Security Directory

X

XSERVER Inc.

unwto-ap.org

44

The website represents the UN Tourism Asia-Pacific Regional Support Office, a governmental/non-profit entity focused on tourism development and sustainability in the Asia-Pacific region. It provides information about the organization, member countries, events, research, and publications. The site targets government agencies, tourism professionals, researchers, and affiliate members. The business model is informational and supportive, aligned with UNWTO's mission. Technically, the site is built on WordPress using the Newspaper theme and several plugins, including Mailchimp Campaign Manager. It employs modern JavaScript libraries like jQuery and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by XSERVER Inc. in Japan. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is available. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security configurations to align with best practices.

C

COT group s. r. o.

cot.cz

55

COT group s. r. o. is a well-established Czech marketing and communication agency founded in 1999, specializing in marketing, media, and event services. The company targets businesses and organizations seeking professional marketing solutions and has a strong market presence supported by client testimonials and a consistent brand image. Their website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. The technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the website and business demonstrate high trustworthiness and compliance with GDPR regulations.

M

Mikroelektronika s. r. o.

pracujvmikrosce.cz

47

Mikroelektronika s. r. o. is a well-established Czech company founded in 1991 specializing in the development and manufacturing of ticketing systems for public transport and custom electronics. The website pracujvmikrosce.cz serves as a recruitment portal targeting potential employees interested in working in the microelectronics sector. The company maintains a stable market position with exports to over 40 countries, reflecting a solid international presence. The site is professionally designed, mobile-optimized, and provides clear information about the company, benefits, and open positions, enhancing its appeal to job seekers. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Slick Carousel, and is built on the Fork CMS platform. It integrates Google Analytics and Google Tag Manager for traffic analysis and marketing purposes. The site uses HTTPS and implements a cookie consent mechanism, demonstrating basic privacy compliance. However, security headers and advanced security policies are not evident, indicating room for improvement in security posture. From a security perspective, the site shows good practices such as secure form handling with CSRF tokens and no visible sensitive data exposure. The absence of a published security policy or incident response contacts suggests limited transparency in security governance. The domain registration data aligns well with the company's Czech business identity, supporting legitimacy and trustworthiness. Overall, the website is a credible and professional recruitment platform with good content quality and technical implementation. Strategic enhancements in security policies, incident response transparency, and security headers would further strengthen its security posture and compliance standing.

S

Siemens Česká republika | Tiskové centrum

siemenspress.cz

68

Siemens Česká republika's press center website serves as a professional corporate communications platform providing press releases, media resources, and event information primarily targeting business professionals and media in the Czech Republic. The site reflects Siemens' strong market position as a global technology leader with a focus on manufacturing, transportation, energy, and technology sectors. Technically, the website employs modern JavaScript frameworks, lazy loading for images, and integrates Google Analytics and Tag Manager for tracking, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong Siemens branding and consistent external references. Overall, the site is professional, trustworthy, and well-maintained, suitable for its corporate communication purpose.

D

Website building and development on Divly.net – Europe, the USA, worldwide

divly.net

60

Divly.net is a small technology service provider specializing in affordable and fast website building and SEO services targeted at a global audience including Europe and the USA. The company emphasizes quality, individual client approach, and rapid delivery with pricing starting at $99 for website development within 10 days. The website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, and integrates popular analytics and marketing tools including Google Analytics, Google Tag Manager, Yandex Metrika, and Google Optimize. Hosting and domain registration are managed through RU-CENTER with nameservers indicating Russian hosting infrastructure. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced security and privacy transparency to improve trust and compliance.

U

UCALC

ucalc.pro

56

UCALC is a technology company providing a SaaS platform that enables businesses and website owners to create customizable online calculators and forms without programming skills. Established in 2016, it offers a variety of industry-specific templates and integration guides for popular CMS and platforms, positioning itself as a versatile tool to improve business efficiency and customer engagement. The website is professionally designed, mobile-optimized, and rich in content, targeting businesses seeking to enhance their online presence with interactive calculators. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Yandex Metrica, hosted behind Cloudflare DNS services, ensuring good performance and security. Security posture is solid with HTTPS enforced and CSRF protections in place, though improvements such as enabling DNSSEC and adding explicit security headers are recommended. Privacy compliance is supported by a comprehensive privacy policy and user agreement, with GDPR considerations evident. Overall, the site demonstrates a mature digital infrastructure and trustworthy business presence.

