Security Directory

P

Pope's Worldwide Prayer Network

popesprayer.va

57

The Pope's Worldwide Prayer Network is an official pontifical non-profit organization dedicated to promoting prayer and spiritual engagement worldwide, aligned with the mission of the Catholic Church and the Holy Father. The website serves as a central hub for information, resources, and digital prayer tools such as the Click To Pray app and eRosary, targeting a global religious audience including youth and communities. The organization maintains a strong Vatican affiliation and global presence through multilingual support and official social media channels. Technically, the website is built on WordPress with modern plugins and frameworks, including LayerSlider, Ultimate Member, and WPBakery Page Builder. It employs Google Analytics and Tag Manager for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with a professional design and clear navigation. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, but lacks explicit security headers like Content-Security-Policy and does not publish incident response or vulnerability disclosure policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited to physical addresses without emails or phone numbers. Overall, the website is trustworthy and professionally maintained, but could improve privacy compliance and transparency around security policies to enhance user trust and regulatory adherence.

D

Dicastero per l'Evangelizzazione

iubilaeum2025.va

68

The website iubilaeum2025.va is the official digital platform for the Jubilee 2025 organized by the Dicastero per l'Evangelizzazione of Vatican City. It serves as a comprehensive informational and service portal aimed at pilgrims, tourists, and the general public interested in the Jubilee events. The site provides multilingual support, event calendars, pilgrimage registration, and volunteer opportunities, positioning itself as a key resource for the 2025 Jubilee. Technically, the site leverages modern web technologies including Google Analytics, jQuery, and slick carousel components, and is likely built on Adobe Experience Manager, reflecting a mature digital infrastructure. The website is mobile-optimized with good navigation and professional design quality. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data or vulnerable libraries, though it could improve by adding explicit security headers and publishing incident response information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, reflecting its official Vatican affiliation.

L

Letenky Levné Lety – Levný letenky – Rezervujte si nejlevnější akční letenky do celého světa. Rezervace hotelů, aut a cestovního pojištění. Nejlevnější letenky od více jak 800 společností.

leteny.cz

42

Letenky.cz is a Czech-based online travel affiliate platform specializing in offering cheap flight tickets, hotel bookings, car rentals, and travel insurance. The website targets budget-conscious travelers primarily in the Czech Republic, providing access to discounted and last-minute travel deals from over 800 companies. The business model relies on affiliate partnerships and travel deal aggregations, positioning itself as a niche player in the local travel market. Technically, the site is built on WordPress with Bootstrap and jQuery, integrating third-party affiliate widgets such as Pelikan flights. The site demonstrates good mobile optimization and a professional design, though accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks important security headers and explicit privacy or security policies. No contact information or terms of service pages were found, which may impact user trust and compliance. Overall, the domain registration data aligns well with the website content, indicating a legitimate small business startup in the travel sector.

N

Nejlevnější akční letenky

letenky-nejlevnejsi.cz

41

The website 'letenky-nejlevnejsi.cz' operates as an online travel affiliate platform specializing in offering cheap flight tickets, last-minute deals, and vacation packages primarily targeting Czech-speaking travelers. The business model relies on affiliate partnerships with multiple travel-related domains and services, providing users with access to discounted flights, weekend stays, and holiday offers. The site is relatively new, established in early 2023, and positions itself as a niche player in the Czech travel market. Technically, the site is built on WordPress with modern frontend technologies such as Bootstrap and jQuery, and it integrates third-party affiliate widgets and SEO plugins. However, the Google Analytics plugin is installed but not configured, indicating incomplete analytics setup. Security-wise, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. Contact and incident response information are absent, limiting transparency and security readiness. Overall, the site is functional and professionally designed but requires improvements in privacy, security, and compliance to enhance trust and legal standing.

K

Letenky Levné Lety – Levné Lety – Rezervujte si letenky z Prahy, Brna, Vídně

ketenky.cz

42

The website ketenky.cz operates as a travel affiliate platform specializing in offering cheap flight tickets, weekend stays, and holiday packages primarily targeting Czech and Slovak travelers. The site aggregates deals and promotes affiliate links to partner travel domains, positioning itself as a niche player in the affordable travel market. The business is relatively new, with domain registration dating back to late 2022, and focuses on providing value through curated travel offers rather than direct sales or bookings. Technically, the site is built on WordPress using the Hestia Pro theme, leveraging common web technologies such as Bootstrap, jQuery, and Font Awesome. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. Security-wise, the site uses HTTPS and implements a cookie consent banner indicating GDPR awareness, but lacks explicit privacy policies, security headers, and direct contact information for security or incident response, which are areas for improvement. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced compliance and security measures to strengthen user trust and regulatory adherence.

