Security Directory

E

Eco friendly Hotel Dália

hoteldalia.sk

47

Eco friendly Hotel Dália is a small hospitality business located in Košice, Slovakia, specializing in eco-friendly and sustainable tourism. The hotel offers accommodation, restaurant services, conference and wedding facilities, and innovative features such as 24/7 contactless check-in and electric vehicle charging stations. It holds certifications like Ecolabel and is recognized on platforms such as TripAdvisor and HolidayCheck. The website is professionally designed with good content quality and clear navigation, targeting eco-conscious travelers and business clients. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but no explicit GDPR statements. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

T

Thermona, spol. s r.o.

thermona.cz

49

Thermona, spol. s r.o. is a well-established Czech manufacturer specializing in gas condensing boilers, electric boilers, and heating system accessories. Operating since 1990, the company maintains a strong market position in the energy sector within the Czech Republic and neighboring regions. Their website reflects a professional and comprehensive digital presence, offering detailed product information, multiple contact forms, and a network of certified installation and service partners. The company emphasizes quality, reliability, and customer satisfaction through extended warranty programs and accessible support channels. Technically, the website is built on an ASP.NET WebForms platform with a modern yet somewhat dated technology stack including jQuery 1.11.3 and Bootstrap 3.3.5. The site is mobile-optimized, SEO-friendly, and integrates various third-party libraries for enhanced user experience such as Google Fonts, Font Awesome, and Google Maps API. Performance is moderate, with room for modernization particularly in updating JavaScript libraries. From a security perspective, the site enforces HTTPS and employs CAPTCHA on forms to mitigate spam. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit user consent mechanisms. However, the absence of explicit security headers like Content-Security-Policy and X-Frame-Options suggests opportunities for strengthening security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a trustworthy and professional image with strong business credibility. The main limitation is the lack of WHOIS data, which slightly reduces domain trustworthiness. Strategic recommendations include updating JavaScript libraries, enhancing HTTP security headers, and verifying domain registration details to improve overall trust and security.

IMMERGAS is a well-established Czech company specializing in manufacturing and selling high-quality gas boilers and heating solutions, including heat pumps and air conditioning. The company has a strong market presence in the Czech Republic with over 50 years of tradition and a large service network. Their website reflects a professional business with clear product offerings and customer support channels. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google services, with a CMS likely based on the Nette framework. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response documentation are recommended. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

Futurama Business Park is a well-established commercial real estate property located in Prague, Czech Republic, managed by SAFICHEM INVEST, a.s. The website presents a professional image emphasizing office space leasing, sustainability, and clean energy generation. The property consists of multiple office buildings with landscaped gardens and modern amenities, targeting business tenants seeking quality office environments. Technically, the website uses modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The security posture is solid with HTTPS and spam protection on forms, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable source for prospective tenants and partners.

S

SMWORKS s.r.o.

smworks.cz

57

SMWORKS s.r.o. is a Czech Republic based digital marketing agency established in 2004, specializing in brand development, custom web and application design, and comprehensive marketing strategies using their proprietary BPM project methodology. The company targets businesses seeking to grow their brand presence and marketing effectiveness, positioning itself as a trusted local agency with a strong portfolio including notable clients and case studies. Technically, the website employs a modern JavaScript stack with analytics and marketing integrations such as Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers and explicit incident response contacts. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear professional and consistent. Overall, the site demonstrates good content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and transparency.

F

Filogroup a.s.

filogroup.cz

41

Filogroup a.s. is a Czech manufacturing company specializing in cotton yarn production with a long-standing tradition in the textile industry. The website presents the company as stable and focused on quality yarn products, targeting a general audience including potential employees. The business model centers on manufacturing and sales within the textile sector, positioning itself as an established player in the Czech market. The website content is relevant and professionally presented, though limited in scope regarding direct contact information and corporate disclosures. Technically, the website is built on WordPress 4.9.26 with common plugins such as Contact Form 7 and jQuery UI. It uses HTTPS with a good SSL configuration but lacks modern security headers and some accessibility features. Performance is moderate, and mobile optimization is basic. SEO is adequately addressed through meta tags and structured data. External dependencies include marketing/tracking services like Leady and common CDN providers. From a security perspective, the site benefits from HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers are provided, limiting transparency. No incident response or vulnerability disclosure information is available. Overall, the website is functional and business-appropriate but has gaps in privacy compliance, security best practices, and domain legitimacy verification. Strategic improvements in these areas would enhance trust and security posture.

