Security Directory

H

Wartung wird durchgeführt!

hypoxi-frankfurt-bornheim.de

42

The website www.hypoxi-frankfurt-bornheim.de is currently in maintenance mode, displaying a placeholder page indicating ongoing updates or technical issues. The business appears to be related to fitness or body shaping services, as suggested by the description 'Dein Weg zur Wunschfigur' (Your way to the desired figure). However, no detailed business information, contact details, or service descriptions are available on the site at this time. The site uses WordPress with a common maintenance plugin and includes a link to a Facebook page for social media presence. From a technical perspective, the website employs standard web technologies including WordPress CMS, Bootstrap CSS framework, Font Awesome icons, and the Roboto font from an external font provider. The site appears to be moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal data collection or user tracking. Security posture is limited due to the lack of visible security headers and absence of published privacy or cookie policies. The site uses HTTPS (implied by URLs) but no further security best practices are evident. No forms or input fields are present, reducing immediate attack surface but also limiting user engagement. WHOIS data shows consistent domain registration with multiple UI-DNS name servers, suggesting legitimate domain management, though registrant details are not provided. Overall, the website currently offers minimal content and limited business or security information. The risk level is low due to lack of sensitive data exposure but the site lacks transparency and compliance indicators. Strategic improvements should focus on restoring full website content, publishing privacy and cookie policies, adding contact information, and implementing security best practices to enhance trust and compliance.

P

Pflegedienst zur Sonnenblume

pflegedienst-zur-sonnenblume.de

47

Pflegedienst zur Sonnenblume is a small regional mobile nursing service provider operating primarily in the Hoyerswerda area and surrounding towns in Germany. The company focuses on delivering compassionate and respectful care to individuals in need of nursing support at home. Their website reflects a professional and consistent brand image, with clear descriptions of their services and target audience. The business appears well-established since 2015, with a clear local market presence. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for SEO, accessibility, and GDPR compliance. Hosting is provided by Strato servers, and the site uses HTTPS with a good SSL configuration. The website is moderately performant and mobile-optimized, providing a good user experience. From a security perspective, the site employs HTTPS and privacy-focused plugins but lacks advanced security headers and explicit incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy and cookie policy and consent mechanisms in place. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers, incident response information, and broader contact details could enhance trust and security posture further.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.kamani.net operates as a platform specializing in the brokerage and trading of used industrial machinery, plants, and tools. It targets industrial buyers and sellers seeking second-hand equipment, offering services such as trading, commissioning, and brokerage. The business appears to be a small-scale niche player without clear information on company size or founding year. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks mobile optimization and advanced SEO features. Security posture is weak, with no HTTPS detected and absence of security headers or advanced form protections. Privacy compliance is minimal but includes a basic GDPR privacy policy and terms of service in German. The domain WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional but outdated and lacks critical security and compliance features.

T

Test

subaru.de

50

The website www.subaru.de represents Subaru Deutschland, a large automotive business focused on all-wheel drive SUVs and electric vehicles tailored for the German market. The site offers comprehensive services including vehicle configuration, test drives, dealer search, and after-sales support. The business model centers on direct consumer engagement through digital channels, supported by a professional and well-branded online presence. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, with a strong emphasis on GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trust but does not outweigh the professional presentation and compliance indicators. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

T

Teuwsen Sportgeraete

teuwsen-sportgeraete.de

44

Teuwsen Sportgeraete is a German-based small manufacturing company specializing in custom fitness and rehabilitation equipment with nearly 40 years of experience. The company offers tailored solutions including custom-built devices, powder coating, and upholstery services, targeting fitness studios, rehabilitation centers, and private customers with specific space requirements. The website is built on WordPress with modern plugins such as Slider Revolution and integrates Google reCAPTCHA for form security. While the site is professionally designed and provides clear navigation, it lacks some advanced privacy and security features such as cookie consent mechanisms and security headers. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the company maintains a moderate security posture with room for improvement in compliance and technical security practices.

