Security Directory

Šimeček spol s r.o. is a small, family-owned manufacturing company based in the Czech Republic specializing in milling natural minerals and producing carbonaceous materials for foundry applications. The company emphasizes its long tradition of over 60 years and offers products under the SIMIX and EKOSIMIX brands. The website is built on WordPress using the Neve theme and Elementor page builder, reflecting a moderate level of digital maturity with basic content and navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact information or social media presence is provided, which limits direct engagement and trust signals. Overall, the site is functional but could benefit from enhanced compliance and security practices.

Ž

Židek tisk s.r.o.

tiskneme.com

41

Židek tisk s.r.o. operates the website tiskneme.com, a Czech printing company specializing in various printing services including large format printing, stickers, decorative printing, sublimation printing, and custom cutting. The company emphasizes nearly 20 years of experience with a small team and multiple printing machines, targeting local businesses and individuals in the Opava and Ostrava regions. Their business model focuses on direct manufacturing and quick turnaround times, supported by an online presence including an e-shop. Technically, the website uses a range of JavaScript libraries including jQuery 1.11.0, Google Analytics, and UI plugins, but some scripts are loaded over HTTP causing mixed content issues. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with HTTPS usage but no visible security headers and outdated libraries present. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is clearly provided, enhancing business credibility. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website content.

JG-Design.cz is a small Czech Republic-based creative services provider specializing in graphic design, photography, and video production. The website presents a professional portfolio of services including corporate identity, promotional materials, product photography, and video editing. The business targets individuals and companies seeking creative media solutions. Technically, the site is built on WordPress with WooCommerce and NextGEN Gallery plugins, hosted by Wedos, and uses modern web technologies such as jQuery and FontAwesome. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance policies. Contact information is clearly displayed, enhancing business credibility. No signs of WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy.

A

ARGOS ELEKTRO a.s.

argos.cz

63

ARGOS ELEKTRO a.s. is a well-established Czech company specializing in electrical equipment and supplies, operating since 1998. The company serves both business and individual customers through a comprehensive e-commerce platform and multiple physical stores across the Czech Republic. Their product range includes cables, lighting, low current technology, household devices, switchboards, heating and cooling systems, photovoltaics, and installation materials. The website reflects a mature business with consistent branding and a clear focus on the energy sector. Technically, the site uses modern JavaScript frameworks such as Vue.js and React, integrates analytics tools like Google Tag Manager and Exponea, and provides a secure user login and shopping cart experience. Security posture is good with HTTPS enabled and secure form handling, though some security headers could be improved. Privacy compliance is indicated by the presence of privacy and cookie policies with consent mechanisms, though explicit GDPR statements are limited. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

B

Balnabed s.r.o.

balnabed.cz

51

Balnabed s.r.o. is a Czech manufacturer specializing in custom wooden furniture, kitchens, and industrial packaging solutions. Established since 1992, the company serves customers primarily within the Czech Republic, offering modern and rustic style furniture tailored to client specifications. Their business model combines manufacturing with direct retail and design consultancy services, positioning them as a reputable medium-sized player in the manufacturing sector. The website reflects a professional digital presence with clear branding and comprehensive service descriptions. Technically, the website leverages a modern e-commerce platform (Upgates) and integrates multiple analytics and marketing technologies including Google Analytics 4, Facebook Pixel, Matomo, and Sklik retargeting. The site is mobile-optimized and uses Bootstrap for responsive design, ensuring a good user experience across devices. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks advanced security headers and does not publish a formal security policy or incident response contact, which could be improved. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. The main limitation is the absence of WHOIS registration data, which slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

O

Obec Štítina

stitina.cz

49

The website www.stitina.cz serves as the official online presence for the municipality of Štítina in the Czech Republic. It provides residents and visitors with local news, official municipal notices, event calendars, and contact information for municipal offices. The site targets local citizens and stakeholders interested in community affairs and municipal services. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, likely built on the Ocelot CMS platform. The site is mobile optimized, accessible, and performs moderately well. It uses HTTPS with a good SSL configuration, though it lacks some advanced security headers. Cookie consent is implemented, but a formal privacy policy page is missing. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of explicit security headers and vulnerability disclosure mechanisms are areas for improvement. The WHOIS data for the domain is unavailable, which is unusual for a government domain and slightly reduces trust, though the site content and contact details appear legitimate. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. Strategic recommendations include publishing a privacy policy, adding security headers, and providing vulnerability disclosure information to enhance compliance and security posture.

