Security Directory

G

GROWCRAFT PTE. LTD.

seeapi.com

65

SeeAPI, operated by GROWCRAFT PTE. LTD., provides the MiniMax H3 API, a sophisticated AI video generation service that supports multimodal inputs including text, images, video, and audio to produce high-resolution video clips with native stereo sound. The company targets developers and product teams seeking advanced video generation capabilities for creative and commercial applications. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and terms policies, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as React and Next.js, integrates analytics tools like Microsoft Clarity and Google Tag Manager, and employs security best practices including HTTPS and security headers. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Overall, the site is trustworthy and well-positioned in the AI technology sector.

G

GoDaddy Operating Company, LLC

euroshipservices.com

62

The website is a domain sales landing page hosted by GoDaddy, offering the domain euroshipservices.com for sale at $9,995 USD. It targets domain investors and businesses seeking premium domains. The platform leverages modern web technologies including React and Next.js, ensuring a fast and responsive user experience. The site includes trust signals such as a high Trustpilot rating and verified domain badges, enhancing buyer confidence. However, WHOIS data for the domain forsale.godaddy.com is unavailable, consistent with it being a subdomain used for domain sales rather than an independently registered domain. Security posture is adequate with secure transaction processes and reCAPTCHA usage, but lacks visible security headers and explicit incident response policies. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the site is professional, trustworthy, and well-optimized for its purpose.

V

ViralClip

viralclip.app

63

ViralClip is a specialized AI-powered platform designed to help content creators, marketers, and e-commerce sellers generate viral short-form videos and images. The platform combines free research tools such as TikTok transcript extraction and subtitle removal with advanced AI video and image generation models, enabling users to clone trending videos or create original content efficiently. Its market position is niche, focusing on viral marketing content for platforms like TikTok, Instagram Reels, and YouTube Shorts. The business operates on a subscription and credit-based model, offering a unified workspace for video, image, and voice asset creation. Technically, ViralClip leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. The site demonstrates good SEO practices and a consistent, professional design. Hosting and infrastructure details are not explicitly disclosed but performance indicators suggest a well-optimized environment. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the site lacks a public security policy, incident response plan, and cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. Overall, ViralClip presents a trustworthy and professional platform with strong business credibility and technical implementation. The main risks relate to privacy compliance and transparency around security policies. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing GDPR compliance measures to strengthen the platform's security posture and regulatory adherence.

广州君科科技信息咨询有限公司 operates as a specialized industrial valve manufacturer and information consulting service provider based in China. The company emphasizes decades of experience in valve design, production, and sales, offering a broad range of products including hydraulic control valves, buried gate valves, silent check valves, soft-seal butterfly valves, and electric two-way valves compliant with national and American standards. Their market position is that of a medium-sized, experienced manufacturer targeting industrial and energy sectors with a focus on quality and customization. Technically, the website employs a basic but functional technology stack including HTML5, CSS, JavaScript, and jQuery libraries. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident. The site is accessible without WAF or blocking mechanisms. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The WHOIS data is missing, raising concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data are detected in the HTML content. Overall, the website presents a professional business front but suffers from critical gaps in domain registration transparency, security best practices, and privacy compliance. Strategic improvements in these areas are recommended to enhance trust and security.

上

上海索广映像有限公司

zhiye.com

48

上海索广映像有限公司 operates the recruitment portal at ssge.zhiye.com, providing job listings for social recruitment, campus recruitment, and internships primarily targeting the Chinese job market. The website serves as a platform for job seekers and employers to connect, leveraging the Beisen recruitment portal framework. The site content is in Simplified Chinese and focuses on employment opportunities without additional corporate or privacy disclosures. Technically, the site uses modern JavaScript libraries including jQuery and SVG graphics, but lacks advanced security headers and privacy policies. The absence of WHOIS data for the subdomain is expected as it is a subdomain under zhiye.com, but this limits direct domain trust analysis. Overall, the site is functional but basic in design and security posture.

大连百合服装有限公司 is a medium-sized Chinese manufacturing and export company specializing in motorcycle apparel, high-end casual wear, down jackets, and sportswear. Established in 1994, the company claims a strong export presence to Japan, Europe, the US, and Canada, with an annual export volume exceeding 10 million USD. The website content is primarily in Chinese and provides basic business information without advanced digital features or modern web technologies. The technical infrastructure is simple, relying on basic HTML, CSS, and JavaScript, with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS, security headers, and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website serves as a basic informational portal for the company but lacks modern security and compliance features.

