Security Directory

K

Kulturní dům města Holic

kdholice.cz

59

Kulturní dům města Holic is a cultural center serving the Holice region in the Czech Republic, offering a wide range of cultural events including concerts, theater performances, exhibitions, and cinema screenings. The organization also provides community services such as costume rental and operates a museum and gallery, positioning itself as a key cultural hub for local residents and visitors. The website reflects a professional and community-oriented business model focused on cultural enrichment and engagement across all age groups. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Tag Manager, and CAPTCHA services to ensure performance, security, and user experience. The site is mobile optimized, fast loading, and includes SEO best practices, demonstrating a mature digital infrastructure suitable for its audience and business needs. From a security perspective, the site enforces HTTPS, integrates CAPTCHA on forms to prevent abuse, and provides a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious activities were detected, indicating a solid security posture for a small cultural institution. Overall, the website is trustworthy, well-maintained, and aligned with its business purpose. The absence of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the organization. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

P

Památník Dr. E. Holuba

holubovomuzeum.cz

56

Africké Muzeum Dr. Emila Holuba is a small cultural and educational museum located in the Czech Republic, dedicated to the ethnographic collections and legacy of Dr. Emil Holub. The museum serves a general audience interested in African history and cultural heritage, providing exhibitions and educational events. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern web technologies including Google Maps API and Google Fonts, with evidence of Ruby on Rails backend framework. Security posture is adequate with HTTPS and CSRF protections, but lacks published privacy and cookie policies and security headers, indicating room for improvement in compliance and security best practices. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and safe for general audiences.

D

Domov seniorů Drachtinka

drachtinka.cz

48

Domov seniorů Drachtinka is a Czech senior care organization providing residential and special regime care services, along with a day services center named Motýl. The website is professionally designed, well-structured, and targets seniors, their families, and caregivers. It offers comprehensive information about services, pricing, documents, and public offerings such as dining and laundry. The organization maintains a clear online presence with official contact details and social media on Facebook. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Swiper.js, and PhotoSwipe, likely managed via the Galileo CMS platform. It is mobile-optimized, accessible, and implements cookie consent mechanisms in compliance with GDPR. Performance is moderate with good SEO and accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust slightly but the website content and contact information indicate a legitimate entity. Overall, the website is a reliable and professional digital presence for a healthcare non-profit organization, with room for improvement in security headers, incident response transparency, and WHOIS data availability.

V

Vzdělávací centrum Planeta Hlinsko, p.o.

planetahlinsko.cz

48

Vzdělávací centrum Planeta Hlinsko, p.o. is a local educational and cultural institution in the Czech Republic focused on providing engaging educational experiences about Earth sciences and natural phenomena. The website serves as an official portal offering information about their exhibitions, lectures, programs for schools and seniors, and event calendars. It targets a broad audience including families, students, and seniors, positioning itself as a community educational center. Technically, the website is built on a CMS platform by Galileo Corporation, utilizing modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for maps. The site is mobile-optimized, accessible, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and cookie consent implemented, though it lacks some security headers and formal privacy and terms policies. WHOIS data is unavailable, which slightly impacts trust but the site content and contact details appear legitimate and consistent with a public institution. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

M

Městská knihovna Hlinsko

knihovna-hlinsko.cz

46

Městská knihovna Hlinsko operates as a public municipal library serving the community of Hlinsko in the Czech Republic. The website provides comprehensive information about library services, including separate departments for adults and children, an online catalog, event calendars, and contact details. The organization positions itself as a local educational and cultural institution with a focus on community engagement. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Swiper.js, and PhotoSwipe, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and well-structured, though it lacks some advanced SEO and security header implementations. Cookie consent mechanisms are in place, reflecting awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, the absence of WHOIS data and missing privacy and terms of service pages represent gaps in transparency and compliance. No security.txt or incident response contacts were found, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements in privacy documentation, WHOIS transparency, and security headers would strengthen its security posture and compliance standing.

M

Městské muzeum a galerie Hlinsko

mmghlinsko.cz

40

Městské muzeum a galerie Hlinsko is a municipal cultural institution based in the Czech Republic, providing museum and gallery services including exhibitions, cultural programs, and publications. The website serves as an informational and promotional platform targeting local visitors and art enthusiasts. Technically, the site is built on WordPress with WooCommerce integration for e-commerce functionality, employing common plugins for galleries and mobile menus. The site is accessible, mobile-optimized, and uses HTTPS with a valid SSL certificate, indicating a good baseline security posture. However, the absence of visible privacy and cookie policies and lack of WHOIS data reduce compliance and trust scores. Security headers are not evident, and no formal vulnerability disclosure or incident response information is provided, suggesting room for improvement in security maturity. Overall, the website is professional and trustworthy from a content perspective but would benefit from enhanced privacy compliance and domain registration transparency.

