the lack of security headers and explicit privacy and cookie policies indicates room for improvement in security posture and compliance. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain registration transparency to strengthen trust and security.

C

Complex

complex.com

65

Complex is a well-established media company founded in 2002, specializing in entertainment news, rap music, streetwear, sneakers, and sports culture. It operates a comprehensive digital platform combining editorial content with e-commerce capabilities, including exclusive merchandise and event promotion such as ComplexCon. The website demonstrates a mature technical infrastructure leveraging modern frameworks like Next.js and Shopify for e-commerce, supported by extensive analytics and marketing tools. Security posture is strong with HTTPS enforcement, security headers, and consent management, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. The missing WHOIS data is an anomaly but does not detract significantly from the overall legitimacy given the brand's prominence and content quality. Strategic recommendations include enhancing transparency around security practices and incident response to further build trust.

Enercom AG is a Liechtenstein-based company with Latvian roots, operating primarily in the telecommunications and renewable energy sectors. The company provides international voice and SMS transit services through its subsidiary Api Mobile SIA, a top 10 service exporter in Latvia, and develops renewable energy projects including wind and solar parks. Enercom AG is actively engaged in a Security Token Offering (STO) to raise capital for business expansion and diversification. The website is professionally designed, content-rich, and demonstrates a clear business model combining immediate telecom revenue with long-term renewable energy investments. Technical infrastructure is modern, leveraging WordPress CMS with multiple marketing and analytics tools integrated. Security posture is good with HTTPS, domain protections, and security plugins, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is adequate with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the domain registration and website content align well, supporting the legitimacy of the business.

S

Shattuck-St. Mary’s School

s-sm.org

72

Shattuck-St. Mary’s School is a well-established college preparatory boarding and day school located in Faribault, Minnesota, serving grades 6-12 and post-graduate students. The institution offers a comprehensive academic program complemented by specialized centers of excellence in athletics and arts, alongside a vibrant student life and summer programs. The website reflects a strong market position as a premier educational institution with a consistent brand and professional presentation. Technically, the site is built on the Finalsite CMS platform and integrates multiple modern analytics and marketing technologies, including Google Analytics, TikTok Pixel, Hotjar, and Weglot for multilingual support. The site is mobile-optimized and accessible, with good SEO practices implemented. Security posture is strong with HTTPS enforced and security headers present, though there is room for improvement in explicit security policies and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data is incomplete or inaccessible, which slightly impacts domain trustworthiness. Overall, the website demonstrates a mature digital presence suitable for its educational mission.

BVK is a full-service advertising agency based in Milwaukee, specializing in creating impactful brand experiences primarily for clients in the Travel & Tourism, Healthcare, and Education sectors. The company offers a broad range of marketing services including advertising campaigns, traditional and social media, SEO & SEM, and website development and hosting. The website presents a professional and consistent brand image with a clear focus on client success and category-changing ideas. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, HubSpot, and Hotjar, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and use of reCAPTCHA on forms, but lacks some security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no clear cookie consent mechanism or GDPR indicators. WHOIS data is missing, which slightly reduces trustworthiness but the overall business credibility remains high due to professional presentation and active social media presence. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing incident response and vulnerability disclosure information.

S

Solspace

solspace.com

65

Solspace is a specialized web development company with over 20 years of experience, focusing on Craft CMS, ExpressionEngine, and custom web solutions. They serve primarily small to medium-sized businesses seeking reliable, scalable, and revenue-driving websites. The company positions itself as a strategic partner offering proactive support and innovative web technologies. Technically, the website is well-built with modern tracking and analytics tools, optimized for performance and mobile use. Security posture is strong with HTTPS and domain protections, though improvements can be made in DNSSEC and visible privacy compliance mechanisms. Overall, the site reflects a mature, professional business with a strong market presence and trustworthy domain registration.

T

Triviums | Vadītāju apmācības

triviums.lv

55

The website www.triviums.lv is hosted on the Wix platform and utilizes standard Wix technologies including JavaScript, Webpack, Google Tag Manager, Facebook Pixel, and Hotjar for tracking and analytics. The site content appears minimal and lacks visible business or company information, privacy policies, or contact details. WHOIS data could not be retrieved due to query limits, preventing domain registration analysis. Security posture is limited with no visible security headers or SSL configuration details. Privacy compliance is poor with no detected privacy or cookie policies. Overall, the site appears to be in an early or incomplete state, limiting trust and business credibility.

TBC Pay is a well-established Georgian online payment platform, founded in 2008 and operated under the TBC Bank Group umbrella. It offers a comprehensive suite of payment services including mobile balance top-ups, banking payments, utility bills, transportation fines, and state services. The platform targets Georgian residents and businesses seeking convenient, fast, and secure online payment solutions. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it leverages modern technologies such as React, Google Analytics, Facebook Pixel, and AWS hosting, ensuring good performance and scalability. Security posture is strong with HTTPS, security headers, and secure form handling, though cookie consent mechanisms and explicit security policies could be improved. Overall, the platform demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and a long domain history.