Getränkefachgroßhandel Preckel operates as a beverage wholesale distributor and rental service provider in Germany, focusing on beers, non-alcoholic drinks, and related equipment rentals. The website content is minimal, primarily serving as a redirect page with outdated Flash content, indicating low digital maturity. The business targets regional customers needing beverage supplies and rental services. Technically, the site relies on deprecated Flash technology, lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which raises compliance concerns. No contact information or social media presence is evident, limiting user engagement and trust. Overall, the site presents a basic online presence with significant modernization and security improvements needed.

The analyzed URL leads to a Cloudflare security verification challenge page, which blocks direct access to the actual website content. The page serves as a bot protection mechanism and does not contain any business-related information, contact details, or policies. The domain is registered with World4You Internet Services GmbH since 1998 and is currently active with standard domain protections but lacks DNSSEC. Due to the WAF challenge, the content quality and business credibility cannot be assessed. The technical implementation shows use of modern security headers and HTTPS, but no further technologies or CMS are detectable. Privacy and compliance information are absent, indicating a lack of visible GDPR or cookie policy compliance. Overall, the site is secure from a domain and transport perspective but inaccessible for content analysis, resulting in a low AI score.

L

Löwen-Apotheke

loewen-apotheke-wickrath.de

68

Löwen-Apotheke Mönchengladbach-Wickrath is a local pharmacy serving the Mönchengladbach-Wickrath area in Germany, offering traditional pharmacy services combined with modern digital features such as e-prescriptions, product pre-ordering, and personal consultation. The website reflects a small business model focused on retail healthcare products and services, including cosmetics and home delivery. The company positions itself as a community-focused pharmacy with a commitment to fast, secure, and personal service. Technically, the website employs modern web technologies including JavaScript frameworks, CDN delivery via Amazon Cloudfront, and MapLibre for mapping services. The site is mobile-optimized, accessible, and SEO-friendly, with a manifest for progressive web app capabilities. Performance is moderate, with some lazy loading errors noted but overall a good user experience. From a security perspective, the site uses HTTPS exclusively and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response information is published. No vulnerable libraries or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a professional, secure, and privacy-conscious online presence for a local pharmacy. Strategic improvements could include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to further strengthen trust and compliance.

B

Bestattungsinstitut H. Schollmann GmbH

bestattungen-schollmann.de

56

Bestattungsinstitut H. Schollmann GmbH is a small, local funeral service provider based in Duisburg, Germany. The company offers compassionate support and comprehensive funeral services including pre-planning and grief counseling. Their website is well-structured, informative, and targets individuals and families dealing with bereavement or planning ahead. The business holds recognized industry certifications and memberships, enhancing trust and credibility. Technically, the website is built on the AmphiCMS platform using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It is mobile-optimized with good navigation and SEO practices. However, there is room for improvement in security headers and explicit security policies. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is moderate with HTTPS implied but no explicit security headers found in the provided data. The site includes a cookie consent banner and a privacy policy compliant with GDPR, but lacks a terms of service and incident response information. No WAF or blocking mechanisms were detected, and the WHOIS data aligns with a legitimate small business. Overall, the website presents a professional and trustworthy digital presence suitable for its sensitive service area. Strategic improvements in security headers, incident response transparency, and enhanced technical performance could further strengthen its posture and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Leder Delheid is a small, established German business specializing in shoemaking, orthopedic shoe technology, and leather goods, operating since 1926. The website presents a professional and consistent brand image targeting shoemakers, orthopedic specialists, and hobby craftsmen. Technically, the site is built on WordPress using jQuery and the Nicepage plugin, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers were explicitly found in the provided content, limiting direct customer engagement. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Sven Kadenbach Installationen

meisterbetrieb-kadenbach.de

44

Meisterbetrieb Kadenbach is a small German company specializing in modern sanitary and heating installations, including solar, gas, and heat pump systems. The company emphasizes quality workmanship and customer service, targeting local homeowners and businesses. The website is professionally designed using WordPress with popular plugins such as Elementor and LayerSlider, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and incident response information are lacking. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the website reflects a legitimate and credible small business with a solid digital presence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Autodienst Wecker GmbH

