High-risk security reports

M

MetroComm AG

leaderdigital.ch

49

LEADER Digital is a well-established regional business media portal serving the Eastern Switzerland economic community. It offers a comprehensive range of services including news, event listings, magazines, awards, and advertising opportunities. The website is professionally designed with consistent branding and targets primarily businesses, entrepreneurs, and organizations in the Ostschweiz region. The parent company is MetroComm AG, located in St.Gallen, Switzerland. Technically, the website employs modern web technologies such as jQuery, Owl Carousel, Google Analytics, Google Tag Manager, and Facebook Pixel. It uses the admiralCX content management system and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, but lacks explicit security headers and a dedicated security or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Social media integration and contact information are clear and professional. Overall, the website is trustworthy, professional, and well-positioned in its market niche. Security and privacy practices can be improved to enhance compliance and user trust.

VisiDati.lv is the largest survey portal in Latvia, offering users the ability to quickly and easily create surveys, collect data, and analyze results through graphical and Excel formats. The platform targets Latvian individuals and businesses seeking efficient survey tools, providing a mix of free and paid services including survey templates and AI-assisted survey creation. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including Latvian, Russian, and English. Technically, the site leverages modern JavaScript libraries such as jQuery and Chart.js, integrates Google Tag Manager and Google Identity Services for analytics and authentication, and is hosted on Amazon AWS infrastructure. Cookie consent is managed via CookieFirst, ensuring GDPR compliance. Security posture is good with HTTPS enforced and no exposed sensitive data, though security headers and explicit incident response policies are absent. Overall, the site is trustworthy and well-positioned in its market niche.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

R

RC "RĀZNA"

rcrazna.lv

45

RC "RĀZNA" is a healthcare service provider specializing in state-funded medical rehabilitation services located within the Rāznas National Park area in Latvia. The website presents a professional and regionally focused healthcare business model targeting patients seeking rehabilitation services. The digital presence is built on WordPress CMS, utilizing common web technologies such as jQuery, Google Analytics, and Google Tag Manager for analytics and tracking. The site is mobile-optimized and includes SEO best practices, although some accessibility features are basic. From a security perspective, the website employs HTTPS with anonymized IP tracking in Google Analytics, indicating a baseline security posture. However, the absence of security headers and lack of published privacy or cookie policies suggest room for improvement in compliance and security best practices. No incident response or vulnerability disclosure information is provided, which could be a gap in the security maturity of the organization. Overall, the website is accessible without WAF or blocking mechanisms, and the domain registration data aligns with the website's claims, supporting legitimacy. The content is safe for general audiences, with no adult or explicit content detected. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing security and incident response information to enhance trust and compliance.

The website ocr.lv is registered to OLIMPISKAIS CENTRS REZEKNE, SIA, a Latvian legal entity likely related to sports or Olympic activities. The website content is currently inaccessible due to a security check page powered by BitNinja.IO, which blocks direct access and redirects users after a delay. The visible metadata indicates the use of outdated CMS platforms Joomla 1.5 and WordPress 2.5, which are known to have significant security vulnerabilities. No privacy, cookie, or terms of service policies are present, and no contact emails or phone numbers are visible on the site. The WHOIS data is partially incomplete, lacking registrar and creation date information, but shows the domain is active and updated through 2025.

S

SIA Rēzeknes Namsaimnieks

reznam.lv

49

SIA Rēzeknes Namsaimnieks is a Latvian property management company focused on servicing residential and municipal properties in Rēzekne. The website provides information about their services including property maintenance, energy efficiency, procurement, and community projects such as animal shelter support. The company targets local residents and property owners, positioning itself as a regional leader in property management. The website is built on WordPress, leveraging common web technologies and hosted behind Cloudflare DNS services. The site includes client login portals and regularly updated news content, indicating active engagement with its audience. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial with a basic privacy policy present but no explicit GDPR consent tools. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

D

Domov Sue Ryder, z. ú.

neztratitsevestari.cz

45

The website 'Neztratit se ve stáří' is a professionally designed non-profit platform focused on providing advice, education, and support related to aging and elder care. It is supported by reputable partners such as Sue Ryder and ČSOB, indicating a strong market position within the Czech Republic's non-profit sector. The site offers a variety of services including advisory hotlines, educational courses, and case management articles targeted at seniors, caregivers, and professionals. The content is well-structured, relevant, and updated regularly, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Tag Manager and Vizus CMS, with good mobile optimization and SEO practices. The site is served over HTTPS with a solid SSL configuration, although explicit security headers are not evident in the HTML source. Cookie consent mechanisms and privacy policies are implemented, demonstrating compliance with GDPR requirements. However, there is room for improvement in accessibility and security best practices such as adding security.txt and incident response contacts. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is common for non-profits and does not detract from the site's legitimacy. Overall, the website presents a trustworthy and professional image with moderate to high security and privacy compliance. Strategically, the site should focus on enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility to further strengthen its digital maturity and trustworthiness.

