Security Directory

A

Associacio de Naturalistes de Girona

itinerarisnaturalistes.org

60

The website itinerarisnaturalistes.org is a non-profit project managed by the Associacio de Naturalistes de Girona, focused on providing detailed natural itineraries and promoting protected natural spaces in the Girona province of Spain. The site targets nature enthusiasts and hikers interested in exploring regional natural heritage. The business model is informational and community-oriented, leveraging digital tools like the Wikiloc app for route discovery. The domain registration data is consistent with the organization's identity and location, supporting legitimacy. Technically, the website is built on WordPress using Elementor and JetEngine plugins, with Yoast SEO for optimization. The site is hosted likely by web24.cat, uses HTTPS, and includes a GDPR cookie compliance plugin, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, HTTPS is properly configured, but no advanced security headers were detected, and DNSSEC is not enabled. There is no published privacy policy or security policy, and no vulnerability disclosure or security.txt file is present. Cookie consent mechanisms are implemented, but contact information and incident response channels are not explicitly provided. Overall, the website is trustworthy and professional for its niche, but improvements in privacy compliance, security headers, and transparency about incident response would enhance its security posture and user trust.

Themesvila is a specialized digital marketplace focused on providing premium and free WordPress themes and plugins. Established in 2016, it caters primarily to WordPress users, digital agencies, and businesses seeking customizable website solutions. The platform offers a variety of products including themes for different industries and plugins to extend website functionality, supported by custom development and installation services. The website demonstrates a professional and user-friendly design with clear navigation and a focus on customer support and satisfaction.

F

Freiraum Fichtelgebirge

freiraum-fichtelgebirge.de

49

Freiraum Fichtelgebirge is a regional initiative focused on promoting the Fichtelgebirge region in Germany through community engagement, innovation, and support for local businesses. The website serves as a hub for news, events, and stories about local makers and projects, targeting residents, visitors, and entrepreneurs. It positions itself as a collaborative platform fostering sustainable development and smart city projects. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and accessibility enhancements. Hosting is provided by netcup, a reputable German hosting provider. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. The site integrates analytics and marketing tools responsibly, maintaining good privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for its audience and purpose.

I

Information centre Karlovy Vary

karlovyvary.cz

47

The website www.karlovyvary.cz is the official tourist information portal for the Karlovy Vary region in the Czech Republic. It provides comprehensive information about local spas, hotels, health care tourism, cultural events, and sightseeing opportunities. The site targets tourists and visitors seeking detailed travel and accommodation options in the region. It operates as a government or municipal tourism promotion entity, offering curated packages and official contact points. Technically, the site is built on Drupal 7 CMS, utilizing common JavaScript libraries such as jQuery and Google Analytics for tracking. The site is served over HTTPS with a good SSL configuration, though no advanced security headers were detected. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, indicating a reasonable level of privacy compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further. The site lacks explicit security or incident response policies publicly available, which could be improved. Overall, the website presents a professional and trustworthy front for regional tourism, with good content quality and user experience. Strategic improvements in security headers, WHOIS transparency, and mobile optimization would enhance its security posture and compliance standing.

P

Packaging News / emap, Metropolis International Group Ltd

ukpackagingawards.co.uk

62

The UK Packaging Awards 2025 website serves as a professional platform for the UK's leading packaging industry awards event, celebrating two decades of innovation and excellence. The site targets packaging professionals, manufacturers, and sponsors, providing event details, finalist announcements, and opportunities for engagement. The business is positioned as a key industry player with a strong history and reputable backing by Metropolis International Group Ltd. Technically, the site leverages a modern event management platform (Evessio), integrates multiple analytics and marketing tools, and hosts assets on AWS S3, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is basic but present, with clear cookie consent and privacy policy pages. Overall, the site is trustworthy, well-branded, and professionally maintained, supporting its role as a flagship industry event.

E

emap Publishing Limited

environmentalpackagingawards.co.uk

62

Environmental Packaging Live 2025 is a UK-based event focused on sustainable packaging, organized by emap Publishing Limited. The event includes a summit, awards, and networking opportunities, targeting professionals and organizations in the packaging and sustainability sectors. The website is professionally designed, content-rich, and provides clear contact and event information. Technically, it uses a modern event management platform (Evessio) hosted on AWS, with multiple analytics and marketing integrations including Google Analytics, Adobe Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS, CSRF tokens, and reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant at a basic level. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