autodienst-wecker.de

42

Autodienst Wecker GmbH is a well-established local automotive service provider based in Dringenberg, Germany, with over 40 years of operational history. The company offers a range of services including vehicle repairs, sales of new and used cars, rental vehicles, and a car wash facility. Their business model focuses on serving local customers with personalized services such as a pickup and delivery option. The website reflects a professional and consistent brand presence, targeting local vehicle owners and drivers. Technically, the website is built on WordPress 6.9.5 with common plugins like All in One SEO, Contact Form 7, and a cookie consent plugin. The site uses HTTPS with a good SSL configuration and includes modern JavaScript libraries such as jQuery and Modernizr. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. Hosting appears to be provided by rzone.de based on nameserver data. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The site uses Google Analytics for tracking with a moderate user tracking level and good privacy compliance. Overall, the website is trustworthy and professional with a strong local business focus. Recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to improve security posture further. The absence of contact emails on the site is noted but phone and physical contact details are clearly provided.

T

Teichmann Umzüge GmbH

teichmann-umzuege.de

51

Teichmann Umzüge GmbH is a German moving company specializing in affordable and comprehensive relocation services for private individuals and businesses. With offices in Aue-Bad Schlema, Auerbach, and Zwickau, they serve regional clients and also offer European long-distance moves. Their service portfolio includes private moves, senior moves, office relocations, household clearances, furniture assembly, packing, and storage solutions. The website is professionally designed using WordPress with common plugins and themes, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. Technically, the website uses a standard WordPress CMS with WPBakery Page Builder and jQuery libraries. The site is HTTPS secured with no detected WAF or blocking mechanisms, indicating good accessibility. However, the absence of security headers and cookie consent mechanisms suggests room for improvement in security and privacy compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Security posture is moderate with HTTPS enabled but lacking advanced headers and explicit incident response policies. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is trustworthy and professional but could enhance security and privacy features to align with best practices and regulatory requirements. Recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy and incident response contacts, and considering vulnerability disclosure mechanisms to improve transparency and trust.

D

Dr. Rösler & Weiss KG

roepack.de

42

Dr. Rösler & Weiss KG is a medium-sized German manufacturer specializing in sustainable packaging solutions made from paper, cardboard, foil, and plastic. With over 70 years of experience, the company emphasizes resource conservation and circular economy principles, targeting businesses requiring environmentally friendly packaging. The website is built on Joomla CMS with modern frameworks and provides a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. The domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

M

Meta Platforms, Inc.

facebook.com

76

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform founded in 2004. It offers a wide range of services including social networking, messaging, advertising, marketplace, and video sharing, targeting a general audience worldwide. The platform holds a dominant market position in the social media industry with a large user base and multiple subsidiary platforms such as Instagram and WhatsApp. Technically, Facebook employs a modern technology stack including React and GraphQL, hosted on Meta's own infrastructure, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, employs strong security headers, and follows best practices, resulting in a high security posture. Privacy compliance is robust with comprehensive policies and GDPR adherence. Overall, Facebook demonstrates a mature, professional, and trustworthy online presence with extensive tracking and advertising capabilities aligned with its business model.

Jackson County MO operates an official government website providing comprehensive services and information to residents, businesses, and visitors within Jackson County, Missouri. The site serves as a central hub for property tax payments, public records access, job opportunities, parks and recreation, permits, municipal court information, and legislative updates. It targets a broad audience including local citizens, government officials, and business entities, positioning itself as a trusted local government authority. The business model is focused on public service delivery and community engagement. Technically, the website is built on the Granicus OpenCities CMS platform with ASP.NET WebForms backend, leveraging jQuery, Google Maps API, and various analytics tools such as Matomo, Microsoft Clarity, and Google Analytics. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate. The presence of multiple language options enhances accessibility for diverse users. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, though GDPR compliance is not explicitly indicated. The WHOIS data is unavailable due to query failure or privacy protection, which is common for government domains and does not detract from the site's legitimacy. Overall, Jackson County MO's website is a well-structured, professional government portal with a solid security posture and good user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and complian…