Replacing Animal Research is a UK-based charitable organization founded in 1969 dedicated to ending animal testing by promoting human-relevant, non-animal research methods. The organization funds innovative scientific projects, educates stakeholders, and advocates for alternatives to animal research. The website reflects a professional and consistent brand presence targeting scientists, researchers, and animal welfare supporters. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain is newly registered in 2024, which is inconsistent with the organization's long history, suggesting a recent domain acquisition or rebranding. Overall, the site is trustworthy, well-maintained, and compliant with basic privacy and security standards, but could enhance transparency by publishing explicit privacy and terms policies.

T

tanneschaffhausen gmbh

tanneschaffhausen.ch

48

tanneschaffhausen gmbh operates a traditional hospitality business located in the old town of Schaffhausen, Switzerland. The company emphasizes social inclusion by employing people with disabilities and offers services including a wine tavern, a shop, serviced studios, and event hosting. The business holds the Naturparkwirt certification, reflecting its commitment to regional and natural values. The website is well-structured, mobile-optimized, and provides clear information about the business, its offerings, and community engagement. Technically, the site uses modern JavaScript frameworks like Alpine.js and includes a cookie consent mechanism, but lacks explicit security headers and incident response policies. The security posture is good with HTTPS enforced and no visible vulnerabilities. Overall, the website presents a trustworthy and professional image suitable for its local hospitality market.

P

Pavlovín, spol. s r.o.

pavlovin.cz

39

Pavlovín, spol. s r.o. is a Czech winery based in Velké Pavlovice, specializing in producing and retailing high-quality wines from the South Moravia region. The company operates multiple wine shops across the Czech Republic and offers wines through an e-commerce platform. Their business model focuses on retail sales, wholesale to restaurants and wine bars, and hosting wine tasting events. The website reflects a mature digital presence with a professional design and consistent branding, targeting wine consumers and hospitality businesses. Technically, the site uses a variety of JavaScript libraries and tracking tools, including Google Analytics and Google Ads, indicating a moderate level of digital marketing sophistication. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and professional. Overall, the site is well-structured and user-friendly, with an appropriate age verification mechanism for alcohol-related content.

J

JoinGo Mobile Console

joingo.com

41

JoinGo operates a technology platform focused on providing a mobile console solution, likely with geolocation and mapping capabilities as indicated by the integration of Google Maps API and related libraries. The website serves primarily as a web application interface rather than a marketing or informational site, targeting professional or enterprise users who require mobile console functionalities. The domain is well-established, registered since 2002, indicating a mature business presence. Technically, the site uses modern JavaScript libraries such as CropperJS and Intl-MessageFormat, and leverages external resources like Google Maps and FontAwesome. Hosting appears to be on Amazon AWS infrastructure based on DNS servers. However, the site lacks SEO optimization, accessibility features, and comprehensive metadata. Performance is moderate with basic mobile optimization. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, limiting transparency and compliance. The domain registration is consistent and trustworthy, but the website itself could benefit from enhanced security and compliance measures. Overall, the website is functional as a platform console but lacks public-facing content and compliance documentation. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and regulatory compliance.

E

Experimental Aircraft Association

eaaforums.org

38

The Experimental Aircraft Association (EAA) operates the EAA Forums website, a community platform dedicated to aviation enthusiasts, pilots, and aircraft builders. The site serves as a niche forum for discussions related to experimental aircraft, aviation events, and member support. The business model focuses on fostering community engagement and information sharing within the aviation sector. The domain registration and organizational details are consistent and legitimate, reflecting a well-established entity founded in 2011 in the United States. Technically, the website is built on the vBulletin 4.2.4 forum software, supplemented by YUI JavaScript libraries and Google Analytics for tracking. Hosting appears to be managed via Network Solutions with VPS nameservers. The site demonstrates moderate performance and basic mobile optimization, with a straightforward design and clear navigation. However, the use of an older forum software version and lack of modern security headers indicate some technical debt and potential security risks. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and modern security headers. There is no visible privacy or cookie consent mechanism, which may pose compliance risks under GDPR. No incident response or vulnerability disclosure policies are evident. The site does not expose sensitive data but could improve its security posture by updating software and implementing additional security controls. Overall, the EAA Forums website is a legitimate, well-established community platform with good business credibility and safe content. It would benefit from enhanced privacy compliance measures and security improvements to better protect users and align with modern standards.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

46

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

The website alinea.ch presents minimal content, primarily a looping muted video with no textual or interactive elements. There is no visible contact information, privacy or cookie policies, or terms of service, which limits user trust and compliance with data protection regulations. The WHOIS data is privacy protected, providing no transparent registrant details. Technically, the site uses basic HTML with a linked stylesheet and a video asset but lacks modern SEO, accessibility, or security features. The security posture is weak due to absence of security headers and unclear SSL status. Overall, the site appears to be a placeholder or under development with limited business information and digital maturity.

