Security Directory

B

Burzum

burzum.lv

59

Burzum is a Latvian digital agency specializing in web development, application development, and digital advertising services. The company targets clients seeking creative and human-centered digital solutions primarily in Latvia. The website presents a professional portfolio showcasing various projects, indicating a small but focused business model. The site is bilingual with Latvian as the primary language and an English option, supporting a regional audience. Technically, the website uses standard web technologies including jQuery, Facebook SDK, and Google DoubleClick for analytics and advertising. The site is served over HTTPS with no visible security issues in the HTML content, indicating a good baseline security posture. However, the absence of privacy and cookie policies, as well as missing security headers, suggests room for improvement in compliance and security best practices. Contact information is clearly provided, enhancing business credibility. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification.

BTG Systems, Inc. is a well-established international IT services company with over 30 years of experience, operating through US and Latvian entities. They specialize in outsourced IT services including software development, testing, support, networking, and staffing, targeting regulated industries such as finance, healthcare, telecommunications, and government sectors. Their market position is strengthened by recognized expertise in Unisys technologies, ISO 9001 certification, and strategic partnerships with major technology providers. The website reflects a professional and consistent brand image with clear service offerings and client-focused content. Technically, the website is built on WordPress using modern themes and plugins, with Cloudflare DNS and HTTPS enforced. The site includes Google reCAPTCHA for form security and a cookie consent mechanism, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site demonstrates good practices such as HTTPS, reCAPTCHA, and cookie consent, but lacks DNSSEC and some advanced security headers. There is no publicly available security policy or incident response information, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content. The domain WHOIS data is consistent with the business claims, showing a long registration history and no privacy protection, supporting legitimacy. Overall, BTG Systems presents a trustworthy and professional online presence with solid business credibility and a good security posture. Strategic improvements in security policies, DNS security, and transparency could further enhance their risk profile and customer trust.

T

Target Circle

targetcircle.com

54

Target Circle is a technology company specializing in partner marketing software and an affiliate marketplace platform. Founded in 2013, it offers a SaaS solution that enables businesses to manage, automate, and scale their partnerships effectively. The company targets marketing teams and businesses looking to launch or enhance affiliate partner programs, providing features such as offer management, billing and payments automation, and deep conversion path insights. The website reflects a professional and consistent brand image, supported by industry awards and trusted client logos. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies including jQuery and Google Tag Manager. Hosting appears to be on AWS infrastructure, with performance and mobile optimization rated as moderate to good. SEO and accessibility features are adequately implemented, though accessibility could be further improved. From a security perspective, the site enforces HTTPS with good SSL configuration and domain locking status codes to prevent unauthorized domain changes. However, DNSSEC is not enabled, representing a potential area for DNS security enhancement. The site implements cookie consent mechanisms compliant with GDPR, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, Target Circle presents a credible and professional online presence with a solid business model and technical foundation. Strategic improvements in DNS security, explicit security policy publication, and enhanced accessibility would further strengthen its security posture and compliance standing.

#

#Neklusē

nekluse.lv

50

The website nekluse.lv represents #Neklusē, a Latvian non-profit social project dedicated to reducing bullying in schools across Latvia. It offers free solutions for schools, educational materials, research, and support for students, parents, and school staff. The project maintains a strong presence in the Latvian education and social sectors, positioning itself as a leading initiative against bullying with active community engagement and partnerships with governmental and psychological support organizations. Technically, the website is built on WordPress with Elementor and several plugins including GiveWP for donations and Stripe for payment processing. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized, well-structured, and uses modern web technologies, although some security headers could be improved. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security-wise, the site enforces HTTPS and uses secure payment gateways but lacks explicit security headers and a vulnerability disclosure policy. No WHOIS data was available due to query limits, but the domain appears legitimate and consistent with the business purpose. Overall, the site demonstrates a solid security posture with room for improvement in header policies and incident response transparency. The overall risk is low given the non-profit nature, absence of suspicious indicators, and proper use of security and privacy best practices. Strategic recommendations include enhancing security headers, publishing a security.txt file, and maintaining up-to-date software to mitigate potential vulnerabilities.

T

Thomson Furniture

thomsonfurniture.lv

55

Thomson Furniture is a leading Latvian office furniture provider offering a comprehensive range of high-quality office furniture products and services, including design, project implementation, and long-term furniture rental. The company targets business clients, public institutions, and private customers, positioning itself as a trusted partner with a strong market presence. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and could improve in this area. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits full domain legitimacy verification.

Latvijas valsts agrārās ekonomikas instītūts is a Latvian governmental research institute specializing in agricultural economics, rural development, and sustainable economic management. The website serves as an informational portal providing research articles, conference details, and departmental contacts. The organization targets researchers, policymakers, and stakeholders in the agricultural sector within Latvia. Technically, the site is built on WordPress with standard plugins and scripts, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website reflects a legitimate government entity but would benefit from enhanced security and privacy practices.

