Security Directory

B

British Herbal Medicine Association

bhma.info

61

The British Herbal Medicine Association (BHMA) operates as a UK-based professional association dedicated to herbal medicine practitioners and the promotion of herbal medicine. Established in 2001, BHMA provides membership services, advocacy, and information dissemination to its target audience of healthcare professionals and consumers interested in natural health. The website reflects this focus with content relevant to herbal medicine and related services. Technically, the site is built on WordPress using the Divi theme and WooCommerce plugin, indicating a mature digital infrastructure with e-commerce or membership capabilities. The presence of Mailchimp scripts suggests active marketing and newsletter engagement. Security-wise, the site employs HTTPS and domain registration protections but lacks advanced DNSSEC and security headers, which could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

S

Stiftung zur Palme

palme.ch

51

Stiftung zur Palme is a well-established Swiss non-profit foundation providing residential, work, and training opportunities for people with cognitive impairments. With over 50 years of experience, it offers a broad range of services including sheltered workplaces and diverse product lines such as bakery, gardening, and creative workshops. The organization targets individuals with disabilities, their families, customers of their products, and potential donors. Technically, the website uses modern frameworks like Bootstrap and integrates analytics tools with privacy considerations, though it lacks a cookie consent mechanism. Security posture is solid with HTTPS and secure forms, but could be improved by adding security headers and incident response policies. Overall, the website is professional, trustworthy, and accessible, reflecting the organization's credibility and commitment to inclusion.

K

Kaegi.com

kaegi.com

62

Kaegi.com represents a Swiss chocolate wafer brand with a professional online presence focused on retail and brand marketing. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. The site includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. However, the absence of WHOIS data and domain registration information raises concerns about domain legitimacy. The security posture is generally good with HTTPS and cookie consent, but lacks some security headers and explicit privacy and terms policies. Overall, the website is safe and professional but would benefit from enhanced transparency and contact information.

O

OceanCare

oceancare.org

54

OceanCare is a Swiss-based international non-profit organization dedicated to ocean conservation and marine life protection since 1989. Recognized as a United Nations special advisor for marine protection, OceanCare operates with a strong focus on advocacy, public awareness, and scientific research to combat ocean pollution, destructive fishing practices, and underwater noise. The organization sustains its operations primarily through donations, memberships, and campaigns, targeting environmentally conscious individuals, NGOs, and policymakers. Technically, the website is built on WordPress using Elementor, enhanced with modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager. It features GDPR-compliant cookie consent mechanisms and secure donation forms, reflecting a mature digital infrastructure. The site is well-optimized for SEO, mobile-friendly, and accessible, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for non-profit entities. Overall, the website demonstrates a strong security posture and trustworthy business credibility. Strategically, OceanCare should enhance security headers and maintain regular audits of third-party scripts to mitigate risks. Continued transparency and compliance with privacy regulations will further strengthen user trust and organizational reputation.

B

Blaues Kreuz Schweiz

blaueskreuz.ch

55

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to supporting individuals affected by alcohol addiction, their families, and promoting addiction prevention and youth protection. It serves as the umbrella organization for addiction support services in Switzerland, offering counseling, online support, group activities, and prevention campaigns. The organization maintains a strong regional presence and is recognized by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with a professional design and clear navigation, although accessibility could be improved. Security best practices are observed with HTTPS enforcement and security headers, but explicit cookie consent and security policies are lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure policy and incident response contacts indicates room for improvement in transparency and readiness. Privacy compliance is moderate, with a privacy policy present but no cookie consent mechanism. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional online presence aligned with its mission. Strategic enhancements in privacy compliance, security transparency, and accessibility would further strengthen its digital maturity and stakeholder trust.

T

thurgautravel.ch

thurgautravel.ch

64

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

M

Maestrani Schweizer Schokoladen AG

maestrani.ch

63

Maestrani Schweizer Schokoladen AG is a well-established Swiss family-owned chocolate manufacturer with a history dating back to 1852. The company produces and markets Swiss chocolate under its own brands Minor and Munz, operates a B2B webshop for promotional chocolates, and offers a visitor experience called Chocolarium. The website is professionally designed, multilingual, and provides comprehensive information about the company, its products, and career opportunities. Technically, the site is built on Drupal 10 with modern web technologies, is mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital presence aligned with the company's market position and business model.