P

PeakDigital

promolayer.io

58

Promolayer.io is a Japanese SaaS company operated by PeakDigital, specializing in popup marketing tools designed to improve website conversion rates and reduce cart abandonment. The platform offers a no-code popup builder with over 100 templates, targeting business owners and marketers in Japan. The website is professionally designed, mobile-optimized, and features notable client logos and positive user reviews, indicating a strong market position. Technically, the site runs on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Brevo (Sendinblue), and Crisp Chat. Security posture is good with HTTPS and domain transfer protection, though DNSSEC and security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and functional but could improve compliance and security transparency.

G

Gransy s.r.o.

gransy.com

51

Gransy s.r.o. is a Czech Republic-based ICANN Accredited domain registrar with a long-standing presence since 2002. The company offers a comprehensive suite of domain-related services including domain registration, reseller and whitelabel solutions, PHP hosting, registry software, managed registries, and anycast DNS services. Their market position is strong within the Czech Republic and European domain markets, with additional focus on African ccTLDs. The website reflects a professional business model targeting registrars, resellers, and hosting customers with a clear emphasis on technical backend solutions and domain management.

B

Barcelona Letenky Levné Lety

letenky-barcelona.cz

42

The website 'Barcelona Letenky Levné Lety' operates as a small-scale travel affiliate platform targeting Czech-speaking customers interested in affordable flights and holiday packages to Barcelona and other popular destinations. The business model relies on affiliate partnerships with travel deal providers, offering curated flight deals, weekend stays, and vacation packages. The site is relatively new, established in 2022, and maintains a consistent brand presence with good content relevance and user experience. Technically, the site is built on WordPress 6.8.2 using Bootstrap for responsive design and includes common web technologies such as jQuery and Font Awesome. While the site is mobile-optimized and SEO-friendly with proper meta tags and structured data, it lacks some advanced accessibility features and has moderate performance. The Google Analytics plugin is installed but not configured, indicating incomplete analytics implementation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks important security headers and does not provide privacy or terms of service pages, which are critical for compliance and user trust. No direct contact information or incident response contacts are available, which limits transparency and responsiveness. The cookie consent banner is present and functional, supporting GDPR compliance to some extent. Overall, the website is functional and trustworthy for its niche but requires improvements in security best practices, privacy compliance, and contact transparency to enhance its credibility and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and terms policies, configuring analytics properly, and providing clear contact channels for users and security incidents.

P

Paříž Letenky Levné Lety – Paříž Levné Lety – Rezervujte si letenky z Prahy, Brna, Vídně

parizletenky.cz

42

The website parizletenky.cz is a Czech-language travel deals platform specializing in discounted flight tickets and vacation packages primarily to Paris and other popular destinations such as Barcelona, USA, and Bali. It operates as an affiliate marketing site, linking users to partner travel services and offers. The site is relatively new, established in late 2022, and targets travelers seeking affordable travel options from cities like Prague, Brno, and Vienna. Technically, the site is built on WordPress using the Hestia Pro theme, leveraging common web technologies such as jQuery, Bootstrap, and Font Awesome. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. It uses HTTPS and includes a cookie consent banner, but lacks advanced security headers and comprehensive privacy or terms of service documentation. From a security perspective, the site shows a basic security posture with no detected vulnerabilities or WAF protections. However, it lacks critical compliance documents such as privacy policy and terms of service, and does not provide contact information or incident response channels. The domain registration is transparent and consistent with the website's Czech market focus, though the domain age is relatively young. Overall, the site is functional and professionally presented but would benefit from enhanced privacy compliance, improved security headers, and clearer business contact information to increase trust and regulatory adherence.

T

Thajsko Letenky Levné Lety – Thajsko Levné Lety – Rezervujte si letenky z Prahy, Brna, Vídně

thajskoletenky.cz

42

Thajsko Letenky Levné Lety is a Czech Republic-based travel deals website specializing in affordable flights and holiday packages to Thailand and other popular destinations. The site primarily operates as an affiliate marketing platform, aggregating flight offers and vacation deals to attract travelers seeking budget-friendly options. The website is relatively new, established in 2022, and targets Czech-speaking travelers interested in exotic and popular travel locations. Technically, the site is built on WordPress using the Hestia Pro theme, incorporating modern web technologies such as Bootstrap, jQuery, and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS but lacks advanced security headers and does not provide a privacy policy or terms of service, which are important for GDPR compliance and user trust. No contact information or incident response channels are visible, which limits transparency. Overall, the site is functional and moderately secure but would benefit from enhanced compliance and security practices.