I

International Tanker Management Limited

tankermanager.com

64

International Tanker Management Limited (ITM) is a specialized ship management company with over 30 years of experience in managing oil and chemical tankers. As part of the global V.Group, ITM offers comprehensive ship management services including technical management, crewing, post-fixture management, new-building supervision, project services, and insurance & claims handling. The company targets tanker owners and stakeholders in the shipping industry, emphasizing safety, regulatory compliance, and operational excellence. The website reflects a professional and consistent brand presence with clear contact information and a focus on client partnership. Technically, the website is built on WordPress with modern frameworks such as Foundation CSS and uses analytics tools like Matomo and Google Analytics. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security posture is solid with HTTPS enforced and domain status protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear cookie consent mechanisms and links to comprehensive privacy and cookie policies hosted on the parent company’s domain. However, no explicit security policy or incident response information is published, which could be improved to enhance trust and compliance. Overall, the website and business demonstrate a high level of professionalism and credibility, with a stable domain registration history and alignment between WHOIS data and business claims. Strategic recommendations include enhancing DNS security, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.

S

SIA Baltpapirs

baltpapirs.lv

49

Baltpapirs.lv is a Latvian-based company specializing in professional cleaning and hygiene products targeted primarily at business customers in sectors such as hospitality, healthcare, education, and industrial cleaning. The company offers a comprehensive product catalog including paper products, cleaning agents, protective equipment, and cleaning tools, supported by services like free product testing, research, and equipment rental. The website is built on the Bitrix CMS platform and incorporates modern JavaScript libraries such as jQuery and Slick Slider, with Google Analytics for traffic monitoring. The site is well-structured, mobile-optimized, and provides clear navigation and contact options, including phone, email, and interactive forms for customer engagement. However, the absence of WHOIS data due to query limits restricts full domain legitimacy verification. Security posture is moderate with HTTPS enabled but lacks visible security headers and cookie consent mechanisms, indicating areas for improvement in compliance and security best practices. Overall, the site presents a professional and trustworthy business presence with room for enhanced privacy and security measures.

A

AM-Furnitura

amf.lv

44

AM-Furnitura is a well-established Latvian company specializing in the manufacturing and retail of furniture components and fittings, serving the Baltic region. The company offers a broad range of products including custom furniture parts, aluminum profile products, and plastic/acrylic gluing services. Their market position is strong as one of the largest players in their sector in the Baltics, supported by certifications such as ISO 9001 and FSC Chain of Custody. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on WordPress using modern technologies such as Bootstrap, jQuery, and SEO plugins like Yoast. It integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and implements cookie consent mechanisms, indicating good digital maturity and privacy compliance. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses security plugins like Wordfence, but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are well implemented, supporting GDPR compliance. However, incident response and security policy information are not publicly available. Overall, the website and business demonstrate a solid security posture and compliance level appropriate for their industry and region. The lack of WHOIS data limits domain registration trust analysis, but the visible trust indicators and certifications support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and performance.

R

Redbird Group

redbirdgroup.com

59

Redbird Group is a Los Angeles-based award-winning content boutique specializing in brand leadership strategy, print publishing, video production, and thought leadership summits. Founded in 1996, the company serves large and emerging organizations with a focus on creating editorial content that drives business results. Their team includes strategists, writers, and designers with backgrounds from prestigious media organizations. The website reflects a mature digital presence with professional design and clear service offerings. Technically, the site is built on WordPress with modern web technologies and integrates Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are not clearly presented, indicating a compliance gap. WHOIS data is unavailable, which is unusual and suggests further verification is needed for domain legitimacy. Overall, the site is professional and trustworthy with room for enhanced privacy and security transparency.

G

Gaismas Rati

gaismasrati.lv

56

Gaismas Rati is a Latvian small business specializing in industrial climbing, arborist services, and organizing growth challenge events. The company targets clients requiring safe and environmentally friendly height solutions, including wind turbine maintenance and tree care. Their portfolio and client logos indicate active participation in international projects, positioning them as a niche service provider in the energy and arboriculture sectors. The website is built on WordPress with modern plugins and demonstrates good content quality and navigation, though some privacy and security best practices are lacking. The absence of WHOIS data limits domain trust verification, but the visible business information and social media presence support legitimacy. Security posture is moderate with HTTPS enabled but missing security headers and privacy policies. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security hardening.

P

Professional Partner OÜ

propartner.lv

49

Infoproff, operated by Professional Partner OÜ, is a licensed and insured financial services agency based in Estonia, specializing in credit reporting, debt collection, marketing databases, and credit risk management. The company targets businesses seeking reliable credit information and risk evaluation tools, offering a broad portfolio of services including KYC/KYB/AML checks and API integrations. Their market position is strengthened by memberships in reputable business federations and a multilingual, multi-currency reporting capability. Technically, the website employs modern frameworks such as Yii and Bootstrap, integrates error monitoring via Sentry, and uses Cloudflare for CDN and security, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response details are absent. The missing WHOIS data for the domain is a notable anomaly that slightly detracts from overall trust but does not overshadow the professional presentation and operational transparency of the business. Strategic recommendations include publishing detailed security and incident response policies and enhancing accessibility compliance.

