Security Directory

C

Cowboy SA

cowboy.com

0

Cowboy SA is a Belgian-based company specializing in connected electric bikes designed for urban riders seeking efficient and stylish mobility solutions. The company holds a strong market position as an innovative leader, evidenced by multiple prestigious design awards and its status as the first e-bike producer to achieve B Corp certification. Their business model revolves around direct e-commerce sales, supported by a comprehensive service network of over 200 stores and a feature-rich mobile app enhancing the user experience. The website reflects a mature digital presence built on the Shopify platform, integrating advanced marketing and analytics tools to optimize customer engagement and conversion. Security posture is robust with enforced HTTPS, domain locking, and cookie consent mechanisms, although minor improvements such as enabling DNSSEC and publishing a dedicated security policy could enhance trust further. Overall, Cowboy presents a professional, trustworthy, and well-structured online presence aligned with its business goals and compliance requirements.

C

CallPass

callpass.com

0

CallPass operates as a provider of advanced asset tracking solutions, specializing in IoT-based platforms for fleet, vehicle, and asset tracking. The company positions itself as a market leader offering location-based business intelligence to enterprises requiring real-time tracking and management of assets. The website reflects a professional business-to-business model targeting industries reliant on transportation and asset management. Technically, the site is built on WordPress with a modern tech stack including various analytics and marketing tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in transparency, privacy compliance, and security practices are recommended to enhance credibility and reduce risk.

Air France is a leading French airline offering flight booking services to over 230 destinations worldwide. The website serves as the official platform for ticket reservations, travel deals, and customer support, targeting general travelers and business customers. The site reflects Air France's strong market position as part of the Air France-KLM group, with a consistent brand presence and comprehensive service offerings. Technically, the website employs modern web technologies including Angular and Material Design components, ensuring a responsive and accessible user experience. The infrastructure supports good performance and SEO optimization, with mobile-friendly design and accessibility features. Security posture is robust, with HTTPS enforced, strong security headers, and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence and a visible data protection officer contact. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, suitable for an enterprise-level airline service. Strategic recommendations include publishing a public incident response policy and vulnerability disclosure framework to enhance transparency and security readiness.

L

Letuška.cz

letuska.cz

0

Letuška.cz is a Czech online travel agency specializing in affordable flight bookings worldwide, complemented by a broad range of travel-related services including car rentals, travel insurance, visa assistance, and group bookings. The website presents a professional and user-friendly interface, leveraging modern web technologies such as Angular and htmx.org, and integrates multiple tracking and analytics tools for marketing and performance monitoring. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall business presence and service offerings indicate a credible and established entity in the transportation sector. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and providing clearer direct contact information to improve trust and compliance.

K

KAFKA TRANSPORT a.s.

kafkatransport.cz

0

KAFKA TRANSPORT a.s. is a Czech transportation company with over three decades of experience, providing a broad range of logistics and transport services including international and domestic freight, parcel delivery, storage, vehicle repair, washing, and rental services. The company targets businesses and individuals requiring reliable transport solutions and maintains an active presence on social media platforms to engage with its audience. The website is professionally designed, mobile-optimized, and includes essential business information and GDPR-compliant privacy and cookie policies. Technically, the website leverages modern web technologies such as Google Analytics, Bootstrap, FontAwesome, and Google Fonts, and is built on the Pagebuilder CMS platform. It employs HTTPS for secure communication and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. However, some security best practices like explicit security headers are missing, and no incident response or security policy information is publicly available. From a security perspective, the site shows good baseline protections but lacks advanced security disclosures and headers. The absence of WHOIS data for the domain is a notable concern, as it limits the ability to verify domain legitimacy and registration details. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security hardening. The overall risk assessment is moderate; the business appears legitimate and professional, but the missing WHOIS data and lack of explicit security policies reduce trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving domain registration transparency to strengthen trust and compliance.