The website at venus.metropolis.co.uk is a WordPress multisite installation with a disabled registration page. The site title 'AWS Multisites' and minimal description 'Just another WordPress site' indicate a placeholder or development environment rather than a fully operational business website. The domain venus.metropolis.co.uk is a subdomain under metropolis.co.uk and is not independently registered, as confirmed by the WHOIS raw data indicating registration failure due to Nominet UK naming rules. This suggests the site is part of a larger domain infrastructure rather than a standalone entity. Technically, the site uses WordPress 6.8.1 with the Twentytwelve theme and includes the Yoast SEO plugin. It loads jQuery and Google Fonts externally. The site lacks advanced security headers and does not present any forms for user interaction since registration is disabled. SEO metadata is minimal, and accessibility and mobile optimization are basic. The site is served over HTTPS, but no detailed SSL configuration data is available. From a security perspective, the absence of security headers and the disabled registration form reduce the attack surface but also indicate incomplete site setup. No privacy, cookie, or terms of service policies are present, which is a compliance gap. The WHOIS data absence and domain registration failure reduce trustworthiness for standalone domain claims. No signs of WAF or blocking mechanisms were detected, and the content is accessible. Overall, the site appears to be a basic multisite WordPress setup, likely for internal or development use, with minimal business or security maturity. Strategic recommendations include implementing security headers, adding compliance policies, enabling or removing registration functionality, and clarifying business identity and contact information to improve trust and compliance.

M

MPI Media Ltd

irishhealthcareawards.ie

56

The Irish Healthcare Awards 2025 website is a professionally designed platform managed by MPI Media Ltd, focusing on recognizing excellence and innovation in the Irish healthcare sector. The event is well-established with a strong market position and offers key services including awards management, sponsorship opportunities, and sector networking. The website leverages a modern technical infrastructure including Evessio CMS, multiple analytics platforms, and third-party integrations to deliver a comprehensive user experience. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, improvements are needed in DNS security and HTTP security headers. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site is trustworthy and serves its target audience effectively.

P

Palec.net

palec.net

52

Palec.net is a Czech Republic based marketing, graphic design, web development, e-commerce, and print production studio with over 20 years of team experience. The company offers a comprehensive suite of services including marketing strategies, advertising campaigns, website and e-shop development, SEO, photography, audio/video production, and print services. The website is professionally designed, mobile optimized, and uses modern technologies such as WordPress, Google Tag Manager, and WP Rocket for performance and analytics. Security posture is good with HTTPS and some security best practices, though explicit security policies and vulnerability disclosures are absent. The domain WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy. Overall, the website presents a credible and professional business with strong content quality and technical implementation but would benefit from improved privacy compliance and clearer domain registration information.

M

MC Research & Analytics

iptechinsider.com

50

IP Tech Insider is a specialized quarterly newsletter and IP research platform operated by MC Research & Analytics, focusing on intellectual property technology, patent trends, and case studies primarily targeting IP professionals and technology companies. The website leverages a WordPress CMS with Elementor and integrates various plugins for content presentation and user engagement, including podcasting and anti-spam measures. The technical infrastructure is modern and moderately optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and anti-spam protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and transparency.

Colgate-Palmolive Italy operates as a regional corporate website for the global consumer goods giant Colgate-Palmolive. The site provides comprehensive information about the company's products, sustainability initiatives, innovation, and corporate governance. It targets B2C consumers and stakeholders interested in the brand and its corporate responsibility. The website is built on Adobe Experience Manager, leveraging modern web technologies and content management practices, ensuring a professional and responsive user experience. Security posture is strong with HTTPS, security headers, and a cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence consistent with a large enterprise consumer goods company.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.sk

57

Ahifi.sk is a well-established Slovak e-commerce retailer specializing in automotive audio equipment and accessories, including car radios, speakers, amplifiers, and subwoofers. The company has a strong regional presence with a history of approximately 20 years, supported by exclusive distribution partnerships and a comprehensive product catalog. The website demonstrates a mature digital infrastructure with modern tracking and marketing tools, responsive design, and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Kimsoft Media AB

kimsoft.se

41

Kimsoft Media AB is a small, local web agency based in Sweden specializing in WordPress website development and web design services. The company targets local businesses and individuals in Kungshamn and Örnsköldsvik, offering affordable and professional web solutions. The website reflects a consistent brand identity and provides a good user experience with modern design and mobile optimization. Technically, the site is built on WordPress using Elementor and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The domain is privacy protected but shows a stable registration history consistent with the business age. Security posture is adequate with HTTPS enabled and domain status locks, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

M

MAS Naděje o.p.s.

masnadeje.cz

50

MAS Naděje o.p.s. is a Czech non-profit organization dedicated to community-led local development, primarily serving rural areas within the Ústecký region. The website provides comprehensive information about the organization's structure, projects, strategies, and funding opportunities, positioning it as a key regional player in managing EU funds and supporting local initiatives. The content is well-organized and targeted towards local municipalities, community groups, and project applicants. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR regulations. Security posture is moderate, with HTTPS usage and cookie consent but lacking visible security headers or explicit incident response information. The absence of WHOIS data reduces domain trust slightly, but the website content and structure strongly indicate legitimacy. Overall, the site is professional, informative, and safe for general audiences.