E

ENWICO DATA s.r.o.

virtualzone.eu

40

Virtualzone.eu is a small Czech Republic-based technology company operating under the legal name ENWICO DATA s.r.o. The company provides cloud solutions, managed servers, and application hosting services primarily targeting businesses seeking cloud infrastructure and managed hosting. The website is minimalistic but clearly communicates the core services and contact information. The market position appears to be a niche regional provider with a focus on cloud and hybrid cloud technologies. The business model is B2B service provision with no evident e-commerce or direct consumer sales. From a technical perspective, the website uses basic HTML and CSS without advanced frameworks or CMS. There is no evidence of modern analytics, tracking, or advertising technologies. The site is moderately performant but lacks mobile optimization and accessibility features. SEO is basic with minimal meta tags and no structured data or Open Graph tags. Security posture is weak with no detected HTTPS confirmation, no security headers, and no published privacy or cookie policies. There is no incident response or vulnerability disclosure information. The WHOIS data is structured and shows the domain is registered via a known registrar, Gransy s.r.o., but the registrant does not match the operating company, which is common. No suspicious patterns or privacy protection are detected. Overall, the website is functional but basic with significant room for improvement in security, privacy compliance, and technical modernization. The risk level is moderate due to lack of HTTPS confirmation and missing compliance documentation. Strategic improvements in security headers, privacy policies, and mobile optimization are recommended to enhance trust and compliance.

DP webdesign is a small Czech web design studio specializing in creating websites, internet presentations, and advertising materials primarily for local businesses, entrepreneurs, and private individuals. The company has been active since 2009 and showcases a portfolio of over 70 completed projects, emphasizing professionalism, simplicity, and functionality in their web solutions. Their services include web design, development, graphic design, and ongoing website administration and support. The website content is in Czech and targets a local Czech audience. Technically, the website uses a modern but basic tech stack including Bootstrap 4, jQuery, Font Awesome, and several JavaScript libraries for UI effects and carousels. Some resources are loaded locally, others from CDNs. The site appears mobile responsive with good navigation and content structure, though accessibility features are basic. Hosting and DNS are managed through REG-INTERNET-CZ and Forpsi name servers. Performance is moderate with no evident CMS or advanced platform detected. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating compliance gaps with GDPR. SSL status is unknown from the data but recommended to verify HTTPS enforcement. No forms collecting sensitive data are present, reducing immediate risk. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the stated experience and no privacy protection, enhancing trust. Overall, the website is functional and professional for a small local web design business but would benefit from improved privacy compliance, security hardening, and transparency on data protection. The risk level is moderate with no critical vulnerabilities detected but some compliance and security best practices missing.

L

Lysá hora – Chata Emil Zátopek – Maraton

lysa-hora.cz

44

Lysá hora – Chata Emil Zátopek – Maraton is a well-established hospitality business operating mountain accommodation and leisure services in the Beskydy mountains of the Czech Republic. Founded in 2002 and operated by AK 1324, s.r.o., the company offers comfortable lodging, gastronomy, social events, and recreational activities such as bowling. The website reflects a professional and consistent brand presence targeting tourists and visitors seeking mountain experiences. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a solid security posture with no critical vulnerabilities detected. Business credibility is supported by clear contact information, social media presence, and partner affiliations. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining regular updates to plugins and themes.

A

AGENTURA Hana s.r.o.

ckhana.cz

54

AGENTURA Hana s.r.o. operates the website www.ckhana.cz as a travel agency specializing in flight-based and other transport holiday packages from cities such as Ostrava, Katowice, Brno, Prague, and Vienna. The company offers a variety of travel services including last-minute deals, exotic destinations, and European vacations. The website targets Czech-speaking travelers and provides a comprehensive catalog of travel offers with booking capabilities. Technically, the site is built on the CeSYS travel agency system, utilizing modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Google Analytics. The site is mobile-optimized and includes SEO best practices with proper metadata and Open Graph tags. Security posture is solid with HTTPS enforced and spam protection on forms, but lacks some security headers and explicit privacy policy documentation. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site is functional and well-structured but would benefit from enhanced transparency and security documentation.

Muzeum Třineckých železáren a města Třince operates as a cultural and educational institution focused on preserving and presenting the history of the Třinec Ironworks and the city of Třinec. The museum offers permanent and temporary exhibitions, educational programs, and virtual tours, targeting local residents, students, and visitors interested in industrial heritage. The website reflects a well-structured and visually consistent digital presence, employing modern front-end technologies such as Bootstrap and Owl Carousel to enhance user experience. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is moderate, with HTTPS usage but missing security headers and no visible incident response or vulnerability disclosure information. Overall, the domain registration data aligns well with the museum's identity, indicating legitimacy and consistency.

