Security Directory

Frälsningsarmén i Sverige is an established international Christian church with a strong social engagement presence across Sweden. The organization operates local corps, congregations, and social services, targeting the Swedish population interested in faith-based community support and social welfare. The website reflects a professional and consistent brand image, leveraging modern web technologies such as Next.js and React, and implements a comprehensive cookie consent mechanism to comply with privacy regulations. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for transparency. The technical infrastructure appears modern and moderately optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent in place, but lacks visible advanced security headers and published security policies. The extensive use of third-party advertising and tracking services indicates a moderate to extensive user tracking level, balanced by good privacy compliance practices. WHOIS data for the www subdomain is missing, which is typical, but the absence of main domain WHOIS data limits full domain legitimacy assessment. Overall, the website is professional, trustworthy, and functional with room for enhanced privacy and security disclosures.

P

Post Service B.V.

postservice.nl

56

Post Service B.V. is a well-established Dutch company specializing in postal delivery, house-to-house distribution, printing, and parcel shipping services. With nearly 30 years of experience, it serves businesses and organizations across the Netherlands, offering competitive pricing and comprehensive service solutions. The website reflects a professional and trustworthy business with clear contact information and client references. Technically, the website is built on the Webflow platform, leveraging modern technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Cookiebot for consent management. The site is well-optimized for performance and mobile use, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and incident response policies are not published, representing areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website and domain registration data indicate a legitimate, professional business with a solid security posture and good privacy compliance. The risk level is low, but enhancements in security policy transparency and header implementation would strengthen the security posture further.

A

Autobrava Motors

autobrava.lv

62

Autobrava Motors is a Latvian automotive dealership specializing in premium brands such as CUPRA, Ducati, and Volkswagen, offering petrol, hybrid, and electric vehicles along with servicing. The website demonstrates a solid digital presence built on WordPress, utilizing modern technologies like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile devices and SEO, providing a good user experience with clear branding and professional design. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although security headers could be improved. WHOIS data is unavailable due to query limits, but the website's content and brand partnerships indicate legitimacy. Overall, the site reflects a medium-sized business with a focus on automotive sales and services in Latvia.

B

Bite Latvija

viasat.lv

57

Bite Latvija is a prominent telecommunications provider in Latvia offering satellite television services under the Home3 brand, alongside mobile telephony and device retail. The website targets both private individuals and business customers, providing a broad range of products and services including device insurance and accessories. The company maintains a professional online presence with a well-structured website built on Drupal 10, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. Technically, the website demonstrates good performance and mobile optimization, with responsive design and accessibility features at a basic level. Security measures include HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure policies are not publicly available. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the website's professional design and content suggest a trustworthy entity. Overall, the security posture is solid with room for improvement in transparency around security policies and incident handling. Privacy compliance is well addressed with clear cookie consent mechanisms and privacy policies. The business credibility is supported by consistent branding, clear service offerings, and trust signals such as privacy policies and secure connections. Strategic recommendations include publishing a security.txt file, enhancing accessibility, and providing explicit incident response contact information to strengthen trust and compliance. Regular audits of third-party scripts and continuous monitoring of security headers are advised to maintain a robust security posture.

R

Rīgas Būvserviss

virsia.lv

58

Rīgas Būvserviss operates as a prominent Latvian retailer specializing in construction materials and tools, offering a broad product catalog and expert consultation services. The company targets construction professionals and retail customers across Latvia, emphasizing fast delivery and comprehensive product availability. The website demonstrates a solid digital presence with a professional design, clear navigation, and mobile optimization. Technically, it employs modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Cookiebot for consent management. Security posture is generally good with HTTPS enforced and CSRF protections in place, though there is room for improvement in security headers and incident response transparency. Privacy compliance is basic, with cookie consent but lacking a visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security documentation.

J

javaguru.lv

javaguru.lv

49

JavaGuru.lv is a professional IT education provider specializing in Java, QA, Front-End, and DevOps courses primarily targeting Russian-speaking individuals in Latvia and surrounding regions. The business model focuses on flexible, career-oriented training with options for full payment or installment plans, catering to beginners and professionals seeking skill upgrades. The website demonstrates a solid digital presence with WordPress CMS, modern frontend frameworks like Bootstrap, and integrated analytics and marketing tools. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enforced, though lacking some advanced security headers and explicit incident response disclosures. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional, user-friendly, and trustworthy for its educational purpose.

