Security Directory

C

Circle partnership

circlepartnership.co.uk

59

Circle partnership operates as a UK-based online news and media platform delivering a wide range of topical content including finance, entertainment, sports, technology, lifestyle, and politics. The website targets a general audience interested in current events and expert opinions, offering a subscription option to enhance user engagement. The business model centers on content publishing with monetization likely through advertising and subscriptions. The site maintains a consistent brand presence and provides comprehensive privacy and cookie policies aligned with GDPR requirements.

P

Premier Patterns & Castings Ltd

premierpatterns.com

43

Premier Patterns & Castings Ltd is a UK-based small manufacturing company specializing in high-quality pattern making, mould making, and metal casting services. With over 30 years of experience, they serve diverse industries including automotive, aerospace, marine, and entertainment. Their website presents a professional image with detailed service offerings and clear contact information, targeting B2B clients in manufacturing sectors. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, providing a good user experience with mobile optimization and clear navigation. However, the website lacks privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. The absence of WHOIS data for the domain is a significant anomaly that reduces domain trustworthiness, although the website content and contact details appear legitimate. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

E

Electrical Marine Co Ltd

electrical-marine.com

51

Electrical Marine Co Ltd is a well-established marine electrical supplies and services company based in Phuket, Thailand, founded in 1991. The company specializes in yacht electrical maintenance, repairs, new installations, rewiring, and authorized distribution of reputable marine brands such as Mastervolt and Simrad. Their market position is strong within the marine industry in Thailand, targeting yacht owners and marine professionals. The website is built on WordPress with WooCommerce, featuring a professional design and good content quality, although some compliance gaps exist such as missing privacy and cookie policies. Technically, the site uses modern web technologies and is hosted by pair Networks, Inc. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. The domain is long-standing and consistent with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

G

Groundwise Searches Ltd

groundwise.com

60

Groundwise Searches Ltd is a UK-based company specializing in utility mapping and environmental search services, primarily serving clients in the construction, engineering, and infrastructure sectors. The company offers PAS128 (D) compliant utility surveys, desktop mapping (CAD), and environmental searches, positioning itself as a leading provider in the UK and Ireland with recognized accreditations. The website reflects a professional and consistent brand image with comprehensive service descriptions and client testimonials. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, Google Analytics, Hotjar, Microsoft Clarity, and Google Maps API. It employs cookie consent management compliant with GDPR and uses Google reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which impacts trustworthiness. Overall, Groundwise presents as a credible and professional business with a solid digital presence, though verification of domain registration and enhancement of security policies would strengthen its security posture and trustworthiness.

E

Evans Warrington Limited

evanswarrington.co.uk

46

Evans Warrington Limited is a UK-based mechanical services company operating nationally, specializing in various aspects of mechanical services within the Building Services Sector. The company is family-run with over 70 years of experience and a small team of eighteen staff. The website reflects a small business model focused on service provision to clients across the UK. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, hosted by Ionos SE. The site is moderately optimized for SEO and mobile use but lacks advanced accessibility features and comprehensive privacy or cookie policies. Security posture is basic with HTTPS enabled but no detected security headers or incident response information. Overall, the website is functional and professional but could improve in compliance and security transparency.

H

Hydraquip

hydraquip.co.uk

50

Hydraquip is a well-established UK-based company specializing in hydraulic hose repair and fluid power products, offering a comprehensive range of services including 24/7 national on-site hose repair, engineering services, and trade counter sales. The company operates with a medium-sized workforce and a network of trade counters, positioning itself as a key player in the energy and manufacturing sectors. The website reflects a professional business model targeting industrial and commercial clients requiring hydraulic solutions. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tools such as WPBakery, Slider Revolution, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic improvements in privacy compliance and security headers would enhance the site's trust and compliance standing.

P

Professional Paper Supplies Limited

scottjanitorial.co.uk

61

Professional Paper Supplies Limited (PPS) is a family-owned B2B supplier specializing in cleaning materials, janitorial supplies, catering disposables, PPE, and packaging solutions. The company primarily serves businesses across Yorkshire and the North of England, positioning itself as a regional supplier with a focus on essential business supplies. Founded in 1999, PPS maintains a professional online presence through a BigCommerce-powered e-commerce platform, facilitating business transactions and product browsing. The website is well-structured, mobile-optimized, and integrates modern e-commerce technologies including Google Analytics and Klaviyo for marketing and analytics purposes. From a technical perspective, the website leverages a robust e-commerce platform with standard JavaScript libraries and tracking tools. The site demonstrates good performance and usability, with clear navigation and responsive design. However, there is room for improvement in security practices, particularly in implementing comprehensive security headers and ensuring all forms have adequate protections. Privacy compliance is partially addressed through cookie consent mechanisms, though a dedicated privacy policy page was not detected in the provided content. Security posture is moderate; HTTPS is used, and consent management scripts are present, but the absence of visible security headers and the lack of WHOIS data due to domain naming rules violation reduce overall trust. The domain's WHOIS information is unavailable, which is unusual and may indicate a misconfiguration or domain registration issue. Despite this, the website content and business information appear legitimate and consistent with a professional supplier. Overall, PPS presents a credible business with a functional and professional website. Strategic improvements in security headers, privacy policy transparency, and domain registration clarity would enhance trust and compliance. The current risk level is moderate, wi…

