Security Directory

P

Premier Patterns & Castings Ltd

premierpatterns.com

43

Premier Patterns & Castings Ltd is a UK-based small manufacturing company specializing in high-quality pattern making, mould making, and metal casting services. With over 30 years of experience, they serve diverse industries including automotive, aerospace, marine, and entertainment. Their website presents a professional image with detailed service offerings and clear contact information, targeting B2B clients in manufacturing sectors. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, providing a good user experience with mobile optimization and clear navigation. However, the website lacks privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. The absence of WHOIS data for the domain is a significant anomaly that reduces domain trustworthiness, although the website content and contact details appear legitimate. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

H

Hydraquip

hydraquip.co.uk

50

Hydraquip is a well-established UK-based company specializing in hydraulic hose repair and fluid power products, offering a comprehensive range of services including 24/7 national on-site hose repair, engineering services, and trade counter sales. The company operates with a medium-sized workforce and a network of trade counters, positioning itself as a key player in the energy and manufacturing sectors. The website reflects a professional business model targeting industrial and commercial clients requiring hydraulic solutions. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tools such as WPBakery, Slider Revolution, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic improvements in privacy compliance and security headers would enhance the site's trust and compliance standing.

C

Caiman Indústria e Comércio de Malhas Ltda.

caimantextil.com.br

53

Caiman Têxtil is a well-established textile manufacturing company based in northern Santa Catarina, Brazil, with over 30 years of experience. The company specializes in producing knit fabrics for both fashion and professional uniform markets, alongside offering textile finishing services. Their website reflects a professional B2B business model targeting manufacturers and businesses in the textile and uniform sectors. The company maintains a consistent brand presence and provides clear contact channels and legal policies, supporting trustworthiness and business credibility. Technically, the website is built on OctoberCMS and leverages modern web technologies such as jQuery, Google Analytics, and Owl Carousel. Hosting is managed via Microsoft Online services, indicating a reliable infrastructure. The site is mobile-optimized with good navigation and basic accessibility features. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing domain age consistent with the company's history and no privacy protection, which supports transparency. Overall, the website presents a solid digital presence with good business credibility and moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

Nippak Tour is a specialized travel agency based in Foz do Iguaçu, Brazil, with over 35 years of experience serving Japanese tourists. The company offers Japanese language guided tours, inbound attendant services, and comprehensive travel planning focused on Iguassu Falls and surrounding attractions. Their market position is that of a trusted niche provider catering to Japanese-speaking visitors, emphasizing safety and customer satisfaction. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, SEO and accessibility features are basic. Security posture is moderate; HTTPS is used but no explicit security headers or vulnerability disclosures are present. Privacy and cookie policies are absent, indicating compliance gaps. Contact information and social media presence are clear, supporting business credibility. Overall, the site is safe and professional but would benefit from enhanced security and privacy compliance measures.

台

台灣幸榮股份有限公司

twkoei.com.tw

43

台灣幸榮股份有限公司是一家專注於包裝與物流服務的中型企業，擁有超過20年的行業經驗，主要服務機械製造商及電子製造商，提供客製化包裝、倉庫保管、裝櫃及國際物流等服務。網站內容專業且具備良好的品牌一致性，展現出穩健的市場地位。技術基礎採用Joomla CMS及多種前端庫，網站在移動端表現良好，但性能屬於中等水平。安全方面，網站啟用HTTPS，但缺乏安全標頭及隱私政策，存在合規風險。整體風險較低，但建議加強隱私合規與安全防護措施以提升信任度。

S

Sunder Biomedical Tech. Co., Ltd.

sunder.com.tw

46

Sunder Biomedical Tech. Co., Ltd. is a Taiwan-based medical device manufacturer founded in 1998, specializing in high-quality medical devices and custom-made solutions. The company emphasizes compliance with local and international standards such as GMP and ISO 13485, positioning itself as a reputable player in the healthcare manufacturing sector. The website reflects this professionalism with relevant content, certifications, and a clear business focus. Technically, the website is built on Joomla CMS and utilizes common web technologies including jQuery, Bootstrap, and various plugins for UI and sliders. The site is mobile-optimized and provides a good user experience, though performance is moderate. Tracking is implemented via Google Analytics and Tag Manager, but privacy and cookie policies are absent, indicating a gap in compliance. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response contacts suggests room for improvement in security posture. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is professional and trustworthy with solid business credibility but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

A

Aytaç Gıda Yatırım Sanayi ve Ticaret Anonim Şirketi

aytac.com.tr

66

Aytaç Gıda Yatırım Sanayi ve Ticaret Anonim Şirketi is a well-established Turkish food company specializing in meat and processed meat products. The company operates under the umbrella of Yıldız Holding, a major conglomerate, and offers a broad portfolio of retail and out-of-home consumption products. The website reflects a professional brand presence with comprehensive product listings, recipe content, and corporate information targeting consumers and business clients in Turkey. Technically, the website uses modern JavaScript libraries such as jQuery and Font Awesome, with cookie consent and CSRF protections implemented, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-CSRF tokens in place, although some security headers could be improved. Privacy compliance is robust, featuring detailed cookie and privacy policies in Turkish, aligned with GDPR requirements. Overall, the site is trustworthy, accessible, and professionally maintained, with no indications of blocking or malicious content.