M

Memoriālo muzeju apvienība

memorialiemuzeji.lv

56

Memoriālo muzeju apvienība is a Latvian cultural organization managing multiple memorial museums dedicated to historically and culturally significant personalities. The website serves as a portal for museum exhibitions, educational programs, digital exhibitions, and cultural events, targeting visitors interested in Latvian heritage. The organization maintains a professional online presence with multilingual support and active social media channels. Technically, the site is built on WordPress with common plugins and uses Google Analytics with privacy-conscious settings. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and incident response policies are absent. Overall, the site is well-designed, accessible, and trustworthy, supporting the organization's cultural mission effectively.

J

Jewish Association Serving the Aging

jasa.org

63

JASA (Jewish Association Serving the Aging) is a well-established non-profit organization dedicated to supporting older adults in New York City. The organization offers a comprehensive range of services including adult protective services, caregiver support, home care, legal assistance, affordable housing, mental health services, and community engagement programs. The website reflects a mature digital presence with clear navigation, rich content, and active social media channels, targeting seniors, caregivers, and community partners. The domain has been registered since 1996, indicating a long-standing presence in the sector. Technically, the website is built on Drupal 8 CMS with modern libraries such as jQuery, Bootstrap, and FontAwesome. It uses Google Tag Manager and Google Analytics for tracking and performance monitoring. Hosting appears to be on AWS infrastructure, supported by AWS DNS servers. The site is mobile optimized and accessible, with good SEO practices. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism, which are areas for improvement. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, security headers are not explicitly detected, and DNSSEC absence is a minor vulnerability. Privacy policy is present but GDPR compliance is not clearly indicated. Contact information is transparent and includes phone, email, and physical address. No WAF or blocking mechanisms were detected, allowing full content access. Overall, JASA's website demonstrates a solid business credibility and technical foundation with moderate security posture. Strategic improvements in DNS security, privacy compliance, and security headers would enhance trust and protection. The organization’s digital footprint aligns well with its mission and audience, supporting its role as a key non-profit service provider for aging populations in New York.

V.L.S Systems, Inc. is an established IT products and services company founded in 1995, providing software products, contingent IT staffing, custom software development, and IT solutions primarily to government agencies, Fortune 500 companies, and emerging businesses across diverse sectors such as financial services, healthcare, manufacturing, and telecommunications. The company holds a SEI CMMi Level 3 certification, indicating a mature software development process. The website reflects a basic digital presence with legacy design elements and limited modern features. Technical infrastructure includes use of jQuery, Google Analytics, and Facebook SDK, but lacks modern security practices such as HTTPS enforcement and security headers. The security posture is weak, with no visible privacy or cookie policies and no incident response contacts, which poses compliance and trust risks. Overall, the website is functional but requires significant improvements in security, privacy compliance, and user engagement to enhance trust and professionalism.

Llewellyn Worldwide, Ltd. is a well-established independent publisher specializing in metaphysical, spiritual, and occult books and resources since 1901. The company maintains a strong market position as the oldest and largest independent publisher in this niche, offering a broad catalog of books, calendars, tarot decks, and related products through its e-commerce platform. The website reflects this heritage with rich content, including blogs, videos, and articles targeting readers interested in astrology, tarot, paganism, and related spiritual topics. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and FontAwesome, with custom CSS and JavaScript to deliver a responsive and user-friendly experience. While the site is not built on a common CMS, it demonstrates good SEO practices and mobile optimization. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, DNSSEC is not enabled, and advanced security headers are not evident in the provided data. There is no published security policy or incident response contact, which could be improved to enhance trust and compliance. Privacy and cookie policies are comprehensive and indicate GDPR compliance, supporting responsible data handling. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and audience. The domain registration data supports the legitimacy and long-term operation of the business. Strategic improvements in security headers, DNSSEC, and incident response transparency would further strengthen the security posture and user trust.

A

ACDI/VOCA

acdivoca.org

56

ACDI/VOCA is a well-established global nonprofit organization focused on economic and social development projects worldwide. Their website reflects a mature digital presence with comprehensive content describing their mission, impact areas, and legacy since 1963. The organization targets global communities and development stakeholders, positioning itself as a trusted partner in fostering food security, economic prosperity, and social inclusion. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress CMS and standard analytics tools like Google Analytics and MonsterInsights. From a technical perspective, the site uses modern web technologies and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and published security policies are absent, and no vulnerability disclosure or incident response contacts are provided, representing areas for improvement. The WHOIS data is unavailable due to a malformed request, but the domain appears privacy protected, which is justified for a nonprofit entity. The website includes clear contact information, social media presence, and recognized trust indicators such as awards for workplace excellence. Overall, the site demonstrates a high level of professionalism and trustworthiness with minor gaps in security transparency. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and enhancing accessibility features to further strengthen the organization's digital security and compliance posture.