F

Fredy’s AG

fredys.ch

59

Fredy’s AG is a Swiss artisanal bakery company focused on producing high-quality, natural baked goods using predominantly Swiss raw materials sourced sustainably. The company also offers baking courses and recipes, targeting consumers interested in traditional and natural bakery products. The website is built on TYPO3 CMS, employs Google Tag Manager for analytics, and implements a cookie consent mechanism compliant with GDPR. Contact information and social media links are clearly provided, enhancing business credibility. Security posture is adequate with HTTPS and cookie consent but lacks published security policies or incident response details. Overall, the website is professional, trustworthy, and well-optimized for users.

Cervejaria Arraial D'Ajuda is a small Brazilian brewery business focused on alcoholic beverages, primarily beer, targeting adult consumers. The website serves mainly as an age verification splash page before granting access to the main site, indicating compliance with legal age restrictions for alcohol consumption. The business appears local or regional with limited digital presence and minimal publicly available business information. Technically, the site is built on WordPress and hosted by HostGator Brazil, but it suffers from mixed content issues due to HTTP resources being loaded on an HTTPS domain, which can degrade security and user trust. The site lacks privacy, cookie, and terms of service policies, and no contact or social media information is provided, limiting transparency and user engagement. Security posture is weak with no security headers detected and no visible incident response or vulnerability disclosure mechanisms. Overall, the website is functional but minimalistic, with significant room for improvement in content richness, security, and compliance.

V

VML

mirumagency.com

69

VML is a global marketing and advertising agency specializing in brand experience, customer experience, commerce, consulting, and technology transformation services. As part of the WPP group, VML holds a strong market position with a reputation for creative excellence, evidenced by awards such as the Titanium Lion and Campaign Global Network of the Year. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients seeking innovative marketing solutions. Technically, the site employs modern web technologies including Vue.js, Google Analytics with privacy controls, and OneTrust for cookie consent management, ensuring a balance between user experience and privacy compliance. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS domain registration data is a notable anomaly, but the strong branding and parent company association mitigate concerns. Overall, VML's website demonstrates a high level of professionalism, security awareness, and compliance suitable for an enterprise marketing agency.

D

Daikin

daikin.co.za

65

Daikin South Africa operates a professional and comprehensive website focused on residential air conditioning, heating, and air purification solutions. The company positions itself as a market leader in energy-efficient climate control products tailored for South African homes and small offices. The website offers product information, dealer locator services, and educational content about energy savings and environmental impact. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies. The absence of public WHOIS data suggests privacy protection, which is typical for corporate domains. Overall, the website reflects a mature digital presence with good user experience and trustworthiness.

N

Nicoll Russell Studios

nrsarchitects.com

59

Nicoll Russell Studios is a UK-based architectural practice specializing in a broad range of sectors including housing, arts, education, office, hospitality, health, transport, and conservation. The company presents itself professionally with a well-structured website hosted on the Squarespace platform, targeting clients seeking architectural and design services. The website demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Technically, the site leverages modern web technologies but lacks advanced security headers and analytics integrations. The security posture is adequate with HTTPS enforced but could be improved with additional headers and policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices to strengthen business credibility and user trust.

C

Colostrum UK Ltd

neovite.com

45

Neovite.com is a UK-based website marketing and selling bovine colostrum powder supplements, targeting athletes and health-conscious consumers. The business positions itself as a niche leader in colostrum supplements since 2001, supported by scientific research and media coverage. The website provides educational content, product information, and links to scientific studies, reflecting a focused healthcare retail business model. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, and Modernizr, but lacks advanced frameworks or CMS identification. The site is moderately optimized for mobile and SEO but could improve accessibility and performance. Security posture is weak due to missing HTTPS verification, lack of security headers, and absence of cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite professional content. No contact emails or phone numbers are visible, limiting direct communication channels. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and transparency to enhance trust and compliance.

C

Causeway

causeway.com

68

Causeway is a professional software company specializing in construction and infrastructure maintenance management solutions. Their platform unifies teams, processes, and data to reduce risks and enhance profitability. The website is well-structured, leveraging HubSpot CMS and modern marketing technologies, with strong privacy and cookie compliance. However, the absence of WHOIS registration data and lack of direct contact information slightly reduce trustworthiness. Security posture is good with HTTPS and consent mechanisms, but explicit security policies and incident response details are missing. Overall, the site reflects a mature digital presence suitable for its industry.

G

GoDaddy Operating Company, LLC

nav.co.uk

62

This website is a domain sales landing page hosted by GoDaddy, offering the domain nav.co.uk for purchase, lease, or offer. It targets German-speaking users and provides a professional, secure platform for domain transactions. The site leverages modern web technologies including React and Next.js, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and reCAPTCHA are implemented, though additional security headers could enhance protection. The presence of Trustpilot ratings and verified domain badges contribute to user trust. Overall, the site aligns with GoDaddy's market position as a leading domain registrar and aftermarket provider.