Galerie města Třince operates as a local cultural institution focused on art exhibitions, educational activities, and community events in Třinec, Czech Republic. The website presents a professional and consistent brand image with clear navigation and relevant content for its target audience interested in arts and culture. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for visitor tracking. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service pages indicate gaps in transparency and compliance. Security posture is moderate with cookie consent implemented but missing security headers and unclear SSL configuration. Overall, the site is functional and informative but would benefit from enhanced compliance and security measures.

DŮM DĚTÍ A MLÁDEŽE, Třinec, is a non-profit educational organization based in the Czech Republic that provides a wide range of extracurricular activities, including clubs, events, weekend retreats, and summer camps primarily targeted at children and youth. The organization positions itself as a local community resource fostering engagement and development through creative and physical activities. The website reflects this mission with clear descriptions, event listings, and contact information, supporting its role as a trusted community institution. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, delivering a responsive and accessible user experience. The site is hosted securely over HTTPS, with no detected blocking or WAF interference, and includes a cookie consent mechanism. However, it lacks some security headers and a published privacy policy, which are areas for improvement. From a security perspective, the site demonstrates good basic practices such as HTTPS enforcement and no visible sensitive data exposure. The absence of a privacy policy and incident response information suggests gaps in compliance and security transparency. The WHOIS data is unavailable or privacy protected, which is common for non-profit organizations and does not raise immediate concerns given the consistent business information presented. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Strategic recommendations include publishing a privacy policy, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.

M

Městské kino Kosmos Třinec p. o.

kinokosmos.cz

45

Kino Kosmos Třinec is a municipal cinema located in Třinec, Czech Republic, operating since 2005. It provides a variety of film screenings including premieres, programs for seniors, children, schools, and summer cinema events. The website serves as a community cultural platform offering detailed program schedules and ticket purchasing options. The target audience is broad, including families, seniors, children, and local schools, positioning the cinema as a key local cultural institution. Technically, the website uses a combination of older and modern JavaScript libraries such as jQuery 1.11.3, RoyalSlider, and jsCalendar, indicating moderate digital maturity with room for modernization. The site is mobile optimized and offers good navigation and user experience.

K

Knihovna Třinec

knihovnatrinec.cz

63

Knihovna Třinec is a public library serving the Třinec region in the Czech Republic, offering book lending, cultural events, educational programs, and regional library functions. The website targets children, youth, adults, schools, and libraries, positioning itself as a leading local cultural and educational institution. The business model is focused on public service and community engagement, supported by partnerships with government and cultural organizations. Founded in 2014, it operates as a medium-sized entity with a consistent brand presence and good content quality.

Město pod palcem is a comprehensive communication platform designed to facilitate rapid and dynamic interaction between municipalities and their citizens in the Czech Republic. The platform offers a modular system including mobile applications, issue reporting, surveys, payment processing, public transport information, and integration with existing city IT systems. It is well-established with multiple municipal clients and positive testimonials, positioning it as a trusted solution in the government technology sector. Technically, the website is built on WordPress with a modern but somewhat dated technology stack including Bootstrap and jQuery. The site is mobile-optimized and features standard web technologies and plugins such as Contact Form 7 and Google reCAPTCHA for spam protection. SEO and accessibility are adequately addressed, though some improvements could be made in security headers and updating libraries. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and uses an outdated jQuery version that may expose it to vulnerabilities. The absence of WHOIS data reduces transparency and trust slightly, though the business references and content quality support legitimacy. Privacy compliance is partially met with a privacy policy linked externally but lacks a cookie consent mechanism. Overall, the website presents a professional and credible front for a government-focused technology service, with moderate technical maturity and some security improvements recommended to enhance trust and compliance.

M

Home - MajDay

majday.cz

47

MajDay.cz is a regional event organizer based in the Czech Republic, specializing in sports and cultural festivals, notably the annual MajDay festival which includes obstacle races, exhibitions, and concerts. The website reflects a well-established community-focused business with a consistent brand and active social media presence. Technically, the site is built on Joomla CMS with modern frontend libraries and integrates social media and ticketing services effectively. Security posture is adequate with HTTPS and CSRF tokens but lacks advanced security headers and formal privacy or incident response policies. Overall, the site is safe, professional, and targeted at a general audience interested in sports and community events.