S

SIA Datateks

siadatateks.lv

42

SIA Datateks is a Latvian IT service company specializing in web development and digital solutions since 2002. The company offers a broad portfolio of services including e-commerce development, IT systems, web and application development, system integrations, IT consulting, design, UX analysis, digital marketing, and hosting. Their market position is that of an established local player with a diverse client base including international companies, government entities, and NGOs. Technically, the website employs modern JavaScript libraries and tracking tools, is mobile-optimized, and hosted by Serveris.lv. Security posture is moderate with HTTPS usage and cookie consent mechanisms but lacks explicit security headers and documented policies. Overall, the website is professional and trustworthy, though WHOIS data is unavailable due to query limits, limiting domain legitimacy verification.

C

Consumo

automatiskas-barjeras.lv

42

Consumo is a Latvian company specializing in the sale of automatic barriers and bollards designed for vehicle flow control in private, public, and industrial areas. The company operates an e-commerce platform complemented by physical retail presence, targeting businesses and property managers requiring access control solutions. The website is professionally designed, mobile-optimized, and provides clear product catalogs with pricing and contact information. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics, Google Tag Manager, and Smartsupp Live Chat, ensuring moderate performance and user engagement capabilities. Security posture is adequate with HTTPS enforced and secure login forms; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

D

Sākums - Drošības plombas (drosibas-plombas.lv)

drosibas-plombas.lv

41

The website drosibas-plombas.lv represents a Latvian small business specializing in the supply of security seals, including plastic and metal seals, security labels, and security bags primarily for logistics, measurement devices, and storage sectors. The business emphasizes certified European quality products and targets B2B customers requiring secure sealing solutions. The website is professionally designed with clear navigation and multilingual support, though mobile optimization is basic. Technically, the site uses several JavaScript libraries including outdated jQuery versions and integrates Google Analytics and Smartsupp live chat for user engagement and tracking. Security posture is moderate with HTTPS usage but lacks advanced security headers and uses outdated libraries, presenting potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from security and compliance improvements.

S

SIA “Eurolifts Latvija”

i-pacelaji.lv

53

SIA Eurolifts Latvija operates a specialized business focused on providing disability lifts tailored for public institutions, private homes, and apartments in Latvia. Their offerings include a full project cycle from design to installation and maintenance, targeting individuals and organizations requiring accessibility solutions. The website is professionally designed using WordPress and Elementor, featuring detailed product descriptions, project timelines, and contact information. The company positions itself as a niche provider with customized solutions and a commitment to accessibility. Technically, the website employs modern web technologies including Google Tag Manager for analytics and YouTube embeds for media content. The site is mobile-optimized and provides a good user experience with clear navigation. However, there is room for improvement in security practices, such as implementing security headers and publishing privacy and cookie policies to enhance GDPR compliance. Security posture is moderate; HTTPS is used, but no explicit security headers or vulnerability disclosures are present. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Contact information is clearly presented, supporting business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, establishing a vulnerability disclosure policy, and conducting regular security audits to strengthen trust and compliance.

E

EcomCart.eu

ecomcart.eu

54

EcomCart.eu is a small-sized eCommerce platform provider based in Latvia, offering an all-in-one online shop rental service with features including data migration, technical support, ERP integrations, and regular updates. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The platform targets eCommerce businesses seeking efficient online shop solutions. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

A

Altegio

alteg.io

73

Altegio is a technology company specializing in SaaS-based online appointment scheduling and business management software. Positioned as a leading software developer from Eastern Europe, Altegio offers a comprehensive digital ecosystem with over 30 modules including online booking, CRM, finance, payroll, and inventory management. The platform targets small to medium-sized businesses and entrepreneurs seeking to enhance operational efficiency and customer retention. With a user base exceeding 70,000 and a strong customer satisfaction score (NPS 76+), Altegio demonstrates a solid market presence and growth trajectory. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations such as W3Speedster. It integrates Google Analytics and Google Tag Manager for analytics and marketing insights. The site is multilingual, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Hosting appears to be supported by G-Core Labs with domain registration via GoDaddy and privacy protection services. From a security perspective, the site enforces HTTPS with good SSL configuration and employs privacy-conscious analytics tracking. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data shows privacy protection consistent with the business type and no suspicious registration patterns. Overall, Altegio presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic improvements in security policy transparency and DNS security (DNSSEC) could further strengthen its security posture and compliance standing.

G

GLOBAL INTELLECT SERVICE FZE

uds.app

66

UDS App is a well-established loyalty program platform that connects consumers with over 7,000 partner companies, offering discounts, points earning, and redemption services. The platform boasts a large user base exceeding 40 million users and maintains a high customer satisfaction rating of 4.95 from over 388,000 reviews. The business operates primarily in the technology and retail sectors, with physical presence in the UAE and the UK, reflecting a global operational footprint. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and user benefits.