A

ASKO - NÁBYTOK

asko-nabytok.sk

65

ASKO - NÁBYTOK operates a professional e-commerce platform specializing in furniture and home accessories targeted primarily at Slovak consumers. The website offers a broad range of products including beds, chairs, tables, wardrobes, and garden furniture, supported by physical store locations and free personal pickups. The company positions itself as a large retail player in Slovakia with a focus on quality and affordability. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Splide for enhanced user experience. It integrates Google Tag Manager and Consentmanager.net for analytics and cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and structured with clear navigation, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like CSP or HSTS. No exposed sensitive data or vulnerable libraries were detected. However, the absence of a published privacy policy, terms of service, and security.txt file indicates gaps in compliance and incident response readiness. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security best practices to improve compliance and user trust.

2

2MaNet s.r.o.

2manet.cz

44

2MaNet s.r.o. is a Czech-based company specializing in the sale and rental of industrial and agricultural products including bearings, seals, V-belts, lubricants, tools, tires, and fastening materials. The company also offers rental services for vehicles, tractors, excavators, trailers, scaffolding, and drying equipment, targeting both business and individual customers in the region. Their website reflects a well-structured retail and service business with a physical store presence and multiple contact options. Technically, the website uses common JavaScript libraries and Google Analytics for tracking, with basic mobile optimization and SEO practices. Security posture is moderate with room for improvement in security headers and SSL configuration transparency. The absence of WHOIS data is a notable concern, impacting domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site presents a professional business with a moderate risk profile.

F

FakaHeda.eu

fakaheda.eu

61

FakaHeda.eu is a Czech-based game hosting provider specializing in rental of game and voice servers, data hosting, and virtual private servers. Established since 2006, it serves a regional audience of gamers and server renters with a professional and consistent online presence. The website is well-structured, multilingual, and provides a control panel for customers to manage their services. Technically, the site uses a modern tech stack including jQuery, Rails framework, and integrates Google Tag Manager and Ads with a privacy-first consent approach. Security posture is moderate with CSRF protections and cookie consent but lacks explicit security headers and incident response information. WHOIS data is unavailable due to EURid privacy policies, but the domain and website appear legitimate and consistent with the business claims. Overall, the site is professional, GDPR compliant, and trustworthy with room for security enhancements.

Z

ZONER software, a.s.

fotograficky.guru

47

Fotograficky.guru is a Czech photography portal operated under the umbrella of ZONER software, a.s., providing photography enthusiasts with educational content, community projects such as the 52 photoweeks challenge, live broadcasts, and book promotions. The website leverages WordPress and WooCommerce to deliver content and e-commerce functionalities. It integrates common analytics and marketing tools like Google Analytics and Facebook Pixel but lacks visible privacy and cookie policies, which poses compliance risks. The domain is well-established since 2014 with consistent registration data, indicating legitimacy. However, security configurations are basic, with no DNSSEC or security headers implemented, and some outdated libraries in use.

K

Kaocko

kaocko.cz

52

Kaocko.cz is a Czech sports news website specializing in combat sports such as MMA, K1, and boxing. It serves a niche audience of combat sports enthusiasts by providing news articles, event coverage, and sports statistics. The site maintains an active presence on major social media platforms including Facebook, Instagram, and YouTube, enhancing its reach and engagement. The business model is primarily media and advertising-driven, targeting regional audiences interested in martial arts and combat sports. Technically, the site employs modern JavaScript libraries like jQuery and Swiper, uses HTTPS with good SSL configuration, and integrates advertising and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data and registrant information reduces domain trustworthiness and raises concerns about transparency. Security posture is moderate with HTTPS enforced but lacks security headers and explicit incident response contacts. Privacy compliance is basic, with a terms of service PDF available but no clear cookie policy page. Overall, the website is functional, content-rich, and professionally designed but would benefit from improved transparency, security headers, and privacy disclosures.

I

IS-EXPERT s.r.o.

objednamjidlo.cz

48

The website objednamjidlo.cz is operated by IS-EXPERT s.r.o. and offers an online ordering system tailored for restaurants specializing in regular meal deliveries. The platform automates order processing, invoicing, payments, and delivery logistics, targeting restaurants and food delivery businesses primarily in the Czech Republic. The business model is SaaS-based, focusing on improving operational efficiency and customer acquisition for its clients. The site positions itself as a leading solution in its niche, supported by customer testimonials and detailed service descriptions. Technically, the website is built on ASP.NET WebForms with common JavaScript libraries such as jQuery and Bootstrap. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The hosting provider is Active24, as indicated by WHOIS data. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site uses HTTPS for external resources but does not explicitly show security headers or privacy policies, indicating room for improvement in security posture and GDPR compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data is consistent with the business claims, supporting the legitimacy of the domain and company. Overall, the website is professional and functional but would benefit from enhanced security measures, published privacy and cookie policies, and improved transparency regarding data protection and incident response.