P

Plzeňské městské dopravní podniky, a.s.

parkingplzen.cz

45

Parking Plzeň is a municipal parking management service operated by Plzeňské městské dopravní podniky, a.s., responsible for organizing parking in the city center of Plzeň. The website provides information about parking houses, paid parking zones, and parking cards, targeting residents and visitors seeking convenient parking solutions. The business model focuses on public service and urban traffic management, positioning itself as the official parking authority in Plzeň. The site offers downloadable official documents and integrates with public transport services for combined mobility solutions. Technically, the website uses a modern technology stack including jQuery, Bootstrap 4, Video.js, and Google Analytics, managed via niCMS. It is mobile-optimized with good SEO practices and uses HTTPS with a cookie consent mechanism, reflecting a moderate to good level of digital maturity. However, the absence of a privacy policy and terms of service pages indicates areas for compliance improvement. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details suggest a legitimate municipal service. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance and transparency regarding domain registration and security policies.

E

emap, Metropolis International Group

elektraawards.co.uk

60

The Elektra Awards 2025 website represents a well-established event platform celebrating innovation and excellence in the global electronics industry. Hosted by Electronics Weekly, part of the reputable emap, Metropolis International Group, the site targets industry professionals, startups, and innovators with a clear focus on awards, partnerships, and event bookings. The business model revolves around event organization, sponsorship, and industry recognition, positioning itself as a key player in the electronics sector within the UK. Technically, the website leverages a modern tech stack including Google Tag Manager, Adobe Analytics, Facebook Pixel, and LinkedIn Insight Tag, hosted on AWS S3 with the Evessio event management platform. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for forms, and integrates multiple analytics and marketing tools with user consent. While explicit security headers are not fully visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure or incident response contacts suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the WHOIS data is unavailable due to a domain lookup error. This discrepancy does not detract significantly from the site's legitimacy given its association with a known parent company and consistent branding. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and improving accessibility features to further strengthen trust and compliance.

N

Nursing Times Jobs

nursingtimesjobs.com

62

Nursing Times Jobs operates as a specialized online job board focused on nursing and healthcare recruitment within the United Kingdom. The platform offers job search capabilities, recruiter profiles, and career fair information, positioning itself as a niche player in healthcare employment services. The website is professionally designed, mobile-optimized, and integrates modern web technologies including Drupal CMS and Google advertising and analytics tools. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. However, the absence of WHOIS registration data raises questions about domain registration transparency, which slightly impacts overall trustworthiness. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the lack of explicit security policies and incident response contacts suggests room for improvement. Overall, the site presents a credible and functional service for healthcare job seekers and recruiters, with recommendations to enhance transparency and security documentation.

R

Retail Jeweller Jobs

retailjewellerjobs.com

61

Retail Jeweller Jobs operates as a specialized UK job board focusing on career opportunities within the jewellery retail sector. The platform provides job listings, CV uploads, and recruitment services tailored to both job seekers and employers in this niche market. The website is professionally designed with consistent branding and clear navigation, targeting a UK audience interested in jewellery retail employment. Technically, the site is built on the Drupal CMS and leverages modern web technologies including Google Tag Manager, Google Analytics, Google Maps API, and DoubleClick for advertising. The site demonstrates good mobile optimization and accessibility features, although performance is moderate. The presence of cookie consent and privacy policies indicates attention to GDPR compliance. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks visible security headers which could enhance protection. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional online presence. Overall, the website presents a trustworthy and functional platform for jewellery retail recruitment but should address WHOIS transparency and enhance security headers to improve trust and compliance.

H

Hill's Retail Order

hillsretailorder.com

69

Hill's Retail Order operates a retail ordering platform with a website titled 'Hill's Retail Order'. The domain is well-established since 2000, indicating a mature presence. However, the website content is minimal with no visible business descriptions, contact information, or user-facing content in the provided HTML. The technical infrastructure includes modern JavaScript frameworks such as Angular, usage of Font Awesome for icons, and performance monitoring via Boomerang. Hosting appears to leverage Akamai CDN services. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are absent, and no contact or business verification information is present, limiting trust and compliance confidence. Overall, the site appears functional but lacks transparency and comprehensive user information.

E

Evonik

evonik.de

66

Evonik is a global leader in specialty chemicals, providing innovative chemical solutions across multiple industrial sectors. The company targets business clients and investors with a comprehensive and professionally designed website that reflects its market position and commitment to sustainability. Technically, the site leverages Adobe Experience Manager, modern JavaScript frameworks, and robust privacy and tracking tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, content security policies, and cookie consent mechanisms, though some improvements in incident response transparency and security headers are recommended. Overall, the site presents a trustworthy and professional corporate image, though the lack of WHOIS domain registration data introduces some uncertainty about domain legitimacy.