CebiaNET is a professional service portal associated with the Cebia brand, providing login access for professional users likely related to automotive or related sectors. The website presents a clean, professional interface with a focus on secure user authentication. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and ASP.NET MVC framework, indicating a mature and maintainable platform. Security practices such as HTTPS usage and CSRF tokens are implemented, though some security headers are missing and cookie consent mechanisms are absent, which could be improved to enhance compliance and security posture. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the perceived legitimacy given the professional branding and contact information. Overall, the site is functional, secure, and targeted at a professional audience with moderate risk and room for improvement in privacy compliance and security hardening.

T

TechniFog s.r.o.

hasenivodnimlhou.cz

42

TechniFog s.r.o. operates as the exclusive Czech and Slovak distributor of Automist® water mist fire suppression systems, providing innovative and efficient fire protection solutions primarily targeting small residential units and vulnerable populations. The company emphasizes low water consumption and advanced technology as an alternative to traditional sprinklers. The website is professionally designed with clear navigation and relevant content, supporting the company's market position as a specialized fire safety provider. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.2 alongside common tools like Google Analytics and Fancybox. While the site is mobile responsive and SEO optimized, some modernization and security improvements are advisable, including updating libraries and implementing security headers. The absence of privacy and cookie policies indicates a compliance gap, especially under GDPR regulations. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the lack of security headers and outdated scripts present potential risks. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site demonstrates a solid business presence but requires enhancements in privacy compliance and technical security to strengthen trust and regulatory adherence. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, updating JavaScript libraries to current versions, adding security headers, and publishing a security.txt file for vulnerability disclosure. These steps will improve compliance, security posture, and user trust, supporting the company's continued growth in the fire protection market.

T

TechniFog s.r.o.

mlzicitechnika.cz

42

TechniFog s.r.o. operates as a specialized supplier and representative of Italian misting systems manufacturer Idrobase Group Srl in the Czech Republic. The company focuses on providing industrial and commercial solutions for air cooling, humidification, and refreshing using high-pressure misting technology. Their market position is that of a niche provider serving various sectors including hospitality, manufacturing, and entertainment venues. The website content is well-structured and professionally presented, targeting business clients requiring environmental air treatment solutions. From a technical perspective, the website employs legacy technologies such as jQuery 1.7.2 alongside modern tools like Google Analytics and Fancybox. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is moderate with HTTPS presumably enabled but no visible security headers and usage of outdated JavaScript libraries posing potential risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trust. Contact information is clearly provided, enhancing business credibility. No signs of WAF or content blocking were detected, allowing full content analysis. Overall, the website is functional and business-appropriate but requires improvements in security, privacy compliance, and domain registration transparency. Strategic recommendations include updating outdated libraries, implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and verifying domain registration details to improve trustworthiness and compliance.

The website www.originalni-stranky.cz appears to be intended as a web design service site based in Ostrava, Czech Republic, associated with the advertising agency MARF. However, the site is currently non-functional due to a critical PHP fatal error, which prevents access to any meaningful content or services. The lack of WHOIS data further complicates verification of the domain's legitimacy and ownership. Technically, the site lacks modern infrastructure, security headers, and performance optimizations. No privacy, cookie, or terms of service policies are present, indicating poor compliance with data protection regulations. Overall, the security posture is weak, with exposed error messages and no evident security best practices. The site does not contain any adult or explicit content and is safe for general audiences, but the lack of content and functionality severely limits its business credibility and user trust.

S

Služby Havlický

sluzbyhavlicky.cz

49

Služby Havlický is a well-established Czech service company specializing in chimney sweeping, tinsmithing, locksmithing, roofing, glazing, framing, and masonry services primarily in the Opava region. Founded in 1990, the company has a strong local presence and holds ISO 9001 certification, indicating a commitment to quality. The website reflects a professional service provider with clear business focus and a good reputation supported by references from local institutions. Technically, the website is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could improve it. Overall, the site is trustworthy, compliant with GDPR, and provides a solid digital presence for the business.

M

MASPEX Czech s.r.o

tigerenergydrink.cz

29

Tigerenergydrink.cz is the official website for Tiger Energy Drink, a brand operated by MASPEX Czech s.r.o, a medium-sized company in the energy beverage sector in the Czech Republic. The website serves as a marketing and informational platform targeting general consumers interested in energy drinks. The site features professional branding, consistent messaging, and comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and a consent management platform, ensuring compliance with GDPR and user tracking transparency. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though some security headers could be improved. Overall, the domain appears legitimate despite the lack of public WHOIS data, which is common for commercial entities protecting registrant privacy.