H

HRportals.cz s.r.o.

nabrigadu.info

61

NaBrigádu.info is a Czech Republic-based online job portal specializing in temporary and part-time job offers. The platform targets a broad audience including students, retirees, working individuals, and mothers on maternity leave. It provides verified job listings across multiple Czech cities and job categories, ensuring trustworthy opportunities. The business operates as a small-scale niche job listing service with a focus on local market needs. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, and uses HTTPS to secure user interactions. The presence of privacy and cookie policies indicates compliance with GDPR regulations. Security posture is solid with encrypted connections and secure forms, though additional HTTP security headers could enhance protection. Overall, the site presents a professional and user-friendly experience with good mobile optimization and clear navigation. The lack of publicly available WHOIS data suggests privacy protection, which is common for such online services. The domain appears legitimate and well-maintained, supporting the business's credibility.

R

Ruma Nábytek

ruma.cz

54

Ruma Nábytek operates as a small-scale furniture retailer based in Prague, Czech Republic, offering a range of quality, modern, and luxury furniture products through an e-commerce platform. The website is designed to target local customers seeking both custom and ready-made furniture solutions. The business model focuses on online sales with an emphasis on product variety and quality. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. Security posture is adequate with HTTPS enforced and use of CAPTCHA, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data and lack of visible privacy and terms policies reduce the overall trust and compliance rating. Strategic improvements in transparency, contact availability, and security policy publication are recommended to enhance credibility and compliance.

N

Neurocritical Care Foundation

neurocriticalcarefoundation.org

66

The Neurocritical Care Foundation is a specialized 501(c)3 non-profit organization dedicated to fostering collaboration and funding in neurocritical care research. It operates in association with the Neurocritical Care Society and targets researchers, donors, and healthcare professionals globally. The foundation provides research and education grants and aims to build long-term partnerships to advance treatments for life-threatening neurological disorders. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website is built on the DNN CMS platform using ASP.NET WebForms, enhanced with modern JavaScript libraries such as jQuery, Slick Carousel, and FancyBox. It employs Google Analytics for user tracking and Constant Contact for email signups. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses secure form tokens and Google reCAPTCHA, indicating a good baseline security posture. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and some recommended HTTP security headers. The absence of WHOIS data limits domain trust verification, but the website's professional content and trust signals mitigate concerns. Overall, the Neurocritical Care Foundation website is a credible and professionally maintained platform supporting a niche healthcare non-profit. Strategic improvements in security policies, accessibility, and technical modernization would enhance its digital maturity and trustworthiness.

Z

Zone Media LLC

zonecloud.ee

50

ZoneCloud is a cloud storage and file synchronization service operated by Zone Media LLC, an Estonian technology company founded in 2013. The platform offers web-based access alongside desktop and mobile clients for file syncing, targeting general users and businesses requiring cloud storage solutions. The website is functional and uses a variety of modern JavaScript libraries and frameworks, indicating a moderate level of technical maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain registration data aligns well with the business identity, supporting legitimacy. Overall, the security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing privacy-related policies.

H

Hotel Tři lilie

trililie.cz

50

The website represents Hotel Tři lilie, a historic hotel located in the center of Františkovy Lázně, Czech Republic. It targets tourists and visitors seeking accommodation with a traditional French charm. The business operates in the hospitality sector, offering hotel accommodation and related services. The website is built on WordPress using the Divi theme and incorporates various third-party analytics and advertising technologies such as Google Analytics, Hotjar, Adform, and Facebook Pixel. A cookie consent mechanism is implemented, reflecting some level of privacy compliance. However, the absence of a visible privacy policy and terms of service pages limits full compliance assessment. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Technically, the site uses older jQuery versions and lacks security headers, which could expose it to vulnerabilities. Overall, the site is functional and professionally presented but would benefit from enhanced security and compliance documentation.

C

Colorissimo

colorissimo.com

52

Colorissimo is a medium-sized Polish company specializing in premium business gifts, offering a wide range of products including novelties, drinkware, audio devices, tools, luggage, and umbrellas. The company targets businesses seeking quality corporate gifts and supports multiple languages through downloadable catalogs and an online product search platform. The website demonstrates a professional and consistent brand presence with clear contact information and social media integration. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided via home.pl, a Polish hosting provider, with SSL enabled ensuring secure communications. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Overall, the website is trustworthy, well-structured, and suitable for its business audience.

F

Františkovy Lázně

frantiskovylazne.cz

51

Františkovy Lázně is a historic spa and wellness destination in the Czech Republic, boasting a tradition since 1793 and recognized by UNESCO. The website presents a professional image with a focus on health tourism and spa services targeting a broad audience including all generations. Technically, the site is built on WordPress using the Divi theme and incorporates multiple third-party tracking and advertising technologies such as Google Analytics, Hotjar, Adform, and Facebook Pixel. The site is secured with HTTPS and implements a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is generally good but could be improved by updating libraries and adding security headers and public security policies. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced transparency and security documentation.

