Security Directory

D

DREAM PROperty s.r.o.

kolejjinak.cz

44

Kolej Jinak is a small hospitality business providing student and group accommodation in Ústí nad Labem, Czech Republic. The company operates seven newly renovated apartments located near the UJEP university campus and city center, targeting students and individuals seeking convenient housing. The business is owned by DREAM PROperty s.r.o., which is disclosed in the website content and EU funding project information. The website is professionally designed with clear navigation, mobile optimization, and relevant content focused on accommodation services. Technically, the website uses a modern but somewhat dated tech stack including jQuery 1.11.1, Slick Carousel, and Magnific Popup, integrated with Google Tag Manager and Google Analytics for marketing and analytics. The site is served over HTTPS with cookie consent mechanisms implemented, indicating good privacy compliance. However, some security best practices such as security headers and incident response information are missing. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and business information appear trustworthy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Kolej Jinak presents a credible and professional online presence for its accommodation services, with room for improvement in security policies and domain registration transparency. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve trustworthiness.

S

Úvod - Sklípek na masaryčce

sklipeknamasarycce.cz

45

The website www.sklipeknamasarycce.cz represents a small hospitality business offering a unique wine cellar rental experience in the city center of Ústí nad Labem, Czech Republic. The business targets individuals and companies seeking venue space for private celebrations, corporate events, and wine tastings. The site provides detailed information about rental options, pricing, catering, and additional services such as accommodation. The presence of an age verification popup indicates compliance with legal requirements for alcohol-related content. Technically, the website employs a modern JavaScript stack including jQuery, Slick Carousel, Magnific Popup, and Google Tag Manager for analytics and marketing. The site is mobile responsive with a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enforced and some privacy controls, but missing HTTP security headers and formal policies reduce overall security maturity. From a security and compliance perspective, the site shows good practices such as age verification and cookie consent but lacks documented privacy policies and incident response contacts. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details appear professional and consistent with a legitimate small business. Overall, the site is functional and professionally presented with moderate technical and security maturity. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

D

Dream PRO, s.r.o.

dreamvanlife.cz

44

Dream PRO, s.r.o. operates the website www.dreamvanlife.cz, offering camper van rental services focused on Volkswagen Grand California 600 vehicles. The business targets travelers seeking flexible and comfortable travel experiences in the Czech Republic, providing insurance and camping equipment as part of the rental. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses common JavaScript libraries and Google services for analytics and marketing, with cookie consent mechanisms implemented to comply with GDPR. Security posture is adequate with HTTPS enforced, but could be improved by updating libraries and adding security headers. The absence of WHOIS data reduces domain transparency and trust slightly, but the business information and social media presence support legitimacy. Overall, the site is a reliable platform for camper van rentals with room for technical and security enhancements.

T

TOROLA racing s.r.o.

ktm-fm.cz

57

TOROLA racing s.r.o. operates an authorized dealership website for KTM and GASGAS motorcycles and electric bikes, targeting customers primarily in Northern Moravia, Czech Republic. The site offers a comprehensive e-commerce platform featuring new models, accessories, and rental services, supported by warranty and post-warranty servicing. The business positions itself as a premium retailer with a strong focus on customer service and product authenticity. Technically, the website employs a custom MVC UI framework with modern JavaScript and CSS, integrates Google Analytics and Tag Manager for tracking, and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data due to privacy protection limits domain transparency but does not detract from the overall legitimacy of the business. The website is safe for general audiences, free from adult or questionable content, and demonstrates good privacy compliance aligned with GDPR requirements.

V

Vitadio

vitadio.cz

63

Vitadio is a pioneering digital therapeutics company specializing in prescription digital therapy for type 2 diabetes, uniquely positioned as the first such therapy covered by all statutory health insurers in Germany. The website reflects a focused healthcare business model targeting patients requiring digital therapeutic interventions. The company appears to be relatively young, founded around 2018, and operates within the healthcare sector with a clear market niche. Technically, the website employs modern web technologies including Laravel as the backend framework, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate to advanced digital maturity. The site is mobile optimized and uses standard SEO practices such as Open Graph and Twitter meta tags to enhance social media sharing and search engine visibility. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements CSRF tokens for form security. However, there is room for improvement in security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent mechanisms, but the absence of a visible privacy policy or terms of service page is a gap. Overall, the website is professional and trustworthy with moderate risk. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing security headers to improve the security posture and compliance. These steps will strengthen user trust and regulatory adherence.