M

MANTECH

mantech.com

71

MANTECH is an enterprise-level government and technology services company specializing in defense, intelligence, homeland security, and commercial sectors. Their website showcases a broad portfolio of expertise including cyberspace superiority, data and AI, digital transformation, and intelligent engineering. The company targets government agencies and commercial clients requiring advanced technology and security solutions. The website is professionally designed, mobile optimized, and structured for clear navigation, reflecting a mature digital presence. Technically, the site is built on WordPress 7.0.4 with integrations such as Google Tag Manager, Parsely analytics, and OneTrust cookie consent, indicating a modern and compliant infrastructure. Performance is moderate with good accessibility and SEO optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit privacy and terms policies are recommended. The WHOIS data is unavailable or obscured, which reduces transparency and trustworthiness from a domain registration perspective. However, the website content and structure strongly indicate a legitimate and professional enterprise. No signs of blocking or WAF challenges were detected, allowing full content analysis. No explicit contact emails or phone numbers were found, which is a gap in user engagement and trust. Overall, MANTECH presents a solid business and technical profile with room for improvement in privacy disclosures and security transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security headers, and providing clear contact information for security incidents.

S

S J Harris Electrical Ltd

sjhe.co.uk

56

S J Harris Electrical Ltd is a small, UK-based electrical contracting company with over 30 years of industry experience. The company offers a wide range of electrical services including installations, testing, surveys, and emergency lighting for commercial, industrial, and domestic clients. The website is professionally designed using the Squarespace platform and provides clear contact details and certifications that enhance trustworthiness. However, the absence of privacy and cookie policies indicates compliance gaps. The WHOIS lookup failed due to domain registration errors, which raises concerns about domain legitimacy despite the professional appearance and accreditations. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, but could improve security headers and accessibility. Overall, the site is functional and trustworthy from a business perspective but requires improvements in privacy compliance and domain registration transparency.

M

Magic Torch Ltd

magictorch.com

45

Magic Torch Ltd is a UK-based creative agency specializing in illustration and motion design services. The company presents a professional portfolio showcasing work across various sectors including science, music, automotive, and lifestyle. The website is built on WordPress using the Blocksy theme and includes standard plugins such as Contact Form 7 for communication. The domain is well-established, created in 1998, which supports the company's credibility and market presence. From a technical perspective, the website employs modern web technologies and is mobile-optimized with good SEO practices. However, there is room for improvement in accessibility and security hardening, particularly the implementation of security headers and DNSSEC. The site uses HTTPS with a valid SSL certificate, ensuring encrypted communications. Security posture is moderate; while HTTPS is enforced and domain transfer protection is enabled, the absence of security headers and explicit security policies reduces the overall security maturity. Privacy compliance is weak due to the lack of visible privacy and cookie policies, which could expose the company to regulatory risks under GDPR. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

C

Cambridge City Cycle Hire

citycyclehire.com

57

Cambridge City Cycle Hire is a small, independent bike hire and repair shop located in central Cambridge, UK. The business offers short-term and long-term bike rentals, bike sales, and repair services, targeting visitors, students, and local residents. The website presents a professional and user-friendly interface with clear service descriptions, pricing transparency, and customer testimonials, positioning itself as a trusted local provider with over 20 years of experience serving Cambridge cyclists. Technically, the site is built on WordPress using the Astra theme and Rank Math SEO plugin, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of privacy and cookie policies indicates compliance gaps. The WHOIS data for the domain is missing, which raises some concerns about domain legitimacy, but the website content and local address support the business's authenticity. Overall, the site is well-constructed and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

Bernard Corrigan is a well-established Scottish seafood and poultry supplier with a history dating back to 1949. The company operates an e-commerce platform via Shopify, targeting restaurants, catering businesses, and consumers seeking premium quality fish and poultry products. Their market position is strong within Scotland, serving over 200 restaurants daily and offering a range of fresh, frozen, smoked, and specialty seafood products. The website reflects a professional and consistent brand image with clear product offerings and customer engagement through social media and review widgets. Technically, the website is built on the Shopify platform using a modern theme and leverages CDN hosting for performance. It integrates multiple third-party marketing and analytics tools such as Google Analytics, Meta pixel, Omnisend, and Loox reviews. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. However, some performance optimizations could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration practices that indicate legitimacy. Security headers are not explicitly visible in the HTML but are likely managed by Shopify. There is no evidence of privacy or cookie policies, security policies, or incident response information, which are gaps in compliance and transparency. No vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with solid business credibility and technical implementation but would benefit from enhanced privacy compliance and published security documentation to improve trust and regulatory adherence.