S

SwitzerlandMobility

schweizmobil.ch

0

SwitzerlandMobility operates a national platform focused on summer mobility and outdoor activities in Switzerland, providing route planning, sightseeing, and travel report services primarily targeting tourists and outdoor enthusiasts. The website demonstrates moderate digital maturity with modern JavaScript frameworks and bundling tools, and integrates Google Analytics and Tag Manager for user tracking. However, the site lacks visible privacy and cookie policies, contact information, and explicit security headers, which impacts its compliance and security posture. The domain registration data aligns well with the business focus and country, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

A

AutoMapa Sp. z o.o.

targeo.pl

0

AutoMapa Sp. z o.o. operates the Targeo website, a comprehensive mapping and routing platform focused on Poland. The service offers detailed maps with over 8 million addresses, precise route planning, and real-time traffic congestion monitoring branded as Korkometr™. The platform targets both general users and businesses requiring location intelligence and delivery optimization solutions. The website integrates with AutoMapa's broader ecosystem, providing business services such as geocoding, territory planning, and proof of delivery. Technically, the site employs modern analytics tools including Google Analytics, Microsoft Clarity, and Piwik, alongside a robust cookie consent mechanism via CookieScript, ensuring GDPR compliance. Advertising is managed through reputable networks like Google Adsense and OpenX, with transparent disclosures. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and compliance indicate legitimacy.

A

APG|SGA

infosnow.ch

0

infosnow.ch is a specialized portal offering interactive maps and detailed information about ski resorts and mountain tourism destinations primarily in Switzerland. The site targets tourists and outdoor enthusiasts seeking seasonal activity information and resort details. The business operates in the transportation sector with a focus on mountain tourism. Technically, the site uses OpenStreetMap tiles and custom JavaScript for map rendering, providing a good user experience with moderate performance and basic mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is functional and relevant but would benefit from improved security and compliance measures.

A

AGC Automotive

agc-automotive.com

0

AGC Automotive is a leading global supplier specializing in automotive glazing solutions with a history spanning over 60 years. The company positions itself as a world leader in automotive glass, offering a broad range of products including automotive replacement glass, glass for transport vehicles, and mobility solutions such as displays, antennas, and sensors. The website reflects a mature enterprise with a strong focus on innovation and sustainability, aligned with the AGC Group's corporate philosophy. Technically, the website employs modern JavaScript frameworks and integrates multimedia content via YouTube APIs, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, though improvements can be made by implementing security headers and explicit cookie consent mechanisms. The absence of WHOIS data raises concerns about domain registration transparency, warranting further verification. Overall, the website is professional, trustworthy, and well-structured, targeting automotive industry professionals and partners.

S

Schweizerische Bodensee-Schifffahrt AG

yachthafen-romanshorn.ch

0

Schweizerische Bodensee-Schifffahrt AG operates two harbor facilities in Romanshorn, Switzerland, providing mooring and maintenance services for private sailing and motor boats. The company holds a regional position in transportation and harbor management on Lake Constance, offering additional services such as boat lifting and radar training. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation tailored to boat owners and visitors. Technically, the site employs modern web technologies and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, though some security headers are not explicitly detected in the HTML source. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-maintained, supporting the company's business objectives effectively.

S

Schweizerische Bodensee-Schifffahrt AG

sbsag.ch

0

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

F

Flight Safety Foundation

flightsafety.org

0

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.

S

Schweizerische Bodensee-Schifffahrt AG

bodensee-schiffe.ch

0

Schweizerische Bodensee-Schifffahrt AG operates a regional transportation and tourism service on Lake Constance, offering ferry and cruise ship services, experience trips, event hosting, and gastronomy. The company maintains a professional website built on WordPress with Elementor, integrating multiple plugins for booking and event management. The site is well-structured with good SEO practices and modern technology usage, including Google Analytics and Tag Manager for tracking. However, the absence of explicit privacy and cookie policies, as well as lack of visible security headers, indicates gaps in compliance and security posture. No contact emails or phone numbers were found in the provided content, which may affect user trust and support accessibility. Overall, the website is legitimate, consistent with the business claims, and provides a good user experience for its target audience.