Multifunkční centrum Hlinsko is a local cultural and community center in the Czech Republic providing a variety of event programming including theater, cinema, concerts, dance, and exhibitions. It also offers café services and venue rentals, serving primarily local residents and visitors interested in cultural activities. The website is professionally designed with good navigation and mobile optimization, supporting user engagement through event listings and ticket reservations. Technically, the site uses standard web technologies including JavaScript, CSS, and integrates Facebook SDK and Google Analytics for social media and visitor tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trust from a registration perspective, though the website content and contact information appear legitimate and consistent with a public cultural institution. Overall, the site is safe, GDPR compliant, and provides a positive user experience with room for security and transparency improvements.

ZUŠ Hlinsko is a small educational institution specializing in music and visual arts education with a long tradition in the Czech Republic. The website serves as an information portal for students, parents, and the local community, providing news, event calendars, and contact details. The business model focuses on providing basic art education and organizing cultural events. Technically, the website uses basic JavaScript and Facebook SDK for social media integration but lacks advanced frameworks or CMS indications. The site is moderately optimized for performance and mobile use but could improve accessibility and SEO. From a security perspective, the website lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content appears genuine and consistent with a local educational institution. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates moderate digital maturity with room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and verifying domain registration details to enhance trustworthiness and compliance.

Z

Základní škola Smetanova

zssmetanova.cz

37

Základní škola Smetanova is a well-established primary school located in Hlinsko, Czech Republic, with a strong community presence and over 60 years of tradition. The school focuses on quality education combined with physical activity, supported by a dedicated pedagogical team and modern educational tools such as the Bakaláři platform. The website reflects a professional and user-friendly digital presence, targeting students, parents, and local stakeholders. Technically, the website is built on WordPress with modern libraries including jQuery and Google reCAPTCHA v3 for form security. The site is mobile-optimized and includes SEO best practices, though there is room for improvement in accessibility and security headers. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the municipal affiliation and professional content. Security posture is solid with HTTPS enforced and anti-bot measures in place, but the lack of security headers and cookie consent mechanisms suggests areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, trustworthy, and compliant with GDPR, though cookie consent implementation is recommended. Strategically, the school should focus on improving security headers, implementing cookie consent, and publishing a security.txt file to enhance transparency and incident response readiness. These steps will strengthen trust and compliance while maintaining a positive user experience.

Z

Základní škola Resslova Hlinsko

zsresslovahlinsko.cz

48

Základní škola Resslova Hlinsko is a primary educational institution serving the local community in Hlinsko, Czech Republic. The website provides comprehensive information about school activities, events, and services, targeting students, parents, and local stakeholders. The school is positioned as a community-focused public institution with partnerships such as affiliation with the University of Hradec Králové. Technically, the website uses a stable but somewhat dated technology stack including jQuery and Bootstrap 3.4, with a CMS named inPage. The site is mobile-optimized and includes a cookie consent mechanism, but lacks a formal privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response contacts. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the website is functional, informative, and trustworthy for its educational purpose but would benefit from improved security and compliance documentation.

Základní škola Hlinsko, Ležáků 1449 is a well-established primary educational institution in the Czech Republic, providing comprehensive education including practical and special education classes. The website serves as an information portal for students, parents, and the local community, offering news, event calendars, and access to school resources. The school emphasizes extended foreign language teaching and personal development of students. Technically, the website uses a modern tech stack including Bootstrap and jQuery, with a custom CMS likely in use. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate; while no critical vulnerabilities or exposed sensitive data are detected, the site lacks visible security headers and cookie consent mechanisms. WHOIS data confirms the domain's legitimacy and long-term registration consistent with the school's history. Overall, the website is trustworthy and functional but could improve in security and privacy compliance aspects.

