Retail security reports

K

Knifet

knifet.com

62

Knifet is a small artisan business specializing in handmade knives including bushcraft, hunting, EDC, and kitchen knives. The company operates an e-commerce website built on WordPress with WooCommerce and Elementor, targeting knife enthusiasts and specialized users. The website is professionally designed, mobile optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site uses modern web technologies and performance optimizations such as WP Rocket and Google Tag Manager. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response information are absent. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract significantly from the business credibility given the professional web presence and contact information. Overall, the website is safe, trustworthy, and well-positioned in its niche market.

D

DREVKO

drevko.cz

55

Drevko.cz is a Czech Republic based e-commerce retailer specializing in wooden furniture and related wooden products. The website offers a wide range of products including children's furniture, garden furniture, solid wood furniture, and accessories. The business targets general consumers interested in quality wooden furniture and operates primarily in the Czech market. The website is built on the Shoptet e-commerce platform, integrating common digital marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook SDK. The site demonstrates good content quality, clear navigation, and a professional design consistent with its retail focus. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy page in Czech language.

P

Pematex

sroubyonline.cz

54

Šroubyonline.cz operates as a Czech Republic-based e-commerce wholesaler and retailer specializing in fastening materials such as screws, nuts, bolts, anchors, and related tools. The website presents a comprehensive product catalog targeting both professional and individual customers in construction and manufacturing sectors. The company positions itself as a reliable supplier with over 500 satisfied customers and a large stock of items. Technically, the website employs a range of established JavaScript libraries and tracking tools including jQuery, Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and some security best practices but lacks explicit security headers and incident response policies. The absence of WHOIS data reduces transparency and trust slightly, though the website content and contact information support legitimacy. Overall, the site is professional and trustworthy with room for security enhancements.

M

MOHITO

mohito.com

71

MOHITO is a European fashion retail brand specializing in women's clothing and accessories, operating a multi-country e-commerce platform. The website provides a localized store selector for various European countries, emphasizing convenience and feminine style. The technical infrastructure includes modern JavaScript frameworks, cookie consent management via Cookiebot, and analytics integration through Google Tag Manager. The website is well-designed with good mobile optimization and clear navigation, supporting a positive user experience. Security posture is moderate with cookie consent and HTTPS implied, but lacks visible security headers and published security policies. WHOIS data is missing, which raises some concerns about domain registration transparency, though the brand association with LPP S.A. supports legitimacy. Overall, the site is professional and trustworthy but could improve security disclosures and contact transparency.

E

Ecoliquid

ecoliquid.eu

56

Ecoliquid operates an established e-commerce platform specializing in cleaning, disinfection, and pet care products primarily targeting consumers in the Czech Republic and surrounding regions. The company emphasizes product quality and safety, supported by certifications such as from the Czech Ministry of Health. Their website is built on the Shoptet platform, leveraging modern web technologies and multiple analytics and marketing tools to optimize user experience and business insights. The site is well-structured, multi-lingual, and includes comprehensive privacy and cookie policies compliant with GDPR standards. Security posture is solid with HTTPS enforced and CSRF protections in place, though some HTTP security headers could be improved. The WHOIS data is privacy protected, which is common for commercial entities, but limits transparency on domain ownership. Overall, the business presents a trustworthy and professional online presence with moderate technical maturity and good compliance practices.

S

SVĚTLO DŘEVA

svetlodreva.cz

49

SVĚTLO DŘEVA is a small family-owned business specializing in the custom handmade production of wooden clocks, targeting customers looking for artisanal gifts and home decor. The company operates an e-commerce platform to sell its products and provides direct contact options for inquiries. The website is professionally designed with a clear focus on its niche market in the Czech Republic. Technically, the site uses modern frontend libraries such as jQuery and Bootstrap, and is built on the inPage CMS platform. Mobile optimization and user experience are good, though accessibility features are basic. Security posture is moderate with cookie consent implemented but lacking advanced security headers and visible SSL configuration details. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Privacy compliance is partial due to the lack of a dedicated privacy policy page. Overall, the site is functional and trustworthy for its business scope but would benefit from improved security and compliance documentation.