E

ENVIFORM a.s.

enviskola.cz

54

ENVIFORM a.s. operates an e-learning platform specializing in workplace safety, health, and environmental training with certification for employees. The company has a 15-year market presence and emphasizes professionalism backed by accreditation and certification. The website targets companies and employees seeking professional safety training solutions. Technically, the site uses common web technologies such as Bootstrap, jQuery, and CKEditor, but lacks modern CMS or advanced frameworks. Performance and mobile optimization are basic but functional. Security posture is moderate with secure login forms but lacks HTTPS enforcement and security headers, which are critical for protecting user data and trust. Privacy compliance is weak, with no visible privacy or cookie policies, which is a concern given GDPR requirements. WHOIS data is unavailable, reducing transparency and trustworthiness. Overall, the site is functional and professional but requires improvements in security and compliance to enhance trust and protect users.

J.M. POST is a Czech Republic-based IT service provider established in 1994, specializing in web development, e-commerce solutions, custom software, and online marketing services. The company serves a diverse clientele including small and medium businesses, large enterprises, public institutions, and international partners. Their website demonstrates a solid technical infrastructure with HTTPS, modern JavaScript libraries, and integration of Google Analytics and Tag Manager for tracking. However, the absence of visible privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response information. Overall, the website is professional and trustworthy, but the lack of WHOIS data and privacy documentation suggests areas for improvement.

M

MEDIA MARKETING SERVICES a.s.

hitradionorthmusic.cz

53

Hitrádio North Music is a Czech internet radio station operated by MEDIA MARKETING SERVICES a.s., founded in 2017. The website offers multiple live music streams, podcasts, radio programs, contests, and an e-shop, targeting Czech-speaking music listeners. The platform demonstrates a solid market position as a regional media outlet with active community engagement and a professional digital presence. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and Foundation CSS framework, hosted by Active24. The website is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS, CSRF protection, and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. Overall, the site is trustworthy, professionally maintained, and safe for general audiences.

B

Brutal Kruháč

brutalkruhac.cz

45

Brutal Kruháč is a Czech Republic-based fitness training organization specializing in circuit training for beginners and advanced participants. Established in 2012, it operates in multiple cities offering diverse training sessions both in-person and online. The website is professionally designed using WordPress with WooCommerce for e-commerce capabilities and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The business targets fitness enthusiasts seeking dynamic and effective workouts in a community environment. The company maintains a consistent brand presence with active social media engagement and customer testimonials enhancing trust. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, hosted by Wedos, a reputable Czech hosting provider. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website reflects a credible and mature business with good digital maturity and moderate tracking practices balanced by basic GDPR compliance.

D

Dream PRO

dreampro.cz

48

Dream PRO is a professional and reputable event agency based in the Czech Republic, offering a wide range of event-related services including event organization, programs, artist services, and equipment rental. The company targets businesses, municipalities, and individuals, positioning itself as a trusted regional player with a strong portfolio of client references and active social media presence. The website reflects a modern and professional digital presence with good content quality and user experience. Technically, the site uses established JavaScript libraries such as jQuery and Swiper, integrates Google Analytics and Tag Manager for tracking, and implements cookie consent mechanisms to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on website content and social signals. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust.

R

Restaurace Tyršovka

restauracetyrsovka.cz

39

Restaurace Tyršovka is a small hospitality business operating a restaurant in Ústí nad Labem, Czech Republic. The business focuses on serving freshly prepared traditional and modern Czech cuisine, with an emphasis on quality beer and service. The website supports online ordering through a partner platform and maintains active social media profiles. The business appears to be well-positioned locally with a clear target audience of local residents and visitors seeking quality dining experiences. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Lightbox, hosted on WEDOS infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally presented but would benefit from enhanced compliance and security measures.

T

TURBIN s.r.o.

turbin.cz

63

TURBIN s.r.o. is a Czech-based supplier specializing in abrasives and grinding technologies with a 30-year tradition. The company serves industrial clients by offering a wide range of abrasive products, technical consultancy, and customized solutions to optimize manufacturing processes. Their market position is supported by a broad partner network domestically and internationally, and they hold ISO 9001 certification, underscoring their commitment to quality. The website reflects a professional B2B business model targeting manufacturing sectors requiring precision grinding tools. Technically, the website employs modern frontend technologies including Bootstrap, Swiper.js, and Google services such as reCAPTCHA and Tag Manager. The site is mobile-optimized with good navigation and content relevance. However, no CMS or hosting provider details were identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, and a comprehensive cookie consent mechanism is in place, indicating GDPR compliance. However, no security headers were detected, and WHOIS data is missing, which reduces trustworthiness. There is no visible security policy or incident response contact information. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from improved security practices and verified domain registration information to enhance legitimacy and compliance posture.