M

Mateřská škola, Hlinsko, Rubešova 1250

rubesovka.cz

44

The website represents Mateřská škola Rubešova Hlinsko, a preschool educational institution located in Hlinsko, Czech Republic. It provides childcare and preschool education services with two main locations and multiple classrooms. The site targets parents and guardians seeking preschool education for their children. The business operates as a local public institution with clear contact details and operational information. Technically, the website uses standard web technologies including Bootstrap and jQuery, hosted by a Czech registrar, with moderate performance and good mobile optimization. Security posture is moderate with no detected security headers or privacy policies, indicating room for improvement in compliance and security best practices. No forms or analytics scripts are present, reducing data privacy concerns but also limiting user engagement tracking. Overall, the site is safe, professional, and trustworthy but lacks formal privacy and cookie policies required for GDPR compliance.

M

Mateřská škola Budovatelů Hlinsko

msbudovatelu.cz

55

The website represents Mateřská škola Budovatelů Hlinsko, a local preschool educational institution in the Czech Republic. It provides full-day childcare and education services with six classrooms equipped with educational materials and technology. The site targets parents and guardians seeking preschool education for their children. The business model is straightforward, focusing on local community service with no evident commercial sales or e-commerce components. The website is professionally designed using WordPress with modern plugins and themes, offering good mobile responsiveness and clear navigation. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible vulnerability disclosures. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the site is functional and trustworthy for its purpose but requires improvements in compliance and security transparency.

E

eD group

ed.cz

61

eD group is a large technology holding operating primarily in Central Europe, focusing on IT distribution, software solutions, digital marketing, and e-commerce. The group comprises several subsidiaries specializing in various IT and technology sectors, serving a broad B2B audience. Their market position is strong, with partnerships with major global brands and a comprehensive portfolio of services. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. The absence of WHOIS data limits domain trust assessment but the professional presentation and detailed business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a security.txt file.

D

DIAL GmbH & RELUX Informatik AG

gldf.io

60

GLDF.io is the official website for the Global Lighting Data Format, an open, modular XML-based data format developed and maintained by DIAL GmbH and RELUX Informatik AG, two established German companies in the lighting industry. The website serves as a resource hub offering documentation, schema references, and tools for manufacturers and software developers to adopt and implement GLDF. The project is positioned as an emerging industry standard aiming to streamline lighting product data exchange and integration with BIM and lighting planning software. Technically, the site is built on the modern Docusaurus framework with Algolia-powered search, delivering a fast, accessible, and well-structured user experience. Security posture is moderate with HTTPS enforced but lacking advanced security headers and cookie consent mechanisms. The domain registration is transparent and consistent with the business, supporting trustworthiness. Overall, the site is professional and credible, though improvements in privacy compliance and security policies are recommended.

COMTRIX spol. s r.o. is a Czech Republic-based company established in 1999, specializing in comprehensive IT services including servicing computing technology, sales of computing devices, and delivery of security systems such as camera and access control systems. The company targets businesses and organizations requiring IT and security solutions, positioning itself as a regional player with a solid market presence. The website is built on WordPress using the Enfold theme, leveraging common web technologies such as jQuery and Google Fonts. The digital infrastructure is moderately optimized for performance and mobile responsiveness, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no explicit privacy or terms of service pages, though a cookie consent mechanism is present. Overall, the website is professional and trustworthy but could benefit from enhanced transparency and security practices.

Průmyslové automatizace Czechia, s.r.o., operating under PAC Technology, s.r.o., is a medium-sized engineering company specializing in electrical supplies, automation, and industrial systems primarily serving sectors such as power engineering, water treatment, chemical industry, and automotive. The company offers a comprehensive range of services including engineering, projection, switchboard production, electrical installations, and custom software development for PLC systems. It is part of the KVADOS Group, a larger corporate entity with multiple subsidiaries across Central Europe, enhancing its market reach and capabilities. Technically, the website is built on WordPress 4.9.3 using the Enfold theme and Avia framework, with standard web technologies such as jQuery and Google Fonts. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the WordPress version is outdated, and no advanced security headers are detected, which could pose security risks. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but lacking in security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content, but the outdated CMS version and missing policies suggest areas for improvement. The domain WHOIS data is unavailable, limiting trust analysis, but the website content and business affiliations appear legitimate. Overall, the website and business present a professional industrial automation service provider with room for technical and compliance enhancements to strengthen security and privacy posture.

F

For Home & Net s.r.o.

eshop.report

66

E-SHOP.REPORT is a Czech-based company specializing in providing tailored e-commerce analytics, reporting, and personalization services. Their platform aggregates data from multiple sources, including proprietary data collection and integrations with popular analytics and marketing tools, to deliver comprehensive dashboards and actionable insights for e-shop owners and managers. The company positions itself as a niche player offering advanced segmentation, customer lifetime value calculations, and predictive analytics to improve e-commerce performance. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various tracking pixels, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy present but missing cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, targeting small to medium-sized e-commerce businesses in the Czech Republic and potentially neighboring markets.

