Security Directory

A

A.C.T. Birojs

actbirojs.lv

52

A.C.T. Birojs is a Latvian accounting service provider specializing in outsourced bookkeeping and financial consulting for businesses and private individuals across Latvia. The company emphasizes personalized service, electronic document management, and long-term professional experience exceeding 13 years. Their website presents a professional image with clear service descriptions, client testimonials, and easy navigation, targeting small to medium-sized enterprises seeking reliable accounting solutions. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Splide.js for sliders, and Google Fonts. It is mobile optimized and loads external resources securely via HTTPS. However, no explicit security headers were detected, and cookie consent mechanisms are absent, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were found in the HTML content. The lack of WHOIS data due to query limits restricts domain trust analysis, but the website content and structure suggest a legitimate business. Privacy policy presence and GDPR compliance are positive indicators, though cookie consent and security policies are missing. Overall, the website scores moderately high in content quality, technical implementation, and business credibility but has moderate scores in security posture and privacy compliance. Strategic improvements in security headers, cookie consent, and public security policies would enhance trust and compliance.

S

SIA "AREAL.LV"

areal.lv

42

AREAL.LV is a Latvian real estate company specializing in the sale and brokerage of residential, commercial, and land properties primarily in Riga and its surrounding regions. The company offers comprehensive transaction services including credit solutions, construction, and renovation support, targeting local buyers and investors. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to its market segment. Technically, the site uses modern web technologies such as jQuery and FontAwesome, with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Privacy compliance is supported by a cookie consent banner and a privacy policy page in Latvian. Overall, the site demonstrates a legitimate small business presence with moderate trustworthiness but limited transparency in WHOIS data due to query restrictions.

V

Vitrum

vitrum.lv

64

Vitrum is a professional company specializing in comprehensive hospitality and retail solutions, including restaurant, bar, and professional kitchen design, manufacturing, equipment sourcing, installation, and service. With over 30 years of experience and thousands of projects across multiple countries, Vitrum positions itself as a trusted full-service partner in the hospitality and retail sectors. The website demonstrates a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, and reCAPTCHA, ensuring good performance, mobile optimization, and security best practices. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response information are not publicly available. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is professional, trustworthy, and well-structured, supporting Vitrum's market position as a reliable partner for hospitality and retail businesses.

U

Uguns Centrs

ugunscentrs.lv

50

Uguns Centrs is a Latvian small business specializing in the sale, design, installation, and maintenance of fireplaces, stoves, and related accessories. The company has over 20 years of experience and represents reputable brands such as Spartherm, DRU, and Ortner. The website is professionally designed using Webflow, featuring good content quality and clear navigation aimed at a general audience interested in home heating solutions. Technically, the site uses modern web technologies including Google Fonts and jQuery, but lacks advanced security headers and explicit privacy or cookie policies. No contact emails or phone numbers are directly provided on the site, though social media presence on Facebook and Instagram is evident. The WHOIS data could not be retrieved due to query limits, limiting domain registration insights. Overall, the site appears legitimate and functional but could improve in security and compliance transparency.

S

SIA CODO REAL

codoreal.com

46

CODO REAL is a Latvian real estate company specializing in property sales, rentals, and consultancy services. Established in 2014, it has positioned itself as a trusted player in the Latvian real estate market, offering personalized client service, legal support, and market analysis. The website reflects a professional business with detailed agent profiles and customer testimonials, enhancing credibility and trust. The target audience includes property buyers, sellers, renters, and investors primarily in Latvia. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Google Analytics, Facebook Pixel, Hotjar, and Bitrix24 CRM forms. It is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS, CSRF tokens, and Google reCAPTCHA, though security headers are missing and DNSSEC is not enabled, indicating room for improvement. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a privacy policy, cookie consent banner, and GDPR compliance indicators. However, the absence of a terms of service page and incident response contacts are minor gaps. The domain WHOIS data is consistent with the business claims, showing a legitimate registration since 2014. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, publishing terms of service, and enhancing accessibility features to further strengthen security and compliance.

S

SIA Timber ART

timberart.lv

44

SIA Timber ART is a Latvian small business specializing in the manufacture and sale of wooden barrel-shaped saunas, thermowood sauna houses, frame saunas and houses, micro houses, camping cabins, and wooden hot tubs. The company targets consumers interested in high-quality wooden outdoor living products primarily in Latvia and the Baltic region. Their website is professionally designed using modern technologies such as jQuery, Bootstrap 5, and OpenCart CMS, providing a good user experience with clear navigation and mobile optimization. The site includes social media integration and multiple contact channels, enhancing business credibility. However, WHOIS data could not be retrieved due to query limits, limiting domain trust analysis. The website uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements.