Sport Fight Club is a small sports organization based in Ústí nad Labem, Czech Republic, specializing in combat sports and fitness training for children and adults. The website provides detailed information about their training programs, trainers, and membership options, positioning itself as a local hub for combat sports enthusiasts. The business model revolves around offering training sessions, group classes, and related retail services through an affiliated shop. Technically, the website uses a custom CMS (LuckyWonder CMS 3.0) and common frontend libraries such as Bootstrap and jQuery, delivering a good user experience with responsive design and clear navigation. However, the absence of WHOIS data and security headers indicates areas for improvement in domain legitimacy and security posture. Privacy and cookie policies are missing, which impacts compliance with GDPR and related regulations. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

EVROmat a.s. is a well-established Czech manufacturer specializing in gutter systems, metal roofing materials, and sheet metal roofing accessories. Founded in 1992, it holds a leading market position as the largest domestic manufacturer in its sector, serving both wholesale and retail customers primarily in the Czech Republic. The company offers a comprehensive product range including roofing tiles, metal sheets, insulation, and roofing windows, supported by technical consulting and logistics services. The website reflects a professional and consistent brand image with clear business information and multiple physical locations, enhancing trustworthiness. Technically, the website employs a mature technology stack including jQuery, Google Tag Manager, Matomo Analytics, and Google reCAPTCHA, running on the IPO CMS platform. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and anti-bot measures in place, though it lacks some security headers and explicit privacy and terms policies. Analytics usage is moderate with user tracking balanced by a cookie consent mechanism. Security-wise, the site shows good practices such as encrypted connections and form protections but would benefit from publishing clear privacy policies, terms of service, and incident response contacts. The absence of WHOIS data limits domain trust verification, but the website content and business details support legitimacy. Overall, the site is safe, professional, and suitable for its target audience, with room for improvement in compliance and security transparency. Strategically, EVROmat should focus on enhancing privacy compliance, adding security headers, and improving incident response readiness to strengthen its security posture and customer trust. Continued modernization of technical infrastructure and clear communication of policies will support sustainable growth and market leadership.

M

merch.sk

merch.sk

41

merch.sk is a Slovak-based e-commerce platform specializing in branded merchandise including clothing, accessories, and CDs. The website targets fans of various cultural, entertainment, and sports profiles primarily within Slovakia and Central Europe. The platform supports multiple languages and currencies, enhancing its regional appeal. Technically, the site employs modern JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Sendinblue, indicating a mature digital marketing infrastructure. Hosting and CDN services are provided via DigitalOcean Spaces, ensuring reliable content delivery. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, merch.sk presents as a legitimate, moderately sized e-commerce business with a good balance of content quality, technical implementation, and business credibility.

M

MEDICON a.s.

mediconas.cz

48

MEDICON a.s. is a large healthcare service provider operating multiple polyclinics and specialized medical centers in Prague, Czech Republic. The company offers comprehensive ambulatory care through approximately 300 doctors across more than 40 specialties, including oncology, radiology, fertility treatment, and home care. Their network includes partner entities such as Pharmacentrum pharmacies, Mammacentrum breast cancer prevention centers, and PRONATAL fertility clinics, positioning MEDICON as a significant player in the regional healthcare market. Technically, the website is built using modern web technologies including React 17, with polyfills for compatibility and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. However, no explicit security policy or incident response information is published, and security headers are not visibly configured, which could be improved. The security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces domain registration transparency, which slightly impacts trustworthiness. Overall, the website demonstrates a professional and trustworthy digital presence with room for enhancement in security policy transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and verifying domain registration details to improve trust and compliance.

H

Holmes Place

holmesplace.com

56

Holmes Place is a premium fitness club operator offering a wide range of wellness services including group classes, personal training, nutrition, physiotherapy, and spa treatments. Established in 1980, the company positions itself as a lifestyle brand promoting balance, support, inclusion, and progress. The website is professionally designed with a clear focus on user engagement and brand consistency. Technically, the site uses modern React technology, integrates Google services such as Tag Manager and Maps, and hosts media assets on Amazon S3, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain legitimacy. Overall, the site is trustworthy and well-positioned in the hospitality and fitness sector but could improve in security transparency and privacy mechanisms.

