Security Directory

M

Microsoft Corporation

powerapps.com

74

Microsoft Corporation operates the website providing Power Apps, a component of the Microsoft Power Platform, enabling users to build AI-powered applications for enterprise and professional use. The website is localized in Finnish and targets business users, developers, and IT professionals seeking modern application development tools integrated with AI capabilities. Microsoft holds a dominant market position in enterprise software and cloud services, supported by a broad ecosystem of products and subsidiaries.

V

Virgin Voyages

virginvoyages.com

59

Virgin Voyages operates as a premium adults-only cruise line offering luxury, almost all-inclusive cruise vacations primarily targeting adult travelers seeking unique and boutique cruise experiences. The website reflects a mature digital infrastructure with advanced personalization and A/B testing capabilities, leveraging modern JavaScript frameworks and multiple third-party marketing and analytics tools. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the branding and external references strongly support legitimacy. Overall, the site presents a professional, secure, and user-friendly platform aligned with Virgin Group's standards.

V

Virgin Balloon Flights

virginballoonflights.co.uk

56

Virgin Balloon Flights is a well-established UK-based company specializing in hot air balloon rides and related experience gifts. Positioned as the UK's leading passenger balloon rides operator, the company offers flights from over 100 locations nationwide. Their business model focuses on selling adventure experiences and gift vouchers through a professionally designed and user-friendly website. The company demonstrates strong branding consistency and trust indicators including CAA certification and a long operational history since 1994. Technically, the website employs modern web technologies such as HTMX, Alpine.js, Google Tag Manager, and integrates marketing and analytics tools like Mailchimp and Ahrefs Analytics. The site is mobile-optimized, SEO-friendly, and provides a smooth user experience. While HTTPS is enforced, the site could improve security posture by implementing additional HTTP security headers. From a security perspective, the website shows good practices including secure forms, cookie consent management, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response information is noted. The WHOIS data for the www subdomain is unavailable due to domain naming rules, but the overall legitimacy of the domain and business is supported by consistent branding and contact information. Overall, Virgin Balloon Flights presents a low-risk profile with a strong market position and a mature digital presence. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

Virgin Atlantic Airways Limited is a major UK-based international airline specializing in passenger air travel primarily to the US and other global destinations. The company is part of the Virgin Group and operates with a strong brand presence and a focus on customer experience, including onboard amenities such as food, drinks, entertainment, and WiFi. The website reflects a mature digital presence with modern technologies and excellent design quality. The technical infrastructure leverages Next.js and React frameworks, hosted likely on Akamai's CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

M

Multisistema Riga SIA

ms.lv

55

Multisistema Riga SIA operates the website ms.lv, an established Latvian online retailer specializing in computer hardware, electronics, and related accessories. The company has a strong local presence with a physical store located at KR.VALDEMĀRA IELA 25/4, Rīga, and offers a broad range of products including Apple devices, computer components, and office supplies. The website targets general consumers and businesses seeking technology products in Latvia. The business model is primarily e-commerce with additional service offerings such as technical support and repair services.

E

Europuls.eu

europuls.eu

60

Europuls.eu operates as an online catalog and rating system for European internet resources, providing users with categorized listings and popularity statistics. The website targets European internet users and website owners seeking to discover and evaluate online resources across various sectors. The business model relies on advertising revenue through multiple ad networks and Google Adsense, supported by a GDPR-compliant consent management platform. The site has been operational since at least 2009, indicating a stable presence in its niche market. From a technical perspective, Europuls.eu employs standard web technologies including JavaScript, Google Fonts, and Google Adsense scripts. The site uses HTTPS and integrates a comprehensive consent management platform to comply with GDPR requirements. However, the design and user experience are basic, with moderate mobile optimization and limited accessibility features. Performance is moderate, and SEO practices are basic but present. Security posture is adequate with HTTPS enabled and GDPR consent mechanisms in place, but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the website's claims, registered through a reputable registrar without privacy protection, enhancing trustworthiness. Overall, Europuls.eu presents a functional and compliant online directory service with room for improvement in design, security best practices, and contact transparency. The site is safe for general audiences and does not contain adult or questionable content.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

C

Coinranking B.V.