C

COMFOR STORES a.s.

comfor.cz

60

COMFOR STORES a.s. operates a comprehensive Czech Republic-based IT retail and e-commerce platform specializing in consumer electronics, including phones, tablets, computers, components, and accessories. The company maintains a strong market presence with over 180 physical pickup points and a well-structured online store targeting both consumers and businesses. The website's content and navigation reflect a professional retail operation with a focus on technology products and services. Technically, the website employs modern web technologies such as Google Tag Manager, Luigisbox autocomplete, and Cloudfront CDN, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of visible privacy and cookie policies. WHOIS data is unavailable, limiting domain trust assessment, but the website branding and content suggest legitimacy. Overall, the site is safe for general audiences and functions as a professional retail platform.

R

Ruma Nábytek

ruma.cz

54

Ruma Nábytek operates as a small-scale furniture retailer based in Prague, Czech Republic, offering a range of quality, modern, and luxury furniture products through an e-commerce platform. The website is designed to target local customers seeking both custom and ready-made furniture solutions. The business model focuses on online sales with an emphasis on product variety and quality. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. Security posture is adequate with HTTPS enforced and use of CAPTCHA, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data and lack of visible privacy and terms policies reduce the overall trust and compliance rating. Strategic improvements in transparency, contact availability, and security policy publication are recommended to enhance credibility and compliance.

D

DGA | DiscGolf.com

discgolf.com

65

DGA | DiscGolf.com is a well-established company specializing in the manufacture and sale of disc golf baskets and course equipment. Founded in 1995, it holds a leading position in the disc golf retail market, offering both products and educational resources to disc golf enthusiasts and course designers. The website reflects a professional e-commerce platform with clear contact channels and social media integration. Technically, the site is built on WordPress with Elementor and optimized for performance using NitroPack, delivering a fast and mobile-friendly user experience. Security posture is solid with HTTPS and domain registration protections, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is trustworthy and credible, serving its target audience effectively.

MVP Disc Sports is a well-established company specializing in the design, manufacture, and retail of disc golf equipment and accessories. Founded in 2010, the company has positioned itself as a leading brand in the disc sports retail sector, offering a wide range of products including discs, baskets, bags, and accessories. Their website serves as both an e-commerce platform and an information hub with active news updates and product releases, targeting disc golf enthusiasts and players. The company maintains a consistent brand presence with multiple affiliated partner brands under the MVP Network. Technically, the website is built on WordPress using the Divi theme and builder, incorporating modern web technologies such as jQuery, Flickity for carousels, and Google reCAPTCHA for form security. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring encrypted communications. SEO and mobile optimization are well implemented, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical enhancements. From a security perspective, the site employs HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy and cookie policies indicates a compliance gap with GDPR and other privacy regulations. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. Overall, MVP Disc Sports presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security hardening would further strengthen their posture and customer trust.

I

Innova Disc Golf

innovadiscs.com

53

Innova Disc Golf operates a professional and content-rich website focused on disc golf products and community engagement. The company positions itself as a market leader in the disc golf retail sector, offering a wide range of discs, bags, targets, and custom branding services. The website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and advertising integrations, reflecting a mature digital presence. Security posture is generally good with HTTPS and no exposed sensitive data, but lacks some security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts trustworthiness. Overall, the site is functional, well-branded, and targets disc golf enthusiasts and retailers, but would benefit from enhanced transparency and compliance documentation.

D

Discraft Inc

discraft.com

53

Discraft Inc is a recognized leader in the disc sports industry, specializing in manufacturing and retailing high-quality disc golf, ultimate, and freestyle discs along with related accessories. The company targets disc sports enthusiasts and players, offering a broad product range including discs, baskets, bags, and custom printing services. Their market position is strong as a world leader in disc sports manufacturing, supported by partnerships with major disc sports organizations. Technically, the website is built on the Sana Commerce platform with integrations of modern marketing and analytics tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and clear navigation, providing a positive user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing, which raises some trust concerns, but the overall business credibility and external references support legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.

V

VC Ultimate

vcultimate.com

63

VC Ultimate is a specialized e-commerce retailer focused on custom athletic uniforms and apparel for performance athletes and teams across multiple sports disciplines. The company leverages Shopify as its platform and integrates various marketing and analytics tools to support its online presence. The website is professionally designed with good content quality and clear navigation, targeting a niche market of sports teams and athletes. Technically, the site is well-implemented with modern technologies and fast performance, hosted on Liquid Web. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance documentation is lacking. Overall, the domain registration is consistent and supports the legitimacy of the business.