B

Booksy Inc.

booksy.com

72

Booksy Inc. operates a well-established online platform for booking beauty and wellness appointments, targeting consumers and service providers in the United States and globally. The company offers a comprehensive range of services including hair salons, barbershops, nail salons, massage, and spa services, positioning itself as a key player in the beauty appointment marketplace. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and bot protection via hCaptcha, though some security headers and DNSSEC could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent WHOIS data and trust indicators. No critical security issues or content safety concerns were detected.

N

Noliktavai.lv

noliktavai.lv

46

Noliktavai.lv is a Latvian company specializing in the sale and installation of metal shelving and warehouse storage solutions. With over ten years of experience, they cater to logistics companies, warehouses, workshops, retail stores, and private households. Their product range includes small item racks, pallet racks, mezzanine shelving, and store shelving, emphasizing quality galvanized metal constructions suitable for manual and forklift handling. The company also offers assembly and disassembly services to ease customer operations. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and explicit privacy policy documentation is not clearly found in the provided content. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. The absence of visible security headers and limited WHOIS data restricts a full security assessment. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. Overall, the website appears legitimate and professional but could improve transparency and security hardening. The overall risk is moderate with recommendations to enhance security headers, provide clear privacy policy documentation, and ensure WHOIS data availability for trust verification. These steps will strengthen the company's digital trustworthiness and compliance posture.

P

PRVNÍ MORAVSKÁ SPOLEČNOST, spol. s r.o.

mia-system.cz

36

MIA systém is a Czech Republic based company specializing in software solutions for financial advisory and brokerage firms. Established in 2009, it offers a comprehensive back office system and various online tools tailored for financial advisors and insurance brokers. The company positions itself as a regional specialist in Moravia, providing administrative, legal, and product support services. The website is professionally designed using WordPress and Elementor, reflecting a mature digital presence with integrated analytics and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers and policies could be improved. Overall, the business demonstrates credibility and a focused market approach with clear contact information and service offerings.

Raiffeisen Broker, s.r.o. operates as an insurance brokerage firm specializing in non-life insurance products, including vehicle insurance, property insurance, and other insurance services. The company is positioned as a small but professional entity within the Czech Republic's financial sector, leveraging its association with the Raiffeisen group to enhance market credibility. The website reflects a clear business focus with well-structured content and accessible contact information. Technically, the website is built on the Kentico CMS platform and utilizes modern web technologies such as Bootstrap and RequireJS. Google Tag Manager is employed for analytics and marketing tracking. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant technical issues detected. From a security perspective, the site enforces HTTPS and includes secure form handling with file upload capabilities. However, explicit security headers are not detected, and no public security or incident response policies are available. The cookie consent mechanism and privacy policy indicate compliance with GDPR requirements. The absence of WHOIS data for the domain is a notable concern, impacting the overall trustworthiness assessment. Overall, the website presents a professional and trustworthy front for Raiffeisen Broker, but improvements in transparency regarding domain registration and enhanced security headers would strengthen its security posture and business credibility.

S

Sixt

sixt.cz

47

Sixt.cz is a well-established car rental and leasing service provider in the Czech Republic, offering a wide range of mobility solutions including car rentals, operational leasing, used car sales, limousine services, and motorbike rentals. The company targets both individual and corporate clients with a strong presence in major Czech cities such as Prague, Brno, and Ostrava. Sixt positions itself as the largest and best-rated car rental company in the country with a global footprint through its parent company Sixt SE. Technically, the website employs modern web technologies including jQuery, Slick Slider, Google Tag Manager, and analytics tools such as Google Analytics, Hotjar, and Smartlook. The site is mobile optimized, well-structured, and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses cookie consent for tracking scripts. However, no explicit security policy or incident response information is published, and WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, Sixt.cz presents a professional, trustworthy, and comprehensive digital presence for its business. Strategic recommendations include publishing a security policy, improving security headers, and adding vulnerability disclosure information to enhance transparency and trust.

D

Drivalia

drivalia.com

61

Drivalia is a European mobility service provider specializing in vehicle rental, leasing, subscription, and sharing services. The company targets corporate clients and individual customers seeking flexible and innovative mobility solutions. Their market presence spans multiple European countries, positioning them as a significant player in the transportation sector. The website reflects a professional and modern digital presence built on Angular, integrating various third-party analytics and advertising tools to enhance user engagement and marketing effectiveness. Security measures such as HTTPS and Content Security Policy are implemented, though additional security headers could further strengthen the site's security posture. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a visible privacy policy and contact information limits full compliance assessment. The lack of WHOIS data raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website demonstrates good technical maturity and business credibility but would benefit from enhanced transparency and security practices.