C

CloudSailor s.r.o.

cloudsailor.eu

47

CloudSailor s.r.o. operates a Czech-language e-commerce platform solution aimed at enabling businesses to efficiently manage and operate online shops. The company positions itself as a provider of smart, intuitive, and modern tools with features such as product administration, integration with external systems, personalization, pricing management, and advanced search capabilities. The website demonstrates a professional design with clear navigation and references to notable clients, indicating a stable market presence in the Czech Republic's technology and e-commerce sectors. Technically, the site employs common analytics and marketing tools including Google Analytics, Facebook Pixel, and Leady tracking, and uses jQuery and Owl Carousel for UI components. While HTTPS is used, no explicit security headers were detected in the HTML content, and no privacy or cookie policies were found, indicating room for improvement in compliance and security transparency. The absence of WHOIS registrant data is due to EURid privacy policies, but the domain and website content appear consistent and legitimate. Overall, the site is functional and professional but could enhance its security posture and privacy compliance.

E

Event Service

tymuj.cz

56

Týmuj is a well-established Czech online platform and mobile application dedicated to organizing sports teams efficiently. The service targets team leaders, players, and parents, providing tools for scheduling events, tracking attendance, and facilitating team communication. With over 14 years in operation and a substantial user base, Týmuj holds a strong market position in the sports team management niche within the Czech Republic. The business model is freemium, offering enhanced features through a premium subscription. Technically, the website employs modern web standards with responsive design and supports iOS and Android platforms, hosted by a regional provider consistent with its market. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though improvements in security headers and explicit policies are recommended. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and user-friendly, with clear branding and social proof through partners and social media presence.

A

Arturo Emilio

arturoemilio.es

54

Arturo Emilio is a seasoned SAP technical consultant and leader based in Spain, with over 15 years of experience in SAP systems and related technologies. The website showcases a professional portfolio emphasizing technical leadership, SAP S/4HANA implementations, interface migrations, and custom application development. The business targets enterprises and professionals seeking specialized SAP consulting services primarily in Barcelona and surrounding regions. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, and includes multilingual support via Google Translate. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the website reflects a credible, professional consultancy with a solid digital presence and compliance maturity.

C

Coworking Riga

coworkingriga.lv

51

Coworking Riga is a small, locally focused coworking space provider based in Riga, Latvia, offering flexible office solutions including coworking desks, private offices, meeting rooms, and a photo studio. The website is built on WordPress using a modern theme and plugins, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure includes common web technologies and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled and domain protections in place, though DNSSEC is not enabled and security headers are not detected. Privacy compliance is limited, with no explicit privacy policy or terms of service pages found, but a cookie consent mechanism is implemented. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security hardening are recommended.

C

Coma Web Development

coma.lv

49

Coma Web Development is a small Latvian technology company specializing in WordPress website design, development, hosting, and support services. Established in 2010, it serves a global clientele with a focus on delivering high-quality, custom WordPress solutions ranging from landing pages to complex e-commerce platforms. The company emphasizes meeting deadlines, quality, and customer engagement through transparent project tracking and communication. Their market position is supported by a decade of experience and a portfolio of reputable clients, as evidenced by their Clutch.co presence and social media activity. Technically, the website is built on WordPress using the Enfold theme and several modern plugins such as Rank Math SEO and WPML for multilingual support. Hosting infrastructure is based on Hetzner, ensuring high uptime and reliability. The site implements Google reCAPTCHA v3 for form security and uses Google Tag Manager and Ahrefs Analytics for tracking and SEO optimization. Performance and mobile responsiveness are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, which are important for GDPR compliance. Overall, the website is professional, trustworthy, and secure with room for improvement in privacy compliance and security best practices. The domain registration data aligns well with the business information, supporting legitimacy. No critical vulnerabilities or suspicious content were detected.

1

10Web

10web.io

71

10Web is a US-based technology company founded in 2017, specializing in AI-powered website building, hosting, optimization, and security services. Positioned as an innovative SaaS provider, 10Web offers a comprehensive ecosystem that enables businesses and individuals to create or recreate websites efficiently. The company enjoys a strong market presence supported by high user ratings and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and Cloudflare DNS, though improvements are recommended in DNSSEC and security headers. Privacy compliance is currently basic, lacking explicit privacy and cookie policies. Overall, 10Web demonstrates a professional and trustworthy online presence with room for enhanced compliance and security transparency.