Hansamatrix is a medium-sized electronics manufacturing services (EMS) provider operating primarily in the Baltics and Eastern European markets. Founded in 2009, the company offers full cycle electronics manufacturing services targeting industries such as transportation, IoT, technology, and medicine. The website reflects a professional B2B business model with clear service offerings and a regional market focus. The company maintains a consistent brand presence with active social media channels and a well-structured website optimized for SEO and user experience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. Hosting and DNS are managed via Cloudflare and Combell NV, ensuring reliable performance and security. The site demonstrates good mobile optimization and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with a valid SSL certificate and employs domain transfer protection. Cookie consent is managed comprehensively via Cookiebot, supporting GDPR compliance. However, the absence of DNSSEC and HTTP security headers like CSP and HSTS are areas for improvement. No explicit security policies or incident response contacts are published, which could enhance trust and preparedness. Overall, Hansamatrix's website presents a credible and professional digital presence with solid privacy and security foundations. Strategic enhancements in security headers, incident response transparency, and DNS security would further strengthen their posture and trustworthiness.

R

Riga Port Group

rto.lv

65

Riga Port Group is a leading Latvian company specializing in port asset management and rail freight services. Established in 2005, it operates as a key player in the transportation and logistics sector, offering stevedoring, rail freight forwarding, and infrastructure management services. The company highlights its strategic location with excellent land and sea connectivity as a competitive advantage. The website reflects a professional digital presence with a focus on clear business messaging and user-friendly navigation. Technically, the website employs modern front-end technologies such as jQuery, Cookiebot for cookie consent management, and Google Fonts for typography. The site is mobile-optimized and uses a slider for dynamic content presentation. However, no backend or CMS technologies are explicitly detected. Performance is moderate, with room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security headers or policies are detected, and no incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data limits the ability to fully assess domain legitimacy, but the website content and structure suggest a legitimate business. Overall, the website presents a solid business and technical foundation with moderate privacy compliance. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving accessibility and SEO to strengthen trust and compliance.

Enefit Latvija is an established energy company operating in Latvia, specializing in the supply of green electricity and renewable energy solutions such as solar panels, batteries, and electric vehicle charging infrastructure. The company positions itself as a trusted provider with a strong customer base exceeding 100,000 users and emphasizes environmental responsibility and customer care. The website reflects a mature digital presence with modern technologies including React and Next.js, and integrates advanced cookie consent and analytics tools to ensure compliance and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be further verified. The absence of WHOIS data limits domain trust analysis, but the professional presentation and comprehensive content suggest a legitimate and credible business. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and maintaining up-to-date privacy practices.

S

SIA "Longo Latvia"

longo.lv

61

Longo.lv is a Latvian-based used car dealership operating under SIA "Longo Latvia", part of the international Longo Group. The company specializes in selling used and slightly used cars with verified mileage, service history, and warranty. Their business model includes sourcing vehicles primarily from the Netherlands, performing technical inspections, and offering financing options including leasing. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and customer testimonials, positioning Longo.lv as a trusted player in the Latvian automotive market. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates multiple analytics and marketing tools including Google Tag Manager and TikTok Analytics, and employs cookie consent management via Cookiebot. Performance is moderate with good SEO and mobile responsiveness. Security posture is strong with HTTPS enforced and standard security headers present, though no explicit security policy or incident response information is published. The absence of WHOIS data due to query limits restricts domain registration verification, but the website's structured data and consistent branding support legitimacy. Privacy and cookie policies are present and GDPR compliance is indicated. Overall, Longo.lv demonstrates a mature digital presence with solid business credibility and security practices. Strategic recommendations include publishing a dedicated security policy, establishing an incident response contact, enhancing accessibility features, and maintaining vigilance on third-party scripts to mitigate potential vulnerabilities.