A

Aleksandrs

aleksandrs.lv

56

Aleksandrs is a small hospitality business operating multiple restaurant locations in Riga, Latvia, offering dining and banquet services including funeral meal organization. The website is built on the Webflow platform using jQuery and is hosted by Webflow, providing a modern and mobile-optimized user experience. The site is well-branded and provides clear contact information and physical addresses, supporting its legitimacy as a local business. However, the absence of privacy and cookie policies, security headers, and incident response information indicates gaps in compliance and security posture. WHOIS data is unavailable due to a malformed response, likely reflecting privacy protection, which is common and justified for this business type. Overall, the website is safe, professional, and functional but would benefit from enhanced security and privacy compliance measures.

V

Ventspils Baptistu Draudze

vbd.lv

52

Ventspils Baptistu Draudze is a small non-profit religious organization based in Ventspils, Latvia, providing weekly worship services and youth community events. The website serves as an informational portal for church activities, contact details, and donation information. The organization targets local community members and church attendees, operating primarily through donations and volunteer engagement. The site is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery, with hosting via Webflow's CDN. The design is clean and user-friendly, optimized for mobile devices with clear navigation and relevant content. Security posture is basic; HTTPS is assumed but no explicit security headers or policies are present. Privacy and cookie policies are absent, indicating a gap in compliance with GDPR and related regulations. WHOIS data could not be retrieved due to query limits, limiting domain trust analysis. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced security and compliance measures.

S

SIA Renitit

pro24.lv

46

PRO24.LV is a Latvian small business specializing in the rental of professional cleaning equipment such as chemical cleaners, steam cleaners, vacuum cleaners, window cleaners, and electric branch shredders. The company primarily serves the Jelgava region with plans to expand to Riga. Their business model focuses on equipment rental complemented by sales of cleaning chemicals and gift cards. The website is professionally designed with clear navigation, detailed product descriptions, and customer galleries showcasing results. Technical infrastructure includes modern web technologies like Bootstrap, jQuery, Font Awesome, and integration with Google Analytics, Facebook Pixel, Hotjar, and Google reCAPTCHA for security and analytics. Security posture is good with HTTPS enforced and form protection, though lacking some security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, limiting full domain trust verification. Overall, the site is trustworthy, well-maintained, and compliant with basic privacy regulations.

A

Aģentūra VB Plus

agencyvb.lv

54

Aģentūra VB Plus is a full-service advertising agency based in Latvia, established in 1996 with roots dating back to 1991. The company offers a broad range of marketing and advertising services including design, printing, outdoor advertising, corporate gifts, video production, web design, campaigns, and press advertising. Their clientele primarily consists of Latvian and Baltic companies, supported by a membership in the Deutsch-Baltische Handelskammer. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security-wise, the site uses HTTPS but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. The absence of WHOIS data due to query limits limits full domain legitimacy verification, but the website content and contact details suggest a legitimate business presence. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, but privacy compliance and security posture could be enhanced.

S

SIA AKTIVPARKS

okej.lv

58

Okej.lv is an established Latvian retailer specializing in sports and leisure products, offering a wide range of items including clothing, footwear, bicycles, winter equipment, and accessories. The company operates both physical stores in Sigulda and Jēkabpils and an online e-commerce platform, targeting general consumers interested in sports and outdoor activities. The website is well-structured with comprehensive product categories and clear navigation, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery and Google Analytics, with HTTPS enforced, indicating a basic but solid digital infrastructure. However, the absence of privacy and terms of service pages, as well as missing security headers, suggests room for improvement in compliance and security posture. The lack of WHOIS data limits domain trust verification, but the visible business information and contact details support legitimacy. Overall, the site presents a professional retail presence with moderate technical and security maturity.

S

SmartServiss

smartserviss.lv

60

SmartServiss.lv is a Latvian-based authorized electronics service center specializing in the repair and maintenance of mobile phones, tablets, laptops, and photo equipment. With over 10 years of experience, the company emphasizes quality, speed, and personalized customer service, including providing temporary devices during repairs. The website is professionally designed, mobile-optimized, and provides clear contact information and privacy policies, indicating a mature digital presence for a small local business. Technically, the site runs on the CS-Cart platform with modern JavaScript libraries and integrates third-party widgets for chat and order status, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are lacking. Overall, the site is trustworthy and well-positioned in its niche, but WHOIS data unavailability limits full domain legitimacy verification.

S

Saldus novada pašvaldība

slimnica.saldus.lv

56

Saldus novada pašvaldība operates as the official municipal government website for the Saldus region in Latvia, providing comprehensive information and services to residents, businesses, and visitors. The site offers access to governance details, public services, news updates, event calendars, and contact resources, positioning itself as a central digital hub for local administration and community engagement. The website is built on WordPress CMS, leveraging modern web technologies such as jQuery, Modernizr, and Cloudflare Turnstile captcha to enhance user experience and security. The presence of structured data (JSON-LD) and Open Graph tags supports SEO and social media integration. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional HTTP security headers could further strengthen defenses. No WHOIS data was retrievable due to query limits, limiting domain registration verification. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, suitable for a government entity.

