Security Directory

J

JIG.LV

jig.lv

42

JIG.LV is a Latvian-based fishing tackle retailer operating both an online e-commerce platform and a physical store located in Riga. The company specializes in fishing rods, reels, braided lines, hooks, lures, and related accessories, targeting fishing enthusiasts and sport fishermen primarily in Latvia. The business model combines retail and wholesale distribution, supported by customer service via phone and email. The website is built on the shop2you CMS platform and integrates basic JavaScript and Facebook SDK for social media engagement. While the site provides essential contact information and product listings, it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. The technical infrastructure shows moderate maturity with outdated JavaScript libraries and basic SEO and accessibility features.

Massage4you.lv is a small local wellness and physiotherapy service provider based in Riga, Latvia, operating under the name DESSGROUP since at least 2011. The business offers a variety of massage therapies including classic, sports, relaxing, and anti-cellulite massages, along with manual therapy and kinesiology taping. The website targets local clients seeking physical therapy and wellness services. Technically, the site is built on an older CMS (WebCMS v 2.5) with basic HTML, CSS, and JavaScript, integrating third-party widgets such as TripAdvisor for client reviews. The site is accessible without WAF or security challenges but lacks modern security headers and privacy compliance documentation. Contact information is clearly presented, enhancing business credibility despite the absence of WHOIS transparency due to query limits.

S

SIA CFRIGA

crossfitriga.lv

55

CrossFit Riga is a fitness center based in Riga, Latvia, specializing in official CrossFit and HYROX training. It positions itself as the largest CrossFit gym in Latvia, focusing on community, coaching, and high intensity functional fitness. The website reflects a modern digital presence built on Next.js and React, with content managed via Payload CMS and hosted on Quickstack infrastructure. The site offers clear information about classes, schedules, plans, and contact details, targeting fitness enthusiasts and visitors to Riga. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, indicating room for improvement in compliance and security best practices. The absence of WHOIS data limits domain trust verification, but the business information and content quality suggest a legitimate small fitness business. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance documentation.

Avesco SIA is an official representative of multiple heavy machinery and energy equipment brands in Latvia, including Cat®, Sitech, Magni, Sandvik, Finlay, and KX Tree Shears. The company provides a broad range of high-performance machinery and power solutions, along with certified service and professional technical maintenance. Their market position is strong within the Latvian construction and industrial equipment sector, supported by consistent branding and a professional web presence. The website is built on TYPO3 CMS and integrates modern tracking and analytics tools with GDPR-compliant cookie consent mechanisms. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with good security headers, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain transparency, although the website content and branding suggest legitimacy. No explicit contact or security policy pages were found, indicating areas for improvement in trust and compliance documentation. Overall, the site demonstrates a solid security posture and privacy compliance but would benefit from enhanced business credibility disclosures and domain registration transparency.

BANG BANG is a retail business based in Riga, Latvia, with a website currently under construction. The site provides basic information including the physical store location and social media links on Instagram and Facebook. The business appears to be small and focused on local retail customers. The domain is well aged, registered since 2013, indicating an established presence, although the website itself is minimal and not fully developed. Technically, the website uses basic HTML and CSS with Google Fonts integration. There is no evidence of a CMS or advanced frameworks. The site is moderately optimized for mobile devices but lacks SEO and accessibility features. No analytics or tracking technologies are detected, indicating minimal digital maturity. From a security perspective, the site lacks critical security headers and does not implement DNSSEC. There is no privacy or cookie policy, nor any incident response or security contact information. The domain registration is stable and legitimate, but the website itself does not demonstrate strong security or privacy compliance. No vulnerabilities or malicious content were detected. Overall, the website is safe but very basic, with significant room for improvement in content, security, and compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and enhancing contact information to improve trust and compliance.

Studio ANNA LED is a small, niche fashion brand based in Riga, Latvia, specializing in elegant and comfortable women's apparel with Baltic ethnic influences. Established in 2000, the brand operates an e-commerce store hosted on Shopify, offering a range of products including clothing, jewellery, and accessories. The website is professionally designed with good content quality, clear navigation, and mobile optimization, targeting modern and elegant women who value quality and sustainability. The brand emphasizes eco-fashion and craftsmanship, with a strong local cultural identity. Technically, the website leverages Shopify's platform and associated technologies such as JavaScript, CSS, and third-party analytics and marketing pixels including Google Analytics and Facebook Pixel. The site performs moderately well with good mobile responsiveness and accessibility features. However, there is room for improvement in security practices, such as enabling DNSSEC and implementing a Content Security Policy. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections to prevent unauthorized changes. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security.txt file and incident response contact information is a gap. Tracking technologies indicate moderate user tracking, which should be balanced with privacy compliance. Overall, the website presents a trustworthy and professional online presence for Studio ANNA LED, with a solid business credibility score. Strategic improvements in security headers, DNS security, and privacy consent mechanisms would enhance the site's security posture and regulatory compliance, supporting long-term brand trust and customer confidence.

