Security Directory

I

Internet Credit

ic.lv

40

Internet Credit operates as a Latvian online platform specializing in loan and credit comparison services. The website offers users the ability to compare various types of loans including fast loans, consumer loans, credit lines, mortgages, auto leasing, and business loans. Positioned as a top credit comparison site in Latvia, it targets Latvian consumers seeking convenient and quick access to credit offers. The business model revolves around aggregating loan offers and facilitating user applications through the platform. Technically, the website is built on WordPress 6.7.2 with a modern tech stack including jQuery, Bootstrap, and several popular plugins for SEO, multilingual support, and cookie consent. Google Analytics is integrated for visitor tracking with consent mode enabled to comply with regional privacy regulations. Security posture is moderate with HTTPS enforced and some security plugins indicated, but lacks explicit security headers and detailed privacy or incident response policies. The absence of WHOIS data due to query limits limits full domain legitimacy verification. Overall, the site presents a professional and functional service with room for improvement in privacy transparency and security hardening.

S

SIA LogiPlus

logiplus.lv

43

SIA LogiPlus is a Latvian manufacturing and retail company specializing in windows and doors made from PVC, wood, aluminum, and metal, including winter gardens. The company serves residential and commercial customers across Latvia, offering a broad product range and professional installation services. Their website is built on Joomla CMS and includes multilingual support, showcasing their products and projects with a professional design and clear navigation. The technical infrastructure includes modern web technologies such as Bootstrap and Leaflet.js, with tracking via Google Analytics and StatCounter. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. WHOIS data is unavailable due to query limits, but the domain appears legitimate and privacy protected, which is typical for small businesses. Overall, the website is functional and professional but would benefit from enhanced privacy and security policies to improve compliance and trust.

MoselWeins.com is an e-commerce website specializing in the sale of wines, likely focusing on products from the Mosel region. The site offers online retail services with product browsing, shopping cart, and checkout functionalities. The business appears to be a small-sized online retailer established around 2012, with a niche market targeting wine consumers and enthusiasts. The website uses the OpenCart CMS platform with the Journal3 theme and incorporates common web technologies such as Bootstrap, Font Awesome, and Swiper.js for UI components. Hosting and domain registration are stable, with Tucows Domains Inc. as the registrar and DNS parking services in use. Security posture is basic, with no advanced security headers or DNSSEC enabled, and no visible incident response or vulnerability disclosure information. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional but lacks comprehensive privacy, security, and contact transparency.

Z

Zemgales Veselības Centrs

zvc.lv

65

Zemgales Veselības Centrs is a healthcare provider based in Latvia offering a range of medical services including specialist consultations, diagnostics, dialysis, day hospital care, and dental services. The website targets patients and healthcare users in the region, providing online appointment booking and patient resources. The site demonstrates a professional digital presence with consistent branding and good content quality. Technically, it employs modern frameworks such as Bootstrap and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security measures include HTTPS enforcement and cookie consent management, although some security headers and policies are not explicitly found. The absence of WHOIS data limits full domain legitimacy verification, but the website content and structure indicate a trustworthy entity. Overall, the site is well-optimized for mobile users and provides clear contact information, enhancing user trust and accessibility.

"

"eXpoint" SIA

expoint.eu

64

eXpoint SIA is a Latvian IT services company specializing in providing modern technological and innovative IT solutions for small and medium-sized businesses. Their offerings include website development, e-commerce platforms, hosting and server infrastructure, professional email services, and custom IT solutions built on their proprietary ICBM® platform. The company positions itself as a trusted IT guide for businesses embarking on digital transformation. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics with privacy-conscious configurations, and Google Maps integration. The site is mobile-optimized and features a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and anonymized analytics, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting a mature digital presence for a small regional IT service provider.

Rīgas Centra daiļamatniecības pamatskola is a small educational institution based in Riga, Latvia, specializing in primary arts and crafts education. Founded in 1992, it operates from a historically significant building that has served as an artisan school since the 19th century. The website serves as an informational portal for students, parents, and educators, providing school details, documentation, history, and news updates. The site is built on WordPress using the Sydney theme, indicating a moderate level of digital maturity with standard web technologies and responsive design. From a security perspective, the website employs a cookie consent mechanism compliant with GDPR, reflecting awareness of privacy regulations. However, there is no evidence of advanced security headers or incident response policies published on the site. The absence of visible contact emails or phone numbers on the homepage limits direct communication channels. WHOIS data could not be retrieved due to query limits, restricting full domain legitimacy verification. Overall, the site appears legitimate and professionally maintained but could benefit from enhanced security practices and clearer contact information. The risk assessment is moderate; the site does not show signs of malicious activity or vulnerabilities but lacks some security best practices and transparency in incident response. Strategic recommendations include implementing security headers, enforcing HTTPS, publishing security policies, and improving contact visibility to enhance trust and compliance.