S

Sonum International

sonum-int.com

62

Sonum International is a business-oriented website focused on delivering impactful and efficient solutions, as indicated by its tagline. The company appears to have been established in 2010, supported by the domain age. The website is built on WordPress using the Divi theme and hosted on WP Engine, indicating a modern and reliable technical infrastructure. The site employs common analytics and tracking tools such as Google Analytics, Hotjar, and LinkedIn Insight, reflecting a moderate level of digital maturity. Security-wise, the website uses HTTPS and Google reCAPTCHA, but lacks DNSSEC and security headers, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no clear contact or incident response information is provided. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

C

Chip

getchip.uk

68

Chip is a UK-based fintech company offering a comprehensive savings and investment app that integrates AI-driven auto-saving features and multiple account types including Cash ISAs and Stocks & Shares ISAs. The company targets individuals seeking to build long-term wealth with ease and convenience, boasting over 500,000 users and strong market presence supported by competitive rates and promotional offers. The website reflects a mature digital infrastructure leveraging modern web technologies, analytics, and marketing tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and consent management, though explicit incident response and vulnerability disclosure policies are not publicly available. Overall, Chip demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and UK financial regulations.

H

Hotelschool The Hague

hotelschool.nl

60

Hotelschool The Hague is a well-established hospitality business school based in the Netherlands, offering specialized education and training in the hospitality sector. The website reflects a professional and modern digital presence, leveraging contemporary web technologies such as Nuxt.js and Vue.js to deliver a responsive and accessible user experience. Privacy and cookie consent mechanisms are implemented, indicating compliance with GDPR requirements. The security posture is strong, with HTTPS enforced and appropriate security headers present, although explicit security and incident response policies are not publicly available. Overall, the website demonstrates high business credibility and technical maturity, with room for improvement in publishing comprehensive security and terms of service documentation.

D

Dura-Line

duraline.com

64

Dura-Line is a global manufacturer specializing in HDPE conduits and microducts primarily serving the telecommunications, energy, and transportation sectors. The company positions itself as a leader in conduit technology and installation training, offering a comprehensive product catalog and digital tools to support network deployment. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure leverages modern analytics and marketing technologies including HubSpot, Microsoft Application Insights, Hotjar, and Google Tag Manager, indicating a data-driven approach to user engagement and marketing. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from enhanced transparency in domain registration and security disclosures.

S

SIA Emimar

emimar.lv

46

SIA Emimar is a Latvian company specializing in the supply and installation of sandwich panels and related construction materials for industrial buildings such as hangars, sports halls, and commercial centers. The company partners with leading European manufacturers and offers a broad portfolio including insulation materials, metal profiles, PVC waterproofing membranes, and ventilated facades. Their target audience includes architects, construction firms, entrepreneurs, and private individuals planning construction projects. The website is built on Joomla CMS with modern frontend technologies and integrates multiple analytics and advertising tools. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data due to query limits limits domain trust verification, but the website content and business information appear professional and credible.

C

Cinnabon Franchisor SPV LLC

cinnabon.com

78

Cinnabon Franchisor SPV LLC operates a globally recognized bakery brand specializing in cinnamon rolls, coffee, and related baked goods. The company operates through a franchise model and offers catering, grocery products, and gift cards. The website is professionally designed, mobile-optimized, and provides clear navigation to key services such as ordering, locations, and franchise opportunities. The brand maintains a strong market position with consistent branding and a large customer base. Technically, the website employs a modern technology stack including popular analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though some improvements in public security policy disclosure and incident response contacts are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature digital presence aligned with a large retail and hospitality business.

W

Woodpecker

woodpecker.co

70

Woodpecker is a mature SaaS company specializing in cold email and sales outreach automation, targeting sales professionals, agencies, and individual cold emailers. The platform offers a comprehensive suite of tools including email sending, verification, warm-up, lead finding, and LinkedIn outreach automation. The company positions itself as a GDPR-compliant, trusted solution with a strong content marketing and educational resource presence. Technically, the website is built on WordPress with a modern tech stack including multiple analytics and marketing tools, optimized for performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in DNSSEC and incident response transparency. Overall, the domain registration is consistent with the business profile, showing legitimacy and stability. The website demonstrates high professionalism and trustworthiness, making it a reliable platform in its niche.

L

Linearis

linearistranslations.com

71

Linearis is a well-established language solutions provider specializing in translation, interpreting, and language technology services, with a strong market position in the Baltic region and global reach. The company offers a comprehensive portfolio of services including translation, editing, simultaneous and consecutive interpreting, multimedia translation, and advanced technology integrations such as machine translation post-editing and WordPress localization. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a high level of digital maturity. Technically, the website is built on WordPress with modern plugins like WPBakery, Yoast SEO, and WPML, supported by Cloudflare DNS and integrated with marketing and analytics tools such as Google Analytics, Hotjar, and MailerLite. Performance and mobile optimization are good, with SEO and accessibility features well implemented. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and GDPR compliance indicators. Contact information is readily available, enhancing business credibility. The domain uses privacy protection but aligns with the business profile, and the domain age is reasonable given possible rebranding. Overall, Linearis.io presents a trustworthy, professional, and secure online presence suitable for its business model. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing to monitor privacy compliance to sustain trust and security.

