Security Directory

S

STATS VADĪBAS SISTĒMAS

vefkvartals.lv

58

VEF KVARTĀLS operates as a real estate and event space rental business located in Riga, Latvia, targeting businesses and cultural event organizers. The company is part of the STATS group and offers office spaces and event venues within a historically significant industrial complex. The website is professionally designed using WordPress with modern SEO and multilingual capabilities, providing detailed descriptions of services and upcoming events. The business model focuses on leasing and event hosting, positioning itself as a key local player in the real estate and hospitality sectors. Technically, the site leverages popular plugins and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity.

STATS Rent is a Latvian company specializing in the rental of construction machinery and equipment, offering a broad range of products including tractor machinery with operators, lifting equipment, scaffolding, and various construction tools. The company operates multiple physical locations across Latvia, providing 24/7 customer support and additional services such as transport and equipment repair. Their website is built using modern web technologies, primarily React and Material-UI, and includes essential business information and partner affiliations. Technically, the website demonstrates a moderate level of digital maturity with responsive design, basic SEO, and integration of Google Tag Manager for analytics. However, there is room for improvement in security headers and accessibility features. The site uses HTTPS, but explicit security policies and vulnerability disclosure mechanisms are absent. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is addressed with visible cookie consent and privacy policy pages, indicating awareness of GDPR requirements. Overall, STATS Rent presents a professional and trustworthy online presence suitable for its market segment, though enhancing security practices and transparency would strengthen its risk posture and customer trust.

S

Social Driver

socialdriver.com

60

Social Driver is a Washington, DC-based digital marketing and communications agency specializing in social media, website design, video production, and communications strategy. The company targets associations, corporations, nonprofits, and businesses seeking to enhance their digital presence and engagement. Their market position is supported by a portfolio of notable clients and industry recognition, positioning them as a reputable mid-sized agency in the technology and media sectors. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Leadfeeder for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The absence of security headers and vulnerability disclosure policies suggests a moderate security posture. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, though the professional website content and contact information mitigate some risk. Overall, the website is professional, trustworthy, and well-structured, but improvements in security policies, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

C

City of Marietta

mariettaga.gov

64

The City of Marietta official website serves as a comprehensive portal for residents, visitors, and businesses to access city services, news, events, and government resources. The site is positioned as a trusted municipal government platform with a consistent brand and clear navigation. The technical infrastructure leverages CivicPlus CMS, jQuery, AlpineJS, and integrates Google Analytics and Microsoft Application Insights for analytics. Hosting and DNS are managed via Cloudflare, providing stability and security. Security posture is solid with HTTPS enforcement and anti-forgery tokens, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, suitable for its government audience.

C

Cobb County Georgia

cobbcounty.org

68

Cobb County Georgia operates an official government website serving as a comprehensive portal for residents, businesses, and visitors. The site provides detailed information about county governance, departments, public safety, courts, and community services. It targets local citizens and stakeholders, positioning itself as the authoritative source for county-related information and services. The website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Tag Manager and Siteimprove Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are not explicitly found, representing a compliance gap. WHOIS data is incomplete, which is unusual for a .gov domain, but the domain's .gov status and content strongly support legitimacy. Overall, the site is professional, trustworthy, and functional, with room for enhanced privacy compliance and security header implementation.

L

Laboratorios Espinos Y Bofill SA

lebsa.com

46

Lebsa is a well-established European manufacturer and supplier of Active Pharmaceutical Ingredients (APIs), operating since 1951 and headquartered in Barcelona, Spain. The company specializes in niche and tailor-made APIs, offering scalable production, regulatory support, and strategic R&D including flow chemistry. Their market position is that of a trusted, quality-focused API partner serving pharmaceutical and healthcare industries across Europe. Technically, the website is built on WordPress with modern tools such as Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, content-rich, and GDPR compliant, reflecting a credible and trustworthy business presence.

S

Stayfree & Carefree

stayfree.com

70

The website carefreelinersandpads.com represents the Stayfree & Carefree brand, specializing in feminine hygiene products such as liners and pads. The site is positioned as an e-commerce platform targeting women seeking period care and light bladder leakage solutions. The business model is retail-focused with a medium-sized market presence supported by a reputable parent company, Edgewell Personal Care. The site features a professional design with consistent branding and a clear product offering, supported by social media engagement and marketing integrations.

I

iWildCasino - The New Era of Online Casino

iwildcasino.com

56

iWildCasino is an online casino platform launched in 2021, targeting online gamblers and casino game enthusiasts. The website offers a variety of casino games and betting services, positioning itself as a new entrant in the online gambling market. The platform uses modern web technologies including Vue.js (Nuxt.js), Matomo analytics, Google Tag Manager, and Sentry for error tracking, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized and provides a good user experience with a professional design, although content depth is basic. Security posture is moderate with HTTPS enabled and Cloudflare protection, but lacks advanced security headers and published privacy or cookie policies. No contact or incident response information is visible, which impacts trust and compliance. WHOIS data shows the domain is relatively new but consistent with the business type and registered via a reputable registrar. Overall, the site is functional and professionally presented but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and regulatory adherence.