A

AUMANTI design s.r.o.

aumanti.cz

43

AUMANTI design s.r.o. operates a professional e-commerce website specializing in the custom manufacturing and sale of wedding and engagement rings, as well as gemstone jewelry. Established in 2015, the company targets customers seeking bespoke and ready-made jewelry in the Czech Republic market. The website presents a clear business model combining direct retail and custom craftsmanship, supported by a consistent brand presence and social media integration. Technically, the site is built on WordPress with WooCommerce, leveraging common plugins and libraries to provide a functional and user-friendly shopping experience. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is solid with HTTPS enforced and spam protection via Google reCAPTCHA, though there is room for improvement in security headers and formal security policies. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned policies. Overall, the website demonstrates a mature digital presence with good business credibility and moderate technical sophistication.

S

svetzbrani.cz

svetzbrani.cz

58

Svetzbrani.cz is a Czech Republic based e-commerce retailer specializing in firearms, airsoft equipment, self-defense products, and pyrotechnics. Established since 2013, the company offers a wide range of products from well-known brands such as Umarex, Walther, and Beretta, targeting consumers interested in these categories. The website is professionally designed with clear navigation and multiple language and currency options, supporting a medium-sized business model focused on retail sales. Technically, the site is built on the Shoptet platform, utilizing common web technologies including jQuery, Google Analytics, Facebook SDK, and Hotjar for analytics and marketing purposes. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the website content and business presence appear legitimate. Cookie consent mechanisms are implemented, but privacy and terms of service pages are missing, indicating room for compliance improvements.

B

Brainmedia, s.r.o.

naum.studio

65

Naum Studio is a Slovakia-based multi-disciplinary design studio specializing in branding, UI/UX, and product development for startups, fintech, health, and web3 sectors. The company positions itself as a creative partner solving complex challenges with simple solutions, targeting innovative and technology-driven clients. Their business model revolves around providing comprehensive design and development services, supported by a professional portfolio and client testimonials that enhance their market credibility. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, GSAP, and various analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar. The site is mobile-optimized with good SEO practices and uses HTTPS with reCAPTCHA for security. However, some security headers and DNSSEC are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates a moderate security posture with HTTPS and anti-bot measures in place but lacks explicit security policies and incident response contacts. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is professional, trustworthy, and well-structured, with minor technical and security enhancements recommended to elevate its security posture and compliance maturity.

D

Drivalia Lease Czech Republic s.r.o.

drivalia.cz

64

Drivalia Lease Czech Republic s.r.o. operates a professional website offering operativní leasing (operational leasing) and fleet management services primarily targeting businesses and drivers in the Czech Republic. The company positions itself as a world leader in car-as-a-service with over 50 years of experience across 30 countries, providing tailored leasing products, fleet solutions, and digital assistance services. The website is well-structured, multilingual, and integrates modern web technologies including Google Tag Manager and analytics, ensuring a professional digital presence. Social media channels and sustainability initiatives further enhance brand trust. Technically, the site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive privacy and cookie policies indicating GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a security.txt file added. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but the overall business legitimacy is supported by the website content and external references. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure info, and improving incident response transparency.

S

Sixt Leasing

sixtleasing.cz

47

Sixtleasing.cz is a professional website offering premium operational leasing and fleet management services primarily targeting corporate clients in the Czech Republic. The company is part of the larger Sixt group, a well-known international vehicle rental and leasing brand. The website provides comprehensive information about leasing products, services, and customer support, with clear navigation and a modern design. Technically, the site uses common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Analytics and LinkedIn tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies could enhance trust. The absence of WHOIS data reduces domain transparency but does not significantly impact the overall credibility given the strong brand presence and professional content. Overall, the site is well-structured, compliant, and trustworthy for its business purpose.

B

BNP Paribas Cardif Česká republika

cardif.cz

63

BNP Paribas Cardif Česká republika is a well-established insurance company founded in 2001, offering a broad range of personal and property insurance products including loan repayment insurance, everyday risk insurance, extended warranty insurance, household and liability insurance, travel insurance, and accident insurance. The company positions itself as a trusted insurer with a strong market presence in the Czech Republic, supported by multiple awards and positive client testimonials. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices, including mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Raiffeisen - Leasing, s.r.o. operates a professional website focused on providing comprehensive financial services including leasing and financing of vehicles, machinery, technology, and commercial real estate primarily targeting businesses in the Czech Republic. The company positions itself as a reliable partner offering tailored financial solutions with a strong emphasis on customer service and operational leasing. The website content is well-structured, professionally designed, and includes clear contact information and compliance mechanisms such as cookie consent and privacy policy, indicating a mature digital presence. Technically, the website leverages modern web technologies including Kentico CMS, Bootstrap components, RequireJS, and Google Tag Manager for analytics and marketing. The site is mobile optimized, accessible, and SEO friendly, with moderate performance. Security posture is good with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and published security policies suggests room for improvement. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Despite this, the website's professional presentation and business alignment with the Raiffeisen Group's known financial entities support its legitimacy. No signs of malicious content or adult material were found, and privacy compliance appears robust. Overall, the website demonstrates a solid business and technical foundation with minor security and transparency gaps. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

