Skip to main content

Is e-khanate.com a Scam? Security Check Results - E-Khanate WorldWide Reviews

e-khanate.com favicon

Is e-khanate.com Safe? Security Analysis for E-Khanate WorldWide

Check if e-khanate.com is a scam or legitimate. Free security scan and reviews.

Real EstateLatviasmall
WordPress 6.8.2Elementor 3.30.2Yoast SEO 25.4jQuery 3.7.1Auxin Theme and Plugins+2 more
Analyzed 7/30/2025Completed 11:34:02 PM
37
Security Score
HIGH RISK

AI Summary

E-Khanate WorldWide is a professional business consultancy firm based in Riga, Latvia, specializing in European market strategy, alliances, and advisory services. The company targets private and public companies, entrepreneurs, and business organizations seeking to establish or expand their presence in Europe. Their key services include market research, strategic alliances, partner identification, marketing planning, brand development, and market penetration. The website reflects a consistent and professional brand image with a clear focus on business consultancy in the European landscape. Technically, the website is built on WordPress with Elementor and uses modern web technologies and SEO best practices. Hosting is provided by GoDaddy, and the site is HTTPS enabled, ensuring secure communications. Mobile optimization and user experience are good, though accessibility features are basic. The site includes cookie consent mechanisms but lacks a visible privacy policy and security policy pages, which are important for compliance and trust. From a security perspective, the site has a good SSL configuration but lacks DNSSEC and security headers, which are recommended to enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history. Overall, the site is trustworthy but would benefit from improved privacy compliance and security transparency. The overall risk is moderate with no signs of malicious activity, but strategic improvements in privacy policy publication, security headers, and incident response information are advised to strengthen compliance and user trust.

Detected Technologies

WordPress 6.8.2Elementor 3.30.2Yoast SEO 25.4jQuery 3.7.1Auxin Theme and PluginsHappy Elementor AddonsFormidable Forms

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

E-Khanate WorldWide positions itself as a niche consultancy firm focusing on the European business environment, leveraging local expertise in Riga, Latvia. Their competitive advantage lies in deep knowledge of European regulatory frameworks and market trends, enabling them to assist clients in navigating complex business landscapes. The business model is service-oriented, targeting SMEs and larger organizations seeking market entry or expansion. Revenue streams likely derive from consultancy fees and strategic advisory engagements. The company maintains an active social media presence, enhancing brand visibility and client engagement. Growth indicators include a diverse portfolio of projects spanning real estate, energy, marketing, and technology sectors. Partnerships and alliances are emphasized, though no explicit partner domains were identified. The company appears to operate as a small-sized entity with a focused regional market presence.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

e*****@e-khanate.com

Phone Numbers (1)

+3716719****

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate security maturity level with HTTPS enabled and no visible exposure of sensitive data. However, the absence of DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options represents potential security gaps. There is no published security policy or incident response contact, which limits transparency and preparedness for security incidents. GDPR compliance is partially addressed through cookie consent but lacks a formal privacy policy. No vulnerability disclosure or security.txt file is present, reducing avenues for responsible vulnerability reporting. Overall, the security posture is adequate for a small consultancy but requires enhancements to meet best practices and regulatory expectations.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a comprehensive privacy policy page to improve GDPR compliance and user trust.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

E-Khanate WorldWide

Description:

E-Khānate WorldWide Provides Highly Effective Professional Business Consultancy And Advisory Services In Riga, Latvia

Key Services:
Market ResearchStrategic AllianceIdentification Of PartnersMarketing, Planning & ExecutionBrand Development & PositioningMarket Penetration
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
WordPress 6.8.2Elementor 3.30.2Yoast SEO 25.4jQuery 3.7.1Auxin Theme and PluginsHappy Elementor AddonsFormidable Forms
Frameworks:
WordPressElementor
Platforms:
WordPress CMS
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
65/100
Best Practices:
  • HTTPS enforced
  • Use of security plugins (implied by WordPress ecosystem)
  • No exposed sensitive data found in HTML

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:basic

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is a professional consultancy firm focused on European business strategy and alliances

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

65/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

Third-party services without privacy policy

HIGH

Detected services: Twitter, LinkedIn, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, banking, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

55/100
Score

DMARC not enforcing

MEDIUM

DMARC policy is set to "none"

No DMARC reporting

LOW

DMARC aggregate reports not configured

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:_spf.google.com ~all
DNS Lookups:1/10
Policy:~all
DMARC Details
Policy:none

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

HSTS Not Enabled

MEDIUM

HTTP Strict Transport Security (HSTS) is not configured

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

80/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DMARC Policy Set to None

LOW

DMARC is configured but not enforcing any policy

DNS Records

A Records:148.113.35.111
Name Servers:
ns1.serverhostgroup.comDNS only
ns2.serverhostgroup.comDNS only
ns3.serverhostgroup.comDNS only
MX Records:
10: alt4.aspmx.l.google.com
10: alt3.aspmx.l.google.com
5: alt2.aspmx.l.google.com
5: alt1.aspmx.l.google.com
1: aspmx.l.google.com
SOA:Serial: 2025061900, TTL: 86400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:188ms

SPF Analysis

SPF Record:
v=spf1 include:_spf.google.com ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a modern WordPress platform using Elementor for page building and Yoast SEO for search engine optimization. It employs common web technologies including jQuery and various Elementor and Auxin theme plugins. Hosting is managed by GoDaddy with custom nameservers. Performance is moderate with good mobile responsiveness and SEO metadata properly configured. Accessibility features are basic and could be improved. The site uses cookie consent mechanisms but lacks advanced privacy and security configurations. No outdated or vulnerable libraries were detected in the provided content. Overall, the technical infrastructure supports a professional business website but has room for security and compliance enhancements.
Analyze Another Website