The website eautoservis.cz is an online platform operated by Teas spol. s r. o. that provides a comprehensive database and online booking system for automotive service providers such as auto repair shops, tire services, car washes, and emission testing centers primarily in the Czech Republic and Slovakia. The platform targets vehicle owners seeking convenient online reservations and service providers managing bookings and customer interactions. With nearly 1000 registered companies, it holds a solid position in the local automotive service market. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript with jQuery 1.7.1. While functional, the technology stack is somewhat outdated, and the site shows only basic mobile optimization and accessibility features. SEO and performance optimizations are moderate but could be improved. No advanced CMS or frameworks are detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, which may expose it to vulnerabilities. There is no evidence of privacy or cookie policies, nor incident response or security policy disclosures, indicating compliance gaps with GDPR and best practices. The site uses HTTPS (assumed) and secure form submission methods but would benefit from enhanced security controls. Overall, the website is moderately professional and trustworthy but requires improvements in privacy compliance, security posture, and technical modernization to reduce risk and enhance user trust. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts.

A

AUTOJOB s.r.o.

autojob.cz

41

AUTOJOB s.r.o. operates AUTOJOB.cz, a specialized online job portal focused on the automotive and transport industries primarily in the Czech Republic and Slovakia. The platform offers job listings, candidate databases, employer services, and industry-related content including an automotive magazine and a competition called Autoopravář Junior. The site targets job seekers and employers within the automotive sector, providing a niche service that supports recruitment and industry engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.3.2 and jQuery UI 1.7.3, alongside modern analytics tools like Google Analytics and Facebook SDK. While the site is functional and moderately optimized, it shows signs of technical debt and could benefit from modernization, especially in updating libraries and improving mobile responsiveness and accessibility. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. Privacy compliance is partially addressed with a privacy policy and terms of service, but the absence of a cookie consent mechanism and security.txt reduces compliance maturity. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site is a credible and professional niche job portal with room for technical and security improvements. The lack of WHOIS data reduces domain trust slightly, but the presence of partner logos and clear contact information supports legitimacy. Strategic enhancements in security headers, library updates, and privacy compliance would strengthen the platform's risk posture and user trust.

O

OSR Label

osr-label.ch

46

OSR Label is a Swiss non-profit organization focused on promoting social responsibility and ethical business practices through its certification label. The website serves as an informational and promotional platform for the OSR Label, targeting businesses and organizations interested in demonstrating their commitment to social responsibility. The site uses modern frontend technologies such as UIkit and jQuery and integrates Google Analytics for visitor tracking. While the website is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security-wise, the site uses HTTPS and a cookie consent mechanism but does not display advanced security headers or incident response information. Overall, the site is legitimate, well-branded, and serves its niche effectively but could improve in privacy and security transparency.

H

Hess Druck AG

hessdruck.ch

47

Hess Druck AG is a well-established Swiss printing company founded in 1956, specializing in a broad range of printing and document management services. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive solutions including consulting, prepress, printing, finishing, mailing, and logistics. The company emphasizes sustainability and quality, holding multiple certifications such as ISO 14001 and FSC. Technically, the website employs modern frameworks like Vue.js and UKit, with Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and secure forms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security transparency are recommended.

Ecocardprint is a Swiss-based company specializing in eco-responsible printing solutions, focusing on sustainable business cards made from FSC® certified wood, biodegradable PET, and recycled cardboard. The company targets environmentally conscious businesses across sectors such as hospitality, retail, watchmaking, tourism, and health insurance. As a member of the Schellenberg Group, Ecocardprint benefits from a network of related companies enhancing its market position. The website is built on WordPress with the Divi theme and includes modern plugins for SEO and user experience. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, which may impact compliance with GDPR and other regulations. Security posture is moderate with HTTPS enforced but missing some security headers and incomplete reCAPTCHA configuration. Contact information is clearly presented, including phone, email, physical address, and a contact form. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy compliance and security hardening.

Dresch Sàrl is a Swiss company with a commercial website primarily in French, offering products and contact options via phone and email. The website is built on WordPress using the Divi theme and integrates Matomo analytics for user tracking. However, the site currently displays a 404 error page, indicating missing or inaccessible content, which negatively impacts user experience and trust. Contact information is clearly provided, but critical compliance documents such as privacy and cookie policies are absent. The technical infrastructure is modern but lacks some security best practices such as security headers and properly configured reCAPTCHA. Overall, the website demonstrates moderate technical maturity but requires significant improvements in content availability, security posture, and privacy compliance to enhance credibility and user trust.