Č

ČSOB Leasing, a.s.

csobleasing.cz

66

ČSOB Leasing, a.s. is a leading financial services company in the Czech Republic specializing in vehicle and equipment leasing, operational leasing, and fleet management. The company benefits from a strong market position supported by the ČSOB Group, offering a wide range of financing products to both business clients and individuals. Their website reflects a professional and well-structured digital presence with clear service offerings and client support features. Technically, the website employs modern web technologies including Vue.js, Bootstrap, and jQuery, integrated with advanced marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Adobe DTM. The site is mobile-optimized and includes cookie consent mechanisms, indicating a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure external scripts, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces the trust score slightly, but the overall security posture is solid with room for improvement in transparency and header implementation. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response information, and verifying domain registration details to improve trust and compliance.

A

AB MOTORS CZ s.r.o.

mgmotor-czech.cz

54

AB MOTORS CZ s.r.o. operates the official MG Motor Czech Republic website, serving as the authorized importer and dealer network for MG automobiles in the Czech market. The website offers comprehensive information on new and used MG vehicles, including petrol, hybrid, plug-in hybrid, and electric models, along with pricing, configurators, test drives, financing, and authorized service locations. The target audience is Czech consumers interested in MG vehicles, with a medium-sized business presence and consistent branding. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility basics. The site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. No public security policy or incident response contacts are disclosed. Privacy compliance is strong with clear privacy and cookie policies and consent management. Business credibility is high with detailed contact information, authorized dealer listings, and professional content. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection. Recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party libraries for vulnerabilities.

MPI TECH CZ s.r.o. operates a professional e-commerce website specializing in electrical materials and installation services primarily targeting electrical contractors and retail customers in the Czech Republic. The company offers a broad product catalog including switches, sockets, frames, communication technology, circuit breakers, distribution boards, and smart home solutions. The website is built on the Shoptet platform and integrates standard web technologies such as jQuery and Google Analytics, with a focus on user privacy and GDPR compliance through cookie consent mechanisms and a privacy policy page. Despite the absence of WHOIS registration data, the website presents a professional and trustworthy front with secure HTTPS connections and appropriate security headers. However, the lack of direct contact emails or phone numbers in the visible content and missing WHOIS data slightly reduce the overall trustworthiness. The site is free from adult or questionable content and provides a good user experience with clear navigation and relevant content.

Horimex Cars, s.r.o. is a medium-sized automotive dealership and authorized service provider based in the Czech Republic, specializing in Hyundai and MG vehicle sales and servicing, with additional expertise in BMW servicing. The company holds a strong market position as the sole authorized Hyundai dealer and service center in Olomouc, offering a comprehensive range of services including vehicle sales, servicing, spare parts, and tire services. Their target audience primarily consists of car buyers and vehicle owners in the Olomouc region and surrounding areas. The website reflects a professional and consistent brand image with good content quality and customer trust signals such as positive reviews and partnerships with financial and insurance institutions. Technically, the website is built on WordPress 6.6.2 using Bootstrap and jQuery, integrating Google Analytics and Tag Manager for tracking, and employing a cookie consent mechanism compliant with GDPR. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site presents a trustworthy and functional digital presence for Horimex Cars, supporting their business operations effectively. Strategic improvements in security headers, transparency of domain registration, and formal security policies would enhance their security posture and compliance further.

S

SUPERKOMÍNY s.r.o.

superkominy.cz

56

SUPERKOMÍNY s.r.o. operates the website superkominy.cz, specializing in the sale and installation of chimney systems, fireplaces, stoves, and related components primarily for customers in the Czech Republic. The company positions itself as a specialist retailer offering quality products with delivery and turnkey installation services. The website is professionally designed, featuring clear navigation, product categories, and a cookie consent mechanism compliant with GDPR. Technically, the site uses the Shoptet e-commerce platform with modern JavaScript libraries and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is good with HTTPS enforced and secure login forms, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. No WAF or blocking mechanisms were detected, allowing full content accessibility.

B

Bärige

barige.sk

56

Bärige is a Slovakian e-commerce retailer specializing in high-quality mattresses, pillows, beds, and sleep accessories. The company operates a website offering a wide range of products aimed at improving sleep quality, targeting consumers in Slovakia. The business maintains a physical showroom in Bratislava and provides customer support via phone. The website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Cloudflare, Google Tag Manager, Facebook Pixel, and Hotjar for performance, marketing, and analytics. While the site is well-structured and professionally designed, it lacks explicit privacy and security policies, which are critical for compliance and trust. The domain registration is consistent with the business claims, and no blocking or WAF challenges were detected, indicating good accessibility.