N

NATO ENSEC COE

enseccoe.org

57

The NATO Energy Security Centre of Excellence (NATO ENSEC COE) is a specialized organization dedicated to supporting NATO, its member nations, and partners in addressing the challenges of a dynamic energy security environment. The website reflects a professional and authoritative presence with a clear mission statement, recent news updates, publications, projects, and events that align with its core focus on energy security within a military and governmental context. The target audience includes NATO officials, energy security professionals, and partner organizations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Everest Forms, ensuring good SEO and user interaction capabilities. It employs Google reCAPTCHA for form security and Google Analytics for traffic analysis. The site is mobile-optimized and accessible, with a moderate performance profile. Security best practices are observed with HTTPS and cookie consent mechanisms, although some security headers could be improved. From a security posture perspective, the site demonstrates a mature approach with secure forms and privacy compliance, but lacks explicit incident response and vulnerability disclosure information. The absence of WHOIS data limits domain registration insights, but the overall trustworthiness is high given the NATO affiliation and consistent branding. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and providing direct security contact information to further strengthen trust and compliance.

I

Ilusión3D

ilusion3d.com

48

Ilusión3D is a small digital marketing and design agency based in Málaga, Spain, specializing in web design, SEO, 3D infographics, and digital advertising services. The company targets businesses seeking creative digital solutions to enhance their market presence and competitiveness. The website is built on WordPress using modern tools such as Elementor and Astra theme, with SEO optimization and Google Analytics integration. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from improved compliance and security disclosures.

L'Atelier Rouge is a small, creative floral and event design business established since 2009. The company offers customized floral designs for various occasions including weddings, parties, and business events, alongside full-service event design and editorial styling. The website reflects a niche market position with a focus on artistic and bespoke services targeting individuals and businesses seeking high-quality floral and event design solutions. Technically, the website is built on WordPress 4.9.9 with common libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS but lacks modern security enhancements like DNSSEC and security headers. The site is moderately optimized for mobile and performance but shows some outdated practices such as loading scripts over HTTP, which could lead to mixed content issues. Security posture is basic with no visible advanced protections or policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility, but the presence of unrelated gambling links in the menu raises concerns about content integrity. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and content integrity to enhance trust and user safety.

S

Secure Solutions Latvia SIA

secure-latvia.lv

57

Secure Solutions Latvia SIA operates a professional security services business in Latvia, offering guarding, video surveillance, security systems, patrolling, and training services. The company maintains a modern, well-structured website with clear navigation and comprehensive contact information, targeting Latvian businesses and organizations requiring security solutions. The presence of partner sites for Lithuania and Estonia indicates a regional presence or network. Technically, the website is built on WordPress using the Kadence theme and blocks, with modern JavaScript libraries and Google Maps integration, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though WHOIS data is unavailable due to query limits, limiting domain registration verification.

A

Adgett - Marketing communication agency

adgett.com

49

Adgett is a Latvia-based marketing communication and design agency established in 2013, offering a range of services including advertising campaigns, brand activation, in-store activities, digital communication, and POS material production. The company targets businesses seeking comprehensive marketing solutions and positions itself as a provider delivering more value and perfection in design and campaign execution. The website reflects a professional and consistent brand image with active social media integration and clear contact information. Technically, the website is built on WordPress using popular frameworks and plugins such as WPBakery, Elementor, and Yoast SEO, indicating a modern and maintainable infrastructure. Hosting appears to be Latvia-based, consistent with the business location. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security headers were detected, suggesting room for improvement. The cookie consent mechanism is implemented, supporting GDPR compliance, but no privacy policy or terms of service pages were found, which is a compliance gap. No incident response or security policy information is present. Overall, the website is trustworthy and professional with a solid business presence. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and terms policies, and formalizing incident response information to improve compliance and security posture.

M

Microline India Pvt Ltd

microlineindia.com

54

Microline India Pvt Ltd is a medium-sized technology company specializing in IT infrastructure and educational technology solutions, particularly intelligent interactive flat panels for education and corporate sectors. The company holds a dominant market position in India with over 70% market share in interactive panels, serving educational institutions and corporate clients. Their website is built on WordPress with modern plugins and demonstrates good content quality and professional design. Technically, the site is hosted by GoDaddy and uses HTTPS, but lacks DNSSEC and some security headers, indicating room for security improvements. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is comprehensive, and social media presence is active on Facebook and LinkedIn. Overall, the website is trustworthy and professionally maintained, though security and privacy practices could be enhanced.