C

Cookhouse Hire Limited

cookhousehire.co.uk

53

Cookhouse Hire Limited is a small UK-based company specializing in catering equipment hire and sales, serving outside caterers, restaurants, hotels, and private functions primarily in Norfolk and surrounding counties. Established in 2003, the company offers a broad range of kitchen equipment including ovens, fridges, BBQs, and decarboniser tanks, with a focus on clean, well-maintained equipment and reliable delivery service. The website reflects a professional and consistent brand presence with clear contact information and customer testimonials, supporting its market position as a trusted regional provider. Technically, the website is built on WordPress 7.0.4, utilizing common frameworks such as Foundation and jQuery 1.7.1, along with plugins like Download Monitor. While the site is functional and moderately optimized for performance and mobile use, some technical debt is evident, including outdated JavaScript libraries and lack of advanced SEO and accessibility features. The site uses HTTPS but lacks important security headers and cookie consent mechanisms, which impacts its privacy compliance stance. From a security perspective, the site has a basic security posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, outdated libraries, and missing incident response information indicate areas for improvement. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration transparency but does not directly undermine the legitimacy of the business based on website content. Overall, the website is safe, professional, and credible for its business purpose but would benefit from enhanced security practices, privacy compliance improvements, and technical modernization to strengthen trust and resilience against potential threats.

Construction Profiles Ltd is a UK-based specialist company focusing on roof and wall cladding solutions for the construction industry. The company emphasizes quality delivery and strong project planning, supported by good supplier relationships. The website is built on WordPress using popular plugins such as LayerSlider and Revolution Slider, indicating a moderate level of digital maturity. The site is professionally designed with good navigation and mobile responsiveness, targeting construction professionals and developers. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data due to domain naming rules violation introduces some trust concerns. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

Boundary Plant Sales is a UK-based company specializing in the sale, hire, and refurbishment of plant machinery including excavators, mini diggers, telehandlers, and heavy construction equipment. With over 50 years of industry experience, the company positions itself as a reputable and reliable provider serving businesses and individuals in need of quality used and new machinery. The website reflects a professional business with clear service offerings and a focus on customer engagement through contact forms and newsletter subscriptions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Osano for cookie consent, hosted likely by Sandhills Cloud East. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security policies, which could be improved. The WHOIS data for the domain is unavailable due to a registration error, which raises some concerns about domain legitimacy despite the professional website presence. Overall, the site scores well on content quality and privacy compliance but has room for improvement in security posture and domain registration transparency.

TVM Capital Healthcare appears to be a small healthcare investment firm with a website built on WordPress. The site uses common web technologies such as Bootstrap and FontAwesome and is hosted behind Cloudflare DNS services. The website content is minimal, lacking detailed business descriptions, contact information, or visible social media presence. A cookie consent banner is implemented, indicating some attention to privacy compliance, although the privacy policy is located on a staging subdomain and lacks clear GDPR compliance indicators. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. No forms or incident response contacts are visible, limiting transparency and user engagement. Overall, the site is accessible and safe but lacks depth in content and security best practices.

N

National Capital Planning Commission

ncpc.gov

73

The National Capital Planning Commission (NCPC) is a federal government agency responsible for planning and preserving the National Capital Region. The website serves as an official platform providing information about the agency's mission, planning initiatives, commission meetings, and public participation opportunities. It targets federal agencies, planners, residents, and visitors interested in the capital's development and preservation. The site is well-structured with clear navigation and professional design, reflecting its government status. Technically, the website employs modern web technologies including jQuery, Bootstrap, Font Awesome, and Google Analytics. It is mobile-optimized and accessible, with good SEO practices. The site uses HTTPS exclusively, ensuring secure communications. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site demonstrates a solid posture with secure forms and no exposed sensitive data. The lack of explicit incident response contacts and security.txt files are areas for enhancement. The WHOIS data is incomplete but the .gov domain strongly supports legitimacy. Overall, the site is trustworthy and professionally maintained. The risk assessment is low given the official nature and secure implementation, but improvements in privacy compliance and security headers would further strengthen the security posture. Strategic recommendations include adding security headers, implementing cookie consent, publishing incident response contacts, and maintaining vigilance on third-party scripts.