Daugavpils Olimpiskais Centrs is a regional sports and recreation facility located in Daugavpils, Latvia, providing a variety of sports amenities including swimming pools, gymnasiums, Crossfit and fencing halls, football fields, and multifunctional event spaces. The website serves as an information portal for local residents and sports enthusiasts, offering news updates, event calendars, and contact information. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies, lack of WHOIS data due to query limits, and missing security headers highlight areas for improvement in security posture and compliance. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

A

Azerbaidžāna restorāns

azerbaijan.lv

45

The website azerbaijan.lv represents a small hospitality business specializing in Azerbaijani cuisine and event hosting located in Ulbroka, Latvia. It offers banquet halls, VIP rooms, and a year-round summer terrace, targeting general audiences including families, business clients, and event organizers. The site is professionally designed with good content quality and clear navigation, supported by social media presence on Facebook and Instagram. Technically, the site uses modern web technologies such as Bootstrap, Google Fonts, and Google Maps API, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance mechanisms. No WHOIS data was available due to query limits, limiting domain legitimacy verification. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced security and privacy compliance.

CrazyIron is a specialized e-commerce business focused on motorcycle parts and accessories, particularly catering to motorcyclists and professional stuntriders worldwide. The company operates from Latvia with a workshop established in Europe since 2020, offering a wide range of protective and stunt-related motorcycle products. Their market position is that of a niche leader with a strong brand presence and thousands of satisfied customers. The website is built on the Bitrix CMS platform, leveraging modern web technologies and plugins to provide a responsive and user-friendly shopping experience. Security measures include HTTPS, security headers, and secure form handling, although there is room for improvement in content security policies and incident response transparency. Privacy and cookie policies are implemented with consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a good balance of business credibility, technical maturity, and security posture, making it a trustworthy platform for its target audience.

D

Daivings.lv

daivings.lv

59

Daivings.lv is a well-established diving club based in Latvia, operating since 2006. It offers a comprehensive range of PADI diving courses from beginner to professional levels, diving equipment rental and sales, diving trips, and underwater technical services. The club is led by an experienced PADI MSDT instructor, Valters Preimanis, and maintains an active social media presence to engage with its community. The website is built on WordPress with multilingual support, providing good content quality and user experience. However, the absence of visible privacy and cookie policies and lack of WHOIS data limits full trust verification. The site uses HTTPS and modern web technologies but could improve security headers and privacy compliance to enhance its security posture and regulatory adherence.

S

SARSTEDT AG & Co. KG

sarstedt.com

50

SARSTEDT AG & Co. KG is a well-established German company specializing in manufacturing and distributing consumables and solutions for medical diagnostics, laboratory, clinic, transfusion, and laboratory automation. The company has a global presence with a broad product portfolio and a strong reputation in healthcare and scientific research sectors. Their website is professionally designed, content-rich, and supports multiple languages, reflecting a mature digital presence. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes privacy and cookie consent mechanisms, indicating compliance with GDPR requirements. Security posture is good with HTTPS and anonymized analytics, though some HTTP security headers are missing. The WHOIS data for the domain is missing or inaccessible, which is unusual for a company of this size and history, warranting further verification. Overall, the website is trustworthy, professional, and well-maintained, serving a specialized audience in healthcare and science.

RIMCIMCI.lv is a Latvian e-commerce retailer specializing in toys, tools, metal detectors, and various hobby and household equipment. The website targets consumers primarily in Latvia, offering a wide range of products with detailed pricing and availability information. The business has been operating since 2010, indicating a stable presence in the local market. The site includes contact details such as email, phone, and physical address, enhancing customer trust and accessibility. Technically, the website uses an older version of jQuery (1.7.2) alongside other JavaScript libraries like jQuery UI and Nivo Slider. Google Analytics and Google Tag Manager are implemented for user tracking and analytics. The CMS identified is Store 0.7 by sitelia.com, a niche e-commerce platform. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which may expose it to vulnerabilities. There is no cookie consent mechanism, indicating partial GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the security posture is moderate but could be improved with updates and enhanced compliance. The website content is safe for general audiences, with no adult or NSFW material detected. Social media presence on Facebook and clear contact information support business credibility. Strategic improvements in security, privacy compliance, and technical modernization are recommended to strengthen trust and operational resilience.