I

Incredit

incredit.lv

56

Incredit is a licensed Latvian financial services company specializing in consumer and business credit products, operating since 2010 as a subsidiary of Rietumu Banka. The company offers a variety of loan products including consumer loans, auto loans, credit lines, and refinancing options, targeting Latvian consumers and businesses. The website is professionally designed with good content quality, clear navigation, and multiple contact points including physical offices across Latvia. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit security policies are absent. Privacy and cookie policies are comprehensive and GDPR compliant with active consent mechanisms. WHOIS data was unavailable due to query limits, limiting domain registration verification, but website content and business information appear legitimate and consistent with a licensed financial institution. Overall, the site demonstrates a mature digital presence with moderate to good security and privacy practices.

F

Falk & Ross

falk-ross.eu

59

Falk & Ross operates as a pan-European distributor specializing in promotional products such as T-Shirts, Jackets, Bags, Caps, and Workwear. The company targets both B2C and business customers through a professional e-commerce platform powered by OXID eShop. Their market position is that of a medium-sized distributor with a broad product range and multi-language support, indicating a mature digital presence across Europe. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and personalization tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and secure login forms, although additional security headers could enhance protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-structured, with no critical security issues detected.

MAKITO is a Spanish-based company specializing in the sale of promotional products through a professional e-commerce platform. The website offers a broad catalog of items ranging from office supplies to textiles and sustainable products, targeting businesses and professionals seeking branded merchandise. The site is built on the ePages platform and incorporates modern web technologies including jQuery, RequireJS, and Google Analytics for tracking and marketing purposes. While the website is well-structured and visually consistent, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is not publicly accessible due to registry restrictions, limiting the ability to fully verify domain legitimacy. Overall, the website demonstrates a solid technical foundation and business presence but would benefit from enhanced privacy disclosures and security headers.

S

Spa Resort PAWLIK-AQUAFORUM

pawlik-aquaforum.cz

51

Spa Resort PAWLIK-AQUAFORUM is a well-established four-star hospitality and wellness business located in Františkovy Lázně, Czech Republic, with a history dating back to 1868. The resort offers comprehensive spa, medical, and recreational services including a large aquapark, wellness treatments, and family-friendly amenities. The website reflects a mature digital presence built on WordPress with the Divi theme, integrating modern web technologies such as jQuery, Google Analytics, and a third-party webchat service. While the site is professionally designed and provides clear contact information, it lacks explicit privacy and cookie policies, which may pose compliance risks under GDPR. Security posture is adequate with HTTPS enabled but could be improved by implementing additional security headers and form protections. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Plaváček webdesign

blabolnik.cz

41

The website www.blabolnik.cz is a personal blog and archive maintained by an individual known as Plaváček, focusing on web design, SEO, and internet culture topics primarily in the Czech language. It serves as a repository of articles and commentary with a nostalgic and historical perspective on the evolution of the internet and web technologies in the Czech Republic. The business model is minimal, relying on content publishing, occasional book sales via external links, and voluntary donations through PayPal. The site targets general internet users interested in these niche topics. Technically, the site uses an older technology stack including jQuery, jQuery UI, and Lightbox, with a CMS identified as Pub-Me CMS. Hosting is provided by a Czech hosting provider named Levný webhosting. The site shows moderate performance and basic mobile optimization but suffers from mixed content issues due to loading many scripts and stylesheets over HTTP instead of HTTPS. The use of deprecated Google Analytics urchin.js indicates outdated analytics implementation. From a security perspective, the site lacks modern security headers and has mixed content vulnerabilities, which could expose users to risks. No privacy or cookie policies are present, and no contact information is provided, limiting compliance with GDPR and other privacy regulations. The WHOIS data is unavailable, which raises concerns about domain legitimacy verification, although the site content and branding appear consistent with a personal blog. Overall, the site is functional and provides valuable content to its niche audience but requires technical and security improvements to enhance user safety, privacy compliance, and trustworthiness.

GM Approved Special Tools and Equipment operates an e-commerce platform specializing in the sale of GM approved special service tools and equipment targeted primarily at automotive dealers and service professionals. The website offers an online catalog, dealer services requiring login, promotions for authorized dealers, and additional resources such as software downloads and virtual tool crib access. The business appears to be newly established in 2024, focusing on a niche market within automotive manufacturing and retail sectors. The platform is designed to serve authorized dealers and professionals with specialized equipment needs.