J

Jungheinrich

jungheinrich.lv

71

Jungheinrich.lv is the Latvian localized website of Jungheinrich, a global leader in intralogistics and warehouse technology. The company manufactures forklifts, pallet trucks, and offers a broad spectrum of warehouse and logistics services. The website targets businesses and logistics professionals in Latvia, providing product and service information in Latvian. The site is professionally designed with consistent branding and good content relevance, supporting a large enterprise business model in the transportation sector. Technically, the website uses modern web technologies including JavaScript, CSS3, and HTML5, with Google Tag Manager and Cookiebot integrated for analytics and cookie consent management. Hosting appears to be managed via Jungheinrich's own cloud infrastructure. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible security headers and explicit privacy or security policies. No WHOIS data was available due to query limits, limiting domain trust verification. No contact information or incident response details are present, which could impact user trust and compliance. Overall, the website presents a professional and credible business presence but would benefit from enhanced transparency in privacy, security policies, and contact information to improve trust and compliance posture.

L

Latvijas Gaisa Satiksme

lgs.lv

63

Latvijas Gaisa Satiksme (LGS) is a Latvian air navigation service provider offering a range of aviation-related services including aeronautical information, training, and commercial air traffic coordination. The website is professionally designed, multilingual (Latvian and English), and targets aviation professionals and related stakeholders. The business model focuses on providing essential air traffic services and regulatory compliance within Latvia. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Analytics for visitor insights. Cookie consent is implemented with a comprehensive mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and cookie consent blocking, though some HTTP security headers are missing. No WHOIS data was available due to query limits, limiting domain trust analysis. Overall, the website presents a credible and professional digital presence for a national transportation entity.

RADIO SKONTO is a Latvian media company specializing in radio broadcasting and digital media services. It operates multiple radio stations and offers live streaming, podcasts, interviews, news, and contests primarily targeting Latvian-speaking audiences. The company is actively engaged in digital transformation projects supported by European Union funding, aiming to modernize its radio broadcasting infrastructure and develop new digital platforms such as an e-commerce radio store. Technically, the website employs modern JavaScript libraries, responsive design, and integrates multiple third-party analytics and marketing tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS data due to query limits limits full domain trust assessment, but the website content and EU project affiliations support legitimacy. Overall, RADIO SKONTO presents as a professional media entity with a strong digital presence and ongoing modernization efforts.

AxFlow is a leading industrial supplier in Latvia specializing in fluid control and metering systems, offering a full service cycle from solution selection to maintenance. The website is professionally designed, localized in Latvian, and targets industrial clients in energy and manufacturing sectors. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, Azure Application Insights, and Cookiebot for consent management, running on Episerver CMS. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and published incident response information. WHOIS data is missing, which is unusual but the site’s professional appearance and parent company affiliation support legitimacy. Overall, the site is functional, secure, and compliant with privacy regulations, though improvements in security headers and contact transparency are recommended.

D

DEGIRO

degirogroup.com

67

DEGIRO operates as a major Pan-European online securities broker offering a comprehensive investment platform with a focus on low fees and broad market access. The website presents a professional and user-friendly interface targeting both individual and professional investors across Europe. The company emphasizes transparency, security, and innovation, supported by over 100 international awards. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring a responsive and performant user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the website content and structure strongly suggest a legitimate and established financial services provider. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy platform for its target audience.

D

DBDH - Danish Board of District Heating

dbdh.org

59

DBDH (Danish Board of District Heating) is an organization focused on supporting and promoting district energy development worldwide. The website positions itself as a go-to partner for knowledge sharing, engagement creation, and support within the district energy sector. The organization appears to be recently established in 2024, with a small-sized operational scope targeting stakeholders in the energy industry. Technically, the website is built on WordPress with Elementor and integrates Google Analytics and Cookiebot for analytics and cookie consent management. The site is hosted by GoDaddy and uses HTTPS, but lacks DNSSEC and visible security headers, indicating room for security enhancements. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website demonstrates a moderate level of professionalism and technical maturity but would benefit from improved transparency and security practices.

F

Falcony

incy.io

72

Falcony is a technology company specializing in mobile-first incident reporting and compliance solutions. Their flagship product, Observe, enables users to report incidents directly from their mobile devices, streamlining compliance processes. Recently, Falcony joined the WeKomply family, enhancing its market position and expanding its compliance solution offerings. The website is professionally designed using Webflow CMS, with good mobile optimization and clear navigation. It employs modern technologies including Google Tag Manager and Cookiebot for analytics and consent management. Security posture is strong with HTTPS enforced and comprehensive cookie consent mechanisms in place. However, the absence of visible contact information and security incident response details suggests areas for improvement. Overall, the website reflects a legitimate and professional SaaS business with a focus on compliance and user privacy.