PROSEO is a newly established Lithuanian company specializing in website development and SEO optimization services. The website is currently under construction but provides clear contact information and showcases a portfolio of completed client projects, indicating active business operations. The company appears to be a small-sized service provider targeting businesses and individuals seeking digital presence enhancement. Technically, the website is built on WordPress with jQuery and uses the Open Sans font. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. The presence of a login form on the maintenance page with very low opacity suggests a potential misconfiguration that could expose sensitive access points. From a security perspective, the site uses HTTPS, which is a positive indicator. However, it lacks important security headers and does not provide any visible security or incident response policies. No privacy or cookie policies are present, indicating gaps in compliance with data protection regulations. The domain registration data is consistent and transparent, matching the business launch timeline, which supports legitimacy. Overall, the website demonstrates a basic but functional digital presence with room for significant improvements in security, privacy compliance, and content richness. Strategic enhancements in these areas will improve trustworthiness and user experience.

W

World-Flying-Disc-Federation

wfdf.sport

60

The World Flying Disc Federation (WFDF) operates as the global governing body for flying disc sports, including disciplines such as Ultimate, Disc Golf, and Freestyle. The organization is positioned as a non-profit entity focused on sport governance, event management, and global sport development. Their website reflects a professional and consistent brand presence, targeting athletes, federations, and enthusiasts worldwide. The business model centers on providing governance, rankings, and event services to the flying disc sports community. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several specialized plugins for events and team management. Hosting and domain registration are consistent with the organization's identity, and the site demonstrates moderate performance and good mobile optimization. Analytics tools such as Google Analytics and Tag Manager are used for user tracking. From a security perspective, the site enforces HTTPS and employs standard security practices, though it lacks DNSSEC and a published security.txt or vulnerability disclosure policy. Privacy compliance is supported by a comprehensive privacy policy aligned with GDPR, but the absence of a cookie consent mechanism is a minor compliance gap. Contact information is primarily via web forms, with no explicit phone numbers or physical addresses found. Overall, the website presents a trustworthy and professional digital presence with a solid security posture and good business credibility. Strategic improvements in DNS security, incident response transparency, and cookie consent would enhance compliance and security maturity.

The Disc Golf Foundation is a small non-profit organization dedicated to growing the sport of disc golf through charitable programs, partnerships, and community involvement. Established in 2004, it serves as a primary charitable entity supporting disc golf initiatives including facility improvements, diversity outreach, and historical preservation. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content targeted at disc golf enthusiasts, donors, and volunteers. Technically, the site employs modern front-end technologies such as Bootstrap, jQuery, and Swiper.js, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience, though SEO and accessibility features are basic. Hosting and domain registration are consistent with the organization's profile, with no privacy protection on WHOIS data, indicating transparency. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies were found, representing a compliance gap especially under GDPR. Contact information is limited to an email address, with no phone or physical address explicitly provided. Overall, the website is trustworthy and professional but would benefit from improved security practices and privacy compliance measures to enhance user trust and regulatory adherence.

G

Gustav Pedersen

gustavpedersen.no

48

Gustav Pedersen AS is a leading supplier of consumables and office-related products in Southern Norway, serving both private and public sectors. The company positions itself as a total provider with a broad product range including office supplies, medical equipment, cleaning products, catering, furniture, and more. Their market position is strong as the largest supplier in the region, supported by local logistics and dedicated delivery services. The website reflects a professional and consistent brand image with clear business information and active communication through news updates. Technically, the site is built on WordPress using the Enfold theme, enhanced with performance and analytics plugins such as WP Rocket and MonsterInsights. The site is mobile optimized and SEO friendly, with good content quality and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be added to further strengthen defenses. WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website demonstrates a mature digital presence aligned with the company's business goals and compliance requirements.