coinranking.com

61

Coinranking B.V. operates a comprehensive cryptocurrency market data platform providing real-time prices, rankings, and analytics for a wide range of cryptocurrencies. Established in 2017 and based in the Netherlands, the company targets crypto investors, traders, and enthusiasts by offering detailed market insights and API services. The platform is well-positioned in the crypto data market with a medium-sized operation and a consistent brand presence. Technically, the website leverages modern web technologies including the Astro framework, HTMX for dynamic content loading, and integrates with Google Tag Manager and AdButler for analytics and advertising. Hosting is managed via AWS DNS infrastructure, ensuring reliable performance and scalability. The site is fast, mobile-optimized, and accessible with good SEO practices. From a security perspective, the site enforces HTTPS and employs domain transfer protection, but lacks DNSSEC and explicit security headers. No dedicated security policy or incident response information is publicly available, and no vulnerability disclosure program is evident. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and terms of service documentation. Overall, Coinranking demonstrates a mature digital presence with strong content quality and business credibility. Security posture is adequate but could be improved with additional headers and transparency. The site is safe for general audiences and does not contain adult or explicit content.

S

Steiner Optics

steiner-optics.com

72

Steiner Optics is a specialized manufacturer and retailer of high-quality optics products targeting hunting, tactical, marine, and adventure markets. The website presents a professional and consistent brand image with a focus on quality optics equipment. The technical infrastructure is based on Drupal 10 CMS, integrating modern analytics tools such as PostHog and Google Analytics, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enabled and partial security headers, though improvements are recommended for full compliance and protection. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness despite the professional website presentation. No adult or questionable content is present, making the site safe for general audiences.

S

Sweden Abroad

swedenabroad.se

56

Sweden Abroad is an official Swedish government website providing comprehensive information about Sweden's embassies and consulates worldwide. It serves Swedish citizens abroad with travel advice and assistance information, as well as non-Swedish citizens interested in traveling or moving to Sweden. The site is well-positioned as a trusted government resource with a large global footprint through its network of over 100 foreign missions. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and uses privacy-compliant tracking mechanisms, though it could improve by adding explicit security headers and publishing a security policy or vulnerability disclosure. Overall, the website demonstrates a strong security posture and high trustworthiness consistent with its government affiliation.

S

Summit

globalgoalssummit.cz

50

Global Goals Summit 2024 is a professionally organized event focused on sustainability and the UN Sustainable Development Goals, hosted in Prague by Asociace společenské odpovědnosti in partnership with DVTV and other reputable organizations. The website demonstrates a mature digital presence with detailed speaker profiles, program schedules, ticketing options, and strong partner engagement. Technically, it is built on WordPress with modern tracking and analytics tools, optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

T

test

giving-tuesday.cz

58

Giving Tuesday Czechia is a well-established non-profit platform promoting global generosity and good deeds, organized locally by the Association of Social Responsibility. The website provides comprehensive information about the movement, ways to participate, and showcases registered charitable challenges and activities. The platform targets a broad audience including individuals, families, NGOs, schools, municipalities, and businesses. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and Typekit fonts, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a detailed privacy policy page. WHOIS data is unavailable, which slightly reduces trustworthiness, but the professional content and social media presence mitigate concerns. Overall, the site is a credible and effective tool for promoting charitable engagement in Czechia.

H

Health Food Manufacturers' Association

hfma.co.uk

50

The Health Food Manufacturers' Association (HFMA) is a UK-based trade association representing companies in the health food and supplement manufacturing sector. The website serves as an informational and advocacy platform for its members, providing industry representation and support. The domain is well-established, dating back to 1999, indicating a mature presence in the market. Technically, the site is built on WordPress using the Elementor page builder, with standard web technologies and fonts loaded from trusted sources. Google Tag Manager is employed for analytics, reflecting moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

Zucchetti is a leading Italian company specializing in software, hardware, and related services for businesses, professionals, and public administration. The website presents a professional and business-focused digital presence, targeting primarily Italian enterprises and professionals. The company positions itself as a market leader in Italy with a comprehensive offering. Technically, the website employs a proprietary CMS with JavaScript frameworks such as MooTools and jQuery, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though some modern security headers are missing. Security posture is solid with HTTPS and consent mechanisms but lacks explicit published security policies or incident response information. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

Feller AG is a well-established Swiss company specializing in electrical installation products and smart building technologies, operating since 1909. The company holds a leading market position in Switzerland, offering a broad range of products including switches, sockets, home automation solutions, and connected building services. Their website reflects a professional and consistent brand image, targeting both professional installers and private customers. Technically, the site uses modern JavaScript frameworks, integrates Azure Application Insights and Google Tag Manager for analytics and monitoring, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and monitoring tools in place, though explicit security headers and policies are not fully visible. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service. Overall, the site is safe, professional, and trustworthy with no signs of malicious content or blocking mechanisms.