R

RETN NETWORKS LTD

retn.net

65

RETN NETWORKS LTD is a well-established telecommunications company founded in 2002, specializing in providing a leading Eurasian data network platform connecting Europe and Asia. The company offers a broad portfolio of network services including managed global private networks, BGP solutions, cloud connectivity, DDoS protection, and terrestrial express gateways. RETN holds a strong market position supported by extensive network coverage, multiple Points of Presence worldwide, and recognized industry awards. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good performance, accessibility, and SEO optimization. Security posture is robust with HTTPS, security headers, and compliance certifications like ISO 27001 and PCI DSS. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, RETN demonstrates a high level of professionalism, trustworthiness, and technical sophistication suitable for enterprise clients and telecom partners.

H

Hereford Shop

hereford.lv

63

Hereford Shop is a specialized retail and hospitality business based in Riga, Latvia, offering a wide selection of premium beef and steaks sourced locally and internationally. The company operates both an online e-commerce platform and a physical grill bar, emphasizing product traceability and a cozy dining atmosphere. The website is built on Shopify, leveraging modern e-commerce technologies and includes standard marketing and analytics tools. Security posture is strong with HTTPS and security headers, though lacks a public security policy or incident response details. Privacy and cookie policies are present with consent mechanisms, indicating GDPR awareness. Overall, the business appears legitimate and professionally presented, targeting consumers seeking high-quality beef products in Latvia.

S

SIA “Adrian V”

babylands.lv

32

Babylands.lv is a Latvian e-commerce retailer specializing in baby and children products. The website offers a broad catalog of items including diapers, toys, clothing, and accessories, targeting parents and caregivers in Latvia. The business operates as a small local online store with clear contact information and multiple delivery options, partnering with local logistics providers such as Omniva and Circle K. The site content is primarily in Latvian and includes basic privacy and cookie policies indicating GDPR compliance awareness. Technically, the site is built on a CakePHP framework with older JavaScript libraries and lacks HTTPS, which is a significant security concern. The absence of modern security headers and use of outdated libraries suggest a need for technical modernization. Overall, the security posture is weak, but the business credibility is moderate due to transparent contact details and privacy notices. Strategic improvements in security and technical infrastructure are recommended to enhance trust and compliance.

Dzijas.lv is a Latvian e-commerce retailer specializing in a wide range of yarns and knitting accessories, positioning itself as a popular and trusted yarn store in Latvia with over 10 years of experience. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Judge.me for customer reviews and Google Analytics 4 for analytics. The site demonstrates good technical maturity with fast performance, mobile optimization, and proper security configurations including HTTPS and security headers. Privacy compliance is partially addressed with a privacy policy and terms of service, but lacks a visible cookie consent mechanism. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the site presents a professional and trustworthy online retail presence with room for improvement in privacy and security transparency.

F

Floaty.lv

floaty.lv

66

Floaty.lv is a Latvian wellness and relaxation service provider specializing in unique offerings such as floutings, red light therapy, 4D full-body massage, and solarium services enhanced with hyaluronic acid spray. The company targets local consumers seeking holistic body and mind care experiences. The website is built on the Shopify platform, leveraging modern web technologies and integrated with multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site demonstrates good digital maturity with mobile optimization, clear navigation, and comprehensive privacy and cookie policies, reflecting compliance with GDPR requirements. Security posture is strong with HTTPS enforcement and security headers, though no explicit security policy or incident response information is published. Overall, Floaty.lv presents a professional and trustworthy online presence suitable for its market niche.

R

Refonda.lv – Metal Scrap – metal scrap

refonda.lv

33

Refonda.lv is a website representing a metal scrap business likely operating in Latvia. The site provides basic information about metal scrap services but lacks detailed business or contact information. Technically, the site is built on WordPress using Elementor and includes Google reCAPTCHA for form security. However, the absence of privacy and cookie policies, terms of service, and contact details limits its compliance and trustworthiness. Security headers and WHOIS data are unavailable, which further impacts the security posture and legitimacy assessment. Overall, the website is functional but minimalistic, with room for improvement in transparency, security, and user engagement.

Sofia Lark is a small Latvian e-commerce business specializing in elegant gold-plated jewelry including earrings, necklaces, rings, and accessories. The website is built on the Shopify platform using the Impulse theme, integrating multiple third-party services for reviews, marketing, and shipping. The business targets consumers seeking premium, anti-allergic jewelry with a focus on quality and timeless style. The domain registration is consistent with the business age and shows no suspicious patterns, indicating legitimacy. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages (English and Latvian). Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. Privacy policies and cookie consent mechanisms are present, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence suitable for its market niche.

