Security Directory

T

Thurbo AG

thurbo.ch

65

Thurbo AG is a regional railway company operating in Eastern Switzerland and parts of Southern Germany, providing passenger rail services primarily targeting commuters and regional travelers. The company is a subsidiary of the Swiss Federal Railways (SBB), positioning it as a key player in the regional transportation sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation, supporting a positive user experience. The technical infrastructure includes modern tracking and marketing tools such as Google Tag Manager, Adobe DTM, Facebook Pixel, and Hotjar, alongside a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. However, the site lacks a public security policy and incident response contact details, which are recommended for enhanced transparency and trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website.

O

OceanCare

oceancare.org

54

OceanCare is a Swiss-based international non-profit organization dedicated to ocean conservation and marine life protection since 1989. Recognized as a United Nations special advisor for marine protection, OceanCare operates with a strong focus on advocacy, public awareness, and scientific research to combat ocean pollution, destructive fishing practices, and underwater noise. The organization sustains its operations primarily through donations, memberships, and campaigns, targeting environmentally conscious individuals, NGOs, and policymakers. Technically, the website is built on WordPress using Elementor, enhanced with modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager. It features GDPR-compliant cookie consent mechanisms and secure donation forms, reflecting a mature digital infrastructure. The site is well-optimized for SEO, mobile-friendly, and accessible, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for non-profit entities. Overall, the website demonstrates a strong security posture and trustworthy business credibility. Strategically, OceanCare should enhance security headers and maintain regular audits of third-party scripts to mitigate risks. Continued transparency and compliance with privacy regulations will further strengthen user trust and organizational reputation.

B

Blaues Kreuz Schweiz

blaueskreuz.ch

55

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to supporting individuals affected by alcohol addiction, their families, and promoting addiction prevention and youth protection. It serves as the umbrella organization for addiction support services in Switzerland, offering counseling, online support, group activities, and prevention campaigns. The organization maintains a strong regional presence and is recognized by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with a professional design and clear navigation, although accessibility could be improved. Security best practices are observed with HTTPS enforcement and security headers, but explicit cookie consent and security policies are lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure policy and incident response contacts indicates room for improvement in transparency and readiness. Privacy compliance is moderate, with a privacy policy present but no cookie consent mechanism. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional online presence aligned with its mission. Strategic enhancements in privacy compliance, security transparency, and accessibility would further strengthen its digital maturity and stakeholder trust.

T

Thomann Nutzfahrzeuge AG

thomannag.com

67

Thomann Nutzfahrzeuge AG is a Swiss-based company specializing in commercial vehicles including trucks, buses, and transporters from major brands such as Renault Trucks, Volvo Trucks, Mercedes-Benz, and others. With 30 years of experience and multiple locations across Switzerland, the company offers a comprehensive range of services including sales, rental, maintenance, driver training, and proprietary software solutions (Thomann Plus) to optimize fleet management. The website reflects a mature business with a clear market position targeting commercial vehicle operators and fleet managers. Technically, the website is built on Concrete CMS and employs modern web technologies including JavaScript and SVG graphics. It is mobile-optimized and includes SEO best practices. The site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. However, explicit security policies and incident response contacts are not found, which could be improved. Security posture is solid with HTTPS and cookie consent, but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business identity, though the domain is newly registered in 2024, which may indicate a recent domain acquisition or rebranding. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security transparency and DNS security could enhance trust and resilience.

T

thurgautravel.ch

thurgautravel.ch

64

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

M

Maestrani Schweizer Schokoladen AG

maestrani.ch

63

Maestrani Schweizer Schokoladen AG is a well-established Swiss family-owned chocolate manufacturer with a history dating back to 1852. The company produces and markets Swiss chocolate under its own brands Minor and Munz, operates a B2B webshop for promotional chocolates, and offers a visitor experience called Chocolarium. The website is professionally designed, multilingual, and provides comprehensive information about the company, its products, and career opportunities. Technically, the site is built on Drupal 10 with modern web technologies, is mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital presence aligned with the company's market position and business model.