A

Ardevar Logo Ltd

olympusbet.com

66

Olympusbet is an established online gambling platform founded in 2012, offering a broad range of services including sports betting, online casino games, live casino, virtual sports, and e-sports betting. The platform targets primarily Finnish-speaking users but supports multiple languages, indicating a strategy to serve a wider international audience. The business operates under the brand associated with Ardevar Ltd, which appears as a powering partner on the site. The website demonstrates a professional design with good content quality and clear navigation, supporting a positive user experience.

V

Verde Casino — Play Online Casino Games for Real Money

verde-casino.com

67

Verde Casino is a recently established online casino platform launched in 2022, offering a variety of casino games, secure payment methods, and promotional offers targeting online gamblers. The website uses modern web technologies such as Next.js and React, hosted behind Cloudflare DNS services, and integrates popular analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Hotjar. While the site demonstrates a good level of technical implementation and mobile optimization, it lacks critical privacy and cookie policies, contact information, and explicit security headers, which impacts its overall trust and compliance posture. The domain registration is consistent with the business age and shows no suspicious patterns, but DNSSEC is not enabled, representing a minor security gap. Overall, the site is functional and moderately professional but requires improvements in privacy compliance and security transparency to enhance user trust and regulatory adherence.

W

Winshark

winshark.com

54

Winshark is an online casino platform offering a variety of gambling games including slots, roulette, poker, live casino, jackpot, and instant games. The platform targets online casino players and gambling enthusiasts, providing a modern and engaging gaming experience. The business is relatively new, founded in 2023, but operates on a domain registered since 2016, which is common for startups leveraging existing domains. The website is built as a single-page application using Angular 15, integrating multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, Visual Website Optimizer, OneSignal, and LiveChat, indicating a mature digital marketing approach.

D

Dublin Coding School

dublincoding.ie

58

Dublin Coding School is a specialized educational institution focused on providing programming courses tailored for adults seeking a career change. Founded in 2021 and based in Ireland, the school targets adult learners aiming to enter the technology sector through practical coding education. The website reflects a small but focused business model with consistent branding and a clear value proposition. Technically, the site is built on WordPress using the Astra theme, leveraging popular plugins such as Gravity Forms for contact and MailerLite for marketing automation. The infrastructure is hosted by Hosting Ireland, with a domain age consistent with the business founding date, indicating legitimacy and stability. Security posture is moderate, with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site presents a professional and trustworthy front but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

Shiperone

shiperone.com

63

Shiperone is a supply chain orchestration platform focused on streamlining supply chain operations through data instrumentation, accountability, and workflow automation. The company targets businesses seeking to optimize logistics, inventory planning, and order tracking. The website presents a professional and modern interface built on Webflow, leveraging technologies such as Google Tag Manager and Splide.js for enhanced user experience. While the site is well-designed and mobile-optimized, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which may impact user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and content-rich website mitigates some risk. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies.

A

Arcon

arconcontainer.com

57

ARCON Container is a technology-driven logistics company specializing in shipping container leasing, trading, and one-way container movement services primarily in India. It operates as part of the Saksham Group of Companies, a large logistics conglomerate. The website is professionally designed using WordPress with modern technologies including Google Analytics, Microsoft Clarity, and Zoho SalesIQ for customer engagement and analytics. Security measures such as HTTPS, reCAPTCHA, and anti-spam plugins are implemented, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data is a notable concern but the website's content and business information appear consistent and credible. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and security posture.

B

BOLT

bolt-tanks.com

50

BOLT is a Singapore-based company specializing in global liquid logistics solutions, focusing on ISO tank container leasing and sales for liquid and gas transport. Founded in 2014 and part of the Saksham Group, BOLT operates a modern fleet and offers services including global logistics, fleet management, heating and storage, and one-way rentals. The company targets industries such as chemical, oil and gas, pharmaceutical, food and beverage, and renewable energy sectors across Asia, Middle East, Africa, and Europe. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Analytics, Microsoft Clarity, and Zoho SalesIQ, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

S

Saksham Group

sakshamgroup.in

47

Saksham Group is a well-established global logistics conglomerate headquartered in Mumbai, India, with over 27 years of experience and operations spanning more than 275 port cities across 84 countries. The company offers a broad range of integrated logistics services including project cargo, liquid and chemical transportation, freight forwarding, container leasing, shipping services, and vessel operations. Their business model leverages multiple specialized subsidiaries and brands to provide comprehensive solutions to their clients worldwide. The website reflects a professional and consistent brand image targeting businesses requiring complex logistics and shipping services. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good navigation and content quality, although SEO and accessibility features are basic. No CMS or hosting provider details were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks visible security headers and incident response contacts. No privacy or cookie policies were found, indicating gaps in compliance with privacy regulations such as GDPR. The absence of forms on the homepage reduces immediate attack surface, but overall security posture could be enhanced by implementing standard security headers, privacy policies, and incident response mechanisms. Overall, the website is functional and professional but would benefit from improved privacy compliance and security best practices to enhance trust and reduce risk.