K

Kingsley Bathrooms

kingsleybphc.co.uk

65

Kingsley Bathrooms operates a well-established e-commerce platform specializing in plumbing, heating, and bathroom products targeted at trade professionals and DIY customers across the UK. The company leverages the Shopify platform to provide a seamless shopping experience with fast delivery and competitive pricing. Their market position is supported by a broad product range, trade account benefits, and a professional online presence. Technically, the website is built on a modern, secure, and performant infrastructure using Shopify's ecosystem, including Shopify Payments and integrated chat support. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, although explicit security policies and incident response information are absent. Privacy compliance is basic but present, with cookie consent mechanisms and privacy policies available. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its business model and audience.

I

iwis

iwis.com

67

iwis is a global industrial company specializing in precision chain, drive, and connection technology solutions for sectors including manufacturing, mobility, and energy. The company positions itself as an innovator with a focus on efficiency, reliability, and sustainability. Their website reflects a professional B2B business model targeting industrial clients worldwide. Technically, the website uses modern web technologies including JavaScript, CSS, and integrates Cookiebot for cookie consent management and Google Analytics for visitor tracking with IP anonymization, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although the absence of security headers and explicit security policies suggests room for improvement. The missing WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and compliance efforts. Overall, the website is well-structured, user-friendly, and compliant with GDPR requirements, serving as a credible digital presence for iwis.

C

Charnay

charnaykitchens.co.uk

62

Charnay is a small, family-owned kitchen design business based in the United Kingdom with over 50 years of industry experience. The company specializes in bespoke kitchen designs, working with multiple manufacturers to provide tailored solutions for homeowners. Their website reflects a professional and consistent brand image, targeting customers seeking quality kitchen design and installation services. The technical infrastructure is built on a modern web stack with responsive design and basic SEO, hosted likely via a reputable registrar and CDN. Security posture is adequate with HTTPS enabled and service worker registration, but lacks advanced security headers and formal privacy compliance documentation. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security features to improve compliance and user trust.

The R&A is a globally recognized governing body for golf, responsible for the rules, equipment standards, handicapping, and staging of major golf championships such as The Open and AIG Women's Open. The organization positions itself as a leader in uniting and growing the sport worldwide, with a strong emphasis on inclusivity and sustainability. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to golf enthusiasts, players, and affiliated organizations. Technically, the website leverages modern web technologies including React and Next.js, hosted likely on Akamai's CDN infrastructure, ensuring fast performance and mobile optimization. The use of Kentico Kontent CMS supports dynamic content management. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR standards. However, direct contact information such as emails or phone numbers for general or security inquiries is not prominently available, which could be improved for transparency and user trust. Overall, the website demonstrates a high level of professionalism, security posture, and compliance, supporting the organization's authoritative role in the golf industry. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure channels, and enhancing contact transparency to further strengthen trust and security culture.

D

Daikin

daikin.co.uk

66

Daikin's UK residential website presents a professional and comprehensive digital presence focused on heating, cooling, and air purification solutions. The site targets residential customers seeking energy-efficient HVAC products and services, supported by a network of certified installers. The company leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, Matomo Analytics, and Visual Website Optimizer to deliver a performant and user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data could not be retrieved due to a domain lookup error, but the website's professionalism and content quality indicate a legitimate business operation. Overall, the site is well-structured, accessible, and compliant with privacy regulations, making it a trustworthy resource for its target audience.

M

Meta Platforms, Inc.

facebook.com

75

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform founded in 2004. It enables users worldwide to connect, share content, and communicate through various services including messaging, marketplace, and video sharing. The platform's business model is primarily advertising-based, leveraging its extensive user base to deliver targeted ads. Facebook holds a dominant market position in social media with a large and diverse audience. Technically, Facebook employs a modern and robust infrastructure utilizing React, Relay, and GraphQL technologies, hosted on Meta's own global infrastructure. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Security is strong with enforced HTTPS, comprehensive security headers, and secure data handling practices. Privacy compliance is well addressed with clear and comprehensive privacy and cookie policies, including GDPR compliance. However, direct contact information is not prominently displayed on the homepage, which is typical for large platforms. WHOIS data is not publicly available due to privacy protections, but the domain's age and reputation affirm its legitimacy. Overall, Facebook presents a highly professional, secure, and trustworthy online presence. Strategic recommendations include maintaining rigorous security audits, enhancing incident response transparency, and continuing to uphold privacy standards to sustain user trust and regulatory compliance.

Rawcode Computer Consultancy Ltd is a small, local IT consultancy based in Lincolnshire, United Kingdom, offering a variety of technical services including on-site support, system development, programming, website design, and broadband setup. The company targets both home users and business clients, emphasizing straightforward and professional service. The website content is clear and focused on the business offerings, with direct contact details provided for the senior consultant. From a technical perspective, the website uses basic HTML and CSS without advanced frameworks or CMS detected. The site appears to have moderate performance and basic mobile optimization. However, there is no evidence of HTTPS or security headers, which is a significant gap in the digital maturity of the site. No analytics or tracking scripts were found, indicating minimal user tracking. Security posture is weak due to the absence of HTTPS, security headers, and privacy or cookie policies. The WHOIS lookup failed due to domain naming rules violation, resulting in no registrar or registrant data, which reduces trustworthiness from a domain registration perspective. Despite this, the website content and contact information appear legitimate and professional. Overall, the site presents a small, local business with basic digital presence but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and protect users.