B

BitBit s.r.o.

bitbit.sk

64

BitBit s.r.o. is a Slovakian IT service provider specializing in IT outsourcing, custom software development, and online security services. Established since 2012, the company targets small and medium-sized businesses and households, offering professional IT management to reduce costs and increase operational efficiency. Their website reflects a mature digital presence with clear service offerings and professional branding. Technically, the site is built on modern JavaScript frameworks (Vue.js and Nuxt.js), hosted on Hetzner infrastructure, and optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

Equilia Group is a medium-sized finance technology company founded in 2020, specializing in fair and data-driven allocation of financial resources through advanced technology. The company operates primarily in the European digital lending market and has established partnerships with over 130 lending companies. Their business model focuses on providing technology platforms that enable equitable financial services. The website reflects a professional and consistent brand image with clear messaging targeted at financial partners and lending companies. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS, Swiper.js, and AOS for animations. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure. The site is mobile-optimized and SEO-friendly, although Google Analytics is installed but not yet configured. From a security perspective, the site uses HTTPS with proper domain status protections but lacks DNSSEC and important security headers. There is no visible cookie consent mechanism or detailed security/incident response policies published, indicating room for improvement in compliance and security transparency. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance the security posture and compliance standing.

Š

Šport.sk

sport.sk

61

Šport.sk is a prominent Slovak online sports news portal providing comprehensive coverage of various sports including football, hockey, tennis, and more. The website offers live results, commentaries, schedules, and video content targeting Slovak-speaking sports enthusiasts. It operates under the media sector with a business model primarily based on advertising revenue and affiliate partnerships, notably with Tipsport for sports betting. The site is part of the larger Aktuality.sk ecosystem, indicating a strong market position in Slovakia's digital media landscape. Technically, Šport.sk leverages modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. The integration of Google Tag Manager, AdSense, and Sourcepoint CMP reflects a mature digital marketing and compliance infrastructure. Security-wise, the site enforces HTTPS and employs GDPR-compliant consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Šport.sk demonstrates a solid security posture with room for improvement in transparency and accessibility. The domain's WHOIS data aligns well with the business profile, supporting its legitimacy. Strategic recommendations include enhancing security header implementation, publishing clear security and privacy policies, and expanding accessibility features to strengthen compliance and user trust.

D

Defense Pro

defensepro.sk

54

Defense Pro is a Slovak private security company established in 2014, offering a broad range of security services including physical guarding, technical security installations, detective services, and dog catching. The company operates primarily in western Slovakia but serves clients nationwide through partners and trained personnel. Their website reflects a professional and trustworthy business with clear service offerings and client testimonials. Technically, the site is built on WordPress with Elementor and integrates modern security and privacy tools such as GDPR compliance plugins and Google reCAPTCHA. The security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, though additional security headers could enhance protection. Overall, Defense Pro demonstrates a mature digital presence aligned with their business operations and market position.

B

BU1

bu1.cz

67

BU1 is a Czech Republic based e-commerce business specializing in goalkeeper gloves and football equipment, targeting football players and enthusiasts. The company operates a Shopify-based online store with a consistent brand presence and a focus on quality sports gear accessible to a broad audience. The website integrates multiple marketing and analytics tools, including Klaviyo, Judge.me, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Technically, the site is built on Shopify with modern JavaScript libraries and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and use of CAPTCHA for forms, though explicit security headers and policies are not visible in the provided content. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

A

ARGOS ELEKTRO a.s.

argos.cz

63

ARGOS ELEKTRO a.s. is a well-established Czech company specializing in electrical equipment and supplies, operating since 1998. The company serves both business and individual customers through a comprehensive e-commerce platform and multiple physical stores across the Czech Republic. Their product range includes cables, lighting, low current technology, household devices, switchboards, heating and cooling systems, photovoltaics, and installation materials. The website reflects a mature business with consistent branding and a clear focus on the energy sector. Technically, the site uses modern JavaScript frameworks such as Vue.js and React, integrates analytics tools like Google Tag Manager and Exponea, and provides a secure user login and shopping cart experience. Security posture is good with HTTPS enabled and secure form handling, though some security headers could be improved. Privacy compliance is indicated by the presence of privacy and cookie policies with consent mechanisms, though explicit GDPR statements are limited. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

B

Balnabed s.r.o.