S

Sarjak Container Lines

sebertshipping.com

55

Sarjak Container Lines is an established project logistics company based in India, founded in 2003, specializing in freight forwarding and global shipping solutions. The company positions itself as a leading provider in the Indian logistics sector, offering key services such as odd dimensional containerized cargo, breakbulk and chartering, heavylift on container vessels, and end-to-end project logistics. Their target audience primarily includes businesses requiring specialized logistics and freight forwarding services both domestically and internationally. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Google Tag Manager, supporting data-driven decision making. The website is mobile optimized with good SEO practices and a clear navigation structure, providing a positive user experience. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protection enabled. Cookie consent mechanisms are implemented with granular user controls, supporting GDPR compliance. However, there is room for improvement in security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid business credibility and technical maturity with a good security posture. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

M

Merit Pages, Inc.

meritpages.com

64

Merit Pages, Inc. operates a SaaS platform focused on higher education marketing, enabling institutions to publish and distribute personalized student success stories to increase enrollment, donor engagement, and media visibility. The company targets universities and colleges primarily in the United States, positioning itself as a niche provider in the education technology sector. The website is built on Squarespace and integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, Ontraport, and HelpScout Beacon, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS but lacks several important security headers such as HSTS, Content-Security-Policy, and X-Frame-Options, which could be improved to enhance protection against common web threats. No sensitive data exposure or vulnerable libraries were detected, and no forms on the homepage collect personal data, reducing immediate risk. However, the absence of a cookie consent banner despite tracking scripts indicates a gap in privacy compliance. The WHOIS data is notably absent, with no registrar or registrant information available, which is inconsistent with the active and professional nature of the website. This raises some legitimacy concerns and suggests the domain may be privacy protected or recently registered without public WHOIS data. Overall, the website presents a professional front with good content quality and user experience but would benefit from enhanced security and privacy compliance measures. Strategic recommendations include enabling critical security headers, implementing a cookie consent mechanism to comply with privacy regulations, verifying and publishing WHOIS registrant information to improve trust, and establishing clear security and incident response policies to strengthen the security posture and business credibility.

B

Brain Games LV

brain-games.lv

55

Brain Games LV operates as a prominent e-commerce retailer specializing in board games, puzzles, and family-oriented strategy games primarily targeting Latvian customers. The website is built on the Shopify platform, leveraging a modern and well-supported technical infrastructure that includes multiple marketing and analytics integrations such as Google Analytics, Hotjar, TikTok Pixel, and Microsoft Clarity. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy available in Latvian. Security posture is strong with HTTPS enforced and secure cookie practices, though explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website presents a professional and trustworthy online retail experience with moderate to good technical and security maturity.

B

Brain Games OÜ

brain-games.ee

58

Brain Games OÜ operates Estonia's first dedicated board game retail e-commerce platform, offering a wide selection of board games, children's games, family games, and puzzles. The company positions itself as a leading retailer in this niche market within Estonia, targeting consumers interested in gaming and family entertainment. The website is built on the Shopify platform, leveraging a modern and well-maintained technical infrastructure with integrations for analytics, marketing, and customer reviews. The digital maturity is solid, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not published. Overall, the site demonstrates a professional and trustworthy online presence with extensive tracking and marketing tools in use.

G

Growave

socialshopwave.com

69

Growave is a mature SaaS retention platform focused on Shopify Plus brands, offering a comprehensive suite of loyalty, referral, wishlist, review, and user-generated content tools. The company positions itself as an enterprise-grade solution with deep Shopify integration and a strong customer base of over 15,000 brands, including notable enterprises. The website is professionally designed, mobile-optimized, and rich in content, including detailed product descriptions, case studies, and customer testimonials, reflecting a high level of digital maturity. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and cookie consent frameworks, ensuring good performance and SEO optimization. The platform integrates with multiple marketing and analytics tools, indicating a robust digital marketing infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and dedicated security policies are not explicitly found, suggesting room for improvement. Overall, the website and business demonstrate a high level of professionalism and trustworthiness. The lack of publicly available WHOIS data due to privacy protection is typical for SaaS businesses and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

D

DS Market

displaystandsmarket.com

63

DisplayStandsMarket.com is a niche retail e-commerce platform specializing in display stands, retail shelving, and digital signage products. The website targets retail businesses and suppliers seeking display solutions. The business appears to be relatively new, founded around 2022, and operates a WooCommerce-based marketplace with a focus on supplier catalog browsing. The site demonstrates a consistent brand presence and good content quality with clear product offerings. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and Google services for analytics and advertising. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security policies or vulnerability disclosures. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is functional and professional but would benefit from enhanced privacy and security transparency.