V

VIZIONETTE

vizionette.lv

56

Vizionette.lv is an established Latvian online retailer specializing in eyewear products such as glasses, sunglasses, and contact lenses. The website offers a comprehensive e-commerce platform with additional services including virtual try-on technology and professional vision testing appointments. The business targets consumers in Latvia seeking quality optical products from well-known brands. The site demonstrates consistent branding and good content quality, supporting a medium-sized retail operation in the Latvian market. Technically, the website employs modern web technologies including Bootstrap, jQuery, Select2, and FontAwesome, alongside Google Tag Manager and a cookie consent mechanism. The site is mobile-optimized and shows good SEO practices. While no CMS or hosting provider details are explicitly detected, the infrastructure supports a moderate performance level with good accessibility features. From a security perspective, the site uses HTTPS and includes standard privacy and cookie policies with consent mechanisms, indicating GDPR compliance. However, no advanced security headers were detected in the provided data, and WHOIS information was unavailable due to query limits, limiting domain registration verification. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the content. Overall, vizionette.lv presents a trustworthy and professional online retail presence with a solid technical foundation and compliance posture. The lack of WHOIS data is a limitation but does not detract significantly from the site's apparent legitimacy. Strategic recommendations include enhancing security headers and continuing regular audits of third-party scripts to maintain security and compliance.

C

Carlson Design Home

carlson.lv

56

Carlson Design Home is a small interior design firm based in Riga, Latvia, specializing in sustainable interior design projects that balance functionality, comfort, and aesthetics. Their services focus on effective design and development with transparent stakeholder coordination. The website is professionally designed using Webflow CMS and modern frontend libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit security policies. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional business presence with room for security and compliance enhancements.

Old Hong Kong is a small hospitality business specializing in Chinese cuisine, offering a detailed online menu with e-commerce capabilities for ordering. The website is built on WordPress with WooCommerce and uses common plugins such as WPBakery Page Builder and Slider Revolution. The site targets local consumers in Latvia interested in authentic Chinese dishes. Technically, the site is moderately optimized with good mobile responsiveness and a clear navigation structure. However, there are gaps in privacy compliance, as no privacy or cookie policies are present, and no consent mechanisms are detected. Security posture is average with HTTPS implied but lacking security headers and vulnerability disclosure mechanisms. Overall, the website is functional and professional but would benefit from enhanced compliance and security measures.

S

SIA Sparta Media

spartamedia.lv

60

Sparta Media is a Latvian-based full-service media agency specializing in strategic planning, graphic design, digital marketing, analytics, and optimization with over 10 years of international market experience. The company targets businesses seeking comprehensive media and marketing solutions, positioning itself as a professional and experienced agency within the media sector. The website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Cookiebot for consent management, and Google Tag Manager for analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and documented security policies, indicating room for improvement in security best practices. Overall, the website is professional, well-structured, and compliant with GDPR requirements, though WHOIS data is unavailable due to query limits, slightly impacting trust assessment. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and implementing a vulnerability disclosure program to strengthen security and trust.

N

Nuga Medical Co., Ltd

nugabest.lv

57

Nuga Best is an established health and wellness company specializing in the manufacturing and sale of health prevention and recovery equipment, operated by Nuga Medical Co., Ltd from South Korea. The website targets customers primarily in Latvia and Lithuania, offering both e-commerce sales and physical salon locations. The business positions itself as a world leader in its niche, providing products such as massage devices and turmanium mats, with additional services like free product testing. The site content is primarily in Latvian with options for Russian and Lithuanian languages, catering to the Baltic market. Technically, the website runs on the CS-Cart e-commerce platform, utilizing standard libraries like jQuery and Owl Carousel, and integrates Google Analytics for user tracking.

A

Atas.net

atas.net

70

Atas.net is a professional software provider specializing in volume analysis and order flow trading analytics. Their platform targets traders seeking advanced tools to understand market liquidity and price movements. The company has a mature online presence with a website built on WordPress, leveraging modern plugins and third-party analytics tools. The site is multilingual and offers comprehensive cookie consent mechanisms, reflecting good privacy compliance. Security posture is solid with HTTPS and domain transfer protections, though some improvements in security headers and incident response transparency are recommended. Overall, the business appears legitimate and well-positioned in its niche market.

R

RUUME arhitekti

ruume.lv

56

RUUME arhitekti is a Riga-based architecture and urbanism practice focused on sustainable, resilient, and inclusive city design. Their website showcases a portfolio of selected projects primarily in Latvia, targeting clients interested in architectural and urban planning services. The business operates as a small entity with a clear local market focus. Technically, the website is built on Webflow with jQuery, offering a modern and mobile-optimized experience, though some performance and security enhancements are recommended. Security posture is moderate with HTTPS assumed but lacking explicit security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, but the domain's ccTLD and website content align with the claimed Latvian location, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

D

Daugavpils Teātris

daugavpilsteatris.lv

57

Daugavpils Teātris is a Latvian cultural institution focused on theatrical performances and related cultural events. The website serves as an information portal providing multilingual show calendars and event details, targeting a general audience interested in local theatre. The business model is typical for a regional cultural organization, emphasizing community engagement and event hosting. The website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and anime.js for interactive content and analytics integration. Hosting is provided via Amazon CloudFront CDN, ensuring reasonable performance and availability. Security posture is solid with HTTPS enforced and a Content Security Policy restricting framing to trusted domains. Cookie consent management is implemented with granular user controls, reflecting good privacy compliance practices. However, the absence of WHOIS data limits domain legitimacy verification. Overall, the site is professional, secure, and suitable for its cultural mission.