SuperCub.Org is an established online community and forum dedicated to Piper Super Cubs and similar aircraft enthusiasts, focusing on backcountry flying and related adventures. The website offers forums, classifieds, videos, membership services, and an online store, targeting a niche audience of aviation hobbyists and pilots. The business is operated by SLP, INC., a US-based entity with a domain registration dating back to 2000, indicating a mature and stable presence in its niche market. Technically, the website employs a Bootstrap framework with jQuery and Google Fonts, hosted on infrastructure using Google Cloud DNS. It integrates Google Analytics for visitor tracking and MailChimp for email marketing. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced CMS features and some modern security enhancements such as DNSSEC and security headers. From a security perspective, the site uses HTTPS and has domain statuses that prevent unauthorized transfers or deletions, which are positive indicators. However, it lacks DNSSEC and important HTTP security headers like Content-Security-Policy and HSTS, which could improve its security posture. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional, professionally designed, and serves its community well but would benefit from enhanced security measures and improved privacy compliance to reduce risk and increase user trust.

Cardinal Flyers Online LLC operates a niche community website dedicated to owners and enthusiasts of the Cessna 177 Cardinal aircraft. The site provides extensive technical resources, community forums, event information, classifieds, and membership management services. It positions itself as a central hub for Cardinal owners worldwide, fostering knowledge exchange and community engagement. The business model is membership-based with sponsorship support, targeting a specialized aviation audience. Technically, the website uses legacy JavaScript and jQuery libraries with basic mobile optimization and moderate performance. Security practices include selective HTTPS enforcement and a cookie consent banner, but lack modern security headers and full HTTPS coverage. The WHOIS data is missing, raising concerns about domain registration legitimacy, although the website content is rich and consistent with a long-standing community. Overall, the site is functional and content-rich but would benefit from modern security and technical improvements.

P

Pete McLeod Racing

petemcleodracing.com

45

Pete McLeod Racing is a professional air racing brand centered around Pete McLeod, a prominent Red Bull Air Race pilot from Canada. The website serves as a comprehensive platform for his biography, news updates, media content, and sponsorship promotion. The business operates primarily in the transportation and media sectors, targeting air racing fans, sponsors, and media outlets. The company maintains a small but professional online presence with consistent branding and active engagement through news and social media links. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted by HostGator. It employs modern web technologies including Google Analytics and Google reCAPTCHA for security and tracking. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. However, it lacks important HTTP security headers and DNSSEC is not enabled, which are areas for improvement. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance documentation, and improved accessibility. These improvements would strengthen the site's security posture and regulatory compliance, enhancing user trust and business credibility.

The website www.xycht.cz is currently in a maintenance mode state, displaying only a placeholder message indicating that the site is under preparation. There is no active business content, no contact information, and no privacy or cookie policies available. The domain WHOIS data is unavailable, with the WHOIS query returning no entries, which suggests the domain may not be registered or is using privacy protection that hides registrant details. The website is built on WordPress and uses a maintenance mode plugin, with jQuery as a client-side library. No external links, social media, or business contact details are present, limiting the ability to assess business operations or credibility. The site is accessible without WAF or security challenges but lacks substantive content and security best practices.

N

NOVÁ ŠKOLA, s.r.o.

english-nns.cz

42

The website www.english-nns.cz/blog is an educational portal operated by NOVÁ ŠKOLA, s.r.o., focused on providing comprehensive English language teaching materials for primary schools and kindergartens in the Czech Republic. It offers textbooks, workbooks, multimedia interactive content, video demonstrations, and downloadable resources aligned with Czech educational standards. The site targets educators and teachers of young learners, supporting effective and engaging English language instruction. Technically, the site is built on WordPress with a moderate modern tech stack including Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and has good navigation and content quality. Security posture is solid with HTTPS and reCAPTCHA, but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. WHOIS data is missing, which reduces trustworthiness and calls for further verification. Overall, the site is functional, professional, and safe for its audience but could improve privacy compliance and security best practices.

N

NOVÁ ŠKOLA, s.r.o.

objevujeme-informatiku.cz

48

The website 'Objevujeme informatiku' is an educational platform presenting a new series of informatics textbooks with video tutorials, published by NOVÁ ŠKOLA, s.r.o. It targets teachers and students in the 4th and 5th grades of Czech elementary schools. The site offers detailed content about the textbooks, including features like QR code usage, motivational tasks, and digital literacy support. The business operates in the education sector with a niche focus on informatics education materials. Technically, the site is built on WordPress with modern libraries such as jQuery and Font Awesome, and it is well-optimized for mobile and accessibility. Security posture is adequate with HTTPS enabled, but lacks some security headers and privacy compliance elements. WHOIS data is unavailable, which limits domain trust assessment but the website content and presentation are professional and trustworthy.