N

Nixon Peabody LLP

nixonpeabody.com

77

Nixon Peabody LLP is a large, global law firm offering sophisticated legal solutions to businesses across the United States, Europe, and Asia. With over 650 attorneys, the firm provides comprehensive legal services including corporate law, litigation, and regulatory compliance. The website reflects a professional and well-established business with a clear focus on serving corporate clients worldwide. The firm's market position is strong, supported by extensive practice areas and a global presence. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile responsiveness, and good accessibility. The site employs HTTPS with strong security headers, indicating a mature security posture. Privacy and cookie policies are present and comprehensive, demonstrating compliance with GDPR and other privacy regulations. However, explicit security policies and incident response information are not publicly available, which could be improved. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data is a concern for domain legitimacy and trust but does not detract significantly from the overall professional presentation. The site does not employ advertising or affiliate marketing, focusing solely on professional services. Overall, Nixon Peabody LLP's website is a high-quality, secure, and privacy-conscious platform that effectively supports the firm's business objectives. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and ensuring WHOIS data is accurate and publicly available to enhance trust.

Aaron Industries is a well-established manufacturer and distributor specializing in recycled polymer compounds, including post-consumer and post-industrial resins such as polyethylene, polypropylene, polystyrene, and elastomers. With over 30 years of expertise, the company offers a range of services including custom compounding, toll compounding, blending, pulverizing, and resin distribution. Their focus on sustainability and cost-effective recycled materials positions them as a leader in their niche market. The website reflects a professional and consistent brand image targeting manufacturers and businesses requiring recycled polymer materials. Technically, the website is built on WordPress using the Elementor framework, leveraging modern JavaScript libraries such as jQuery, Bootstrap, Owl Carousel, and Swiper for enhanced user experience. Hosting and DNS are managed via Cloudflare, providing CDN and security benefits. The site is mobile-optimized with good performance and basic accessibility features, though SEO and privacy compliance could be improved. From a security perspective, the site enforces HTTPS and has domain-level protections such as EPP status locks. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are found, indicating gaps in compliance. No incident response or vulnerability disclosure information is provided, which could be a concern for security transparency. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy compliance, security headers, and explicit policies to improve user trust and regulatory adherence.

B

Banc of California

bancofcal.com

70

Banc of California is a relationship-focused, full-service business bank established in 2013, offering financial solutions aimed at maximizing operational efficiency for business clients. The website reflects a professional banking institution with a clear market position as a premier business bank. The technical infrastructure leverages modern web technologies including Zurb Foundation 6 framework, NitroPack for performance optimization, and Google Tag Manager for analytics and marketing. Hosting is provided by Cloudflare, ensuring reliable and secure delivery. Security posture is solid with HTTPS enabled and domain transfer protections in place, though there are gaps in privacy compliance and incident response transparency. Overall, the site is well-designed, mobile-optimized, and trustworthy, but would benefit from enhanced privacy and security disclosures.

T

TD SYNNEX USA

techdata.com

76

TD SYNNEX USA is a large enterprise-level technology distribution company specializing in IT distribution, services, and consulting to help businesses scale and lead in technology. The website presents a professional and consistent brand image, targeting IT professionals, resellers, and service providers in the United States. The digital infrastructure is built on WordPress with modern frameworks like Bootstrap and SEO tools such as Yoast, indicating a mature technical setup. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which slightly impacts trust but the website content and branding suggest legitimacy. Overall, the site is well-designed and functional with room for improvement in privacy and security transparency.