N

NetCredit.LV Kredītu Salīdzināšanas Portāls

netcredit.lv

53

Netcredit.lv operates as a Latvian credit comparison portal specializing in non-bank loans and various credit products. The platform offers users a credit calculator and aggregates loan offers to facilitate informed borrowing decisions. The website targets Latvian consumers seeking convenient access to loan information and comparison tools. Technically, the site is built on WordPress and integrates modern analytics and marketing technologies such as Google Analytics, Facebook Pixel, Hotjar, and OneSignal push notifications. The site is secured with HTTPS and employs standard security headers, reflecting a good security posture. However, the absence of publicly accessible WHOIS data and lack of explicit privacy and terms of service pages indicate areas for improvement in transparency and compliance. Overall, the site presents a professional and functional user experience with moderate risk due to limited public business and compliance information.

F

FromMe

fromme.lv

59

FromMe.lv is a Latvian e-commerce platform specializing in the sale of gift cards and gift experiences from over 200 partner companies across Latvia. The website offers a broad selection of gift categories targeting various recipient groups such as men, women, children, couples, and corporate clients. The business model focuses on providing convenient online purchase and fast email delivery of gift cards, positioning itself as a leading gift card marketplace in Latvia. The site is well-branded, with consistent design and clear navigation, supporting both Latvian and Russian languages. Social media presence and marketing integrations indicate active customer engagement and digital marketing efforts. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and marketing tools including Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and PureChat. The site is served over HTTPS with good SSL configuration, though explicit security headers are not detected. Mobile optimization and SEO practices are good, contributing to a positive user experience. However, accessibility features are basic and could be improved. Security posture is solid with HTTPS enforcement and no visible sensitive data exposure. The absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Privacy and cookie policies are present and appear comprehensive and GDPR compliant, supporting user privacy and consent management. Overall, FromMe.lv presents a trustworthy and professional online retail platform with a strong market position in Latvia. The lack of WHOIS data due to query limits limits domain registration analysis, but website content and business indicators support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, improving accessibility, and maintaining regular security audits to strengthen the security posture further.

H

Hidrolab

hidrolab.com

44

Hidrolab is a Spanish-language laboratory service provider specializing in sampling and analysis of water, soil, sediments, mining, food, air, and cannabis. The company appears to be a small-sized business founded around 2018, targeting clients needing reliable environmental and food testing services. The website is built on WordPress with a professional design and good SEO practices, leveraging plugins such as Yoast SEO and Bold Page Builder, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides relevant content in Spanish, though no explicit contact or privacy policies were found in the provided HTML content. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy compliance indicators. The WHOIS data is missing or indicates the domain is unregistered or privacy-protected, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

O

Organica sa

organica.technology

62

Organica sa operates the website organica.technology, offering the Organon software package, a modular integrated management and communication solution targeting companies, associations, and institutions. The business emphasizes modularity, allowing clients to select functional modules such as CRM, ERP, document management, and event organization. The company is based in Belgium and founded in 2021, with a market position supported by over 30 years of experience and a client base including reputable organizations. Technically, the website uses a modern but basic tech stack including jQuery, Google Tag Manager, Google Analytics, and Google Maps API. The site is hosted by OVH SAS and shows moderate performance with good mobile optimization and SEO practices. However, no CMS or advanced frameworks were detected. Accessibility is basic and could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers such as Content-Security-Policy or X-Frame-Options. No security or incident response policies are published, and no vulnerability disclosure or security.txt files are present. Cookie consent is implemented with user options, indicating some privacy compliance, but GDPR compliance could be enhanced with clearer policies and data retention disclosures. Overall, the website is professional and trustworthy with consistent WHOIS data and clear business information. Security posture is moderate with room for improvement in headers and policy transparency. The site is not blocked by WAF or security mechanisms, allowing full content access and analysis.