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales with flexible payment plans. Established since 2005, it targets individuals and businesses seeking valuable web addresses. The website demonstrates a mature e-commerce business model with clear trust signals such as customer testimonials, money-back guarantees, and secure shopping assurances. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. Privacy compliance is robust, featuring a comprehensive privacy policy and an active cookie consent mechanism. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be improved. Overall, the domain and website present a trustworthy and professional front with no signs of malicious activity or content blocking.

A

Astbury Formentera S.L

formentera.co.uk

61

Astbury Formentera S.L is a well-established vacation rental agency specializing in holiday accommodations on the island of Formentera, Spain. Operating since 1982, the company offers a range of villas, beach houses, and apartments with a focus on personalized service and direct bookings. The website reflects a mature business with a clear market position targeting tourists seeking quality holiday rentals in the Mediterranean region. Technically, the site leverages modern JavaScript frameworks, integrates mapping services, and uses popular analytics and marketing tools such as Google Analytics and Facebook Pixel, all while implementing GDPR-compliant cookie consent mechanisms. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers are not detected and WHOIS data is unavailable, which slightly reduces trust. Overall, the site is professional, user-friendly, and trustworthy, supporting the company's business goals effectively.

M

Metalflex Industrial Supplies Ltd

metalflex.co.uk

55

Metalflex Industrial Supplies Ltd is a UK-based manufacturer specializing in flexible stainless steel and PTFE hose assemblies, established in 1999. The company operates from a strategically located facility in Warrington, enabling efficient delivery across the UK. Their website reflects a professional and consistent brand image, targeting industrial clients requiring specialized hose products. The business holds a strong market position as a leading UK manufacturer in their niche. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce capabilities, enhanced by Themify Shoppe theme and various plugins such as Yoast SEO and Formidable Forms. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Google Analytics is used for visitor tracking with a compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS with good SSL configuration and employs cookie consent with granular controls. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No visible vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data aligns well with the business history and location, enhancing credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to ensure ongoing security and compliance.

E

Express Scripts

express-scripts.com

72

Express Scripts is a leading pharmacy benefit management company providing prescription benefit services to millions of members. The website offers comprehensive tools for members to manage prescriptions, understand benefits, and access home delivery services. The company is well-positioned in the healthcare sector with multiple industry accreditations and a strong brand presence under its parent company Evernorth. Technically, the site is built on Drupal CMS with modern analytics and tracking technologies, optimized for mobile and accessibility. Security posture is strong with HTTPS, CSP, and secure forms, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure supporting a large enterprise healthcare business.

I

IFRS Foundation

ifrs.org

62

The IFRS Foundation is a globally recognized not-for-profit organization responsible for developing and maintaining international accounting and sustainability disclosure standards. Their website reflects a mature digital presence with comprehensive content targeting a wide range of stakeholders including accounting professionals, investors, regulators, and academics. The organization offers licensing, digital subscriptions, credentials, and educational products to support the adoption and application of IFRS Standards worldwide. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics and marketing tools such as Adobe Analytics, Google Tag Manager, Hotjar, and HubSpot, ensuring robust tracking and user engagement insights. Security posture is strong with HTTPS enforcement and use of Incapsula WAF, though explicit security headers and a public security policy could enhance trust further. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with the IFRS Foundation's global stature.

H

Halifax

halifax.co.uk

65

Halifax is a well-established UK retail bank, founded in 1852 and operating as part of the Lloyds Banking Group. The website offers a comprehensive range of financial services including bank accounts, savings, loans, mortgages, credit cards, and car finance, targeting UK retail customers. The brand is consistent and professionally presented, reflecting its enterprise-level market position. The digital infrastructure is modern, leveraging advanced analytics, marketing, and performance monitoring tools, hosted likely on Akamai with a CMS inferred as Adobe Experience Manager. Security posture is strong with HTTPS, Content Security Policy, and other security headers implemented, and no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. WHOIS data is unavailable due to registry errors, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, secure, and user-friendly, serving a large customer base effectively.