N

New Horizons Worldwide, LLC

newhorizons.com

79

New Horizons Worldwide, LLC is a well-established enterprise providing modern IT training solutions with a strong market position supported by over 40 years of experience. The company offers a broad catalog of IT and professional development courses, including certifications from major industry players such as Microsoft, AWS, and CompTIA. Their target audience includes IT professionals, corporate teams, and government personnel seeking upskilling and certification. The business operates under the parent company Educate 360, with multiple subsidiaries enhancing its service portfolio. Technically, the website is built on the DNN CMS platform and leverages a mature technology stack including jQuery, HubSpot, Google Tag Manager, and analytics tools like Hotjar and Microsoft Clarity. The site is mobile-optimized, well-structured, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. However, explicit security policies and incident response contacts are not found, which could be enhanced. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility. The missing WHOIS data is a notable gap but likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and compliance.

W

William Jones

wjones.lv

35

William Jones is a Latvian language center specializing in English language training for both businesses and private individuals. The company offers a variety of learning formats including online and in-person classes, group and individual sessions, and exam preparation. The website is professionally designed, content-rich, and targets adult learners and students in Latvia. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the site presents a credible and trustworthy business presence but would benefit from enhanced security and privacy features.

A

Avio Expo GmbH

pilot-expo.com

63

Pilot Expo is a well-established annual aviation event focused on pilot recruitment and training, targeting experienced pilots, recent graduates, and aspiring aviators, as well as cabin crew and airline personnel. The event is positioned as Europe's largest aircrew gathering, featuring trade shows, conferences, and networking opportunities. The website reflects a professional and consistent brand image with clear business objectives and audience targeting. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. The absence of WHOIS data raises some concerns about domain legitimacy, but the overall site content and contact information support a credible business presence. Privacy and cookie policies are present with consent mechanisms, indicating GDPR awareness.

R

Rakatoto

omnifarious-group.com

40

The website omnifarious-group.com operates under the brand name Rakatoto, presenting itself as an online gambling platform specializing in slot games, specifically slot gacor88. The site targets users interested in online slot gaming and provides alternative active links for access. The domain is very recently registered in May 2024, consistent with the website's content and branding. The technical infrastructure leverages Amazon UI frameworks and assets, with hosting DNS managed by DigitalOcean and media assets served from AWS S3. The website's design and content quality are basic, with limited navigation clarity and minimal trust indicators. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security policies. Privacy compliance is poor due to absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site presents a low trustworthiness profile with significant room for improvement in transparency, security, and compliance.

G

Gaco™

gaco.com

59

Gaco™ is a well-established manufacturer and supplier specializing in silicone roofing systems, waterproofing, insulation, decking coatings, adhesives, and sealants for commercial and residential buildings. Founded in 1996 and now part of the publicly traded parent company Amrize, Gaco holds a strong market position as a single-source solutions provider with a comprehensive product portfolio and extensive technical support including training programs. The website reflects a mature digital presence with professional design, clear navigation, and extensive product and resource information targeting contractors, builders, architects, and homeowners. Technically, the site is built on WordPress with modern libraries and analytics integrations, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC, security headers, and explicit incident response disclosures. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with room for enhanced security and privacy practices.

S

Skooli

skooli.com

67

Skooli is an established online tutoring platform headquartered in Toronto, Canada, providing instant access to certified and professional educators across a broad range of subjects and grade levels. The platform targets students, parents, schools, and tutors, offering personalized tutoring solutions via a proprietary online classroom. Skooli emphasizes quality by vetting tutors with teaching licenses and advanced degrees, positioning itself as a trusted and industry-recognized service in the education sector. Technically, the website employs modern web technologies including JavaScript frameworks, third-party integrations like Google Tag Manager and Zendesk, and supports mobile responsiveness. The infrastructure supports real-time communication via socket.io and secure payment processing through Stripe. While the site is well-designed and performant, some security headers are missing, and cookie consent mechanisms are not explicitly implemented. From a security perspective, the site enforces HTTPS and includes anti-clickjacking scripts, with secure login and registration forms. However, the absence of visible security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not detract significantly given the professional presentation and contact transparency. Overall, Skooli presents a credible, professional, and user-friendly online tutoring service with a solid technical foundation. Strategic enhancements in security headers, privacy compliance, and transparency around incident response would further strengthen its security posture and user trust.

E

EcoPayz Georgia LLC

ecopayz.com

68

EcoPayz Georgia LLC operates a secure online payment platform offering personal and merchant accounts with multi-currency support and instant money transfers. The company targets individuals and merchants seeking reliable digital payment solutions, leveraging over 20 years of experience. The website is built on WordPress with modern SEO and multilingual capabilities, providing a good user experience and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy financial service provider.

Gen Re operates as a global reinsurer specializing in Life & Health and Property & Casualty insurance sectors. The website presents a professional and comprehensive overview of their services, including risk transfer solutions, consulting, underwriting, claims management, and educational resources. The company targets insurance professionals and companies seeking reinsurance expertise. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS and consented third-party scripts, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, suggesting a need for further verification of domain legitimacy. Overall, the website is well-structured, content-rich, and trustworthy from a user perspective but requires improvements in transparency and security disclosures.