M

Malmar Group BV

malmar.eu

54

Malmar Group BV operates as a preferred supply chain partner specializing in procurement, manufacturing, and delivery of small and medium-sized metal assemblies. Their website presents a professional image targeting SMEs and industrial partners seeking flexible and innovative supply chain solutions. The company emphasizes innovation, logistics, production, and sourcing as key service areas, positioning itself as a reliable partner in the manufacturing sector within Belgium. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is via Webflow's CDN, providing moderate performance and reliable uptime. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced trust and compliance. The absence of WHOIS data due to registry restrictions limits domain transparency but does not directly indicate malicious intent. Overall, Malmar's website is professional and business-focused with moderate security posture and good privacy compliance. Strategic improvements in security policy publication and WHOIS transparency would enhance trust and security maturity.

F

Forumauto

forumauto.lv

53

Forumauto.lv is a Latvian automotive website offering vehicle purchase, servicing, and body repair services. The site targets Latvian customers seeking automotive solutions and provides detailed service offerings including financing, insurance, and leasing options. The business appears to be a medium-sized local player in the transportation sector with a professional online presence. Technically, the website is built on WordPress 6.8.2, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site implements a comprehensive cookie consent mechanism compliant with GDPR requirements, enhancing privacy compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, although security headers are not explicitly detected and no incident response or security policy pages are published. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is professional, secure, and privacy-conscious but would benefit from publishing explicit privacy and security policies and improving security headers.

C

COD Robata Grill Bar

cod.lv

67

COD Robata Grill Bar is a small hospitality business based in Riga, Latvia, specializing in contemporary Japanese cuisine with a focus on robata grill dishes. Established in 2016, it holds a prestigious Michelin 2025 recognition, positioning it as a leading Japanese restaurant in Latvia. The website reflects a professional and modern digital presence, leveraging Webflow CMS, Google Analytics, and CookieYes for privacy compliance. The site is well-optimized for mobile and desktop users, providing rich multimedia content and clear navigation. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. The absence of WHOIS data limits domain trust verification, but the business information and contact details are consistent and credible.

U

UNAGI INU · Japanese bistro · Riga

unagiinu.lv

50

UNAGI INU is a small hospitality business operating a Japanese bistro located in Riga, Latvia. The website presents a modern, visually appealing digital presence built on the Webflow platform, targeting general audiences interested in Japanese soul food dining experiences. The business offers table booking services and maintains active social media profiles on Instagram and Facebook, enhancing customer engagement. However, the website lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Technically, the site uses a modern tech stack including jQuery, Webflow CMS, Google Analytics, Google Tag Manager, Facebook Pixel, and Google Ads for marketing and analytics. The site appears mobile-optimized with good navigation and content relevance. Performance is moderate, and accessibility features are basic. Security headers are not detected in the HTML content, and SSL configuration details are unknown but the site uses HTTPS. No forms or sensitive data exposure were found, indicating a low attack surface. From a security perspective, the site demonstrates moderate maturity with standard HTTPS usage and no visible vulnerabilities. However, the absence of security headers, privacy policies, and incident response contacts indicates gaps in security best practices and compliance readiness. The WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. The domain appears legitimate based on website content and professional presentation. Overall, the website is functional and professionally designed but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

S

SIA SoulStone.eu

soulstone.eu

59

SIA SoulStone.eu operates a Latvian-language online platform that enables customers to design and order custom tombstones remotely. The service offers a step-by-step configurator with options for granite colors, engraving designs, and delivery and installation services. The company targets individuals and families in Latvia seeking a convenient and personalized memorial solution. Technically, the website uses a combination of jQuery, FancyBox, Lightbox, and Google services such as reCAPTCHA and Analytics, indicating a moderate level of digital maturity. Security measures include HTTPS and CAPTCHA protections, but the absence of explicit security headers suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though mobile optimization is limited. Strategic recommendations include enhancing security headers, improving mobile responsiveness, and formalizing incident response policies.

Petr Rezek operates a small-scale web development service focused on custom website creation, e-commerce solutions, and content management systems primarily targeting a general audience in the Czech Republic. The website content is minimal but relevant to the business offering, with a basic design and navigation structure. Technically, the site runs on an outdated WordPress CMS with legacy Bootstrap and jQuery libraries, lacking modern security and performance optimizations. The absence of HTTPS and security headers significantly weakens the security posture. No privacy or cookie policies are present, and no contact information is provided, which impacts trust and compliance. The WHOIS data is unavailable, raising concerns about domain registration legitimacy.