V

Vertical Aviation International

verticalavi.org

0

Vertical Aviation International (VAI) is a well-established membership organization dedicated to advocating for the vertical flight industry globally. With over 75 years of history, VAI serves as a leading voice providing safety initiatives, education, advocacy, and community engagement for professionals in vertical aviation. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS with modern SEO and analytics tools. The technical infrastructure is solid, hosted via reputable providers, and includes standard security practices such as HTTPS and domain status protections. However, there are opportunities to enhance security by enabling DNSSEC and implementing additional security headers. Privacy compliance is addressed with visible privacy and cookie policies, though GDPR compliance could be improved with more explicit statements. Overall, VAI's website demonstrates a strong market position and trustworthy online presence suitable for its industry and audience.

T

TEAS spol. s r.o.

teas.cz

0

TEAS spol. s r.o. is a well-established software supplier specializing in the automotive market in the Czech Republic and Slovakia, with a domain registered since 1997. The company positions itself as the largest software provider for this sector in the region, offering tailored software solutions to automotive businesses. Their website reflects a professional and consistent brand image, targeting automotive industry clients with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a reputable consent management platform to comply with privacy regulations. Hosting is provided by Forpsi, a known Czech hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

F

Flight Safety Foundation

aviation-safety.net

0

The Aviation Safety Network (ASN) is a specialized information service focused on aircraft accidents and civil aviation safety issues. It operates as an exclusive service of the Flight Safety Foundation, a reputable organization in the aviation safety sector. ASN provides comprehensive accident databases, investigation details, safety statistics, and monthly email digests, targeting aviation professionals, researchers, and safety analysts worldwide. The website demonstrates a consistent brand identity aligned with its parent organization and maintains a professional presence with active social media channels. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Google Charts for data visualization. It integrates Google Analytics for user tracking and offers a moderate level of mobile optimization and accessibility. While the site is functional and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, ensuring encrypted communication, but does not visibly implement advanced security headers or publish detailed security policies. The absence of WHOIS registrant data limits domain trust assessment, though the affiliation with Flight Safety Foundation and the quality of content provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, ASN presents a trustworthy and authoritative resource in the aviation safety domain with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

V

Virgin Voyages

virginvoyages.com

0

Virgin Voyages operates as a premium adults-only cruise line offering luxury, almost all-inclusive cruise vacations primarily targeting adult travelers seeking unique and boutique cruise experiences. The website reflects a mature digital infrastructure with advanced personalization and A/B testing capabilities, leveraging modern JavaScript frameworks and multiple third-party marketing and analytics tools. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the branding and external references strongly support legitimacy. Overall, the site presents a professional, secure, and user-friendly platform aligned with Virgin Group's standards.

V

Virgin Balloon Flights

virginballoonflights.co.uk

0

Virgin Balloon Flights is a well-established UK-based company specializing in hot air balloon rides and related experience gifts. Positioned as the UK's leading passenger balloon rides operator, the company offers flights from over 100 locations nationwide. Their business model focuses on selling adventure experiences and gift vouchers through a professionally designed and user-friendly website. The company demonstrates strong branding consistency and trust indicators including CAA certification and a long operational history since 1994. Technically, the website employs modern web technologies such as HTMX, Alpine.js, Google Tag Manager, and integrates marketing and analytics tools like Mailchimp and Ahrefs Analytics. The site is mobile-optimized, SEO-friendly, and provides a smooth user experience. While HTTPS is enforced, the site could improve security posture by implementing additional HTTP security headers. From a security perspective, the website shows good practices including secure forms, cookie consent management, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response information is noted. The WHOIS data for the www subdomain is unavailable due to domain naming rules, but the overall legitimacy of the domain and business is supported by consistent branding and contact information. Overall, Virgin Balloon Flights presents a low-risk profile with a strong market position and a mature digital presence. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

Virgin Atlantic Airways Limited is a major UK-based international airline specializing in passenger air travel primarily to the US and other global destinations. The company is part of the Virgin Group and operates with a strong brand presence and a focus on customer experience, including onboard amenities such as food, drinks, entertainment, and WiFi. The website reflects a mature digital presence with modern technologies and excellent design quality. The technical infrastructure leverages Next.js and React frameworks, hosted likely on Akamai's CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