M

MetLife

metlife.com

75

MetLife is a globally recognized provider of employee group benefits and insurance solutions, targeting employers, benefits brokers, and individuals. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on workforce health, financial security, and wellbeing. The technical infrastructure leverages Adobe Experience Manager CMS, Adobe Launch for tag management, and Osano for consent management, indicating a modern and compliant digital ecosystem. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although the absence of a public security policy and incident response information suggests room for improvement in transparency. The lack of WHOIS data limits domain registration trust analysis but does not detract from the site's evident legitimacy and brand strength. Overall, the website scores well on content quality, technical implementation, and security, with recommendations to enhance security policy disclosures and incident response readiness.

B

BNY

bnymellon.com

72

BNY is a globally recognized financial services platform company specializing in securities services, fund and investor solutions, custody, and managed account solutions. The company operates at the heart of the world's capital markets, overseeing assets totaling $62.6 trillion, positioning it as a major player in the finance industry. The website targets institutional investors, financial institutions, and corporate clients, reflecting a business model focused on large-scale financial services and asset management. The site demonstrates a high level of professionalism and branding consistency, reinforcing its enterprise market position. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, Bootstrap framework, and various analytics and marketing tools such as Adobe Analytics, Marketo, and Qualtrics. Hosting appears to be via Akamai, ensuring fast performance and global content delivery. The site is mobile-optimized and accessible, with a comprehensive cookie consent mechanism and privacy policy indicating good digital maturity and compliance with GDPR. From a security perspective, the site enforces HTTPS, implements a Content-Security-Policy header, and avoids exposing sensitive data. However, it lacks explicit security policy and incident response pages, and no vulnerability disclosure or security.txt file was found. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site and corporate trust signals. Overall, the website presents a strong, secure, and compliant digital presence suitable for an enterprise financial services company. Strategic recommendations include publishing explicit security and incident response policies, adding a security.txt file, and verifying WHOIS data to enhance trust and transparency.

N

Northrop Grumman

northropgrumman.com

64

Northrop Grumman is a leading global aerospace and defense technology company specializing in advanced electronics, aerospace systems, military aircraft, space exploration, and digital transformation services. With a workforce of approximately 95,000 employees, the company serves government agencies and defense contractors worldwide, leveraging science, technology, and engineering to deliver innovative solutions. The website reflects a mature digital presence with a modern tech stack including Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness, supporting Northrop Grumman's market position as a major defense contractor.

P

Premier Textiles

premier-textiles.com

47

Premier Textiles operates as a UK-based textile trading company specializing in sourcing, importing, and supplying high-quality textiles from global manufacturing partners. The company positions itself as a leading supplier in the UK market, offering services as traders, converters, and bespoke textile solutions. Their website reflects a professional business presence with a focus on quality, sustainability, and social responsibility. Technically, the website is built on WordPress using the Avada theme and integrates common plugins such as Yoast SEO, WPML for multilingual support, and Google Analytics for traffic monitoring. The site is mobile-optimized and includes structured data for SEO enhancement. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks security headers and visible privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear credible. Overall, the site scores well on content quality and business credibility but should address security and compliance gaps to enhance trust and reduce risk.

Brooksbank Valves Ltd is a UK-based manufacturer specializing in high-quality isolation valves for demanding industries such as Naval Marine, Oil & Gas, and Industrial Gas & Chemical markets. With over 70 years of experience, the company positions itself as an independent family-owned business focused on quality assurance and traceability. The website reflects a professional industrial manufacturing business with clear product offerings and sector focus. Technically, the website uses modern web technologies including Webflow CMS, JavaScript libraries, Google Analytics, and Twitter widgets. The site is mobile-optimized with good navigation and content quality. However, some technical improvements are recommended, including enhanced accessibility and security headers. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies. The absence of privacy and cookie policies indicates potential compliance gaps. The WHOIS data is unavailable due to domain naming rules violation, which reduces trust but the website content and contact information support legitimacy. Overall, the website presents a credible and professional business presence with moderate technical maturity and some security and compliance improvements needed. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and clarifying incident response contacts to enhance trust and compliance.