PHOBS operates an online booking management platform accessible via a secure login portal. The website is designed for authorized organizational users to manage bookings, featuring standard login and password recovery mechanisms. The technical infrastructure relies on common web technologies including jQuery and PHP, with some use of progressive web app manifest files. However, the site lacks visible security headers and privacy compliance documentation, which are critical for protecting user data and meeting regulatory requirements. The absence of WHOIS registration data for the domain raises concerns about the legitimacy and transparency of the domain ownership. Overall, while the site functions as intended for booking administration, it requires significant improvements in security posture and compliance to enhance trustworthiness and protect user information.

A

AGENTÚRA POMORAVÍ

pomoravi.eu

40

Pomoravi.eu is a regional media and tourism information platform focused on Central European regions including parts of Slovakia, Moravia, and Lower Austria. It provides news, cultural content, event calendars, and tourism guides targeting a general audience interested in these regions. The website operates on WordPress CMS with a moderate technical infrastructure including common plugins for social media integration and news presentation. The site is mobile optimized and presents a consistent brand image with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partially met with a GDPR policy page but no visible cookie consent mechanism. Overall, the website is a legitimate small media business with a good level of professionalism and trustworthiness.

B

BOCHEMIE a.s.

bochemie.cz

48

BOCHEMIE a.s. is a specialized chemical manufacturing company based in the Czech Republic, focusing on advanced materials and chemical preparations. The company serves over 1,100 industrial customers worldwide, particularly in energy storage, wood protection, metal surface treatment, textile metallization, and cleaning/disinfection sectors. Their business model is primarily B2B, emphasizing innovation and quality solutions. The website reflects a professional and consistent brand presence with comprehensive product and corporate information. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Nette Framework, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data reduces domain trust signals but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the website is a reliable digital representation of a medium-sized industrial chemical company with a strong market position and good digital maturity.

Z

Cestovný ruch regiónu Záhorie a oblastí Myjavské kopanice, Záhorská Bratislava

zahorie.info

42

The website zahorie.info serves as a regional tourism portal focused on the Záhorie region and surrounding areas in Slovakia. It provides comprehensive information about cultural, historical, natural, and recreational attractions, targeting tourists and visitors interested in exploring the region. The site features event calendars, accommodation and dining recommendations, and detailed descriptions of local points of interest. The business model is informational and promotional, supporting regional tourism development. Technically, the website is built on WordPress 5.7.12 with common libraries such as jQuery, Bootstrap, and FontAwesome. It uses plugins for rating and live news features. The hosting and domain registration are stable and consistent with the site's age and purpose. Performance is moderate with good mobile optimization and basic accessibility. SEO practices are basic but present. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and important security headers, which could improve its security posture. No incident response or security policy pages are found, and no cookie consent mechanism is implemented despite GDPR policy presence. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy for its intended audience. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and maintaining up-to-date software to enhance security and compliance.

V

Visit Bratislava

visitbratislava.com

67

Visit Bratislava operates as the official tourism portal for the capital city of Slovakia, providing comprehensive visitor information, event listings, and promotional services such as the Bratislava CARD. The website is well-branded, professionally designed, and targets tourists seeking cultural, gastronomic, and recreational experiences in Bratislava. The business model focuses on tourism promotion supported by the Slovak Ministry of Tourism and Sports, positioning itself as a trusted city guide and event hub. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Hotjar, and multilingual support. It features multimedia content such as embedded YouTube videos and interactive event calendars, indicating a mature digital presence. Mobile optimization and SEO practices are well implemented, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, it lacks visible security headers and explicit incident response or security policy pages. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and official affiliations suggest authenticity. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is moderate with recommendations to verify domain registration details, enhance security headers, and publish explicit security and incident response policies. The website is safe for general audiences, free from adult or questionable content, and demonstrates strong compliance with privacy regulations.

Č

ČMIS s.r.o.

cmis.cz

60

ČMIS s.r.o. is a Czech IT company founded in 2004 specializing in cloud services, hosting, managed IT, cybersecurity, and software development. The company serves over 300 clients primarily in manufacturing, trade, and service sectors, positioning itself as a reliable and professional IT partner with strong technology partnerships including Microsoft and Dell. Their offerings include private cloud infrastructure, Microsoft SQL Server services, ransomware readiness, backup and disaster recovery, and IT management. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and certifications such as ISO 27001 and ISO 9001, reinforcing their market credibility. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Fonts, jQuery, and embedded video content. It is well optimized for mobile devices and demonstrates good SEO and accessibility practices. The site employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, explicit HTTP security headers and a public vulnerability disclosure policy are absent, representing areas for security enhancement. From a security perspective, the company shows a solid posture with ISO certifications and cybersecurity services, but lacks publicly available incident response contacts and vulnerability disclosure channels. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but is mitigated by the professional website content and business transparency. Overall, the site is secure, professional, and trustworthy, with minor recommendations to improve security headers and incident response visibility. Strategically, ČMIS should focus on enhancing their public security policies and WHOIS transparency to further build trust. Their strong business model and technical infrastructure position them well for continued growth in the Czech IT services market.