M

Motosports

motosports.lv

52

Motosports.lv is an established Latvian e-commerce retailer specializing in motorcycles, motorcycle parts, and outdoor sports equipment including apparel and accessories. The company has been operating since 2003 and targets motorcycle enthusiasts and outdoor sports consumers. The website is built on the OpenCart platform with a modern design and good mobile optimization. It integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and live chat via Tawk.to. Security posture is reasonable with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy, terms of service, and security incident contact information. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site presents a professional and trustworthy front for a small retail business in the transportation and retail sectors.

M

Memorial Services LTD

memorialservices.lv

64

Memorial Services LTD operates a comprehensive online platform dedicated to funeral organization and cemetery services in Latvia. The website serves as a centralized portal offering direct contacts to over 1900 companies, product catalogs, and 24/7 assistance for funeral-related services. It targets individuals and businesses seeking reliable and professional ritual services, positioning itself as the largest such portal in Latvia. The platform offers multilingual support (Latvian, English, Russian) and features verified partner listings, enhancing trust and user confidence. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics 4, and Facebook Pixel for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional content presentation. Security measures include HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although some advanced security headers and policies are not explicitly detected. From a security perspective, the site demonstrates good practices with encrypted connections and privacy compliance. However, the absence of a security.txt file and explicit incident response or security policy pages suggests room for improvement in transparency and readiness. No vulnerabilities or suspicious elements were detected in the content or scripts. The lack of WHOIS data due to query limits restricts full domain legitimacy assessment, but the professional presentation and business information support a positive trust evaluation. Overall, Memorial Services LTD presents a mature, trustworthy, and user-friendly platform for funeral and cemetery services in Latvia, with solid technical infrastructure and compliance posture. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and risk profile.

S

SIA MBR

fortuna.lv

56

Autoskola Fortūna is a well-established driving school in Latvia with over 25 years of experience, offering comprehensive training for a wide range of vehicle categories including motorcycles, cars, trucks, buses, tractors, and watercraft. The school operates multiple branches across Latvia and provides both online and in-person courses, including professional driver qualifications and first aid training. The website demonstrates a good level of digital maturity with modern technologies such as Bootstrap, jQuery, and integration of Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security policies and advanced security headers. The absence of WHOIS data limits domain registration verification, but the business information and content quality indicate a legitimate and professional operation. Overall, the website is user-friendly, informative, and trustworthy, serving its target audience effectively.

S

SIA "OLD R"

vissantikais.lv

52

Viss Antīkais is a specialized retail business operating the largest antique furniture and interior item store in the Baltic countries, located in Riga, Latvia. Founded in 2010, the company offers a wide range of antique furniture, mirrors, clocks, luminaries, paintings, carpets, and other interior items, targeting antique collectors and enthusiasts. The website reflects a professional retail operation with clear business information, contact details, and policies, supporting its market position. Technically, the website is built on the OpenCart platform using modern web technologies such as Bootstrap and Font Awesome, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable due to query limits, limiting domain registration insights.

V

VM metāls

visimetali.lv

48

VM metāls is a Latvian company specializing in the retail and wholesale trade of metal products including black metal, pipes, reinforcement bars, steel beams, and related metal processing services such as cutting and bending. The company emphasizes fast delivery, quality execution, and customer service, targeting both business and individual customers in Latvia. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website presents a professional and trustworthy business presence with room for improvement in privacy and security transparency.

M

Medicīnas preču veikals

healthstore.lv

45

Healthstore.lv is an e-commerce platform specializing in medical supplies, rehabilitation equipment, and technical aids for people with special needs, seniors, and healthcare providers in Latvia. The website offers a broad range of products including medical devices, orthopedics, hygiene products, and items for mothers and children. It is positioned as a local specialist retailer with a clear focus on healthcare and rehabilitation sectors. The site is built on the Magento platform, leveraging common web technologies such as jQuery, Prototype.js, and Bootstrap, and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some advanced security headers and explicit privacy and cookie policies, which impacts compliance and trust. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

Rēzeknes Special Economic Zone (RSEZ) is a Latvian government-supported economic zone focused on attracting investment and supporting businesses through tax incentives, ready infrastructure, and consultation services. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring multimedia content such as videos and charts to engage investors and stakeholders. The site is accessible, mobile-optimized, and provides clear contact information, although it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is credible and functional but could improve compliance and security transparency.