A

AlpicAir

alpicair.com

34

AlpicAir is a small-sized company specializing in air conditioning and climate control systems, offering a range of products including residential and commercial air conditioners, heat pumps, and ventilators. The company operates a partner program and targets both B2B partners and end customers. The website is built on OpenCart 2.0 with a technology stack including jQuery, Bootstrap, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is basic with presence of privacy and cookie policies but limited GDPR indicators. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is professional and trustworthy with room for security and privacy improvements.

D

Daikin

daikin.lv

52

Daikin.lv is the Latvian website for Daikin, a global leader in heating, ventilation, air conditioning, and refrigeration solutions with over 90 years of experience. The site targets residential and commercial customers, installers, architects, and consultants, offering a broad portfolio of energy-efficient climate control products and services. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting Daikin's strong market position and commitment to innovation. Technically, the site uses Adobe Experience Manager CMS, integrates modern analytics tools like Matomo and Google Tag Manager, and employs security best practices including HTTPS and cookie consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though explicit security policy and incident response contacts are not publicly detailed. Privacy compliance is robust with comprehensive privacy and cookie policies aligned with GDPR. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

S

SIA "Klimata Konsultanti"

toshibalatvija.lv

50

The website toshibalatvija.lv represents a small Latvian business specializing in the sales and servicing of Toshiba air conditioning and heat pump systems. The company, identified as SIA "Klimata Konsultanti", targets residential and small commercial customers seeking modern HVAC solutions. The site offers product information, user manuals, and contact details, positioning itself as a local authorized distributor and service provider for Toshiba products. The business appears established since at least 2009, based on copyright information. Technically, the website is built on the anaZana CMS platform and uses legacy JavaScript libraries such as jQuery 1.8.1. It integrates Google Analytics and Alexa tracking scripts for visitor analytics and advertising purposes. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and modern SEO practices. No explicit HTTPS enforcement or security headers were detected in the provided content, which may expose users to risks. From a security perspective, the site does not display privacy or cookie policies, nor does it provide incident response or security contact information. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the visible business information and consistent branding suggest a legitimate operation. However, the use of outdated libraries and missing security best practices indicate areas for improvement. Overall, the website is functional and professional but requires enhancements in security posture, privacy compliance, and technical modernization to better protect users and improve trustworthiness.

G

Grandem Group

grandem.lv

42

Grandem Group is a creative and dynamically progressing agency based in Latvia, specializing in graphic design and web solutions. Their services include website development, graphic design, SEO optimization, branding, banner creation, video production, and logo design. The company targets both corporate and private clients, emphasizing an individual approach and responsibility, positioning itself as a reliable partner in its industry. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, Bootstrap, and Google Analytics, supported by Cloudflare DNS services. Security posture is good with HTTPS enforced and no exposed sensitive data, though some improvements are recommended such as adding security headers and fixing broken images. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with clear contact information and social media presence.

I

I-STYLE

i-style.lv

44

I-STYLE is a Latvian-based small e-commerce retailer specializing in gold-plated jewelry, Swarovski crystal products, Bulgarian rose cosmetics, and gift items. The website is professionally designed using OpenCart CMS and incorporates modern web technologies such as jQuery, Bootstrap, and Google Analytics. The site offers multilingual support (Latvian and Russian) and multiple currency options, targeting consumers interested in jewelry and cosmetics. The business model focuses on online retail with a niche market position emphasizing quality and original gift products. Technically, the website is moderately optimized for performance and mobile devices, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Contact information is available via phone and contact form, and privacy and terms pages exist but are basic. WHOIS data could not be retrieved due to query limits, limiting full domain legitimacy verification. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and privacy compliance.