L

lulafit

lulafit.com

65

Lulafit is a boutique service provider specializing in amenity consulting and management for commercial real estate properties. Their business model focuses on transforming office buildings into workplace destinations through hospitality-driven and wellness-forward amenities. The company leverages proprietary technology platforms to enhance tenant engagement and operational efficiency. Their market position is supported by partnerships with major real estate firms and a portfolio of client testimonials, indicating a strong reputation in the niche market of workplace amenities. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including HubSpot for marketing and analytics, Segment for data collection, and Visual Website Optimizer for A/B testing. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. However, some security best practices such as implementing security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the professional website and client references mitigate some risk. Overall, the security posture is good but could be improved with additional transparency and technical controls. The overall risk assessment suggests a generally trustworthy and professional business presence with minor gaps in domain registration transparency and security policy disclosures. Strategic recommendations include verifying domain registration status, enhancing security headers, publishing security policies, and providing direct contact information to improve trust and compliance.

N

nLogy s.r.o.

nlogy.cz

42

nLogy s.r.o. is a Czech Republic based small technology company specializing in custom software development. Their services include creating business ecosystems, internet presentations, commercial and mailing systems, and solutions for network and server backup. The company emphasizes original and diverse projects such as automatic vehicle parking systems, machine audio analysis, and information systems for kindergartens. The website reflects a professional and consistent brand image with clear business registration and banking details, targeting businesses seeking tailored software solutions. Technically, the website is built on WordPress with common libraries like jQuery and CreateJS, showing moderate performance and good mobile optimization. However, there is a lack of explicit privacy, cookie, and security policies, and no contact emails or phone numbers are provided, which limits user engagement and trust. Security posture is moderate with implied HTTPS but missing security headers and no visible incident response information. WHOIS data is unavailable, which reduces domain trustworthiness despite the professional website content. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

D

DDT s.r.o.

ddtsro.cz

61

DDT s.r.o. is a Czech manufacturing company specializing in the converting and processing of adhesive tapes with over 20 years of experience. The company offers tailored solutions primarily for the automotive, healthcare, and engineering sectors. It holds recognized certifications including ISO 9001:2015 and maintains a partnership with Tesa, positioning itself as a trusted specialist in its niche. The website reflects a professional and consistent brand image with clear service offerings and case studies demonstrating expertise. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, GSAP, and Owl Carousel to deliver a responsive and engaging user experience. Hosting and domain registration are consistent and reliable, with SSL properly configured. The site includes a cookie consent mechanism aligned with GDPR requirements, though explicit privacy and terms of service pages are not found. Analytics usage is minimal and privacy-conscious. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain age and registration details support the legitimacy of the business. Overall, the website is well-constructed, trustworthy, and business-focused, with room for improvement in security headers and formal privacy documentation. The risk profile is low, and the company demonstrates credible market positioning and digital maturity.

C

Czech Video Center, a. s.

mall.tv

62

Fameplay.ai is a specialized company leveraging generative AI to empower audiovisual and sound production with storytelling capabilities. They combine traditional film production expertise with advanced AI technologies to offer services such as AI avatars, imaging, localization, and voice cloning. Their market position is strengthened by notable achievements including the first Emmy award for Czechia and partnerships with recognized clients like Microsoft and Universal Music Group. Technically, the website is built on a modern Webflow platform with integration of Google Fonts and Google Tag Manager, providing a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, and security headers are not detected, indicating areas for improvement in security posture. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, but the professional content and client references partially mitigate this concern. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security measures.

N

NetNation

netnation.com

65

NetNation is a technology professional services company specializing in providing white-labeled B2B web services tailored for small business customers. Their offerings include migration and transfer services, user experience and customer flow design, service operation and management, integration, and customer support. Positioned as a backend engine powering brands that serve small businesses, NetNation focuses on helping partners expand their solution portfolios, reduce churn, and grow their brands. The company operates primarily in the United States and has been active since 2019. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and ActiveCampaign for marketing automation. The site is mobile optimized with good SEO practices and uses cookie consent mechanisms to comply with GDPR. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and employs reCAPTCHA v2 on forms, indicating attention to security best practices. However, no explicit security policy or incident response information is publicly available, and security headers are not evident in the HTML content. The WHOIS data aligns well with the website's business claims, showing consistent registration details and domain age appropriate for the company's history. Overall, NetNation presents a professional and trustworthy online presence with good privacy compliance and business credibility. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and enhancing security headers to further strengthen their security posture.

The website candidates.propropertyplatform.com serves as a political fundraising platform focused on supporting pro-property rights candidates, operated under the auspices of the National Association of REALTORS® Political Action Committee (RPAC). The site provides a minimalistic interface primarily for donation purposes, with content and branding consistent with a non-profit political action committee. The platform leverages third-party services such as Democracy Engine for secure donation processing and Microsoft Application Insights for telemetry. From a technical perspective, the site uses legacy AngularJS 1.8.0 alongside jQuery and Kendo UI libraries, indicating some technical debt and potential modernization needs. The site is accessible without WAF or security challenges, but lacks advanced SEO optimization and comprehensive accessibility features. The presence of Google reCAPTCHA suggests some bot mitigation, but no visible security headers or cookie consent mechanisms were detected. Security posture is moderate but could be improved by implementing standard security headers, enforcing HTTPS strictly, and providing clearer privacy and incident response policies. The absence of WHOIS data for the domain is a concern, suggesting either privacy protection or a newly registered domain, which slightly reduces trust despite the reputable organizational affiliation. Overall, the platform is functional for its purpose but would benefit from enhanced security practices, improved privacy compliance, and technical modernization to strengthen trust and user experience.