E

Express Scripts

express-scripts.com

73

Express Scripts is a leading pharmacy benefit management company providing prescription drug services to millions of members. As a subsidiary of Evernorth, itself part of Cigna, it holds a strong market position in the US healthcare sector. The website offers members tools to manage prescriptions online, emphasizing safety, care, and affordability. The digital infrastructure leverages modern technologies including Adobe DTM, Branch.io, and OneTrust for consent management, indicating a mature digital presence. The site is mobile optimized, accessible, and professionally designed, supporting a positive user experience. Security posture is strong with HTTPS, security headers, and privacy compliance, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, which slightly reduces transparency but does not detract from the overall legitimacy given the brand recognition and technical indicators. Overall, the site is trustworthy, secure, and compliant with privacy regulations, serving a large enterprise audience effectively.

Ply Gem is a leading North American manufacturer of residential exterior building materials, offering a comprehensive portfolio of products designed for various home exterior needs. The company operates under the parent organization Cornerstone Building Brands, reflecting a strong market position in the manufacturing sector. Their website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Bootstrap framework, and extensive use of analytics and marketing tools including Google Tag Manager and FullStory. Privacy and cookie consent mechanisms are robust, indicating compliance with GDPR and other privacy regulations. However, the absence of detailed WHOIS data and explicit security policies suggests areas for improvement in transparency and security communication. Overall, the website is professional, well-branded, and trustworthy, serving a broad audience of builders, contractors, and homeowners.

Forever Warm Homes is a small business specializing in the design and manufacture of energy efficient timber frame homes and commercial buildings, serving clients primarily in Ireland and the UK Mainland. Their offerings include homes, apartments, hotels, nursing homes, offices, and schools, supported by in-house design and technical services. The website content is focused and relevant to their niche market, though the design is somewhat dated and lacks modern mobile optimization. Technically, the website uses basic JavaScript and Google Analytics for tracking but lacks modern CMS or frameworks. There is no evidence of HTTPS enforcement or security headers, which presents a security risk. The absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing, raising concerns about domain registration legitimacy. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure information is provided. The website does not collect user data via forms, reducing exposure but also limiting engagement. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect users. Strategic recommendations include implementing HTTPS, adding comprehensive privacy and cookie policies, improving mobile responsiveness, and clarifying domain registration status to improve legitimacy and trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Apple Orchard Construction

appleorchardgroup.ie

46

Apple Orchard Construction is a well-established commercial construction company operating primarily in Ireland and the UK, with nearly two decades of industry experience since its founding in 1999. The company offers a broad range of services including commercial construction, building maintenance, refurbishments, fit outs, and specialist trades such as metal studding and joinery. Their website reflects a professional business with a skilled workforce and a portfolio of notable projects, positioning them as a reliable mid-sized player in the construction sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a modern and maintainable digital infrastructure. The site is mobile-optimized and provides good SEO metadata and structured data, although performance is moderate and accessibility features are basic. No advanced analytics or tracking services were detected, suggesting a minimal data collection approach. From a security perspective, the site uses HTTPS and a security plugin (WP Simple Firewall), but lacks visible security headers such as CSP or HSTS in the provided data. No exposed sensitive data or obvious vulnerabilities were found, but improvements in security header implementation and form protections are recommended. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. The lack of WHOIS data limits domain trust verification, but the business content and contact information support legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and conducting regular security audits to maintain a strong security posture.

The website www.wcr-uk.co.uk currently serves only as a security verification page implementing Google reCAPTCHA v3 to prevent automated access. There is no accessible business content, contact information, or policies available on the site. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain is either invalid or misconfigured. This severely limits the ability to assess the business legitimacy or operational maturity. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the site is effectively blocked by bot protection mechanisms, resulting in a low AI score and limited analysis capability.

The website represents a Chinese energy sector company focused on natural gas infrastructure investment and operation, including LNG liquefaction, pipeline construction, and urban gas supply projects. The company appears to be medium-sized with a regional focus in China, headquartered in Chongqing. The website content is primarily in Chinese and provides business descriptions and project showcases. Technically, the site uses jQuery and slick carousel libraries with a full-page scrolling interface but lacks modern CMS or advanced frameworks. Security posture is weak due to absence of HTTPS enforcement, missing security headers, and no visible privacy or cookie policies. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site provides basic business information but lacks critical security and compliance features, limiting its credibility and user trust.