R

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG

mittelthurgau.ch

60

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG is a Swiss travel agency specializing in sustainable and premium river cruises across Europe. The company offers a variety of travel packages including themed cruises, gourmet festivals, solo travel, and worldwide cruises, targeting discerning travelers interested in luxury and eco-friendly travel experiences. The website reflects a mature digital presence with a focus on user experience and clear business communication. Technically, the site leverages modern web technologies such as Vue.js and Concrete5 CMS, supported by robust analytics and marketing tools including Google Tag Manager, Hubspot, and Mouseflow. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and provides comprehensive contact and business information, reinforcing trustworthiness.

F

FC St.Gallen 1879

fcsg.ch

75

FC St.Gallen 1879 is a historic Swiss football club with a well-established digital presence, including live match tracking, news, video content, and an e-commerce platform for merchandise. The website is built on Shopify, leveraging modern web technologies and third-party analytics tools to engage fans and customers effectively. The technical infrastructure is solid, with good mobile optimization and performance, although some SEO and accessibility aspects could be improved. Security posture is generally strong with HTTPS and no exposed sensitive data, but explicit security policies and headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site reflects a professional sports organization with a medium-sized digital footprint and good business credibility.

A

Audika

audika.ch

76

Audika is a leading Swiss healthcare company specializing in hearing tests, hearing aids, and hearing protection services. It operates over 70 hearing centers in Switzerland and is part of the Demant group, a global leader in hearing healthcare. The website is professionally designed, localized for the Swiss German market, and offers comprehensive information about their services including free hearing tests and personalized consultations. The company targets individuals with hearing needs, providing retail and service solutions in the healthcare sector. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and reflects a reputable business entity with consistent WHOIS data and transparent registrant information.

P

Pavlovín, spol. s r.o.

pavlovin.cz

39

Pavlovín, spol. s r.o. is a Czech winery based in Velké Pavlovice, specializing in producing and retailing high-quality wines from the South Moravia region. The company operates multiple wine shops across the Czech Republic and offers wines through an e-commerce platform. Their business model focuses on retail sales, wholesale to restaurants and wine bars, and hosting wine tasting events. The website reflects a mature digital presence with a professional design and consistent branding, targeting wine consumers and hospitality businesses. Technically, the site uses a variety of JavaScript libraries and tracking tools, including Google Analytics and Google Ads, indicating a moderate level of digital marketing sophistication. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and professional. Overall, the site is well-structured and user-friendly, with an appropriate age verification mechanism for alcohol-related content.

C

Chutě života s.r.o.

lauracoffee.cz

52

Laura Coffee is a family-owned coffee roastery and café operator based in Ostrava, Czech Republic, established in 2012. The company offers a diverse range of products and services including coffee roasting, an e-commerce shop with coffee and accessories, catering services, coffee preparation courses, and wholesale coffee supply. Their market position is that of a well-established local player with a strong community presence and diversified offerings. Technically, the website employs modern web technologies such as jQuery, Nette Framework, Google Tag Manager, and Smartlook analytics, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site uses HTTPS with good SSL configuration and cookie consent mechanisms, though lacks explicit security policy and incident response information. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

R

Rara Themes

raratheme.com

76

Rara Themes is a specialized WordPress theme provider established in 2015, offering both free and premium mobile-friendly themes. The company targets WordPress users and small to medium businesses seeking easy-to-use themes with good support. Their business model includes theme sales and a theme club subscription, supported by documentation and customer testimonials. Technically, the website is built on WordPress with popular plugins and frameworks such as Elementor and Easy Digital Downloads, hosted behind Cloudflare for DNS and security. The site demonstrates moderate performance and excellent mobile optimization, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks visible security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages found. The domain WHOIS data is transparent and consistent with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but could improve privacy and security disclosures.