S

Seiler Instrument & Mfg Company, Inc.

seilergeodrones.com

68

Seiler GeoDrones is a specialized division of Seiler Instrument & Mfg Company, Inc., providing dedicated geospatial drone solutions with over 75 years of legacy in precision measurement instruments. The company targets professional sectors such as agriculture, construction, inspection, mapping, mining, and public safety, offering a comprehensive portfolio including drones, sensors, software, training, and support. Their market position is strengthened by partnerships with leading drone and technology brands, positioning them as a trusted provider in the geospatial technology space. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce capabilities and Gravity Forms for data collection. It integrates multiple third-party services including PayPal, Stripe, and Google Analytics, reflecting a mature digital infrastructure. The site is responsive and optimized for mobile devices, with good SEO and accessibility practices, though some improvements in accessibility and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and uses secure payment gateways, with no obvious vulnerabilities detected in the content. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly present, and cookie consent mechanisms are lacking, which could pose compliance risks. The absence of WHOIS data for the domain suggests privacy protection or recent registration, which slightly impacts trust but does not detract from the overall legitimacy given the strong business presence and branding. Overall, Seiler GeoDrones presents a professional, secure, and business-focused online presence with room for minor improvements in privacy compliance and security header implementation. The business is well-positioned in its niche with a solid technical foundation and trusted partnerships.

S

Seiler Design Solutions

seiler-ds.com

67

Seiler Design Solutions is a technology-focused company specializing in providing unbiased and informative solutions related to Autodesk software. The company targets clients who use Autodesk products, offering services such as software sales, consulting, training, and support. The website reflects a professional and consistent brand image, supported by a moderate-sized business presence primarily in the United States. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and tracking tools such as Google Analytics and Stripe for payment processing. The site is well-structured, mobile-optimized, and SEO-friendly, although some privacy compliance elements like explicit privacy and cookie policies are not detected in the provided content. Security posture is generally good with HTTPS enabled, but could be improved by adding explicit security headers and conducting regular vulnerability assessments. The WHOIS data is missing or indicates the domain may not be registered, which is inconsistent with the active website presence and should be investigated further. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and WHOIS data clarity.

S

Seiler Medical

seilermedical.com

59

Seiler Medical is a well-established company specializing in high-quality medical optical instruments such as surgical dental microscopes, colposcopes, ENT devices, and related accessories. With over 80 years of industry presence, the company targets medical professionals requiring precision optics and offers a comprehensive product line alongside services like repair, training, and demos. The website reflects a mature digital presence built on WordPress with modern technologies and SEO optimizations, providing a professional user experience with rich multimedia content and clear navigation. Security posture is generally good with HTTPS and form protections, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be further investigated to ensure full trustworthiness.

B

Bidding Fox technologies, s.r.o.

pricing-fox.sk

65

Pricing Fox, operated by Bidding Fox technologies, s.r.o., is a specialized SaaS provider offering automated pricing optimization tools for e-commerce businesses primarily in Slovakia and the Czech Republic. The platform integrates with multiple popular e-shop systems and leverages the Mergado platform to dynamically adjust product prices, helping clients improve competitiveness and profitability. The website is professionally designed, content-rich, and provides clear contact information, social media presence, and customer testimonials, indicating a mature and trustworthy business. Technically, the website is built on Drupal 11, uses modern analytics and error tracking tools such as Google Analytics, Google Tag Manager, Plausible Analytics, and Sentry, and implements a comprehensive cookie consent mechanism via CookieHub. Hosting is managed through Gigaserver.cz with DNSSEC enabled, ensuring good DNS security. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site enforces HTTPS, uses DNSSEC, and employs cookie consent best practices. However, it lacks explicit published privacy policies, terms of service, and security policies, which are recommended for compliance and trust. No vulnerabilities or suspicious content were detected. Overall, the security posture is good but can be improved with clearer policy disclosures and additional security headers. The overall risk assessment is low, with strong legitimacy indicators from WHOIS data and consistent business information. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and enhancing security headers. These steps will improve compliance, user trust, and security maturity.

B

Bidding Fox technologies, s.r.o.

bdfx.cz

59

Bidding Fox technologies, s.r.o. operates the Bidding Fox platform, an automated bidding tool designed for e-commerce businesses using Czech and Slovak product search engines such as Heureka.cz and Zboží.cz. The company offers a subscription-based SaaS product integrated with the Mergado platform, targeting online retailers seeking to optimize their advertising spend and increase sales efficiency. The website reflects a professional and consistent brand presence with clear business information and certifications, positioning Bidding Fox as a trusted player in the bidding automation market within the Czech Republic. Technically, the website is built on Drupal CMS with modern front-end frameworks like Bootstrap and jQuery. It integrates multiple third-party services including Google Analytics, Google Tag Manager, CookieHub for cookie consent, and MailerLite for newsletter management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices such as explicit security headers are missing, and WHOIS data for the domain is unavailable, which slightly reduces transparency. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The presence of hidden suspicious external links in the HTML is a concern and should be investigated further. Overall, the security posture is moderate with room for improvement in headers and policy disclosures. The overall risk assessment is moderate with a trustable business presence but some transparency and security gaps. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and investigating suspicious hidden links to maintain trust and compliance.