L

Løwener

loewener.dk

67

Løwener is a well-established Danish company specializing in industrial and entrepreneurial equipment, serving sectors such as manufacturing, construction, and workshops. With a history dating back to 1889 and a domain registered since 1997, the company offers a comprehensive range of products and services including sales, technical consultancy, after-sales service, and an online webshop. Their market position is strong within Denmark, targeting industrial and B2B customers with tailored solutions and professional support. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by Bootstrap for responsive design and jQuery for interactivity. The site integrates Google Tag Manager and Analytics for tracking, and employs Cloudflare Turnstile captcha to protect forms from abuse. The website demonstrates good SEO practices, structured data usage, and mobile optimization, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses captcha mechanisms, but lacks DNSSEC and some recommended security headers. There is no publicly available security policy or incident response information, which could be improved. Privacy compliance is strong, with detailed cookie and privacy policies and a consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and secure for its business context, with minor areas for improvement in security hardening and accessibility. The risk profile is low, and the company demonstrates credible business and digital maturity.

A

Aquatel

aquatel.be

43

Aquatel is a Belgian family-owned company specializing in the reading and allocation of heating and water costs, with over 25 years of experience. The company offers services including replacement and installation of heating cost allocators, water meters, and energy meters, alongside a trading department for related products. Their target audience includes property managers, building owners, housing companies, and industry professionals. The website is built on WordPress with modern plugins and multilingual support, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

ANTAP Grupa

antap.pl

60

ANTAP Grupa is a Poland-based company specializing in metering and legalization of heat meters, water meters, and related energy optimization services. Established since 1998, the company offers a comprehensive range of services including remote reading systems, legalizations, servicing, and energy cost optimization. The website reflects a mature business with a clear market position in the energy sector, targeting both residential and industrial customers. Technically, the website is built on WordPress with modern plugins such as Elementor and Ultimate Member, integrating Google reCAPTCHA for security. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is supported by a privacy policy and cookie consent mechanism, but lacks explicit security or incident response policies. Overall, the website and domain data indicate a trustworthy and established business with moderate technical sophistication and good security hygiene.

T

Technolux BV

technolux.nl

48

Technolux BV is a Dutch company specializing in heat cost allocation services with over 55 years of industry experience. The company leverages reliable Swiss Sontex metering equipment and offers personalized service primarily targeting property managers and VvE’s. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. Technically, the site is modern and mobile-optimized, hosted under a reputable registrar with DNSSEC and HTTPS enabled, indicating a solid technical foundation. Security posture is good but could be improved by adding security headers and formal privacy and cookie policies. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site reflects a trustworthy and established business with room for enhanced privacy compliance and security transparency.

S

SERIO s.r.o.

serio.sk

53

SERIO s.r.o. is a Slovakian company specializing in professional services within the thermal energy sector, serving operators of thermal equipment, property managers, and homeowners' associations. With over 15 years of experience, the company offers authorized servicing, product supply, and technical consulting aimed at reducing energy production and consumption costs. The website reflects a well-structured and professional digital presence built on WordPress, incorporating standard technologies such as jQuery and Contact Form 7 for user interaction. While the site is secure with HTTPS and includes cookie consent mechanisms, it lacks explicit privacy policies and security headers, which are important for compliance and security posture. Contact information is clearly presented, enhancing business credibility.

S

Sano Baltic

sano-riga.lv

50

Sano Baltic is a specialized company focused on smart energy accounting, consumption metering, and IoT solutions primarily serving the Baltic region. Their product portfolio includes heat, water, flow, and gas meters, alongside sensors and communication modules. The company also offers digitalization tools and IoT platforms tailored for energy management and smart city applications. The website reflects a medium-sized enterprise with a professional online presence and partnerships with reputable industry players. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published incident response policies. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on content and partner associations.

Proxiserve is a leading French service provider specializing in plumbing, heating, maintenance, and water metering services for residential and tertiary sectors. With a large workforce of 2500 technicians and a presence across France, the company targets both individual consumers and professional clients, including social housing tenants. The website reflects a mature digital presence built on Magento, integrating multiple marketing and analytics tools to support customer engagement and conversion. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data limits domain trust assessment, but the professional branding and extensive customer reviews support legitimacy. Overall, Proxiserve demonstrates a strong market position with room for improvement in transparency and security disclosures.

Prox-Hydro is a French energy and utility service provider established since 1953, specializing in water, heating, air, and electricity management solutions. The company positions itself as an innovative and environmentally conscious organization serving both residential and professional customers. Their website reflects a mature digital presence built on WordPress with modern SEO and user experience practices. The technical infrastructure includes standard security measures such as HTTPS and Google reCAPTCHA, though some security headers and DNSSEC are missing. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no explicit GDPR compliance statements or data protection officer contacts are found. Overall, the domain registration is consistent with the business history, supporting legitimacy. The website is professional, safe, and trustworthy with no signs of blocking or malicious content.