C

Casa Nostra

casanostrariga.com

59

Casa Nostra is a small Italian restaurant located in Riga, Latvia, offering authentic Italian cuisine with a focus on fresh local ingredients and a cozy atmosphere. The website is professionally designed using Squarespace, featuring clear navigation and good mobile optimization. The business presents itself as a local dining and take-away service with a curated wine selection. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, but lacks DNSSEC and explicit privacy or cookie policies. No contact emails or phone numbers are explicitly provided on the homepage, which limits direct communication channels. The security posture is good overall, but privacy compliance is weak due to missing policies and consent mechanisms. The domain registration is consistent and legitimate, supporting the business credibility. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and contact transparency.

B

Belgian Beer Cafe Bon Vivant LV

bonvivant.lv

66

Belgian Beer Cafe Bon Vivant LV is a hospitality business based in Latvia, specializing in Belgian beer and a diverse menu including meat, fish, seafood, burgers, and desserts. The website presents a professional and well-structured digital presence with clear navigation, reservation forms, and social media integration. The business targets general and mature audiences interested in dining and beer experiences in Riga. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and optimized for mobile devices. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policy disclosures. However, WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is trustworthy and professionally maintained with room for improvement in security headers and explicit policies.

N

Nailinfinity.eu

nailinfinity.eu

68

Nailinfinity.eu is an e-commerce website specializing in beauty and personal care products including manicure, pedicure, podology, epilation, eyelash, eyebrow, facial, and body care items. The website targets primarily Latvian customers but supports multiple languages, indicating a broader European audience. The business operates on the Shopify platform, leveraging its infrastructure for hosting, content management, and e-commerce functionalities. The site demonstrates good digital maturity with structured data for SEO, responsive design, and integration of marketing tools. Security posture is solid with HTTPS enforced and domain verifications in place, but lacks explicit security headers and published privacy or cookie policies, which are critical for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.

V

veikalsberniem.lv

veikalsberniem.lv

65

Veikalsberniem.lv is a Latvian e-commerce retailer specializing in products for children, infants, and mothers, offering a wide range of items including clothing, toys, and accessories. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for reviews, Klaviyo for marketing, and Facebook Pixel for tracking. The site demonstrates a good level of technical maturity with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and some security best practices observed, though there is room for improvement in security headers and explicit privacy compliance documentation. The absence of WHOIS data limits full domain legitimacy verification, but the website content and integrations suggest a legitimate business. Overall, the site is professional and trustworthy for its target audience.

S

SIA Mācību un konsultāciju centrs "Samtija"

seoaudits.eu

42

The website www.seoaudits.eu represents a Latvian small business specializing in SEO services and Google Ads advertising, operating since 2008 under the company SIA Mācību un konsultāciju centrs "Samtija". The business offers SEO audits, keyword analysis, website optimization, and Google Ads campaigns, targeting Latvian companies seeking to improve their online presence. The site demonstrates a professional approach with clear contact information and trust signals such as Google Partner certification. Technically, the site uses standard web technologies including Google Analytics and Tag Manager, hosted by Serveris.lv and built on the Constructor Free CMS platform. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, which may affect GDPR compliance. Security headers are not evident, though HTTPS usage is implied. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices. The domain WHOIS data is privacy protected, which is common for small businesses, and no suspicious patterns were detected. The website content is safe and suitable for a general audience.

Street Fries Kitchen is a small hospitality business based in Riga, Latvia, specializing in breakfast items, burgers, waffles, pancakes, french fries, and sauces. The website presents a clear focus on local food service offerings with multiple physical locations. The company targets a general audience seeking casual dining options in the city center. The business model is retail food service with a local market position and no evident parent or subsidiary companies. Technically, the website uses standard web technologies including Google Fonts, Font Awesome icons, and JavaScript. The CMS appears to be Anazana or a similar platform. The site is mobile optimized with good navigation and content quality, though SEO and accessibility features are basic. No advanced frameworks or analytics tools are detected. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which indicates a low maturity level in compliance and security best practices. The absence of contact emails and incident response information further limits trust. The SSL configuration and HTTPS enforcement could not be verified from the data provided. WHOIS data is unavailable due to query limits, restricting domain legitimacy assessment. Overall, the website is functional and professionally presented but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

R

Riga Sushi

rigasushi.com

55

Riga Sushi is a small local sushi restaurant based in Jelgava, Latvia, operating since at least 2014 according to website footer information. The business offers sushi dining, delivery, and takeaway services with menus provided as downloadable images. The website is built using modern web technologies such as React and Google Fonts, providing a good user experience with mobile optimization and clear navigation. However, the site lacks privacy and cookie policies, security headers, and visible analytics or tracking mechanisms. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy, though the website content itself appears legitimate and focused on hospitality services. Overall, the site is functional and professional but could improve in security and compliance aspects.