Alfold Mower Centre is a small UK-based retail and service business specializing in garden machinery sales, servicing, and repairs. Established since 2001, it serves the Surrey and Sussex communities with a wide range of products from leading manufacturers. The website provides detailed business descriptions and contact information but lacks modern security and privacy features. Technically, the site uses older JavaScript libraries and basic mobile optimization, with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS enforcement and missing security headers. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional business content. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization.

Haime & Butler is an independent branding and marketing communications agency with a 30-year history, specializing in brand design, marketing strategy, and creative communications. Their website showcases a professional portfolio of projects and targets businesses seeking comprehensive branding services. The technical infrastructure relies on legacy JavaScript libraries and standard web technologies, with Google Analytics integrated for user tracking. While the site is accessible and professionally designed, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself appears credible and consistent with a legitimate business. Strategic improvements in security posture and privacy compliance are recommended to enhance trust and reduce risk.

Red Bull TV is a prominent streaming platform owned by Red Bull GmbH, specializing in live and on-demand sports, adventure, and entertainment content. It serves a global audience interested in extreme sports and lifestyle programming, leveraging strong brand recognition and a comprehensive content library. The platform is technically mature, utilizing modern web frameworks like Next.js and React, with optimized performance and mobile responsiveness. Security posture is robust, featuring HTTPS, security headers, and no evident vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, although WHOIS data is unavailable due to privacy protection, which is justified given the business nature.

C

Callestick Farm

callestickfarm.co.uk

65

Callestick Farm is a small retail business specializing in the production and sale of Cornish ice cream made from milk sourced from their own herd of grass-fed cows in Cornwall, UK. The company operates both a national distribution network and a local ice cream parlour, targeting general consumers interested in premium dairy products. The website is professionally designed using the Squarespace platform, featuring good mobile optimization and clear navigation. Privacy and cookie policies are present and indicate GDPR compliance, although explicit contact information and terms of service are not found. Security posture is strong with HTTPS and HSTS enabled, but additional security headers and incident response information are absent. The domain WHOIS data is unavailable due to a Nominet UK naming rules error, which slightly reduces trustworthiness but does not indicate malicious intent. Overall, the website presents a trustworthy and professional image suitable for its business model.

M

Mann Williams Limited

mannwilliams.co.uk

47

Mann Williams Limited is a UK-based consulting structural and civil engineering firm specializing in both conservation and new build projects. The company emphasizes a flexible and innovative approach to engineering within the construction process, targeting clients in the construction and real estate sectors. Their expertise includes digital engineering and they hold a notable position with the most CARE registered engineers in the UK. The website presents a professional portfolio of projects and company information, supporting their market position as a reputable medium-sized engineering consultancy. Technically, the website employs modern web technologies including JavaScript, CSS, and SVG graphics, with performance and mobile optimization rated as good. However, there is no detected CMS or hosting provider information. The site lacks explicit privacy and cookie policies, and no security headers were detected, indicating room for improvement in security posture. The WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Security-wise, the site uses HTTPS as implied by canonical URLs but lacks visible security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies and WHOIS transparency are notable gaps. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced security and compliance measures. The overall risk assessment suggests the website is legitimate and professional but requires attention to domain registration legitimacy, privacy compliance, and security best practices to strengthen trust and reduce potential risks.

Greenearth Hydro Limited is a small UK-based company specializing in the design and installation of micro-hydro renewable energy systems for domestic and commercial clients primarily in Wales and the West Midlands. Their services include system design, installation, operation, and maintenance, positioning them as a niche player in the renewable energy sector focused on hydropower. The website content is basic but relevant, providing contact details and downloadable resources to support potential customers. Technically, the website is built with simple HTML and CSS without advanced frameworks or CMS detected. There is no evidence of HTTPS or security headers, and no analytics or tracking scripts are present. The site is accessible without WAF or security challenges but lacks modern technical and security best practices, including privacy and cookie policies. From a security perspective, the absence of HTTPS and security headers, combined with the lack of privacy compliance documentation, indicates a low security posture. The WHOIS lookup failed due to domain registration issues, which raises concerns about domain legitimacy despite the professional appearance of the website content and contact information. Overall, the website presents a moderate risk profile with critical recommendations to implement HTTPS, add privacy and cookie policies, and resolve domain registration issues to improve trust and security compliance.