I

IndieWebify.Me - a guide to getting you on the IndieWeb

indiewebify.me

42

IndieWebify.Me is a specialized educational website dedicated to guiding users through the IndieWeb movement, which emphasizes personal ownership of web content and decentralized social interactions. The site offers practical tools such as validation forms for microformats and webmention sending, alongside extensive links to official IndieWeb resources and open source projects. Its target audience includes individuals and developers interested in establishing personal domains and participating in decentralized web publishing. The business model is informational and community-driven, with no direct commercial offerings. Technically, the site employs a straightforward tech stack including Bootstrap CSS, Flat UI, and an older version of jQuery, hosted on Linode servers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, the absence of explicit HTTPS confirmation and security headers suggests room for improvement in security hardening. From a security perspective, the domain is well-registered with a long history and stable registrar details, indicating legitimacy. Yet, the lack of privacy and cookie policies, security headers, and contact information for incident response reduces compliance and trustworthiness. No signs of malicious or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, IndieWebify.Me presents as a credible, niche community resource with good content quality but moderate technical and security maturity. Strategic improvements in security practices, privacy compliance, and contact transparency would enhance its trust and resilience.

I

iChrono

ichrono.cz

45

iChrono.cz is a Czech Republic-based e-commerce retailer specializing in Swiss watches and related accessories. The company positions itself as an authorized exclusive distributor for multiple prestigious Swiss watch brands, offering a wide selection of mechanical and quartz watches with added value services such as a 5-year warranty on glass and battery replacements. Their professional service center further strengthens their market position by providing authorized servicing and repairs. The website is well-structured, professionally designed, and targets consumers interested in luxury and quality Swiss timepieces. Technically, the site uses a CMS platform (Topinfo CMS) with modern libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though lacks explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business presentation and contact information support legitimacy. The site is free from adult or questionable content and complies with GDPR requirements through clear privacy and cookie policies.

F

Full Circle Marketing Limited

full-circle-marketing.co.uk

46

Full Circle Marketing Limited operates as a UK-based marketing agency specializing in digital strategy, web development, content marketing, SEO, PPC, and social media marketing. The company targets businesses seeking to enhance their online presence and sales performance. The website presents a professional image with a consistent brand and a portfolio showcasing client work, indicating a solid market position within the marketing services sector. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy, although the website content itself appears trustworthy. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

Celtniecības Plēvju Centrs is a Latvian company specializing in the manufacturing and distribution of construction films and membranes, including diffusion membranes, waterproofing films, windproof films, vapor barriers, and related accessories. The company targets construction professionals and retail customers within Latvia, positioning itself as a local supplier of essential building materials. The website content is primarily in Latvian with options for Russian and English, reflecting a regional focus. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site shows moderate performance but lacks mobile optimization and accessibility features. There is no evidence of advanced SEO or structured data implementation. Security-wise, the site does not demonstrate HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The security posture is basic with no visible incident response or vulnerability disclosure mechanisms. Contact information is clearly provided, enhancing business credibility. The domain WHOIS data aligns with the business location and operations, supporting legitimacy. Overall, the website serves its purpose as an informational and product catalog site but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards.

Autond.cz is an established Czech online marketplace specializing in the listing and sale of automotive spare parts. Operated by Teas spol. s r. o., the platform offers a large inventory of over 218,000 parts from more than 215 sellers, primarily targeting the Czech and Slovak markets. The website provides search functionality by part code or vehicle brand, facilitating efficient parts sourcing for businesses and individuals. The company has a solid market presence with a domain age dating back to 2008, reflecting stability and trustworthiness in the automotive spare parts sector. Technically, the website employs a traditional web stack including jQuery 1.7.1, custom JavaScript, CSS, and integrates Google Analytics for user behavior tracking. Cookie consent is managed via CookieFirst scripts, indicating some level of privacy compliance. However, the site lacks modern frameworks or CMS indications and uses an outdated jQuery version, which may pose security risks. Mobile optimization and accessibility are basic, and SEO practices are minimal but functional. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but no advanced security headers were detected. There is no published privacy policy, terms of service, or incident response information, representing compliance and transparency gaps. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. The domain registration data aligns well with the business information, supporting legitimacy. Overall, autond.cz presents a moderately professional and trustworthy platform with room for improvement in privacy compliance, security hardening, and technical modernization. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

The website 'Reálná cena vozu' operated by TEAS spol. s r.o. provides a paid service for calculating the average price of vehicles sold in the Czech Republic based on a large and continuously updated database of actual sales data from autobazars. The service targets individuals and businesses interested in realistic vehicle pricing data. The company is established and registered in the Czech Republic with consistent domain registration data supporting legitimacy. Technically, the site uses older jQuery libraries and custom JavaScript with basic CSS styling, hosted under Czech domain registrars. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the data, and the use of an outdated jQuery version poses potential vulnerabilities. Privacy and cookie policies are absent, though terms of service are provided as a downloadable PDF. Contact information is clearly presented with phone, email, and physical addresses. Overall, the site is professional and trustworthy but would benefit from improved security and privacy compliance.