HBSL Accountants is a small UK-based accounting firm specializing in providing a comprehensive range of accountancy services including company formations, bookkeeping, VAT returns, and end of year accounts. The firm targets individuals and small businesses primarily in South Hampshire and surrounding areas, emphasizing personalized service and compliance support. The website reflects a professional and focused business model with clear contact details and relevant service descriptions. Technically, the site uses standard web technologies such as jQuery, Bootstrap, and Font Awesome, delivering a moderate performance with good mobile optimization and basic SEO. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is unavailable due to domain registration issues flagged by Nominet UK, which raises concerns about domain legitimacy or configuration but does not directly impact the professional presentation of the business online. Overall, the website is functional and trustworthy from a user perspective but requires enhancements in security posture and compliance documentation.

Dow Jones Architects is a small architectural firm specializing in heritage, cultural, residential, and masterplanning projects. The website presents a professional portfolio showcasing various projects such as embassies, schools, and museums, targeting clients seeking specialized architectural services. The technical infrastructure includes standard web technologies such as jQuery and Google Analytics, hosted on domain control servers with no CMS detected. While the website is functional and moderately optimized for mobile, it lacks comprehensive privacy and cookie policies, and no contact information is directly visible in the provided content. Security posture is basic with no DNSSEC and missing security headers, though HTTPS usage is implied by external script sources. Overall, the domain is well-established and consistent with the business history, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

J

James Innes & Son

jiandson-stonemasons.com

58

James Innes & Son is a small, specialized stonemasonry company based in Scotland, with a long heritage dating back to 1850. The company focuses on the conservation and restoration of historic buildings, targeting property owners and heritage custodians in the Scottish region. The website is professionally designed using the Wix platform, featuring moderate performance and good mobile optimization. However, the site lacks visible contact information and privacy-related policies, which impacts user trust and compliance. Security posture is adequate with HTTPS enabled, but the absence of security headers and incident response details suggests room for improvement. The domain WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy despite the professional online presence. Strategic recommendations include adding privacy and cookie policies, improving contact transparency, and addressing domain registration clarity to enhance trust and compliance.

T

The Brand Surgery

thebrandsurgery.co.uk

56

The Brand Surgery is a specialized branding agency focused on healthcare, heritage, and community sectors, delivering creative brand strategies that foster trust, clarity, and connection. The website reflects a niche market positioning with professional design and consistent branding. Technically, the site is built on WordPress with WooCommerce and Divi theme, integrating modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal security policies. WHOIS data is unavailable due to domain naming rules violation, which raises some legitimacy concerns, though the website content and presentation suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

W

Woodcroft Vets

woodcroftvets.com

70

Woodcroft Vets is a well-established veterinary care provider serving the Greater Manchester and Stockport areas since 1976. The company operates multiple branches and offers a comprehensive range of services including veterinary hospital care, pet health plans, insurance, referrals, and emergency services. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at pet owners in the region. Technically, the site is built on WordPress and integrates modern analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and business presence suggest legitimacy. Overall, the site is trustworthy and professionally maintained, with room for technical and security enhancements.

P

Pan Autos

panautos.co.uk

38

Pan Autos is a small, family-run automotive service business based in Harpenden, UK, with over 40 years of local presence. They offer a comprehensive range of vehicle services including tyres, MOTs, servicing, exhausts, brakes, clutches, air conditioning, and electronic fault diagnosis. The website reflects a traditional local business model focused on serving vehicle owners in the Harpenden area with honest and competitively priced services. The market position is that of a trusted local premier tyre retailer and service provider with longstanding customer relationships. Technically, the website is built on basic HTML, CSS, and JavaScript with legacy Flash content still present. Google Analytics is used for visitor tracking, but there is no visible cookie consent or privacy policy, indicating low privacy compliance. The site lacks modern CMS or frameworks and shows basic mobile and accessibility optimization. Performance is moderate but could benefit from modernization and removal of deprecated technologies. From a security perspective, the site does not show evidence of HTTPS or security headers, and no privacy or cookie policies are present. The use of Flash is a security risk, and the absence of secure forms or data protection policies indicates a low security posture. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional appearance of the website content. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, removing deprecated technologies, and improving security headers and compliance documentation.