T

Thurbo AG

thurbo.ch

0

Thurbo AG is a regional railway company operating in Eastern Switzerland and parts of Southern Germany, providing passenger rail services primarily targeting commuters and regional travelers. The company is a subsidiary of the Swiss Federal Railways (SBB), positioning it as a key player in the regional transportation sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation, supporting a positive user experience. The technical infrastructure includes modern tracking and marketing tools such as Google Tag Manager, Adobe DTM, Facebook Pixel, and Hotjar, alongside a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. However, the site lacks a public security policy and incident response contact details, which are recommended for enhanced transparency and trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website.

T

Thomann Nutzfahrzeuge AG

thomannag.com

0

Thomann Nutzfahrzeuge AG is a Swiss-based company specializing in commercial vehicles including trucks, buses, and transporters from major brands such as Renault Trucks, Volvo Trucks, Mercedes-Benz, and others. With 30 years of experience and multiple locations across Switzerland, the company offers a comprehensive range of services including sales, rental, maintenance, driver training, and proprietary software solutions (Thomann Plus) to optimize fleet management. The website reflects a mature business with a clear market position targeting commercial vehicle operators and fleet managers. Technically, the website is built on Concrete CMS and employs modern web technologies including JavaScript and SVG graphics. It is mobile-optimized and includes SEO best practices. The site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. However, explicit security policies and incident response contacts are not found, which could be improved. Security posture is solid with HTTPS and cookie consent, but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business identity, though the domain is newly registered in 2024, which may indicate a recent domain acquisition or rebranding. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security transparency and DNS security could enhance trust and resilience.

T

thurgautravel.ch

thurgautravel.ch

0

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

W

WYVERN Ltd

wyvernltd.com

0

WYVERN Ltd is a globally recognized leader in aviation safety auditing, consulting, and information services, founded in 1991. The company offers a comprehensive suite of services including safety auditing, training, consulting, SMS software, and certification programs such as the Wingman and Flight Leader Programs. Their market position is strong within the aerospace transportation sector, supported by ISO 9001 certification and a robust digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a professional and responsive user experience. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, WYVERN demonstrates a mature and trustworthy online presence aligned with its business operations.

V

VERTICON 2026

verticon.org

0

VERTICON 2026 is a prominent global event focused on the vertical aviation industry, organized by HAI and hosted in Atlanta, Georgia. The event attracts a large audience of industry professionals, exhibitors, and international participants, offering extensive educational sessions and networking opportunities. The website effectively communicates the event's scale and benefits, targeting aviation professionals and exhibitors. Technically, the website is built on WordPress using the Salient theme and incorporates modern web technologies including Yoast SEO, WPBakery Page Builder, Google Tag Manager, and Facebook Pixel. Hosting is provided by SiteGround, and the site employs HTTPS with a good SSL configuration. The cookie consent mechanism is robust, offering detailed user controls and compliance with GDPR principles. From a security perspective, the site has a good baseline with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional, trustworthy, and well-structured, with moderate technical sophistication and good marketing integration. Strategic improvements in privacy documentation and security headers would further strengthen its compliance and security stance.

E

Experimental Aircraft Association

eaaforums.org

0

The Experimental Aircraft Association (EAA) operates the EAA Forums website, a community platform dedicated to aviation enthusiasts, pilots, and aircraft builders. The site serves as a niche forum for discussions related to experimental aircraft, aviation events, and member support. The business model focuses on fostering community engagement and information sharing within the aviation sector. The domain registration and organizational details are consistent and legitimate, reflecting a well-established entity founded in 2011 in the United States. Technically, the website is built on the vBulletin 4.2.4 forum software, supplemented by YUI JavaScript libraries and Google Analytics for tracking. Hosting appears to be managed via Network Solutions with VPS nameservers. The site demonstrates moderate performance and basic mobile optimization, with a straightforward design and clear navigation. However, the use of an older forum software version and lack of modern security headers indicate some technical debt and potential security risks. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and modern security headers. There is no visible privacy or cookie consent mechanism, which may pose compliance risks under GDPR. No incident response or vulnerability disclosure policies are evident. The site does not expose sensitive data but could improve its security posture by updating software and implementing additional security controls. Overall, the EAA Forums website is a legitimate, well-established community platform with good business credibility and safe content. It would benefit from enhanced privacy compliance measures and security improvements to better protect users and align with modern standards.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