N

NRG System

nrgsystem.gr

42

NRG System is a Greek company specializing in the trade, study, construction, and technical support of materials and systems for industrial automation, with a focus on custom automation applications. The company serves industrial clients and technical firms primarily in Greece, offering a broad range of products including energy measurement devices, industrial hardware, automation and control systems, wireless communication solutions, and UPS and connection boxes. The website is built on Joomla CMS with common web technologies and provides detailed contact information across three Greek locations. While the site is professionally designed and navigable, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled and CSRF protections but missing key security headers and exposing a Google Maps API key in the source.

G

GWF AG

unimon.ch

56

Unimon GmbH, a subsidiary of GWF AG, specializes in advanced water quality monitoring and management solutions, targeting water utilities, industrial clients, and environmental authorities. The company offers modular online monitoring systems, consulting, implementation, and training services, leveraging IoT and real-time data analytics to enhance water safety and sustainability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security measures include HTTPS, security headers, CAPTCHA protections, and cookie consent management, although a dedicated security policy and incident response information are absent. Overall, the site demonstrates a strong security posture and compliance with GDPR, supporting trustworthiness and business credibility.

G

GWF AG

gwf-hydropower.com

54

GWF AG operates a professional website focused on precision flow measurement solutions for hydropower plants and large-scale water applications. The company positions itself as an experienced and innovative provider with a global footprint and a history of product development since 2005. The website is well-structured, content-rich, and targets hydropower industry professionals and infrastructure managers. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, hosted on Azure DNS infrastructure. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and explicit policies are missing. The WHOIS data shows inconsistencies with a future domain creation date, which raises concerns about domain legitimacy despite the professional appearance and external trust signals. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration details and publishing formal security policies.

G

GWF AG

gwf-balance.com

54

GWF AG operates the GWF Balance platform, a technology-driven solution focused on reducing water network leakage and improving water utility efficiency. The company leverages advanced sensors, proprietary AI algorithms, and a data-rich platform to deliver measurable leakage reductions and operational savings. Positioned as a technology leader with a 125-year heritage, GWF AG targets water utilities and network operators globally, emphasizing sustainability and cost-effective interventions. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Analytics and Tag Manager for tracking. The site employs robust cookie consent management via Borlabs Cookie and uses FriendlyCaptcha for form security. Hosting is supported by Azure DNS, and the site is served over HTTPS with good SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CAPTCHA on forms, and cookie consent compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be added to enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant, supporting strong privacy posture. Overall, the website presents a professional, trustworthy, and technically sound digital presence for GWF AG. The domain is newly registered but consistent with the company's established business. Recommendations include enhancing security headers, publishing a dedicated security policy, and establishing incident response contact channels to further strengthen trust and compliance.

GABRIELIS is a Czech company specializing in branded promotional products, including plastic and metal pens, office accessories, and exclusive sets. The website serves as a product catalog and marketing platform targeting businesses seeking promotional merchandise. The company has been operating since 2015 and maintains a focused niche within the Czech market. Technically, the website is built on WordPress using the Enfold theme and Avia framework, leveraging modern JavaScript libraries such as jQuery, Backbone.js, and Underscore.js. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of a dedicated privacy policy and terms of service, although a cookie consent mechanism is partially implemented. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

D

doppler

dopplershop.it

63

dopplershop.it is a professionally designed e-commerce website specializing in the sale of umbrellas and parasols under the doppler brand. The site targets consumers in Italy and offers direct manufacturer sales with benefits such as a 30-day refund guarantee, free shipping over €29, and a 3-year warranty. The business model is retail e-commerce with a medium-sized operation launched in 2023. The website is built on the Magento platform, integrating modern marketing and analytics tools such as Klaviyo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

D

doppler

dopplershop.fr

68

dopplershop.fr is a French e-commerce website specializing in the sale of doppler brand umbrellas and parasols. The site operates on the Magento platform and offers direct manufacturer sales with customer-friendly policies such as a 30-day return and 3-year warranty. The website targets French-speaking consumers seeking quality outdoor protection products. Technically, the site uses modern web technologies including jQuery, RequireJS, and integrates marketing and analytics tools like Google Tag Manager and Klaviyo. Security is well implemented with HTTPS, strong security headers, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site presents a professional and trustworthy e-commerce experience with good technical maturity and compliance.

S

SIA “Purpurs Design”

purpurs.com

61

Purpurs.com is an e-commerce website operated by SIA “Purpurs Design,” specializing in design stationery products targeted primarily at the Latvian market. The website presents a professional and consistent brand image with a focus on retailing niche design paper goods. The business model is typical for small-scale online retail, leveraging WooCommerce on a WordPress platform. The site is well-structured with good navigation and mobile optimization, supporting a positive user experience.