G

Gosling Ltd

tgosling.com

48

Gosling Ltd is a London-based luxury bespoke furniture design company renowned for its exquisite British craftsmanship and modern interior design. The company, led by Tim Gosling, offers bespoke furniture, restoration projects, and collaborations with other luxury brands, targeting affluent clients and interior designers. The website reflects a high level of professionalism and brand consistency, showcasing portfolios, collaborations, and news related to the luxury furniture industry. Technically, the site is built on WordPress with WooCommerce, leveraging modern frontend frameworks like Bootstrap 5 and Owl Carousel, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with good SEO practices. Security-wise, HTTPS is enforced, but the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, although the website's content and social media presence support its legitimacy. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

L

Liverpool Hope University

hope.ac.uk

74

Liverpool Hope University is a well-established higher education institution based in Liverpool, UK, offering a wide range of undergraduate, postgraduate, and research programs. The university targets both domestic and international students and provides comprehensive student support services including accommodation and career guidance. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site employs modern web technologies such as jQuery, Owl Carousel, and integrates multiple analytics and advertising platforms, managed with user consent via a robust cookie consent mechanism. Security posture is moderate with evidence of Cloudflare Bot Management and cookie consent controls, but lacks visible security headers and WHOIS transparency. Overall, the website is trustworthy and well-maintained, though domain registration details are unavailable, which slightly reduces registration trust confidence.

R

Rowlands Woodhouse

rowlandswoodhouse.co.uk

59

Rowlands Woodhouse is a UK-based family manufacturing business specializing in bulk storage and handling systems, including silos, conveyors, and turnkey process solutions. With over 35 years of industry experience, they serve sectors such as biomass, agriculture, milling, food, and recycling. Their website reflects a professional and consistent brand presence, offering detailed product and service information and clear contact channels. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is adequate with HTTPS and reCAPTCHA integration, though lacking advanced security headers. WHOIS data is unavailable due to a lookup error, but the domain appears legitimate based on website content and contact details. Overall, the site demonstrates a solid business presence with room for security enhancements.

S

Stan Robinson Ltd

stanrobinson.com

57

Stan Robinson Ltd is a well-established UK-based family-owned logistics and transport company founded in 1970. The company operates a dedicated independent pallet network and offers a wide range of services including transport, pallet distribution, warehousing, garage services, and IT solutions. With multiple depots across the UK and certifications such as ISO 9001, ISO 50001, ESOS compliance, and FORS Bronze accreditation, Stan Robinson positions itself as a trusted mid-sized player in the UK transportation sector. Technically, the website employs a custom CMS with modern front-end technologies including Bulma CSS, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, uses HTTPS with good SSL configuration, and integrates Google Analytics and Umami for analytics. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and use of Google reCAPTCHA. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business audience effectively. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and security posture further.

T

Trojan-Mek Limited

trojanmek.co.uk

60

Trojan-Mek Limited is a specialized industrial machinery moving and transport service provider based in South Wales, UK, with over 40 years of experience. The company offers a comprehensive range of services including heavy machinery installations, factory relocations, HIAB haulage and hire, and general haulage. Their market position is strong regionally with capabilities extending internationally, targeting industrial and commercial clients requiring professional machinery moving solutions. The website reflects a professional and customer-focused business model with clear service offerings and trust indicators such as accreditation and client testimonials. Technically, the website is built on WordPress using modern web technologies including jQuery, Owl Carousel, Google Analytics, and Google Maps API. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and a Content-Security-Policy header present, though additional security headers and visible cookie consent mechanisms could enhance compliance and protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable and flagged as invalid by Nominet UK due to domain naming rules, which raises concerns about domain registration legitimacy. Despite this, the website content and business information appear consistent and professional. This discrepancy suggests the domain may be registered under non-standard conditions or proxy services, warranting caution. Overall, the website is trustworthy and professionally maintained, but improvements in privacy compliance and security transparency are recommended. The domain registration irregularity should be investigated further to ensure full legitimacy and trustworthiness.

Z

Zoom Communications

zoomcom.tv

44

Zoom Communications is a well-established broadcast services company specializing in outside broadcast solutions, flypacks, OB trucks, system integration, and content creation primarily serving the South Asian and Southeast Asian markets. The company has a strong market position with deployments in over 21 countries and notable involvement in major sporting events such as the Indian Premier League and Commonwealth Games. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a modern frontend stack including Bootstrap 5 and Owl Carousel, with some legacy jQuery usage. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. No CMS or hosting provider details were detected. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and no forms collecting sensitive data, reducing immediate risk exposure. The absence of WHOIS data suggests privacy protection for domain registration, which is common for media companies but reduces transparency. The website lacks privacy and cookie policies, which is a compliance gap. Contact information is clearly provided, including a company email and phone number, and a verified YouTube channel link enhances trust. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and reduce risk.