E

Evolve Creative

evolvecreative.com

61

Evolve Creative is a well-established creative agency based in Bemidji, Minnesota, specializing in website design, branding, marketing, videography, and SEO services primarily targeting businesses and organizations in Greater Minnesota. The company emphasizes custom, affordable solutions and has been operating since 2004, positioning itself as a regional leader in its sector. The website showcases a professional portfolio and client work, reinforcing its market position. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Breeze caching. It demonstrates good SEO practices, mobile optimization, and accessibility features. The site uses HTTPS and includes privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks explicit security headers and documented incident response or security policies. No vulnerabilities or exposed sensitive data were detected. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the business's claimed history and reduces trustworthiness. Overall, the website is professional and trustworthy in content and design but would benefit from clarifying domain registration details and enhancing security headers and policies to improve its security posture and business credibility.

V

VERTICON 2026

verticon.org

51

VERTICON 2026 is a prominent global event focused on the vertical aviation industry, organized by HAI and hosted in Atlanta, Georgia. The event attracts a large audience of industry professionals, exhibitors, and international participants, offering extensive educational sessions and networking opportunities. The website effectively communicates the event's scale and benefits, targeting aviation professionals and exhibitors. Technically, the website is built on WordPress using the Salient theme and incorporates modern web technologies including Yoast SEO, WPBakery Page Builder, Google Tag Manager, and Facebook Pixel. Hosting is provided by SiteGround, and the site employs HTTPS with a good SSL configuration. The cookie consent mechanism is robust, offering detailed user controls and compliance with GDPR principles. From a security perspective, the site has a good baseline with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional, trustworthy, and well-structured, with moderate technical sophistication and good marketing integration. Strategic improvements in privacy documentation and security headers would further strengthen its compliance and security stance.

T

TicketSpice

ticketspice.com

74

TicketSpice is a technology company specializing in event ticketing software designed to help event organizers, attractions, nonprofits, and reservation managers sell tickets online efficiently and affordably. Positioned as a leading SaaS provider, TicketSpice offers a comprehensive suite of features including a drag-and-drop event page builder, mobile ticketing, ticket scanning, reserved seating, add-ons sales, and fraud prevention. The platform emphasizes ease of use, customization, and cost savings compared to competitors. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, and TikTok Pixel. The site is mobile optimized, well-structured, and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced and some security headers present, though there is room for improvement in explicit security policies and headers. Privacy compliance is addressed with a comprehensive privacy and cookie policy and GDPR indicators. However, the absence of WHOIS domain registration data is a notable anomaly that reduces domain trustworthiness. Overall, TicketSpice presents a professional and trustworthy online presence with strong business credibility but should address domain registration transparency and enhance security disclosures.

C

Cebia, spol. s r.o.

carolina.cz

60

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

CebiaNET is a professional service portal associated with the Cebia brand, providing login access for professional users likely related to automotive or related sectors. The website presents a clean, professional interface with a focus on secure user authentication. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and ASP.NET MVC framework, indicating a mature and maintainable platform. Security practices such as HTTPS usage and CSRF tokens are implemented, though some security headers are missing and cookie consent mechanisms are absent, which could be improved to enhance compliance and security posture. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the perceived legitimacy given the professional branding and contact information. Overall, the site is functional, secure, and targeted at a professional audience with moderate risk and room for improvement in privacy compliance and security hardening.

E

ENETIQA a.s.

enetiqa.cz

9

ENETIQA a.s. is a Czech energy group focused on providing energy production, energy savings, and waste energy utilization services primarily in Moravia, northern Bohemia, and Vysočina regions. The company operates through subsidiaries such as ENETIQA Solutions s.r.o. and IROMEZ Pelhřimov, delivering projects including EPC energy savings and smart energy solutions for housing. The website reflects a professional corporate presence with regular news updates and social media engagement, targeting business and public sector clients in the energy sector. Technically, the website uses CMS Animato with common JavaScript libraries like jQuery and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers were detected, and no explicit security or incident response policies are published. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic with cookie consent but lacks detailed privacy or security policies. Overall, the site is trustworthy and professional but would benefit from enhanced security practices and transparency regarding domain registration and incident response. Strategic recommendations include implementing security headers, publishing detailed security and incident response policies, verifying and publishing domain registration data, and improving direct contact information availability to enhance trust and compliance.