B

BLINDSAVE floorball

blindsave.com

68

BLINDSAVE floorball is a specialized e-commerce retailer focused on floorball goalie equipment, including knee pads, goalie suits, helmets, and related accessories. The company targets floorball goalies and sports enthusiasts, positioning itself as a niche market leader with a professional online presence. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools such as Klaviyo and Hotjar to enhance customer engagement and analytics. The business operates from Latvia, with clear contact information and product certifications such as OEKO-TEX® and GOTS, indicating a commitment to quality and sustainability. Technically, the site demonstrates good performance, mobile optimization, and SEO practices, although some security headers could be improved. The security posture is strong with HTTPS enforced and cookie consent implemented, but lacks a dedicated security policy or vulnerability disclosure mechanism. Overall, the site is trustworthy and professionally managed, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure page to further strengthen compliance and trust.

H

Humentum

lingos.org

61

Humentum is a well-established non-profit organization founded in 2008, specializing in providing training, consulting, and operational support services to international development and humanitarian organizations. The website reflects a professional and consistent brand presence targeting this niche audience. Technically, the site uses modern frameworks such as Bootstrap 4 and integrates marketing and analytics tools like Marketo, Hotjar, and Google Tag Manager, hosted on Amazon AWS infrastructure. The website is accessible and mobile-optimized with a moderate performance profile. Security posture is moderate; while HTTPS is implied, no advanced security headers or vulnerability disclosures are present, and DNSSEC is not enabled. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. WHOIS data shows privacy protection typical for non-profits, with domain age supporting legitimacy. Overall, the site is credible but would benefit from enhanced privacy and security practices.

E

Ente Ospedaliero Cantonale

eoc.ch

69

Ente Ospedaliero Cantonale (EOC) is a public healthcare organization managing a network of hospitals and medical institutes in the Canton of Ticino, Switzerland. The website serves as a comprehensive portal for patients, healthcare professionals, and researchers, providing detailed information on specialties, hospital locations, services, and ongoing research activities. The organization positions itself as a key regional healthcare provider with a strong emphasis on quality care and clinical research. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. Security posture is good with HTTPS enforced and consent mechanisms for cookies and analytics, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns well with the organization's identity, supporting legitimacy and trustworthiness.

I

International School of Riga: Private IB School in Riga

isriga.lv

65

International School of Riga is a private international educational institution based in Latvia, offering the International Baccalaureate curriculum across Early Years, Primary, Middle, and High School levels. The school positions itself as the only international school in Riga with IB accreditation candidacy, serving a diverse student body with over 47 nationalities represented. The website reflects a professional and modern digital presence, leveraging WordPress CMS with multiple plugins for SEO, analytics, and multilingual support. Social media integration and community engagement are strong, supporting the school's outreach and communication efforts. Security posture is robust with HTTPS, security headers, and secure forms, though explicit security policies and incident response information are lacking. Privacy compliance is indicated by cookie consent mechanisms and a comprehensive child protection policy, but explicit GDPR statements and data protection officer contacts are not found. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site demonstrates a mature digital infrastructure suitable for an educational institution, with recommendations to enhance transparency around security and privacy policies.

D

DomainMarket.com

champick.com

65

DomainMarket.com operates as a premium domain marketplace specializing in the sale of high-quality .com domains such as Champick.com, targeting retail and e-commerce businesses. The company positions itself as a market leader with a large inventory and a proven track record of domain sales. Their business model revolves around one-time domain purchases with subsequent annual renewals handled by buyers. The website is professionally designed, mobile-optimized, and provides clear contact channels including phone, email, and inquiry forms, enhancing customer trust and engagement. Technically, the site leverages modern web technologies including Google Tag Manager, Hotjar, FullStory, and SpamKill for analytics, user experience, and security. The use of Alpine.js and Livewire indicates a dynamic and responsive front-end framework. While the site performs moderately well, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site enforces HTTPS and employs spam protection on forms, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is noted but likely due to privacy or registry restrictions rather than malicious intent. Overall, the site demonstrates a strong security posture with minor gaps. Strategically, the site is low risk with a high trustworthiness rating. Recommendations include implementing security headers, adding cookie consent banners, publishing security policies, and auditing third-party scripts regularly to maintain compliance and security standards.

D

Durham University

durham.ac.uk

66

Durham University is a well-established higher education institution in the United Kingdom, offering a broad range of undergraduate, postgraduate, and international study programs. The website reflects a strong market position with a focus on research impact, student support, and global partnerships. The domain's long registration history and direct registration with Nominet reinforce its legitimacy. Technically, the site employs modern web technologies including Alpine.js, Google Tag Manager, and various analytics and tracking tools, managed via the Terminalfour CMS platform. The website is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure form practices but lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance in privacy and security disclosures.

The University at Buffalo is a flagship public university in New York State, offering a wide range of degree programs and engaging in extensive research activities. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, faculty, alumni, and the community. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple modern analytics and marketing technologies, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and headers. Overall, the domain's legitimacy is supported by its .edu status and consistent branding, despite the lack of publicly available WHOIS data typical for educational institutions.