J

Jāņa Kārkliņa advokātu birojs

karklins.lv

55

Jāņa Kārkliņa advokātu birojs is a boutique law firm based in Latvia, providing a comprehensive range of legal services including litigation, international arbitration, competition law, public procurement, intellectual property, tax law, labor law, and more. The firm emphasizes high-quality, exclusive legal services and positions itself as a trusted advisor to clients. The website reflects a professional and consistent brand image targeting clients seeking specialized legal assistance in Latvia. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Slider Revolution, with jQuery and Bootstrap frameworks. The site is mobile-optimized and performs moderately well, with HTTPS enabled and Google reCAPTCHA protecting forms. However, there is room for improvement in security headers and privacy compliance documentation. From a security perspective, the site demonstrates good practices like HTTPS and CAPTCHA but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and business information appear credible and professional. Overall, the website presents a trustworthy and professional legal service provider with moderate technical maturity and security posture. Enhancements in privacy compliance, security headers, and transparency would further strengthen its risk profile and client trust.

G

Gidon Kremer

gidonkremer.net

55

Gidon Kremer's website serves as an official digital presence for the renowned classical violinist, providing biographical information, news updates, and event listings. The site targets classical music enthusiasts and fans, offering insights into Kremer's career and upcoming performances. Technically, the site is built on WordPress with WPBakery Page Builder and uses common web technologies such as jQuery. While the site is accessible and visually consistent, it lacks key privacy and security policies, and the Google Analytics plugin is installed but not configured, indicating incomplete analytics setup. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. The WHOIS data is missing or unavailable, which is inconsistent with the active website and reduces trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

A

AMRO BALTIC, SIA

amro.lv

64

AMRO BALTIC, SIA operates a professional website focused on providing business equipment and solutions such as cash registers, barcode scanners, and currency detectors primarily targeting retail businesses in Latvia. The company positions itself as a regional provider with a medium-sized business model focused on B2B sales. The website is built on WordPress with WooCommerce, leveraging modern plugins and SEO tools, indicating a moderate level of digital maturity. The presence of cookie consent mechanisms and integration with major analytics and advertising platforms shows awareness of privacy and marketing needs, though explicit privacy and terms of service pages are not detected. Security posture is strong with HTTPS and cookie consent, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy but lacks some compliance and contact transparency elements. The absence of WHOIS data limits full domain trust verification.

W

WolfStreet Financial

wolfstreetfinancial.com

60

WolfStreet Financial is a small financial services company specializing in online stock, options, and futures trading. They provide multiple trading platforms including web, mobile, pro, and tablet versions, targeting retail and professional traders. The company emphasizes free limit orders and higher day trading leverage to attract users. The website is built on WordPress with Elementor and uses Cloudflare DNS services. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is supported by consistent domain registration and professional content. Overall, the website is functional and trustworthy but could improve in security and privacy transparency.

IT Adviser is an established IT Research & Development company with over 15 years of experience delivering innovative and customized technology solutions across multiple industries. Their market position is supported by a medium-sized team of 40+ employees and a portfolio of 100+ projects, targeting businesses seeking digital transformation and product engineering services. The company offers key services including product strategy, UI/UX design, and software engineering, leveraging modern technologies such as Angular, Flutter, Go, Python, and cloud infrastructure. Technically, the website is built on WordPress with integrations for analytics and tracking, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is professional and trustworthy, but could improve transparency and security practices to enhance compliance and user trust.

B

BTA

bta.lv

69

BTA is a prominent insurance company in Latvia offering a comprehensive range of insurance products including auto, travel, property, health, and accident insurance for both private individuals and business clients. The website reflects a mature digital presence with multilingual support and clear navigation tailored to its target audience. The company is part of the Vienna Insurance Group, indicating a strong market position and backing. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates various third-party marketing and analytics tools like Google Tag Manager and Trengo chat widget. The site is mobile optimized and includes essential privacy and cookie policies, demonstrating compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses CSRF tokens and script nonces, but lacks explicit security headers such as HSTS or CSP in HTTP response headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data was unavailable due to query limits, limiting domain registration trust analysis. Overall, the website presents a professional and trustworthy front for BTA's insurance services, with good content quality and security posture. Strategic improvements in security headers and ongoing monitoring of third-party scripts are recommended to enhance security further.