S

Sprint Enterprise Technology Ltd.

sprintenterprise.co.uk

57

Sprint Enterprise Technology Ltd. is a UK-based technology company specializing in data integration and client reporting solutions for the financial services sector, particularly wealth management. Their flagship products, Finio and Fastrak, facilitate the secure and efficient flow of investment data between platforms, discretionary fund managers, software providers, and advisory firms. The company is well-positioned in the UK market, trusted by numerous respected financial firms, and recognized in industry awards such as the Wealthtech 100. The website content is professional, comprehensive, and clearly targeted at B2B financial services clients. Technically, the website employs modern web technologies including jQuery, Google Fonts, Cookiebot for consent management, and carousel libraries for enhanced user experience. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, but lacks visible advanced security headers and publicly available security policies or incident response information. The WHOIS data for the domain is unavailable due to a domain naming rules error, which limits direct verification of domain registration details. However, the website's professional presentation, clear contact information, and trust signals mitigate concerns about legitimacy. Overall, the site demonstrates a mature digital presence with strong privacy compliance and business credibility. Strategically, Sprint Enterprise Technology should enhance its security posture by implementing recommended HTTP security headers, publishing security policies, and establishing a vulnerability disclosure program to further build trust and compliance. Continued focus on technical modernization and accessibility will support sustained growth and client satisfaction.

V

Vallely Tankers

vallelytankers.com

56

Vallely Tankers is a specialist tanker manufacturer with over 38 years of experience in designing, building, and maintaining tankers primarily for the waste and environmental management industries. The company positions itself as a trusted provider of high-quality, bespoke tanker solutions with a focus on durability and safety. Their services include new tanker manufacturing, maintenance, refurbishment, and commercial painting. The website reflects a professional business with clear contact information and a consistent brand presence. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and jQuery, with SEO optimization via Yoast SEO and user interaction enhanced by Owl Carousel and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a concern for domain legitimacy, though the website content and contact details suggest a legitimate business. Overall, the website is professional and trustworthy in appearance but would benefit from enhanced transparency regarding domain registration and improved security headers and policies to strengthen its security posture and trustworthiness.

Ten Green Bottles is a small hospitality and retail business located in Brighton, UK, specializing in wine sales, tastings, and a bar experience featuring artisan and biodynamic wines alongside snacks and small plates. The company targets wine enthusiasts and local customers seeking quality and unique wine experiences. Their website is professionally designed, mobile-optimized, and integrates modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. Payment processing for gift vouchers is handled via Square, indicating a partnership with a reputable payment provider. However, the absence of WHOIS registration data raises concerns about domain legitimacy or privacy protection usage. The website lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and policies reduce overall security maturity. Contact information is clearly presented, supporting customer engagement. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

E

Essex Motor Factors

essexmotorfactors.com

47

Essex Motor Factors is a well-established family business operating since 1991, specializing in the wholesale distribution of automotive parts and accessories primarily serving garages and independent vehicle repairers in the Essex area. The company maintains a strong local presence with multiple branches and a fleet of delivery vehicles, emphasizing customer service, technical support, and a broad inventory of over 80,000 parts from leading brands. Their website reflects a professional and consistent brand image with clear contact information and service offerings. Technically, the website employs a modern but somewhat dated technology stack including Bootstrap 3 and jQuery, with good mobile responsiveness and SEO practices. Security measures such as HTTPS and reCAPTCHA are implemented, but the absence of visible security headers and missing WHOIS domain registration data present concerns. Privacy compliance is addressed with a cookie consent banner and a privacy policy, though GDPR compliance is not explicitly confirmed. Overall, the site is functional and trustworthy from a user perspective but would benefit from enhanced security practices and domain registration transparency.

J

JABLAY123

captivatingcuba.com

48

JABLAY123 is an online gaming platform primarily targeting Indonesian-speaking users, offering access to various online games with potential real money benefits. The platform includes user registration, login via Google Identity Services, and a marketplace integrated with seoclerk.com. The website presents a professional design with good navigation and mobile optimization, supporting community engagement and service selling. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and trustworthiness. The platform relies on external privacy and terms of service hosted on seoclerk.com, with no direct company contact emails or phone numbers found, limiting transparency. Security measures include HTTPS and CAPTCHA protections, but lack advanced security headers and explicit security policies.

W

World CSR Day

worldcsrday.com

45

World CSR Day is a specialized organization dedicated to promoting Corporate Social Responsibility (CSR) through global events, awards, and leadership congresses. Founded by Dr. R. L. Bhatia, the platform serves CSR professionals, NGOs, corporate leaders, and sustainability advocates by providing recognition, networking, and educational resources. The website reflects a niche market position with international partnerships and a focus on sustainability leadership. Technically, the site is built on WordPress with common plugins and uses Google Analytics for tracking. While the site is accessible and well-structured with good content quality, it lacks critical privacy and security policies, and no advanced security headers are detected. The domain registration is consistent with the business history, supporting legitimacy. Overall, the site demonstrates moderate digital maturity but requires improvements in privacy compliance and security posture to enhance trust and compliance.