0

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

C

Cebia, spol. s r.o.

carolina.cz

0

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

C

Car Aukce, spol. s.r.o.

caraukce.cz

0

Car Aukce, spol. s.r.o. operates an established online vehicle auction platform primarily serving the Czech market. The company offers services including vehicle purchase and sales auctions, operative leasing, and vehicle verification, targeting both individual and business customers. With over 20 years of experience and more than 51,000 vehicles sold, the company holds a strong market position supported by partnerships with reputable organizations such as Cardetect. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive auction information. Technically, the site employs modern JavaScript libraries and frameworks like jQuery, Bootstrap, and integrates analytics and verification services such as Google Analytics and Foxentry. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the website demonstrates high business credibility and good privacy compliance, making it a trustworthy platform for vehicle auctions.

The website eautoservis.cz is an online platform operated by Teas spol. s r. o. that provides a comprehensive database and online booking system for automotive service providers such as auto repair shops, tire services, car washes, and emission testing centers primarily in the Czech Republic and Slovakia. The platform targets vehicle owners seeking convenient online reservations and service providers managing bookings and customer interactions. With nearly 1000 registered companies, it holds a solid position in the local automotive service market. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript with jQuery 1.7.1. While functional, the technology stack is somewhat outdated, and the site shows only basic mobile optimization and accessibility features. SEO and performance optimizations are moderate but could be improved. No advanced CMS or frameworks are detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, which may expose it to vulnerabilities. There is no evidence of privacy or cookie policies, nor incident response or security policy disclosures, indicating compliance gaps with GDPR and best practices. The site uses HTTPS (assumed) and secure form submission methods but would benefit from enhanced security controls. Overall, the website is moderately professional and trustworthy but requires improvements in privacy compliance, security posture, and technical modernization to reduce risk and enhance user trust. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts.

A

AUTOJOB s.r.o.

autojob.cz

0

AUTOJOB s.r.o. operates AUTOJOB.cz, a specialized online job portal focused on the automotive and transport industries primarily in the Czech Republic and Slovakia. The platform offers job listings, candidate databases, employer services, and industry-related content including an automotive magazine and a competition called Autoopravář Junior. The site targets job seekers and employers within the automotive sector, providing a niche service that supports recruitment and industry engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.3.2 and jQuery UI 1.7.3, alongside modern analytics tools like Google Analytics and Facebook SDK. While the site is functional and moderately optimized, it shows signs of technical debt and could benefit from modernization, especially in updating libraries and improving mobile responsiveness and accessibility. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. Privacy compliance is partially addressed with a privacy policy and terms of service, but the absence of a cookie consent mechanism and security.txt reduces compliance maturity. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site is a credible and professional niche job portal with room for technical and security improvements. The lack of WHOIS data reduces domain trust slightly, but the presence of partner logos and clear contact information supports legitimacy. Strategic enhancements in security headers, library updates, and privacy compliance would strengthen the platform's risk posture and user trust.

C

Cirrus Owners & Pilots Association

cirruspilots.org

0

The Cirrus Owners & Pilots Association (COPA) is a well-established non-profit organization founded in 2001, serving a global community of Cirrus aircraft owners, pilots, and aviation enthusiasts. The organization provides a comprehensive suite of services including safety training, proficiency programs, social events, forums, and member discounts, positioning itself as a niche leader in the aviation community. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and EasyDNNnews modules. It is hosted with Cloudflare DNS and uses NameCheap as the registrar. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen the site's trustworthiness and regulatory adherence.