B

Braavo! Plataforma de Ecommerce - Moda e Acessórios

braavo.com.br

51

Braavo! is a specialized e-commerce platform focused on the fashion and accessories sector in Brazil, operating for approximately 16 years under the Grupo Magazord umbrella. The platform offers a comprehensive ecosystem including payment processing, antifraud, shipping integration, and a dedicated mobile app, supported by humanized WhatsApp customer service. Braavo! serves over 500 retailers and has facilitated over half a billion Brazilian Reais in sales, positioning itself as a trusted and established player in the Brazilian e-commerce market. Technically, the website is built on WordPress with modern SEO and marketing integrations such as Google Tag Manager and Facebook Pixel, hosted likely on AWS infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, Braavo! presents a professional and credible online presence with room for improvement in privacy and security transparency.

The British Council Latvia website serves as the official online presence of the British Council's Latvian branch, promoting cultural, educational, and artistic exchange between the UK and Latvia. The organization operates as a non-profit entity focused on fostering trust and understanding through arts, education, and creative skills development. The website reflects a medium-sized organization with consistent branding and professional content tailored to Latvian residents interested in British cultural programs. Technically, the website is built on the Drupal CMS platform, integrating modern technologies such as Google Tag Manager and OneTrust for cookie consent management. Hosting appears to leverage Akamai's CDN services, contributing to moderate performance and good mobile optimization. The site includes comprehensive privacy and cookie policies, demonstrating GDPR compliance and user consent mechanisms. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks explicit security policies or incident response contacts, which could enhance transparency and trust. No vulnerabilities or suspicious activities were detected in the accessible content. Overall, the website presents a trustworthy and professional digital presence aligned with the British Council's global standards. The absence of WHOIS data limits domain registration analysis, but the site's content and branding strongly support its legitimacy. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and providing incident response contacts to further strengthen security posture and user trust.

D

Durham University

dur.ac.uk

65

Durham University operates as a prestigious higher education institution in the United Kingdom, offering a wide range of undergraduate, postgraduate, and research programs. The website reflects a mature digital presence with comprehensive content targeting prospective students, current students, researchers, and alumni. The institution emphasizes global partnerships, student support, and research impact, positioning itself as a leading academic entity. The domain's long registration history and direct registration with Nominet reinforce its legitimacy and trustworthiness. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and tracking tools, and is optimized for mobile and accessibility standards. However, explicit privacy, cookie, and security policies are not evident in the provided content, which may impact compliance and user trust. Security posture is strong with HTTPS and best practices observed, but could be improved with clearer policy disclosures and security headers. Overall, the website is professional, content-rich, and credible, with room for enhanced privacy transparency and incident response readiness.

C

Collector

collector.lv

49

Collector.lv is an e-commerce retail website specializing in products for coin and banknote collectors. The site offers a wide range of numismatic supplies including coins, albums, coin boxes, capsules, magnifiers, and literature. The business targets collectors primarily in Latvia but offers international shipping, positioning itself as a niche market player in the numismatic retail sector. The website is professionally designed with clear navigation, multilingual support (English and Latvian), and a product-rich catalog. Technical infrastructure is based on Magento CMS with common frontend libraries such as jQuery and Prototype.js, and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enabled and cookie consent implemented, though lacks some advanced security headers. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a legitimate and professional online retail presence with room for improvement in privacy policy transparency and security header implementation.

N

Neomājas

neomajas.lv

47

Neomājas is a Latvian company specializing in the sale and installation of wooden garden houses, saunas, garages, playgrounds, and related wooden constructions. The company targets customers in Latvia and surrounding regions seeking quality wooden leisure and garden products. Their business model combines e-commerce with direct sales and installation services, positioning them as a medium-sized regional supplier with a diverse product catalog. Technically, the website is built on the Magento platform, utilizing common JavaScript libraries such as jQuery and Prototype.js, and integrates marketing and analytics tools like Google Analytics, Google Tag Manager, and Facebook SDK. The site employs HTTPS and a cookie consent mechanism, indicating basic privacy compliance. However, explicit security policies and incident response information are not found, and WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website demonstrates good content quality, technical implementation, and business credibility, with room for improvement in security headers and privacy transparency.

B

Bionorica SE

bionorica.com

51

Bionorica SE is a well-established German company specializing in the development and manufacture of herbal medicinal products using their proprietary Phytoneering process. The company positions itself as a global leader in evidence-based phytopharmaceuticals, targeting healthcare professionals and patients interested in natural remedies. Their website reflects a mature digital presence built on Drupal 9, featuring comprehensive content about their products, sustainability efforts, and corporate philosophy. Technically, the site uses modern libraries and frameworks, is mobile optimized, and includes cookie consent mechanisms compliant with GDPR. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though some security headers and explicit policies could be improved. WHOIS data confirms domain legitimacy with a long registration history consistent with the company's founding date. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market position.