R

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG

mittelthurgau.ch

60

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG is a Swiss travel agency specializing in sustainable and premium river cruises across Europe. The company offers a variety of travel packages including themed cruises, gourmet festivals, solo travel, and worldwide cruises, targeting discerning travelers interested in luxury and eco-friendly travel experiences. The website reflects a mature digital presence with a focus on user experience and clear business communication. Technically, the site leverages modern web technologies such as Vue.js and Concrete5 CMS, supported by robust analytics and marketing tools including Google Tag Manager, Hubspot, and Mouseflow. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and provides comprehensive contact and business information, reinforcing trustworthiness.

M

Max Zeller Söhne AG

zellerag.ch

60

Max Zeller Söhne AG is a Swiss-based company specializing in the development and manufacturing of clinically proven herbal medicines. The company positions itself as a leading player in the Swiss herbal medicine market, targeting consumers interested in natural health and well-being solutions. Their website provides detailed product information, educational content on phytotherapy, and multiple language support, reflecting a mature digital presence. The business model focuses on product development, manufacturing, and retail distribution through online channels and physical outlets. The company maintains a consistent brand image and offers clear contact information and social media engagement.

V

Vesto AG

vesto.ch

67

Vesto AG is a specialized bicycle retail and service company based in St. Gallen, Switzerland, offering a wide range of bicycles including mountain bikes, e-bikes, racing bikes, gravel bikes, as well as clothing and accessories. The company targets cycling enthusiasts and the general public in the Ostschweiz region, providing personalized services such as bike fitting, repairs, and test bikes. Their market position is that of a trusted local specialist with strong community ties and partnerships. Technically, the website is built on modern frameworks like Nuxt.js and Strapi CMS, hosted likely behind Cloudflare, and employs best practices in performance, SEO, and accessibility. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, though no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. Recommendations include publishing a security policy and incident response contacts to enhance transparency and trust.

S

SIGVARIS GROUP

sigvaris.com

66

SIGVARIS GROUP is a well-established Swiss family-owned company specializing in medical compression products with a history spanning over 160 years. The company offers a broad portfolio including compression stockings, bandages, and postoperative compression clothing, serving both healthcare professionals and consumers primarily in Switzerland. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site leverages modern monitoring and analytics tools such as Google Tag Manager, Raygun, Azure Application Insights, and Elastic APM, hosted likely on Microsoft Azure, and built on the EPiServer CMS platform. Security posture is strong with HTTPS enforced and use of error monitoring, though explicit security headers could be verified further. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. The WHOIS data is unavailable, which is common for corporate privacy but reduces transparency. Overall, the website is professional, secure, and trustworthy, supporting SIGVARIS GROUP's market position as a leader in medical compression therapy products.

H

Hamilton Company

hamiltoncompany.com

69

Hamilton Company is a well-established provider of scientific instrumentation and engineered solutions, specializing in automated liquid handling, integrated devices, temperature control, and related services. With over 70 years of experience, the company targets research laboratories, production facilities, and scientific innovators globally. The website reflects a mature digital presence with comprehensive product navigation and service offerings. Technically, the site employs modern JavaScript frameworks such as Alpine.js, integrates HubSpot marketing and analytics tools, and uses a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and a vulnerability disclosure page suggests room for improvement. The lack of WHOIS data is a notable anomaly, potentially due to privacy protection or registry issues, which slightly impacts trustworthiness assessments. Overall, the website is professional, user-friendly, and compliant with privacy standards, supporting Hamilton Company's market position as a trusted leader in scientific automation solutions.

E

EKT AG

ekt.ch

57

EKT AG is a well-established Swiss company founded in 1912, specializing in providing energy and data services primarily within the canton of Thurgau. The company operates with a strong regional focus, serving business customers, municipalities, schools, and property management entities. Their offerings include energy supply, network construction and operation, telecommunications, data center services, and e-mobility solutions. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern analytics and marketing tools while maintaining GDPR compliance through a comprehensive privacy and cookie policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. The domain registration data aligns well with the company's history and legitimacy, supporting a high trust level. Overall, the website demonstrates professionalism, clear business positioning, and a commitment to sustainability and innovation.