F

Falcony

falcony.io

69

Falcony is a SaaS platform focused on enabling employee and stakeholder involvement to build safer, happier, and more productive workplaces. The company offers a modular compliance and reporting platform with features including audits, observations, ESG compliance, risk management, whistleblowing, and tenant portals. Positioned as part of the WeKomply family, Falcony targets enterprises and organizations across multiple sectors such as technology, real estate, energy, transportation, and hospitality. The website is professionally designed, multilingual, and integrates modern web technologies to deliver a seamless user experience. Privacy and cookie consent mechanisms are implemented, reflecting good compliance practices. However, direct contact information such as emails and phone numbers are not publicly listed, with contact primarily via web forms.

R

Ramirent.cz

ramirent.cz

71

Ramirent.cz is a well-established Czech company specializing in the rental of construction machinery, hand tools, and related equipment. Founded in 2006, it serves construction professionals and individuals in the Czech Republic with a broad range of rental products including heavy machinery, garden equipment, scaffolding, and mobile facilities. The website reflects a mature business with consistent branding and a clear focus on its target market. Technically, the site leverages modern web technologies including Cloudflare for DNS and CDN, Google Tag Manager, and multiple analytics and marketing pixels such as Facebook Pixel and TikTok Pixel. Cookie consent is managed effectively through Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be more explicitly implemented. Overall, the site is professional, user-friendly, and trustworthy, with good SEO and mobile optimization.

R

Ramirent.pl

ramirent.pl

68

Ramirent.pl is a leading construction equipment rental company in Poland, offering a wide range of products including scaffolding, containers, fencing, power tools, and cranes. Established in 2004, it holds a strong market position as the largest rental provider in its sector within Poland. The website reflects a professional business model focused on serving construction professionals and companies. Technically, the site employs modern JavaScript libraries and tracking technologies such as Chart.js, Cookiebot, Google Tag Manager, Facebook Pixel, TikTok Pixel, and Hotjar, indicating a mature digital infrastructure with extensive analytics and marketing capabilities. Security-wise, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms, but lacks visible security headers and formal security policies, which could be improved to enhance trust and compliance. Overall, the website is well-designed and user-friendly, with good mobile optimization and SEO practices, but would benefit from publishing comprehensive privacy and terms of service documents and enhancing security transparency.

R

Ramirent

ramirent.no

68

Ramirent is Norway's largest provider of machinery and equipment rental services, targeting primarily business customers across the country. Their website offers a comprehensive catalog of rental products, services, and customer support centers nationwide, reflecting a strong market position in the construction and equipment rental sector. The company emphasizes ease of rental through online registration and offers discounts for registered customers. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. The presence of Cookiebot indicates attention to privacy compliance, although no explicit privacy policy page was detected in the provided content. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but the absence of explicit security headers and incident response information suggests room for improvement. Overall, the site is professional and trustworthy, though the lack of WHOIS data reduces domain registration transparency.

R

Rugby Europe

rugbyeurope.eu

78

Rugby Europe is the governing body responsible for the administration and promotion of rugby union across European countries outside the Six Nations Championship. The organization focuses on organizing competitions, developing rugby at various levels, and serving the rugby community in Europe. The website serves as the official digital presence, providing information and resources related to European rugby activities. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management, hosted on a reliable Azure CDN platform. The site is mobile-optimized and includes structured data for enhanced SEO. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks some advanced security headers and explicit security policies. Overall, the website is professional and trustworthy, but could improve privacy compliance and transparency by publishing privacy and terms of service policies and providing clear contact information. The domain WHOIS data is protected by EURid privacy services, which is common and justified for this type of organization.

L

LIDO

lido.lv

63

LIDO is a Latvian hospitality business focused on providing fresh, authentic, and quality food with a democratic approach to choice, price, and taste nuances. The website targets Latvian-speaking consumers and positions itself as a trusted local brand in the food service industry. The digital infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Cookiebot for cookie consent, Google Tag Manager, Facebook Pixel, and reCAPTCHA for bot protection. The website is served over HTTPS with a valid SSL certificate, ensuring secure communication. However, explicit privacy policy and terms of service pages were not detected in the provided content, which may impact compliance and user trust. The security posture is generally good with HTTPS and consent mechanisms but lacks explicit security headers and detailed contact information for incident response. Overall, the website demonstrates a professional and trustworthy online presence with room for improvement in privacy transparency and security best practices.