C

Car Aukce, spol. s.r.o.

caraukce.cz

50

Car Aukce, spol. s.r.o. operates an established online vehicle auction platform primarily serving the Czech market. The company offers services including vehicle purchase and sales auctions, operative leasing, and vehicle verification, targeting both individual and business customers. With over 20 years of experience and more than 51,000 vehicles sold, the company holds a strong market position supported by partnerships with reputable organizations such as Cardetect. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive auction information. Technically, the site employs modern JavaScript libraries and frameworks like jQuery, Bootstrap, and integrates analytics and verification services such as Google Analytics and Foxentry. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the website demonstrates high business credibility and good privacy compliance, making it a trustworthy platform for vehicle auctions.

C

CRNUK

crnuk.org

63

CRNUK is a UK-based trade association representing the food supplement industry, focusing on technical and scientific work related to vitamins, minerals, botanicals, and other bioactive nutrients. The organization serves manufacturers and suppliers, providing industry representation, resources, and compliance guidance. The website is built on WordPress with modern plugins and themes, hosted on SiteGround, and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact is primarily via web forms with no direct emails or phone numbers published. Overall, the site is professional and trustworthy but could improve security and privacy features.

O

Ohlmann Group

ohlmanngroup.com

67

Ohlmann Group is a well-established marketing and advertising agency based in Dayton, Ohio, with a history spanning over 75 years. The company offers a comprehensive range of marketing services including strategy, digital marketing, branding, media buying, and public relations. Their market position is strong regionally, supported by multiple industry awards and client testimonials. The website reflects a professional and consistent brand image targeting business clients seeking integrated marketing solutions. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Koi Marketing Automation. Hosting is provided by MediaTemple, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site uses HTTPS and domain status locks but lacks DNSSEC and security headers. There is no visible security or incident response policy, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

R

RMB Solutions

rmbsolutions.net

66

RMB Solutions is a specialized provider of service management software tailored for durable goods manufacturers and companies requiring comprehensive service management capabilities. Their offerings include DepotService360, FieldService360, DealerService360, Rental360, and related modules supporting warranty, RMAs, vendor claims, and asset tracking. The company positions itself as a niche player with integrated ERP and data analytics capabilities, targeting B2B clients in manufacturing and technology sectors. The website is professionally designed using WordPress and the Divi theme, with good content quality and clear navigation. Technical infrastructure includes modern web technologies and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and domain protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website and domain registration data indicate a legitimate, established business with a solid digital presence.

Dresch Sàrl is a Swiss company with a commercial website primarily in French, offering products and contact options via phone and email. The website is built on WordPress using the Divi theme and integrates Matomo analytics for user tracking. However, the site currently displays a 404 error page, indicating missing or inaccessible content, which negatively impacts user experience and trust. Contact information is clearly provided, but critical compliance documents such as privacy and cookie policies are absent. The technical infrastructure is modern but lacks some security best practices such as security headers and properly configured reCAPTCHA. Overall, the website demonstrates moderate technical maturity but requires significant improvements in content availability, security posture, and privacy compliance to enhance credibility and user trust.

C

Cirrus Owners & Pilots Association

cirruspilots.org

64

The Cirrus Owners & Pilots Association (COPA) is a well-established non-profit organization founded in 2001, serving a global community of Cirrus aircraft owners, pilots, and aviation enthusiasts. The organization provides a comprehensive suite of services including safety training, proficiency programs, social events, forums, and member discounts, positioning itself as a niche leader in the aviation community. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and EasyDNNnews modules. It is hosted with Cloudflare DNS and uses NameCheap as the registrar. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen the site's trustworthiness and regulatory adherence.