T

Thomann Nutzfahrzeuge AG

thomannag.com

67

Thomann Nutzfahrzeuge AG is a Swiss-based company specializing in commercial vehicles including trucks, buses, and transporters from major brands such as Renault Trucks, Volvo Trucks, Mercedes-Benz, and others. With 30 years of experience and multiple locations across Switzerland, the company offers a comprehensive range of services including sales, rental, maintenance, driver training, and proprietary software solutions (Thomann Plus) to optimize fleet management. The website reflects a mature business with a clear market position targeting commercial vehicle operators and fleet managers. Technically, the website is built on Concrete CMS and employs modern web technologies including JavaScript and SVG graphics. It is mobile-optimized and includes SEO best practices. The site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. However, explicit security policies and incident response contacts are not found, which could be improved. Security posture is solid with HTTPS and cookie consent, but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business identity, though the domain is newly registered in 2024, which may indicate a recent domain acquisition or rebranding. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security transparency and DNS security could enhance trust and resilience.

T

tanneschaffhausen gmbh

tanneschaffhausen.ch

48

tanneschaffhausen gmbh operates a traditional hospitality business located in the old town of Schaffhausen, Switzerland. The company emphasizes social inclusion by employing people with disabilities and offers services including a wine tavern, a shop, serviced studios, and event hosting. The business holds the Naturparkwirt certification, reflecting its commitment to regional and natural values. The website is well-structured, mobile-optimized, and provides clear information about the business, its offerings, and community engagement. Technically, the site uses modern JavaScript frameworks like Alpine.js and includes a cookie consent mechanism, but lacks explicit security headers and incident response policies. The security posture is good with HTTPS enforced and no visible vulnerabilities. Overall, the website presents a trustworthy and professional image suitable for its local hospitality market.

O

Ostschweizer Verein für das Kind

ovk.ch

54

The Ostschweizer Verein für das Kind (OVK) is a well-established non-profit organization based in Switzerland, dedicated to supporting the healthy psychological and physical development of children in the preschool age group. With over 100 years of history, OVK offers a range of advisory services including mother and father counseling, parenting coaching, and family accompaniment programs. The organization targets families, parents, and early childhood professionals, providing multilingual consultation and community events. The website reflects a professional and trustworthy presence with clear contact information and a strong emphasis on privacy compliance. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with a cookie consent mechanism powered by CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are not explicitly confirmed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent banner with granular controls. Overall, the website demonstrates a mature digital infrastructure suitable for a non-profit organization, with strong business credibility and user trust. There are no indications of malicious content or security risks. However, the absence of a publicly stated security policy or incident response contact is a minor gap. Strategic recommendations include enhancing security headers and publishing incident response information to further strengthen trust and compliance.

J

JoinGo Mobile Console

joingo.com

41

JoinGo operates a technology platform focused on providing a mobile console solution, likely with geolocation and mapping capabilities as indicated by the integration of Google Maps API and related libraries. The website serves primarily as a web application interface rather than a marketing or informational site, targeting professional or enterprise users who require mobile console functionalities. The domain is well-established, registered since 2002, indicating a mature business presence. Technically, the site uses modern JavaScript libraries such as CropperJS and Intl-MessageFormat, and leverages external resources like Google Maps and FontAwesome. Hosting appears to be on Amazon AWS infrastructure based on DNS servers. However, the site lacks SEO optimization, accessibility features, and comprehensive metadata. Performance is moderate with basic mobile optimization. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, limiting transparency and compliance. The domain registration is consistent and trustworthy, but the website itself could benefit from enhanced security and compliance measures. Overall, the website is functional as a platform console but lacks public-facing content and compliance documentation. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and regulatory compliance.