E

EHR.FM

ehrhiti.lv

63

EHR.fm is a Latvian online radio platform offering over 30 free and advertisement-free radio channels along with podcasts and interactive features. The website targets Latvian-speaking users seeking a modern and user-friendly online radio experience. The platform leverages modern web technologies including JavaScript frameworks, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-structured with comprehensive privacy and cookie policies, reflecting good compliance with GDPR requirements. Security measures such as HTTPS enforcement and CSRF protection are in place, though no dedicated security policy or incident response information is published. Overall, the website demonstrates a mature digital presence with a focus on user privacy and advertising transparency.

R

Refrion

refrion.com

70

Refrion is a leading company specializing in industrial refrigeration and ventilated equipment for industrial use worldwide. As part of the LU-VE Group, it holds a strong market position in the energy and manufacturing sectors, offering a range of products including dry coolers, condensers, and batteries. The website reflects a professional B2B business model targeting industrial clients requiring advanced cooling solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates key marketing and analytics tools such as Google Analytics and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a good user experience and trustworthiness. The lack of WHOIS data for the subdomain is consistent with it being a subdomain of luvegroup.com, which aligns with the corporate structure. Strategic recommendations include enhancing security headers, expanding contact information visibility, and maintaining compliance with evolving privacy regulations.

T

Tervise Paradiis

terviseparadiis.ee

54

Tervise Paradiis is a well-established 4-star spa hotel and water center located in Pärnu, Estonia, offering a comprehensive range of leisure and wellness services including accommodation, water park facilities, sports complex, bowling, and dining options. The business targets spa and wellness tourists, families, and leisure travelers, positioning itself as a leading hospitality provider in the region. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress CMS, leveraging modern SEO tools and cookie consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and published security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance.

T

Trinidad Wiseman OÜ

twn.ee

61

Trinidad Wiseman OÜ is an Estonian technology company specializing in human-centered digital services including software development, business analytics, machine learning, user experience design, accessibility audits, and training. The company holds a strong market position with over 20 years of experience, more than 140 specialists, and a significant number of successful public sector projects. Their business model focuses on service delivery to public and private sector clients, emphasizing professionalism, autonomy, and user-centric solutions. Technically, the website is built on Drupal 10 with modern frontend technologies and integrates Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response information are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements, supporting the company's credible market presence.

C

Coopalsa + Nadal

bus.ad

55

Coopalsa + Nadal operates as a primary public transportation service provider in Andorra, offering regular bus lines and related services. The website serves residents and visitors by providing schedules, ticket sales information, and route details. The company maintains a consistent brand presence and engages users through social media platforms such as Facebook, Twitter, and Instagram. The business model focuses on essential transportation services within the country, positioning itself as a key local operator.

Belimo is a global market leader specializing in the development, manufacturing, and marketing of field devices for heating, ventilation, and air conditioning (HVAC) systems. Their core business revolves around actuators, control valves, and sensors, targeting professionals and companies in the HVAC sector. The website is professionally designed, localized in Finnish, and demonstrates a strong brand presence consistent with a large enterprise in the energy sector. Technically, the site uses Magnolia CMS, integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, and is hosted on a robust infrastructure likely leveraging Akamai CDN. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain is a notable gap, potentially impacting trust but not necessarily indicating illegitimacy. Overall, the site presents a credible and professional digital presence with room for improvement in privacy transparency and security disclosures.

C

Chiller Oy

chiller.eu

74

Chiller Oy is a Finnish company specializing in innovative cooling, heating, and energy solutions tailored to various applications. The company aims to provide thermal comfort and optimal indoor air quality, positioning itself as a specialized B2B provider in the energy sector. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress CMS and modern SEO and analytics tools. The technical infrastructure is sound, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the website presents a trustworthy and professional image consistent with its business claims.