S

SmarTech Solutions

smartech.cz

52

SmarTech Solutions is a Czech-based consulting firm specializing in supporting companies with research and development (R&D) tax deductions. The company offers expert services including project identification, technical audits, report preparation, cost analysis, and defense before tax authorities. Their market position is strengthened by recognized awards and collaboration with Czech financial authorities. The website is professionally designed, targeting Czech businesses engaged in R&D, and provides clear contact channels and trust indicators such as testimonials and certifications. Technically, the site uses a legacy but stable technology stack including jQuery and Foundation, with multiple analytics and tracking tools integrated. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit privacy policies are recommended. Overall, the website presents a credible and professional business presence with moderate technical maturity and privacy compliance.

T

TopHosts

tophosts.net

48

TopHosts is a Russian-language online platform specializing in hosting provider ratings, reviews, and comparison tools. It targets Russian-speaking users seeking reliable hosting services, offering detailed information on VPS, shared hosting, dedicated servers, and related services. The platform leverages affiliate partnerships with hosting providers, providing promo codes and referral links to monetize its service. Technically, the website uses a modern JavaScript stack including jQuery, DataTables, and integrates analytics tools such as Google Analytics and Yandex Metrika. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the website is accessible, professional, and trustworthy, with moderate security posture and some compliance gaps.

L

Leifheit

leifheit-online.cz

53

Leifheit-online.cz operates as the official e-commerce platform for the Leifheit brand in the Czech Republic, specializing in household and kitchen products. The website targets domestic consumers seeking quality home care and kitchen accessories. The business model is retail-focused, leveraging online sales channels to reach its audience. The site demonstrates consistent branding and provides comprehensive product information and customer support features, including live chat and contact forms. Technically, the website employs a modern technology stack including Google Analytics, Facebook Pixel, TikTok Pixel, and Cookiebot for privacy compliance. It uses HTTPS with a Content Security Policy header, ensuring secure communications and basic protection against common web threats. The site is mobile-optimized and exhibits good SEO practices, although accessibility features could be enhanced. From a security perspective, the site maintains a good posture with HTTPS enforcement and cookie consent mechanisms. However, it lacks some advanced security headers and detailed incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces the domain trustworthiness score, but the website's professional presentation and official brand association mitigate this concern. Overall, Leifheit-online.cz presents a trustworthy and professional e-commerce presence with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, accessibility, and domain registration transparency would further enhance its security and credibility profile.

X

XSERVER Inc.

unwto-ap.org

44

The website represents the UN Tourism Asia-Pacific Regional Support Office, a governmental/non-profit entity focused on tourism development and sustainability in the Asia-Pacific region. It provides information about the organization, member countries, events, research, and publications. The site targets government agencies, tourism professionals, researchers, and affiliate members. The business model is informational and supportive, aligned with UNWTO's mission. Technically, the site is built on WordPress using the Newspaper theme and several plugins, including Mailchimp Campaign Manager. It employs modern JavaScript libraries like jQuery and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by XSERVER Inc. in Japan. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is available. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security configurations to align with best practices.

T

Technistone

technistone.com

50

Technistone is a premium manufacturer of engineered quartz stone surfaces primarily targeting kitchen worktops, bathroom cladding, and tiles. The company positions itself as a high-quality European producer with an international distribution network. The website is professionally designed, mobile-optimized, and rich in content including product catalogs, resources for professionals, and a blog. Technically, the site uses modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but the domain registration inconsistency warrants further verification.

MyTicket.lv is a Latvian e-commerce platform specializing in the sale of tickets for a wide range of events including concerts, theatre, sports, family, and children's events. The company behind the site is SIA MIT, a registered Latvian entity. The website offers a catalog of events with electronic ticket delivery and supports multiple languages including Latvian, Russian, and English. The platform targets a general audience interested in local events and entertainment. Technically, the site uses a traditional web stack with jQuery, Owl Carousel, and Cookiebot for cookie consent management. Analytics are implemented via Yandex Metrika and Google Analytics, indicating moderate user tracking. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented security policies. Privacy compliance is supported with a visible privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. WHOIS data could not be retrieved due to query limits, but the site shows legitimate business indicators. Overall, the site is functional, user-friendly, and suitable for its market niche.

S

Saldus novada dome

ledushalle.saldus.lv

54

Saldus novada dome operates the official municipal website for the Saldus region in Latvia, providing residents and visitors with comprehensive information about local government, public services, news, and community resources. The website serves as a key communication channel for municipal announcements, administrative services, and cultural and tourism information. The site is well-structured and targets a broad audience including local citizens, businesses, and tourists. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Modernizr, and plugins like Events Manager and Klaro for cookie consent management. The site is mobile-optimized and implements structured data for SEO enhancement. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses Cloudflare Turnstile captcha for form protection. However, explicit security headers are not detected, and there is no publicly available security policy or incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in Latvian. Overall, the website presents a professional and trustworthy digital presence for the municipality. The lack of WHOIS data limits full domain legitimacy verification, but the content and branding strongly indicate an official government site. Strategic improvements in security headers and transparency policies would enhance the security posture and trustworthiness.