S

Simple Bike Store

simplebikestore.eu

69

Simple Bike Store is a small retail and e-commerce business specializing in premium bicycles and cycling gear, operating both online and from a physical store located in Rotterdam, Netherlands. The website is built on the Shopify platform and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook SDK, TikTok Business API, Klaviyo, and Smartlook, indicating a mature digital marketing approach. The site presents professional design, clear navigation, and relevant content targeting consumers interested in bicycles and related products. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and cookie policies are missing. No WHOIS data is publicly available due to EURid privacy restrictions, which is typical for EU domains. Overall, the site appears legitimate and trustworthy with room for improvement in privacy compliance and security transparency.

L

LATVIJAS EVAŅĢĒLISKI LUTERISKĀS BAZNĪCAS TUKUMA DRAUDZE

tukumabaznica.lv

43

The website tukumabaznica.lv represents the Latvian Evangelical Lutheran Church community in Tukums, Latvia. It serves as an informational and community portal providing details about worship services, church activities, educational programs, and cultural events. The site targets local Latvian-speaking church members and visitors interested in Lutheran faith and community engagement. The business model is non-profit, focusing on religious and community services with fundraising efforts for church restoration. Technically, the website uses a traditional HTML/CSS/JavaScript stack with jQuery and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is functional but exhibits basic design and limited mobile optimization. There is no evidence of a modern CMS or advanced frameworks. Performance is moderate, and SEO is basic with some meta tags present. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the provided data. No privacy or cookie policies are found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly presented, but no dedicated security or incident response contacts are available. The absence of WHOIS data due to query limits limits domain trust assessment, but the site content and contact details suggest legitimacy. Overall, the site is safe, family-friendly, and serves its community purpose well but would benefit from improved security practices, privacy compliance, and technical modernization to enhance trust and user experience.

L

Liepājas muzejs

liepajasmuzejs.lv

44

Liepājas muzejs is a municipal cultural institution based in Liepāja, Latvia, dedicated to preserving and presenting local history, art, and cultural heritage. The website showcases multiple museum branches, exhibitions, educational programs, and cultural events targeting local residents, tourists, and students. The institution operates under local government auspices and offers services including guided tours, masterclasses, venue rentals, and a museum shop. The digital presence is professional with consistent branding and clear navigation, supporting Latvian and English languages. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, and Google reCaptcha for bot protection. Security posture is adequate with HTTPS and CSRF tokens but lacks visible advanced security headers. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Contact information is comprehensive with official emails and phone numbers. WHOIS data was unavailable due to query limits, limiting domain trust analysis, but the website content and linked domains suggest legitimacy.

S

SIA "Flīžu Tirgus"

flizes.lv

40

Flizes.lv operates as a specialized retail business focused on offering a wide range of tiles and tiling accessories primarily to customers in Latvia. The company presents itself as a local market player with a physical presence in Riga, providing both online and in-store purchasing options. The website is well-structured, featuring detailed product listings, pricing, and promotional offers, targeting consumers and professionals interested in home improvement and construction materials. The business model centers on direct retail sales with an emphasis on product availability and customer service.

F

Fotogrāfs Modris Skujiņš - Fotosalons.lv

fotosalons.lv

52

Fotosalons.lv is a professional photography service operated by Fotogrāfs Modris Skujiņš, targeting clients in Latvia including Riga, Ogre, Salaspils, Ikšķile, and surrounding areas. The business specializes in wedding, family, and children photography, offering studio and on-location sessions. The website is built on the Squarespace platform, providing a visually appealing and mobile-optimized user experience with clear navigation and professional branding. Contact details including phone, email, and physical address are prominently displayed, enhancing business credibility. Technically, the site leverages Squarespace's hosting and CDN infrastructure, uses Typekit fonts, and enforces HTTPS with HSTS, reflecting a solid security baseline. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance with data protection regulations such as GDPR. No forms or analytics scripts were detected, suggesting minimal data collection and tracking. Security posture is generally good with HTTPS and HSTS enabled, but the lack of additional security headers and incident response information limits the overall security maturity. WHOIS data could not be retrieved due to query limits, which reduces transparency but is likely privacy protection common for small businesses. Overall, the site is trustworthy and professional but would benefit from enhanced compliance documentation and security practices.

A

Akvedukts

akvedukts.lv

56

Akvedukts is a Latvian company specializing in the wholesale and retail distribution of plumbing, heating, and water supply products. The website serves as a portal for news, product information, and access to their e-noliktava (online warehouse), targeting both business partners and end customers. The company maintains an active online presence with social media integration and provides customer service centers in Latvia. The website content is rich and regularly updated, reflecting an active business operation in the regional market. Technically, the website employs a custom CMS with JavaScript and jQuery-based features such as autocomplete search. The site is mobile-optimized and includes standard SEO and accessibility features, though some advanced security headers are missing. HTTPS is enforced, and GDPR compliance is indicated through a privacy policy and cookie consent banner. However, WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Security posture is generally good with encrypted connections and no visible vulnerabilities in the HTML content. The absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and serves its business purpose effectively. The main risk is the lack of WHOIS data which restricts full domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to improve trust and compliance.