HobbySet.lv is a Latvian retail and wholesale e-commerce platform specializing in art supplies, crafts, and hobby materials. The website offers a wide range of products for artists, hobbyists, and children, including painting, drawing, crafting, and decorative items. It maintains a strong local market presence with both physical and online stores, supported by active social media channels on Facebook, Instagram, and YouTube. The business model focuses on serving retail customers and wholesale clients, providing comprehensive product categories and educational blog content to engage its audience. Technically, the website uses modern front-end technologies such as Bootstrap for responsive design and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good navigation and SEO practices. However, no CMS or hosting provider details were identified, and performance is moderate. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. From a security perspective, the site uses HTTPS and employs cookie consent for tracking scripts, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided HTML content. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website content and structure appear consistent with a legitimate retail business. Overall, HobbySet.lv presents a professional and trustworthy online presence for art and hobby supplies in Latvia, with room for improvement in security best practices and transparency regarding incident response. The risk level is moderate, and strategic enhancements in security headers and domain registration transparency are recommended.

P

Paklāji un Paklāji

paklajiunpaklaji.lv

49

Paklāji un Paklāji is an established retail business specializing in the sale of carpets and related home interior products, operating primarily in Latvia and the Baltic region. The company positions itself as the largest carpet warehouse and store in the Baltics, offering a wide selection of carpets at competitive prices with free courier delivery across Latvia, Estonia, and Lithuania. The website supports multiple languages (Latvian, Russian, English) to cater to a diverse regional audience. The business model combines online e-commerce with a physical store presence, targeting consumers seeking quality carpets and home decor items.

B

BSSHOP s.r.o.

bsshop.sk

55

BSSHOP s.r.o. is a well-established Czech company specializing in the development of e-commerce platforms integrated with the POHODA economic system. With over 20 years of experience and more than 650 active e-shops, they hold a strong market position in the Czech and Slovak e-commerce sectors. Their key services include e-shop creation, integration with IS POHODA, process automation, supplier integration, marketing tools, and custom modifications. The company also operates its own online store, demonstrating practical expertise in e-commerce operations. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Hosting appears to be managed via their own CDN and infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and business-focused with clear contact information and partner references. The absence of privacy and terms of service pages is a notable gap. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in security policies and compliance documentation are recommended to enhance trust and security posture.

B

Born To Swim s.r.o.

borntoswim.cz

57

Born To Swim s.r.o. operates a Czech-based e-commerce platform specializing in swimming gear and accessories. The company targets swimmers and sports enthusiasts, offering a comprehensive range of products including swim fins, goggles, caps, and training aids. The website positions itself as a trusted local brand with a focus on quality and customer service. Technically, the site is built on the Shoptet platform, utilizing common web technologies such as jQuery, Bootstrap, and tracking tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is unavailable, which slightly impacts trustworthiness, but the visible business information and contact details support legitimacy. Overall, the site is well-structured, compliant with GDPR, and safe for general audiences.

F

Floorball Club Česká Lípa z.s.

fbcceskalipa.cz

52

FBC Česká Lípa is a Czech floorball club positioned as a regional sports entity competing in the Livesport Superliga. The website serves as a hub for fans and community members, providing news, match schedules, team rosters, and partner information. The club engages its audience through social media channels and offers fan merchandise via linked shops. Technically, the site employs modern JavaScript libraries such as Alpine.js and Bootstrap for responsive design, with integration of Google Analytics and Facebook SDK for tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the site's content and social presence support legitimacy. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security best practices.

B

Baťův kanál | unikátní vodní cesta jižní Moravou

batacanal.cz

51

Baťův kanál is a tourism-focused website promoting a historic waterway in the Czech Republic, offering boat trips, rentals, and related services. The site targets tourists and boating enthusiasts in the region, providing rich content and multiple service offerings. Technically, the site uses a traditional tech stack including jQuery and Bootstrap, with modern security practices such as HTTPS and security headers. However, the WHOIS data is unavailable, limiting domain trust verification. Privacy and terms policies are not explicitly found, though cookie consent is implemented. Overall, the site is professional and secure but could improve transparency and update some technologies.

HC Frýdek-Místek is a Czech ice hockey club with an official website providing comprehensive information about the club, including news, match schedules, team rosters, ticket sales, and fan engagement features. The site targets hockey fans and the local community, offering a professional and consistent brand presence supported by multiple partner and sponsor links. The business model focuses on sports club promotion, fan interaction, and ticketing services. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Slick Carousel, with good mobile optimization and SEO practices. Security-wise, the site includes a cookie consent mechanism and GDPR policy, but lacks visible security headers and explicit incident response contacts. The absence of WHOIS data limits domain trust analysis, but the website content and external references support legitimacy. Overall, the site is well-structured and professional, with moderate security posture and good privacy compliance.