T

TEAS spol. s r.o.

autocaris.cz

48

Autocaris.cz is a Czech Republic-based online automotive classified advertising platform operated by TEAS spol. s r.o., established in 2006. The website aggregates a large inventory of used vehicles from numerous autobazars and private sellers, offering detailed search filters and vehicle origin verification. It holds a strong market position locally with over 28,000 vehicles listed and partnerships with hundreds of autobazars. The platform targets individuals and businesses seeking used vehicles in the Czech and Slovak markets. Technically, the site uses legacy JavaScript libraries such as jQuery 1.7.1, Google Adsense for advertising, Google Tag Manager for analytics, and CookieFirst for cookie consent management. The site is hosted under the REG-INTERNET-CZ registrar with DNS servers ns.forpsi.net and ns.forpsi.it. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks modern security headers and uses outdated JS libraries, which pose potential risks. Privacy compliance is basic with a cookie banner present but no visible privacy policy or terms of service pages. Contact information and company registration details are clearly provided, enhancing business credibility. Overall, the site is functional and professional but would benefit from technical and compliance improvements.

S

ST Print AG

stprint.ch

43

ST Print AG is a Swiss-based company specializing in the design and production of personalized promotional and merchandising products. As part of the Schellenberg Gruppe, a well-established family-owned group with over 60 years of sustainable business practices, ST Print AG offers a broad range of services including consulting, publishing, digital printing, personalization, logistics, and retail. The company targets both business and private customers seeking customized merchandise solutions. The website reflects a professional and consistent brand image with clear contact information and integration into a larger corporate group. Technically, the website employs modern web technologies such as Vue.js, UKit, and Matomo analytics, hosted likely within the Schellenberg Gruppe infrastructure. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is good with HTTPS enforced and some security headers implied, but lacks explicit privacy and cookie policies, as well as incident response contacts. Overall, the security posture is solid but could benefit from enhanced transparency and compliance documentation. The absence of privacy and cookie policies is a notable gap in GDPR compliance. The domain registration is consistent with the business claims, showing legitimacy and transparency. No WAF or blocking mechanisms were detected, allowing full content access. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing a security.txt file, enhancing accessibility, and improving security headers to strengthen trust and compliance.

S

Schwegler Druck und Medien AG

schwegler.com

48

Schwegler Druck und Medien AG is a Swiss-based medium-sized printing and media company specializing in personalized large-format advertising materials. With over 40 years of experience and as part of the Schellenberg Gruppe, it offers a comprehensive range of services from consultation, design, digital and specialty printing, to finishing and logistics. The company targets businesses and organizations seeking customized advertising solutions with a focus on quality and sustainability. Technically, the website employs modern frontend technologies such as Vue.js and UKit, backed by a Cockpit CMS. It uses Matomo analytics for privacy-conscious user tracking and is hosted under a reputable registrar. The site is mobile-optimized and well-structured, providing a good user experience. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. There is no cookie consent mechanism or published security policy, which are areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional and trustworthy digital presence with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen its security posture and regulatory adherence.

3

Events in the three-country region | 3event

3event.eu

39

The website 3mag.eu/en/events serves as a regional event calendar for the tri-border area encompassing parts of Germany, Czech Republic, and Poland. It offers a well-structured platform for users to discover various events such as festivals, music concerts, art exhibitions, sports activities, and more. The site targets a general audience interested in cultural and leisure activities within this geographic region. The business model revolves around event promotion and information dissemination, positioning itself as a key regional event aggregator. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, and libraries like Flatpickr for date selection and Embla Carousel for event display. The design is responsive and optimized for mobile devices, providing a good user experience. However, there is no evidence of a CMS or backend platform from the provided data. Hosting and domain registration are managed through RegistryGate GmbH, a reputable registrar. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers or policies were detected in the HTML content. There is a lack of visible privacy, cookie, or terms of service policies, which indicates potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and professionally designed for its purpose but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trustworthiness and regulatory adherence.

Reiff Corporation operates the website reiffpreheat.com, specializing in FAA approved aircraft engine preheat systems designed to extend engine life and improve safety during winter flying. The company targets aircraft owners, mechanics, manufacturers, and aviation institutions, positioning itself as an innovation leader with endorsements from reputable organizations such as Embry-Riddle Aeronautical University and the US Air Force and Naval Academies. The business model focuses on manufacturing and selling specialized heating products for aircraft engines. Technically, the website is built using basic HTML and CSS without modern frameworks or CMS. Hosting is provided by Network Solutions, LLC. The site lacks mobile optimization and accessibility features, and SEO practices are minimal. No analytics or tracking scripts are detected, indicating limited digital marketing infrastructure. From a security perspective, the site does not enforce HTTPS based on the provided data, lacks security headers, and does not provide privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are visible, limiting user trust and security transparency. The domain registration is stable and consistent with the business history, supporting legitimacy. Overall, the website is functional but basic, with moderate trustworthiness. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance user trust and regulatory adherence.