Solvology is a UK-based business solutions provider specializing in consulting, business mentoring, executive coaching, non-executive directorship, interim management, and access to finance and shared services. The company targets a broad audience ranging from SMEs to multinational corporations, emphasizing a cooperative and referral-driven approach to delivering sustainable business solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on business clients. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Matomo analytics, and implements cookie consent mechanisms via Iubenda. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and compliance documentation.

V

Venturebright

venturebright.co.uk

65

Venturebright is a specialized consulting firm focused on creating and finding high-growth technology ventures for large corporations. Established in 2009, the company targets corporate leaders seeking innovation and adjacent market growth. Their key services include growth strategy, innovation programs both outside-in and inside-out, and building new ventures through agile pilots and experiments. The website presents a professional and consistent brand image, showcasing reputable global clients and a clear business focus. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Analytics, Lottie animations, and jQuery. Hosting is managed via Webflow's CDN with DNS on Azure. The site is mobile optimized with good SEO and accessibility basics, though performance is moderate. Privacy and cookie policies are present but lack advanced consent mechanisms. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers. No explicit security or incident response policies are published. Analytics and marketing tools track user behavior moderately, with no evident privacy compliance beyond basic policies. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional with a solid business credibility score. Security posture and privacy compliance could be improved by adding security headers, enabling DNSSEC, and publishing detailed security and incident response policies. Contact information is limited to a contact form and social media presence on Twitter.

O

One Touch Laser Kent | Laser Cutting & Engraving Experts

onetouchlaser.com

55

The website www.onetouchlaser.com appears to be a business site built on the Wix platform, likely related to laser technology or services. However, the content provided is minimal and mostly technical, with no clear business description, contact information, or trust signals. The domain WHOIS data is unavailable, which raises concerns about the legitimacy and registration status of the domain. Technically, the site uses Wix's standard scripts and Sentry for error monitoring but lacks advanced security headers and privacy compliance indicators. Overall, the security posture is weak, and the site lacks essential compliance and business credibility elements. Strategic recommendations include establishing clear privacy and cookie policies, adding contact and incident response information, improving security headers, and verifying domain registration details to enhance trustworthiness.

The website www.pbscreative.co.uk is currently inaccessible beyond a security verification challenge page that employs Google reCAPTCHA v3 and Cloudflare Insights beacon. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to content. Due to this, no business-related content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain failed with an error citing domain naming rules violations, suggesting potential issues with domain registration legitimacy or configuration. The technical infrastructure shows use of modern frontend libraries and security tools but lacks visible security headers or SSL configuration details. Overall, the site’s security posture is limited by the blocking mechanism, and the lack of accessible content severely restricts comprehensive evaluation.

ABC-garage.com is a small business specializing in custom garage construction and related services in Eastern Iowa and Western Illinois, particularly the Quad City area. The company emphasizes quality workmanship, custom builds, and competitive pricing, positioning itself as a leading garage builder in its regional market. The website content supports this business focus with detailed service descriptions and project galleries. Technically, the website is built using outdated technology (Microsoft FrontPage 6.0) and lacks modern web standards such as HTTPS, mobile optimization, and accessibility features. Security posture is weak due to missing HTTPS, absence of security headers, and lack of published privacy or security policies. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness. Overall, the website provides basic business information but requires significant improvements in technical infrastructure and security to enhance trust and compliance.