balnabed.cz

51

Balnabed s.r.o. is a Czech manufacturer specializing in custom wooden furniture, kitchens, and industrial packaging solutions. Established since 1992, the company serves customers primarily within the Czech Republic, offering modern and rustic style furniture tailored to client specifications. Their business model combines manufacturing with direct retail and design consultancy services, positioning them as a reputable medium-sized player in the manufacturing sector. The website reflects a professional digital presence with clear branding and comprehensive service descriptions. Technically, the website leverages a modern e-commerce platform (Upgates) and integrates multiple analytics and marketing technologies including Google Analytics 4, Facebook Pixel, Matomo, and Sklik retargeting. The site is mobile-optimized and uses Bootstrap for responsive design, ensuring a good user experience across devices. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks advanced security headers and does not publish a formal security policy or incident response contact, which could be improved. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. The main limitation is the absence of WHOIS registration data, which slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

J.M. POST is a Czech Republic-based IT service provider established in 1994, specializing in web development, e-commerce solutions, custom software, and online marketing services. The company serves a diverse clientele including small and medium businesses, large enterprises, public institutions, and international partners. Their website demonstrates a solid technical infrastructure with HTTPS, modern JavaScript libraries, and integration of Google Analytics and Tag Manager for tracking. However, the absence of visible privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response information. Overall, the website is professional and trustworthy, but the lack of WHOIS data and privacy documentation suggests areas for improvement.

M

MEDIA MARKETING SERVICES a.s.

hitradionorthmusic.cz

53

Hitrádio North Music is a Czech internet radio station operated by MEDIA MARKETING SERVICES a.s., founded in 2017. The website offers multiple live music streams, podcasts, radio programs, contests, and an e-shop, targeting Czech-speaking music listeners. The platform demonstrates a solid market position as a regional media outlet with active community engagement and a professional digital presence. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and Foundation CSS framework, hosted by Active24. The website is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS, CSRF protection, and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. Overall, the site is trustworthy, professionally maintained, and safe for general audiences.

D

Dream PRO

dreampro.cz

48

Dream PRO is a professional and reputable event agency based in the Czech Republic, offering a wide range of event-related services including event organization, programs, artist services, and equipment rental. The company targets businesses, municipalities, and individuals, positioning itself as a trusted regional player with a strong portfolio of client references and active social media presence. The website reflects a modern and professional digital presence with good content quality and user experience. Technically, the site uses established JavaScript libraries such as jQuery and Swiper, integrates Google Analytics and Tag Manager for tracking, and implements cookie consent mechanisms to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on website content and social signals. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust.

T

TURBIN s.r.o.

turbin.cz

63

TURBIN s.r.o. is a Czech-based supplier specializing in abrasives and grinding technologies with a 30-year tradition. The company serves industrial clients by offering a wide range of abrasive products, technical consultancy, and customized solutions to optimize manufacturing processes. Their market position is supported by a broad partner network domestically and internationally, and they hold ISO 9001 certification, underscoring their commitment to quality. The website reflects a professional B2B business model targeting manufacturing sectors requiring precision grinding tools. Technically, the website employs modern frontend technologies including Bootstrap, Swiper.js, and Google services such as reCAPTCHA and Tag Manager. The site is mobile-optimized with good navigation and content relevance. However, no CMS or hosting provider details were identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, and a comprehensive cookie consent mechanism is in place, indicating GDPR compliance. However, no security headers were detected, and WHOIS data is missing, which reduces trustworthiness. There is no visible security policy or incident response contact information. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from improved security practices and verified domain registration information to enhance legitimacy and compliance posture.

EVROmat a.s. is a well-established Czech manufacturer specializing in gutter systems, metal roofing materials, and sheet metal roofing accessories. Founded in 1992, it holds a leading market position as the largest domestic manufacturer in its sector, serving both wholesale and retail customers primarily in the Czech Republic. The company offers a comprehensive product range including roofing tiles, metal sheets, insulation, and roofing windows, supported by technical consulting and logistics services. The website reflects a professional and consistent brand image with clear business information and multiple physical locations, enhancing trustworthiness. Technically, the website employs a mature technology stack including jQuery, Google Tag Manager, Matomo Analytics, and Google reCAPTCHA, running on the IPO CMS platform. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and anti-bot measures in place, though it lacks some security headers and explicit privacy and terms policies. Analytics usage is moderate with user tracking balanced by a cookie consent mechanism. Security-wise, the site shows good practices such as encrypted connections and form protections but would benefit from publishing clear privacy policies, terms of service, and incident response contacts. The absence of WHOIS data limits domain trust verification, but the website content and business details support legitimacy. Overall, the site is safe, professional, and suitable for its target audience, with room for improvement in compliance and security transparency. Strategically, EVROmat should focus on enhancing privacy compliance, adding security headers, and improving incident response readiness to strengthen its security posture and customer trust. Continued modernization of technical infrastructure and clear communication of policies will support sustainable growth and market leadership.