W

Wittusen & Jensen

wj.no

75

Wittusen & Jensen is a Norwegian business partner specializing in the administration and delivery of workplace consumables, alongside marketing services and products to enhance market visibility. The company targets business customers requiring consumables and marketing support, positioning itself as an established player in the retail sector within Norway. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern web technologies including Next.js, React, and integrates analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Tawk.to chat. Hosting and CDN services appear to be provided by Cloudflare, contributing to moderate performance and good mobile optimization. Accessibility is basic but functional, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses security best practices like CSRF tokens and a comprehensive cookie consent mechanism. However, explicit security headers and incident response policies are not clearly published, and no vulnerability disclosure or security.txt file is present. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial sites. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, though improvements in transparency and contact availability would enhance trust. The risk level is moderate with no critical vulnerabilities detected.

T

Tonersyp

tonersyp.cz

63

Tonersyp is a Czech Republic-based e-commerce retailer specializing in printer supplies such as toners, cartridges, and related consumables. The website targets both consumers and businesses seeking affordable and reliable printer products, offering benefits like next-day delivery and lifetime warranty. The company positions itself as a trusted supplier with a focus on customer service and product availability. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and third-party widgets for enhanced user experience and marketing. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, HTTPS is enforced, but explicit security headers are not detected, and no public security policies or incident response contacts are available. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a moderate to good security posture and compliance with privacy regulations such as GDPR.

P

Pekárna Racek, s.r.o

pekarnaracek.cz

49

Pekárna Racek, s.r.o is a well-established bakery company based in Přerov, Czech Republic, with a history dating back to 1965. The company operates a network of retail stores offering a variety of bakery products including bread, pastries, and delicacies, complemented by an e-commerce platform accessible via a linked e-shop domain. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at general consumers interested in fresh bakery goods. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, providing a moderate performance and good mobile optimization. However, there is room for improvement in SEO and accessibility features. Security-wise, the site uses HTTPS and has a cookie consent banner but lacks visible security headers and published privacy or security policies, indicating moderate security maturity. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security practices.

P

PRESCO GROUP, a.s.

presco.cz

49

PRESCO GROUP, a.s. is a Czech-based company specializing in the design, manufacture, and distribution of calendars, diaries, school supplies, children's books, board games, and gifts. The company operates a professional e-commerce website targeting general consumers and businesses primarily in the Czech Republic and Slovakia. Their market position is that of an established Czech brand with a broad distribution network including major retail chains. The website demonstrates a good level of digital maturity with modern marketing and analytics integrations, including Google Analytics, Facebook Pixel, and retargeting services, alongside a consent management mechanism for GDPR compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and formal security policies are absent. Overall, the site is well designed, mobile optimized, and trustworthy, though the lack of WHOIS data limits full domain trust verification. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving transparency around domain registration.

A

Akvamex.cz

akvamex.cz

51

Akvamex.cz is an e-commerce retailer specializing in aquarium, terrarium, and pet supplies, with a physical store located in Chrudim, Czech Republic. The website offers a wide range of products including aquaristics equipment, terraristics accessories, cages, and pet food. It targets hobbyists and pet owners seeking specialized products and expert advice. The business model combines online sales with in-person retail and consultancy services. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA to enhance user experience and security. The site is mobile-optimized and features a clear navigation structure, although it lacks a publicly accessible privacy policy and detailed security policies. Security posture is solid with HTTPS and form protections, but could be improved with additional security headers and transparency about incident response. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not contradict the business's legitimacy. Overall, the site is professional and functional with moderate risk and room for compliance improvements.

H

HobyNaradi.cz

hobynaradi.cz

58

HobyNaradi.cz is a Czech Republic-based e-commerce retailer specializing in tools, machines, and consumable materials for workshops and gardens. The website targets both DIY enthusiasts and professional users, offering a wide range of products and services including tool rental. The site is built on the Shoptet e-commerce platform and integrates multiple modern technologies such as Google Analytics, Facebook SDK, and Google Pay API, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the use of an outdated jQuery version presents a potential vulnerability. The absence of WHOIS data reduces domain trustworthiness but the professional presentation and comprehensive policies suggest a legitimate business. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

R

RELIGIS s.r.o.

alukola.cz

38

Alukola.cz is a Czech Republic-based e-commerce and service business specializing in the sale of alloy wheels, steel wheels, tires, and related automotive services including tire fitting, car servicing, and car rental. The company positions itself as the largest specialist in alloy wheels in the Czech market, offering both online sales and physical service centers such as Pneucentrum Motol. The website is professionally designed, primarily in Czech, targeting vehicle owners seeking quality wheels and tire services. Technically, the site uses a traditional jQuery-based stack with integrations for Google Tag Manager, Heureka, and Seznam retargeting, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. The absence of WHOIS data reduces domain trust assessment, but the website's professional content and contact information support legitimacy. Overall, the site is functional, compliant with GDPR, and well-positioned in its niche.