Y

Yarns from Italy

yarnsfromitaly.com

70

Yarns from Italy is a niche e-commerce retailer specializing in Italian yarns for knitting machines and hand knitting. The website targets knitting enthusiasts and crafters, offering a variety of yarn types including mohair, silk, merino wool, alpaca, cashmere, and wool. The business operates primarily online using the Shopify platform, with a market position focused on quality and specialty yarns. The company was founded in 2017 and appears to be a small-sized enterprise based in Latvia. The website demonstrates consistent branding and good content quality, supported by customer reviews and social media presence.

L

Latvijas Okupācijas muzejs

okupacijasmuzejs.lv

57

Latvijas Okupācijas muzejs is a national museum in Latvia dedicated to educating the public about the country's history of occupation. It offers exhibitions, guided tours, and educational programs targeting a broad audience including students, tourists, and researchers. The museum operates as a non-profit entity supported by donations, ticket sales, and grants, positioning itself as a key cultural and historical institution in Latvia. Technically, the website employs modern web technologies including Google Analytics for visitor tracking and Google Custom Search Engine for site search functionality. The site is mobile-optimized with good navigation and content structure, though some security headers are missing. HTTPS is enforced, and forms include CSRF tokens, indicating a reasonable security posture. Security-wise, the site shows good practices such as encrypted connections and secure form handling but lacks explicit security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data limits domain registration trust analysis, but the site content and contact information strongly support legitimacy. Strategic improvements include enhancing security headers and publishing a vulnerability disclosure policy.

FishBon! is a small e-commerce retailer specializing in fishing tackle and related outdoor products, targeting fishing enthusiasts primarily in Europe. The website is built on the Shopify platform, leveraging modern web technologies and integrating multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. The site demonstrates good digital maturity with mobile optimization, clear navigation, and comprehensive product offerings. Privacy and cookie policies are present and GDPR compliant, reflecting awareness of regulatory requirements. However, direct contact information and explicit security policies are not prominently published, which could be improved to enhance trust and compliance. The domain is privacy protected via EURid, a common practice for EU domains, and no suspicious WHOIS data or blocking mechanisms were detected, indicating a legitimate and accessible online presence.

Gleznukalns Creative operates an e-commerce website focused on publishing and selling coloring books and digital printables for both kids and adults, emphasizing mindfulness and relaxation. The business is relatively new, founded in 2023, and targets a niche market interested in creative and stress-relief activities. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Klaviyo for marketing and Judge.me for customer reviews. The technical infrastructure is solid with good mobile optimization and moderate performance, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS and domain locking, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could enhance transparency and security documentation to improve user trust and compliance.

A

Aleksander Zinko

iamzinko.com

61

Aleksander Zinko is a professional event host specializing in weddings, corporate events, and parties, with a portfolio spanning over 300 events in 14 countries. The website presents a strong personal brand with clear service offerings and a focus on a sophisticated, multicultural audience. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and CDN hosting for performance and reliability. While the site is visually appealing and content-rich, it lacks formal privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain registration is transparent and consistent with the business, though the domain age is relatively new compared to the claimed experience. The site is safe, professional, and trustworthy, with clear contact channels and social media integration.

BLADES Ústí nad Labem is a Czech American football sports club operating primarily in Ústí nad Labem. The website serves as a hub for news, events, and team information targeting fans and participants of American football in the region. The club maintains active engagement through social media channels and partnerships with local organizations. Technically, the website uses standard web technologies including Google Analytics and Facebook SDK for tracking and social integration. The site is accessible, mobile-friendly, and provides a good user experience with clear navigation and relevant content. However, the absence of WHOIS data and explicit privacy policies introduces some trust concerns. Security posture is moderate with HTTPS implied but lacking visible security headers and formal security policies. Overall, the site is functional and credible for its purpose but would benefit from enhanced transparency and security practices.

INTEVO Třinec, s.r.o. is a small Czech Republic based company specializing in construction, installation, and supply services focused on heating, cooling, plumbing, gas, and electrical systems. The company offers a range of services including installation of central heating, underfloor heating, heat pumps, solar systems, water and gas distribution, air conditioning, and electrical installations. The website targets local residential and commercial customers in the Třinec region, positioning itself as a specialized service provider in the energy and installation sector. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS. The site is hosted likely via the registrar WEDOS, a Czech hosting provider. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. From a security perspective, the website lacks critical security features such as HTTPS, security headers, privacy and cookie policies, and contact information for incident response. No forms or data collection mechanisms were detected, reducing some risk, but the absence of GDPR compliance indicators and security best practices is notable. The WHOIS data is consistent with the business claims, showing a domain age of over a decade, supporting legitimacy. Overall, the website presents a basic but functional online presence for a small local business. However, it requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and protect user data.