A

Adams & Page Ltd

adamsandpage.co.uk

48

Adams & Page Ltd is a longstanding tyre and wheel alignment service provider based in High Wycombe, UK, with a history dating back to 1928. The company offers a comprehensive range of tyre products and vehicle services including ADAS recalibration, wheel alignment, and puncture repair, targeting vehicle owners in Buckinghamshire and surrounding areas. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, and integrates cookie consent and Google Analytics with user consent controls, indicating a moderate level of digital maturity. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no incident response or security policies are published. The WHOIS data is unavailable due to a domain naming rules error, which raises some concerns about domain registration legitimacy, though the website content itself appears trustworthy and professional. Overall, the site is functional, user-friendly, and compliant with basic privacy standards but could improve in security transparency and domain registration clarity.

D

Durham-Ellis Pecan Company

durhams.com

54

Durham-Ellis Pecan Company is a medium-sized retail and manufacturing business specializing in pecans and other nut products, based in Comanche, Texas. The company operates a large processing facility and offers a variety of products through retail, wholesale, fundraising, and corporate gift channels. Their website reflects a consistent brand with a focus on product offerings and customer engagement. Technically, the site is built on the CIMcloud ecommerce platform, leveraging modern JavaScript frameworks, Bootstrap, and Amazon Cloudfront CDN for hosting. Google Analytics and Constant Contact are used for analytics and marketing. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and formal policies. The absence of public WHOIS data reduces domain trust but the website content and contact information support legitimacy. Overall, the site is professional and functional with room for improvement in privacy and security disclosures.

C

City of Whittier

cityofwhittier.org

55

The City of Whittier's official website serves as a comprehensive portal for residents, businesses, visitors, and government stakeholders, providing access to city government information, public services, community programs, and event calendars. The site is well-structured with clear navigation and consistent branding, reflecting its role as a municipal government resource. The technical infrastructure leverages AngularJS, Bootstrap, and integrates multiple analytics and monitoring tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and session management in place; however, the absence of explicit security headers and privacy policies suggests room for improvement in compliance and hardening. Overall, the website is trustworthy and professionally maintained, though enhancing privacy compliance and security best practices would strengthen its risk profile.

C

City of Avondale

avondaleaz.gov

56

The City of Avondale's official website serves as a comprehensive portal for residents, businesses, and community members to access municipal services, information, and resources. It provides key services such as utility billing, public safety updates, recreation programs, business licensing, and passport services. The site targets local citizens and businesses, positioning itself as the authoritative source for city government information and community engagement. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Gravity Forms, and integrates Google Analytics and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the website is professional, trustworthy, and safe for general audiences, reflecting a medium-sized government entity with consistent branding and clear business focus.

Z

Zhejiang Longterm Medical Technology Co., Ltd

longterm-health.com

53

Zhejiang Longterm Medical Technology Co., Ltd operates a professional website focused on manufacturing and supplying wound dressings and medical consumables. The company positions itself as a world-leading custom wound dressing manufacturer targeting healthcare professionals and medical product buyers globally. The website offers detailed product categories, solutions, and educational content, supporting a comprehensive business model in the healthcare manufacturing sector. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and user experience. However, the absence of explicit privacy and cookie policies and missing WHOIS domain registration data present compliance and legitimacy concerns. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the site is professional and content-rich but would benefit from enhanced transparency and security practices.

京

京东JD.com

jd.com

61

JD.com's global subdomain 'global.jd.com' serves as a professional, comprehensive e-commerce platform targeting international customers. The site offers a wide range of product categories including electronics, apparel, home goods, and more, with support for international shipping and payment methods. The platform is positioned as a large enterprise with a strong market presence in China and overseas markets. Technically, the site leverages modern web technologies such as React and custom APIs, ensuring a responsive and functional user experience. Security posture is solid with HTTPS enforced and custom security scripts, though some standard security headers are not explicitly detected. Privacy policies and terms of service are present, but cookie consent mechanisms are not clearly visible, indicating room for improvement in privacy compliance. Overall, the site is trustworthy, professional, and well-branded, consistent with JD.com's reputation.

天津宏尔瑞特电力工程股份有限公司 operates a professional website showcasing its expertise in powder handling and pneumatic conveying solutions, targeting industrial clients primarily in China. The company emphasizes technology innovation and provides a range of products and engineering services. The website is built on TYPO3 CMS and incorporates modern JavaScript libraries to deliver a visually appealing and interactive user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible vulnerabilities but lacks important HTTP security headers and explicit privacy policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency.

M

Multiply UK Ltd

multiplyagency.com

59

Multiply UK Ltd is a medium-sized marketing communications agency operating primarily in Edinburgh and London. They specialize in brand, digital, and shopper marketing, leveraging proprietary insight tools and creative strategies to deliver measurable impact for their clients. The company presents a professional and well-structured website with comprehensive service descriptions and a strong portfolio of clients, indicating a solid market position in the marketing sector. Technically, the website is built on Drupal CMS and employs modern web technologies including jQuery, GSAP, Google Analytics, and CookieYes for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure, though some security headers are not explicitly detected. The security posture is sound but could be improved by adding explicit security policies, incident response information, and publishing a security.txt file. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, secure, and privacy compliant, with minor areas for improvement in transparency and security documentation.