旭

旭東環保科技股份有限公司

srise.com.tw

60

旭東環保科技股份有限公司 is a Taiwanese manufacturer specializing in high-density polyethylene (HDPE) products, including pipes, floating solar panel platforms, and fish cage aquaculture systems. Established in 1995, the company has developed a strong market position domestically and internationally, exporting to over 76 countries. Their website reflects a professional industrial business with clear product offerings and case studies demonstrating their expertise in energy and aquaculture sectors. The site supports multiple languages, enhancing accessibility for international clients. Technically, the website employs a modern frontend stack including Bootstrap 4.5, jQuery, Owl Carousel, and FontAwesome, with Google Fonts for typography. Cookie consent is managed via tarteaucitron.js, indicating attention to privacy compliance. The site is mobile-optimized and SEO-friendly, though it lacks a common CMS and some advanced accessibility features. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie consent but no GDPR-specific statements. Business credibility is high with clear contact information, structured data, and trust signals such as Google site verification. Overall, the website is a trustworthy and professional representation of a medium-sized manufacturing company in the energy and environmental technology sectors. Strategic improvements in security headers, incident response transparency, and privacy policy detail would enhance their security and compliance posture.

L

Local Vending

localvending.co.uk

46

Local Vending is a UK-based vending machine and supplies provider serving Nottingham, Derby, Nottinghamshire, Derbyshire, and the East Midlands. The company emphasizes flexible, no contract vending solutions, offering a wide range of vending machines including hot drinks, snacks, combination machines, water coolers, and coffee brewers. The website highlights over 30 years of business experience and focuses on customer service and local delivery. Technically, the website uses modern front-end frameworks such as Bootstrap and integrates Google services for maps and analytics. The site is mobile-optimized with a professional design and clear navigation. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit privacy policies. WHOIS data for the domain is unavailable due to a domain naming rules violation error, which raises concerns about domain legitimacy or registration status. Overall, the website is functional and professional but would benefit from improved transparency in privacy and security policies.

M

Modum svømmeklubb

modumsk.no

42

Modum svømmeklubb is a local Norwegian swimming club focused on providing swimming training and community activities for children and youth. The website is built on WordPress using Elementor and includes information about club events, membership, and partner organizations. The technical infrastructure is modern with HTTPS enabled and uses common web libraries and plugins. Security posture is generally good but lacks visible security headers and formal privacy and cookie policies. WHOIS data is unavailable from the Norid lookup, indicating privacy protection or lack of public registrant data, which is common for small community organizations. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

B

Byggefirma Nilsen & Andersen AS

nilsenogandersen.no

53

Byggefirma Nilsen & Andersen AS is a small, established construction and real estate company based in Bergen, Norway, with over 40 years of experience. The company offers a range of services including carpentry, new builds, rehabilitation, property sales, rental of commercial premises, and architectural services. Their affiliation with Mesterhus adds credibility and quality assurance to their offerings. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. Contact information is prominently displayed, including a contact form secured with Google reCAPTCHA v2. However, the site lacks privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is basic but adequate with HTTPS enforced, though additional security headers and incident response information are absent. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy compliance and security best practices.

B

Blue Suisse Limited

bluesuisse.com

63

Blue Suisse Limited is a Malta-based regulated online brokerage specializing in Forex and CFD trading. The company offers a transparent trading model with access to over 130 financial instruments including currencies, stocks, indices, and commodities. Their key services include MetaTrader 4 and 5 platforms, mobile trading apps, and account management solutions. The website is professionally designed, mobile-optimized, and provides comprehensive legal disclosures and risk warnings. Technically, the site uses modern frameworks like Bootstrap and integrates analytics and tracking tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced, but could be improved by adding security headers and a vulnerability disclosure policy. The absence of WHOIS data is a notable concern for domain transparency, though regulatory licensing and detailed contact information partially mitigate trust issues.

O

OptiCom

opticom.lv

56

OptiCom is a well-established Latvian IT integrator and solution provider founded in 1994, specializing in IT infrastructure, cybersecurity, and professional training services. The company holds ISO 27001:2022 and ISO 9001:2015 certifications, underscoring its commitment to quality and information security. OptiCom serves Latvian businesses seeking advanced IT and cybersecurity solutions, positioning itself as a leading player in the local market with a professional team and comprehensive service offerings including SOC, penetration testing, and infrastructure maintenance. Technically, the website is built on Joomla CMS with modern front-end technologies such as Bootstrap, jQuery, and FontAwesome. It features responsive design and good SEO practices, with moderate performance and basic accessibility. The site includes a cookie consent mechanism and integrates Google Analytics for user tracking, maintaining good privacy compliance. From a security perspective, OptiCom demonstrates strong posture with HTTPS enforcement, ISO certifications, secure forms, and no visible vulnerabilities or exposed sensitive data. However, some security headers could be explicitly implemented or improved. The absence of a public vulnerability disclosure or incident response contact is noted as an area for enhancement. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance with relevant standards. The domain registration details align well with the company's history and claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen the security and compliance posture.