B

Bratislava Region Tourism

bratislavaregion.travel

47

Bratislava Region Tourism operates as the official regional tourism organization for the Bratislava self-governing region in Slovakia. The organization focuses on promoting tourism development, cultural events, and regional attractions through marketing, event organization, and advisory services. The website serves as a comprehensive portal for tourists, offering information on events, activities, accommodations, and transport within the region. Supported by governmental bodies, it maintains a credible market position as a key promoter of regional tourism. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, with embedded YouTube video content and social media integration. The site is responsive and optimized for mobile devices, providing a good user experience and clear navigation. However, no explicit CMS or hosting provider information is evident, suggesting a custom or proprietary platform. From a security perspective, the domain is registered transparently without privacy protection, with a clientTransferProhibited status enhancing domain security. While HTTPS usage is implied via embedded content, explicit security headers and policies are not detected. The site implements a cookie consent mechanism but lacks visible privacy policy and terms of service pages, indicating room for compliance improvement. Overall, the website is professionally designed and trustworthy, with a focus on regional tourism promotion. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, enabling DNSSEC, and providing clear incident response contacts to strengthen security posture and regulatory compliance.

F

Fri-Service Czech s.r.o.

friservice.cz

51

Fri-Service Czech s.r.o. is a medium-sized company founded in 2018, specializing in integrated retail refrigeration solutions in the Czech Republic and Slovakia. Their services include project design, installation, 24/7 service, maintenance, logistics, and turnkey delivery of refrigeration equipment. The company emphasizes modern, ecological technologies and strong customer support backed by an IT service system. The website reflects a professional business presence with clear contact information and partner references. Technically, the website is built on Joomla CMS with Bootstrap and UIkit frameworks, hosted on Microsoft Azure DNS infrastructure. It employs modern web technologies and is mobile responsive, though accessibility and SEO optimizations are basic. Google Analytics and Facebook marketing cookies are used with a cookie consent mechanism in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, supporting the company's business credibility. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance their security and compliance posture.

I

IRS Tech Services, s.r.o.

irstech.cz

43

IRS Tech Services, s.r.o. is a Czech Republic based small technology company specializing in installation and consulting of monitoring technologies for retail, pharmacy, and gastronomy sectors. Their services include analysis of temperature, humidity, energy consumption, and device performance to optimize operations and prevent faults. The company targets B2B customers, including key retail chains and gastronomy businesses, positioning itself as a niche provider with reputable clients such as Albert, Coop, and Kaufland. The website is professionally designed using Joomla CMS with modern frameworks and provides clear contact information and client references. However, it lacks a privacy policy and terms of service pages, which are important for compliance and trust.

M

Martin Petráček

martinpetracek.com

10

Martin Petráček operates a professional freelance web design and IT consulting business based in the Czech Republic, with over 15 years of experience. The website showcases services including custom web development, internet marketing, graphic design, and IT outsourcing, targeting small to medium-sized businesses. The business model is service-oriented, emphasizing personalized client engagement and competitive pricing. The site features a portfolio of completed projects and certifications that enhance credibility. Technically, the website uses a modern tech stack including Bootstrap, Drupal CMS, and JavaScript libraries, with moderate performance and good mobile optimization. Analytics and tracking tools such as Google Analytics and Smartlook are implemented, though privacy compliance is lacking due to missing policies and consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but improvements are recommended in security headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Integrated retail solutions s.r.o.

gastroretail.cz

42

Integrated retail solutions s.r.o. operates the Gastroretail.cz website, providing integrated solutions for retail and gastronomy sectors in the Czech Republic. The company offers a comprehensive range of services including concept design, engineering, sales, installation, training, and maintenance of refrigeration and gastronomic technologies. With a medium-sized team and over 1,500 projects completed, the company holds a solid market position serving hypermarkets, restaurants, and food service providers. The website is professionally designed using Joomla CMS and Bootstrap, with good mobile optimization and clear navigation. However, it lacks published privacy and cookie policies, which impacts compliance and security posture. Contact information is clearly presented with obfuscated emails and multiple physical addresses.

T

TV Třebíč

tvtrebic.cz

58

TV Třebíč is a local media outlet providing official television news coverage for the city of Třebíč in the Czech Republic. The website offers video news content focused on local news, culture, and society, targeting residents and citizens interested in community updates. The business operates under the auspices of the city government, as indicated by the official contact details and domain ownership. The site uses Joomla CMS and integrates multiple third-party services for analytics and advertising, including Google Analytics, Facebook Pixel, and Google Ads. The technical infrastructure is modern and supports mobile responsiveness, though performance is moderate. From a security perspective, the website employs HTTPS and uses embedded content securely but lacks visible security headers and a privacy or cookie policy, which are important for GDPR compliance. Tracking and retargeting scripts are present without a consent mechanism, indicating privacy compliance gaps. The WHOIS data is consistent with the business claims, showing a domain registered in 2019 with transparent registrant information matching the local media focus. Overall, the website is professionally designed and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