S

Saldus novada dome

ciecere.saldus.lv

57

Saldus novada pašvaldība is the official municipal government website for the Saldus region in Latvia, providing comprehensive information about local governance, public services, news, and community events. The website targets residents and visitors seeking municipal resources and updates. Technically, the site is built on WordPress with a modern tech stack including jQuery, Modernizr, and several plugins for event management and contact forms. It employs HTTPS and integrates Cloudflare Turnstile captcha and Klaro for cookie consent, reflecting a good security posture. However, no explicit security policy or incident response information is published, and WHOIS data is unavailable due to query limits, limiting full domain legitimacy verification. Overall, the site is professional, user-friendly, and compliant with GDPR, serving as a trustworthy government portal.

S

Saldus novada dome

vidusskola.saldus.lv

59

Saldus novada dome operates the official municipal government website for the Saldus region in Latvia, providing residents and visitors with access to governance information, public services, news, and community resources. The website targets local citizens and stakeholders, offering a comprehensive portal for municipal engagement and information dissemination. Technically, the site is built on WordPress with a modern tech stack including jQuery, Modernizr, and various plugins for events and forms, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, use of Cloudflare Turnstile captcha, and cookie consent management, although explicit security headers and policies are not fully documented. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though WHOIS data is unavailable due to query limits, limiting domain registration verification.

S

Saldus novada dome

biblioteka.saldus.lv

46

Saldus novada dome operates the official municipal government website for the Saldus region in Latvia, providing residents and visitors with comprehensive information about local governance, public services, news, events, and contact resources. The website serves as a central hub for municipal communication and service delivery, targeting local citizens and stakeholders. Technically, the site is built on WordPress with a modern tech stack including jQuery, Modernizr, and various plugins for event management and forms. It employs HTTPS with Cloudflare Turnstile captcha for form security and Klaro for cookie consent, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and compliant with GDPR, but WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits to ensure ongoing compliance and security.

P

PCsupport.cz s.r.o.

balik123.cz

57

Balik123.cz is an online parcel shipping service operating primarily in the Czech Republic and EU countries. The company, operated by PCsupport.cz s.r.o., offers a simple three-step process for customers to prepare shipments, pay online, and have parcels picked up by courier the next day. The website is professionally designed with clear navigation and integrates social media and chat support tools. The business targets both individual and corporate customers seeking affordable international parcel delivery. Technically, the site uses a custom CMS with common JavaScript libraries and tracking tools, hosted by Gransy. Security practices include HTTPS and input validation but lack advanced security headers and published incident response policies. Privacy compliance is basic with cookie consent but no detailed GDPR disclosures. WHOIS data confirms domain legitimacy and consistency with the business age and operations. Overall, the site is functional and trustworthy but could improve security and privacy transparency.

H

hi!deagifts

hideagifts.com

47

Hi!deagifts operates as a specialized business focused on the development and distribution of promotional gifts targeted at professionals within the same sector. The website is multilingual, with the Portuguese version analyzed here, and positions itself as a niche B2B supplier with a clear catalog offering. The company demonstrates moderate market presence with certifications such as PME LIDER and references to EU funding projects, indicating some level of business credibility and regional engagement. Technically, the website employs a range of established JavaScript libraries including jQuery, Owl Carousel, and Google Tag Manager, hosted behind Cloudflare infrastructure which supports good performance and security. The site is mobile optimized and includes standard SEO and accessibility features, although some libraries are outdated and security headers are not visibly implemented. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. The absence of WHOIS registration data is a significant concern, potentially indicating domain registration issues that impact trustworthiness. Privacy and cookie policies are present and GDPR compliant, but contact information is sparse. Overall, the website is functional and professional but would benefit from enhanced security practices, clearer business contact information, and resolution of domain registration transparency to improve trust and compliance.

W

WIBRE

wibre.de

61

WIBRE is a well-established German manufacturer specializing in professional lighting solutions for underwater and outdoor applications. With a history dating back to 1919, the company holds a strong market position in manufacturing high-quality recessed and surface-mounted spotlights, serving a professional audience in architectural and outdoor lighting sectors. The website reflects this maturity with comprehensive product information, project references, and clear contact details. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery and Cloudflare Turnstile for bot protection. The hosting is provided by a reputable German hosting provider, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for WIBRE.