B

Blackstage Forensics

blackstage-forensics.co.uk

42

Blackstage Forensics is a small UK-based company specializing in digital privacy, security consulting, online investigations, and training services. Their website presents a professional image targeting individuals and organizations seeking to mitigate digital risks and investigate online threats. The company offers bespoke services including risk profiling, threat investigation, privacy strategies, and OSINT training. Technically, the website uses Bootstrap and custom CSS, is mobile optimized, and provides clear contact details but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with no visible vulnerabilities but missing some best practices such as security headers and confirmed HTTPS status. WHOIS data is unavailable due to domain registration errors indicating the domain name contravenes Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and informative but would benefit from improved security configurations and compliance features.

Allen Diesels Limited is a UK-based company specializing in medium speed diesel engines with a heritage linked to Rolls-Royce Power Engineering Ltd. They provide new engine builds, spares, retrofits, and service support globally, emphasizing continuity and customer satisfaction. The website reflects a small but established business with consistent branding and clear contact information. Technically, the site uses standard web technologies including jQuery and Google Analytics, but lacks advanced CMS or frameworks. Security posture is moderate with no visible security headers or DNSSEC, and privacy compliance is limited due to the absence of a privacy policy page. Overall, the site is professional and trustworthy but could improve in security and compliance areas.

Croydon Accident Repair Centre is a small, locally focused vehicle body repair business operating in Croydon and the Southeast UK. The company offers a range of services including panel beating, car repairs, servicing, mechanical repairs, and dent repair. It is a Honda approved body repair centre with multiple workshops, indicating a degree of industry recognition and specialization. The website content is basic but provides clear contact details and business information relevant to its target audience of vehicle owners needing accident repair services. Technically, the website is built with standard HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The site shows basic mobile optimization and accessibility but lacks modern SEO and performance enhancements. There is no evidence of analytics or tracking technologies, and no forms are present for data collection. The absence of HTTPS and security headers is a significant technical and security shortfall. From a security perspective, the site lacks critical protections such as HTTPS, security headers, and privacy or cookie policies, which are essential for GDPR compliance and user trust. The WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy and ownership transparency. No incident response or security contact information is provided, limiting the site's readiness for security events. Overall, while the business appears legitimate and provides useful services, the website's technical and security posture is weak, and the domain registration issues present a risk. Strategic improvements in security, privacy compliance, and domain legitimacy verification are recommended to enhance trust and protect users.

DBA Consulting (MK) Ltd is a UK-based management consultancy specializing in strategic planning, market analysis, and organizational capability development. Their services include sales and marketing training, capability development, and skills coaching, targeting businesses seeking to improve market focus and operational efficiency. The company references notable clients such as BP and Castrol, indicating a niche market position with proven methodologies. Technically, the website is outdated, relying on deprecated Flash technology and lacking modern web standards such as HTTPS and responsive design. Security posture is weak, with no visible security headers or privacy compliance mechanisms, and WHOIS data indicates domain registration issues that raise legitimacy concerns. Overall, the website reflects a small business with basic digital maturity and significant room for improvement in security and compliance.

Black Sheep Business Communications Ltd is a UK-based telecommunications company that has re-branded and now directs customers to its main website www.bluebox-i.co.uk for all services and products. The blacksheepzone.com domain primarily hosts legal and contractual information for existing customers. The website is minimalistic with basic content and limited interactive features. Technically, the site uses standard HTML, CSS, and JavaScript without advanced frameworks or CMS detected. There is no evidence of HTTPS or security headers from the provided data, which indicates potential security weaknesses. The WHOIS data is missing, suggesting the domain may be expired or unregistered, which raises concerns about domain legitimacy and trust. Overall, the site serves as a static informational resource rather than a full service platform.

F

Firebird Theatre Ltd.

firebird-theatre.co.uk

58

Firebird Theatre Ltd. is a small, non-profit theatre company based in Bristol, UK, specializing in performances by Learning Disabled artists. Established as an independent company in 2005, with roots going back over thirty years, it has a strong community and artistic focus supported by Bristol Old Vic. The company aims to create inclusive, impactful theatre that resonates with diverse audiences. The website reflects this mission with clear content, consistent branding, and a focus on community engagement. Technically, the site is built on the Squarespace platform, leveraging standard web technologies and fonts, with moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and published security policies. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism or GDPR indicators. Contact information is limited, with no emails or phone numbers explicitly provided on the site, though a physical address and Instagram presence exist. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

F

Fouad Takla

fouadtakla.com

38

Fouad Takla is a well-established construction and development group based in Syria, operating since 1964 with a focus on construction services, products, and property development. The website presents a professional image with detailed project showcases and sector updates, targeting businesses and stakeholders in the Syrian construction and real estate markets. Technically, the site uses modern web technologies including Google Analytics and Google Maps API, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and trust. Overall, the website is functional and informative but requires improvements in security, compliance, and transparency to enhance trustworthiness and regulatory adherence.