G

Gransy s.r.o.

coolcatalogue.eu

44

The website coolcatalogue.eu is operated by Gransy s.r.o., a Czech company, and serves as a multilingual platform for accessing and promoting various catalogues primarily targeting European audiences. The site offers language options for Czech, German, English, French, Hungarian, Italian, Dutch, Polish, and Slovak, indicating a broad regional focus. The business model centers on online catalogue distribution and promotion, positioning itself as a niche player in this space. Technically, the website employs Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is basic in design and functionality, with minimal styling and navigation elements. There is no detected CMS or advanced frameworks, and the site performance is moderate. Mobile optimization and accessibility are basic, with no advanced SEO or accessibility features observed. From a security perspective, the site lacks critical security headers and does not display privacy or cookie policies, which are important for GDPR compliance given the European target audience. No contact information or incident response details are provided, limiting transparency and user trust. The WHOIS data is consistent and transparent, with the registrant matching the website's regional focus and business type, supporting legitimacy. Overall, the website is functional but basic, with significant room for improvement in privacy compliance, security posture, and user engagement features. The absence of privacy and cookie policies and contact information are notable gaps. Strategic recommendations include implementing HTTPS with strong SSL, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

V

Virgo

virgo.hu

66

Virgo is a well-established Hungarian technology company specializing in digital solutions that prioritize human experience. Founded in 2000, the company offers a broad range of IT services including product design, e-commerce solutions, digital accessibility, custom software development, operations services, IT staffing, and nearshore solutions. Their market position is supported by a portfolio of notable clients and detailed case studies demonstrating their expertise and impact. Technically, the website is built on WordPress with modern integrations such as YouTube API and Facebook Pixel, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is limited by the lack of visible privacy and cookie policies, despite the presence of a cookie consent mechanism. Overall, Virgo presents a professional and trustworthy online presence with a strong business credibility score.

The website mktextil2025.eu currently presents no accessible content, with an empty HTML body and no metadata, scripts, or visible business information. The domain is registered through Cloud DNS Ltd, a DNS hosting provider, but no registrant or business details are available on the site itself. This lack of content and contact information severely limits the ability to assess the business, its market position, or services. Technically, the site lacks any detectable technologies, security headers, or compliance policies, indicating a very low digital maturity level. Security posture is minimal, with no HTTPS or security best practices observed. Overall, the site appears inactive, under construction, or blocked, resulting in a very low trust and credibility score.

Promotray operates a secure data storage service accessible via a Nextcloud-based login portal. The website is primarily a login interface with minimal public-facing content, focusing on providing a safe home for user data. The technical infrastructure leverages Nextcloud version 31.0.7 and Vue.js for frontend interactivity, hosted on aditsystems.hosting. The site uses HTTPS and modern web technologies, indicating a moderate level of digital maturity. However, the absence of public privacy, cookie, and terms of service policies, as well as lack of contact information, limits transparency and user trust. Security posture is adequate with HTTPS and session management features, but could be improved by adding security headers and incident response contacts. Overall, the site is functional and secure for its purpose but lacks comprehensive compliance and business transparency features.

I

Inovcorp

workky.com

65

Workky is a Portuguese web-based platform developed by Inovcorp, focused on simplifying internal business process management through modular solutions tailored for various executive roles. The platform integrates with multiple ERP systems and includes compliance features such as a whistleblowing portal, positioning itself as a comprehensive B2B SaaS solution for medium-sized businesses. The website demonstrates good digital maturity with modern technologies including jQuery, Google Tag Manager, and Crisp chat, and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS domain registration data is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the platform appears professional and trustworthy from a business and technical perspective but would benefit from improved transparency in domain registration and enhanced security disclosures.

S

Promotional and customizable products | Stamina

stamina-shop.co.uk

62

Stamina-shop.co.uk is an e-commerce website specializing in promotional and customizable products aimed at businesses seeking brand promotion solutions. The site appears to be part of a multi-regional brand with sister domains targeting different countries. The business is relatively young, founded around 2019, and operates in the retail sector focused on promotional merchandise. Technically, the site uses modern JavaScript frameworks such as Vue.js and includes popular font services like Google Fonts and Typekit, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is basic with no detected security headers or explicit security policies, and no contact information is readily available in the provided HTML content. Overall, the site is functional but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

R

Roly

roly-workwear.es

63

Roly is an established European e-commerce retailer specializing in workwear and uniforms for various industries including high visibility, fire-resistant, sanitary, and food service sectors. The website presents a professional and consistent brand image with multi-language support targeting multiple European markets. Technically, the site leverages modern JavaScript frameworks such as Vue.js and uses popular font services to enhance user experience. However, the lack of accessible WHOIS data due to Red.es query restrictions limits transparency about domain registration details. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. Privacy compliance is weak as no privacy or cookie policies were found. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance disclosures.