T

The Alaska Airmen's Association

alaskaairmen.org

51

The Alaska Airmen's Association is a well-established non-profit organization dedicated to supporting and advocating for general aviation in Alaska. With a membership exceeding 2,000, it serves as a significant voice for aviators in the region, offering services such as advocacy, scholarships, workforce development, and community events. The website reflects a mature organization with a clear mission and active community engagement. Technically, the site is built on WordPress with modern plugins and integrations, including Google Analytics and Neon One platform services, providing a solid digital infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and serves its target audience effectively.

V

Vertical Aviation International

rotor.org

68

Vertical Aviation International (VAI) is a well-established membership organization focused on the vertical flight industry, advocating for its benefits and providing safety, education, and community resources. The website positions VAI as a global leader with over 75 years of history, targeting aviation professionals and stakeholders. The digital infrastructure is built on WordPress with modern plugins and SEO tools, supported by GoDaddy hosting and integrated with marketing and analytics platforms such as Google Analytics and Feathr. Security posture is solid with HTTPS and standard best practices, though there is room for improvement in DNSSEC and formal security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its audience effectively.

E

Experimental Aircraft Association

eaa.org

59

The Experimental Aircraft Association (EAA) is a well-established non-profit organization founded in 1953, dedicated to supporting recreational aviation enthusiasts worldwide. The website serves as a comprehensive portal offering membership services, educational resources, event information, and community engagement tools. It maintains a strong market position as a leading aviation community with a broad target audience including pilots, youth, and aircraft builders. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience across devices. The use of structured data and extensive social media integration enhances its digital maturity. Security-wise, the website enforces HTTPS and uses standard security practices but lacks some advanced HTTP security headers, which could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, with minor areas for security enhancement.

M

Minnesota Pilots Association

mnpilots.org

64

The Minnesota Pilots Association is a well-established non-profit organization dedicated to promoting and protecting aviation interests in Minnesota. Their website serves as a hub for advocacy, education, scholarships, and community engagement for the state's aviation community. The organization targets a diverse audience including pilots, aviation professionals, students, and enthusiasts. The site reflects a consistent brand and professional content aligned with their mission. Technically, the website is built on WordPress using Oxygen Builder and integrates modern plugins for forms, payments, and anti-spam protection. The infrastructure is supported by Cloudflare as registrar and DNS provider, with HTTPS enabled and Stripe for payment processing. Security posture is adequate but could be improved by enabling DNSSEC and implementing security headers. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy and functional with room for compliance and security enhancements.

SuperCub.Org is an established online community and forum dedicated to Piper Super Cubs and similar aircraft enthusiasts, focusing on backcountry flying and related adventures. The website offers forums, classifieds, videos, membership services, and an online store, targeting a niche audience of aviation hobbyists and pilots. The business is operated by SLP, INC., a US-based entity with a domain registration dating back to 2000, indicating a mature and stable presence in its niche market. Technically, the website employs a Bootstrap framework with jQuery and Google Fonts, hosted on infrastructure using Google Cloud DNS. It integrates Google Analytics for visitor tracking and MailChimp for email marketing. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced CMS features and some modern security enhancements such as DNSSEC and security headers. From a security perspective, the site uses HTTPS and has domain statuses that prevent unauthorized transfers or deletions, which are positive indicators. However, it lacks DNSSEC and important HTTP security headers like Content-Security-Policy and HSTS, which could improve its security posture. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional, professionally designed, and serves its community well but would benefit from enhanced security measures and improved privacy compliance to reduce risk and increase user trust.

P

Pete McLeod Racing

petemcleodracing.com

45

Pete McLeod Racing is a professional air racing brand centered around Pete McLeod, a prominent Red Bull Air Race pilot from Canada. The website serves as a comprehensive platform for his biography, news updates, media content, and sponsorship promotion. The business operates primarily in the transportation and media sectors, targeting air racing fans, sponsors, and media outlets. The company maintains a small but professional online presence with consistent branding and active engagement through news and social media links. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted by HostGator. It employs modern web technologies including Google Analytics and Google reCAPTCHA for security and tracking. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. However, it lacks important HTTP security headers and DNSSEC is not enabled, which are areas for improvement. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance documentation, and improved accessibility. These improvements would strengthen the site's security posture and regulatory compliance, enhancing user trust and business credibility.