R

Right Choice Conveyancing Ltd

rightcc.co.uk

59

Right Choice Conveyancing Ltd is a UK-based legal services provider specializing in residential property conveyancing across England. Established in 2015, the company offers a range of conveyancing services including selling, buying, shared ownership, re-mortgage, auctions, and outsourcing. The firm emphasizes a local and personal service approach without call centres, targeting residential property buyers and sellers. Their market position is supported by regulatory compliance with the Council for Licensed Conveyancers and certifications such as Cyber Essentials, enhancing their trustworthiness in the real estate legal sector. Technically, the website is built on WordPress using the Avada theme and Fusion Builder framework, incorporating modern JavaScript libraries like jQuery and Google Analytics for tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are consistent with a UK-based business, with no evidence of content blocking or WAF interference. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs some security best practices such as sanitizing SVG content. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosures or incident response contacts are present, indicating room for improvement in security transparency and user trust. Overall, the website presents a professional and trustworthy front for a small legal conveyancing firm with solid business credibility. Strategic enhancements in privacy compliance, security headers, and incident response documentation would further strengthen their security posture and regulatory adherence.

S

Silver Scene

silverscene.co.uk

62

Silver Scene is a UK-based independent jeweller specializing in unique and contemporary Sterling Silver and semi-precious gemstone jewellery. The company operates an e-commerce platform built on Shopify, offering a wide range of handcrafted jewellery including rings, earrings, pendants, brooches, necklaces, chains, bracelets, and anklets. The business targets consumers seeking quality, handcrafted jewellery with a focus on elegance and sophistication. The website demonstrates consistent branding and trust indicators such as positive Facebook reviews and free delivery offers, positioning it as a reputable niche retailer in the UK market. Technically, the website leverages Shopify's Canopy theme and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Trustpilot, and Mailchimp. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. The hosting and domain registration are stable and consistent with the business history, enhancing credibility. From a security perspective, the site uses HTTPS and secure Shopify checkout processes, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found in the analyzed content, which is a notable gap given GDPR requirements. Overall, Silver Scene presents a professional and trustworthy online presence with a solid business foundation. However, improvements in privacy policy transparency and security header implementation are recommended to enhance compliance and security posture.

D

Debate Mate

debatemate.org

53

Debate Mate is an established communication consultancy founded in 2008, specializing in delivering training and debate programs for schools and businesses globally. The company positions itself as a world-leading provider in its niche, focusing on enhancing communication skills through structured debate. The website reflects a professional and consistent brand image, targeting educational institutions and corporate clients. Technically, the site is built on WordPress with modern plugins for SEO and analytics, hosted with reputable providers including IONOS SE and Cloudflare DNS services. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

I

Iwin68

uk.com

50

Iwin68 is an online gambling platform targeting Vietnamese users, offering a variety of betting and gaming services including sports betting, card games, lottery, and promotional offers. The website is built on WordPress using the Flatsome theme and includes SEO optimization via Rank Math. It has a moderate level of technical maturity with responsive design and social media integration. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the platform appears functional and professionally presented but would benefit from enhanced security and compliance measures.

V

VIRTUS Contracts Limited

virtus-contracts.co.uk

57

Virtus Contracts Limited is a well-established commercial construction company based in London, founded in 2000. The company specializes in delivering design, planning, and full project management services, targeting commercial clients seeking office fitouts and architectural design solutions. Their market position is that of a leading service provider within the London commercial construction sector, supported by a professional and consistent brand presence online. The website reflects a mature digital infrastructure built on WordPress, utilizing modern plugins and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a moderate level of digital maturity and marketing sophistication. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA for spam protection, though there is room for improvement in implementing explicit security headers and publishing formal security policies. Privacy compliance is addressed through a comprehensive cookie consent mechanism, but the absence of a clear privacy policy and terms of service reduces compliance completeness. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with minor gaps in explicit contact information and security documentation.