S

SIA "Dimdiņi"

dimdini.lv

42

SIA "Dimdiņi" is a family-owned Latvian company specializing in vegetable cultivation and processing, particularly fermented and traditional Latvian cabbage products. Established in 1992, it is one of the largest vegetable growing and processing companies in the Baltic region. The company emphasizes traditional recipes combined with modern production techniques, targeting health-conscious consumers interested in natural and fermented foods. The website provides detailed information about the production process, products, recipes, and company contact details, supporting its market position as a reputable regional food manufacturer. Technically, the website uses common web technologies including jQuery, Bootstrap, Google Maps API, and Google Analytics, with moderate performance and good mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The WHOIS data could not be retrieved, limiting domain registration verification. Overall, the website presents a professional and trustworthy business presence but would benefit from enhanced security and compliance measures.

P

Professional Disc Golf Association

pdga.com

63

The Professional Disc Golf Association (PDGA) operates as the global governing body and membership association for disc golf enthusiasts. It provides comprehensive services including membership management, tournament sanctioning, official rules, player rankings, and course directories. The organization targets disc golf players, tournament directors, and the wider disc golf community worldwide, positioning itself as the authoritative source for the sport. The website reflects a mature digital presence with extensive content, clear navigation, and active social media engagement. Technically, the PDGA website is built on the Drupal CMS platform, leveraging modern JavaScript libraries and Google services for analytics and advertising. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and use of sanitization libraries, although explicit security headers and incident response information are not prominently published. The absence of WHOIS data limits domain trust analysis; however, the website's professional presentation, consistent branding, and external references strongly support its legitimacy. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Overall, the PDGA website demonstrates a strong business and technical foundation with room for enhanced security transparency.

D

Discgolf Metrix

discgolfmetrix.com

49

Discgolf Metrix is an established online platform founded in 2015 that specializes in providing live scorecard and statistics services for the disc golf community. It caters primarily to disc golf players, clubs, and competition organizers by offering tools for competition management, personal statistics tracking, course discovery, club involvement, and bagtag challenges. The platform has a sizable user base and a focused niche market position within the sports technology sector. Technically, the website employs a modern tech stack including jQuery, Google reCAPTCHA, SVG graphics, and the Foundation CSS framework, delivering a responsive and user-friendly experience. Security-wise, the site benefits from HTTPS and bot protection but lacks DNSSEC and explicit security headers, indicating room for improvement in hardening its security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the website is professional and trustworthy but could enhance its security and privacy features to better align with best practices.

C

CEIM, Confederación Empresarial de Madrid

ceim.es

49

CEIM, Confederación Empresarial de Madrid, is a well-established business association representing over 237,000 companies and more than 150 business associations in the Madrid region since 1978. The organization focuses on defending and promoting the interests of Madrid's business community through various services including labor affairs, innovation, investor services, and communication. The website reflects a mature digital presence built on WordPress with Elementor, featuring modern SEO and accessibility practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacks a dedicated security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a broad business audience effectively.

O

OmniCert Umweltgutachter GmbH

omnicert.de

46

OmniCert Umweltgutachter GmbH is a specialized environmental certification and consulting company based in Germany, focusing on sustainability, renewable energy, and energy management certifications such as ISO 50001, ISO 14001, and EMAS. The company serves a diverse clientele including industry, medium-sized enterprises, authorities, and the charitable sector, with a strong emphasis on biogas and biomass energy sectors. Their market position is strengthened by accreditations and memberships in recognized environmental and sustainability programs. Technically, the website employs standard web technologies including jQuery and Modernizr, hosted on a custom or proprietary CMS platform. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and shows no immediate vulnerabilities or exposed sensitive data. However, it lacks explicit security headers, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No tracking or analytics scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a professional and trustworthy image with strong business credibility but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

D

doppler

dopplerschirme.com

74

dopplerschirme.com is a professional e-commerce website specializing in the sale of doppler brand sunshades, umbrellas, garden furniture, and related accessories. The site targets general consumers primarily in Austria and German-speaking markets, with multilingual support for English, French, Italian, and Russian. The business is well-established with a domain age since 2001 and a company history dating back to 1946, positioning itself as a trusted manufacturer and retailer with clear trust signals such as warranty and return policies. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates marketing and analytics tools like Google Tag Manager and Klaviyo. Security posture is good with HTTPS and domain transfer protections, though explicit privacy and cookie policies are missing in the analyzed content, indicating room for compliance improvements. Overall, the website is professional, secure, and credible, but should enhance privacy disclosures and security transparency to improve compliance and user trust.