E

Embraco

refrigerationclub.com

67

Embraco is a globally recognized manufacturer and technology provider specializing in refrigeration solutions for residential and commercial markets. As part of Nidec Global Appliance, Embraco offers a broad portfolio including compressors, condensing units, and integrated electronic components, supported by active content such as blogs, videos, and technical resources targeting refrigeration professionals worldwide. The website demonstrates a solid market position with consistent branding and professional content aimed at industry stakeholders. Technically, the website is built on WordPress with modern plugins like Yoast SEO, Contact Form 7, and Ajax Search Lite, ensuring good SEO and user experience. The site is mobile optimized and uses HTTPS, though some security headers are missing. The presence of marketing tools like RD Station indicates active user engagement and lead generation efforts. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and trust. The absence of WHOIS data limits domain registration verification, but the professional presentation and known brand association mitigate concerns. Overall, the website is a well-maintained digital asset supporting Embraco's business objectives, with room for improvement in privacy compliance and security transparency to enhance trust and regulatory adherence.

D

Deutsches Institut für Normung e.V. (DIN)

din.de

73

The Deutsches Institut für Normung e.V. (DIN) operates as Germany's independent platform for standardization and norms, serving as a key partner to industry, research, and society. The organization supports market readiness of innovative solutions through standardization, focusing on digitalization, research projects, and broad societal impact. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting a diverse audience including businesses, public sector, and consumers. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics and captcha services, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supporting DIN's authoritative market position.

D

DGZfP e.V.

icndt.org

54

The International Committee for Non-Destructive Testing (ICNDT) is a well-established non-profit organization dedicated to advancing the science and practice of Non-Destructive Testing globally. Registered in Germany and operating internationally, ICNDT collaborates with individual NDT societies and continental groupings to promote qualification, certification, and research in the NDT field. The website serves as a portal for information, resources, journals, guides, and event calendars relevant to NDT professionals and organizations worldwide. Technically, the website employs a modern but straightforward technology stack including jQuery, Slick Carousel, Google Analytics, and Google Custom Search Engine. It is hosted with a reputable registrar and DNS provider, uses HTTPS, and is mobile optimized with good SEO practices. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. However, it lacks advanced security headers, a published security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is addressed with a GDPR-compliant cookie policy and privacy policy, though contact information is limited to a contact page without explicit emails or phone numbers. Overall, the website is professional, trustworthy, and serves its niche audience effectively. The risk level is low, but strategic improvements in security posture and transparency would enhance trust and compliance.

H

Hobbytec

hobbytec.uk

55

Hobbytec is a manufacturer and supplier specializing in aluminium winter gardens, roofing, pergolas, carports, and photovoltaic systems. The company positions itself as a leading manufacturer in the Czech Republic with a strong showroom presence and a focus on custom manufacturing tailored to customer needs. The website targets homeowners and businesses seeking quality home and garden equipment solutions. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and Google reCAPTCHA, hosted on a proprietary CMS platform by Shean s.r.o. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and explicit incident response policies. Privacy compliance is basic with cookie consent and privacy policy present. The WHOIS data for the www subdomain is unavailable due to domain registration errors, which raises some legitimacy concerns, though the website content and branding are consistent and professional. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security best practices and WHOIS registration clarity.

H

Hobbytec

hobbytec.at

56

Hobbytec is a leading manufacturer specializing in aluminum winter gardens, pergolas, carports, and photovoltaic solutions primarily serving the Austrian and broader European markets. The company emphasizes custom, high-quality, and functional outdoor living solutions with a strong focus on design and customer-specific production. Their business model includes direct production, sales, and turnkey project realization including transport and installation services. The website reflects a mature digital presence with multiple localized sister sites across Europe, indicating a well-established regional footprint. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google reCAPTCHA, and SVG icons, hosted on a custom CMS platform by Shean s.r.o. The site is mobile-optimized and demonstrates good SEO and accessibility basics. However, some security headers are not evident from the data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, and implements a cookie consent banner compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of public WHOIS data due to privacy protection is noted but does not detract significantly from the site's legitimacy given the professional business presentation and contact transparency. Overall, Hobbytec presents a trustworthy and professional online presence with a solid business foundation in the home and garden sector. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

H

Hobbytec

hobby-tec.de

56

Hobbytec is a medium-sized manufacturer specializing in aluminum garden structures such as winter gardens, pergolas, carports, and photovoltaic solutions. The company operates primarily in Germany with a strong presence across several European countries through partner sites. Their business model focuses on custom-made, turnkey solutions including transport and installation services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google reCAPTCHA to enhance user experience and security. Hosting appears to be managed through Czech providers, consistent with the company's regional footprint. Security posture is solid with HTTPS and spam protection on forms, though some security headers and policies are missing. Privacy compliance is well addressed with GDPR-consent mechanisms and a privacy policy. Overall, the site is trustworthy and safe for general audiences.