I

its Beskydy, s.r.o.

infocesko.cz

53

InfoČesko.cz is a Czech Republic-based tourism portal operated by its Beskydy, s.r.o., providing comprehensive information on accommodation, cultural events, wellness, and outdoor activities primarily in the Czech and Moravian regions. The website targets tourists and travelers seeking lodging options, event calendars, and regional guides. The business model revolves around online listings and promotional packages for hotels, pensions, chalets, and other accommodation types, supplemented by event and weather information.

V

VNT electronics s.r.o.

vnte.cz

48

VNT electronics s.r.o. is a Czech electronics manufacturer based in Lanškroun, specializing in the development and production of electronic dog collars and electric fence generators. The company positions itself as a unique player in the Czech Republic with over 21 years of stable operation and a workforce of approximately 156 employees. Their products are distributed in about 60 countries worldwide, indicating a solid international presence. The website is professionally designed, mobile-optimized, and provides clear information about the company, job opportunities, and benefits for employees. Technically, the site uses modern web technologies including Google Fonts, Fancybox, and Google Tag Manager for analytics and consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and contact details appear legitimate and consistent with the business claims. Overall, the site demonstrates a good balance of business professionalism and technical implementation with room for improvement in privacy and security disclosures.

Z

ZOFI

zofi.cz

49

ZOFI is a Czech Republic-based company specializing in facade insulation services and materials, operating since 2006 with a solid market presence and over 750 completed projects. The company offers a comprehensive range of services including consulting, project planning, material sales via an e-commerce platform, and assistance with government subsidies. Their website reflects a professional and consistent brand image targeting homeowners and property managers seeking quality facade insulation solutions. Technically, the website employs modern web technologies, including Google Tag Manager, Google Analytics, reCAPTCHA, and New Relic monitoring, ensuring good performance and user experience across devices. Security measures such as HTTPS, cookie consent with granular categories, and bot protection are implemented, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital infrastructure with moderate user tracking and good privacy compliance, but could improve transparency by publishing privacy and security policies. The domain registration data aligns well with the business claims, supporting the legitimacy of the company.

D

Dinel, s.r.o.

dinel.cz

57

Dinel, s.r.o. is a specialized manufacturer based in the Czech Republic, focusing on level, pressure, and flow measurement systems for industrial applications. The company offers a range of products including continuous level meters, limit level sensors, flow meters, power supply units, control units, dataloggers, and pressure sensors. Their market position is that of a leading Czech producer in this niche, targeting industrial and commercial customers requiring precise measurement solutions. The website supports product configuration and inquiry submission, indicating a direct sales model with customer engagement. Technically, the website is built on a custom CMS (NOTIF.cms) and uses a moderately dated but functional JavaScript stack including jQuery and UI libraries. It integrates Google Tag Manager for analytics and Smartsupp for live chat support, reflecting a moderate level of digital maturity. The site is mobile optimized and has good navigation and content quality, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data reduces domain trustworthiness, although the presence of ISO certifications and professional content supports legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy front for Dinel, s.r.o., but improvements in security headers, privacy compliance, and domain registration transparency are advised to strengthen trust and regulatory adherence.

A

ACARA PRAHA, s.r.o.

acara.cz

58

ACARA PRAHA, s.r.o. is a Czech manufacturer and retailer specializing in construction and flooring profiles, skirting boards, expansion joints, vinyl and floating floors, tiles, adhesives, and related construction chemicals. The company serves both B2C and B2B customers, offering a comprehensive e-commerce platform alongside a dedicated B2B portal. Their market position is that of an established local manufacturer with a strong online presence and certifications such as ISO 9001 and Czech product certification. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product offerings. Technically, the website uses a modern e-commerce platform (BSSHOP), integrates multiple marketing and tracking tools including Google Tag Manager, Cookiebot for consent management, Smartsupp live chat, and retargeting services. The site is HTTPS secured with good privacy compliance, including GDPR-aligned policies and cookie consent mechanisms. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. The security posture is solid with encrypted communications and secure forms, but could be improved by adding security headers and incident response details. The lack of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a mature digital infrastructure suitable for its business model. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to maintain GDPR compliance and transparency to strengthen trust and security culture.