O

Otto Group

ottogroup.com

55

Otto Group is a large, internationally operating retail and services group headquartered in Germany, employing approximately 41,000 people. The corporate website presents a professional and well-structured digital presence, targeting general public, business partners, and job seekers. The site emphasizes responsible commerce and sustainability, reflecting the company's values and market positioning as a major player in retail and e-commerce sectors. Technically, the website is built on Weblication CMS and uses Matomo analytics with cookie disabling for privacy. The site is mobile-optimized and features good SEO practices, although accessibility features could be improved. Security posture is moderate with HTTPS enforced and some privacy-conscious tracking settings, but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable or inconsistent, which slightly impacts trust but the website content and social media presence strongly indicate legitimacy. Overall, the site is professional and trustworthy but could enhance privacy compliance and security best practices.

N

Norengros AS

norengros.no

75

Norengros AS is Norway's largest supplier of consumables to both private and public sectors, operating a nationwide chain of 13 locally owned companies with 37 wholesale stores. The website reflects a mature business with a clear focus on wholesale retail, supported by a modern technical infrastructure built on Next.js and React, enhanced with analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Tawk.to chat. Security posture is strong with HTTPS enforcement and multiple security headers, complemented by a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the absence of WHOIS data and explicit contact information on the site slightly reduces trustworthiness. Overall, the site is professional, well-branded, and serves its business audience effectively.

G

Gustav Pedersen

gustavpedersen.no

48

Gustav Pedersen AS is a leading supplier of consumables and office-related products in Southern Norway, serving both private and public sectors. The company positions itself as a total provider with a broad product range including office supplies, medical equipment, cleaning products, catering, furniture, and more. Their market position is strong as the largest supplier in the region, supported by local logistics and dedicated delivery services. The website reflects a professional and consistent brand image with clear business information and active communication through news updates. Technically, the site is built on WordPress using the Enfold theme, enhanced with performance and analytics plugins such as WP Rocket and MonsterInsights. The site is mobile optimized and SEO friendly, with good content quality and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be added to further strengthen defenses. WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website demonstrates a mature digital presence aligned with the company's business goals and compliance requirements.

A

ADORE s.r.o.

adore-pen.cz

62

ADORE s.r.o. operates as a key importer and distributor of promotional pens in the Czech Republic, targeting advertising agencies and wholesalers. The company offers a broad product range from economical plastic pens to premium branded and designer pens, including customization options. The website is professionally designed, mobile-optimized, and provides clear navigation and product information, supporting a medium-sized retail business model. Technically, the site uses WebJET CMS with jQuery and Bootstrap frameworks, though some libraries are outdated. Security posture is moderate with GDPR compliance and cookie consent mechanisms in place, but lacks advanced security headers and incident response disclosures. WHOIS data is unavailable, which impacts domain trustworthiness, but the business presence and content quality suggest legitimacy. Overall, the site scores well on content and business credibility but could improve technical and security aspects.

P

PEN MASTER - PEN MASTER

penmaster.eu

61

The website www.penmaster.eu represents a business specializing in promotional pens and related products such as metal pens, plastic pens, gift sets, gel and roller pens, multifunctional and touch pens, colored pencils, and refills. The site targets businesses and organizations seeking promotional writing instruments, operating primarily in the retail sector. The business model is B2B focused, offering a catalogue and custom production services. The website is professionally designed with consistent branding and multi-language support, enhancing its accessibility to a broader European audience. From a technical perspective, the site employs older but widely used technologies including jQuery 1.11.1 and Bootstrap, with some custom scripts for menus and sliders. The site is mobile optimized and has a moderate performance profile. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for improvement. The cookie consent mechanism is implemented, reflecting some level of GDPR compliance, but no explicit privacy policy or terms of service pages were found. Security posture is moderate; HTTPS is assumed but not explicitly confirmed from the data. The absence of security headers and use of outdated libraries present potential vulnerabilities. No exposed sensitive data or obvious vulnerabilities were detected. The domain WHOIS data is privacy protected by EURid, which is common for EU domains, and no suspicious registration patterns were found. The lack of contact information such as phone numbers or emails on the site reduces transparency but the presence of a professional email for the web author is noted. Overall, the website is functional and professional but could benefit from enhanced security practices, explicit privacy and terms policies, and updated technical components to improve trust and compliance. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and security policies, and improving contact transparency.