JSC “TOKSA” is a Lithuanian company specializing in the trade of high-quality infection control products, medical equipment, and disposable medical supplies. The company targets healthcare providers and hospitals, aiming to be a market leader in infection prevention products within Lithuania. Their business model focuses on B2B distribution with value-added services such as product presentations and consultations. The website content is professionally presented, emphasizing trust, quality, and customer satisfaction. Technically, the site uses common frontend libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. However, no CMS or hosting details are evident, and SEO and accessibility features are basic. Security posture is limited due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. WHOIS data could not be retrieved, raising concerns about domain registration legitimacy. Overall, the site is functional and informative but requires improvements in security and compliance to enhance trust and protect user data.

I

Ideal Cars (Northants) Ltd

idealcars.co.uk

60

Ideal Cars (Northants) Ltd operates as a local used car dealership based in Little Brington, Northamptonshire, specializing in quality used, new, and nearly new vehicles. The company emphasizes customer service, competitive pricing, and vehicle sourcing, targeting buyers in the Northamptonshire region. Their website reflects a professional retail business model with clear contact information and social media presence, supporting their market position as a trusted local dealer with over 30 years of experience. Technically, the website is built on a custom CMS platform (Car Dealer 5) and utilizes common JavaScript libraries such as jQuery, Select2, and Owl Carousel to enhance user experience. The site is mobile optimized with good SEO practices and includes interactive elements like a search form and visitor chat. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent and GDPR contact preference mechanisms, indicating awareness of privacy compliance. However, the absence of explicit security headers and detailed security or incident response policies suggests opportunities to strengthen the security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for the business, though the lack of WHOIS domain registration data due to domain naming rules error limits full verification of domain legitimacy. Strategic improvements in security headers, formal policies, and WHOIS transparency would enhance trust and compliance.

Gen20 Ltd is a specialized retailer and service provider focused on aftermarket accessories and conversion kits for Range Rover and other 4x4 vehicles. Established since 2008, the company offers a range of products including alloy wheels, side steps, lighting upgrades, and bodywork repairs, positioning itself as a leading expert in facelift conversions for Land Rover models. The website reflects a professional business with clear contact information, social media presence, and product offerings targeted at Land Rover enthusiasts and owners. Technically, the website uses a moderately modern tech stack including jQuery, Owl Carousel, and Google Analytics, but relies on an outdated jQuery version that poses security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider information is evident. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain legitimacy or configuration. No incident response or security policy information is provided. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration legitimacy to enhance trust and reduce risk.

U

UAB Indema

indema.lt

42

UAB Indema is a Lithuanian construction and real estate development company with over 12 years of experience. The company focuses on construction project management, general contracting, engineering solutions, and real estate development, serving both local and international clients. Their website is professionally designed using WordPress and Elementor, featuring clear navigation, responsive design, and SEO optimization. The site includes GDPR-compliant cookie consent mechanisms and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and basic security best practices, though there is room for improvement in security policy transparency and HTTP headers. WHOIS data shows some inconsistencies, notably a domain creation date in the future, which may be a data error but slightly impacts trust. Overall, the website is safe, professional, and trustworthy, with clear contact information and business legitimacy.

U

UAB „Marijampolės nekilnojamojo turto agentūra“

mnta.lt

39

UAB „Marijampolės nekilnojamojo turto agentūra“ operates a professional website offering comprehensive valuation services for real estate, movable assets, and businesses primarily in Lithuania. The company is positioned as an established local player with certifications recognized by Lithuanian regulatory bodies and acceptance by major banks. The website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The WHOIS data presents inconsistencies, notably a domain creation date in the future, which requires verification. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations.

S

Staticus

staticus.lt

53

Staticus is a well-established full-service façade engineering company operating primarily in Northern Europe, with over 20 years of experience. The company offers comprehensive façade solutions including design, production, installation, and maintenance, positioning itself as one of the largest façade contractors in Europe. Their business model focuses on delivering sustainable and benchmark-setting projects to clients in the construction and real estate sectors. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and MailerLite. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in DNS security and explicit incident response disclosures. Overall, the site is trustworthy, compliant with GDPR, and demonstrates a strong business credibility.

K

Kunstschule Liechtenstein

kunstschule.li

59

Kunstschule Liechtenstein is a regional educational institution specializing in art and design courses, targeting children, youth, and adults interested in creative development. The website presents a professional and well-structured platform offering detailed information about courses, events, and the preparatory art course (Vorkurs). The business model focuses on education and community engagement within the Liechtenstein region. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a local provider (li-life.li). The CMS appears custom-built, supporting modular content delivery. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and suitable for its educational purpose. Strategic improvements in privacy compliance and security headers would further strengthen its posture.