E

ENME

enmehr.com

68

ENME is a technology company specializing in employee engagement software, offering a manager-first SaaS platform that uses pulse surveys to help organizations increase employee engagement, loyalty, and retention. The website positions ENME as a leading solution in the employee engagement market, targeting HR professionals and managers. The platform emphasizes real-time results and anonymous weekly questionnaires to employees. Technically, the website is built on the Unbounce platform, leveraging common web technologies such as jQuery and OwlCarousel, and integrates analytics tools like Google Analytics, Hotjar, and Leadfeeder. The site is mobile optimized and presents a professional design with consistent branding. Security-wise, the site uses HTTPS and standard tracking scripts but lacks advanced security headers and DNSSEC, which could be improved. Privacy and cookie policies are absent, indicating a gap in compliance. The domain is registered with GoDaddy since 2017, consistent with the business age and legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

Hire-Profi is a Latvia-based HR consulting company specializing in recruitment, HR outsourcing, personnel assessment, and mystery shopping services primarily targeting employers and job seekers within EU countries. The company has been operational since 2012 and maintains a professional web presence with clear service offerings and client testimonials. The website leverages modern frontend technologies including Bootstrap, jQuery, and Google reCAPTCHA to provide a secure and user-friendly experience. While HTTPS is enforced and forms are protected with reCAPTCHA, the absence of explicit security headers and privacy/cookie policies indicates areas for compliance and security improvement. Overall, the domain registration is consistent with the business history, and the company demonstrates moderate trustworthiness and professionalism.

E

Embedded Systems Solutions

embeddedindia.com

57

Embedded Systems Solutions is an established Indian company specializing in embedded hardware and software solutions for real-time systems, with a focus on automotive and industrial automation sectors. The company offers a broad portfolio of products including compilers, debuggers, emulators, evaluation boards, and protocol analyzers, supported by partnerships with recognized technology vendors. Their website reflects a medium-sized business with a professional but somewhat dated digital presence. Technically, the site uses legacy tools and basic modern web technologies, with moderate performance and limited mobile optimization. Security posture is average, lacking modern security headers and explicit privacy policies, though HTTPS usage is implied. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, despite the active business presence. Overall, the company appears credible with room for improvement in digital maturity and security compliance.

C

City Fitness Philadelphia

cityfitness.com

60

City Fitness Philadelphia is a well-established fitness club business founded in 2001, offering luxury gym facilities, diverse fitness classes, and expert training services primarily targeting fitness enthusiasts in the Philadelphia area. The business operates multiple club locations and provides membership plans, corporate programs, and private event hosting, positioning itself as a premium local gym brand. The website is professionally designed using WordPress with the Divi theme and integrates modern marketing and analytics tools such as HubSpot and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and domain protections like clientTransferProhibited status; however, there are gaps such as lack of DNSSEC, missing security headers, and absence of a vulnerability disclosure policy. Privacy compliance is basic with a privacy policy likely embedded in the member guide but no explicit cookie consent mechanism. Overall, the site is functional, trustworthy, and well-branded but could improve in security and privacy transparency to enhance user trust and regulatory compliance.

Devellar is an established outsourcing company founded in 2012, offering IT, marketing, consulting, ecommerce, and call center services. The company targets businesses seeking outsourcing solutions and positions itself with a portfolio of client success stories and a professional web presence. The website is built on WordPress, leveraging common technologies such as Bootstrap, jQuery, and Google Analytics, hosted on Amazon AWS infrastructure. The site demonstrates good content quality, clear navigation, and moderate mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy compliance areas.

Prime Recruitment is a small Australian recruitment agency focused on connecting top talent with leading employers. The website is currently under development, featuring a 'Coming Soon' page with basic contact information and branding. The company targets job seekers and employers within Australia, operating primarily as a recruitment service provider. Technically, the website is built on WordPress using Elementor and several popular plugins, indicating a modern but basic digital infrastructure. SEO metadata is well implemented, but the site lacks comprehensive content and user engagement features at this stage. Security posture is moderate with HTTPS enabled but missing key security headers and privacy compliance elements. There are no detected vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies is a compliance gap. Overall, the website is functional but minimal, requiring further development to enhance content, security, and compliance.

F

FuturAbility eG

hauska.com

50

FuturAbility eG is a cooperative organization based in Austria, founded in 2019, focused on driving collaboration for a sustainable future. The company invites experts, investors, institutions, and organizations to co-create strategies and fund projects that contribute to sustainability and societal impact. Their market position is niche, targeting sustainability-focused stakeholders with services including strategy co-creation, project funding, and impact improvement tools. The website reflects a professional and consistent brand image with good content quality and clear navigation.