A

ABF a.s.

czechtravelmarket.cz

53

The CzechTravelMarket.cz website is a professional platform managed by ABF a.s., focusing on organizing and promoting the Czech Travel Market, an international contracting day for the travel industry. It serves as a hub for event news, partner information, visitor and exhibitor registration, and a marketplace for travel-related products. The site targets travel industry professionals, exhibitors, visitors, and media, primarily within the Czech Republic but with international reach. The business model revolves around event management and marketplace facilitation, positioning ABF a.s. as a key player in the Czech travel and hospitality sector. Technically, the website employs a mix of established web technologies including jQuery, Bootstrap, Font Awesome, and various JavaScript libraries for UI components and analytics. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site uses HTTPS and integrates multiple analytics tools such as Google Analytics, Matomo, and Facebook Pixel, alongside a cookie consent mechanism, indicating a moderate level of digital maturity and compliance awareness. From a security perspective, the site demonstrates good practices with HTTPS enforcement and cookie consent but relies on an outdated jQuery version which may expose it to known vulnerabilities. There is no visible security.txt or vulnerability disclosure policy, and some advanced security headers are not confirmed. The WHOIS data aligns well with the website's business claims, showing a consistent and legitimate registration since 2015. Overall, the website is well-structured, content-rich, and professionally maintained, with room for improvement in privacy policy transparency and security hardening. The risk profile is moderate, with no critical issues detected but some technical debt and compliance gaps that should be addressed to enhance trust and security posture.

P

Protect Parts

protectparts.cz

44

Protect Parts is a Czech-based company specializing in the procurement and sale of armored steel plates and related products sourced from leading global manufacturers. Their offerings include armored plates, other steel plates, cut parts produced by various cutting technologies, and mechanically processed components. The company targets industrial and manufacturing clients primarily in Central and Eastern Europe, with ambitions to expand further. The website is professionally designed using WordPress and Elementor, supporting Czech and English languages, and includes GDPR-compliant cookie and privacy policies. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, limiting domain trust assessment, but the website content and business information appear legitimate and consistent with a manufacturing business.

U

UnionStal Sp. z o.o.

unionstal.pl

50

UnionStal Sp. z o.o. is a Polish industrial company specializing in the supply and sale of wear-resistant steel plates and related products, including CREUSABRO steel. Established in 2003, the company serves industrial sectors such as mining, heavy industry, recycling, and cement production. Their business model focuses on B2B sales, supported by a network of European partners and direct sourcing from manufacturers. The website reflects a professional presence with good content quality and consistent branding, targeting industrial clients primarily in Poland and Europe. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google services for analytics and security, with moderate performance and good mobile optimization. Security posture is adequate with use of reCAPTCHA and cookie consent mechanisms, but lacks visible HTTP security headers and a dedicated privacy policy page, which are areas for improvement. The domain registration data is consistent with the company's history, supporting legitimacy. Overall, the site is functional, trustworthy, and compliant with basic GDPR cookie requirements, though privacy policy and security enhancements are recommended.

T

Technistone

technistone.com

50

Technistone is a premium manufacturer of engineered quartz stone surfaces primarily targeting kitchen worktops, bathroom cladding, and tiles. The company positions itself as a high-quality European producer with an international distribution network. The website is professionally designed, mobile-optimized, and rich in content including product catalogs, resources for professionals, and a blog. Technically, the site uses modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but the domain registration inconsistency warrants further verification.

L

Latvijas Olimpiskā komiteja (LOK)

olimpiade.lv

44

The website www.olimpiade.lv serves as the official online presence of the Latvian Olympic Committee (LOK), providing comprehensive information about Latvian Olympians, Olympic events, projects, and solidarity initiatives. It targets the Latvian sports community, Olympic athletes, and the general public interested in Olympic activities. The site functions as a non-profit informational platform, reinforcing LOK's authoritative position in Latvia's Olympic sports ecosystem. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts for typography, and Google Tag Manager for analytics. It is built on the OctoberCMS platform, indicating a mature content management infrastructure. The site is mobile-optimized with good navigation and content structure, though some SEO and accessibility features could be enhanced. From a security perspective, the site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No forms collecting personal data were detected on the homepage, reducing immediate data exposure risks. The absence of WHOIS data limits domain registration trust verification, but the site's branding, partner associations, and content strongly support its legitimacy. Overall, the website presents a professional and trustworthy front for the Latvian Olympic Committee, with moderate technical maturity and a good security baseline. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.