A

ADORE Promotional Pens

adorepen.eu

62

ADORE Promotional Pens operates as an importer and distributor specializing in promotional pens and related writing instruments, targeting primarily business clients seeking branded and customizable pen products. The company maintains a professional online presence with a well-structured website offering a broad product portfolio and partner support services. Their market position appears stable within the regional promotional products sector, supported by partnerships with brands such as PenMaster and Gabrielis. Technically, the website is built on WebJET CMS, utilizing jQuery and Bootstrap frameworks, providing a responsive and user-friendly experience, though some technologies like jQuery are outdated and may pose security risks. Security posture is moderate with GDPR-compliant cookie consent and privacy policies in place, but lacks visible advanced security headers and explicit incident response information. Overall, the domain WHOIS data is privacy-protected, which is typical for .eu domains, and the website content aligns with a legitimate business operation. The risk level is moderate with recommendations to enhance security headers, update libraries, and improve accessibility.

D

doppler

dopplershop.it

63

dopplershop.it is a professionally designed e-commerce website specializing in the sale of umbrellas and parasols under the doppler brand. The site targets consumers in Italy and offers direct manufacturer sales with benefits such as a 30-day refund guarantee, free shipping over €29, and a 3-year warranty. The business model is retail e-commerce with a medium-sized operation launched in 2023. The website is built on the Magento platform, integrating modern marketing and analytics tools such as Klaviyo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

D

doppler

dopplershop.fr

68

dopplershop.fr is a French e-commerce website specializing in the sale of doppler brand umbrellas and parasols. The site operates on the Magento platform and offers direct manufacturer sales with customer-friendly policies such as a 30-day return and 3-year warranty. The website targets French-speaking consumers seeking quality outdoor protection products. Technically, the site uses modern web technologies including jQuery, RequireJS, and integrates marketing and analytics tools like Google Tag Manager and Klaviyo. Security is well implemented with HTTPS, strong security headers, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site presents a professional and trustworthy e-commerce experience with good technical maturity and compliance.

S

SIA “Purpurs Design”

purpurs.com

61

Purpurs.com is an e-commerce website operated by SIA “Purpurs Design,” specializing in design stationery products targeted primarily at the Latvian market. The website presents a professional and consistent brand image with a focus on retailing niche design paper goods. The business model is typical for small-scale online retail, leveraging WooCommerce on a WordPress platform. The site is well-structured with good navigation and mobile optimization, supporting a positive user experience.

S

SIA Sonika

brothersujmasinas.lv

53

The website www.brothersujmasinas.lv represents SIA Sonika, a Latvian retailer specializing in Brother brand sewing machines and related products. The company offers a broad range of sewing and embroidery machines, overlockers, ScanNCut plotters, and printing devices, targeting both hobbyists and professionals in the sewing industry. The site provides product information, video content, and a contact form for customer inquiries, supported by active social media channels on Facebook, Instagram, and YouTube. Technically, the website is built using a combination of jQuery, Fancybox, and other JavaScript libraries, hosted on Amazon Cloudfront CDN, and likely powered by the Mozello CMS platform. The site is mobile-optimized with good navigation and content quality, though SEO and accessibility features are basic. Security posture is moderate with HTTPS enabled and client-side form validation, but lacks advanced security headers and published privacy or cookie policies. From a security and compliance perspective, the site does not display privacy or cookie policies, nor does it provide incident response or vulnerability disclosure information. WHOIS data could not be retrieved due to query limits, but the domain appears legitimate based on website content and company registration details. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, the website demonstrates a solid business presence with room for improvement in privacy compliance, security best practices, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

AMRO BALTIC, SIA

amro.lv

64

AMRO BALTIC, SIA operates a professional website focused on providing business equipment and solutions such as cash registers, barcode scanners, and currency detectors primarily targeting retail businesses in Latvia. The company positions itself as a regional provider with a medium-sized business model focused on B2B sales. The website is built on WordPress with WooCommerce, leveraging modern plugins and SEO tools, indicating a moderate level of digital maturity. The presence of cookie consent mechanisms and integration with major analytics and advertising platforms shows awareness of privacy and marketing needs, though explicit privacy and terms of service pages are not detected. Security posture is strong with HTTPS and cookie consent, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy but lacks some compliance and contact transparency elements. The absence of WHOIS data limits full domain trust verification.