T

The Alaska Airmen's Association

alaskaairmen.org

0

The Alaska Airmen's Association is a well-established non-profit organization dedicated to supporting and advocating for general aviation in Alaska. With a membership exceeding 2,000, it serves as a significant voice for aviators in the region, offering services such as advocacy, scholarships, workforce development, and community events. The website reflects a mature organization with a clear mission and active community engagement. Technically, the site is built on WordPress with modern plugins and integrations, including Google Analytics and Neon One platform services, providing a solid digital infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and serves its target audience effectively.

V

Vertical Aviation International

rotor.org

0

Vertical Aviation International (VAI) is a well-established membership organization focused on the vertical flight industry, advocating for its benefits and providing safety, education, and community resources. The website positions VAI as a global leader with over 75 years of history, targeting aviation professionals and stakeholders. The digital infrastructure is built on WordPress with modern plugins and SEO tools, supported by GoDaddy hosting and integrated with marketing and analytics platforms such as Google Analytics and Feathr. Security posture is solid with HTTPS and standard best practices, though there is room for improvement in DNSSEC and formal security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its audience effectively.

E

Experimental Aircraft Association

eaa.org

0

The Experimental Aircraft Association (EAA) is a well-established non-profit organization founded in 1953, dedicated to supporting recreational aviation enthusiasts worldwide. The website serves as a comprehensive portal offering membership services, educational resources, event information, and community engagement tools. It maintains a strong market position as a leading aviation community with a broad target audience including pilots, youth, and aircraft builders. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience across devices. The use of structured data and extensive social media integration enhances its digital maturity. Security-wise, the website enforces HTTPS and uses standard security practices but lacks some advanced HTTP security headers, which could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, with minor areas for security enhancement.

The Aircraft Owners and Pilots Association (AOPA) is a well-established US-based organization serving the general aviation community with advocacy, education, and resources. The domain aopa.org is registered since 1995 and aligns with the organization's history and location. However, the website content is currently inaccessible due to Cloudflare's Web Application Firewall (WAF) blocking access based on the visitor's ASN, resulting in an HTTP 1005 error. This blockage prevents a full analysis of the website's content, policies, and technical implementation. The technical infrastructure includes Cloudflare services for CDN and security, but no detailed security headers or policies are visible in the blocked content. The lack of accessible privacy, cookie, and contact information pages limits the assessment of compliance and user engagement features.

M

Minnesota Pilots Association

mnpilots.org

0

The Minnesota Pilots Association is a well-established non-profit organization dedicated to promoting and protecting aviation interests in Minnesota. Their website serves as a hub for advocacy, education, scholarships, and community engagement for the state's aviation community. The organization targets a diverse audience including pilots, aviation professionals, students, and enthusiasts. The site reflects a consistent brand and professional content aligned with their mission. Technically, the website is built on WordPress using Oxygen Builder and integrates modern plugins for forms, payments, and anti-spam protection. The infrastructure is supported by Cloudflare as registrar and DNS provider, with HTTPS enabled and Stripe for payment processing. Security posture is adequate but could be improved by enabling DNSSEC and implementing security headers. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy and functional with room for compliance and security enhancements.

E

Erik Edgren Airshows

erikedgrenairshows.com

0

Erik Edgren Airshows is a specialized small business providing top-notch entertainment services for airshow events, including aerobatics, comedy, deadstick, and night performances. The website presents a professional and consistent brand image, targeting airshow event organizers and enthusiasts. The business appears to have been established around 2010, consistent with the domain registration date, and operates within the transportation sector focused on aviation entertainment. The technical infrastructure is based on the GoDaddy Website Builder platform, utilizing modern web fonts and embedded YouTube videos for multimedia content. The site is hosted by GoDaddy and uses HTTPS with a valid SSL certificate, ensuring secure communication. Mobile optimization and user experience are good, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the website benefits from HTTPS and domain registration protections but lacks important security headers and DNSSEC, which could enhance its security posture. There are no signs of exposed vulnerabilities or malicious content. However, the absence of privacy, cookie, and terms of service policies indicates compliance gaps, especially regarding GDPR and other privacy regulations. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