T

Trials UK Ltd

trialsuk.co.uk

50

Trials UK Ltd operates a specialized e-commerce website focused on motorcycle trials products including bikes, clothing, parts, and accessories. The company targets motorcycle trials enthusiasts in the UK and internationally, offering a wide range of products and educational video content. The website is well-structured with detailed product listings and a clear contact phone number, supporting a professional retail experience. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, and is built on the OpenCart CMS platform. Security posture is good with HTTPS and GDPR cookie consent implemented, though privacy policy and terms of service pages are missing. WHOIS data for the domain 'www.trialsuk.co.uk' is unavailable due to a naming rule violation, but the site is accessible, indicating the actual domain is likely 'trialsuk.co.uk'. This discrepancy slightly reduces trust but does not indicate malicious activity.

W

White Rose Real Estates Limited

whiteroseproperty.co.uk

44

White Rose Real Estates Limited operates as a specialized property agency and consultancy focusing on industrial and commercial real estate in the Midlands region of the United Kingdom. The company offers services including property letting, sales, valuation, and surveying, targeting businesses and investors seeking commercial properties. The website reflects a professional and ethical business approach, regulated by RICS, and provides clear contact channels and service descriptions. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Analytics and reCAPTCHA for user interaction and spam prevention. However, the use of an outdated jQuery version and lack of explicit security headers indicate areas for improvement in security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is well-structured and trustworthy, though WHOIS data is incomplete due to domain registration anomalies.

A

Ashtonleigh Nursing Home

ashtonleigh.co.uk

47

Ashtonleigh Nursing Home is a well-established residential care facility located in Horsham, West Sussex, specializing in elderly nursing care including dementia and palliative care. Founded in 1997, it operates as a medium-sized care home with 54 beds and a strong reputation supported by numerous positive reviews and a Good rating from the Care Quality Commission (CQC). The website presents a professional and user-friendly interface, providing comprehensive information about services, facilities, and activities tailored to elderly residents. The business targets families and elderly individuals seeking compassionate and personalized care in the region. Technically, the website employs modern front-end technologies such as Bootstrap 5, jQuery, and Google Tag Manager, ensuring good mobile responsiveness and user experience. However, some security best practices like HTTP security headers and explicit security policies are not evident. Privacy compliance is basic but includes a cookie consent banner and a privacy policy page. The WHOIS data is unavailable due to domain naming rules errors, limiting domain registration trust analysis, but external trust signals and business content support legitimacy. Overall, Ashtonleigh Nursing Home demonstrates a solid market position with room for improvement in security posture and privacy transparency.

B

Bridgecon Systems Private Limited

bridgeconindia.com

36

Bridgecon Systems Private Limited is an Indian company specializing in the design and construction of bridges, flyovers, metro rail elevated corridors, and other elevated structures. Founded by Mr. R.K. Gupta, a civil engineer with over four decades of experience, the company offers specialized consultancy services and supplies construction equipment for bridge construction using advanced methods such as Pre-Cast Segmental and Cantilever Construction. The company targets infrastructure developers, government agencies, and construction firms, positioning itself as a niche player in the Indian transportation infrastructure sector. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, Revolution Slider, and Google Maps API. The site is mobile responsive with good design quality and clear navigation, though accessibility and SEO optimizations are basic. There is no evidence of a CMS or hosting provider from the data provided. Performance is moderate, with no major errors or broken elements detected. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, while the business content and website design are professional and relevant, the absence of WHOIS data, security policies, and contact information reduces trust and compliance posture. Strategic improvements in security, privacy compliance, and domain registration transparency are recommended to enhance credibility and reduce risk.

R

Regina Miracle International (Holdings) Limited

reginamiracleholdings.com

45

Regina Miracle International (Holdings) Limited is a well-established Hong Kong-based manufacturer specializing in intimate wear and related product categories, operating under a unique Innovative Design Manufacturing (IDM) business model. The company is publicly listed and positions itself as a global leader with a strong focus on innovation, design, and manufacturing excellence. Their website reflects a professional corporate presence with detailed investor relations and sustainability information. Technically, the site is built on WordPress with a modern tech stack including jQuery, various carousel libraries, and Google reCAPTCHA for form security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and trustworthy, supporting the company's market position and business model.

N

National Grain and Feed Association

ngfa.org

56

The National Grain and Feed Association (NGFA) is a well-established industry association representing approximately 700 companies across the U.S. grain and feed sectors. Founded in 1896, NGFA provides advocacy, education, arbitration, and networking services to its members, positioning itself as a key voice in agricultural transportation and trade. The website reflects a mature digital presence with comprehensive content tailored to industry professionals and stakeholders. Technically, the site is built on WordPress with modern plugins and tools, offering good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a notable transparency gap, slightly reducing trustworthiness. Overall, NGFA's website is professional, trustworthy, and serves its business purpose effectively.