F

FläktGroup

flaktgroup.com

68

FläktGroup is a company specializing in air technology systems aimed at maintaining clean and healthy indoor air for improved living and professional environments. The website presents a professional and consistent brand image, targeting businesses and professionals in need of air quality solutions. The company appears to be a large entity within the energy sector, offering B2B technology and manufacturing services related to HVAC and air systems. Technically, the website employs modern technologies such as React and .NET, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is served over HTTPS with a valid SSL certificate. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content supports legitimacy. Privacy compliance is moderate, with a cookie banner present but no explicit privacy or terms of service pages detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

I

International Paralympic Committee

paralympic.org

75

The International Paralympic Committee (IPC) operates the official website www.paralympic.org, serving as the global authority for Paralympic sports. The site provides comprehensive news, event results, and multimedia content targeted at athletes, fans, and stakeholders worldwide. The organization is positioned as a non-profit international sports governing body headquartered in Germany. Technically, the website is built on Drupal 8 CMS, integrating modern analytics and cookie consent tools such as Google Tag Manager and Cookiebot, ensuring GDPR compliance through explicit cookie consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is strong with HTTPS enforced and anonymized IP tracking, although explicit security headers and incident response information are absent. The lack of WHOIS data limits domain registration transparency but is typical for such international organizations. Overall, the site is professional, trustworthy, and well-maintained, with minor gaps in privacy policy visibility and security disclosures.

A

A. Le Coq

alecoq.ee

47

A. Le Coq is Estonia's oldest and largest beverage producer, offering a wide range of alcoholic and non-alcoholic drinks including beer, cider, juices, water, and energy drinks. The company operates a professional and well-structured website built on WordPress with WooCommerce, targeting both consumers and distributors in Estonia and export markets. The website demonstrates good digital maturity with modern technologies, SEO optimization, and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and security policies are not published. Overall, the site reflects a credible and established business with a focus on compliance and user experience.

Promised Land Art Festival is a professionally organized event celebrating digital and traditional art, primarily targeting creative professionals in gaming, film, and advertising industries. The festival is supported and organized by CD PROJEKT RED and local cultural institutions in Łódź, Poland, positioning it as a significant niche event in the creative media sector. The website reflects a high level of digital maturity, utilizing modern web technologies such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though improvements in security headers and explicit security policies are recommended. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website presents a trustworthy and professional image, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration status.

EC1 Łódź - Miasto Kultury is a well-established cultural and educational institution based in Łódź, Poland, offering a broad range of services including exhibitions, workshops, film screenings, and educational programs. The website serves as a comprehensive portal for visitors, schools, and cultural enthusiasts, providing detailed information about events, offers, and the institution's mission. The site is built on TYPO3 CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The domain is long-standing and registered with a reputable registrar, supporting the legitimacy of the institution. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, positioning EC1 Łódź as a credible and trusted cultural hub.

E

Economybookings

economybookings.com

72

Economybookings is an established online car rental aggregator platform offering price comparison and booking services for over 175,000 vehicles across 20,000 locations worldwide. The company targets global consumers seeking affordable and convenient car rental options, supported by multilingual customer service and a large network of trusted suppliers. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and compliance tools like Cookiebot for privacy management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies. Overall, the platform presents a professional and trustworthy user experience with room for improvement in transparency and contactability.

S

SMEunited

smeunited.eu

72

SMEunited is a prominent non-profit association representing crafts and small and medium-sized enterprises (SMEs) across Europe, with a membership base spanning over 30 countries and encompassing more than 12 million enterprises. The organization focuses on advocacy, policy representation, and providing a unified voice for SMEs at the European level. Their website reflects a professional and consistent brand image, offering comprehensive information about their activities, publications, news, and events. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy disclosures and incident response contacts. Overall, the website is accessible, well-structured, and compliant with privacy regulations, presenting a trustworthy digital presence for the organization.

N

Noatum Logistics

noatumlogistics.com

63

Noatum Logistics operates as a global transport and logistics solutions provider, positioned among the top 50 freight forwarders worldwide. Their services encompass air, ocean, road, and rail freight, along with customs brokerage, warehousing, and value supply chain services. The website reflects a professional and consistent brand presence targeting businesses requiring comprehensive logistics solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and infrastructure appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security best practices.

