Security Directory

K

Krka, tovarna zdravil, d. d., Novo mesto

krka.az

0

Krka Azerbaijan is a regional website representing Krka, a leading generic pharmaceutical company with approximately 70 years of experience. The company specializes in the development, manufacturing, and sales of prescription, over-the-counter, and veterinary pharmaceutical products. The website targets healthcare professionals and general consumers in Azerbaijan and provides comprehensive information about the company, its products, career opportunities, and sustainability initiatives. The site is professionally designed, mobile-optimized, and includes multiple language and country-specific links reflecting a global presence. Technically, the website is built on the Nuxt.js framework, leveraging modern JavaScript technologies and Google Tag Manager for analytics. The site demonstrates good performance, accessibility, and SEO optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some security headers are missing, and there is no explicit incident response or vulnerability disclosure information. Overall, the website is trustworthy and credible, supported by consistent WHOIS data that aligns with the company's identity and history. Privacy and cookie policies are present and reasonably comprehensive, indicating a commitment to GDPR compliance. Contact information is available, though no direct company emails are listed. Social media presence on LinkedIn, Instagram, and YouTube enhances brand visibility. Strategic recommendations include improving security headers, adding incident response contacts, and publishing a vulnerability disclosure policy to further strengthen security and compliance posture.

B

Betandreas

theconstructioncompany.org

0

Betandreas operates as an online casino and betting platform targeting Azerbaijani users, offering casino games, deposit bonuses, cashback, and mobile app downloads. The website is professionally designed with consistent branding and good content quality in Azerbaijani language. Technically, the site uses modern web technologies including Cloudflare DNS and CDN, Google Fonts, and JSON-LD structured data, but lacks explicit security headers and privacy policies. The security posture is moderate with HTTPS enabled and domain transfer protection, but missing key headers and documented policies. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the site is functional and moderately trustworthy but lacks transparency in privacy and contact information.

J

Jaguar AZƏRBAYCAN

jaguar-azerbaijan.com

0

Jaguar AZƏRBAYCAN represents the Jaguar automotive brand in Azerbaijan, providing brand information and vehicle sales services. The website is professionally designed using modern JavaScript frameworks such as Nuxt.js and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Twitter tracking. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy and transparency. Security posture is moderate with no detected security headers and unknown SSL configuration. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website serves its business purpose well but requires improvements in security and compliance to enhance trust and reduce risk.

Land Rover Azerbaijan operates as the official regional website for the Land Rover brand, focusing on luxury off-road vehicles such as Range Rover, Discovery, and Defender models. The website targets affluent customers in Azerbaijan interested in premium automotive products. The business model centers on brand representation and vehicle sales within the Azerbaijani market, supported by Jaguar Land Rover as the parent company. The site demonstrates consistent branding and professional content presentation, reinforcing its market position as a trusted luxury automotive provider in the region. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, leveraging Jaguar Land Rover's CDN infrastructure for media and fonts, which supports moderate performance and good mobile optimization. However, accessibility features are basic and could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and visible incident response or security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap for GDPR and regional data protection standards. Overall, the website is credible and professional but would benefit from enhanced privacy disclosures and security best practices to improve trust and compliance.

T

Thermona spol. s r.o.

thermona.az

0

Thermona spol. s r.o. is a well-established Czech manufacturer specializing in gas and electric boilers, serving residential and commercial heating needs primarily in Azerbaijan and other regional markets. The company emphasizes quality manufacturing, customer satisfaction, and adherence to standards since its founding in 1990. The website reflects a mature digital presence with multilingual support and regional partner sites. Technically, the site uses a legacy ASP.NET WebForms CMS with modern frontend libraries like jQuery and Bootstrap, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and CAPTCHA protections, though improvements in security headers and vulnerability disclosure are recommended. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and aligned with the business's market positioning.

T

Toyota Azərbaycan

toyota.az

0

Toyota Azərbaycan operates as the official Toyota brand presence in Azerbaijan, offering automobile sales and customer support services. The website reflects a strong market position as part of the global Toyota Motor Corporation, providing localized content and services to the Azerbaijani market. The site leverages advanced digital infrastructure including Adobe Experience Manager and Scene7 for media delivery, supported by modern analytics and monitoring tools such as Google Tag Manager and Datadog RUM. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit privacy and terms of service policies are not found in the provided content. Overall, the website presents a professional and trustworthy digital presence aligned with a large multinational automotive brand.