T

TJ ISMM JISTEBNÍK, z.s.

tjjistebnik.cz

55

TJ ISMM Jistebník, z.s. is a local Czech sports club primarily focused on football activities, including men's teams, youth training, and community events. The website serves as an information portal for club news, match schedules, membership, and event announcements, targeting local sports enthusiasts and club members. The business operates as a non-profit entity with regional sponsorship support, emphasizing community engagement and sports development. Technically, the website is built on the Webnode CMS platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5, and is hosted via AWS Cloudfront CDN. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site enforces HTTPS and uses standard tracking tools but does not implement comprehensive security headers or provide incident response contacts. The absence of WHOIS data due to privacy protection limits domain trust analysis, though the website content and structure appear legitimate and appropriate for its community sports role. Overall, the website presents a good user experience and content quality for its audience but would benefit from enhanced privacy compliance, security hardening, and transparency improvements to strengthen trust and regulatory adherence.

The website minigolfnalibotine.cz represents a small local recreational sports business offering minigolf and tennis facilities in Libotín, Czech Republic. Operated by ISMM Project & Training s.r.o., the site provides basic information about the business, its services, and contact details. The business targets local sports enthusiasts and tourists seeking leisure activities. The website is modest but functional, with a clear structure and relevant content in Czech language. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery 1.11.0, along with Google Analytics and Tag Manager for visitor tracking. The hosting and domain registration are managed by Wedos, a known Czech provider. The site lacks a CMS and advanced frameworks, indicating a simple static or custom-coded site. Mobile optimization and accessibility are basic but present. From a security perspective, the site uses HTTPS for external scripts but no explicit security headers were detected. The use of an outdated jQuery version introduces potential vulnerabilities. No privacy or cookie policies are present, and no consent mechanism is implemented despite tracking scripts, indicating GDPR compliance gaps. Contact information and company registration details are clearly provided, enhancing business credibility. Overall, the website is moderately trustworthy and functional but requires improvements in security practices, privacy compliance, and technical modernization to reduce risks and enhance user trust.

I

ISMM & TESO s.r.o.

teso-jistebnik.cz

47

ISMM & TESO s.r.o. is a Czech manufacturing company specializing in teraco products such as stairs, stair arms, tiles, and accessories, with a tradition spanning over 30 years. The company targets construction professionals and end customers seeking high-quality teraco solutions. Their market position is supported by strong references and membership in the ISMM group, indicating industry credibility. The website reflects a professional business with clear contact information and product offerings. Technically, the site uses standard web technologies including jQuery and lightbox scripts, hosted likely by Wedos, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and privacy compliance mechanisms like cookie consent are missing. The site uses Google Analytics for tracking without explicit cookie consent, indicating partial GDPR compliance. Overall, the website is trustworthy and professionally presented but could improve in privacy and security best practices.

P

PS forwarding, s. r. o.

psforwarding.cz

56

PS forwarding, s. r. o. is a small Czech Republic-based transportation and forwarding company specializing in standard truck transport, oversized cargo transport requiring permits and escorts, and express or partial load deliveries. The company targets businesses needing reliable freight and logistics services within the region. The website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, incorporating Google Tag Manager for analytics. While the site is accessible and uses HTTPS, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact details such as emails or phone numbers. These gaps reduce the overall security posture and privacy compliance of the site. The domain WHOIS data is unavailable, which limits trust verification but does not directly indicate malicious intent. Overall, the website provides basic business information with moderate technical implementation but requires improvements in security and compliance to enhance trust and professionalism.

PHOBS operates an online booking management platform accessible via a secure login portal. The website is designed for authorized organizational users to manage bookings, featuring standard login and password recovery mechanisms. The technical infrastructure relies on common web technologies including jQuery and PHP, with some use of progressive web app manifest files. However, the site lacks visible security headers and privacy compliance documentation, which are critical for protecting user data and meeting regulatory requirements. The absence of WHOIS registration data for the domain raises concerns about the legitimacy and transparency of the domain ownership. Overall, while the site functions as intended for booking administration, it requires significant improvements in security posture and compliance to enhance trustworthiness and protect user information.