4Fstore.lv is an e-commerce retail website focused on selling sportswear and related products, primarily targeting customers in Latvia. The site is built using modern technologies including Magento PWA Studio and integrates Google Tag Manager for analytics and marketing purposes. The website demonstrates basic content quality and mobile optimization but lacks visible privacy, cookie, and terms of service policies, as well as explicit contact information. Security posture is moderate with no detected WAF or blocking mechanisms, but no security headers or SSL details were available for analysis. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site appears to be a legitimate regional online retailer but would benefit from enhanced privacy compliance and security transparency.

N

Nature Gift SIA

naturegift.lv

54

Nature Gift SIA operates an e-commerce platform specializing in natural and gourmet food products, targeting consumers in Latvia. The website presents a professional and consistent brand image, with clear navigation and a focus on online retail and delivery services. The business is positioned as a niche local player associated with the Slow Food Riga movement, enhancing its trustworthiness among its target audience. Technically, the site uses Mozello CMS and is hosted via Amazon Cloudfront CDN, employing common JavaScript libraries such as jQuery and Fancybox for UI enhancements. The site is mobile optimized and includes basic accessibility features. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible HTTP security headers such as CSP or HSTS. The login form is functional but does not show advanced protections like CAPTCHA or rate limiting. No privacy policy or terms of service pages were found, which is a compliance gap. The absence of WHOIS data due to query limits restricts full domain legitimacy assessment. Overall, the security posture is moderate but could be improved with standard best practices and clearer compliance documentation. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing login security, implementing security headers, and improving accessibility compliance. These steps will strengthen trust and regulatory compliance, supporting business growth and customer confidence.

N

Nordcrunch SIA

nordcrunch.com

57

Nordcrunch SIA operates a Latvian retail e-commerce website offering new products and flavors to a general audience. The company maintains an online store with customer support features and active social media channels. The website is built on the Mozello platform, leveraging common JavaScript libraries and Amazon Cloudfront CDN for content delivery. It is mobile optimized and uses HTTPS to secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy. The site lacks visible privacy and terms of service pages, and security headers are not detected, indicating room for improvement in security posture. Cookie consent mechanisms are implemented, reflecting some privacy compliance efforts. Overall, the website presents a professional retail front but requires enhancements in transparency and security to strengthen trust and compliance.

D

doppler

dopplerschirme.com

74

dopplerschirme.com is a professional e-commerce website specializing in the sale of doppler brand sunshades, umbrellas, garden furniture, and related accessories. The site targets general consumers primarily in Austria and German-speaking markets, with multilingual support for English, French, Italian, and Russian. The business is well-established with a domain age since 2001 and a company history dating back to 1946, positioning itself as a trusted manufacturer and retailer with clear trust signals such as warranty and return policies. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates marketing and analytics tools like Google Tag Manager and Klaviyo. Security posture is good with HTTPS and domain transfer protections, though explicit privacy and cookie policies are missing in the analyzed content, indicating room for compliance improvements. Overall, the website is professional, secure, and credible, but should enhance privacy disclosures and security transparency to improve compliance and user trust.

The website www.royaldesign.eu/products is an e-commerce platform specializing in promotional gifts and related products. It offers a broad catalog including gift sets, premium gadgets, office supplies, phone accessories, and more, targeting businesses and individuals seeking promotional items. The site demonstrates a moderate level of digital maturity with use of modern JavaScript libraries, Google Tag Manager, and Ahrefs Analytics for tracking. However, it lacks visible privacy and terms of service policies, and no explicit contact information is provided, which may impact user trust and compliance. Security posture is moderate with presence of CSRF tokens but absence of key security headers and unclear SSL configuration. Overall, the site appears legitimate and professionally designed but would benefit from enhanced transparency and security measures.

C

Colorissimo

colorissimo.com

52

Colorissimo is a medium-sized Polish company specializing in premium business gifts, offering a wide range of products including novelties, drinkware, audio devices, tools, luggage, and umbrellas. The company targets businesses seeking quality corporate gifts and supports multiple languages through downloadable catalogs and an online product search platform. The website demonstrates a professional and consistent brand presence with clear contact information and social media integration. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided via home.pl, a Polish hosting provider, with SSL enabled ensuring secure communications. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Overall, the website is trustworthy, well-structured, and suitable for its business audience.