I

InkSoft

inksoft.com

64

InkSoft operates as a specialized e-commerce platform focused on businesses selling custom branded merchandise, including decorated apparel and promotional products. The company positions itself as a comprehensive solution provider, offering tools from order management to delivery, targeting apparel decorators, promotional product distributors, and print businesses. The website reflects a mature digital presence with extensive resources, customer testimonials, and integration partnerships, indicating a solid market position within its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. The site is mobile-optimized, SEO-friendly, and integrates marketing and tracking tools such as HubSpot and Google Tag Manager. Performance is moderate with good accessibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain transparency and trust, although the website content and business information appear professional and consistent. Overall, InkSoft presents a trustworthy and professional online presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trustworthiness.

S

SalesAPE.ai

salesape.ai

67

SalesAPE.ai is a technology company specializing in AI-powered sales assistants designed to automate lead qualification, engagement, and appointment booking for small to medium-sized businesses. The platform integrates seamlessly with popular CRM systems and leverages conversational AI to mimic top sales team members, enabling businesses to increase sales efficiency and conversion rates. Backed by significant venture capital funding, SalesAPE.ai positions itself as a scalable and cost-effective solution in the sales automation market. The website demonstrates a mature digital presence with comprehensive content, professional design, and strong trust signals including customer testimonials and case studies. Technically, the site is built on modern frameworks such as Webflow and integrates multiple marketing and analytics tools, ensuring robust performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business present a credible and professional front with low risk indicators.

The website www.xycht.cz is currently in a maintenance mode state, displaying only a placeholder message indicating that the site is under preparation. There is no active business content, no contact information, and no privacy or cookie policies available. The domain WHOIS data is unavailable, with the WHOIS query returning no entries, which suggests the domain may not be registered or is using privacy protection that hides registrant details. The website is built on WordPress and uses a maintenance mode plugin, with jQuery as a client-side library. No external links, social media, or business contact details are present, limiting the ability to assess business operations or credibility. The site is accessible without WAF or security challenges but lacks substantive content and security best practices.

N

NOVÁ ŠKOLA, s.r.o.

matyskova-matematika.cz

50

Matýskova matematika is an educational portal focused on providing mathematics learning materials and videos for primary school students from grades 1 to 5. It is part of a broader educational system called AMOS, supported by the company NOVÁ ŠKOLA, s.r.o. The website offers a range of services including video tutorials, interactive textbooks, workbooks, and teacher seminars. The portal targets students, teachers, and parents seeking quality math education resources. Technically, the site is built on WordPress with modern web technologies and includes security features such as HTTPS, Google reCAPTCHA, and anti-spam plugins. However, the absence of WHOIS data and limited privacy and cookie policy disclosures slightly reduce its trustworthiness. Overall, the site is well-designed, accessible, and provides valuable educational content with a good security posture.

N

NOVA SKOLA, s.r.o.

ucebnice.online

51

Učebnice online is an educational platform operated by NOVA SKOLA, s.r.o., offering multimedia interactive textbooks (MIUč+) primarily for primary school students and teachers in the Czech Republic. The website provides both online and installed versions of their educational software, supported by video tutorials and technical assistance. The business model revolves around licensing and subscription access to over 110 interactive textbooks covering a wide range of subjects. The company maintains a moderate market position with a clear focus on digital education content.

N

NOVÁ ŠKOLA, s.r.o.

objevujeme-informatiku.cz

48

The website 'Objevujeme informatiku' is an educational platform presenting a new series of informatics textbooks with video tutorials, published by NOVÁ ŠKOLA, s.r.o. It targets teachers and students in the 4th and 5th grades of Czech elementary schools. The site offers detailed content about the textbooks, including features like QR code usage, motivational tasks, and digital literacy support. The business operates in the education sector with a niche focus on informatics education materials. Technically, the site is built on WordPress with modern libraries such as jQuery and Font Awesome, and it is well-optimized for mobile and accessibility. Security posture is adequate with HTTPS enabled, but lacks some security headers and privacy compliance elements. WHOIS data is unavailable, which limits domain trust assessment but the website content and presentation are professional and trustworthy.