E

EKOL s.r.o.

ekol.cz

55

EKOL s.r.o. is a Czech manufacturing company specializing in the design, production, and supply of equipment for surface treatment processes including powder coating, galvanizing, and water treatment. Established since 1992, the company serves a broad international market including Europe, Asia, Africa, and North America. Their offerings include comprehensive project delivery from technology specification to installation, training, and after-sales service. The website reflects a professional industrial business with clear contact information and multilingual support. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, integrated with Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Security posture is moderate with HTTPS enforced and CSRF protections in forms, but additional security headers and incident response information are absent. Privacy compliance is well addressed with a detailed privacy policy and cookie consent. Overall, the website is trustworthy and professional but would benefit from improved domain transparency and enhanced security practices. The risk assessment indicates no critical vulnerabilities or blocking mechanisms, but the lack of WHOIS data and security policy pages suggests areas for improvement in trust and compliance documentation.

T

TriMas Packaging

trimaspackaging.com

66

TriMas Packaging is a medium-sized manufacturing company specializing in innovative packaging systems including dispensers, closures, and flexible packaging solutions. The company emphasizes sustainability and e-commerce packaging needs, positioning itself as a reliable B2B provider in the packaging industry. The website is professionally designed with consistent branding and good content quality, targeting businesses requiring packaging solutions. Technically, the site is built on WordPress with common plugins such as WPBakery and RevSlider, and employs Cookiebot for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enabled and cookie consent implemented, though additional security headers and policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its market segment.

R

Rapak

rapak.com

68

Rapak is a medium-sized manufacturing company specializing in flexible packaging and filling solutions for liquids, including Bag-in-Box systems. As a subsidiary of TriMas, Rapak leverages continuous innovation to serve diverse industries such as dairy, beverage, and wine. The website reflects a professional and consistent brand presence with clear business focus and target audience in B2B sectors. Technically, the site uses Joomla CMS with modern JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with a clear cookie consent mechanism and comprehensive privacy policy linked to the parent company. No incident response or vulnerability disclosure information is published, representing an area for improvement. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. The site is safe for general audiences with no adult or questionable content.

P

PATON INTERNATIONAL

paton.ua

62

PATON INTERNATIONAL operates a professional e-commerce website specializing in manufacturing and selling welding equipment and accessories primarily targeting the Ukrainian market. The website presents a comprehensive product catalog with detailed product images, pricing, and customer reviews, indicating a mature digital presence. The company positions itself as a leading Ukrainian manufacturer in the welding industry, offering reliable products and customer service. Technically, the website uses a modern tech stack including OpenCart CMS, jQuery, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

T

Telwin

telwin.it

65

Telwin is a well-established manufacturer specializing in welding machines, cutting systems, battery chargers, and starters, with a history spanning over 60 years. The website targets industrial professionals and customers seeking high-quality welding and battery equipment. The digital infrastructure employs modern technologies such as Google Tag Manager, Iubenda for privacy compliance, and various JavaScript libraries to enhance user experience and functionality. The site is well-optimized for mobile and SEO, providing a professional and trustworthy user interface. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, with contact primarily via web forms. Overall, the site presents a professional front but would benefit from improved transparency in domain registration and enhanced security headers.

T

Trafimet Group Spa a socio unico

trafimet.com

54

Trafimet Group Spa is a medium-sized Italian manufacturing company specializing in professional welding and plasma cutting torches, including MIG, TIG, and plasma cutting equipment. The company is part of the Kemppi Oy Group, indicating a strong parent company relationship and international market presence. Their website is well-structured, multilingual, and targets professional welders and industrial customers, offering a comprehensive product catalog and downloadable resources. The business model focuses on manufacturing and distributing high-quality welding equipment and accessories. Technically, the website is built on Joomla CMS with modern frameworks like UIkit and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with a consent mechanism, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No WHOIS data was found for the domain, which raises some concerns about domain registration transparency, but the website content and business information appear legitimate and professional. No critical vulnerabilities or exposed sensitive data were detected. Overall, Trafimet's website demonstrates a solid digital presence with good content quality and privacy compliance. However, improvements in security headers, incident response documentation, and WHOIS transparency are recommended to enhance trust and security posture.

Z

Zone Media OÜ

babytrio.ee

55

Babytrio.ee is an established Estonian e-commerce retailer specializing in baby products such as strollers, car seats, nursery furniture, feeding accessories, and toys. The website is built on the Magento 2 platform, leveraging modern frontend technologies including RequireJS, jQuery, and Knockout.js, and integrates marketing and analytics tools like Google Analytics, Hotjar, and Facebook Pixel. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and privacy policy documentation is absent. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

N

NL College

nlcollege.es

46

NL College is a Spanish language education provider with campuses in Barcelona and Madrid, offering immersive language courses and cultural experiences. The institution is well-positioned in the education sector with multiple accreditations and positive student feedback, targeting international students seeking quality Spanish language instruction. Technically, the website employs modern frameworks such as Vue.js and integrates multiple marketing and analytics tools, indicating a mature digital presence. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though improvements in security headers and published security policies are recommended. Overall, the website presents a trustworthy and professional front with no critical security issues detected, supporting a low-risk profile for users and partners.