S

Stena Line Freight

stenalinefreight.com

62

Stena Line Freight is a well-established European freight ferry and shipping logistics provider with a large route network connecting key ports across Europe. The company offers a range of services including shipping logistics, intermodal solutions, customer support systems, and customs services, positioning itself as a major player in the transportation sector. The website reflects a mature digital presence built on WordPress, leveraging modern tracking and marketing tools with appropriate privacy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company’s credibility and market position.

D

DFDS A/S

dfdsseaways.com

78

DFDS A/S operates a comprehensive European ferry and cruise service network, positioning itself as a leading ferry operator with multiple routes connecting the UK, Scandinavia, the Baltics, and other European destinations. The website offers detailed information on passenger and freight ferry services, mini cruises, package holidays, and onboard amenities, targeting travelers and logistics customers. The company demonstrates strong market presence and brand consistency, supported by industry recognition such as the World’s Leading Ferry Operator nomination for 2025. Technically, the website is built on modern frameworks including React and Gatsby, leveraging Contentful CMS and integrating Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data limits domain trust analysis; however, the professional site content, comprehensive privacy and cookie policies, and active social media presence strongly indicate a legitimate and credible business. Overall, the site reflects a mature digital infrastructure aligned with business goals and compliance requirements.

V

Viking Line

vikingline.ee

58

Viking Line is a well-established transportation company specializing in ferry and cruise services across the Baltic Sea region, including routes to Helsinki, Stockholm, and Åland. The website reflects a mature digital presence with multi-language support targeting Nordic and Baltic markets. Key services include line ferry trips, cruises, hotel packages, and group travel, positioning Viking Line as a major regional player in maritime passenger transport. The website content is professionally structured and relevant to its target audience of travelers and business clients. Technically, the site uses modern web technologies such as Cookiebot for cookie consent management and Google Tag Manager for analytics, with a custom or proprietary CMS. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business's long history. Overall, Viking Line's website is professional, secure, and compliant, supporting its business credibility and customer trust.

S

Sarjak Container Lines

sarjak.com

54

Sarjak Container Lines is a well-established project logistics company founded in 2003 in India, specializing in oversized and out-of-gauge cargo transport, freight forwarding, and global shipping solutions. The company has grown to become a leader in end-to-end project logistics with a specialized fleet and a global footprint. Their website reflects a mature digital presence built on WordPress with Elementor, incorporating SEO best practices and modern tracking tools. Security posture is good with HTTPS and client transfer protection on the domain, though improvements such as DNSSEC and CSP headers are recommended. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Contact information is primarily via web forms, with social media presence on LinkedIn. Overall, the website and domain data indicate a legitimate, professional business with moderate to good technical and security maturity.

O

Ocean Network Express Pte. Ltd.

one-line.com

70

Ocean Network Express Pte. Ltd. (ONE) operates as a leading global container liner shipping company, providing comprehensive ocean and intermodal freight services. The company maintains a large fleet and extensive port network, targeting businesses requiring reliable global logistics solutions. The website demonstrates a mature digital presence built on Drupal 10, integrating modern analytics and marketing tools such as Google Analytics, Heap Analytics, and Salesforce Live Chat. The site is well-structured, mobile-optimized, and professionally designed, reflecting the company's market position and service offerings. Security posture is solid with HTTPS enforced and secure forms, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for enterprises. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting ONE's business credibility and customer engagement.

J

JANDL

jandlagency.com

44

JANDL is an independent advertising agency specializing in marketing and communication services, including strategy, storytelling, social media, development, and visual arts. Originating from Bratislava, it has expanded internationally with offices in Prague and Vienna. The website reflects a professional digital presence with modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The technical infrastructure is moderately optimized with good mobile responsiveness and basic accessibility features. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though security headers are lacking. Privacy compliance is minimal, with no privacy policy or terms of service pages detected, but a cookie consent mechanism is present. The absence of WHOIS registration data is a significant concern, impacting the trustworthiness and legitimacy of the domain. Overall, the website is functional and professional but requires improvements in transparency and compliance to enhance credibility.

360 Cities Holding B.V. operates a specialized media platform focused on high-resolution panoramic and gigapixel photography, serving a global audience of photography enthusiasts, businesses, and tourists. The platform offers a marketplace for licensing panoramic images, commissioning custom gigapixel photos, and supports a community of professional photographers. The website demonstrates a consistent brand presence and professional content quality, positioning itself as a leading provider in the panoramic photography niche. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, integrates Google Analytics and Tag Manager for user tracking, and uses Disqus for community comments. Hosting and domain management are stable with DreamHost as registrar and Cloudflare DNS services, though DNSSEC is not enabled. The site is mobile responsive and SEO optimized, providing a good user experience. From a security perspective, HTTPS is enforced and domain transfer is protected, but the absence of DNSSEC and security headers indicates room for improvement. No explicit security policies or incident response information are published, and no vulnerability disclosure mechanisms are evident. Privacy compliance is addressed with a clear privacy policy and cookie consent banner, though GDPR-specific details are limited. Overall, the website is trustworthy and professionally managed, with moderate tracking and advertising practices. Strategic improvements in security hardening and transparency would enhance the platform's risk posture and user trust.