F

FC St.Gallen 1879

fcsg.ch

75

FC St.Gallen 1879 is a historic Swiss football club with a well-established digital presence, including live match tracking, news, video content, and an e-commerce platform for merchandise. The website is built on Shopify, leveraging modern web technologies and third-party analytics tools to engage fans and customers effectively. The technical infrastructure is solid, with good mobile optimization and performance, although some SEO and accessibility aspects could be improved. Security posture is generally strong with HTTPS and no exposed sensitive data, but explicit security policies and headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site reflects a professional sports organization with a medium-sized digital footprint and good business credibility.

A

A.Vogel AG

avogel-company.ch

60

A.Vogel AG is a well-established Swiss manufacturer specializing in natural health products such as herbal medicines, nutritional supplements, medical devices, and body care products. The company has a strong emphasis on quality, sustainability, and natural health, serving both consumers and healthcare professionals. Their market presence extends internationally with partnerships and subsidiaries in 30 countries. The website reflects a mature digital infrastructure with modern JavaScript libraries, consent management, and professional login portals for healthcare providers. Security posture is strong with HTTPS enforcement and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with the company's brand and business model.

A

Audika

audika.ch

76

Audika is a leading Swiss healthcare company specializing in hearing tests, hearing aids, and hearing protection services. It operates over 70 hearing centers in Switzerland and is part of the Demant group, a global leader in hearing healthcare. The website is professionally designed, localized for the Swiss German market, and offers comprehensive information about their services including free hearing tests and personalized consultations. The company targets individuals with hearing needs, providing retail and service solutions in the healthcare sector. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and reflects a reputable business entity with consistent WHOIS data and transparent registrant information.

P

Pavlovín, spol. s r.o.

pavlovin.cz

39

Pavlovín, spol. s r.o. is a Czech winery based in Velké Pavlovice, specializing in producing and retailing high-quality wines from the South Moravia region. The company operates multiple wine shops across the Czech Republic and offers wines through an e-commerce platform. Their business model focuses on retail sales, wholesale to restaurants and wine bars, and hosting wine tasting events. The website reflects a mature digital presence with a professional design and consistent branding, targeting wine consumers and hospitality businesses. Technically, the site uses a variety of JavaScript libraries and tracking tools, including Google Analytics and Google Ads, indicating a moderate level of digital marketing sophistication. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and professional. Overall, the site is well-structured and user-friendly, with an appropriate age verification mechanism for alcohol-related content.

C

Chutě života s.r.o.

lauracoffee.cz

52

Laura Coffee is a family-owned coffee roastery and café operator based in Ostrava, Czech Republic, established in 2012. The company offers a diverse range of products and services including coffee roasting, an e-commerce shop with coffee and accessories, catering services, coffee preparation courses, and wholesale coffee supply. Their market position is that of a well-established local player with a strong community presence and diversified offerings. Technically, the website employs modern web technologies such as jQuery, Nette Framework, Google Tag Manager, and Smartlook analytics, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site uses HTTPS with good SSL configuration and cookie consent mechanisms, though lacks explicit security policy and incident response information. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

J

Join It

joinit.com

58

Join It is a SaaS membership management platform targeting nonprofits, clubs, and various membership organizations globally. The company offers a comprehensive suite of services including membership databases, digital membership cards integrated with Apple and Google Wallet, member portals, automated renewal reminders, and multiple integrations with popular tools such as Stripe, Mailchimp, and Slack. The platform is trusted by over 4,000 organizations and emphasizes ease of use and automation to streamline membership management. Technically, the website is built on Webflow CMS and employs a modern technology stack including Google Tag Manager, Mixpanel, and Facebook Pixel for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with fast loading times and clear navigation. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. From a security perspective, the site uses HTTPS with a solid SSL configuration and domain registration protections such as clientTransferProhibited status. However, DNSSEC is not enabled, and no security headers or incident response policies are published. The use of multiple third-party scripts increases the attack surface, necessitating regular security audits. Overall, Join It presents a professional and trustworthy online presence with strong business credibility and technical maturity. The main risks relate to privacy compliance and security policy transparency. Addressing these gaps would enhance user trust and regulatory adherence.