H

home.pl S.A.

ec1lodz.pl

60

EC1 Łódź is a well-established cultural and educational institution based in Łódź, Poland, offering a diverse range of services including science and technology exhibitions, planetarium shows, film screenings, and interactive narrative experiences. The website reflects a mature digital presence with a strong focus on user engagement through events, workshops, and educational programs targeting families, students, and cultural enthusiasts. Technically, the site is built on TYPO3 CMS, integrates modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel, and employs a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and appropriate security headers, though DNSSEC is not enabled. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website demonstrates a high level of professionalism, accessibility, and content quality, positioning EC1 Łódź as a key cultural hub in the region.

A

Ahola Group

aholagroup.com

60

Ahola Group is a well-established Finnish logistics and transport company with over 70 years of experience, operating primarily in the Nordic and Central/Eastern European markets. The company offers a broad range of services including road transport, special heavy logistics, and digital logistics solutions through its subsidiaries Ahola Transport, Ahola Special, and Ahola Digital. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and a focus on sustainability and innovation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It uses Google Tag Manager for analytics and tracking, and Swiper.js for interactive UI elements. The site is mobile optimized and demonstrates good SEO practices, although accessibility features could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No security vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS registration data is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a secure and trustworthy front for a large logistics business. Strategically, Ahola Group should enhance its security posture by publishing formal security policies and incident response contacts, implementing additional security headers, and considering a vulnerability disclosure program. Improving accessibility and continuing to monitor third-party scripts for vulnerabilities will further strengthen their digital maturity and trustworthiness.

M

Ma Armastan Aidata

armastanaidata.ee

54

Ma Armastan Aidata is a well-established Estonian donation platform founded in 2008, operating in partnership with Swedbank and Heateo Sihtasutus. It aggregates trustworthy Estonian charitable organizations and facilitates donations through secure login methods including national ID card, Mobile-ID, and bank links. The platform offers categorized projects for donations and maintains active communication channels including news and social media. Technically, the website uses a modern tech stack with jQuery, Bootstrap, Tailwind CSS, and integrates cookie consent and reCAPTCHA for privacy and security. Security posture is strong with HTTPS, secure login, and cookie consent, though it lacks published security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a medium-sized non-profit sector audience in Estonia.

K

KiVa Program

kivaprogram.net

61

KiVa Program is an established international anti-bullying educational initiative focused on providing schools, educators, and parents with resources and research to combat bullying. The website demonstrates a professional design with clear navigation and a global presence through multiple localized domains. Technically, the site is built on WordPress, uses modern libraries such as jQuery and DustPress, and integrates Cookiebot for privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the website enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks advanced security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts the overall trustworthiness assessment. No explicit contact emails or phone numbers were found, limiting direct communication channels. Overall, the website is functional, privacy-conscious, and professionally presented, but the missing WHOIS data and lack of explicit business contact details reduce confidence in business credibility. Strategic improvements in security transparency and domain registration verification are recommended.

A

Advokatfirman Glimstedt

glimstedt.se

49

Advokatfirman Glimstedt is a well-established full-service law firm founded in 1935, specializing in business law and serving primarily large and medium-sized Swedish and international companies. The firm operates across 17 offices in Sweden and the Baltics with over 200 employees, positioning itself as one of the largest law firms in the region. Their website reflects a professional and modern digital presence, built on WordPress with integration of Google Tag Manager and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and SEO-friendly, providing comprehensive legal content and news updates. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, though additional HTTP security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure aligned with the firm's market position and compliance requirements.

D

DragDropr

dragdropr.com

61

DragDropr is a technology company specializing in a visual drag & drop page builder that integrates seamlessly with multiple CMS and e-commerce platforms such as WordPress, Magento, Shopify, and Lightspeed. The company targets website owners, agencies, content managers, and small businesses seeking an easy-to-use content creation tool without requiring coding skills. Their market position is that of a versatile, cross-platform content builder offering both standalone and white-label solutions. The website is professionally designed, with clear navigation and comprehensive content describing their services and benefits. Technically, the site is built on WordPress with the Enfold theme and uses modern plugins and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the overall business credibility is supported by transparent contact information and active social media presence. Strategic recommendations include improving transparency around security policies, publishing vulnerability disclosure information, and enhancing WHOIS data visibility to strengthen trust.