The website www.royaldesign.eu/products is an e-commerce platform specializing in promotional gifts and related products. It offers a broad catalog including gift sets, premium gadgets, office supplies, phone accessories, and more, targeting businesses and individuals seeking promotional items. The site demonstrates a moderate level of digital maturity with use of modern JavaScript libraries, Google Tag Manager, and Ahrefs Analytics for tracking. However, it lacks visible privacy and terms of service policies, and no explicit contact information is provided, which may impact user trust and compliance. Security posture is moderate with presence of CSRF tokens but absence of key security headers and unclear SSL configuration. Overall, the site appears legitimate and professionally designed but would benefit from enhanced transparency and security measures.

C

Colorissimo

colorissimo.com

52

Colorissimo is a medium-sized Polish company specializing in premium business gifts, offering a wide range of products including novelties, drinkware, audio devices, tools, luggage, and umbrellas. The company targets businesses seeking quality corporate gifts and supports multiple languages through downloadable catalogs and an online product search platform. The website demonstrates a professional and consistent brand presence with clear contact information and social media integration. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided via home.pl, a Polish hosting provider, with SSL enabled ensuring secure communications. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Overall, the website is trustworthy, well-structured, and suitable for its business audience.

R

RG Juvelyrika

rgjuvelyrika.lt

43

RG Juvelyrika is a small local jeweler business based in Vilnius, Lithuania, specializing in the manufacturing and repair of gold and silver jewelry, including custom wedding and engagement rings. The website presents a professional image with good customer trust signals such as a 5-star Google rating and multiple positive testimonials. The site supports multiple languages and uses WordPress CMS with common plugins for forms and multilingual support. Technically, the site is moderately performant, mobile-optimized, and uses HTTPS with some security best practices, although some security headers are missing. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information includes a phone number and a contact form collecting personal data. Overall, the site is trustworthy and well-positioned locally but could improve privacy and security transparency.

F

Fototakas.lt

fototakas.lt

59

Fototakas.lt is a Lithuanian-based professional wedding photography and videography service provider established in 2014. The company offers a range of services including wedding photography, event filming, and additional services for photographers such as monitor calibration and preset sales. The website reflects a mature business with a clear market position targeting couples and event clients across Lithuania. The digital infrastructure is built on WordPress with modern web technologies, ensuring good performance and mobile optimization. The site implements GDPR-compliant cookie consent mechanisms and uses analytics tools like Google Analytics and Facebook Pixel for marketing insights. Security posture is solid with HTTPS enforced and secure form handling, though some HTTP security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer engagement.

D

Dantek.cz

dantek.cz

56

Dantek.cz is a Czech Republic-based small retail e-commerce business specializing in high-quality photo printing products including canvas prints, photo boards, posters, wallpapers, and related framing accessories. Founded in 2015, the company positions itself as a niche player focusing on quality craftsmanship and customer satisfaction, supported by testimonials and a regularly updated blog. The website is professionally designed with good navigation and mobile optimization, leveraging popular web technologies such as OpenCart, jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is provided by Wedos, a reputable Czech hosting provider. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks advanced security headers and a formal security policy or incident response contact. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present. The site uses common tracking and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting, indicating moderate user tracking. Overall, Dantek.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. The domain registration data is consistent and supports the legitimacy of the business. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance.

P

Plotbase

plotbase.cz

59

Plotbase.cz is a Czech-based company specializing in custom advertising systems, exhibition stands, and printing services. The website demonstrates a solid market position with a focus on B2B and B2C customers seeking tailored promotional and display solutions. The company leverages modern web technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies. The absence of WHOIS data is likely due to registry policies rather than suspicious activity, and the website shows multiple trust indicators including customer reviews and certification badges. Overall, the site is professional, secure, and trustworthy.

R

Rajner Letenky

rajner.cz

42

Rajner Letenky is a Czech Republic based online travel platform specializing in affordable flight tickets, weekend stays, and holiday packages. The website aggregates deals from over 800 companies and targets budget-conscious travelers primarily in the Czech market. The business operates mainly as an affiliate marketing platform, leveraging partnerships with multiple travel-related domains and Pelikan affiliate flights. Technically, the site is built on WordPress with Bootstrap and jQuery, providing a modern and responsive user experience. However, it lacks some advanced security headers and formal privacy or cookie policies, which are critical for compliance and trust. The site enforces HTTPS and uses affiliate widgets effectively but could improve its security posture and privacy compliance to enhance user trust and regulatory adherence.