L

Live Nation Entertainment, Inc.

vibee.com

72

Vibee is a curated destination experience platform focused on cultural events, music festivals, and travel experiences, operating under the umbrella of Live Nation Entertainment, Inc. The website targets fans seeking unique event and travel packages, leveraging a modern web infrastructure built on Next.js and Material-UI. The platform integrates multiple third-party services for analytics, error tracking, and consent management, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer locks, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is strong, with comprehensive policies and user rights clearly articulated. Overall, Vibee presents a professional, trustworthy, and user-friendly online presence aligned with its business goals.

株

株式会社朝鮮日報日本語版 (Chosun Ilbo Japanese Edition)

chosunonline.com

54

Chosunonline.com is the Japanese language online edition of the Chosun Ilbo, South Korea's largest circulation newspaper. It provides a wide range of news content including social, international, political, economic, sports, and entertainment news targeted at Japanese-speaking audiences interested in Korean affairs. The website operates a mature digital infrastructure with multiple advertising networks and a consent management platform to comply with GDPR regulations. The business is well-established with a domain age of over 18 years and clear company information presented on the site. Security posture is generally good with HTTPS enforced and client transfer protection on the domain, though some improvements are recommended such as updating legacy JavaScript libraries and enhancing security headers. Overall, the site demonstrates a professional media presence with strong business credibility and compliance practices.

E

Evolve Creative

evolvecreative.com

61

Evolve Creative is a well-established creative agency based in Bemidji, Minnesota, specializing in website design, branding, marketing, videography, and SEO services primarily targeting businesses and organizations in Greater Minnesota. The company emphasizes custom, affordable solutions and has been operating since 2004, positioning itself as a regional leader in its sector. The website showcases a professional portfolio and client work, reinforcing its market position. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Breeze caching. It demonstrates good SEO practices, mobile optimization, and accessibility features. The site uses HTTPS and includes privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks explicit security headers and documented incident response or security policies. No vulnerabilities or exposed sensitive data were detected. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the business's claimed history and reduces trustworthiness. Overall, the website is professional and trustworthy in content and design but would benefit from clarifying domain registration details and enhancing security headers and policies to improve its security posture and business credibility.

W

WYVERN Ltd

wyvernltd.com

61

WYVERN Ltd is a globally recognized leader in aviation safety auditing, consulting, and information services, founded in 1991. The company offers a comprehensive suite of services including safety auditing, training, consulting, SMS software, and certification programs such as the Wingman and Flight Leader Programs. Their market position is strong within the aerospace transportation sector, supported by ISO 9001 certification and a robust digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a professional and responsive user experience. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, WYVERN demonstrates a mature and trustworthy online presence aligned with its business operations.

V

VERTICON 2026

verticon.org

51

VERTICON 2026 is a prominent global event focused on the vertical aviation industry, organized by HAI and hosted in Atlanta, Georgia. The event attracts a large audience of industry professionals, exhibitors, and international participants, offering extensive educational sessions and networking opportunities. The website effectively communicates the event's scale and benefits, targeting aviation professionals and exhibitors. Technically, the website is built on WordPress using the Salient theme and incorporates modern web technologies including Yoast SEO, WPBakery Page Builder, Google Tag Manager, and Facebook Pixel. Hosting is provided by SiteGround, and the site employs HTTPS with a good SSL configuration. The cookie consent mechanism is robust, offering detailed user controls and compliance with GDPR principles. From a security perspective, the site has a good baseline with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional, trustworthy, and well-structured, with moderate technical sophistication and good marketing integration. Strategic improvements in privacy documentation and security headers would further strengthen its compliance and security stance.

T

TicketSpice

ticketspice.com

74

TicketSpice is a technology company specializing in event ticketing software designed to help event organizers, attractions, nonprofits, and reservation managers sell tickets online efficiently and affordably. Positioned as a leading SaaS provider, TicketSpice offers a comprehensive suite of features including a drag-and-drop event page builder, mobile ticketing, ticket scanning, reserved seating, add-ons sales, and fraud prevention. The platform emphasizes ease of use, customization, and cost savings compared to competitors. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, and TikTok Pixel. The site is mobile optimized, well-structured, and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced and some security headers present, though there is room for improvement in explicit security policies and headers. Privacy compliance is addressed with a comprehensive privacy and cookie policy and GDPR indicators. However, the absence of WHOIS domain registration data is a notable anomaly that reduces domain trustworthiness. Overall, TicketSpice presents a professional and trustworthy online presence with strong business credibility but should address domain registration transparency and enhance security disclosures.