W

West London Film Studios

westlondonfilmstudios.com

56

West London Film Studios is a professional media production company operating two purpose-built film studio sites in West London. They provide soundproof stages, production offices, and specialized filming facilities including the UK's only permanent hospital film set. The company enjoys a strong market position supported by high-profile production credits, industry awards, and media recognition. Technically, the website employs modern frameworks such as Bootstrap, jQuery, and Font Awesome, with embedded Vimeo videos and animation libraries, delivering a visually appealing and responsive user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, indicating room for improvement in compliance and protection. Overall, the business is credible and trustworthy, though the absence of WHOIS data reduces transparency. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and establishing incident response protocols to strengthen trust and compliance.

B

British Hardwood Tree Nursery Ltd. Trading as Trees & Hedging

treesandhedging.co.uk

52

Trees & Hedging is a UK-based e-commerce business specializing in the sale of bare root and cell grown trees, hedging, shrubs, and planting accessories. Established since 1989, the company targets gardeners, landscapers, farmers, and woodland planners with a wide product range and competitive pricing. The website provides helpful planting guides, customer testimonials, and supports wholesale enquiries, positioning itself as a trusted supplier in the horticultural retail sector. Technically, the site runs on Magento 1 with a variety of JavaScript libraries and extensions to enhance user experience, including sliders and autocomplete search. While the site is mobile optimized and has good SEO practices, the use of an outdated platform poses security risks. Security posture is strengthened by HTTPS and secure payment gateways, but lacks modern security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is inconsistent, showing a domain creation date in the future, which raises concerns about registration legitimacy. Overall, the site is professional and trustworthy in content and business presentation but requires technical and compliance improvements to enhance security and privacy posture.

C

Cam Lifts

camlifts.com

54

Cam Lifts is a small, family-owned business specializing in the installation and maintenance of stairlifts in Northern Ireland. With over 30 years of experience, the company has established itself as a trusted local provider and is an Elite partner of Handicare Stairlifts, a recognized brand in the industry. The website offers clear information about their services, including showroom visits and free quotations, targeting individuals and organizations requiring mobility solutions. Technically, the site is built on WordPress with common plugins for social media integration and cookie compliance, hosted under a reputable registrar. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of a privacy policy and terms of service pages. Overall, the website is professional and trustworthy but could improve compliance and security practices.

A

Angel Plastics

angelplastics.co.uk

54

Angel Plastics is a UK-based supplier specializing in plastic building materials such as guttering, fascias, soffits, cladding, and plumbing systems. The company targets construction professionals and DIY enthusiasts, operating primarily through an e-commerce platform. The website presents a professional and consistent brand image with a clear product catalog and social media presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring secure user authentication and a responsive design. Security posture is solid with HTTPS enforced and anti-bot measures on login, though additional security headers and public security policies are absent. The lack of WHOIS data due to domain registration issues limits domain trust verification, but the website content and contact information appear legitimate. Overall, the site is functional and secure with room for improvement in privacy compliance and transparency.

F

FPT Asia Co., Ltd.

fpt-asia.com

50

FPT Asia Co., Ltd. is a Thailand-based company specializing in professional and innovative food processing technology solutions. They provide comprehensive services including consultancy, turnkey design, technology center facilities, and after-sales support, positioning themselves as a market leader in Asia. Their business model focuses on B2B engagements with food manufacturers and industrial clients, emphasizing quality, sustainability, and Industry 4.0 automation. The website is well-structured, professionally designed, and provides clear contact information and social media presence. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Owl Carousel, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the business presence and content quality suggest legitimacy. Overall, the site scores well on content quality and business credibility but could improve security and privacy compliance.

A

Aven Training Partnership Ltd

aventraining.com

45

Aven Training Partnership Ltd is a UK-based company specializing in training and assessment services for construction workers and professionals. Their offerings include NVQ training, CSCS site labourer cards, health and safety courses, first aid training, and consultancy services. The company targets construction industry workers in the UK, positioning itself as a niche provider with recognized certifications and partnerships. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization. It uses common plugins and tracking tools such as Google Analytics and Yoast SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business information appear professional and trustworthy.

A

AK Travel & Money Transfer

aktravel.net

43

AK Travel & Money Transfer is a UK-based small travel agency specializing in long-haul flights, pilgrimage travel (Hajj & Umrah), money transfer, currency exchange, insurance, hotels, visas, and cargo services. The website presents a professional and comprehensive service offering targeting travelers and individuals sending money internationally, particularly to South Asia and the Middle East. The technical infrastructure uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a good user experience with mobile optimization and clear navigation. However, the website lacks visible privacy and cookie policies, and the contact form is disabled in the HTML, which limits user interaction and compliance. Security posture is moderate with no explicit security headers detected and unknown SSL configuration. WHOIS data is missing, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional and trustworthy in content but requires improvements in compliance and security transparency.