Vymětal s.r.o. is a Czech construction and real estate development company established in 2005, specializing in industrial hall construction, turnkey residential buildings, renovation of protected monuments, and related engineering services. The company has a solid market presence with over 350 completed projects and a workforce of approximately 40 employees. Their business model focuses on providing comprehensive construction and development solutions primarily within the Czech Republic. The website reflects a professional and consistent brand image targeting local businesses and individuals seeking construction services. Technically, the website employs a traditional tech stack including jQuery, Owl Carousel, and Google Maps API, though some libraries are outdated which may pose security risks. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. The Google Maps integration is present but currently misconfigured, affecting user experience. From a security perspective, the site uses HTTPS and domain transfer protections but lacks DNSSEC and important security headers. The absence of a cookie consent mechanism and use of outdated JavaScript libraries are notable compliance and security gaps. Certifications such as ISO 9001, ISO 14001, OHSAS 45001, and GDPR compliance are prominently displayed, indicating a commitment to quality and regulatory adherence. Overall, the website is trustworthy and professional but would benefit from technical and security improvements to enhance compliance, user experience, and risk posture.

Galerie Přerov is a retail shopping center located in Přerov, Czech Republic, operated by KAVVA Digital s.r.o. The website serves as a digital portal showcasing the shopping center's stores, restaurants, events, and services. It targets local families and shoppers, providing information on store hours, promotions, and contact details. The site is well-branded and consistent with the business's retail and hospitality focus. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, with a CMS likely based on the Nette Framework. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements form validation but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

E

ENVIFORM a.s.

enviskola.cz

54

ENVIFORM a.s. operates an e-learning platform specializing in workplace safety, health, and environmental training with certification for employees. The company has a 15-year market presence and emphasizes professionalism backed by accreditation and certification. The website targets companies and employees seeking professional safety training solutions. Technically, the site uses common web technologies such as Bootstrap, jQuery, and CKEditor, but lacks modern CMS or advanced frameworks. Performance and mobile optimization are basic but functional. Security posture is moderate with secure login forms but lacks HTTPS enforcement and security headers, which are critical for protecting user data and trust. Privacy compliance is weak, with no visible privacy or cookie policies, which is a concern given GDPR requirements. WHOIS data is unavailable, reducing transparency and trustworthiness. Overall, the site is functional and professional but requires improvements in security and compliance to enhance trust and protect users.

A

Apbedīšanas birojs "Ar cieņu"

arcienu.lv

53

Apbedīšanas birojs "Ar cieņu" is a Latvian funeral service provider offering comprehensive funeral and cremation services across Riga and Latvia. The company provides a full range of services including transportation of the deceased, funeral planning, consultation, and funeral accessories. Their website is professionally designed, mobile-optimized, and includes customer testimonials indicating a positive reputation. The business targets local residents seeking respectful and professional funeral arrangements. Technically, the website employs modern front-end technologies such as Bootstrap 5, jQuery, FontAwesome, and Swiper.js, ensuring a responsive and user-friendly experience. Analytics are implemented via Google Tag Manager, and customer support is facilitated through JivoChat. However, some security best practices like HTTP security headers are not detected, and WHOIS data is unavailable due to query limits, limiting full domain trust verification. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is basic with cookie consent and a privacy policy present, but no terms of service or incident response information is found. Overall, the website is trustworthy and professional but could improve security and compliance transparency. Recommendations include implementing security headers, verifying SSL configuration, publishing clear security and incident response policies, and obtaining WHOIS data for domain legitimacy verification.

Žogu Darbnīca is a Latvian company specializing in the manufacturing and installation of fences, gates, and concrete products across Latvia. The website presents a comprehensive catalog of products with pricing and purchasing options, targeting local customers seeking quality fencing solutions. The business operates primarily as a small-scale manufacturer and retailer with direct customer engagement and consultation services. Technically, the website is built on DIRcms and employs a variety of JavaScript libraries for UI enhancements, including jQuery, bxSlider, and Owl Carousel. It uses HTTPS and Google Tag Manager for analytics, indicating a moderate level of digital maturity. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and security best practices. The absence of WHOIS data limits domain legitimacy verification, but the visible contact information and business content suggest a legitimate local business. Overall, the website is functional and professional but could improve in privacy compliance and security posture.

Audums Plus operates a Latvian-based e-commerce platform specializing in textiles, curtains, and related sewing and home decor accessories. Established in 1992, the company offers a broad product catalog sourced from European and Asian manufacturers, targeting both retail consumers and businesses interested in home textile products. The website supports Latvian, Russian, and English languages, enhancing accessibility for regional customers. The business model combines online sales with physical stores and curtain design services, positioning Audums Plus as a well-established player in the Latvian textile retail market. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.1 and various jQuery plugins for UI and carousel functionalities. The site is moderately optimized for mobile devices and provides basic SEO and accessibility features. However, the use of outdated libraries introduces potential security vulnerabilities. The site includes a cookie consent banner and a privacy policy page, indicating some level of privacy compliance, though no advanced security policies or incident response information are publicly available. From a security perspective, the site lacks visible security headers and uses outdated JavaScript libraries, which could expose it to known vulnerabilities. HTTPS usage is assumed but not explicitly confirmed in the provided data. The absence of WHOIS data due to query limits restricts full domain legitimacy verification. Tracking via Google Analytics and DoubleClick is present, with moderate user tracking levels. No critical security issues or adult content were detected, and the site appears safe for general audiences. Overall, Audums Plus presents a moderately secure and professionally maintained e-commerce platform with room for improvement in technical modernization and security hardening. Strategic recommendations include updating JavaScript libraries, implementing security headers, enforcing HTTPS, and publishing clear security and incident response policies to enhance trust and compliance.