H

Hobbytec

hobbytec.si

52

Hobbytec is a medium-sized company specializing in the manufacturing and sale of aluminum winter gardens, pergolas, carports, and other garden and home outdoor structures. Established in 2015, it holds a leading market position in Slovenia and surrounding regions, offering custom-made solutions with a focus on quality and design. The website reflects a professional digital presence with multilingual support and clear navigation. Technically, the site uses a proprietary CMS platform by Shean s.r.o., integrates Google Tag Manager and reCAPTCHA for analytics and security, and is hosted on vshosting.cz. Security posture is solid with HTTPS and spam protection, though security headers are not explicitly detected. Privacy compliance is evident with GDPR-aligned cookie consent and privacy policy pages. Contact information is comprehensive, including multiple sales centers with physical addresses and verified emails and phone numbers. Overall, the website is trustworthy, well-maintained, and business credible.

H

Hobbytec

hobbytec.hr

53

Hobbytec is a specialized manufacturer focused on producing winter gardens, carports, pergolas, and modular houses primarily serving the Croatian and Czech markets. The company emphasizes custom production tailored to customer needs, supported by physical showrooms and a broad product range. Their market position is strong within their niche, with multiple regional sister sites indicating a well-established presence in Central Europe. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, and responsive design, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though some security headers and policies could be improved. Privacy compliance is addressed with cookie consent and a privacy policy, but lacks explicit terms of service and incident response information. Overall, the website is professional, trustworthy, and well-aligned with the business's operational footprint.

H

Hobbytec

hobbytec.hu

45

Hobbytec is a medium-sized manufacturer specializing in aluminum winter gardens, pergolas, carports, and photovoltaic terrace solutions primarily serving the Hungarian and Central European markets. The company operates multiple regional sister websites indicating a broad geographic presence. Their business model focuses on custom manufacturing and direct sales, emphasizing quality, design, and functionality. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Analytics, and reCAPTCHA for security and analytics, hosted on a proprietary CMS platform. Security posture is solid with HTTPS enforcement and form protections, though formal security policies and incident response information are absent. Privacy compliance is addressed with GDPR-consent mechanisms and cookie banners. Overall, Hobbytec presents a trustworthy and professional online presence with room for enhanced security transparency and accessibility improvements.

H

Hobbytec

hobbytec.bg

45

Hobbytec is a medium-sized manufacturer specializing in aluminum winter gardens, pergolas, carports, modular houses, and photovoltaic solutions. The company operates multiple country-specific websites and showrooms, positioning itself as a leading player in the European home and garden equipment market. Their business model focuses on custom production and direct sales supported by physical showrooms and an online presence. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, with a custom CMS platform. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Security posture is solid with HTTPS and form protections, but lacks advanced security headers and incident response disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact information and cookie consent mechanisms.

H

Hobbytec

hobbytec.pl

52

Hobbytec is a medium-sized company specializing in the manufacture and sale of aluminum winter gardens, pergolas, garage carports, and terrace roofing solutions. The company operates primarily in Poland and neighboring Central European countries, with multiple regional partner domains indicating a broad market presence. Their business model focuses on providing high-quality, functional, and design-oriented outdoor home products with an emphasis on customer service and showroom experiences. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA for security. The site is well-structured, mobile-optimized, and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and form protections, but lacks some advanced security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the overall digital footprint and business information suggest a legitimate and professional operation.

H

Hobbytec

hobbytec.sk

59

Hobbytec is a medium-sized Slovak company specializing in the manufacturing and installation of aluminum winter gardens, pergolas, car shelters, and glazing solutions for homes and gardens. Established in 2010, it holds a leading market position in Slovakia and the Czech Republic, supported by a large showroom and direct customer engagement. The company emphasizes quality, design, and turnkey installation services, targeting homeowners and businesses seeking premium outdoor living solutions. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, hosted on a CMS platform named Shean. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS, security headers, and anti-bot measures, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with comprehensive cookie and privacy policies aligned with GDPR. Overall, the website reflects a professional and trustworthy business with moderate to good digital maturity.