O

Obzor

ctreports.com

0

ctreports.com is an Azerbaijani-focused online casino informational and affiliate platform established in 2021. It provides comprehensive content about online casinos, including reviews, bonus offers, game strategies, and responsible gambling guidelines. The site targets mature users interested in online gambling within Azerbaijan, offering localized content in Azerbaijani language. Technically, the website uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and well-structured with clear navigation and SEO-friendly metadata. Security posture is moderate with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are present with consent mechanisms, though GDPR compliance is basic. Contact information is limited to an email address without phone or physical address details. Overall, the site demonstrates a professional approach to content and user experience but could improve security policies and transparency. The domain registration is consistent with the business model and age, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access.

M

mostbet-aze45.com

mostbet-aze-45.com

0

Mostbet-aze45.com is an online gambling and sports betting platform licensed in Curacao and operated by Bizbon N.V. The website targets Azerbaijani users and international customers, offering a wide range of betting services including sports, eSports, live casino, slots, poker, and fantasy sports. The platform supports multiple languages and currencies, providing a comprehensive gambling experience with bonuses and loyalty programs. Technically, the site is built on WordPress using the OceanWP theme and common plugins, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Business credibility is supported by licensing and detailed service descriptions, though direct contact details are limited. Overall, the site is functional and professional but would benefit from improved security and compliance measures.

П

Плинко - игра на деньги 1win

mostbetaze.com

0

Mostbetaze.com is a regional Azerbaijani online gambling and sports betting platform operated under the international Mostbet brand. The business offers a wide range of betting services including sports, esports, live casino, slots, and fantasy sports. It operates under a Curacao license and targets Azerbaijani users with localized language and payment options. The website is professionally designed with good content quality and mobile optimization, supporting Android and iOS apps. Technical infrastructure includes HTTPS and Cloudflare DNS, but lacks DNSSEC and some security headers. Contact information and business registration details are provided, enhancing credibility. However, privacy and cookie policies are missing, representing compliance gaps.

C

CARLETTA NV

pinupcasinos-az.com

0

Pin Up Casino Azerbaycan is an established online gambling platform targeting Azerbaijani players aged 18 and above. The business operates under the legal entity CARLETTA NV and holds a Curacao license (OGL/2024/580/0570), offering a wide range of casino games including slots, live casino, and sports betting. The website is built on WordPress and integrates modern tracking tools such as Google Tag Manager. It provides multiple payment options including local and cryptocurrency methods. The content is rich and professionally presented in Azerbaijani, with clear navigation and promotional offers. However, privacy compliance mechanisms such as cookie consent are lacking, and no explicit security policies or incident response contacts are publicly available.

F

Fast Lotto

fastloto-777.com

0

FastLoto is an Azerbaijani online lottery platform launched in 2024, offering frequent lottery draws, multiple game formats, bonuses, and VIP programs. It targets Azerbaijani players interested in fast and secure lottery gaming. The platform supports multiple payment methods and provides mobile applications for iOS and Android to enhance user experience. The website is built on WordPress and uses Cloudflare DNS services, with a moderate performance and good mobile optimization. Security features such as SSL encryption, two-factor authentication, and biometric login are highlighted, although some security headers are missing. Privacy compliance is limited due to the absence of a published privacy policy and terms of service. Overall, the platform appears legitimate and consistent with its domain registration data, but it lacks some transparency and formal documentation typical for regulated gambling services.