R

Ropa de deporte | Roly

rolysport.es

63

The website www.roly.es/category/sports is an e-commerce platform specializing in sports clothing and equipment, including technical shirts, polos, sports pants, and winter garments. The site targets a general audience interested in sports apparel, primarily in Spain, as indicated by the Spanish language and domain. The business model is retail-focused, selling branded sportswear under the Roly brand. The website demonstrates a consistent and professional design with good content relevance and user experience, supporting its role as a commercial sportswear retailer. Technically, the site uses modern web technologies such as Vue.js and Nuxt.js frameworks, Google Fonts, Typekit, and Font Awesome icons. The performance and mobile optimization are good, though some accessibility features are basic. SEO is adequately addressed with proper meta tags and multilingual alternate links. However, no CMS or hosting provider details were identified from the content. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers and explicit privacy or cookie policies in the provided content. No contact information or incident response mechanisms are evident, which could impact user trust and compliance with regulations like GDPR. The absence of WHOIS data due to query restrictions limits domain legitimacy verification, reducing overall trustworthiness. Overall, the website is a functional and professional e-commerce platform with room for improvement in privacy compliance, security best practices, and transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, providing clear contact and incident response information, and improving WHOIS transparency where possible.

S

Productos promocionales y personalizados | Stamina

stamina-shop.com

61

Stamina-shop.com is an e-commerce website specializing in promotional and personalized products targeted at businesses seeking branding and marketing merchandise. The site is primarily in Spanish and serves a business audience in Spain and possibly other European countries, as indicated by alternate hreflang links. The business appears to be small and founded around 2019, with a domain registered through GoDaddy and DNS hosted on Cloudflare. Technically, the site uses modern JavaScript frameworks such as Vue.js and includes popular font services like Google Fonts and Typekit. However, the site lacks comprehensive privacy, cookie, and terms of service policies, and no explicit contact information is found in the HTML content provided. Security posture is basic, with no detected security headers or DNSSEC enabled, though HTTPS is presumably in use given Cloudflare DNS and standard e-commerce practice. Overall, the site is functional but could improve in privacy compliance and security best practices.

G

GOR FACTORY, S.A.

madetoorder.es

55

Madetoorder.es is a Spanish manufacturing company specializing in custom production and personalization of textile and gift items. The company offers end-to-end project management, from initial concept definition to final product delivery, targeting businesses requiring tailored corporate gifts and textile products. The website is professionally designed using WordPress with modern plugins and multilingual support, reflecting a medium-sized enterprise with a solid market presence in Spain. Contact information is comprehensive, including multiple physical locations and phone numbers, enhancing business credibility. Technically, the website employs a mature WordPress infrastructure with popular plugins such as Slider Revolution, WPML, and Contact Form 7. The site is HTTPS secured and includes cookie consent mechanisms, indicating good privacy compliance. Performance and mobile optimization are adequate, though accessibility could be improved. Security headers are not explicitly detected, suggesting room for enhancement in security posture. The security posture is generally good with HTTPS and secure forms, but the absence of explicit security policies or incident response contacts limits the overall security maturity. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable due to query restrictions, limiting domain trust analysis, but website content and contact details support legitimacy. Overall, Madetoorder.es presents a trustworthy and professional online presence suitable for its business model. Strategic recommendations include improving security headers, adding incident response information, and enhancing accessibility to further strengthen security and compliance.

R

Roly

roly.co.uk

64

Roly is an established retail brand specializing in casual wear, sportswear, work clothing, and trainers for men, women, and children. The company operates multiple international sister sites targeting various European markets, indicating a broad geographic presence and a focus on apparel e-commerce. The website presents a professional and consistent brand image with a clear focus on its product offerings and target audience. The domain age dating back to 1999 supports the legitimacy and maturity of the business. Technically, the website leverages modern JavaScript frameworks such as Vue.js and popular libraries like Swiper.js, along with web fonts from Google Fonts and Adobe Typekit, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but the absence of security headers and explicit privacy or cookie policies indicates room for improvement in compliance and security best practices. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening to meet higher standards.