A

ADORE s.r.o.

adorepen.cz

62

ADORE s.r.o. operates as a distributor and importer of promotional pens and related office supplies in the Czech Republic, targeting advertising agencies and wholesalers. The company offers a broad portfolio ranging from inexpensive plastic pens to high-quality branded and designer pens, including customization options such as special colors and clip shapes. The website reflects a professional and consistent brand presence with good content quality and navigation. Technically, the site uses established but somewhat outdated technologies like jQuery 1.11.1 and Bootstrap, managed via WebJET CMS. The site is mobile optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with room for improvement, particularly in updating libraries and implementing security headers. WHOIS data is missing, which impacts trustworthiness but the business presence and content suggest legitimacy. Overall, the site is functional, professional, and compliant with privacy regulations but would benefit from technical and security enhancements.

Toppoint is an established international supplier specializing in promotional articles and corporate gifts, boasting over 90 years of industry experience. The website targets business customers seeking high-quality promotional products with innovative printing technologies and international service capabilities. The digital infrastructure leverages modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar, integrated via Google Tag Manager, and uses Alpine.js for frontend interactivity. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content in Dutch and multiple other languages. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy compliance mechanisms are lacking. The absence of WHOIS data for the subdomain is expected and does not detract significantly from legitimacy. Overall, the site demonstrates a mature business presence with room for improvement in privacy compliance and security best practices.

R

RG Juvelyrika

rgjuvelyrika.lt

43

RG Juvelyrika is a small local jeweler business based in Vilnius, Lithuania, specializing in the manufacturing and repair of gold and silver jewelry, including custom wedding and engagement rings. The website presents a professional image with good customer trust signals such as a 5-star Google rating and multiple positive testimonials. The site supports multiple languages and uses WordPress CMS with common plugins for forms and multilingual support. Technically, the site is moderately performant, mobile-optimized, and uses HTTPS with some security best practices, although some security headers are missing. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information includes a phone number and a contact form collecting personal data. Overall, the site is trustworthy and well-positioned locally but could improve privacy and security transparency.

D

Dantek.cz

dantek.cz

56

Dantek.cz is a Czech Republic-based small retail e-commerce business specializing in high-quality photo printing products including canvas prints, photo boards, posters, wallpapers, and related framing accessories. Founded in 2015, the company positions itself as a niche player focusing on quality craftsmanship and customer satisfaction, supported by testimonials and a regularly updated blog. The website is professionally designed with good navigation and mobile optimization, leveraging popular web technologies such as OpenCart, jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is provided by Wedos, a reputable Czech hosting provider. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks advanced security headers and a formal security policy or incident response contact. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present. The site uses common tracking and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting, indicating moderate user tracking. Overall, Dantek.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. The domain registration data is consistent and supports the legitimacy of the business. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance.

P

Plotbase

plotbase.cz

59

Plotbase.cz is a Czech-based company specializing in custom advertising systems, exhibition stands, and printing services. The website demonstrates a solid market position with a focus on B2B and B2C customers seeking tailored promotional and display solutions. The company leverages modern web technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies. The absence of WHOIS data is likely due to registry policies rather than suspicious activity, and the website shows multiple trust indicators including customer reviews and certification badges. Overall, the site is professional, secure, and trustworthy.

Ploty Ostrava is a small, established Czech company specializing in the sale, installation, and rental of fencing materials and related services primarily in the Ostrava region. Founded in 2005, the company offers a range of products including wire mesh fences, welded panels, wood-plastic composite slats, and live hedge planting. Their business model combines retail sales through an e-commerce platform with on-site installation and repair services, targeting both individual homeowners and commercial clients. The website is professionally designed using WordPress, WooCommerce, and Elementor, providing a good user experience with clear navigation and mobile optimization. Technically, the website employs modern web technologies and integrates Google reCAPTCHA for form security. Hosting appears to be managed via Czech providers consistent with the business location. While HTTPS is enforced, the site lacks some advanced security headers and a cookie consent mechanism, indicating room for improvement in privacy compliance and security hardening. No incident response or vulnerability disclosure policies are published, which could be addressed to enhance trust and security posture. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and GDPR compliance are recommended. The domain WHOIS data aligns well with the business claims, showing a long-established domain with no privacy protection, supporting legitimacy. The company maintains a Facebook presence and provides clear contact information, reinforcing credibility. Strategically, the company should focus on enhancing security policies, implementing cookie consent, and publishing vulnerability disclosure information to improve compliance and customer trust. Technical modernization and ongoing security maintenance will support sustainable growth and risk mitigation.