D

Dovolená s nápadem

dovolenasnapadem.cz

53

Dovolená s nápadem is a Czech e-commerce website specializing in selling travel magazines and packages focused on family-friendly trips and cycling tours within the Czech Republic and neighboring countries. The site offers a variety of printed and digital magazines, including curated bundles, targeting families and tourists seeking well-planned travel experiences. The business operates on the Shoptet platform, leveraging modern web technologies and standard marketing and analytics tools such as Google Analytics and Facebook SDK. The website is well-designed with good navigation, mobile optimization, and clear product presentation. Privacy and cookie policies are present and comply with GDPR requirements, including a consent mechanism. However, no direct company contact emails or phone numbers are visible, with contact primarily via forms.

T

TV MORAVA, s. r. o.,

tvmorava.cz

38

TV MORAVA, s. r. o., operates the website www.tvmorava.cz, a regional media outlet delivering news, videos, TV programs, and articles focused on the Olomouc region of the Czech Republic. The site targets a general audience interested in local news and events, providing multimedia content and interviews. The business model centers on media broadcasting and regional news publishing, positioning itself as a key local information source. The company maintains an active social media presence across Facebook, Instagram, Twitter, and YouTube, enhancing audience engagement and brand visibility. Technically, the website is built on WordPress CMS with a modern tech stack including Yoast SEO, Google Analytics, and various performance and UI plugins. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. The infrastructure supports a responsive design and integrates common web technologies such as jQuery and FontAwesome. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site enforces HTTPS with a well-configured SSL certificate and includes a cookie consent mechanism indicating GDPR awareness. Nonetheless, the absence of security headers and explicit privacy and terms of service pages represents a compliance gap. No WHOIS data is available, which reduces domain trustworthiness and complicates verification of registrant legitimacy. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, www.tvmorava.cz is a legitimate regional media website with good content quality and technical foundation but would benefit from improved security practices and clearer privacy compliance documentation. The lack of WHOIS transparency is a concern that should be addressed to enhance trust and credibility.

M

Město Holešov

holesov.cz

50

Město Holešov operates an official municipal website serving as the primary digital portal for residents, visitors, and local businesses. The site provides comprehensive information about the town's administration, cultural events, public services, and practical resources. It positions itself as a trusted source for municipal news, event calendars, and administrative contacts, supporting community engagement and transparency. Technically, the website employs a modern JavaScript stack including jQuery, Owl Carousel, and Google services such as reCAPTCHA and Tag Manager. It supports multilingual access via Google Translate and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized with good navigation and content structure, although some security headers are missing. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks explicit security policies and incident response contacts. The absence of WHOIS data limits domain registration transparency, though the site content and structured data strongly indicate legitimacy as a municipal government portal. Overall, the website is professionally designed, content-rich, and trustworthy for its intended audience. Strategic improvements in security headers and transparency could further enhance its security posture and user trust.

C

Centrála cestovního ruchu Olomouckého kraje, s.r.o.

centralaok.cz

57

Centrála cestovního ruchu Olomouckého kraje, s.r.o. is a regional tourism promotion entity focused on managing and marketing the Olomoucký region in the Czech Republic. The website serves as an information hub for tourists, event planners, media, and regional partners, offering details on campaigns, promotional materials, and services such as the convention bureau and film office. The business operates primarily in the hospitality and government-related sectors, positioning itself as a key regional tourism authority. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Lightbox, and Owl Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a responsive design and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate, with room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and vulnerability disclosure mechanisms. No exposed sensitive data or vulnerabilities were detected in the content. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and alignment with the domain name suggest legitimacy. Overall, the website presents a trustworthy and professional front for regional tourism promotion, with recommendations to enhance security headers, accessibility, and formalize security policies to further strengthen its posture.

2

21stoleti.cz – VĚDA, KTERÁ VÁS BUDE BAVIT

21stoleti.cz

49

21stoleti.cz is a well-established Czech online science magazine founded in 2003, offering a broad range of articles covering science, nature, history, medicine, technology, and space. The website targets Czech-speaking audiences interested in educational and scientific content. It operates on a WordPress CMS platform, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and OneSignal for push notifications. The site is hosted and registered through Active24, a reputable provider in the Czech Republic. Security posture is solid with HTTPS enforced and cookie consent managed via Didomi CMP, although additional security headers could enhance protection. Privacy compliance is moderate due to the absence of an explicit privacy policy and terms of service on the main site. The site integrates advertising and tracking technologies from known providers such as Google DoubleClick and Gemius, with transparent user consent mechanisms. Overall, the website presents a professional and trustworthy media outlet with good technical infrastructure and content quality.