P

Printful

printful.me

69

Printful is a leading print-on-demand and dropshipping platform that enables entrepreneurs and brands to design, create, and sell custom products online without managing inventory. The company offers extensive integrations with popular e-commerce platforms and provides tools for product customization and fulfillment. The website reflects a mature, professional business with strong branding and trust indicators, including high customer ratings and partnerships with well-known brands. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, and Webpack, alongside analytics and error tracking tools like Google Analytics, Google Tag Manager, and Sentry. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses security headers, and implements CSRF protections. However, it lacks a publicly visible dedicated security policy or incident response contact information, which could enhance transparency and trust. The WHOIS data is unavailable, which raises minor concerns but does not detract significantly from the site's legitimacy given its established market presence. Overall, Printful's website demonstrates a strong digital maturity and business credibility, with recommendations to improve security transparency and WHOIS data availability to further strengthen trust and compliance.

C

Cebia, spol. s r.o.

carolina.cz

60

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

L

LazNet s.r.o.

laznet.cz

10

LazNet s.r.o. operates as a regional internet service provider focused on delivering high-speed internet, IPTV, and related telecommunications services primarily in the Opava region of the Czech Republic. The company emphasizes customer service with offerings such as a 30-day trial period and 24/7 support availability. Their market position is that of a small, local ISP with positive customer feedback and a clear focus on residential and small business customers. Technically, the website is built on a custom CMS by Dave Design and employs common web technologies including jQuery, Google Analytics, Google Tag Manager, and Zopim live chat. The site is HTTPS secured and includes a cookie consent mechanism, indicating a moderate level of digital maturity. However, some technologies like jQuery 1.9.1 are outdated, and security headers are not explicitly detected, suggesting room for improvement. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks visible security policies, incident response contacts, or vulnerability disclosure mechanisms. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or malicious content were detected in the site content. Overall, the website presents a professional and trustworthy front for a small regional ISP but would benefit from enhanced security practices, updated technologies, and transparent privacy and security policies to improve compliance and trust.

E

ENETIQA a.s.

enetiqa.cz

9

ENETIQA a.s. is a Czech energy group focused on providing energy production, energy savings, and waste energy utilization services primarily in Moravia, northern Bohemia, and Vysočina regions. The company operates through subsidiaries such as ENETIQA Solutions s.r.o. and IROMEZ Pelhřimov, delivering projects including EPC energy savings and smart energy solutions for housing. The website reflects a professional corporate presence with regular news updates and social media engagement, targeting business and public sector clients in the energy sector. Technically, the website uses CMS Animato with common JavaScript libraries like jQuery and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers were detected, and no explicit security or incident response policies are published. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic with cookie consent but lacks detailed privacy or security policies. Overall, the site is trustworthy and professional but would benefit from enhanced security practices and transparency regarding domain registration and incident response. Strategic recommendations include implementing security headers, publishing detailed security and incident response policies, verifying and publishing domain registration data, and improving direct contact information availability to enhance trust and compliance.

C

CHLEBIŠ s.r.o.

chlebis.cz

9

CHLEBIŠ s.r.o. operates as a specialized retailer and service provider of professional garden and municipal machinery based in Hlučín, Czech Republic. The company offers a comprehensive range of high-quality machines, warranty and post-warranty servicing, and spare parts sales. Additionally, it maintains an e-commerce platform for garden technology products from brands like STIHL, Fiskars, and Bahco. The website reflects a small business with a regional market focus, targeting both professional and consumer segments requiring garden and municipal equipment. Technically, the website is built on a custom CMS using the Nette 3.0 framework and incorporates several JavaScript libraries including jQuery 1.9.1, Owl Carousel, and Google Tag Manager for analytics and marketing. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, no security headers were detected in the provided data, and the use of an outdated jQuery version poses potential vulnerabilities. The absence of WHOIS data and expired hosting validity information raise concerns about domain registration transparency, although the website content and contact details appear legitimate. Overall, the website is professional, content-rich, and compliant with privacy standards but would benefit from enhanced security hardening and updated domain registration verification. Strategic improvements in security headers, library updates, and clearer incident response policies are recommended to strengthen trust and resilience.