S

Produits promotionnels et personnalisés | Stamina

stamina-shop.fr

62

Stamina-shop.fr is a French e-commerce website specializing in promotional and personalized products aimed at businesses seeking branding and advertising merchandise. The website presents a niche retail business model focused on corporate promotional items. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and uses Cloudflare for DNS and likely CDN services, indicating a moderate level of digital maturity. However, the website lacks comprehensive privacy and cookie policies, contact information, and security headers, which are important for GDPR compliance and overall security posture. The SSL configuration is good, and the domain registration is consistent and legitimate, with no privacy protection used and a domain age appropriate for the business history. Overall, the website is functional but requires improvements in privacy compliance, security best practices, and user trust elements to enhance its risk profile and professionalism.

S

Promotional and customizable products | Stamina

stamina-shop.co.uk

62

Stamina-shop.co.uk is an e-commerce website specializing in promotional and customizable products aimed at businesses seeking brand promotion solutions. The site appears to be part of a multi-regional brand with sister domains targeting different countries. The business is relatively young, founded around 2019, and operates in the retail sector focused on promotional merchandise. Technically, the site uses modern JavaScript frameworks such as Vue.js and includes popular font services like Google Fonts and Typekit, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is basic with no detected security headers or explicit security policies, and no contact information is readily available in the provided HTML content. Overall, the site is functional but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

R

Roly

roly-workwear.es

63

Roly is an established European e-commerce retailer specializing in workwear and uniforms for various industries including high visibility, fire-resistant, sanitary, and food service sectors. The website presents a professional and consistent brand image with multi-language support targeting multiple European markets. Technically, the site leverages modern JavaScript frameworks such as Vue.js and uses popular font services to enhance user experience. However, the lack of accessible WHOIS data due to Red.es query restrictions limits transparency about domain registration details. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. Privacy compliance is weak as no privacy or cookie policies were found. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance disclosures.

R

Roly

roly.co.uk

64

Roly is an established retail brand specializing in casual wear, sportswear, work clothing, and trainers for men, women, and children. The company operates multiple international sister sites targeting various European markets, indicating a broad geographic presence and a focus on apparel e-commerce. The website presents a professional and consistent brand image with a clear focus on its product offerings and target audience. The domain age dating back to 1999 supports the legitimacy and maturity of the business. Technically, the website leverages modern JavaScript frameworks such as Vue.js and popular libraries like Swiper.js, along with web fonts from Google Fonts and Adobe Typekit, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but the absence of security headers and explicit privacy or cookie policies indicates room for improvement in compliance and security best practices. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening to meet higher standards.

R

Roly

roly.es

64

Roly is a Spanish retail and e-commerce company specializing in casual clothing, sportswear, workwear, and casual footwear for men, women, and children. The website targets a general audience with a focus on apparel and accessories, positioning itself as an established brand with international reach, as evidenced by multiple language alternate URLs. The technical infrastructure leverages modern web technologies such as Vue.js and Swiper.js, with professional typography and iconography, indicating a mature digital presence. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information in the provided HTML, which are critical for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and clear privacy practices. Overall, the website is functional and professional but requires enhancements in privacy compliance and security transparency to reduce risk and improve user trust.

A

Asgard Sp. z o.o.

bluecollection.gifts

67

Asgard Sp. z o.o., operating the website bluecollection.gifts, is a medium-sized Polish company specializing in supplying promotional gadgets and corporate gifts with custom printing services. The company offers a wide range of products and marking techniques, targeting B2B customers seeking branding and promotional solutions. The website is built on a modern Magento platform with the ScandiPWA frontend, integrating advanced monitoring and marketing tools such as New Relic, Smartsupp live chat, and Google Tag Manager. The digital infrastructure supports good performance and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing trust. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

Z

Zalando SE

zalando.de

47

Zalando SE operates a leading European online fashion retail platform offering a wide range of shoes, clothing, accessories, and beauty products from over 1,900 brands. The website targets consumers interested in fashion and lifestyle products, providing free delivery and returns to enhance customer experience. The company is well-established with a domain age consistent with its founding year of 2008 and operates multiple regional sister sites. Technically, the website employs modern JavaScript frameworks such as React and RequireJS, hosted on Amazon AWS infrastructure, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and consent management via Usercentrics, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable e-commerce platform.