V

Vertical Aviation International (VAI) Gift Store

vaigiftstore.com

56

The VAI Gift Store is an e-commerce platform specializing in helicopter and vertical aviation-related merchandise, including apparel, accessories, and gifts. The website targets aviation enthusiasts and professionals, offering branded products from recognized suppliers. The business appears to be a small, niche online retailer launched recently in December 2023, leveraging the BigCommerce platform for its digital storefront. The site demonstrates consistent branding and a clear focus on its target market, supported by active social media channels and a visible contact phone number for customer support. From a technical perspective, the website uses modern e-commerce technologies including BigCommerce Stencil framework, Google Fonts, and integrates marketing tools such as Mailchimp and Olark chat. The site is mobile-optimized with good navigation and user experience, although SEO and accessibility features are basic. Performance is moderate, typical for a BigCommerce hosted store. Security posture is adequate with HTTPS enabled and domain transfer lock active, but lacks advanced security headers and DNSSEC. No privacy or cookie policies were found, indicating gaps in compliance with data protection regulations such as GDPR. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and security readiness. Overall, the website is functional and professional for its business purpose but would benefit from enhanced privacy compliance, security hardening, and transparency policies to improve user trust and regulatory adherence.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

46

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

P

ProEx 2000

proex2000.cz

58

ProEx 2000 is a Czech Republic-based company specializing in roofing and construction materials and services. The website presents a professional and well-structured platform targeting homeowners and construction professionals seeking roofing solutions. The business model appears to be a mix of B2C and B2B sales with a regional focus. Technically, the website employs common modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies on the site reduce the overall trustworthiness and compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and documented incident response or security policies, which are areas for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures to improve trust and compliance.

The website eautoservis.cz is an online platform operated by Teas spol. s r. o. that provides a comprehensive database and online booking system for automotive service providers such as auto repair shops, tire services, car washes, and emission testing centers primarily in the Czech Republic and Slovakia. The platform targets vehicle owners seeking convenient online reservations and service providers managing bookings and customer interactions. With nearly 1000 registered companies, it holds a solid position in the local automotive service market. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript with jQuery 1.7.1. While functional, the technology stack is somewhat outdated, and the site shows only basic mobile optimization and accessibility features. SEO and performance optimizations are moderate but could be improved. No advanced CMS or frameworks are detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, which may expose it to vulnerabilities. There is no evidence of privacy or cookie policies, nor incident response or security policy disclosures, indicating compliance gaps with GDPR and best practices. The site uses HTTPS (assumed) and secure form submission methods but would benefit from enhanced security controls. Overall, the website is moderately professional and trustworthy but requires improvements in privacy compliance, security posture, and technical modernization to reduce risk and enhance user trust. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts.

S

SharpEnd Designs

sharpenddesigns.com

58

SharpEnd Designs is a small design service provider located in Bishop and Mammoth Lakes, California, specializing in branding, graphic design, and website development. The company targets small businesses and individuals seeking professional design strategy and implementation. The website is built on the Squarespace platform, leveraging modern web technologies including Typekit fonts and Google Fonts, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers such as HSTS and does not provide privacy or cookie policies, which are important for compliance. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the professional presentation and active social media presence support business credibility. Overall, the site is safe for general audiences and demonstrates moderate technical maturity.

S

Skratch Labs

skratchlabs.eu

66

Skratch Labs operates a professional e-commerce website focused on sports nutrition products tailored for endurance athletes in Europe. The website presents a clear business model centered on retailing natural ingredient-based nutrition supplements with a strong emphasis on quality and flavor. The company targets a niche market of endurance athletes, positioning itself as an expert in sports nutrition with a European focus. The website content is well-structured, with comprehensive privacy and cookie policies, and uses Shopify as its e-commerce platform, leveraging modern technologies and integrations such as Klaviyo for marketing and Apple Pay for payments. Technically, the site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility practices.

D

Druckerei Horisberger AG

druckerei-horisberger.ch

54

Druckerei Horisberger AG is a well-established Swiss printing company specializing in traditional and digital print media, marketing instruments, and packaging solutions. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive services including consulting, publishing, lettershop, offset and digital printing, finishing, logistics, and sustainability initiatives. The company targets business clients seeking high-quality print and marketing solutions and holds a strong market position as the largest family-owned printing company in its region with over 60 years of experience. Technically, the website is built on modern frameworks such as Vue.js and UKit, with a Cockpit CMS backend. It demonstrates good mobile optimization, moderate performance, and basic accessibility features. The site uses HTTPS with strong SSL configuration and includes security headers, reflecting a solid security posture. However, it lacks visible cookie consent mechanisms and explicit privacy or security policies, which are areas for improvement. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Certifications like ISO 9001 and ISO 14001 reinforce trust and commitment to quality and environmental management. The absence of incident response contacts and vulnerability disclosure policies suggests room to enhance security transparency and readiness. Overall, Druckerei Horisberger AG presents a professional, trustworthy, and content-rich online presence aligned with its business stature. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing GDPR compliance to further strengthen privacy and security posture.