Crowthers (Ripponden) Limited is a UK-based accounting firm established in 2000, providing accounting and financial services primarily to local businesses and individuals. The website currently serves as a placeholder indicating a new site is under development, with minimal content and no advanced features or policies in place. The business appears to be a small professional services firm with a local market focus. Technically, the website is built using legacy technologies such as the Spry framework and lacks modern web standards including HTTPS enforcement, security headers, and mobile optimization. The site performance and accessibility are poor, and no content management system or analytics tools are detected. Hosting and domain registration are consistent with the business claims, registered through Tucows Domains Inc. From a security perspective, the absence of HTTPS, security headers, and DNSSEC reduces the security posture significantly. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Contact information is clearly provided, but no incident response or security policies are visible. Overall, the security maturity is low, and the website requires significant improvements to meet modern standards. The overall risk assessment is moderate due to the lack of security controls and compliance documentation. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, enabling security headers, modernizing the technology stack, and improving website content and user experience to enhance trust and compliance.

L J Hall and Co Limited is a small, Bristol-based chartered certified accountancy firm providing professional accountancy and taxation services primarily to local businesses and individuals. The company emphasizes personal service, accuracy, and integrity, offering a free initial consultation to prospective clients. Their market position is that of a competitive alternative to larger firms, focusing on tailored advice and cost-effective solutions. The website content is professional and well-structured, targeting SMEs and startups in the Bristol area. Technically, the website is built using the itseeze CMS platform and incorporates modern web technologies including JavaScript, CSS, and Google Analytics for visitor tracking. The site is mobile-optimized with responsive design and includes standard SEO and accessibility features, though accessibility could be improved. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and includes a cookie consent banner compliant with GDPR. However, no advanced security headers were detected, and there is no visible incident response or vulnerability disclosure information. The forms include basic anti-spam measures. The lack of WHOIS data due to domain naming rules error is a concern for domain legitimacy verification, though the website content and business information appear consistent and trustworthy. Overall, the website presents a professional and credible front for a small accounting firm, with room for improvement in security practices and domain registration transparency. The risk level is moderate, primarily due to incomplete WHOIS data and limited security policy disclosures.

F

footprint

fpiltd.com

60

The website 'footprint' represents a small, established full service design and print studio based in Kent, UK. The business offers a range of creative services including design, marketing, print, and digital solutions, with a specialization in fine art books and catalogues. The site is professionally designed using the Squarespace platform, providing a good user experience with clear navigation and mobile optimization. However, the absence of explicit contact details and business registration information limits the transparency and credibility of the business online. Technically, the website leverages modern web technologies and benefits from HTTPS with HSTS enabled, ensuring secure communications. The use of Google reCAPTCHA on forms indicates attention to spam and bot protection. Despite these strengths, the lack of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and legitimacy. The domain WHOIS query returned no match, suggesting the domain may not be properly registered or is using privacy protection or proxy services. From a security perspective, the site follows basic best practices but lacks advanced security headers and incident response information. There is no evidence of GDPR compliance or data protection officer contact, which is important for a business operating in the UK and EU regions. Overall, the website is safe for general audiences and does not contain any adult or questionable content. The overall risk assessment suggests the business should improve transparency by publishing privacy and cookie policies, providing clear contact information, and verifying domain registration details. Enhancing security headers and establishing a vulnerability disclosure policy would further strengthen the security posture.

J

Jack & Anna

jackandanna.co.uk

56

Jack & Anna is a UK-based consultancy focused on helping leadership teams accelerate growth and revenue through strategic planning and capability building. The website is professionally designed using Squarespace, featuring clear messaging about growth strategy, go to market, ROI delivery, and capability building services. The technical infrastructure is modern and secure, with HTTPS and HSTS enabled, hosted on Squarespace's CDN platform. However, the absence of privacy and cookie policies, lack of explicit contact information, and failure to retrieve WHOIS data for the domain reduce overall trust and compliance posture. Security headers are minimal but adequate, and no vulnerabilities or tracking scripts were detected in the provided content. Overall, the site presents a professional business image but requires improvements in privacy compliance and transparency to enhance credibility.