R

Roly

roly.es

64

Roly is a Spanish retail and e-commerce company specializing in casual clothing, sportswear, workwear, and casual footwear for men, women, and children. The website targets a general audience with a focus on apparel and accessories, positioning itself as an established brand with international reach, as evidenced by multiple language alternate URLs. The technical infrastructure leverages modern web technologies such as Vue.js and Swiper.js, with professional typography and iconography, indicating a mature digital presence. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information in the provided HTML, which are critical for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and clear privacy practices. Overall, the website is functional and professional but requires enhancements in privacy compliance and security transparency to reduce risk and improve user trust.

A

Asgard Sp. z o.o.

bluecollection.gifts

67

Asgard Sp. z o.o., operating the website bluecollection.gifts, is a medium-sized Polish company specializing in supplying promotional gadgets and corporate gifts with custom printing services. The company offers a wide range of products and marking techniques, targeting B2B customers seeking branding and promotional solutions. The website is built on a modern Magento platform with the ScandiPWA frontend, integrating advanced monitoring and marketing tools such as New Relic, Smartsupp live chat, and Google Tag Manager. The digital infrastructure supports good performance and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing trust. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

W

WaliChat

wali.chat

51

WaliChat is a technology company specializing in providing a multi-agent live chat platform for WhatsApp, targeting businesses and teams that require efficient customer communication and collaboration. Their platform includes advanced features such as AI-powered chatbots, no-code automation workflows, team permissions, analytics, and a mobile app, positioning them as a comprehensive solution in the WhatsApp business communication market. The company operates on a SaaS subscription model with tiered pricing plans catering to different business sizes and needs. Technically, the website is built using modern web technologies including Bootstrap, FontAwesome, and various JavaScript libraries for UI components and analytics. Hosting appears to be managed via Google Cloud DNS services. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with rich content including videos, screenshots, and detailed feature descriptions. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and no explicit privacy or cookie policies are published, which are gaps in compliance and security best practices. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found in the HTML content. Overall, WaliChat presents a mature and professional online presence with strong business credibility and technical implementation. The main risks relate to privacy compliance and DNS security enhancements. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security incident response disclosures to improve trust and compliance.

R

Ratos

ratos.com

64

Ratos is a Nordic investment group focusing on developing mid-sized companies in technological and infrastructure sectors. The company operates a decentralized governance model that fosters synergies among its subsidiaries, creating value for shareholders and society. The website presents comprehensive business information, press releases, and investor relations content, targeting investors and business stakeholders. Technically, the site uses modern analytics tools including Google Analytics, Google Tag Manager, and Microsoft Azure Application Insights, hosted likely on Microsoft Azure infrastructure. The website is well-designed, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit security or incident response policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is professional and trustworthy in content but would benefit from improved transparency in domain registration and enhanced security disclosures.

The website linemedia.agency is currently inaccessible due to a critical database connection error, resulting in no available content beyond an error message. The domain is registered with EuroDNS S.A. since September 2022, indicating a relatively new but legitimate registration. No metadata, structured data, or business information is present on the site, and no privacy or cookie policies are found. The technical infrastructure appears incomplete or misconfigured, with no evidence of HTTPS or security headers. This severely limits the ability to assess the company's business model, services, or security posture. The lack of accessible content and security features poses a significant risk to user trust and compliance.

F

Forkliftonline Latvija

forkliftonline.lv

58

Forkliftonline Latvija operates as a specialized online platform focused on the trading of forklifts, warehouse machinery, and spare parts. With a market presence spanning over two decades, it serves a broad audience of businesses and individuals in Latvia and internationally through multiple localized domains. The platform offers extensive categorized listings, dealer registrations, and rental services, positioning itself as a key player in the industrial equipment marketplace. Technically, the website employs modern JavaScript frameworks, integrates major analytics and advertising tools, and maintains a professional design with good mobile optimization. Security posture is solid with HTTPS enforcement and basic security headers, though there is room for improvement in security policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility but lacks publicly available WHOIS data and some advanced security disclosures.