A

Ahola Digital

attracs.com

67

Ahola Digital is a specialized digital solutions provider focused on the transportation and logistics industry, operating as part of the larger Ahola Group. The company offers software and digital services aimed at modernizing and optimizing transportation operations. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B customers in the transportation sector primarily in Finland. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks some advanced security headers and explicit security policy disclosures. The absence of WHOIS data raises concerns about domain registration transparency, which should be investigated further. Overall, the site is trustworthy and professional but could enhance transparency and security documentation to improve credibility and compliance.

H

HUUM

huum.de

48

HUUM is a medium-sized manufacturing company specializing in sauna stoves and innovative sauna control systems, combining traditional Estonian sauna knowledge with modern Nordic design and technology. The company maintains a strong international presence with multiple regional domains targeting different markets including Germany, Estonia, Europe, the US, and Japan. The website is built on WordPress with performance optimizations and includes structured data for SEO enhancement. Privacy compliance is well addressed through Cookiebot, providing a comprehensive cookie consent mechanism and linking to a detailed privacy policy. However, explicit contact information and terms of service are not readily found on the homepage, which could be improved for better user trust and compliance.

S

Scoro

scoro.ee

73

Scoro is a professional services automation software company founded in 2013, targeting agencies, consultancies, and professional services businesses. Their SaaS platform offers comprehensive work management solutions including project, financial, and resource management to improve profitability and operational efficiency. The company maintains a strong market position with positive user reviews and a consistent brand presence. Technically, the website is built on WordPress CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Hotjar, HubSpot, and Visual Website Optimizer. The site is well-optimized for SEO and mobile use, with good content quality and user experience. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and documented security policies. WHOIS data is unavailable, which slightly impacts trust but the overall digital footprint suggests a legitimate and professional business. Strategic recommendations include enhancing security headers, formalizing security and incident response policies, and maintaining transparency in domain registration data.

O

OneStream Software

onestreamsoftware.com

71

OneStream Software is a leading enterprise finance management platform that integrates finance and operational data with AI to enhance the strategic impact of CFOs. The company targets large enterprises and finance professionals seeking unified financial planning, consolidation, reporting, and analytics solutions. Their market position is strong, supported by recognized certifications such as SOC 2 and ISO 27001, and a comprehensive digital presence including customer success stories and analyst reports. Technically, the website is built on modern frameworks like Next.js and React, with robust performance, mobile optimization, and SEO practices. The security posture is solid, featuring HTTPS, security headers, and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a mature, professional enterprise software provider with a high level of trustworthiness and digital maturity.

S

Swissôtel At Home

swissotelathome.com

64

Swissôtel At Home operates an e-commerce platform offering luxury home products inspired by Swissôtel hotels, targeting consumers seeking premium bedding, bath, and gift items. The website is well-branded, consistent with the Swissôtel and Accor group identity, and integrates the ALL loyalty program, enhancing customer engagement. The business model focuses on retailing branded hospitality lifestyle products online, positioning itself as a niche luxury brand extension within the hospitality sector. The company is based in France and has been operating since 2010, reflecting a mature and stable presence in its market segment. Technically, the website is built on Magento CMS, utilizing modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance optimization. Hosting and domain registration are consistent with corporate standards, with no blocking or WAF detected, ensuring full accessibility. From a security perspective, the site enforces HTTPS and employs clientTransferProhibited domain status, indicating good domain security practices. Cookie consent mechanisms are implemented, and forms include validation. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for enhancement. No explicit security policy or incident response contacts are published, which could be improved to increase transparency and trust. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and user experience. Strategic improvements in DNS security, security headers, and published security policies would strengthen its security posture and trustworthiness further.

F

Fienta

fienta.com

68

Fienta is an established Finnish online event ticketing platform founded in 2017, offering services such as event page creation, registration forms, ticket sales, and payment processing. The platform targets event organizers and ticket buyers primarily in Finland and holds a strong market position with positive user ratings. Technically, the website leverages modern technologies including Laravel, Cloudflare, Google Tag Manager, Intercom, and Cookiebot, indicating a mature digital infrastructure. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, CSRF protection, and clientTransferProhibited domain status, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism via Cookiebot and a clear cookie policy, supporting GDPR adherence. However, explicit contact information, terms of service, and security policies are not readily found, which could be improved to enhance trust and compliance. Overall, the website is professional, secure, and compliant, with minor areas for enhancement in security headers and transparency.