I

iChrono

ichrono.cz

45

iChrono.cz is a Czech Republic-based e-commerce retailer specializing in Swiss watches and related accessories. The company positions itself as an authorized exclusive distributor for multiple prestigious Swiss watch brands, offering a wide selection of mechanical and quartz watches with added value services such as a 5-year warranty on glass and battery replacements. Their professional service center further strengthens their market position by providing authorized servicing and repairs. The website is well-structured, professionally designed, and targets consumers interested in luxury and quality Swiss timepieces. Technically, the site uses a CMS platform (Topinfo CMS) with modern libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though lacks explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business presentation and contact information support legitimacy. The site is free from adult or questionable content and complies with GDPR requirements through clear privacy and cookie policies.

F

Full Circle Marketing Limited

full-circle-marketing.co.uk

46

Full Circle Marketing Limited operates as a UK-based marketing agency specializing in digital strategy, web development, content marketing, SEO, PPC, and social media marketing. The company targets businesses seeking to enhance their online presence and sales performance. The website presents a professional image with a consistent brand and a portfolio showcasing client work, indicating a solid market position within the marketing services sector. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy, although the website content itself appears trustworthy. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

V

Virgin Hotels Las Vegas

virginhotelslv.com

63

Virgin Hotels Las Vegas is a lifestyle-focused hospitality brand operating an upscale hotel, casino, and entertainment venue in Las Vegas, affiliated with Hilton's Curio Collection. The website provides comprehensive information about accommodations, dining, entertainment, and events, targeting leisure and business travelers seeking a modern Vegas experience. The business model centers on hospitality services combined with casino gaming and live entertainment, positioning itself as a premium player in the Las Vegas market. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Adobe DTM, and various tracking pixels, indicating a mature digital marketing infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and professional design. Security posture is good with HTTPS enforced and secure forms, though DNSSEC is not enabled and Content-Security-Policy headers are missing, representing areas for improvement. Privacy compliance is basic but present with privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and marketing sophistication.

K

KeepCart

keepcart.co

55

KeepCart is a SaaS company specializing in protecting e-commerce stores, particularly Shopify merchants, from coupon code leaks and abuse caused by coupon extensions and duplicate customer accounts. Their product suite includes coupon extension blocking, leak alerts, and duplicate customer blocking, aimed at increasing merchant margins by preventing revenue loss. The company positions itself as a cost-effective and more comprehensive alternative to competitors like CleanCart, with a focus on ease of installation and customer support. Technically, the website is built on Webflow CMS and integrates with Shopify, leveraging modern web technologies such as Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a public security policy or incident response contact, which are areas for improvement. The WHOIS data is privacy protected, which is common for SaaS businesses but limits transparency. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, KeepCart presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance mechanisms and security best practices would further enhance their security posture and trustworthiness.

S

Sports Thread

sportsthread.com

61

Sports Thread operates a specialized social media platform connecting student-athletes, coaches, parents, and fans. Established in 2008, it positions itself as a leading network in this niche, offering mobile applications on iOS and Android to enhance user engagement. The website content and branding consistently reflect this focus, targeting sports communities with a customer-first approach. Technically, the site uses a custom or unknown CMS with modern JavaScript libraries such as jQuery and media players, hosted on AWS infrastructure with Amazon DNS services. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism despite tracking scripts like Google Analytics and ShareThis. Contact information is limited to an email address, with no phone or physical address provided. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

R

Rīgas Valsts Tehnikums

rvt.lv

51

Rīgas Valsts Tehnikums (RVT) is a Latvian state technical school providing vocational education across multiple technical and commercial disciplines. The institution targets students and adult learners, offering a broad range of programs supported by EU projects such as Erasmus+. The website reflects a well-established educational entity with a clear focus on technical training and community engagement. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and security practices including HTTPS and security headers. However, the absence of a visible cookie consent mechanism and explicit security policies indicates room for compliance improvement. Overall, the site is professional, secure, and trustworthy, with active social media presence and clear contact channels.