P

Podravka d.d.

podravka.com

53

Podravka d.d. is a well-established Croatian food processing and pharmaceutical company with a strong international presence in over 60 markets and a portfolio of more than 1000 products. The company emphasizes sustainable development and social responsibility, targeting consumers seeking high-quality food and pharmaceutical products. The website reflects a mature digital presence with multiple language options and comprehensive content about products, corporate responsibility, and investor relations. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. The WHOIS data for the domain is missing or unavailable, which is unusual but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve trust and compliance.

P

Playtex US

playtextampons.com

70

Playtex US operates a professional e-commerce website focused on retailing Playtex Sport Tampons, targeting athletic women seeking reliable feminine hygiene products. The site is built on the Shopify platform, leveraging modern web technologies and CDN hosting to deliver a performant and mobile-optimized user experience. The brand maintains a consistent and professional online presence with integrated social media channels and marketing tools. Security posture is solid with HTTPS enforced and domain registration protections in place, though explicit security headers and incident response policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service documentation. Overall, the website reflects a mature retail operation with room for improvement in privacy and security transparency.

L

LEBSA and SELECTCHEMIE

ccureapi.com

48

CCURE API® is a European-focused pharmaceutical API provider specializing in Venetoclax and Letermovir, leveraging the combined expertise of LEBSA and SELECTCHEMIE. The company positions itself as a secure, sustainable, and quality-driven supplier with a strong emphasis on client relationships and supply chain control. The website reflects a medium-sized business with a professional digital presence, though lacking explicit privacy and security policy disclosures. Technically, the site uses established but somewhat dated technologies and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement, especially regarding HTTPS enforcement on all resources and security headers. Overall, the domain registration and business information align well, supporting legitimacy.

J

Jackrabbit Design

jumpingjackrabbit.com

69

Jackrabbit Design is a Boston-based full-service branding agency specializing in graphic design, marketing, web design, web development, and strategic marketing communications. The company targets businesses and organizations seeking comprehensive branding and marketing solutions. Their market position is that of an established regional agency with a diverse portfolio of notable clients and a broad range of creative services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress and uses modern technologies such as jQuery, Google Tag Manager, and Cookiebot for analytics and compliance. The site is mobile optimized with good SEO practices implemented via the Rank Math plugin. Performance is moderate, and accessibility is basic but functional. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the security posture is moderate with room for improvement in security headers and transparency. The overall risk assessment is moderate. The main concern is the missing WHOIS data which should be verified externally. Strategic recommendations include implementing security headers, publishing security policies, adding a security.txt file, enhancing accessibility, and auditing third-party scripts regularly to maintain security and trust.

A

American Academy of Otolaryngology-Head and Neck Surgery

entnet.org

64

The American Academy of Otolaryngology-Head and Neck Surgery (AAO-HNS) operates a comprehensive and professionally designed website serving as the primary digital presence for the world's largest organization representing specialists in ear, nose, throat, and related head and neck care. The site offers extensive educational resources, advocacy information, clinical guidelines, and member engagement tools, positioning the Academy as a leader in its healthcare specialty. The business model focuses on professional development, research, and public education, targeting otolaryngologists, healthcare professionals, and patients seeking ENT care. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Algolia search, HubSpot analytics, and multiple third-party integrations for marketing and user engagement. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, secure login mechanisms, and cookie consent compliance, though some security headers could be enhanced for improved protection. Overall, the security posture is robust with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data is unavailable or privacy-protected, which is typical for professional organizations and does not detract from the site's legitimacy. The site maintains high trustworthiness through consistent branding, professional content, and transparent contact information. Strategically, the Academy should consider enhancing security headers, increasing incident response visibility, and continuing to monitor third-party scripts for vulnerabilities to maintain and improve its security and compliance posture. The website effectively supports the Academy's mission and market position, providing a trustworthy and authoritative resource for its community.