V

Vinařství V & M Zborovský, v.o.s.

zborovsky.cz

53

Vinařství V & M Zborovský, v.o.s. is a small Czech winery established in 2001, specializing in quality wine production and sales through both physical vinotéka and an e-commerce platform. The company emphasizes traditional and modern winemaking techniques with a focus on terroir and sustainability. Their market position is strengthened by multiple awards and a loyal regional customer base. Technically, the website uses a custom CMS with common JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and includes essential compliance features like cookie consent and age verification for alcohol sales. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response disclosures. WHOIS data is missing, which slightly reduces trust but the website content and contact information appear legitimate and professional. Overall, the site is well-structured for its business purpose but could improve security and transparency aspects.

KROTOWER is a localized urban bike rental service operating in Krotoszyn, Poland, offering flexible bike rentals without fixed stations. The service is supported by a mobile application available on iOS and Android platforms, enabling users to rent, pay, and manage their rides conveniently. The business partners with Roovee for system management, Autopay for payment processing, and Orange as a technology partner, positioning itself as a modern and user-friendly transportation solution in its market niche. Technically, the website employs a moderate technology stack including Bootstrap, jQuery, FontAwesome, and Google Maps API to deliver a responsive and functional user experience. While the site is mobile-optimized and well-structured, it lacks some advanced SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and modern framework adoption. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but it lacks important security headers and published security policies. There is no visible cookie consent mechanism, which may impact GDPR compliance. Incident response and vulnerability disclosure information are absent, indicating areas for maturity improvement. Overall, the website and business present a trustworthy and professional image with clear contact information and regulatory documentation. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security practices and privacy compliance would enhance the risk posture and user trust.

Polkowicki Rower Miejski (PRM) is a localized urban bike sharing service operating in Polkowice, Poland, managed by ROOVEE S.A. The service offers modern city bikes equipped with GPS and electronic locks, enabling users to rent bikes via a dedicated mobile app or SMS. The business model focuses on flexible, stationless bike rentals with clear pricing and deposit structures. The website is professionally designed, providing clear user guidance, contact information, and partner acknowledgments, positioning PRM as a trusted local transportation option. Technically, the website employs a modern but basic tech stack including Bootstrap, FontAwesome, jQuery, and Google Maps API. The site is mobile optimized and accessible with a cookie consent mechanism and privacy policy in place. However, some security best practices are missing such as DNSSEC and HTTP security headers, and the use of an outdated jQuery version poses potential risks. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. The WHOIS data is consistent and transparent, reinforcing legitimacy. Overall, the site scores well on business credibility and privacy compliance but has room for improvement in security hardening. Strategically, PRM should focus on enhancing security posture by enabling DNSSEC, adding security headers, updating libraries, and publishing security policies. These steps will improve trust and resilience while maintaining a user-friendly and privacy-respecting service.

Bprog is a Polish technology company specializing in creating custom internet solutions including websites, web portals, e-commerce stores, IT systems, and mobile applications. Founded in 2010, it serves businesses and organizations primarily in Poland, focusing on bespoke software development using modern frameworks such as Laravel. The company positions itself as a partner for digital transformation and IT optimization. Technically, the website employs common web technologies including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is mobile-optimized and includes GDPR-compliant cookie consent and privacy policy documentation. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well-structured, with room for security enhancements and more transparent business information.

M

MAVERICKS advokáti s.r.o.

mavericks.legal

46

MAVERICKS advokáti s.r.o. is a boutique law firm based in Prague specializing in legal services for the digital and technology sectors, including startups, venture capital, M&A, IP, and IT law. The firm positions itself as a premium provider with a strong reputation in the Czech and Slovak markets, serving tech companies, investors, and public sector clients. Their business model includes hourly rates, fixed prices, and subscription packages, emphasizing fast and technologically advanced service delivery. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Elementor, featuring good mobile optimization and professional design. Security posture is solid with HTTPS and some security best practices, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable or malformed, limiting domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site is safe, well-structured, and trustworthy, though improvements in privacy compliance and security headers are recommended.