M

merch.sk

merch.sk

41

merch.sk is a Slovak-based e-commerce platform specializing in branded merchandise including clothing, accessories, and CDs. The website targets fans of various cultural, entertainment, and sports profiles primarily within Slovakia and Central Europe. The platform supports multiple languages and currencies, enhancing its regional appeal. Technically, the site employs modern JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Sendinblue, indicating a mature digital marketing infrastructure. Hosting and CDN services are provided via DigitalOcean Spaces, ensuring reliable content delivery. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, merch.sk presents as a legitimate, moderately sized e-commerce business with a good balance of content quality, technical implementation, and business credibility.

M

MEDICON a.s.

mediconas.cz

48

MEDICON a.s. is a large healthcare service provider operating multiple polyclinics and specialized medical centers in Prague, Czech Republic. The company offers comprehensive ambulatory care through approximately 300 doctors across more than 40 specialties, including oncology, radiology, fertility treatment, and home care. Their network includes partner entities such as Pharmacentrum pharmacies, Mammacentrum breast cancer prevention centers, and PRONATAL fertility clinics, positioning MEDICON as a significant player in the regional healthcare market. Technically, the website is built using modern web technologies including React 17, with polyfills for compatibility and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. However, no explicit security policy or incident response information is published, and security headers are not visibly configured, which could be improved. The security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces domain registration transparency, which slightly impacts trustworthiness. Overall, the website demonstrates a professional and trustworthy digital presence with room for enhancement in security policy transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and verifying domain registration details to improve trust and compliance.

H

Holmes Place

holmesplace.com

56

Holmes Place is a premium fitness club operator offering a wide range of wellness services including group classes, personal training, nutrition, physiotherapy, and spa treatments. Established in 1980, the company positions itself as a lifestyle brand promoting balance, support, inclusion, and progress. The website is professionally designed with a clear focus on user engagement and brand consistency. Technically, the site uses modern React technology, integrates Google services such as Tag Manager and Maps, and hosts media assets on Amazon S3, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain legitimacy. Overall, the site is trustworthy and well-positioned in the hospitality and fitness sector but could improve in security transparency and privacy mechanisms.

C

Coma Web Development

coma.lv

49

Coma Web Development is a small Latvian technology company specializing in WordPress website design, development, hosting, and support services. Established in 2010, it serves a global clientele with a focus on delivering high-quality, custom WordPress solutions ranging from landing pages to complex e-commerce platforms. The company emphasizes meeting deadlines, quality, and customer engagement through transparent project tracking and communication. Their market position is supported by a decade of experience and a portfolio of reputable clients, as evidenced by their Clutch.co presence and social media activity. Technically, the website is built on WordPress using the Enfold theme and several modern plugins such as Rank Math SEO and WPML for multilingual support. Hosting infrastructure is based on Hetzner, ensuring high uptime and reliability. The site implements Google reCAPTCHA v3 for form security and uses Google Tag Manager and Ahrefs Analytics for tracking and SEO optimization. Performance and mobile responsiveness are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, which are important for GDPR compliance. Overall, the website is professional, trustworthy, and secure with room for improvement in privacy compliance and security best practices. The domain registration data aligns well with the business information, supporting legitimacy. No critical vulnerabilities or suspicious content were detected.

1

10Web

10web.io

71

10Web is a US-based technology company founded in 2017, specializing in AI-powered website building, hosting, optimization, and security services. Positioned as an innovative SaaS provider, 10Web offers a comprehensive ecosystem that enables businesses and individuals to create or recreate websites efficiently. The company enjoys a strong market presence supported by high user ratings and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and Cloudflare DNS, though improvements are recommended in DNSSEC and security headers. Privacy compliance is currently basic, lacking explicit privacy and cookie policies. Overall, 10Web demonstrates a professional and trustworthy online presence with room for enhanced compliance and security transparency.

A

AlpicAir

alpicair.com

34

AlpicAir is a small-sized company specializing in air conditioning and climate control systems, offering a range of products including residential and commercial air conditioners, heat pumps, and ventilators. The company operates a partner program and targets both B2B partners and end customers. The website is built on OpenCart 2.0 with a technology stack including jQuery, Bootstrap, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is basic with presence of privacy and cookie policies but limited GDPR indicators. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is professional and trustworthy with room for security and privacy improvements.