F

Fast Lotto

linkmink.com

0

FastLoto is a newly established online lottery platform based in Azerbaijan, offering frequent lottery draws, multiple game formats, and various bonuses to its users. The platform targets Azerbaijani lottery players seeking a modern and fast lottery experience. Technically, the website is built on WordPress, uses jQuery and Google Fonts, and is hosted with Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the platform employs HTTPS and SSL encryption, two-factor authentication, biometric login, and session management features, but lacks visible security headers and published security policies. Privacy compliance is limited due to the absence of privacy and terms of service pages. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

T

Trend News Agency

trend.az

0

Trend.az is a leading regional news agency focused on Azerbaijan and neighboring countries, providing news content in Russian with alternate language versions. The website offers news articles, video content via Trend TV, and a subscription-based news terminal service. The business model relies on advertising and subscription revenues, targeting Russian-speaking audiences interested in regional politics, economy, and society. Technically, the site employs modern analytics and advertising technologies including Google Analytics 4, Yandex Metrika, Google Publisher Tags, and Facebook SDK, with a cookie consent mechanism powered by CookieYes. Security posture is strong with HTTPS enforced, security headers present, and bot protection via Google reCAPTCHA. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact or incident response information is available. Overall, the site is professional, well-branded, and trustworthy, but could improve compliance transparency and accessibility.

S

SOCAR

socar.az

0

SOCAR is a leading European energy company specializing in the exploration, production, processing, transportation, and marketing of oil and petrochemical products primarily in Azerbaijan and international markets. The website reflects a mature digital presence with professional design, good content quality, and consistent branding. Technical infrastructure includes modern libraries such as jQuery, Font Awesome, Leaflet, and accessibility tools like the UserWay widget, indicating a commitment to usability and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit privacy, cookie, and incident response policies suggests room for improvement in compliance and transparency. Overall, the website supports SOCAR's market position as a major energy player with a trustworthy and professional online presence.

D

Day.Az

day.az

0

Day.Az is a regional news and information portal primarily serving Russian-speaking audiences interested in Azerbaijan, Armenia, and Georgia. The site offers a broad range of content including news articles, weather updates, financial data, flight schedules, and tourism information. It maintains a moderate market position as a diversified media platform with multiple linked services under the day.az domain. Technically, the website employs a modern tech stack including Bootstrap, Google Tag Manager, Yandex Metrika, and Google Publisher Tags, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is basic with a privacy policy and cookie consent mechanism in place but lacking comprehensive GDPR indicators. Overall, the site is professionally maintained with moderate user tracking and advertising integration, suitable for its business model. Strategic improvements in privacy transparency, security disclosures, and terms of service publication would enhance trust and compliance.

P

PASHA Real Estate Group

pashaconstruction.com

0

PASHA Real Estate Group is a prominent luxury real estate developer and property management company operating primarily in Azerbaijan with regional presence in Turkey, Georgia, Uzbekistan, and Montenegro. The company focuses on high-end residential projects, offering prime locations and world-class amenities. Their business model revolves around property development, investment opportunities, and concierge lifestyle services, positioning themselves as a premium brand in the real estate market. The website reflects a professional and consistent brand image, targeting affluent investors and buyers seeking luxury properties. Technically, the website is built on the Webflow platform, integrating modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and HubSpot forms. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and uses CAPTCHA for form protection, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy and GDPR consent checkbox, but lacks a cookie policy and explicit incident response information. Overall, the website presents a trustworthy and professional front for PASHA Real Estate Group, with a strong market position and clear business focus. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their digital maturity and compliance standing.

I

IFMST - International Federation of Municipalities Sports And Tourism

ifmst.org

0

IFMST is an international federation focused on promoting sports and tourism initiatives at the municipal level worldwide. The organization aims to improve quality of life, foster cultural exchange, and stimulate economic growth through local sports and tourism development. The website reflects a structured federation with departments, committees, and a calendar of events, targeting municipalities and stakeholders in sports and tourism sectors. Technically, the site is built on WordPress with Elementor and several plugins, hosted on a LiteSpeed server via Parspack. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security gap. The security posture is weak with no HSTS, no OCSP stapling, and missing security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact is primarily via social media and a contact form, with no explicit emails or phone numbers listed. Overall, the site is functional and content-rich but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

A

Aviasales.ru

aviasales.az

0

The website aviasales.az demonstrates significant security and compliance gaps, particularly in web security headers, GDPR compliance, and adherence to NIS2 cybersecurity frameworks. While network security and email configurations appear strong, the absence of critical policies and protective headers exposes the business to data breaches, regulatory penalties, and reputational damage.