L

Latvijas Ūdensapgādes un Kanalizācijas Uzņēmumu Asociācija

lwwwwa.lv

45

The Latvijas Ūdensapgādes un Kanalizācijas Uzņēmumu Asociācija (LŪKA) is a professional non-profit association uniting water supply and sanitation companies in Latvia. Established in 1990, it plays a significant role in the development of the water industry, promoting safe drinking water and environmentally friendly wastewater systems. The website reflects a medium-sized organization with a clear focus on industry collaboration, education, and member support. It targets industry professionals and stakeholders within Latvia. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not detected and no explicit security policies or incident response information are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and policy publication are recommended.

S

SIA „CRYSTALLINE“

adetalas.lv

42

Adetalas.lv is an e-commerce website operated by SIA „CRYSTALLINE“, specializing in the sale of original and analogue automotive spare parts. The business targets car owners and automotive service providers primarily in Latvia, offering parts by part number, VIN, and brand. The website demonstrates a consistent and professional brand presence with clear contact information and legal disclosures. Technically, the site is built on the OpenCart CMS platform, utilizing common JavaScript libraries such as jQuery and Owl Carousel to enhance user experience. The site is mobile-optimized and provides a good user interface with clear navigation and search functionality. Security-wise, the website enforces HTTPS but lacks several important security headers, which could be improved to enhance protection. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site appears legitimate and functional, though the absence of WHOIS data limits full domain trust verification.

W

WorkZone.lv

workzone.lv

42

WorkZone.lv is a Latvian e-commerce retailer specializing in professional workwear, safety footwear, and protective equipment for professionals. The website offers a broad catalog of products targeting individual professionals and businesses requiring quality safety gear. The company emphasizes fast delivery and excellent customer service, positioning itself as a reliable national supplier in the work safety retail sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and FontAwesome, providing a responsive and user-friendly experience. The site is well-structured with clear navigation and SEO-optimized metadata. However, no CMS or hosting provider details are evident, and performance is moderate. Accessibility is basic but functional. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible HTTP security headers and advanced security policies. No incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. No suspicious or malicious content was detected. Overall, the website presents a professional and trustworthy front for a small retail business in Latvia. The absence of WHOIS data limits domain legitimacy verification, but the site content and contact details support its authenticity. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness.

S

SIA Plaza Baltic

race-parts.lv

44

Race-Parts is a Latvian-based small e-commerce business specializing in automotive racing parts, primarily clutch discs and related components. The company operates a professional website built on the PrestaShop platform, targeting automotive enthusiasts and professionals seeking performance parts. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, but lacks some advanced security headers and explicit privacy policy pages. Security posture is moderate with HTTPS enforced and cookie consent implemented, but could be improved with additional security headers and published security policies. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the site is legitimate and functional with room for security and compliance enhancements.

Jagita is a Latvian company specializing in the design, manufacturing, and supply of retail and store equipment, including shelving systems, mannequins, and custom furniture. The website targets retail businesses and trade professionals, positioning itself as a niche provider within the Latvian market. The business model focuses on B2B sales and custom manufacturing services. Technically, the website is built on TYPO3 CMS version 4.5, utilizing common JavaScript libraries such as jQuery and Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is adequate with HTTPS enforced, but the absence of security headers and use of an outdated CMS version present potential risks. Privacy compliance is weak, with no visible privacy or cookie policies, which may expose the company to GDPR compliance issues. Overall, the website is professional and functional but would benefit from security and privacy improvements.

A

Antiqon PRO

antiqon.pro

54

Antiqon PRO is an e-commerce platform specializing in the sale of antiques and art through a multi-platform listing service. Founded in 2023 and based in Latvia, it offers sellers a streamlined way to reach a large international audience by connecting to multiple auction and marketplace platforms. The service includes payment processing, delivery, and transaction guarantees, positioning itself as a comprehensive solution for galleries, dealers, and auctioneers. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and integrates analytics and tracking tools like Google Analytics, Hotjar, and TruConversion. The site is hosted behind Cloudflare DNS and uses HTTPS, ensuring secure communications. Security posture is solid but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is addressed with a cookie consent banner and privacy policy, though GDPR compliance could be enhanced with more detailed disclosures. Overall, the website is professional, user-friendly, and trustworthy, with no signs of adult or questionable content.