I

IEM

iem.com

66

IEM is a well-established company specializing in emergency management, disaster recovery, and resilience services primarily for government and public sector clients. With over 40 years of experience, IEM offers a broad range of capabilities including digital citizen services, public health modeling, energy security planning, and law enforcement support. The company positions itself as a trusted partner to governments and businesses worldwide, aiming to build a safer and more resilient world. The website reflects this positioning with comprehensive service descriptions and a professional digital presence. Technically, the website is built on WordPress using the Themify Ultra theme and incorporates multiple plugins for enhanced functionality such as sliders, forms, cookie consent, and analytics. The site is mobile optimized and employs modern web technologies including Google Analytics and Tag Manager for tracking and performance insights. SEO practices are evident through structured data and meta tags, contributing to good search engine visibility. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks visible security headers and does not publish a security policy or vulnerability disclosure, which are areas for improvement. The cookie consent mechanism is robust, offering users detailed control over cookie categories, aligning with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, IEM's website demonstrates a mature digital infrastructure supporting its business goals, with room to enhance privacy and security transparency. Strategic recommendations include publishing a privacy policy, implementing security headers, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

F

Findanode

findanode.io

54

Findanode is a boutique communications and recruitment agency based in Riga, Latvia, serving clients primarily in the Baltics and the EU. The company offers a range of services including business consulting, marketing, brand management, communications, and recruitment, targeting businesses seeking to scale and improve their market presence. The website reflects a professional and modern digital presence built on WordPress with Elementor, incorporating standard marketing and analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS enabled and domain status protections, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present, indicating basic GDPR compliance, but no cookie consent mechanism is implemented. Contact information is clearly provided with multiple channels including emails, phone numbers, and a contact form. Overall, the website and business appear legitimate and well-positioned within their niche.

L

Local Initiatives Support Corporation

lisc.org

50

Local Initiatives Support Corporation (LISC) is a well-established non-profit organization focused on community development across the United States. It connects local groups with capital and technical expertise to foster inclusive, resilient communities. The organization operates in multiple sectors including affordable housing, economic development, education, health, and sustainability. LISC has a strong market position as a national leader with a history dating back to 1979 and operates several affiliate investment companies to bridge funding gaps in under-resourced communities. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel, with evidence of a Python-based CMS platform. The site is well-optimized for mobile and accessibility, with good SEO practices. Performance is moderate, and the site uses HTTPS with secure forms, though some security headers are not explicitly detected. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF protection on forms. However, it lacks visible security headers and an explicit cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection, but the domain and website content align with a legitimate, large non-profit entity. Overall, LISC's website is professional, trustworthy, and content-rich, supporting its mission and business model effectively. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

P

PDFSF Inc

pdfshareforms.com

60

PDF Share Forms (PDFSF Inc) is a specialized technology company providing PDF-based smart form solutions integrated with SharePoint and Office 365 environments. Established in 2010, the company positions itself as a strong alternative to InfoPath and Nintex, targeting enterprises seeking fixed-layout, compliant, and automated form workflows. Their offerings include cloud and on-premises deployments, with a focus on document management and business process automation. The website reflects a mature digital presence with professional design, multiple awards, and active social media engagement. Technically, the site uses modern web technologies including Tilda CMS, HubSpot, Google Analytics, and live chat integration, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain protection flags, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security transparency.

N

NESS

bregards.com

67

NESS is a Latvian communication agency specializing in multichannel business communication solutions, marketing automation, and customer engagement. The company targets businesses of all sizes, offering tools and services to enhance client retention and ROI through personalized communication channels such as SMS, email, WhatsApp, and web chat. With over 16 years of experience and a client base exceeding 500 companies, NESS positions itself as a reliable partner in the telecommunications and marketing technology sector. The website is professionally designed, multilingual, and optimized for user experience and SEO. Technically, it is built on WordPress with modern plugins and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS enforced and domain transfer protection, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are publicly listed, relying on a detailed contact form for inquiries. Overall, the site reflects a mature digital presence with moderate tracking and marketing tools integrated. Recommendations include enhancing security headers, publishing incident response policies, and improving direct contact transparency.

CFC Gift Card operates a niche retail business focused on buying and selling merchant gift cards and store credits for cash. Established around 2015, the company maintains physical store locations in multiple US states including Arizona, California, and Missouri. Their business model targets consumers with unwanted or unused gift cards, offering immediate cash in exchange, and buyers seeking discounted gift cards. The website is built on WordPress and integrates common technologies such as jQuery, Nivo Slider, Google Analytics, and Google Tag Manager, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses asynchronous loading of analytics scripts, but lacks explicit security headers such as Content-Security-Policy or HSTS. There is no visible privacy policy, cookie consent mechanism, or incident response information, indicating gaps in privacy compliance and security transparency. The absence of these policies may expose the business to regulatory risks, especially under GDPR or similar frameworks. Overall, the website is functional with good content quality, clear navigation, and consistent branding. However, the lack of privacy and security policies, combined with missing security headers, reduces the overall security posture and privacy compliance. The domain registration details align well with the business claims, supporting legitimacy. Strategic improvements in privacy disclosures, security headers, and incident response readiness are recommended to enhance trust and compliance.