T

TT HOLDING, a.s.

ablakok-raktarrol.hu

46

The website ablakok-raktarrol.hu operates as an e-commerce platform specializing in the retail of plastic windows, balcony doors, and entrance doors primarily targeting Hungarian customers and the surrounding region. It is operated by TT HOLDING, a.s., a company with a strong regional presence and a significant inventory allowing for immediate delivery of common window and door sizes. The site offers a user-friendly custom configurator for bespoke products, enhancing customer engagement and service flexibility. The business model combines direct sales from stock with made-to-order products, catering to both individual consumers and professional builders. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google reCAPTCHA v3, and Smartsupp live chat, indicating a mature digital infrastructure focused on user experience and security. The site is mobile-optimized with good SEO practices and accessibility features, although some security headers could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response information are absent, which could be enhanced to improve transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and user-friendly platform with solid business credibility and compliance. Strategic improvements in security headers and transparency policies would further strengthen its posture and customer confidence.

T

TT HOLDING, a.s.

fenster-sofort.de

54

Fenster-Sofort.de is an established German e-commerce retailer specializing in the sale of plastic windows, balcony doors, entrance doors, and related accessories. The company operates with a strong market presence across five countries, supported by a large inventory and a user-friendly online configurator that allows customers to customize products. Their business model focuses on direct online sales with fast delivery and technical support, targeting both end consumers and professional builders. The website demonstrates a high level of digital maturity, employing modern web technologies, responsive design, and comprehensive SEO practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies. Overall, the site projects professionalism and trustworthiness, supported by certifications and customer testimonials.

T

TT HOLDING, a.s.

fenster-sofort.at

52

Fenster-Sofort.at is an established e-commerce retailer specializing in plastic windows, balcony doors, and entrance doors primarily serving the Austrian market and neighboring countries. The company offers a broad product catalog including ready stock items and custom-configured products via an online configurator. With over 73,000 orders completed across five countries and certifications such as Trusted Shops and Trust Ecommerce Europe, the business demonstrates a strong market presence and customer trust. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA v3, and cookie consent mechanisms, ensuring a secure and user-friendly experience. Security posture is robust with HTTPS enforced and no evident vulnerabilities, though explicit security headers could be further confirmed and enhanced. Privacy compliance is well addressed with comprehensive policies and user consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

T

TT HOLDING, a.s.

skladove-okna.sk

50

Skladove-okna.sk is a professional e-commerce platform operated by TT HOLDING, a.s., specializing in the sale of plastic windows, doors, and related accessories. The company targets builders, installers, and DIY customers, offering both stock and custom-configured products with fast delivery. The website demonstrates a strong market position with presence in multiple countries and a large product catalog supported by a user-friendly configurator tool. Technically, the site uses modern web technologies including Google Analytics, Microsoft Clarity, and Google reCAPTCHA, ensuring good performance and privacy compliance. Security posture is solid with HTTPS and anti-bot protections, though explicit security headers could be improved. Overall, the site is trustworthy, well-branded, and professionally maintained.

A

Amber Beverage Group

amberbev.com

59

Amber Beverage Group is a well-established global spirits company with a diverse portfolio of alcoholic beverage brands including vodka, tequila, whiskey, and gin. The company operates internationally with a significant presence in the Baltic States, Europe, Australia, and North America, employing over 1,600 people. Their business model encompasses production, bottling, marketing, distribution, export, and retail of both owned and third-party beverage brands. The website reflects a professional and consistent brand image with clear product and corporate information, targeting adult consumers and business partners worldwide. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and includes an age verification gate, but lacks visible advanced security headers and published security policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

Hill's Vet is a professional veterinary health resource website operated by Hill’s Pet Nutrition, Inc., a subsidiary of Colgate-Palmolive Company. The site provides veterinary professionals with research, practice management resources, product ordering platforms, and educational content. It targets veterinarians, vet techs, students, and clinic managers primarily in the United States. The website demonstrates a mature digital presence with integrations for identity management, analytics, and consent management, reflecting a strong commitment to user experience and privacy compliance. The content is well-structured, relevant, and professionally presented, supporting the brand's market position as a trusted veterinary resource. Technically, the website is built on Adobe Experience Manager CMS and leverages modern JavaScript libraries and third-party services such as Gigya for customer identity, TrustArc for consent management, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and performs moderately well, although some improvements in security headers and performance monitoring could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, secure login flows, and session management. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain is unusual and warrants further investigation to confirm domain legitimacy. Overall, the security posture is strong but could be enhanced with additional headers and a public vulnerability disclosure policy. The overall risk assessment is low, with the website representing a credible and professional business entity. Strategic recommendations include improving security header implementation, publishing a security.txt file, and enhancing incident response contact visibility to further strengthen trust and compliance.

Hill's Pet Nutrition Italy website represents a well-established global pet nutrition brand operating under the parent company Colgate-Palmolive. The site offers a comprehensive range of pet food products for dogs and cats, supported by educational content and customer engagement features. The business targets pet owners in Italy with a B2C retail model and emphasizes nutritional science and sustainability. Technically, the site is built on Adobe Experience Manager with modern technologies including Google Tag Manager, TrustArc for consent management, and Akamai for CDN services. The website is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are not published. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and aligned with industry best practices.