The Aircraft Owners and Pilots Association (AOPA) is a well-established US-based organization serving the general aviation community with advocacy, education, and resources. The domain aopa.org is registered since 1995 and aligns with the organization's history and location. However, the website content is currently inaccessible due to Cloudflare's Web Application Firewall (WAF) blocking access based on the visitor's ASN, resulting in an HTTP 1005 error. This blockage prevents a full analysis of the website's content, policies, and technical implementation. The technical infrastructure includes Cloudflare services for CDN and security, but no detailed security headers or policies are visible in the blocked content. The lack of accessible privacy, cookie, and contact information pages limits the assessment of compliance and user engagement features.

E

Erik Edgren Airshows

erikedgrenairshows.com

60

Erik Edgren Airshows is a specialized small business providing top-notch entertainment services for airshow events, including aerobatics, comedy, deadstick, and night performances. The website presents a professional and consistent brand image, targeting airshow event organizers and enthusiasts. The business appears to have been established around 2010, consistent with the domain registration date, and operates within the transportation sector focused on aviation entertainment. The technical infrastructure is based on the GoDaddy Website Builder platform, utilizing modern web fonts and embedded YouTube videos for multimedia content. The site is hosted by GoDaddy and uses HTTPS with a valid SSL certificate, ensuring secure communication. Mobile optimization and user experience are good, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the website benefits from HTTPS and domain registration protections but lacks important security headers and DNSSEC, which could enhance its security posture. There are no signs of exposed vulnerabilities or malicious content. However, the absence of privacy, cookie, and terms of service policies indicates compliance gaps, especially regarding GDPR and other privacy regulations. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

Cardinal Flyers Online LLC operates a niche community website dedicated to owners and enthusiasts of the Cessna 177 Cardinal aircraft. The site provides extensive technical resources, community forums, event information, classifieds, and membership management services. It positions itself as a central hub for Cardinal owners worldwide, fostering knowledge exchange and community engagement. The business model is membership-based with sponsorship support, targeting a specialized aviation audience. Technically, the website uses legacy JavaScript and jQuery libraries with basic mobile optimization and moderate performance. Security practices include selective HTTPS enforcement and a cookie consent banner, but lack modern security headers and full HTTPS coverage. The WHOIS data is missing, raising concerns about domain registration legitimacy, although the website content is rich and consistent with a long-standing community. Overall, the site is functional and content-rich but would benefit from modern security and technical improvements.

P

Pete McLeod Racing

petemcleodracing.com

45

Pete McLeod Racing is a professional air racing brand centered around Pete McLeod, a prominent Red Bull Air Race pilot from Canada. The website serves as a comprehensive platform for his biography, news updates, media content, and sponsorship promotion. The business operates primarily in the transportation and media sectors, targeting air racing fans, sponsors, and media outlets. The company maintains a small but professional online presence with consistent branding and active engagement through news and social media links. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted by HostGator. It employs modern web technologies including Google Analytics and Google reCAPTCHA for security and tracking. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. However, it lacks important HTTP security headers and DNSSEC is not enabled, which are areas for improvement. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance documentation, and improved accessibility. These improvements would strengthen the site's security posture and regulatory compliance, enhancing user trust and business credibility.

N

NOVÁ ŠKOLA, s.r.o.

eduzio.cz

59

Eduzio.cz is an educational platform specializing in online preparatory tests for secondary schools and gymnasiums in the Czech Republic, aligned with the CERMAT standard. The platform collaborates with the established publisher NOVÁ ŠKOLA, s.r.o., which has a history dating back to 1997. Eduzio offers targeted test preparation in Czech language and mathematics, providing immediate feedback to students to enhance learning effectiveness. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant educational content, including a blog and FAQ sections.

NAŠE ŠKOLA, s.r.o. operates the Media Creator MIUč+ platform, providing educational multimedia software and titles primarily targeting teachers and students in the Czech Republic. The company distributes software builds for multiple platforms including Windows, Android, Linux, macOS, and iOS (limited support). The business model combines free software downloads with paid licenses and certificates sold via a partner e-shop (nns.cz). The website content is focused on educational products with clear versioning and update information, supporting a niche market in educational technology. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The software itself leverages Qt5 technology for cross-platform compatibility.