H

HappyFox

happyfoxchat.com

74

HappyFox is a technology company specializing in customer support software solutions, including live chat, help desk, AI-powered chatbots, and workflow automation. Their platform targets businesses ranging from small enterprises to large organizations, offering scalable SaaS solutions to enhance customer service efficiency and engagement. The company maintains a strong market position with a comprehensive product suite and a professional online presence. Technically, the website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices and exhibits good performance and accessibility standards. From a security perspective, the site enforces HTTPS and integrates secure form validation within its chatbot widget. While explicit security headers are not fully confirmed, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. Overall, HappyFox presents a trustworthy and professional digital footprint with minor concerns due to unavailable WHOIS data. Strategic recommendations include enhancing explicit security headers, publishing a dedicated security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

Z

Zenler

newzenler.com

65

Zenler is a professional SaaS platform specializing in online course creation, marketing, and community engagement. It offers an all-in-one solution targeting educators, coaches, and marketers who seek to consolidate multiple tools into a single platform. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive content. Security posture is solid with HTTPS and standard tracking tools, though explicit security headers and incident response information are lacking. Privacy and cookie policies are well implemented, indicating good compliance practices. However, the absence of WHOIS data introduces some uncertainty about domain legitimacy, warranting monitoring. Overall, Zenler presents a trustworthy and professional online presence with room for security enhancements.

W

WebMoney

wmid.com

60

WebMoney Mail is an email service tailored for participants of the WebMoney financial system, providing a user-friendly interface to facilitate effective communication within the ecosystem. The website is professionally designed with consistent branding aligned with the WebMoney parent brand. The technical infrastructure leverages modern JavaScript frameworks and WebMoney's own SDK, ensuring a responsive and functional user experience across devices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security transparency.

S

Specsavers

specsavers.fi

66

Specsavers Finland operates a comprehensive online and physical retail platform specializing in optical products including eyeglasses, sunglasses, and contact lenses, alongside eye health services. The website targets Finnish consumers with localized content and a strong emphasis on affordability and eye care quality. The company holds a strong market position as a leading optical retailer in Finland, supported by a large store network and e-commerce capabilities. Technically, the website leverages modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized and designed for good user experience with clear navigation and professional branding. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing comprehensive security headers and publishing explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks visible privacy and terms of service documentation. Overall, the website is trustworthy and professionally maintained, with minor gaps in privacy and security transparency.

L

LibraryThing

librarycat.org

60

TinyCat is a specialized online library catalog and management system designed for small libraries, classrooms, religious communities, and similar organizations. Powered by LibraryThing, it offers a simple, mobile-ready, and powerful platform with features such as circulation management, MARC record import/export, and faceted search. The business operates on a subscription SaaS model with tiered pricing and targets small to medium-sized library entities. The website demonstrates a professional and consistent brand presence with rich content and multimedia support. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and New Relic monitoring, hosted likely behind Cloudflare. Security posture is good with HTTPS and monitoring tools, but lacks publicly visible privacy, cookie, and terms of service policies. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site is trustworthy, well-designed, and serves a niche market effectively.

A

ACM SIGWEB

sigweb.org

47

ACM SIGWEB is a specialized professional group under the Association for Computing Machinery focused on hypertext and web technologies. It serves an academic and professional audience by sponsoring multiple conferences and fostering research and community engagement in linked information systems and the Web. The website reflects a mature, medium-sized organization with a clear focus on technology and research dissemination. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trust slightly, but the ACM affiliation strongly supports legitimacy. Overall, the site is professional, content-rich, and trustworthy for its target audience.

BetaJS is an open-source JavaScript modular framework project founded in 2013, providing a collection of libraries for building web applications across browser and server environments. The project targets JavaScript developers seeking modular, scalable, and customizable tools, with a business model centered on open-source community contributions and sponsorships. The website presents a professional and consistent brand image with clear descriptions of key modules and sponsors, positioning BetaJS as a niche player in the JavaScript ecosystem. Technically, the website uses a modern but basic tech stack including Bootstrap, jQuery, and Google Analytics. It is hosted with domain registration via Amazon Registrar, Inc., and likely uses AWS DNS services. The site is mobile optimized and provides embedded code examples to demonstrate functionality. However, SEO and accessibility features are basic, and no CMS is detected. From a security perspective, the site uses HTTPS and has domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers are present in the HTML content. There are no forms collecting user data, reducing attack surface, but privacy and cookie policies are absent, and no incident response or security contact information is provided. Google Analytics is used without visible cookie consent mechanisms, indicating privacy compliance gaps. Overall, BetaJS presents a trustworthy and professional open-source project website with moderate technical maturity and security posture. To improve, the project should implement privacy and cookie policies, enable DNSSEC, add security headers, and provide clear contact and incident response channels to enhance compliance and trust.