S

SplitMetrics, Inc.

splitmetrics.com

70

SplitMetrics, Inc. is a technology company specializing in mobile app growth solutions, focusing on Apple Ads optimization, app launch validation, A/B testing, and app store optimization (ASO). The company offers a suite of products including SplitMetrics Acquire for Apple Ads automation, SplitMetrics Optimize for app testing, App Radar for ASO, and a dedicated agency service for fully managed app growth. Positioned as a trusted Apple Ads partner with AI-driven marketing solutions, SplitMetrics targets mobile-first companies, app publishers, and game developers seeking to scale user acquisition and improve marketing efficiency. Technically, the website is built on WordPress CMS, leveraging modern technologies such as Google Tag Manager and jQuery, hosted with Cloudflare DNS and GoDaddy registrar. The site demonstrates excellent performance, mobile optimization, and SEO practices, with a professional and consistent branding approach. The infrastructure supports a fast, accessible, and user-friendly experience. From a security perspective, the site enforces HTTPS with strong domain registration protections but lacks DNSSEC and some recommended security headers. There is no explicit incident response contact or vulnerability disclosure mechanism visible, which could be improved. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism was detected. Overall, SplitMetrics presents a mature, credible, and professional online presence with strong business credibility and technical implementation. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance their security posture and trustworthiness further.

S

Sabiedrība ar ierobežotu atbildību "TELMS"

telms.lv

45

SIA TELMS is a Latvian company specializing in energy-related construction and electrical installation services. Their offerings include trenchless technologies, general construction, electrical installation design, electromontage, and conference room rentals. The company presents itself as an established local business with over 20 years of experience in the energy construction sector. The website is functional with basic content and navigation but lacks advanced features such as privacy policies or detailed security disclosures. Technically, the site uses common open-source libraries like jQuery and Bootstrap but does not demonstrate advanced security headers or HTTPS enforcement details. The presence of a cookie consent banner indicates some awareness of privacy compliance, though no formal privacy policy is found. Contact information is clearly provided, enhancing business credibility. Overall, the site is moderately professional but could benefit from improved security and privacy practices.

M

Marshal Design

marshal.lv

52

Marshal Design is a Latvian creative agency specializing in advertising campaigns, graphic design, branding, audio and video production, and marketing strategy development. The company targets businesses seeking comprehensive creative and marketing services. The website presents a professional portfolio and client logos, indicating an established market presence since 2000. Technically, the site is built on WordPress, uses jQuery and Google services, and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of WHOIS data limits full trust assessment. Overall, the site is functional and professional but could improve in privacy and security transparency.

K

Kitman Thulema Latvia

koncept.lv

41

Kitman Thulema Latvia operates as a branch of the Estonian manufacturing company Kitman Thulema, specializing in metal processing and production of trade equipment, metal furniture, and office furniture. The company targets business clients requiring high-quality manufacturing and project-based services in Latvia and the Baltic region. The website is built on Joomla CMS and uses common JavaScript libraries for UI enhancements. It provides multilingual support and clear contact information, indicating a professional business presence. However, the absence of privacy and cookie policies and lack of visible security headers suggest gaps in compliance and security maturity. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a medium-sized manufacturing business with moderate digital maturity and a need for improved security and privacy practices.

G

GRENARDI LATVIA, SIA

grenardi.lv

57

Grenardi.lv is a well-established premium jewelry retailer operating primarily in the Baltic region with a strong online presence and physical stores. The company emphasizes trust and quality with over 20 years in business, offering a wide range of exclusive jewelry brands and collections. Their website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and multiple language options. The business model focuses on retail e-commerce complemented by customer support and European-wide delivery services. Technically, the site employs modern JavaScript libraries and analytics tools, including Cloudflare Turnstile for bot protection, Hotjar, Microsoft Clarity, and Piwik PRO for user behavior tracking, and integrates marketing automation via Klaviyo and Brevo.

B

Bloom Finance Ltd / PionPay OU

pion.finance

49

Pion Finance operates as a payment processing platform specializing in card and alternative payment methods, offering merchants a secure and efficient way to accept payments and make payouts globally. The company emphasizes PCI DSS Level 1 compliance and regulatory adherence in the UK and EU markets through Bloom Finance Ltd and PionPay OU. Their services include recurring payments, mass payouts, and a merchant dashboard, targeting online businesses seeking seamless payment solutions. Technically, the website is built on WordPress with the Divi theme, integrating modern technologies such as Google reCAPTCHA for security. The site is well-structured, mobile-optimized, and provides clear navigation, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is strong with HTTPS and PCI compliance, but incident response and vulnerability disclosure information are absent. Overall, the domain registration is privacy protected but consistent with the business profile, and the website presents a professional and trustworthy image with room for improvement in privacy compliance and security best practices.