K

Kerford Investments (UK) Limited

kerford.co.uk

46

Kerford Investments (UK) Limited operates as an FCA-regulated online financial brokerage specializing in Forex, CFDs, and precious metals trading. The company offers advanced trading platforms including desktop and mobile applications, targeting retail and institutional traders seeking secure and fast execution in global capital markets. Their business model includes partnership programs such as Introducing Brokers and White Label solutions, enhancing their market reach. Technically, the website employs a modern tech stack with Bootstrap, jQuery, and client-side form validation, providing a responsive and user-friendly experience. While performance and mobile optimization are good, the site lacks some advanced SEO and accessibility features. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and client-side validation but lacks important security headers like Content-Security-Policy and HSTS. No explicit incident response or vulnerability disclosure policies are present. The absence of cookie consent mechanisms and incomplete WHOIS data reduce overall trust. However, the presence of FCA regulation and comprehensive legal documentation are strong trust signals. Overall, the website is professional and functional with moderate security posture and privacy compliance. The missing WHOIS data and security headers are notable concerns. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

D

Duplex CSA Ltd

duplexcsa.com

66

Duplex CSA Ltd is a UK-based company specializing in the supply of RF connectors, interconnect solutions, shielding products, cable assemblies, and fibre optic products. With over 25 years of industry experience, the company serves a global market primarily in telecommunications, electronics, cable/satellite, and wireless systems sectors. Their business model focuses on B2B supply and custom manufacturing services including component design, tool design, and prototyping. The website reflects a professional and established market position with clear product and service offerings. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google reCAPTCHA, and Typekit fonts. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant, but lack explicit consent mechanisms. The security posture is solid but could be improved by adding security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern for domain legitimacy and registration transparency, though the professional website and business information mitigate some risk. Overall, Duplex CSA Ltd presents a credible and professional online presence with room for improvement in security and privacy compliance. Strategic recommendations include enhancing security headers, implementing cookie consent, and verifying domain registration details to strengthen trust and compliance.

S

SEA Ltd

sea-ltd.co.uk

49

SEA Ltd is a small, established marketing and design agency based in Kent, UK, with over 30 years of experience delivering effective internal and external communications. Their business model centers on workshops, consultancy, and a broad range of creative services including branding, video production, SEO, and print. The company targets diverse sectors such as manufacturing, education, retail, and health, positioning itself as a practical, client-focused agency with a strong regional presence. Technically, the website is built on WordPress, leveraging popular plugins like Yoast SEO, Contact Form 7, and GDPR compliance tools. The site demonstrates good mobile optimization, solid SEO practices, and moderate performance. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though explicit security headers and incident response policies are absent. The security posture is generally good but could be improved by adding security headers, publishing security policies, and implementing vulnerability disclosure mechanisms. The WHOIS data is unavailable due to domain naming rules errors, which limits domain trust analysis but the website content and professional presentation support legitimacy. Overall, SEA Ltd presents a professional and trustworthy online presence with room for technical and security enhancements to further strengthen compliance and trust.

V

voestalpine AG

voestalpine.com

66

voestalpine AG is a globally leading steel and technology group headquartered in Austria, operating over 500 companies worldwide with a strong presence in manufacturing sectors such as automotive, aerospace, energy, and railway systems. The company reported significant revenue and EBITDA figures for the fiscal year 2025/26, reflecting its enterprise scale and market leadership. The website presents comprehensive corporate, investor, and job-related information, targeting industrial clients, investors, suppliers, and potential employees. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and consistent branding support legitimacy. Overall, the website is well-designed, accessible, and trustworthy, with room for improvement in security transparency and WHOIS data availability.

I

initOS GmbH

initos.com

67

initOS GmbH is a German technology company specializing in digital transformation services using open-source technologies, particularly focusing on the Odoo ERP system. They provide tailored IT strategy consulting, IT conception, IT operations, and custom software development primarily targeting small and medium-sized enterprises (KMU). The company operates from Hamburg and Magdeburg and has established a reputation for expertise in open-source ERP solutions with recognition in research and industry circles. Technically, the website is built on WordPress with Elementor, employing modern web technologies and SEO best practices. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is missing, which slightly impacts trust but the professional presentation and business information support legitimacy. Overall, the site reflects a mature digital presence aligned with the company's business focus.

F

Fuels Industry UK

ukpia.com

69

Fuels Industry UK is a UK-based trade association representing companies involved in refining, renewable fuel production, terminal operations, and filling stations. The organization plays a key role in the UK fuel supply chain and is actively engaged in supporting the transition to a Net-Zero economy through member projects and policy advocacy. The website reflects a medium-sized, professional association with a clear focus on industry stakeholders and government regulators. Technically, the website employs modern web technologies including JavaScript libraries, analytics tools, and responsive design, hosted under a reputable registrar with AWS DNS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers could enhance protection. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is trustworthy, professional, and well-maintained, supporting the organization's credibility and market position.