B

Biznesa augstskola Turība

turiba.lv

58

Biznesa augstskola Turība is a recognized higher education institution in Latvia offering nationally and internationally accredited business study programs in Latvian and English. The website targets prospective and current students, providing access to class schedules, online registration, and student portals. The institution positions itself as a reputable business school with a clear focus on quality education. Technically, the website employs modern tracking and consent technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR compliance. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a mature digital infrastructure. Security posture is solid with CSRF tokens and cookie consent mechanisms, though HTTP security headers and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable due to query limits. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to strengthen security and compliance further.

Linguaschools operates as a reputable network of boutique Spanish language schools located in Spain and Latin America, offering a wide range of Spanish courses year-round. The company emphasizes cultural immersion alongside language education, targeting students and travelers seeking authentic experiences. Their market position is strong within the niche of high-quality language education with multiple accreditations supporting their credibility. Technically, the website employs modern tools such as Google Tag Manager, Google Analytics, and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not overshadow the professional presentation and comprehensive content of the site. Overall, Linguaschools presents a trustworthy and well-structured online presence suitable for its educational business model.

R

RSTheme

rstheme.com

48

RSTheme is a small technology business specializing in the creation and sale of premium WordPress themes and plugins. The company targets WordPress users and businesses seeking affordable, high-quality themes and plugins, positioning itself as a solid choice in the competitive WordPress marketplace. Their offerings include custom theme and plugin development services, enhancing their value proposition beyond simple product sales. Technically, the website is built on WordPress with modern tools such as Elementor, AMP, and Easy Digital Downloads, supported by analytics and marketing integrations like Google Analytics and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is strong with HTTPS and some security best practices, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

S

SIA LASHPROVOCATOR

lashprovocator.lv

39

Lashprovocator is a Latvian small retail company specializing in premium eyelash extension materials, including eyelashes, preparāti (solutions), tools, and starter kits. The website targets professionals and consumers interested in eyelash extensions, positioning itself as a niche player in the Latvian beauty retail market. The business model is e-commerce focused, offering a broad product range with clear contact information and basic privacy and cookie policies, indicating a professional approach to customer engagement and compliance. Technically, the website employs common web technologies such as jQuery, PhotoSwipe, and Fontello icons, alongside marketing and analytics tools like Facebook Pixel and Google Analytics. The site is served over HTTPS with asynchronous loading of scripts, contributing to moderate performance and basic mobile optimization. However, there is room for improvement in accessibility and security headers implementation to enhance overall security posture. From a security perspective, the website demonstrates a good baseline with HTTPS and no visible exposed sensitive data. However, the absence of security headers and explicit security or incident response policies suggests moderate maturity in security practices. The use of third-party tracking pixels indicates moderate user tracking, balanced by the presence of cookie consent mechanisms and privacy policies, aligning with GDPR requirements. Overall, the website is professionally designed and functional, with moderate security and privacy compliance. The lack of WHOIS data limits full domain legitimacy assessment, but available information supports a legitimate small business operation. Strategic improvements in security headers, incident response readiness, and mobile accessibility would strengthen the site's security posture and user trust.

W

Webnode AG

sapiens-quiz.webnode.lv

70

Webnode AG operates a mature and widely used online website building platform, targeting individuals and businesses seeking easy-to-use website creation tools. The company offers a comprehensive suite of services including website building, domain registration, e-commerce solutions, and email hosting, supported by localized customer service in multiple languages. The platform is technologically modern, leveraging Angular, Google Tag Manager, Google Analytics, and Cloudfront CDN to deliver a fast, accessible, and mobile-optimized user experience. Security is well addressed with HTTPS enforcement and reCAPTCHA integration, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data reduces transparency but does not significantly detract from the overall legitimacy given the professional branding and extensive online presence. Strategic recommendations include enhancing transparency around security policies and WHOIS data, and continuing to monitor third-party scripts for vulnerabilities.