Hartzell Propeller operates a professionally designed website focused on aviation propeller manufacturing and related services. The site targets pilots and aviation enthusiasts, providing rich content including articles, videos, and product information. The business is well positioned in the transportation sector with a strong brand presence and digital marketing efforts. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but should enhance privacy compliance and security transparency.

A

Acorn Welding

acornwelding.com

49

Acorn Welding is a specialized aviation welding company positioned as Canada's largest aircraft exhaust and engine mounts repair company and the world's largest radial and vintage aircraft exhaust repair company. Their website showcases a broad product catalog and manufacturing capabilities, targeting aviation professionals and aircraft owners globally. The business model combines manufacturing, repair services, and e-commerce sales. Technically, the website is built on Magento with modern JavaScript libraries and integrates analytics and customer support tools. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks comprehensive security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact information.

Aerospace Manufacturing Inc. is an established company specializing in OEM contract manufacturing and commercial Maintenance, Repair & Overhaul (MRO) services for the aerospace industry. The company positions itself as an industry leader in aviation component manufacturing, focusing on tubular components, thin-wall welding, and precision machining. The website reflects a medium-sized business with a professional online presence, targeting aviation companies requiring manufacturing and MRO services. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with Cloudflare DNS services. The site is moderately optimized for performance and mobile devices, with good SEO practices implemented via Yoast SEO. However, there is room for improvement in accessibility and security hardening, such as enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits transparency and compliance. No analytics or tracking services are detected, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

H

Hvězdy dětem

hvezdydetem.cz

42

Hvězdy dětem is a Czech non-profit organization dedicated to supporting socially endangered children and children from children's homes by helping them fulfill their dreams and develop their talents. The organization operates through donations and an e-shop, engaging the community and leveraging celebrity involvement to enhance its outreach. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. Technically, the site uses modern web technologies and includes security features such as HTTPS and Google reCAPTCHA for form protection. However, the absence of WHOIS data and lack of visible security headers slightly reduce the overall trustworthiness from a domain registration and security perspective. Privacy compliance is partially addressed with a privacy policy document, but cookie consent mechanisms are missing. Overall, the site is safe, well-structured, and credible as a charitable organization.

H

Howco Group

howcogroup.com

48

Howco Group is a manufacturing and distribution company specializing in high performance alloys and components designed for challenging industrial environments. The website presents a professional image with clear descriptions of their business focus and services, targeting industrial and manufacturing clients. Technically, the site is built on WordPress using the Divi theme and includes SEO optimization via Yoast, but lacks advanced security features and privacy compliance indicators. The absence of WHOIS data and domain registration information raises concerns about domain legitimacy and trustworthiness. Security posture is moderate but could be improved by implementing security headers and publishing privacy and incident response policies. Overall, the site is functional and professional but requires enhancements in security, compliance, and transparency to strengthen trust and credibility.

H

Home Credit Slovakia, a. s.

bezvasplatky.sk

47

The website www.bezvasplatky.sk is an e-commerce platform operated by Home Credit Slovakia, a. s., specializing in the sale of consumer electronics and household products with installment payment options at zero interest. The platform targets Slovak consumers seeking flexible payment solutions for products such as mobile phones, notebooks, tablets, and home appliances. The business model integrates retail sales with financial services, positioning itself as a convenient and accessible online shopping destination in Slovakia. The website demonstrates consistent branding aligned with its parent company, Home Credit Group, and offers a broad product catalog structured for ease of navigation. From a technical perspective, the website leverages the Upgates e-commerce platform, integrates Google Tag Manager for analytics, and uses Google Fonts for typography. The site is mobile responsive and provides a moderate performance experience. However, some accessibility features could be enhanced to improve compliance and user experience. SEO practices are adequately implemented with proper meta tags and structured navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, indicating GDPR awareness. Nonetheless, the absence of explicit privacy policies, terms of service, and security headers such as Content-Security-Policy and X-Frame-Options suggests room for improvement in security and compliance documentation. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a trustworthy and professional online retail presence with moderate technical maturity and security practices. Strategic enhancements in privacy documentation, security headers, and contact transparency would further strengthen its compliance and user trust.

B

Benchmark Resorts & Hotels

benchmarkresortsandhotels.com

48

Benchmark Resorts & Hotels operates a professional hospitality website showcasing distinct resorts and hotels in iconic destinations. The company positions itself as a premium experiential hospitality provider offering personalized guest services. The website is built on the ProcessWire CMS and leverages modern technologies including Google Tag Manager, Flip.to marketing tools, and Adobe DTM for digital marketing management. The site is hosted on AWS Cloudfront CDN, ensuring good performance and availability. Security posture is solid with HTTPS enforced and a consent management platform (Osano) implemented, though explicit security headers and policies are not evident. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. No privacy or cookie policies were detected in the provided content, and no direct contact information is available, limiting transparency. Overall, the website is well-designed and functional but would benefit from enhanced compliance and transparency measures.