C

Congress of Neurological Surgeons

cns.org

59

The Congress of Neurological Surgeons (CNS) operates as a leading professional society dedicated to advancing the field of neurosurgery through education, scientific exchange, advocacy, and professional development. The organization serves a global audience of neurosurgeons, residents, fellows, and medical students, providing a comprehensive suite of services including annual meetings, online education, publications, clinical guidelines, and leadership programs. CNS maintains a strong market position as a preeminent neurosurgical society with extensive corporate partnerships and a robust digital presence. Technically, the CNS website is built on a mature ASP.NET WebForms platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing. The site is mobile responsive, well-structured, and optimized for SEO and accessibility at a basic level. Hosting utilizes Amazon Cloudfront CDN for asset delivery, contributing to moderate performance. From a security perspective, the site enforces HTTPS and employs standard best practices such as cookie consent mechanisms and secure form handling. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and GDPR indicators. Overall, CNS presents a trustworthy and professional online presence with high-quality content and strong business credibility. The lack of WHOIS data is mitigated by the organization's transparency and extensive contact information. Strategic recommendations include enhancing security headers, improving accessibility features, and maintaining vigilance on third-party scripts to sustain security and compliance.

C

CityBee

citybee.lv

73

CityBee is a Latvian car-sharing service offering vehicle rental solutions primarily targeting local residents and visitors. The website presents a professional and consistent brand image with a clear focus on transportation services. The business operates in the transportation sector with a medium market presence and was founded around 2021. The website is built on WordPress and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism via Cookiebot, indicating a moderate level of digital maturity. From a security perspective, the website uses HTTPS, which is mandatory for secure communications. However, no explicit security headers were detected in the HTML content, and there is a lack of visible contact information for incident response or security policies. The absence of a published privacy policy and terms of service reduces the privacy compliance score, although the cookie consent banner suggests some GDPR awareness. No WHOIS data was available due to query limits, limiting the ability to fully verify domain legitimacy and registration details. Overall, the website is functional, well-designed, and provides relevant content for its target audience. The security posture is moderate but could be improved by implementing additional security headers, publishing privacy and terms documents, and providing clear contact information. The risk assessment indicates a generally trustworthy site with room for compliance and security enhancements.

F

Ferrus

ferrus.lv

68

Ferrus is a Latvian e-commerce retailer specializing in tractors, agricultural machinery, garden equipment, and related accessories. The company positions itself as the official dealer for prominent brands such as KIOTI and TORO in Latvia, targeting agricultural professionals and municipal customers. Their website is built on the Shopify platform, leveraging modern e-commerce technologies and integrating multiple marketing and analytics tools to enhance customer engagement and sales performance. The site features clear navigation, product categorization, and customer testimonials, reflecting a professional and trustworthy business presence. Technically, the website demonstrates good mobile optimization, moderate performance, and basic accessibility features. Security measures include HTTPS enforcement, hCaptcha integration for form protection, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data due to query limits limits domain registration verification, but the overall digital footprint suggests legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance to further strengthen the security posture and customer trust.

P

Patchworks

wearepatchworks.com

70

Patchworks is a UK-based technology company specializing in ecommerce integration platforms (iPaaS) designed for fast-growing retail businesses. Their platform offers a comprehensive suite of integration services including embedded iPaaS, blueprints, connector marketplaces, and custom scripting capabilities. Positioned as a leading integration provider in the retail sector, Patchworks targets ecommerce businesses seeking to automate and streamline operations. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive service descriptions. Technically, the site is built on Shopify, leveraging modern JavaScript frameworks, SEO optimizations, and analytics tools such as Google Tag Manager and HubSpot. Security posture is strong with HTTPS enforcement, security headers, and form protection via hCaptcha. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit security policies and incident response contacts are not publicly available. Overall, Patchworks presents a credible and professional business platform with minor gaps in transparency around domain registration and security disclosures.

C

Codex

codex.lv

54

Codex is a technology company specializing in full potential software engineering (P3) and innovative IT solutions targeted at businesses in the Baltic region. Their offerings include information system development, maintenance, integrations, audits, and DevOps services. The company positions itself as a leading IT solutions provider in the Baltics with a strong focus on efficiency, growth, and digital transformation. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins for performance and multilingual support, and it uses Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. The company holds multiple ISO certifications, enhancing trust and credibility. Overall, Codex presents a strong business and technical profile with room for improvement in transparency around security policies and incident response.

(

(주)인덱스코리아 / Maximus Korea

maximusess.co.kr

58

Maximus Korea, operated by (주)인덱스코리아, is a government-recognized partner providing comprehensive employment support services under the 국민취업지원제도 (National Employment Support System) in South Korea. The company leverages its global presence and local expertise to assist job seekers with counseling, training, and financial support. The website reflects a professional and consistent brand image targeting Korean job seekers aged 15 to 69, emphasizing government-backed employment assistance. Technically, the website employs modern JavaScript libraries such as jQuery, FontAwesome, and Google services including reCAPTCHA and Tag Manager, indicating a mature digital infrastructure. The site is hosted via Gabia, a reputable Korean registrar and hosting provider, and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism, which may pose GDPR compliance risks. Overall, the website is trustworthy and professionally maintained with transparent WHOIS data matching the business claims. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.