S

Sopro

sopro.io

70

Sopro is a UK-based B2B prospecting and lead generation service founded in 2015. The company offers a multi-channel outreach platform designed to source and engage ideal prospects for businesses, enabling clients to focus on closing sales. Their services include lead generation, email marketing, demand generation, appointment setting, account-based marketing, and multi-channel marketing. The website demonstrates a mature digital presence with professional design, clear navigation, and strong trust signals such as customer reviews and awards. Technically, the site is built on WordPress with integrations including Google Tag Manager, HubSpot forms, and Cookiefirst for cookie consent management. Security posture is good with HTTPS and domain EPP protections, though DNSSEC is not enabled and no explicit security or privacy policies were found in the provided content. Overall, the site is trustworthy and well-positioned in the B2B marketing technology sector.

N

Narrativa AI

narrativa.com

64

Narrativa AI operates the Narrativa® Navigator Platform, a no-code generative AI content automation solution designed for high-volume, complex content creation in regulated and content-intensive industries such as life sciences, finance, marketing, and media. The platform emphasizes speed, accuracy, and consistency, serving notable clients including Pfizer, Microsoft, and Dow Jones. The website demonstrates a mature digital presence with professional design, SEO optimization, and integration of modern web technologies like WordPress and Yoast SEO. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and client endorsements. Security posture is generally good with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the website is trustworthy and business credible but would benefit from enhanced transparency and security disclosures.

S

SportsBet.com

sportsbet.com

57

SportsBet.com is an established online platform providing information, tips, and live odds related to sports betting, horseracing, and online casino games. The site operates primarily as an affiliate marketing business, directing users to betting platforms such as bet365. The website is well-structured, with good content quality and clear navigation, targeting adult sports bettors and gambling enthusiasts. Technical infrastructure includes modern libraries and frameworks like jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and moderately performant user experience. Security posture is adequate but could be improved with enhanced security headers and explicit policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the site's content and affiliate relationships lend credibility. Privacy compliance is basic, with cookie consent implemented but limited GDPR indicators. Overall, the site is professional and trustworthy within its niche but would benefit from improved transparency and security documentation.

WhirlWind Propellers is a specialized manufacturer and service provider of propellers for airboats, aircraft, UAVs, and wind tunnel testing. The company has a niche market position and is now integrated as part of Hartzell Propeller, a larger parent company based in Piqua, Ohio. The website reflects a small business with a focused product line and clear contact channels. Technically, the website uses established but somewhat dated technologies such as Bootstrap 3 and jQuery, hosted behind Cloudflare DNS services. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no explicit security headers or DNSSEC are enabled, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain is legitimate with a long registration history consistent with the business claims.

T

Tanis Aircraft Products

tanisaircraft.com

50

Tanis Aircraft Products is a specialized manufacturer of aircraft engine preheat systems, serving piston, turbine, and rotorcraft markets. Established in 1974, the company holds a leading position in its niche, offering FAA Supplemental Type Certified products. The website reflects a mature business with a clear focus on aviation safety and product quality. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins for SEO and performance, and integrates analytics tools such as Google Analytics and Microsoft Clarity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, though the website content and branding are professional and consistent. Overall, the site is trustworthy and well-maintained but could improve transparency and security practices.

Hartzell Propeller operates a professionally designed website focused on aviation propeller manufacturing and related services. The site targets pilots and aviation enthusiasts, providing rich content including articles, videos, and product information. The business is well positioned in the transportation sector with a strong brand presence and digital marketing efforts. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but should enhance privacy compliance and security transparency.

Hartzell Propeller Service Center is a specialized FAA-certified repair station focused exclusively on the Hartzell product line, offering propeller repair, overhaul, sales, and support services. The company positions itself as a trusted source for guaranteed lead times, industry-best warranty, and a dedicated exchange program, targeting general aviation operators and maintenance organizations. The website reflects a medium-sized business with a professional and consistent brand presence, supported by customer testimonials and FAA certification as trust indicators. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and Google Analytics for enhanced user experience and tracking. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and functional, but could enhance compliance and security practices to strengthen its digital maturity and risk posture.