P

ProEx 2000

proex2000.cz

58

ProEx 2000 is a Czech Republic-based company specializing in roofing and construction materials and services. The website presents a professional and well-structured platform targeting homeowners and construction professionals seeking roofing solutions. The business model appears to be a mix of B2C and B2B sales with a regional focus. Technically, the website employs common modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies on the site reduce the overall trustworthiness and compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and documented incident response or security policies, which are areas for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures to improve trust and compliance.

M

MASPEX Czech s.r.o

tigerenergydrink.cz

29

Tigerenergydrink.cz is the official website for Tiger Energy Drink, a brand operated by MASPEX Czech s.r.o, a medium-sized company in the energy beverage sector in the Czech Republic. The website serves as a marketing and informational platform targeting general consumers interested in energy drinks. The site features professional branding, consistent messaging, and comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and a consent management platform, ensuring compliance with GDPR and user tracking transparency. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though some security headers could be improved. Overall, the domain appears legitimate despite the lack of public WHOIS data, which is common for commercial entities protecting registrant privacy.

C

Car Aukce, spol. s.r.o.

caraukce.cz

50

Car Aukce, spol. s.r.o. operates an established online vehicle auction platform primarily serving the Czech market. The company offers services including vehicle purchase and sales auctions, operative leasing, and vehicle verification, targeting both individual and business customers. With over 20 years of experience and more than 51,000 vehicles sold, the company holds a strong market position supported by partnerships with reputable organizations such as Cardetect. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive auction information. Technically, the site employs modern JavaScript libraries and frameworks like jQuery, Bootstrap, and integrates analytics and verification services such as Google Analytics and Foxentry. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the website demonstrates high business credibility and good privacy compliance, making it a trustworthy platform for vehicle auctions.

C

CRNUK

crnuk.org

63

CRNUK is a UK-based trade association representing the food supplement industry, focusing on technical and scientific work related to vitamins, minerals, botanicals, and other bioactive nutrients. The organization serves manufacturers and suppliers, providing industry representation, resources, and compliance guidance. The website is built on WordPress with modern plugins and themes, hosted on SiteGround, and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact is primarily via web forms with no direct emails or phone numbers published. Overall, the site is professional and trustworthy but could improve security and privacy features.

O

Ohlmann Group

ohlmanngroup.com

67

Ohlmann Group is a well-established marketing and advertising agency based in Dayton, Ohio, with a history spanning over 75 years. The company offers a comprehensive range of marketing services including strategy, digital marketing, branding, media buying, and public relations. Their market position is strong regionally, supported by multiple industry awards and client testimonials. The website reflects a professional and consistent brand image targeting business clients seeking integrated marketing solutions. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Koi Marketing Automation. Hosting is provided by MediaTemple, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site uses HTTPS and domain status locks but lacks DNSSEC and security headers. There is no visible security or incident response policy, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

T

The Alaska Airmen's Association

alaskaairmen.org

51

The Alaska Airmen's Association is a well-established non-profit organization dedicated to supporting and advocating for general aviation in Alaska. With a membership exceeding 2,000, it serves as a significant voice for aviators in the region, offering services such as advocacy, scholarships, workforce development, and community events. The website reflects a mature organization with a clear mission and active community engagement. Technically, the site is built on WordPress with modern plugins and integrations, including Google Analytics and Neon One platform services, providing a solid digital infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and serves its target audience effectively.

V

Vertical Aviation International

rotor.org

68

Vertical Aviation International (VAI) is a well-established membership organization focused on the vertical flight industry, advocating for its benefits and providing safety, education, and community resources. The website positions VAI as a global leader with over 75 years of history, targeting aviation professionals and stakeholders. The digital infrastructure is built on WordPress with modern plugins and SEO tools, supported by GoDaddy hosting and integrated with marketing and analytics platforms such as Google Analytics and Feathr. Security posture is solid with HTTPS and standard best practices, though there is room for improvement in DNSSEC and formal security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its audience effectively.