W

World Aquatics Online

waqua.shop

69

World Aquatics Online operates an e-commerce platform specializing in aquatic-related apparel, accessories, and swim essentials. The website positions itself as an official licensed product store targeting general consumers interested in aquatic sports and lifestyle. The business is relatively new, with domain registration in late 2024, and operates primarily in Korea with English language support. The site leverages the Cafe24 e-commerce platform, integrating modern JavaScript libraries and Google Analytics for tracking. Security posture is adequate with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are minimal. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the site presents a professional and consistent brand image but would benefit from enhanced privacy compliance and security hardening.

조

조선일보

chosun.com

62

조선일보(www.chosun.com) is a leading South Korean digital news media platform providing comprehensive coverage of opinion, politics, society, economy, international affairs, sports, and culture. It operates multiple subsidiary news services targeting diverse audiences including Chinese, Japanese, and English speakers. The website demonstrates a mature digital infrastructure using modern JavaScript frameworks such as React, and integrates multiple analytics and advertising technologies including Google Analytics, Chartbeat, and Branch.io. The site is well-optimized for mobile and desktop users with good SEO and accessibility features. Security posture is solid with HTTPS enforced and use of modern libraries, though explicit security headers and privacy policies are not clearly visible in the provided content. WHOIS data for the domain is unavailable or missing, which is unusual but does not detract from the site's legitimacy given its strong brand presence and extensive content. Overall, the site is professional, content-rich, and trustworthy, serving a broad Korean-speaking audience with additional language options.

HotLizard is a UK-based specialist company established in 1999, providing recruitment websites and job board software solutions. Their offerings range from off-the-shelf SaaS platforms to bespoke, fully customized recruitment technology solutions designed to enhance candidate experience and client engagement. The company targets recruitment agencies, job board owners, and direct employers, positioning itself as a trusted provider with a strong market presence supported by long domain tenure and positive customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and reCAPTCHA v3, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, GDPR compliant, and trustworthy, reflecting a mature business with a clear focus on recruitment technology.

R

Remark

withremark.com

68

Remark is a B2B SaaS company specializing in AI-powered product guidance solutions for online stores. Their platform leverages AI-personas trained by real experts to provide personalized shopper experiences, real-time product recommendations, and seamless integration with e-commerce systems. The website demonstrates a mature digital presence with comprehensive content, customer testimonials, and case studies highlighting measurable business impact. Technically, the site is built on modern web technologies including Webflow CMS, uses advanced analytics tools like PostHog and Apollo, and incorporates security features such as SOC II compliance and Cloudflare Turnstile captcha. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance practices. However, the absence of WHOIS registration data and direct company contact emails slightly reduces trustworthiness. Overall, Remark presents a professional, secure, and user-friendly platform positioned well in the e-commerce AI personalization market.

S

Ski Kind

skikind.org

53

Ski Kind is a small non-profit organization focused on promoting responsible behavior in backcountry skiing and riding. The website serves as an educational platform offering toolkits, partner information, merchandise, and community engagement opportunities. It is affiliated with the Winter Wildlands Alliance and Granite Backcountry Alliance, indicating a credible position within the niche outdoor advocacy sector. The website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure form handling, though it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy. Overall, Ski Kind presents a trustworthy and professional online presence with room to enhance compliance and security transparency.

I

Internet Ltd

top.lv

53

TOP.LV is a Latvian web portal established in 1998, operating as the largest website rating and directory system in Latvia. It categorizes Latvian web content and provides rankings and statistics for various local websites. The platform primarily targets Latvian internet users seeking organized access to local web resources. Monetization is achieved through advertising networks including Google Adsense and multiple programmatic ad partners. The website's technical infrastructure is based on traditional web technologies such as HTML, CSS, and JavaScript, with integration of Google Fonts and analytics tools. While the site implements a GDPR-compliant consent management platform, it lacks explicit privacy and terms of service pages, which are critical for full compliance and user trust. Security posture is moderate with HTTPS usage implied but no advanced security headers detected. The site design is functional but dated, with basic mobile optimization and accessibility features.

Celtniecības Plēvju Centrs is a Latvian company specializing in the manufacturing and distribution of construction films and membranes, including diffusion membranes, waterproofing films, windproof films, vapor barriers, and related accessories. The company targets construction professionals and retail customers within Latvia, positioning itself as a local supplier of essential building materials. The website content is primarily in Latvian with options for Russian and English, reflecting a regional focus. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site shows moderate performance but lacks mobile optimization and accessibility features. There is no evidence of advanced SEO or structured data implementation. Security-wise, the site does not demonstrate HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The security posture is basic with no visible incident response or vulnerability disclosure mechanisms. Contact information is clearly provided, enhancing business credibility. The domain WHOIS data aligns with the business location and operations, supporting legitimacy. Overall, the website serves its purpose as an informational and product catalog site but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards.