A

Agroline Latvija

agroline.lv

58

Agroline Latvija operates a specialized online marketplace focused on agricultural machinery, spare parts, and related products. With over two decades of market presence and millions of monthly users, it serves farmers, agricultural businesses, and equipment dealers primarily in Latvia and internationally through multiple localized domains. The platform offers extensive listings, dealer registration, and advertising services, positioning itself as a trusted intermediary in the agricultural equipment sector. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and a professional design, though accessibility features are basic. Security is enforced with HTTPS and some security headers, but there is room for improvement in header coverage and privacy consent mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and security policy pages indicates partial GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. The site demonstrates strong business credibility through customer reviews, social media presence, and a Google partner badge. Overall, Agroline.lv is a reputable and functional platform with a good balance of business maturity and technical implementation. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and regulatory adherence.

A

Autoline Latvija

autoline.lv

59

Autoline Latvija operates as a leading online platform specializing in the sale and purchase of commercial vehicles and spare parts, serving a broad international audience with over 200,000 daily users. The platform offers extensive listings across multiple vehicle categories and supports sellers with marketing and promotional services. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing, with a responsive design optimized for mobile users. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements in security headers and privacy compliance mechanisms are recommended. The absence of WHOIS data limits full domain legitimacy verification, but the site's professional presentation and extensive business information support its credibility. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing explicit security and incident response policies, and improving security headers to strengthen defense-in-depth.

Z

Zalando SE

zalando.de

47

Zalando SE operates a leading European online fashion retail platform offering a wide range of shoes, clothing, accessories, and beauty products from over 1,900 brands. The website targets consumers interested in fashion and lifestyle products, providing free delivery and returns to enhance customer experience. The company is well-established with a domain age consistent with its founding year of 2008 and operates multiple regional sister sites. Technically, the website employs modern JavaScript frameworks such as React and RequireJS, hosted on Amazon AWS infrastructure, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and consent management via Usercentrics, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable e-commerce platform.

O

OTTO GmbH & Co. KGaA

otto.com

63

OTTO GmbH & Co. KGaA operates a comprehensive corporate website focused on its e-commerce and retail business. The site highlights the company's culture, digital transformation, sustainability efforts, and press relations. It serves multiple audiences including consumers, partners, job seekers, and media. The company is positioned as a large, established player in the German and European e-commerce market with a broad product offering and thousands of partners. Technically, the website uses modern web technologies, is hosted on Akamai CDN, and integrates Google Analytics and social media widgets, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF tokens, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

L

Fotos, Fotobücher, Wandbilder, Fotogeschenke & mehr online

limango-fotos.de

67

The website limango-fotos.de is a German e-commerce platform specializing in photo products such as photo prints, photo books, wall pictures, and photo gifts. It positions itself as a provider of affordable, high-quality photo products with fast delivery and easy ordering. The target audience is general consumers interested in personalized photo products. The business operates in the e-commerce sector with a medium-sized footprint and consistent branding. The website uses modern web technologies including PrimeFaces JSF components, jQuery, Google Tag Manager, and Visual Website Optimizer for analytics and optimization. Consent management is implemented via Cookiefirst, indicating attention to privacy compliance. Security posture is good with HTTPS enforced and secure cookie settings, though the absence of explicit security headers and published security policies suggests room for improvement. No contact information or privacy policy pages were detected, which impacts privacy compliance and business credibility scores. Overall, the website is professionally designed, mobile-optimized, and safe for general audiences, but could enhance trust by publishing comprehensive privacy and security information.

L

limango Travel

limango-travel.de

57

limango Travel is an online travel booking platform specializing in family-friendly and wellness vacation accommodations primarily in Germany and selected European destinations. The website offers a structured and detailed catalog of travel options including family hotels, wellness resorts, summer holidays, vacation apartments, all-inclusive packages, and discount deals. The target audience is families and couples seeking curated travel experiences. The platform is moderately mature technically, leveraging modern JavaScript frameworks such as Vue.js and PrimeVue, hosted on Amazon AWS infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent banner present but no visible privacy policy or terms of service in the provided content. Contact information is clearly provided with dedicated phone lines for Germany and Austria and a company email address. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Q

Q-nomy

qnomy.com

67

Q-nomy is an established enterprise software company specializing in appointment scheduling and queue management solutions tailored for sectors such as healthcare, government, banking, retail, telecom, and education. With over 20 years of experience, the company offers both SaaS and on-premise platforms, integrating with numerous enterprise tools to streamline customer journeys. Their market position is strong, supported by a broad client base and strategic partnerships, notably with Amdocs. Technically, the website is built on a modern stack using Webflow CMS, Google Analytics 4, Microsoft Clarity, Hotjar, and other advanced tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, CAPTCHA protections, and privacy compliance, though explicit security policies and incident response pages are absent. WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high due to visible trust signals and professional presentation.