E

Experimental Aircraft Association

eaa.org

59

The Experimental Aircraft Association (EAA) is a well-established non-profit organization founded in 1953, dedicated to supporting recreational aviation enthusiasts worldwide. The website serves as a comprehensive portal offering membership services, educational resources, event information, and community engagement tools. It maintains a strong market position as a leading aviation community with a broad target audience including pilots, youth, and aircraft builders. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience across devices. The use of structured data and extensive social media integration enhances its digital maturity. Security-wise, the website enforces HTTPS and uses standard security practices but lacks some advanced HTTP security headers, which could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, with minor areas for security enhancement.

I

InkSoft

inksoft.com

64

InkSoft operates as a specialized e-commerce platform focused on businesses selling custom branded merchandise, including decorated apparel and promotional products. The company positions itself as a comprehensive solution provider, offering tools from order management to delivery, targeting apparel decorators, promotional product distributors, and print businesses. The website reflects a mature digital presence with extensive resources, customer testimonials, and integration partnerships, indicating a solid market position within its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. The site is mobile-optimized, SEO-friendly, and integrates marketing and tracking tools such as HubSpot and Google Tag Manager. Performance is moderate with good accessibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain transparency and trust, although the website content and business information appear professional and consistent. Overall, InkSoft presents a trustworthy and professional online presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trustworthiness.

S

SalesAPE.ai

salesape.ai

67

SalesAPE.ai is a technology company specializing in AI-powered sales assistants designed to automate lead qualification, engagement, and appointment booking for small to medium-sized businesses. The platform integrates seamlessly with popular CRM systems and leverages conversational AI to mimic top sales team members, enabling businesses to increase sales efficiency and conversion rates. Backed by significant venture capital funding, SalesAPE.ai positions itself as a scalable and cost-effective solution in the sales automation market. The website demonstrates a mature digital presence with comprehensive content, professional design, and strong trust signals including customer testimonials and case studies. Technically, the site is built on modern frameworks such as Webflow and integrates multiple marketing and analytics tools, ensuring robust performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business present a credible and professional front with low risk indicators.

N

NOVÁ ŠKOLA, s.r.o.

english-nns.cz

42

The website www.english-nns.cz/blog is an educational portal operated by NOVÁ ŠKOLA, s.r.o., focused on providing comprehensive English language teaching materials for primary schools and kindergartens in the Czech Republic. It offers textbooks, workbooks, multimedia interactive content, video demonstrations, and downloadable resources aligned with Czech educational standards. The site targets educators and teachers of young learners, supporting effective and engaging English language instruction. Technically, the site is built on WordPress with a moderate modern tech stack including Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and has good navigation and content quality. Security posture is solid with HTTPS and reCAPTCHA, but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. WHOIS data is missing, which reduces trustworthiness and calls for further verification. Overall, the site is functional, professional, and safe for its audience but could improve privacy compliance and security best practices.

N

NOVÁ ŠKOLA, s.r.o.

matyskova-matematika.cz

50

Matýskova matematika is an educational portal focused on providing mathematics learning materials and videos for primary school students from grades 1 to 5. It is part of a broader educational system called AMOS, supported by the company NOVÁ ŠKOLA, s.r.o. The website offers a range of services including video tutorials, interactive textbooks, workbooks, and teacher seminars. The portal targets students, teachers, and parents seeking quality math education resources. Technically, the site is built on WordPress with modern web technologies and includes security features such as HTTPS, Google reCAPTCHA, and anti-spam plugins. However, the absence of WHOIS data and limited privacy and cookie policy disclosures slightly reduce its trustworthiness. Overall, the site is well-designed, accessible, and provides valuable educational content with a good security posture.

N

NOVA SKOLA, s.r.o.

ucebnice.online

51

Učebnice online is an educational platform operated by NOVA SKOLA, s.r.o., offering multimedia interactive textbooks (MIUč+) primarily for primary school students and teachers in the Czech Republic. The website provides both online and installed versions of their educational software, supported by video tutorials and technical assistance. The business model revolves around licensing and subscription access to over 110 interactive textbooks covering a wide range of subjects. The company maintains a moderate market position with a clear focus on digital education content.