Y

Mozello - Page not found

yerbatea.lv

47

The domain www.yerbatea.lv currently serves only a 404 error page hosted on the Mozello platform, indicating that the website content is either deleted or never published. No business information, contact details, or policies are available, making it impossible to assess the company's operations or market position. The technical infrastructure is minimal, relying on Mozello CMS and Amazon CloudFront CDN for hosting static assets. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details and raising concerns about domain legitimacy. Overall, the website is inactive or misconfigured, presenting a high risk for users and no trust signals.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is not a publicly accessible website. The content is minimal and consists primarily of embedded Chromium offline game scripts and styling for error display. No business-related content, contact information, or policies are present. The technical infrastructure is limited to static HTML, CSS, and JavaScript used internally by the Chrome browser. Security posture is minimal due to the nature of the page, with no HTTPS or security headers applicable. Overall, this is not a website but an internal browser error page, thus no meaningful business or security analysis can be performed.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content for the domain 'chromewebdata' is not accessible. There is no real business or website content to evaluate. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security information is available. The technical infrastructure appears to be a local browser error page with embedded Chromium UI components and JavaScript for the offline dinosaur game, but no external hosting or CMS is detected. Security posture is minimal due to lack of accessible content and absence of HTTPS or security headers. Overall, the site is inaccessible for analysis and should be treated as blocked or non-existent for external users.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which does not serve any actual website content. This page is typically shown when the browser cannot load a webpage, indicating no external business or organizational presence. Consequently, no business information, privacy policies, or contact details are available. The technical infrastructure is limited to embedded Chromium scripts for the offline dinosaur game, with no external hosting or CMS detected. Security posture cannot be fully assessed due to lack of real content and headers. Overall, the site is inaccessible for meaningful analysis and scores very low on content quality, privacy compliance, and business credibility.

A

Automatisko Ātrumkārbu Remonts Rīgā

atrumkarburemonts.lv

54

Automatisko Ātrumkārbu Remonts Rīgā is a specialized automotive service provider based in Riga, Latvia, focusing on automatic transmission repair and diagnostics. The company is led by Vladimirs Raščoskins, a recognized expert in the field with a strong reputation and over 2000 repairs since 2009. The website presents a professional image with clear service offerings, pricing, and multiple contact channels including phone, email, and popular messenger platforms. The business targets vehicle owners in Riga and surrounding areas seeking reliable transmission repair services. Technically, the website employs modern analytics and tracking tools such as Google Analytics and Facebook Pixel, and uses responsive design with good SEO practices. However, explicit security headers and detailed security policies are not evident, which could be improved to enhance trust and compliance. The WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is well-structured, content-rich, and trustworthy from a business perspective but would benefit from enhanced security and compliance transparency.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that displays the offline dinosaur game. This is not a publicly accessible website but a local browser resource page shown when a webpage fails to load. Consequently, there is no business information, privacy policies, or contact details available. The page primarily consists of embedded JavaScript and CSS for the offline game functionality. The technical infrastructure is limited to Chromium's embedded scripts and canvas-based game rendering. Security posture is minimal but expected given the nature of the page. Overall, this is not a commercial or public-facing website, and no meaningful business or compliance analysis can be performed.

Elegant Lashes Studio is a small local beauty salon based in Latvia specializing in professional eyelash extension services. The website presents a clear business focus on offering various eyelash extension techniques to create natural and voluminous lashes. The site is built on WordPress and includes multilingual support via the Google Language Translator plugin, indicating an intent to serve a diverse audience. The technical infrastructure is moderate with good mobile optimization and SEO practices, but lacks advanced security headers and comprehensive privacy documentation. Security posture is adequate with HTTPS enabled, but the absence of security policies and contact information for incident response limits trust. Overall, the business appears legitimate but would benefit from enhanced transparency and security measures.

S

SIA Lotus LTD

mauto.lv

47

The website mauto.lv represents a Latvian used car dealership operated by SIA Lotus LTD, specializing in the sale, leasing, and trade-in of used vehicles sourced from Europe. The business targets local customers in Riga and surrounding areas, offering convenient financing options such as leasing without initial down payments. The site is professionally designed with clear navigation and relevant content in Latvian, supporting a positive user experience. Technical infrastructure leverages modern JavaScript libraries and reputable CDNs, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and GDPR-compliant privacy and cookie policies, though some security headers and incident response details are missing. Overall, the website presents a trustworthy and credible business presence with room for security enhancements.

B

Ballery decoration

ballery.lv

55

Ballery decoration is a Latvian small business specializing in event decoration services for private and corporate events, including weddings, corporate parties, and private celebrations. The company offers a range of decoration services such as balloon garlands, photo zones, table and room decorations, lighting elements, floristics, and aerodesign. Operating since 2018, Ballery targets local Latvian customers and maintains an active online presence with social media integration. The website is built on the Tilda platform, leveraging various Tilda scripts and widgets to provide an interactive user experience including a multi-step cost estimation quiz form. The technical infrastructure includes modern tracking and marketing tools such as Google Analytics, Google Ads, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and published privacy policies, which are recommended for compliance and trust enhancement. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security best practices would strengthen its risk profile.