A

Server Shopping

anisatech.com

47

ServerShopping.com is an e-commerce website specializing in the sale of servers, workstations, and related hardware components primarily targeting IT professionals and businesses in the UK. The site offers a broad catalog of products including Dell and HP rack servers, tower servers, workstations, memory modules, processors, and other server components. The platform appears to be built on a mature e-commerce CMS, likely CS-Cart, with a structured navigation system and product categorization. Technically, the website uses modern web standards and includes secure login forms, but lacks visible advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structure suggest an operational business. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security best practices.

B

Brook Lane Community Church

blcchurch.org.uk

45

Brook Lane Community Church is a small non-profit religious organization based in the United Kingdom, with a history dating back to 1928. The church focuses on community outreach, spiritual growth, and providing worship services both in-person and via live streaming. Their website serves as a portal for engagement, learning, sharing testimonies, and connecting with the church community. The organization is registered as a company limited by guarantee and a registered charity, indicating formal legal and charitable status. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.1 and jQuery UI 1.10.4, along with plugins like Cycle2 for slideshows. Some external resources are loaded over HTTP, which is a security concern. The site appears moderately optimized for mobile and accessibility but lacks advanced SEO and modern frameworks. The contact form collects user data securely via POST but lacks advanced anti-spam protections. From a security perspective, the site lacks visible security headers and uses outdated libraries with known vulnerabilities. The WHOIS data for the domain is unavailable due to a domain naming rules error, which raises concerns about domain registration legitimacy. No cookie consent or comprehensive privacy compliance mechanisms are present, though a basic privacy policy is linked. Social media presence is active across major platforms, enhancing community engagement. Overall, the website is functional and serves its community purpose but requires technical and security improvements. The domain registration issues and outdated technology stack reduce trustworthiness and security posture. Strategic improvements in security headers, HTTPS enforcement, updated libraries, and privacy compliance would enhance the site's reliability and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

Protek Fencing Limited

protek-fencing.co.uk

52

Protek Fencing Limited is a UK-based company specializing in the installation, repair, and maintenance of highway fencing systems, safety barriers, parapets, and pedestrian guardrails. Established in 1987, the company holds several industry certifications including ISO 9001:2008 and BSI accreditations, positioning itself as a reputable player in the transportation and infrastructure sector. Their website reflects a professional business model targeting construction and highway authorities with a focus on compliance and quality service delivery. Technically, the website is built on WordPress using CherryFramework and Bootstrap, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to domain registration errors, which slightly impacts trust but does not detract from the legitimacy of the business as evidenced by consistent website content and certifications. Overall, the site is professional, content-rich, and trustworthy with room for improvement in privacy compliance and security best practices.

D

Dr. Doug - Chiropractor in Brampton

drdoug.ca

63

Dr. Doug is a local chiropractic healthcare provider based in Brampton, Ontario, Canada. The business offers chiropractic services and has a strong local reputation evidenced by a perfect 5-star aggregate rating from 30 reviews. The website is built on the Wix platform, leveraging standard Wix technologies and third-party analytics tools such as Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The technical infrastructure is modern and mobile-optimized, though some accessibility and SEO improvements could be made. Security posture is generally good with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses using Wix. Overall, the website presents a professional and trustworthy front for a small healthcare business.

C

Castle Trust Bank

castletrust.co.uk

71

Castle Trust Bank operates as a UK-based financial services provider specializing in savings accounts, ISAs, and property finance solutions including bridging loans and buy-to-let financing. The website targets retail customers and property investors seeking competitive savings products and property investment financing. The business positions itself as a niche player in the UK finance and real estate sectors, offering tailored financial products to its audience. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, incorporating modern web technologies such as Google Analytics, Google Tag Manager, and CookieYes for consent management. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks some recommended security headers and explicit privacy and terms of service pages. The WHOIS data for the domain is unavailable due to a naming rules violation error from Nominet UK, which is unusual and warrants further investigation. Overall, the website is professional and trustworthy in appearance, but the domain registration anomaly slightly reduces confidence.