江苏新苏投资发展集团 is a large Chinese manufacturing group with a history dating back to 1965. The company operates multiple subsidiaries specializing in mechanical processing, hydraulic components, sheet metal stamping, civilian firearms, ATM safes, and automotive parts. The website presents a professional image with detailed company history, product information, and contact details, targeting industrial clients and partners. Technically, the website uses standard web technologies such as jQuery and Swiper.js, with moderate performance and good mobile optimization. However, there is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating gaps in security and compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and content-rich but requires improvements in security posture and compliance to enhance trust and protect user data.

Changzhou E-Sound Electronics Co.,Ltd is a medium-sized manufacturing company specializing in electro-acoustic products such as speakers, buzzers, microphones, and receivers. Founded in 1989 and re-established in 1994 with Taiwanese partnership, the company targets business customers in medical equipment, automotive electronics, security, and consumer electronics sectors. The website presents a professional but basic digital presence with product catalogs and company information. Technically, the site uses common JavaScript libraries and Google Analytics but lacks advanced security headers and comprehensive privacy policies. The security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Overall, the domain WHOIS data is missing, raising concerns about domain registration legitimacy despite the active website. Strategic improvements in security, privacy compliance, and domain registration transparency are recommended.

T

Textilien Online Kaufen

piktus.ch

46

Piktus, operating under the brand 'Textilien Online Kaufen', is a Swiss-based small business specializing in premium embroidery services for companies, clubs, and private customers. Their offerings include customized embroidery on various textiles such as workwear, teamwear, and personal gifts. The website presents a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress using Elementor and SEO plugins, with HTTPS enabled and moderate performance. However, some technical and security aspects such as security headers and privacy policies are missing or incomplete. The Google Analytics plugin is present but not configured, indicating partial analytics implementation. Overall, the security posture is moderate with room for improvement in compliance and vulnerability disclosure.

A

Audio Vision Multimédia

audiovision-info.ch

47

Audio Vision Multimédia is a specialized audiovisual retail and integration company based in Moudon, Switzerland, with over 25 years of experience serving the French-speaking Swiss market. The company offers a wide range of services including TV sales, home cinema, Hi-Fi equipment, multiroom audio, audiovisual integration, domotics, and dynamic display solutions for both private individuals and enterprises. Their market position is that of a trusted local specialist with a physical showroom and an online shop powered by WooCommerce. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Google Tag Manager, Facebook Pixel, and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit cookie consent mechanisms and published security policies. Overall, the website is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security transparency are recommended.

F

Fussenegger Holzbau GmbH

fussenegger-holzbau.at

47

Fussenegger Holzbau GmbH is a well-established Austrian company specializing in ecological timber construction, offering a comprehensive range of services including wood construction, window and door manufacturing, and general contracting. With a history dating back to 1840 and expansion into the Swiss market, the company serves architects, planners, private homeowners, and public sector clients. The website reflects a professional digital presence built on WordPress with modern technologies and good SEO practices. Security posture is adequate with HTTPS and privacy compliance, though improvements in security headers and incident response documentation are recommended. Overall, the website is trustworthy and well-aligned with the company's business profile.

F

F. SACCHETTI Sàrl

sacchettimetal.ch

45

F. SACCHETTI Sàrl is a small family-owned business specializing in metal construction services in Switzerland, operating since 1988. The company offers key services including balustrades, stairs, covered areas, doors, and gates, and also acts as a training provider for apprentices, ensuring skilled labor for the future. The website reflects a consistent brand image and provides clear contact information, targeting clients seeking quality metal construction solutions. Technically, the site is built on WordPress using the Avada theme, with standard web technologies such as jQuery and FontAwesome. The site is moderately optimized for mobile and SEO, with room for improvement in accessibility and performance. Security posture is basic with HTTPS enabled but lacks security headers and formal security policies. A minor PHP warning is present, indicating a configuration issue. Privacy compliance is limited, with no privacy policy or terms of service found, though a cookie consent banner is implemented. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

T

Tecti AG

tecti.ch

54

Tecti AG is an established Swiss real estate company specializing in residential property services including renting, buying, selling, property valuation, and property exchange. Founded in 1996 and based in Teufen, Switzerland, it has a strong regional presence with over 25 years of experience and approximately 2000 completed housing units. The company positions itself as an independent and reliable partner in the real estate market of Eastern Switzerland, targeting customers seeking comprehensive real estate services. Technically, the website uses modern web technologies such as jQuery and integrates analytics and marketing tools like Google Analytics and Facebook Pixel, with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and IP anonymization in analytics, though some security headers and explicit security policies are absent. Overall, the website is professional, well-branded, and trustworthy, with clear contact information and good user experience.