M

Minnesota Seaplane Pilots Association

mnseaplanes.com

0

The Minnesota Seaplane Pilots Association is a small non-profit organization dedicated to serving seaplane pilots in Minnesota. Their website provides information about membership, events, scholarships, and various resources related to seaplane flying. The organization appears to focus on community engagement and education within a niche transportation sector. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and Google reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and HSTS, but lacks several recommended security headers and visible privacy or cookie policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

SuperCub.Org is an established online community and forum dedicated to Piper Super Cubs and similar aircraft enthusiasts, focusing on backcountry flying and related adventures. The website offers forums, classifieds, videos, membership services, and an online store, targeting a niche audience of aviation hobbyists and pilots. The business is operated by SLP, INC., a US-based entity with a domain registration dating back to 2000, indicating a mature and stable presence in its niche market. Technically, the website employs a Bootstrap framework with jQuery and Google Fonts, hosted on infrastructure using Google Cloud DNS. It integrates Google Analytics for visitor tracking and MailChimp for email marketing. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced CMS features and some modern security enhancements such as DNSSEC and security headers. From a security perspective, the site uses HTTPS and has domain statuses that prevent unauthorized transfers or deletions, which are positive indicators. However, it lacks DNSSEC and important HTTP security headers like Content-Security-Policy and HSTS, which could improve its security posture. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional, professionally designed, and serves its community well but would benefit from enhanced security measures and improved privacy compliance to reduce risk and increase user trust.

Cardinal Flyers Online LLC operates a niche community website dedicated to owners and enthusiasts of the Cessna 177 Cardinal aircraft. The site provides extensive technical resources, community forums, event information, classifieds, and membership management services. It positions itself as a central hub for Cardinal owners worldwide, fostering knowledge exchange and community engagement. The business model is membership-based with sponsorship support, targeting a specialized aviation audience. Technically, the website uses legacy JavaScript and jQuery libraries with basic mobile optimization and moderate performance. Security practices include selective HTTPS enforcement and a cookie consent banner, but lack modern security headers and full HTTPS coverage. The WHOIS data is missing, raising concerns about domain registration legitimacy, although the website content is rich and consistent with a long-standing community. Overall, the site is functional and content-rich but would benefit from modern security and technical improvements.

P

Pete McLeod Racing

petemcleodracing.com

0

Pete McLeod Racing is a professional air racing brand centered around Pete McLeod, a prominent Red Bull Air Race pilot from Canada. The website serves as a comprehensive platform for his biography, news updates, media content, and sponsorship promotion. The business operates primarily in the transportation and media sectors, targeting air racing fans, sponsors, and media outlets. The company maintains a small but professional online presence with consistent branding and active engagement through news and social media links. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted by HostGator. It employs modern web technologies including Google Analytics and Google reCAPTCHA for security and tracking. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. However, it lacks important HTTP security headers and DNSSEC is not enabled, which are areas for improvement. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance documentation, and improved accessibility. These improvements would strengthen the site's security posture and regulatory compliance, enhancing user trust and business credibility.

Rail Recruiter Limited operates a specialized online job board focused on the UK rail industry, providing job listings, career advice, and recruitment services to both job seekers and employers. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. The technical infrastructure is based on ASP.NET WebForms with standard tracking tools like Google Analytics and Bing UET, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which should be addressed to improve resilience. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and functional platform for rail industry recruitment.