S

SIA "DVJ"

clarteys.lv

48

Clarteys.lv operates as a Latvian auction house platform specializing in real estate and vehicle auctions. The company, legally registered as SIA "DVJ", provides an online marketplace for buyers and sellers to participate in auctions, submit bids, and access loan options. The platform targets individuals and businesses interested in acquiring or selling properties and vehicles through competitive bidding. The website is professionally designed, mobile-optimized, and offers clear navigation with relevant content in Latvian. Technically, the website is built on OctoberCMS and leverages modern web technologies including Google Fonts, jQuery, Google Tag Manager, Google Analytics, Yandex Metrika, and Google Maps API. The site uses HTTPS with a valid SSL certificate ensuring encrypted communications. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. Yet, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. The WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site presents a moderate security posture with recommendations to enhance headers, privacy compliance, and incident readiness. The overall risk assessment is moderate with a good business credibility score but some technical and privacy compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

The website knutsskujenieks.lv is dedicated to the literary and biographical presentation of Knuts Skujenieks, a Latvian figure likely related to poetry and literature. The site offers various sections including stories, poetry in multiple languages, biography, and photo albums, targeting Latvian and English-speaking audiences interested in cultural and literary content. The website is well-structured with clear navigation and a consistent branding approach, providing a good user experience with moderate performance and mobile optimization. Technically, it uses Google Tag Manager for analytics with IP anonymization and no ad personalization, but lacks advanced frameworks or CMS indications. Security posture is moderate with no detected security headers or explicit policies, and WHOIS data could not be retrieved due to query limits, limiting full legitimacy verification. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is safe, professional, and content-rich but would benefit from enhanced security and privacy measures.

Monumentmasters.lv is a Latvian e-commerce business specializing in the sale and custom production of granite monuments, borders, cases, and landscaping materials for grave sites. The company targets individuals and families seeking quality grave site enhancements with a focus on personalized solutions. The website is built on the Shopify platform using the Dawn theme, indicating a modern and scalable technical infrastructure. The site is well-structured, mobile-optimized, and includes essential business information such as contact email and phone number. Security posture is solid with HTTPS enforced and use of hCaptcha for form protection, though some security headers could be improved. Privacy compliance is partially addressed with a privacy policy present but lacks explicit cookie consent mechanisms. Overall, the site presents a professional and trustworthy front for a small local business in the real estate-related niche of grave site services.

A

Apkureskatli.lv - интернет магазин отопления

apkureskatli.lv

46

Apkureskatli.lv is an e-commerce website specializing in heating systems and related products, targeting primarily Latvian and Lithuanian markets. The site offers a variety of heating boilers, water heaters, radiators, burners, heat pumps, and air conditioning units, along with services such as repair requests and product comparisons. The business model is retail-focused, leveraging an online platform to reach consumers and businesses interested in heating solutions. The website demonstrates moderate digital maturity with a professional design, clear navigation, and mobile optimization.

Energynet is a Latvia-based software development and IT solutions company established in 2001. It offers a broad range of services including custom software development, outsourcing, DevOps, QA, UX/UI design, and IT consulting. The company targets enterprises and startups globally, with a presence in over 150 countries and a portfolio of more than 1,000 completed projects. Their technical infrastructure is built on WordPress CMS with modern JavaScript libraries and Google services integration. Security measures include HTTPS and Google reCAPTCHA v3, but lack explicit security headers and a published security policy. The website is professionally designed, mobile-optimized, and includes a cookie consent mechanism, though it lacks a clear privacy policy and terms of service pages. Overall, Energynet presents as a credible and established IT service provider with room for improvement in security and privacy transparency.

D

DTF Factory

dtffactory.pro

49

DTF Factory is a newly established small business specializing in UV DTF printing technology, offering durable and vibrant stickers and transfers for various surfaces. The company targets businesses, artists, and creative projects, positioning itself as a quality-focused manufacturer in Latvia. The website is built on WordPress with Elementor and includes modern SEO and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA protection, but lacks advanced headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve security and compliance transparency.

P

ParkingBox

parkingbox.lv

41

ParkingBox is a Latvian small business specializing in metal storage boxes and custom storage solutions, targeting residential property owners and real estate developers. The website is built on a modern WordPress platform using WooCommerce and Elementor, indicating a mature digital infrastructure suitable for e-commerce. The site employs standard tracking and advertising technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Google AdSense. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. WHOIS data could not be retrieved due to query limits, limiting domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

C

CakeBreak - bezglutēna, bezlaktozes tortes ikvienam

cakebreak.lv

55

The website www.cakebreak.lv appears to be a small-scale bakery or cake-related business hosted on the Wix platform. The site integrates Google Tag Manager and Google Analytics for tracking but lacks visible business descriptive content, contact information, and formal policies such as privacy or cookie policies. The technical infrastructure is standard for Wix-hosted sites, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. The absence of WHOIS data due to query limits restricts domain legitimacy verification, impacting trust assessment. Overall, the site presents a basic online presence with room for improvement in transparency, compliance, and security.