D

Daikin

daikin.lv

52

Daikin.lv is the Latvian website for Daikin, a global leader in heating, ventilation, air conditioning, and refrigeration solutions with over 90 years of experience. The site targets residential and commercial customers, installers, architects, and consultants, offering a broad portfolio of energy-efficient climate control products and services. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting Daikin's strong market position and commitment to innovation. Technically, the site uses Adobe Experience Manager CMS, integrates modern analytics tools like Matomo and Google Tag Manager, and employs security best practices including HTTPS and cookie consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though explicit security policy and incident response contacts are not publicly detailed. Privacy compliance is robust with comprehensive privacy and cookie policies aligned with GDPR. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

G

Grandem Group

grandem.lv

42

Grandem Group is a creative and dynamically progressing agency based in Latvia, specializing in graphic design and web solutions. Their services include website development, graphic design, SEO optimization, branding, banner creation, video production, and logo design. The company targets both corporate and private clients, emphasizing an individual approach and responsibility, positioning itself as a reliable partner in its industry. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, Bootstrap, and Google Analytics, supported by Cloudflare DNS services. Security posture is good with HTTPS enforced and no exposed sensitive data, though some improvements are recommended such as adding security headers and fixing broken images. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with clear contact information and social media presence.

A

Automatisko Ātrumkārbu Remonts Rīgā

atrumkarburemonts.lv

54

Automatisko Ātrumkārbu Remonts Rīgā is a specialized automotive service provider based in Riga, Latvia, focusing on automatic transmission repair and diagnostics. The company is led by Vladimirs Raščoskins, a recognized expert in the field with a strong reputation and over 2000 repairs since 2009. The website presents a professional image with clear service offerings, pricing, and multiple contact channels including phone, email, and popular messenger platforms. The business targets vehicle owners in Riga and surrounding areas seeking reliable transmission repair services. Technically, the website employs modern analytics and tracking tools such as Google Analytics and Facebook Pixel, and uses responsive design with good SEO practices. However, explicit security headers and detailed security policies are not evident, which could be improved to enhance trust and compliance. The WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is well-structured, content-rich, and trustworthy from a business perspective but would benefit from enhanced security and compliance transparency.

B

Ballery decoration

ballery.lv

55

Ballery decoration is a Latvian small business specializing in event decoration services for private and corporate events, including weddings, corporate parties, and private celebrations. The company offers a range of decoration services such as balloon garlands, photo zones, table and room decorations, lighting elements, floristics, and aerodesign. Operating since 2018, Ballery targets local Latvian customers and maintains an active online presence with social media integration. The website is built on the Tilda platform, leveraging various Tilda scripts and widgets to provide an interactive user experience including a multi-step cost estimation quiz form. The technical infrastructure includes modern tracking and marketing tools such as Google Analytics, Google Ads, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and published privacy policies, which are recommended for compliance and trust enhancement. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security best practices would strengthen its risk profile.

N

Nordspace

nordspace.lv

61

Nordspace is a Latvian company specializing in leasing modern, compact business spaces ranging from 44 to 102 square meters. Their offerings include smart remote control systems, individual utility accounting, and enhanced security features such as video surveillance and remote door access. The company targets businesses and entrepreneurs seeking flexible and technologically advanced commercial premises. The website demonstrates a good level of digital maturity, employing modern technologies such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides clear contact information, enhancing user experience and trust. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers and policies could be improved. Overall, the website is professional and trustworthy, though the absence of WHOIS data limits full domain legitimacy verification.

FJT is a small Latvian e-commerce company specializing in the sale of Fresh Juice Tea and related beverage products under the brands FJT and beFRUITbe. The website presents a niche market offering with a clear focus on specialty teas soaked in various fruit juices, targeting general consumers interested in unique tea experiences. The company provides contact information, including phone, email, and physical address, and supports multiple languages (English, Latvian, Russian) to cater to a regional audience. Payment options and social media presence are clearly displayed, enhancing business credibility. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO for search optimization. It uses modern JavaScript libraries such as Swiper.js and integrates Google Tag Manager and Yandex Metrika for analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy or terms of service documentation. Security posture is generally sound with no visible vulnerabilities or exposed sensitive data. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS transparency due to query limits, slightly reduce trustworthiness. No incident response or vulnerability disclosure mechanisms are present. Overall, the site is functional and professional but could improve compliance and security documentation. Strategically, FJT should prioritize publishing comprehensive privacy and terms policies, implement security headers, and consider adding a security.txt file to enhance transparency and trust. Improving GDPR compliance indicators and WHOIS data availability would further strengthen legitimacy and customer confidence.

P

Printero

printero.lv

62

Printero is a Latvian-based e-commerce business specializing in personalized promotional products including textiles, gifts, and branded items. The website is built on the Shopify platform and leverages modern web technologies such as Google Analytics, Google Tag Manager, and hCaptcha for security. The site presents a professional image with clear navigation, product categorization, and customer testimonials, targeting businesses and organizations in the Baltic region seeking custom branding solutions. Security posture is strong with HTTPS enforced and security headers present, though explicit privacy and cookie policies are not detected in the provided content. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is trustworthy and well-maintained but would benefit from enhanced privacy disclosures and domain registration transparency.