I

iChrono

ichrono.cz

45

iChrono.cz is a Czech Republic-based e-commerce retailer specializing in Swiss watches and related accessories. The company positions itself as an authorized exclusive distributor for multiple prestigious Swiss watch brands, offering a wide selection of mechanical and quartz watches with added value services such as a 5-year warranty on glass and battery replacements. Their professional service center further strengthens their market position by providing authorized servicing and repairs. The website is well-structured, professionally designed, and targets consumers interested in luxury and quality Swiss timepieces. Technically, the site uses a CMS platform (Topinfo CMS) with modern libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though lacks explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business presentation and contact information support legitimacy. The site is free from adult or questionable content and complies with GDPR requirements through clear privacy and cookie policies.

W

World Aquatics Online

waqua.shop

69

World Aquatics Online operates an e-commerce platform specializing in aquatic-related apparel, accessories, and swim essentials. The website positions itself as an official licensed product store targeting general consumers interested in aquatic sports and lifestyle. The business is relatively new, with domain registration in late 2024, and operates primarily in Korea with English language support. The site leverages the Cafe24 e-commerce platform, integrating modern JavaScript libraries and Google Analytics for tracking. Security posture is adequate with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are minimal. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the site presents a professional and consistent brand image but would benefit from enhanced privacy compliance and security hardening.

조

조선일보

chosun.com

62

조선일보(www.chosun.com) is a leading South Korean digital news media platform providing comprehensive coverage of opinion, politics, society, economy, international affairs, sports, and culture. It operates multiple subsidiary news services targeting diverse audiences including Chinese, Japanese, and English speakers. The website demonstrates a mature digital infrastructure using modern JavaScript frameworks such as React, and integrates multiple analytics and advertising technologies including Google Analytics, Chartbeat, and Branch.io. The site is well-optimized for mobile and desktop users with good SEO and accessibility features. Security posture is solid with HTTPS enforced and use of modern libraries, though explicit security headers and privacy policies are not clearly visible in the provided content. WHOIS data for the domain is unavailable or missing, which is unusual but does not detract from the site's legitimacy given its strong brand presence and extensive content. Overall, the site is professional, content-rich, and trustworthy, serving a broad Korean-speaking audience with additional language options.

Z

Zonos

zonos.com

70

Zonos is a mature technology company specializing in cross-border ecommerce solutions, including duty and tax calculation, compliance management, and international checkout plugins. The company serves a broad B2B audience, powering over 1,500 brands globally with a strong market position supported by 15+ years of experience and extensive integrations. Technically, the website is built on a modern React/Next.js stack hosted on AWS, with good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, but lacks some advanced security headers and public security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and business-focused, with room for improvement in transparency and security disclosures.

Rail Recruiter Limited operates a specialized online job board focused on the UK rail industry, providing job listings, career advice, and recruitment services to both job seekers and employers. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. The technical infrastructure is based on ASP.NET WebForms with standard tracking tools like Google Analytics and Bing UET, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which should be addressed to improve resilience. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and functional platform for rail industry recruitment.

JobBoard.com is a UK-origin job board software platform operated by HotLizard Limited, offering white label solutions for new and existing job boards internationally. The platform emphasizes cost-effectiveness, industry best practices, and customer support. Technically, the website uses modern tracking and security tools such as Google Analytics, Google Tag Manager, and reCAPTCHA v3, but lacks some security headers and uses an outdated jQuery version. Privacy and cookie policies are comprehensive with user consent mechanisms in place. The security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing a security policy. The missing WHOIS data raises some legitimacy concerns, though the website content and contact information support a credible business presence.

HotLizard is a UK-based specialist company established in 1999, providing recruitment websites and job board software solutions. Their offerings range from off-the-shelf SaaS platforms to bespoke, fully customized recruitment technology solutions designed to enhance candidate experience and client engagement. The company targets recruitment agencies, job board owners, and direct employers, positioning itself as a trusted provider with a strong market presence supported by long domain tenure and positive customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and reCAPTCHA v3, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, GDPR compliant, and trustworthy, reflecting a mature business with a clear focus on recruitment technology.