Autond.cz is an established Czech online marketplace specializing in the listing and sale of automotive spare parts. Operated by Teas spol. s r. o., the platform offers a large inventory of over 218,000 parts from more than 215 sellers, primarily targeting the Czech and Slovak markets. The website provides search functionality by part code or vehicle brand, facilitating efficient parts sourcing for businesses and individuals. The company has a solid market presence with a domain age dating back to 2008, reflecting stability and trustworthiness in the automotive spare parts sector. Technically, the website employs a traditional web stack including jQuery 1.7.1, custom JavaScript, CSS, and integrates Google Analytics for user behavior tracking. Cookie consent is managed via CookieFirst scripts, indicating some level of privacy compliance. However, the site lacks modern frameworks or CMS indications and uses an outdated jQuery version, which may pose security risks. Mobile optimization and accessibility are basic, and SEO practices are minimal but functional. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but no advanced security headers were detected. There is no published privacy policy, terms of service, or incident response information, representing compliance and transparency gaps. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. The domain registration data aligns well with the business information, supporting legitimacy. Overall, autond.cz presents a moderately professional and trustworthy platform with room for improvement in privacy compliance, security hardening, and technical modernization. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

The website 'Reálná cena vozu' operated by TEAS spol. s r.o. provides a paid service for calculating the average price of vehicles sold in the Czech Republic based on a large and continuously updated database of actual sales data from autobazars. The service targets individuals and businesses interested in realistic vehicle pricing data. The company is established and registered in the Czech Republic with consistent domain registration data supporting legitimacy. Technically, the site uses older jQuery libraries and custom JavaScript with basic CSS styling, hosted under Czech domain registrars. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the data, and the use of an outdated jQuery version poses potential vulnerabilities. Privacy and cookie policies are absent, though terms of service are provided as a downloadable PDF. Contact information is clearly presented with phone, email, and physical addresses. Overall, the site is professional and trustworthy but would benefit from improved security and privacy compliance.

T

TEAS spol. s r.o.

autocaris.cz

0

Autocaris.cz is a Czech Republic-based online automotive classified advertising platform operated by TEAS spol. s r.o., established in 2006. The website aggregates a large inventory of used vehicles from numerous autobazars and private sellers, offering detailed search filters and vehicle origin verification. It holds a strong market position locally with over 28,000 vehicles listed and partnerships with hundreds of autobazars. The platform targets individuals and businesses seeking used vehicles in the Czech and Slovak markets. Technically, the site uses legacy JavaScript libraries such as jQuery 1.7.1, Google Adsense for advertising, Google Tag Manager for analytics, and CookieFirst for cookie consent management. The site is hosted under the REG-INTERNET-CZ registrar with DNS servers ns.forpsi.net and ns.forpsi.it. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks modern security headers and uses outdated JS libraries, which pose potential risks. Privacy compliance is basic with a cookie banner present but no visible privacy policy or terms of service pages. Contact information and company registration details are clearly provided, enhancing business credibility. Overall, the site is functional and professional but would benefit from technical and compliance improvements.

C

Carsdata

carsdata.com

0

Carsdata is a Czech-based company founded in 2014, specializing in providing comprehensive automotive market data and vehicle history services. Their platform offers tools such as a VIN decoder, vehicle history checks via Cebia, and market price reports, targeting dealers, manufacturers, and private individuals. The company positions itself as a trusted source for accurate and extensive automotive data in Europe. Technically, the website is built on modern frameworks like Next.js and React, hosted on AWS infrastructure, and employs Google Tag Manager and Cookiefirst for analytics and consent management. The site is well-optimized for performance, mobile responsiveness, and SEO. Security-wise, the site uses HTTPS with good SSL configuration, though DNSSEC is not enabled and some security headers are not explicitly confirmed. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, Carsdata demonstrates a mature digital presence with strong business credibility and a solid security posture, though improvements in explicit security policies and DNS security could enhance trust further.

C

Carvago.com

carvago.com

0

Carvago.com operates as an online platform specializing in the buying and selling of used cars across Europe. The service offers a unique value proposition by providing a CarAudit inspection certificate and home delivery of vehicles, targeting consumers seeking a convenient and trustworthy used car purchasing experience. The website is built on modern web technologies including React with Next.js and Chakra UI, hosted on AWS infrastructure, indicating a mature and scalable technical foundation. The presence of multiple advertising and tracking scripts such as Google Ads, Facebook SDK, and Bing Ads reflects an active digital marketing strategy. Security posture is adequate with HTTPS enforced and stable domain registration; however, the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy but should enhance its privacy and security disclosures to improve compliance and user trust.