N

National Association of REALTORS®

store.realtor

63

The website store.realtor is the official e-commerce platform of the National Association of REALTORS®, providing a wide range of educational and marketing resources tailored for real estate professionals. The site offers books, brochures, webinars, posters, and bundles designed to support REALTORS® in their business growth and professional development. The platform is well-branded, consistent, and targets a specialized audience within the real estate industry. Technically, the site is built on the BigCommerce platform, leveraging modern web technologies and multiple analytics and marketing integrations, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS and secure payment integrations, although explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site demonstrates high professionalism and trustworthiness, though improvements in privacy compliance and visible contact information would enhance user trust and regulatory adherence.

3

3816 Creative

3816creative.com

59

3816 Creative is a small, professional web design and marketing agency based in Nashville, Tennessee, founded in 2020. The company specializes in brand and web design services aimed at delivering impactful and results-driven solutions for businesses. Their website showcases multiple client case studies, indicating a focus on quality and client success. Technically, the site is built on the Showit platform, leveraging modern JavaScript libraries such as jQuery and integrates Google Analytics and Facebook Pixel for marketing and tracking purposes. The website is mobile optimized and demonstrates good design and navigation clarity. Security-wise, the site uses HTTPS with domain status protections but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website presents a credible and trustworthy business presence with room for improvement in security and privacy practices.

C

CitizenPlane

citizenplane.com

57

CitizenPlane is a technology company providing an operating system and flight distribution platform tailored for airlines and tour operators. Their flagship products, Zenith and Air, enable airlines to optimize revenue, manage offers, and distribute flights through major online travel agencies and metasearch engines. The company positions itself as a global player with offices in France, Singapore, Brazil, and Panama, serving hundreds of airline customers worldwide. The website reflects a professional and modern digital presence built on Webflow, with strong branding and clear messaging focused on the airline industry. Technically, the website employs modern web technologies including Webflow CMS, Google reCAPTCHA for form security, and Amazon S3 for asset hosting. The site is mobile-optimized, fast-loading, and well-structured for SEO. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and includes CAPTCHA protections on forms, indicating a baseline security posture. The absence of WHOIS data for the domain is a concern, suggesting either recent registration or privacy protection, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy and terms of service documents are provided, indicating attention to compliance, though cookie consent is lacking. Overall, CitizenPlane's website presents a credible and professional business with a solid technical foundation. Strategic improvements in security headers, cookie consent, and transparency around domain registration would further strengthen trust and compliance.

I

Inovační centrum INION

inion.cz

62

Inovační centrum INION is a regional innovation and business support center based in Karlovy Vary, Czech Republic. The organization focuses on fostering entrepreneurship, innovation, and business development within the Karlovy Vary region by providing consulting services, networking events, workspace, and membership programs. The website reflects a professional and consistent brand image, targeting entrepreneurs and startups seeking guidance and community support. The business model appears to be non-profit or public-sector oriented, emphasizing regional economic development and innovation facilitation. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Typekit fonts, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and basic accessibility features. Hosting is managed by Webflow, ensuring reliable performance and HTTPS security. Cookie consent is implemented via Finsweet Cookie Consent, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, there is no explicit security policy or incident response information published, and no vulnerability disclosure or security.txt file is present. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is indicated. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust. Improving accessibility and regularly auditing third-party scripts would further strengthen the security posture.

P

Podcasting Ltd

matchmaker.fm

66

MatchMaker.fm is a UK-based platform operated by Podcasting Ltd that facilitates connections between podcasters, radio shows, YouTube channels, and guests for collaborative content creation and bookings. The platform offers profile creation, automated matching, messaging, scheduling integrations, and community features, serving over 70,000 users and 2,500 active shows. It holds a strong market position within the podcasting niche, supported by media features and positive testimonials. Technically, the website is built on Webflow, leveraging modern analytics and tracking tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and New Relic, hosted likely behind Cloudflare. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is basic but includes privacy and cookie policies with consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and legal company details.