1

1. SC NATIOS Vítkovice

florbalvitkovice.cz

46

The website florbalvitkovice.cz serves as the official online presence for the Czech floorball team 1. SC NATIOS Vítkovice. It provides team information, links to league competitions, and fan engagement content primarily targeting floorball enthusiasts in the Czech Republic. The site is well-branded and consistent with the team's identity, reflecting a small-sized sports organization founded in 2009. Technically, the site employs modern frontend technologies such as Alpine.js and Tailwind CSS, and integrates Google Analytics for visitor tracking. The website is mobile-optimized and offers a good user experience with clear navigation and professional design. However, it lacks critical compliance documents such as a privacy policy and terms of service, and does not provide direct contact information, which impacts its privacy compliance and business credibility scores. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and incident response contacts. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

D

Divadlo loutek Ostrava, příspěvková organizace

divadloloutek.cz

47

Divadlo loutek Ostrava is a cultural non-profit organization specializing in puppet theatre performances primarily targeting children, families, and schools in Ostrava, Czech Republic. The website presents a professional and well-structured platform showcasing upcoming performances, educational programs, and the artistic ensemble. The organization maintains active social media channels and provides clear contact information, enhancing its accessibility and community engagement. Technically, the website employs modern web technologies including JavaScript frameworks and CDN hosting, ensuring a responsive and visually appealing user experience. However, the absence of WHOIS data and explicit privacy policies slightly detracts from the overall trustworthiness. Security posture is moderate with HTTPS usage but lacks visible security headers and comprehensive privacy compliance documentation. Overall, the site is suitable for its audience with a good balance of content quality and technical implementation.

I

Globus výdejní služba

iglobus.cz

68

The website shop.iglobus.cz serves as an online retail platform for Globus Hypermarkets in the Czech Republic, offering a wide range of over 25,000 products with a focus on online ordering and store pickup services. The platform is built on the Spryker Commerce OS, leveraging modern web technologies and integrating marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management. The site demonstrates good design quality, clear navigation, and mobile optimization, targeting general consumers in the Czech market seeking convenient grocery and retail shopping solutions. From a technical perspective, the website uses a modern e-commerce framework (Spryker) and includes secure login forms with CSRF protection. However, explicit security headers are not evident in the provided data, and privacy and terms of service pages are not clearly found, indicating areas for improvement in compliance and security transparency. The site employs HTTPS, ensuring encrypted communications, and integrates marketing and tracking services responsibly with cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data reduces domain trustworthiness. The lack of registrant information and domain age details limits the ability to fully assess legitimacy, although the branding and content strongly suggest a legitimate business linked to Globus Hypermarkets. No adult or questionable content is present, and the site is safe for general audiences. Overall, the website is a functional and professional e-commerce platform with room for enhancement in privacy policy visibility, security header implementation, and domain registration transparency. Strategic recommendations include publishing comprehensive privacy and terms documents, improving security headers, and providing clear contact and incident response information to bolster trust and compliance.

T

Tiskárna Grafico s.r.o.

grafico.cz

56

Tiskárna Grafico s.r.o. is a small Czech Republic-based printing service provider offering comprehensive printing solutions with innovative technologies and personalized customer service. The website is professionally designed using the Squarespace platform, featuring good mobile optimization and clear navigation. Contact details including phone numbers, email, and physical address are clearly presented, enhancing business credibility. However, the absence of WHOIS data limits domain trust assessment. Security posture is moderate with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the website presents a legitimate business with room for improvement in security and compliance documentation.

Detska.cz is a Czech language website focused on providing information about children's products such as shoes, bicycles, and cribs. The site primarily serves parents and caregivers seeking product information and links to e-commerce stores. It operates as a small niche content and affiliate marketing platform, monetized mainly through Google Adsense advertising. The website has been active since 2009, indicating a stable presence in its market segment. Technically, the site uses basic HTML, CSS, and JavaScript primarily for advertising scripts. Hosting is provided by HostMonster, as indicated by the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced technical frameworks or CMS platforms. SEO and accessibility are basic, with no structured data or Open Graph metadata detected. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or terms of service policies, indicating poor privacy compliance. No contact information or incident response details are provided, and no forms are present for data collection. The site appears to use HTTP or lacks visible SSL configuration details, which is a critical security concern. No vulnerabilities or exposed sensitive data were detected, but the overall security posture is weak. Overall, detska.cz is a modest informational website with limited technical sophistication and security measures. It is safe for general audiences, with no adult or explicit content. Strategic improvements in security, privacy compliance, and user trust indicators are recommended to enhance its credibility and compliance with modern standards.

D

Debant s.r.o.

prazsky.cz

50

Pražský.cz is a Czech Republic based online directory and advertising platform focused on tradespeople, professionals, and services in Prague. Established in 2008 and operated by Debant s.r.o., the website offers a comprehensive catalog of local craftsmen, service providers, and related businesses, targeting residents and businesses within Prague. The platform also includes advertising opportunities and links to related partner sites in accommodation and other sectors. Technically, the site uses a custom-built infrastructure with standard web technologies including HTML, CSS, JavaScript, Google Fonts, and integrates Google Adsense and Google Analytics for monetization and analytics. It employs an IAB Transparency and Consent Framework compliant consent management platform to address GDPR requirements. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Contact information is available but decentralized, with no dedicated privacy or terms of service pages. Overall, the site is functional and serves its niche well but could improve in privacy transparency and security best practices.