E

Exness Group

exnessgroup.org

55

Exness Group is a well-established financial brokerage firm founded in 2008, offering a broad range of trading services including forex, cryptocurrencies, CFDs, and social trading. The website serves as an informational and affiliate platform providing detailed reviews, account types, trading platforms, and educational resources targeted at retail and professional traders globally. The company is regulated by multiple financial authorities and audited by Deloitte, reinforcing its market credibility. Technically, the website is built on WordPress with standard SEO and mobile optimization practices, though minor technical issues such as PHP notices and lack of cookie consent mechanisms are present. Security posture is moderate with room for improvement in DNSSEC, security headers, and explicit security policies. Overall, the site is professional, trustworthy, and content-rich, supporting the business's strong market position.

E

EXANTE LTD.

scottandrew.co.uk

59

The website scottandrew.co.uk serves as an aggregator platform providing detailed reviews and information about the EXANTE brokerage firm. EXANTE LTD., founded in 2011 and regulated by MFSA, CySEC, and MiFID, offers a multi-asset trading platform with access to over 400,000 financial instruments globally. The site presents comprehensive business descriptions, customer testimonials, and detailed fee structures, targeting investors and traders seeking professional brokerage services. Technically, the site is built with standard web technologies including HTML5, CSS, and JavaScript, hosted via GoDaddy, and uses HTTPS for secure communication. However, it lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate with no evident vulnerabilities but could be improved by adding security best practices and compliance documentation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

T

Tilde.ai

tilde.lv

63

Tilde.ai is a European leader in AI-powered language technologies, offering a broad range of services including neural machine translation, speech-to-text, text-to-speech, chatbots, and enterprise assistants. The company targets businesses and organizations requiring advanced language solutions, positioning itself strongly in the technology sector with a medium-sized business profile founded in 2017. The website is built on WordPress with modern plugins and technologies, hosted likely on Microsoft Azure, and demonstrates good digital maturity with SEO and mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks some security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy visible. Overall, the site is professional and trustworthy, though improvements in transparency and security documentation are recommended.

L

Lage Ko

darte.lv

40

The website represents Lage Ko, a medium-sized Latvian hospitality business specializing in food delivery, restaurant services, and catering. Their platform offers a variety of cuisines including sushi, bakery items, and banquet services, targeting consumers in Latvia seeking convenient food ordering and delivery. The site is built on the ECOM 2.0 CMS platform and integrates common web technologies such as jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. Cookie consent mechanisms are implemented with granular user options, reflecting a basic level of GDPR compliance. Security posture is moderate with no visible security headers and no explicit incident response policies published. WHOIS data is unavailable due to query limits, but the domain appears legitimate based on website content and business information. Overall, the site provides a professional user experience with clear contact information and social media presence, but could improve in security hardening and transparency.

R

Robnety

robnety.lv

59

Robnety is a Latvian-based small business specializing in WordPress website development, maintenance, and e-commerce solutions tailored for small and new businesses. The company emphasizes cost-effective, reliable services with a strong online presence supported by professional website design and active social media channels. Their offerings include website creation, upkeep, WooCommerce e-commerce development, and training sessions. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on Hostinger, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable due to query limits, which slightly limits domain trust assessment.

B

Brentex OÜ

brentex.lv

41

Brentex OÜ is an established Estonian manufacturer specializing in welded frame trailers and related accessories, serving the Baltic and Scandinavian markets since 2000. The company emphasizes durable construction and moderate pricing, holding EU type approval under Directive 2007/46/EC. Their website targets consumers and businesses seeking reliable trailers, offering detailed product information and multiple retail locations across Latvia. Technically, the website employs modern tracking tools such as Google Tag Manager and Facebook Pixel, and integrates interactive maps via Leaflet.js, reflecting a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in compliance and security posture. The WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website presents a professional and trustworthy front with room to enhance security and privacy transparency.

L

Lux Express

luxexpress.eu

60

Lux Express is a prominent transportation company operating primarily in the Baltic region and neighboring countries, offering intercity and international bus travel services. The company targets general travelers seeking comfortable and reliable bus transportation, supported by a modern digital presence with multilingual support. Their website reflects a strong market position with key services including ticket sales, corporate programs, and charter services. Technically, the site is built on modern frameworks such as React and Next.js, hosted on DigitalOcean infrastructure, and integrates marketing and analytics tools like Google Tag Manager and Exponea. Security posture is robust with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website is professional, trustworthy, and provides a positive user experience with good performance and mobile optimization.