Yum! Brands, Inc. is a leading global quick-service restaurant company operating iconic brands such as KFC, Pizza Hut, and Taco Bell. The company targets consumers worldwide, franchisees, investors, and job seekers, operating primarily through franchising and company-operated stores. The website reflects Yum! Brands' enterprise scale and market leadership with professional branding and comprehensive content. Technically, the site leverages modern frameworks including Dojo Toolkit, Bootstrap, and Google Tag Manager, hosted on IBM WebSphere Portal, providing a solid digital infrastructure with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response information are not prominently published. The absence of WHOIS data is notable but does not detract from the site's legitimacy given the brand's global presence and professional web presence. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

M

Merck & Co., Inc.

merckformothers.com

64

MSD for Mothers is a global initiative by Merck & Co., Inc. dedicated to improving maternal health worldwide by reducing preventable pregnancy-related deaths. The website serves as a platform to showcase their programs, strategic investments, and partnerships with organizations such as UNICEF. The initiative targets global health stakeholders, healthcare providers, and the general public, positioning itself as a significant corporate social responsibility effort within the healthcare sector. The content is professionally curated, with consistent branding and clear messaging aligned with Merck's corporate identity. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Tag Manager, complemented by a OneTrust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no explicit CMS or hosting provider information is discernible. Security headers are not evident from the provided data, and SSL configuration details are unknown but presumed present given HTTPS usage. From a security perspective, the site demonstrates good practices such as consent-based analytics and cookie management but lacks visible advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain is a notable gap, raising questions about domain registration transparency, though the website content and corporate association mitigate concerns. Overall, the site presents a low-risk profile with room for security enhancements. Strategically, the website effectively communicates its mission and impact, leveraging partnerships and social media to extend reach. The lack of direct contact emails or phone numbers suggests a preference for controlled communication channels, possibly to manage inquiries efficiently. The site is safe for general audiences with no adult or questionable content detected.

M

Montana Association of REALTORS®

montanarealtors.org

60

The Montana Association of REALTORS® (MAR) is a professional membership organization serving real estate professionals in Montana. It focuses on enhancing member professionalism, advocating for private property rights, and supporting local communities. The website provides comprehensive resources including advocacy, education, legal updates, and member services. MAR maintains a strong market position as the state-level REALTOR® association with a clear focus on member engagement and professional development. Technically, the website uses a modern technology stack including jQuery, Foundation framework, Flickity carousel, and Google Tag Manager for analytics. The site is mobile optimized and offers good user experience with clear navigation and professional design. The CMS platform is Accrisoft Freedom, indicating a specialized association management system. From a security perspective, the site enforces HTTPS and uses secure external libraries but lacks visible security headers and cookie consent mechanisms, which are areas for improvement. WHOIS data is unavailable due to privacy protection, which is common for such organizations and does not detract from legitimacy. Overall, the site demonstrates a solid security posture but could enhance compliance and transparency. The overall risk is low with no suspicious content or vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to improve trust and compliance.

B

Bloomfield brand studio

bloomfield.cz

49

Bloomfield brand studio is a small creative agency based in the Czech Republic specializing in brand communication services including visual identity, strategy, naming, content creation, web design, photography, and consultations. The company positions itself as a one-stop-shop for brand communication and emphasizes cultivating distinctive brands. Their market position is that of a niche creative agency with a professional portfolio and active social media presence. Technically, the website is built on Webflow with modern multimedia integration such as Mux Player and jQuery, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies and does not display contact emails or phone numbers, which impacts privacy compliance and business credibility. Security posture is moderate with no detected security headers or explicit security policies, and WHOIS data is unavailable, raising some concerns about domain legitimacy. Overall, the website is professional and trustworthy in content but would benefit from improved compliance and security transparency.

P

Podium Podcast Co.

podiumpodcastco.com

57

Podium Podcast Co. is a specialized podcast agency focusing on mission-driven and higher education podcasts. They provide comprehensive services including audience insights, content optimization, distribution, community engagement, and monetization strategies. Their market position is niche with strong partnerships and client references from reputable institutions such as Stanford and UBC. Technically, the website is built on Webflow with modern fonts and minimal tracking via Fathom Analytics, offering a good user experience and mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. The absence of WHOIS data raises some legitimacy concerns, but the professional site and client portfolio mitigate this risk. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

P

PLUS QA

plusqa.com

56

PLUS QA is a Portland, Oregon-based quality assurance software testing company specializing in onshore testing services. Established in 2008, the company offers a broad range of QA services including functionality, compatibility, accessibility, usability, managed testing, API, payment, automation, and localization testing. Their client base includes notable companies such as Airbnb, Dropbox, Nike, Giphy, and Discord, positioning them as a reputable player in the QA testing market. The company emphasizes the use of real devices in a secure environment and employs US-based professional testers to ensure quality and timely delivery. Technically, the website is built on the Webflow platform and leverages modern technologies such as Google Tag Manager, Google Analytics, Uploadcare, and Botpoison CAPTCHA for spam protection. The site is mobile-optimized, fast-loading, and includes accessibility features. Privacy compliance is addressed through a cookie consent banner integrated with Google Consent Mode, allowing granular user control over data collection. From a security perspective, the site uses HTTPS and implements form validation and bot protection. However, it lacks explicit security headers, a published security policy, and incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection, which slightly impacts trustworthiness. Overall, PLUS QA presents a professional and trustworthy digital presence with strong business credibility and technical maturity. Strategic improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.