Bulharska.cz is a Czech-language travel information website focused on providing comprehensive details about vacations in Bulgaria, including popular destinations, beaches, cultural sites, and travel tips. The site targets Czech tourists, especially families, looking for affordable and enjoyable holiday options in Bulgaria. It operates primarily as an informational portal with affiliate marketing for travel bookings and vacation packages. Technically, the site uses standard HTML, CSS, and JavaScript, with advertising integrations from Google Adsense and AdFox. Hosting is provided via HostMonster, indicated by the nameservers. The website is moderately optimized for performance and SEO but has basic mobile and accessibility features. Security posture is weak, lacking security headers and published privacy or cookie policies, which poses compliance risks. No contact information or security incident channels are provided, limiting trust and transparency. The domain is well-established since 2008, consistent with the business claims and language. Overall, the site is functional and relevant but requires improvements in privacy, security, and user trust to enhance its credibility and compliance.

Nejlevnejsicestovani.cz is a Czech language travel advice website focused on providing budget travel tips and affordable accommodation options primarily for travel to Croatia and the Adriatic Sea. The site offers practical advice on finding cheap flights, accommodation, and travel strategies for cost-conscious tourists. The business model appears to be content-driven with monetization through Google Adsense and affiliate links to partner accommodation sites. Technically, the site is built with basic HTML, CSS, and JavaScript without a detected CMS, hosted likely via the registrar WEDOS. The site has moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak with no detected HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps with GDPR. No contact information or formal business credentials are provided, limiting business credibility. The domain is registered since 2013 with consistent WHOIS data matching the Czech market focus, supporting legitimacy. Overall, the site serves a niche audience of budget travelers but requires improvements in security, privacy compliance, and business transparency to enhance trust and compliance.

Online-pohadky.cz is a Czech-language website dedicated to providing free online children's fairy tales, cartoons, entertaining videos, mp3 fairy tales, songs, and educational content. The site targets children and families, offering a niche collection of Czech and some foreign fairy tales. The business model appears to be free content distribution supported by advertising, primarily Google AdSense. The website has been active since 2008, indicating a mature presence in its niche market. Technically, the site uses basic HTML, CSS, and JavaScript with Google Custom Search integration and advertising scripts. The design and navigation are functional but basic, with limited mobile optimization and accessibility features.

The website e-televize.cz is a Czech language online media portal specializing in streaming children's fairy tales and TV shows. It targets families and children with a catalog of popular Czech and international animated content. The business model is primarily ad-supported, leveraging Google Adsense and other ad networks to monetize free content. The domain is well-established since 2009, indicating a stable presence in its niche market. Technically, the site uses basic HTML, CSS, and JavaScript with external ad and analytics scripts. The site performance and mobile optimization are moderate but could be improved. Security posture is weak, with no visible HTTPS enforcement or security headers, and no published privacy or cookie policies, which impacts compliance and user trust. Contact information is limited to a single email address in the footer, with no phone or physical address provided. Overall, the site is functional and safe for general audiences but lacks modern security and privacy best practices.

The website larnaca.cz is a small-scale travel information portal focused on the city of Larnaca in Cyprus. It provides detailed travel guides, local history, and vacation offers primarily through affiliate links to travel booking platforms such as invia.cz. The site targets Czech-speaking tourists interested in visiting Cyprus, offering curated content about attractions, accommodations, and activities. The business model relies on affiliate marketing and advertising revenue via Google Adsense. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Hosting is provided by HostMonster, and the domain is registered with REG-WEDOS since 2007, indicating a stable presence. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and no privacy or cookie policies are present, which impacts compliance and user trust. No contact phone numbers or physical addresses are provided, only an email for domain sale inquiries. Overall, the site is functional but basic in design and security.

Kadeřnictví MILI is a small local hairdressing business based in Prague, Czech Republic, offering a range of hairdressing services including modern hairstyles, hair coloring, cutting, wedding hairstyles, hair extensions, eyelash extensions, and a mobile hairdresser service to clients' homes. The website targets local residents seeking convenient and personalized hair care services. The business has been operating since 1999, with the domain registered in 2008, indicating a stable presence in the market. Technically, the website is built with basic HTML, CSS, and JavaScript, without modern frameworks or CMS detected. Hosting is provided by HostMonster, as indicated by the nameservers. The site has moderate performance and basic mobile optimization but lacks advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags. From a security perspective, the site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are published, and no contact emails or forms are available for user interaction, limiting compliance with GDPR and other privacy regulations. The site uses a minimal tracking counter from pocitadlo.cz but no major analytics or marketing tools. Overall, the website is functional and provides relevant content for its target audience but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.