I

IndianStartupNews

indianstartupnews.com

63

IndianStartupNews is a specialized Indian media platform delivering comprehensive news, stories, and analysis focused on the Indian startup ecosystem. Founded in 2019, it serves entrepreneurs, investors, and business professionals interested in startup funding, government policies, and innovation trends. The platform offers a variety of content including articles, videos, and reports, positioning itself as a niche media outlet in the Indian market. Technically, the website employs modern web technologies such as Bootstrap, Google Fonts, Google Analytics, and OneSignal for push notifications, hosted behind Cloudflare DNS services. The site demonstrates good SEO practices with structured data and meta tags, and is mobile optimized with a professional design and clear navigation. Security-wise, the site uses HTTPS with a good SSL configuration and employs Cloudflare DNS and Google reCAPTCHA to mitigate threats. However, DNSSEC is not enabled, and there is a lack of published privacy and cookie policies, which are important for compliance and user trust. No security.txt or vulnerability disclosure information is present, indicating room for improvement in transparency and incident response readiness. Overall, the website is accessible without WAF blocking, and the domain registration data is consistent and legitimate, supporting the credibility of the business.

N

NewsDrum

newsdrum.in

65

NewsDrum is an independent online news platform based in India, offering comprehensive coverage across various domains including national, business, sports, entertainment, and lifestyle news. The platform emphasizes neutral and in-depth reporting, targeting a general audience seeking reliable news content. The website demonstrates a consistent brand presence and maintains active social media channels to engage its audience. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Google Fonts for typography, and integrates Google Analytics and Tag Manager for traffic analysis. Hosting appears to leverage AWS infrastructure, and the site uses HTTPS with a good SSL configuration, ensuring secure data transmission. Push notifications are managed via OneSignal, enhancing user engagement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate automated abuse. However, it lacks several recommended security headers and does not publicly disclose privacy, cookie, or terms of service policies, which are critical for compliance with regulations like GDPR. No incident response or vulnerability disclosure mechanisms are evident, indicating areas for improvement in security governance. Overall, NewsDrum presents a professional and trustworthy news platform with good technical implementation but requires enhancements in privacy compliance and security transparency to strengthen user trust and regulatory adherence.

D

DATAQUEST

dqindia.com

56

DATAQUEST is a well-established Indian IT industry media publication providing comprehensive news, analysis, interviews, and insights focused on technology trends, business technologies, and digital transformation. The website demonstrates a mature technical infrastructure using modern web technologies including Bootstrap, Google Analytics GA4, Facebook Pixel, and OneSignal for push notifications. Security posture is good with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness despite the professional presentation and rich content. Overall, the site serves a targeted audience of IT professionals and industry stakeholders in India with relevant and timely content.

ShopUp is a Thai-based web design and development company specializing in creating online stores and websites tailored to small and medium businesses. With over 15 years of experience and a customer base exceeding 100,000, ShopUp offers three main service packages ranging from single-page sale pages to fully custom multi-page designs. The company also provides additional digital marketing and design services such as email hosting, fanpage cover design, and product data entry. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, ensuring a responsive and user-friendly experience. The presence of a GlobalSign SSL certificate confirms secure HTTPS communication. However, the absence of a privacy policy and cookie consent mechanism indicates compliance gaps with privacy regulations. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and branding suggest a legitimate business. Overall, ShopUp demonstrates a solid market position in Thailand's web design sector with room for improvement in privacy compliance and security best practices.

V

Valutec

digitalgiftcardmanager.com

66

Valutec, operated by Treat Wallet, Inc., offers an instant gifting solution primarily targeting merchants who require digital gift card management services. The website serves as a merchant portal with functionalities including sign-in, account creation, password recovery, and balance checking. The platform leverages modern web technologies such as Vue.js and Bootstrap to provide a responsive and user-friendly interface. Security features include multi-factor authentication UI components and Google reCAPTCHA integration to mitigate automated abuse. Privacy and cookie policies are present, though explicit consent mechanisms are not implemented. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the parent domain is legitimate and well-established.

T

Toby Fox

undertale.com

55

UNDERTALE.com is the official website for the indie RPG game UNDERTALE, created by Toby Fox. The site serves as a central hub for game information, platform availability, merchandise, and news updates related to UNDERTALE and its related title DELTARUNE. The business model focuses on digital and physical game sales along with merchandise, targeting gamers and fans of indie RPGs. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content, reflecting a strong market position within the indie gaming community. Technically, the website uses a modern tech stack including Bootstrap and jQuery, hosted on Cloudflare Pages with Cloudflare analytics. The site loads quickly and is mobile responsive, with good SEO and accessibility features. However, some security best practices such as DNSSEC and security headers are missing, and there is no cookie consent mechanism despite analytics usage. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy linked externally but no cookie policy or GDPR-specific disclosures. Contact information is minimal, with no emails or phone numbers explicitly provided, which may impact user trust and support accessibility. Overall, UNDERTALE.com is a high-quality, trustworthy website with strong content and technical implementation. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust further.