C

Caiman Indústria e Comércio de Malhas Ltda.

caimantextil.com.br

53

Caiman Têxtil is a well-established textile manufacturing company based in northern Santa Catarina, Brazil, with over 30 years of experience. The company specializes in producing knit fabrics for both fashion and professional uniform markets, alongside offering textile finishing services. Their website reflects a professional B2B business model targeting manufacturers and businesses in the textile and uniform sectors. The company maintains a consistent brand presence and provides clear contact channels and legal policies, supporting trustworthiness and business credibility. Technically, the website is built on OctoberCMS and leverages modern web technologies such as jQuery, Google Analytics, and Owl Carousel. Hosting is managed via Microsoft Online services, indicating a reliable infrastructure. The site is mobile-optimized with good navigation and basic accessibility features. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing domain age consistent with the company's history and no privacy protection, which supports transparency. Overall, the website presents a solid digital presence with good business credibility and moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

Nippak Tour is a specialized travel agency based in Foz do Iguaçu, Brazil, with over 35 years of experience serving Japanese tourists. The company offers Japanese language guided tours, inbound attendant services, and comprehensive travel planning focused on Iguassu Falls and surrounding attractions. Their market position is that of a trusted niche provider catering to Japanese-speaking visitors, emphasizing safety and customer satisfaction. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, SEO and accessibility features are basic. Security posture is moderate; HTTPS is used but no explicit security headers or vulnerability disclosures are present. Privacy and cookie policies are absent, indicating compliance gaps. Contact information and social media presence are clear, supporting business credibility. Overall, the site is safe and professional but would benefit from enhanced security and privacy compliance measures.

G

GRUPO ATHENAS

athenasgestao.com

43

GRUPO ATHENAS is a Brazilian company specializing in occupational health and safety services, offering a comprehensive portfolio including toxicological exams, labor expertise, safety training, occupational medical exams, mandatory reports, and eSocial compliance. The company targets businesses requiring compliance with Brazilian occupational health and safety legislation and has a solid market presence with over 20 years of experience and thousands of satisfied clients. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Font Awesome, Google reCAPTCHA, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is secured with HTTPS and includes anti-bot measures on forms, though it lacks some advanced security headers and explicit incident response documentation. Privacy and cookie policies are present but basic, indicating room for improvement in compliance maturity. From a security perspective, the site demonstrates good practices like HTTPS enforcement and form protection but would benefit from enhanced security headers and published security policies. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and operational transparency of the business. Overall, GRUPO ATHENAS presents a credible and professional online presence with moderate technical sophistication and a solid security baseline. Strategic improvements in security policy transparency and WHOIS data clarity would further enhance trust and compliance posture.

abpabahia is a small Brazilian media content publisher specializing in lifestyle, education, and automotive topics. The website is built on WordPress using the Elementor page builder and Pixwell theme, indicating a modern and maintainable technical infrastructure. The site is well-structured with good SEO metadata and structured data, supporting discoverability and user engagement. However, the site lacks formal privacy, cookie, and terms of service policies, which are critical for compliance with data protection regulations such as GDPR. Contact information is minimal, limited to a phone number in the footer, with no email or dedicated contact forms for business or security inquiries. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the site is accessible, safe for general audiences, and professionally designed, but it should enhance compliance and security transparency to improve trust and legal standing.

C

Corpo Ideal

corpoidealsuplementos.com.br

57

Corpo Ideal is a Brazilian e-commerce retailer specializing in dietary supplements and wellness products. The website is currently under renovation and protected by a password page, indicating ongoing updates or improvements. The business operates on the Nuvemshop platform, a popular e-commerce solution in Brazil, and leverages Cloudflare for DNS and CDN services. The site integrates Google Analytics 4 and Google Tag Manager for marketing and analytics purposes, alongside Google Ads for advertising campaigns. Security measures include HTTPS enforcement and Google reCAPTCHA to protect forms from automated abuse. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust.

H

Haiala

haiala.com.br

52

Haiala is a Brazilian manufacturing company specializing in doors and windows made from aluminum and steel. Established in 1978, it has grown into a recognized leader in the national market, offering certified quality products with innovative design. The company targets construction professionals, resellers, and end consumers across Brazil, leveraging a coordinated distribution system and a comprehensive product portfolio. The website reflects a mature digital presence built on WordPress and WooCommerce, featuring modern design elements and responsive layouts. Security posture is solid with HTTPS enforced, though improvements are needed in security headers and privacy compliance. Contact information is transparent and consistent with WHOIS data, supporting the company's legitimacy.