N

Nameshift.com

conveyancingdirect.co.uk

55

The website conveyancingdirect.co.uk is a domain sales landing page operated by Nameshift.com, a domain marketplace and escrow service based in the Netherlands. The site offers the domain conveyancingdirect.co.uk for sale at £7,450 with options to buy immediately or make an offer. The business model centers on facilitating safe and fast domain transfers with no fees for buyers, positioning itself as a trusted intermediary in the domain resale market. The website content is minimal and focused solely on the domain sale, with trust signals such as a Verified Seller badge and a Trustpilot widget. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, hosted on Nameshift's infrastructure. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or third-party hosting providers are explicitly identified. The site loads external scripts for Trustpilot reviews and Nameshift analytics, indicating moderate user tracking. From a security perspective, the site uses HTTPS for external resources but does not explicitly show security headers in the HTML content. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies, incident response information, and vulnerability disclosure reduces compliance maturity. The WHOIS data is inconsistent, showing a future domain creation date and a registrant name that differs from the website operator, which raises legitimacy concerns. Overall, the website presents a basic but functional domain sales platform with moderate trustworthiness. Key risks include incomplete privacy compliance and suspicious WHOIS data. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, clarifying registrant information, and enhancing SEO and accessibility to improve user trust and compliance.

MI-Flues operates as a specialized retailer and supplier of chimney flues, flexible liners, and related installation parts primarily targeting trade professionals and retail customers in the heating and ventilation sector. The website is built on a modern React and Next.js framework, offering a well-structured product catalog and user-friendly navigation. Contact information is clearly provided, enhancing customer accessibility. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed to meet regulatory standards. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. The WHOIS data is notably absent or unavailable, which raises concerns about domain legitimacy and ownership transparency. Overall, the site presents a professional front but requires improvements in compliance and security transparency to enhance trust and reduce risk.

K

Kinnerton

kinnerton.com

66

Kinnerton is a UK-based confectionery brand with a long heritage dating back to 1978, specializing in character chocolates and nut safe products. The website is professionally designed using the Shopify platform, offering a good user experience and clear navigation. The brand positions itself as a trusted confectionery provider with a focus on safety and fun. Technically, the site leverages modern web technologies and Shopify's infrastructure, ensuring fast performance and mobile responsiveness. Security posture is strong with HTTPS and security headers in place, though there is room for improvement in privacy compliance and incident response transparency. The absence of WHOIS data is a notable gap, impacting domain trustworthiness. Overall, the site is credible and well-maintained but would benefit from enhanced privacy and security disclosures.

O

Oriya Interiors

oriyagroup.com

61

Oriya Interiors is a small, professional interior design firm based in London, UK, specializing in bespoke space planning and interior design services for homes, restaurants, hotels, and workplaces. The company emphasizes unique, tailored design solutions rather than generic templates, targeting clients seeking personalized interior layouts. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is adequate with HTTPS enforced, but the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about registrant transparency, which impacts overall trustworthiness. No signs of adult or questionable content were found, and the site appears safe for general audiences.

U

Urząd Miejski w Brzostku

brzostek.pl

66

The website brzostek.pl serves as the official information portal for the Gmina Brzostek municipal government in Poland. It provides residents and visitors with news, practical information, tourism details, and e-government services. The site is well-structured, localized in Polish, and targets local citizens and stakeholders interested in municipal affairs. The business model is that of a public sector information portal, focusing on transparency and community engagement. Technically, the site employs modern web technologies including service workers for push notifications, a custom CSS framework (Trolstrap), and JavaScript libraries for UI components. It is mobile-optimized and includes accessibility features, ensuring usability for a broad audience. The CMS appears to be 2ClickPortal, a platform commonly used by Polish municipalities. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML source. There is no published security policy or incident response contact, which could be improved. No vulnerabilities or suspicious content were found, and the WHOIS data indicates a stable and legitimate domain registration consistent with the municipal nature of the site. Overall, brzostek.pl is a trustworthy and professional municipal website with good content quality and compliance. Strategic improvements in DNS security and security headers, along with publishing a security policy, would enhance its security posture and trustworthiness further.

O

OBOS

obos.no

75

OBOS is Norway's largest housing cooperative, owned by its members, providing a broad range of services including housing sales, banking, and membership benefits. The organization holds a strong market position in the Norwegian real estate and finance sectors, targeting Norwegian residents seeking housing solutions and financial services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, OBOS demonstrates a high level of trustworthiness and professionalism, with no indications of suspicious activity or content.

L

Landsbyarkitektene AS

landsbyarkitektene.no

60

Landsbyarkitektene AS is a small architectural firm based in Bærum, Norway, specializing in residential and small-scale architectural projects including single-family homes, duplexes, extensions, cabins, and garages. The company targets both private and public customers in the local region. The website is professionally designed using the Squarespace platform, providing a good user experience with clear navigation and mobile optimization. However, the site lacks explicit contact details and formal privacy or cookie policies, which are important for compliance and user trust. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding security headers and privacy compliance features. The WHOIS data is not publicly available due to Norid's privacy policies, which is typical for Norwegian domains, and does not raise immediate concerns about legitimacy. Overall, the website presents a credible and professional business presence but would benefit from enhanced privacy and security disclosures.