Autond.cz is an established Czech online marketplace specializing in the listing and sale of automotive spare parts. Operated by Teas spol. s r. o., the platform offers a large inventory of over 218,000 parts from more than 215 sellers, primarily targeting the Czech and Slovak markets. The website provides search functionality by part code or vehicle brand, facilitating efficient parts sourcing for businesses and individuals. The company has a solid market presence with a domain age dating back to 2008, reflecting stability and trustworthiness in the automotive spare parts sector. Technically, the website employs a traditional web stack including jQuery 1.7.1, custom JavaScript, CSS, and integrates Google Analytics for user behavior tracking. Cookie consent is managed via CookieFirst scripts, indicating some level of privacy compliance. However, the site lacks modern frameworks or CMS indications and uses an outdated jQuery version, which may pose security risks. Mobile optimization and accessibility are basic, and SEO practices are minimal but functional. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but no advanced security headers were detected. There is no published privacy policy, terms of service, or incident response information, representing compliance and transparency gaps. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. The domain registration data aligns well with the business information, supporting legitimacy. Overall, autond.cz presents a moderately professional and trustworthy platform with room for improvement in privacy compliance, security hardening, and technical modernization. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

The website metalshop.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to its content. This prevents extraction of business, contact, or policy information. The domain is registered since 2003 with REG-WEDOS and uses Cloudflare name servers, indicating a long-standing presence and use of modern security infrastructure. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site employs Cloudflare's security and CDN services, including the Turnstile CAPTCHA, which suggests a focus on mitigating automated threats. No CMS or additional frameworks are detectable due to the blocked content. Performance, SEO, and accessibility cannot be evaluated. From a security perspective, the presence of Cloudflare's WAF and CAPTCHA is a positive indicator of proactive defense, but no further security headers or policies are visible. No privacy or cookie policies are found, and no contact or incident response information is available, limiting compliance assessment. Overall, the site appears legitimate based on domain age and registrar data, but the inability to access content results in a low AI score and incomplete analysis. Strategic recommendations include ensuring public accessibility for analysis, publishing clear privacy and security policies, and providing contact information to improve trust and compliance.

3

Events in the three-country region | 3event

3event.eu

39

The website 3mag.eu/en/events serves as a regional event calendar for the tri-border area encompassing parts of Germany, Czech Republic, and Poland. It offers a well-structured platform for users to discover various events such as festivals, music concerts, art exhibitions, sports activities, and more. The site targets a general audience interested in cultural and leisure activities within this geographic region. The business model revolves around event promotion and information dissemination, positioning itself as a key regional event aggregator. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, and libraries like Flatpickr for date selection and Embla Carousel for event display. The design is responsive and optimized for mobile devices, providing a good user experience. However, there is no evidence of a CMS or backend platform from the provided data. Hosting and domain registration are managed through RegistryGate GmbH, a reputable registrar. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers or policies were detected in the HTML content. There is a lack of visible privacy, cookie, or terms of service policies, which indicates potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and professionally designed for its purpose but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trustworthiness and regulatory adherence.

A

ACCESS Newswire

accessnewswire.com

65

ACCESS Newswire operates as a leading global press release distribution and PR platform, offering a comprehensive suite of services including media database access, media pitching, monitoring, and investor relations tools. The company targets businesses, PR professionals, investors, and agencies, providing subscription and non-subscription models to meet diverse client needs. The website demonstrates a strong market position with professional branding and clear service offerings. Technically, the website leverages a modern technology stack including Google Analytics, Microsoft Clarity, Marketo, Facebook Pixel, and service workers for offline support. It is built on the MultiScreenSite CMS platform, optimized for mobile and accessibility, and integrates multiple marketing and analytics tools to support business growth and user engagement. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v3, and includes accessibility compliance features. While explicit security headers are not fully confirmed, no exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of a public vulnerability disclosure policy and WHOIS data transparency are areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. However, the missing WHOIS data and lack of explicit security policies slightly reduce trustworthiness. Strategic recommendations include enhancing WHOIS transparency, publishing a security policy, and ensuring all security headers are implemented and maintained.