S

STADA Arzneimittel AG

stada.com

73

STADA Arzneimittel AG is a global pharmaceutical company specializing in consumer healthcare products, generics, and specialty pharmaceuticals. The company operates through a three-pillar strategy and maintains a strong international presence with numerous subsidiaries across Europe, Asia, and other regions. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager and Usercentrics for consent management, ensuring compliance with privacy regulations. The site is well-designed, mobile-optimized, and provides comprehensive information for investors, customers, and job seekers. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the extensive corporate content and branding. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with industry standards.

F

Furnivita

furnivita.com

71

Furnivita operates as a high-end furniture and interior design e-commerce platform targeting European consumers seeking luxury home decor solutions. The website is built on the Shopify platform, leveraging modern web technologies such as jQuery, OwlCarousel, and marketing tools like Klaviyo and Google Ads for customer engagement and analytics. The site offers a smooth online shopping experience with free shipping and returns, positioning itself as a convenient luxury furniture provider. Despite the professional presentation and functional e-commerce capabilities, the absence of WHOIS data raises questions about domain registration legitimacy, which should be verified externally. Security posture is adequate with HTTPS and form protection via hCaptcha, but lacks explicit security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which could be improved to enhance trust and regulatory adherence.

K

Kreklu Bode

kreklubode.lv

64

Kreklu Bode is a Latvian-based e-commerce retailer specializing in personalized clothing products such as T-shirts and hoodies. The website is built on the Shopify platform, leveraging its secure infrastructure and e-commerce capabilities. The company targets local customers in Latvia seeking customized apparel for personal or business use. The site demonstrates consistent branding and a professional design with good mobile optimization and clear navigation. However, explicit privacy and terms of service policies are not found, which may impact compliance and user trust. Technically, the site uses modern web technologies, including Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS enforced and Shopify's secure checkout, but additional security headers could be implemented for enhanced protection. Overall, the website presents a legitimate small retail business with room for improvement in privacy compliance and contact transparency.

S

Space 12

space12.lv

52

Space 12 is a Latvian-based interior design gallery and retail business established in 2020, specializing in quality home furnishing products from Scandinavian and Italian brands. The company targets homeowners and interior design enthusiasts seeking unique and high-quality materials and furniture. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site uses modern JavaScript libraries including jQuery, Swiper.js, and integrates Google reCAPTCHA v3 and Google Tag Manager for analytics and spam protection. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks visible security headers and cookie consent mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the website is safe, professional, and credible with room for improvement in privacy compliance and security best practices.

V

Var Group SPA

vargroup.it

73

Var Group SPA is a large Italian technology company specializing in digital transformation services for businesses. Their offerings include multimedia and workspace solutions, business applications, cybersecurity, data science, and sustainability solutions, positioning them as a comprehensive digital partner primarily for Italian companies with a global reach. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Next.js and Sitecore CMS, with integrated analytics and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit incident response and vulnerability disclosure information are not publicly available. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence. Strategic recommendations include publishing incident response contacts and vulnerability disclosure policies to enhance trust and security transparency.

L

Latvijas Mājražotāji

majrazotajuveikals.lv

59

Latvijas Mājražotāji operates as a specialized e-commerce platform focused on offering a wide range of artisan and home-produced goods from Latvian producers and craftsmen. The website positions itself as a leading marketplace in Latvia for local products, targeting consumers interested in authentic, locally sourced items. The business model revolves around online retail with additional information about markets and corporate gift options, catering primarily to the Latvian market. The platform is relatively mature, with content indicating establishment since 2017, and maintains consistent branding and professional presentation.

A

Auglupiegade.lv SIA

auglupiegade.lv

47

Auglupiegade.lv SIA operates a localized e-commerce platform specializing in fresh fruit baskets, vegetables, berries, and exotic fruits with free delivery across Latvia. The company targets both residential and business customers, positioning itself as a convenient provider of fresh produce. The website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Elementor to enhance user experience and search engine visibility. Social media integration and clear contact information support customer engagement and trust. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics. Hosting is provided by 'inmotion', and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented, contributing to good content discoverability. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the HTML content. Incident response and security policy documentation are absent, which could be enhanced to improve security posture. Overall, the website presents a professional and trustworthy front for a small retail business in Latvia. The lack of WHOIS data limits domain registration verification, but the site content and business information appear consistent and credible. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and adding explicit security and incident response policies to strengthen compliance and trust.