R

Deskové materiály ROWMARK pro gravírování, pasty a spreje THERMARK pro popis kovů CO2 lasery, drobný tisk, výroba razítek

rowmark.cz

50

The website www.rowmark.cz represents a small manufacturing business specializing in engraving materials, marking pastes and sprays, CO2 laser equipment, small printing, and stamp production. The target audience appears to be industrial and manufacturing professionals requiring specialized materials and equipment for engraving and marking. The website uses legacy web technologies such as framesets and basic HTML/CSS/JavaScript with no modern CMS or frameworks detected. Mobile optimization is poor, and the site lacks responsive design. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. No contact information or social media presence is evident, reducing business credibility and user trust. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, which further impacts trustworthiness. Overall, the site provides minimal but relevant content for its niche but requires significant improvements in security, privacy compliance, and technical modernization.

O

Orientační systémy TRILINE – dodávky profilů a polotovarů pro značení v budovách, popis místností, ukazatele směru, hotové značky...

orientacni-systemy-triline.cz

50

The website orientacni-systemy-triline.cz represents a small business specializing in the supply of orientation systems, profiles, and signage products for buildings. The content is minimal but focused on their core offerings such as room signage and directional indicators. The site uses outdated web technologies like framesets and lacks modern responsive design, resulting in poor mobile optimization and accessibility. No privacy, cookie, or terms of service policies are present, and no contact information is directly available in the provided HTML content. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. Overall, the site appears functional but requires significant modernization and compliance improvements.

W

World Aquatics

worldaquatics.com

67

World Aquatics operates as the international governing body for aquatic sports, providing authoritative information, event results, news, and governance for disciplines such as swimming, water polo, diving, artistic swimming, open water swimming, and high diving. The website serves a global audience including athletes, fans, media, and sports organizations. The digital infrastructure employs modern web technologies including JavaScript, SVG icons, and tracking tools like Google Tag Manager and Facebook Pixel, delivering a responsive and accessible user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the site's legitimacy given its professional content and official social media presence. Strategic recommendations include publishing security and incident response policies, adding a terms of service page, and implementing a vulnerability disclosure mechanism to enhance trust and compliance.

W

World Aquatics Online

shop-worldaquatics.com

69

World Aquatics operates an e-commerce platform specializing in aquatic-related apparel, accessories, and swim essentials. The website presents itself as an official licensed product store with a clear focus on aquatic sports enthusiasts. The business model is retail-oriented, leveraging the Cafe24 platform for its online presence. Market positioning appears to be niche within aquatic merchandise, targeting consumers interested in water sports and related lifestyle products. The site branding is consistent and professional, though lacking explicit business contact details and comprehensive policy disclosures.

L

Lanes Health

laneshealth.com

64

Lanes Health is a well-established family-owned healthcare company with over 90 years of experience in manufacturing and distributing OTC medicines, food supplements, natural products, and confectionery. The company maintains a strong market presence in the UK and internationally through a portfolio of trusted brands such as Olbas, Jakemans, Kalms, and others. Their website reflects a professional and consistent brand image, targeting consumers, pharmacists, and retailers seeking quality health and wellbeing products. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. From a security perspective, the website uses HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and business information presented. Overall, the website is functional, secure, and compliant with privacy standards, but the domain registration inconsistency warrants further investigation. Strategic recommendations include improving security headers, publishing explicit security and incident response policies, and verifying domain registration details to enhance trust and credibility.

Virgin Hotels operates a lifestyle hotel brand with properties across major cities in the United States and the United Kingdom. The website presents a professional, well-branded digital presence offering hotel booking, loyalty programs, and mobile app integration. The business targets travelers seeking unique and comfortable accommodations with modern amenities. Virgin Hotels is part of the Virgin Group, a globally recognized brand, and maintains a strong market position in the hospitality sector.

B

Backcountry Access

backcountryaccess.com

49

Backcountry Access is a well-established company founded in 2001, specializing in backcountry safety products and consumer education. The website positions itself as a trusted name in the outdoor safety retail sector, targeting backcountry enthusiasts and consumers seeking reliable safety equipment. The business model is primarily e-commerce combined with educational content to support safe outdoor activities. The company maintains a consistent brand presence with professional design and structured data to enhance search visibility. Technically, the website uses modern web technologies including JavaScript, Typekit fonts, and integrates third-party services such as Klarna for payments and Yotpo for reviews. Hosting is managed via NS1 DNS services, and the site is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of visible privacy and cookie policies, and no GDPR compliance indicators. Contact information and incident response details are not explicitly provided, which may impact user trust and compliance. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.