Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Anglia Culinary Suppliers Ltd

acsnorwich.com

63

Anglia Culinary Suppliers Ltd is a well-established regional foodservice distributor based in East Anglia, UK, founded in 2002. The company supplies a broad range of frozen, chilled, and ambient products to professional caterers including hotels, pubs, restaurants, care homes, hospitals, nurseries, and educational institutions. Their market position is that of a trusted local supplier emphasizing quality service and a varied product range. The website reflects a professional business model focused on wholesale foodservice supply with clear contact details and company information. Technically, the site is built on the DotNetNuke CMS platform, hosted by Rackspace, and uses common web technologies such as jQuery and Bootstrap Lite. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and suitable for its business purpose.

N

National Association of Insurance Commissioners (NAIC)

naic.org

67

The National Association of Insurance Commissioners (NAIC) operates as the primary U.S. standard-setting and regulatory support organization for insurance commissioners across all 50 states, the District of Columbia, and five U.S. territories. The organization provides a comprehensive suite of services including regulatory tools, education and training, data analytics, consumer resources, and compliance support. The website reflects a mature digital presence with extensive content tailored to regulators, industry participants, and consumers, positioning NAIC as a trusted authority in insurance regulation. Technically, the website is built on Drupal 11, leveraging modern web technologies such as Google Tag Manager, Google Analytics, Microsoft Clarity, and Cloudflare Bot Management. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a strong emphasis on privacy compliance demonstrated by a comprehensive cookie consent mechanism and GDPR-aligned privacy policies. From a security perspective, the site enforces HTTPS, employs security headers, and integrates bot management services, indicating a robust security posture. No critical vulnerabilities or exposed sensitive data were detected. However, there is room for improvement in enforcing Content-Security-Policy headers and publishing explicit security policies or vulnerability disclosure channels. Overall, the NAIC website presents a low-risk profile with high trustworthiness, professional content, and strong compliance adherence. Strategic recommendations include enhancing security header policies, formalizing incident response disclosures, and continuous monitoring of third-party scripts to maintain security integrity.

L

LGT Private Banking

lgt.com

71

LGT Private Banking is a global private bank with a heritage of over 100 years, specializing in wealth management and sustainable investment solutions for wealthy clients. The website presents a professional and comprehensive digital presence, offering insights, market views, and digital banking platforms tailored for private clients and financial intermediaries. The company emphasizes sustainability and forward-looking investment strategies, positioning itself as a reliable and innovative player in the private banking sector. Technically, the website employs modern web technologies including JavaScript frameworks, Piwik PRO analytics, and responsive design ensuring excellent mobile optimization and accessibility. The site is well-structured with clear navigation and rich content, supported by JSON-LD structured data and Open Graph metadata for SEO and social media integration. From a security perspective, the site enforces HTTPS and implements a consent management platform for cookies, reflecting good privacy compliance aligned with GDPR. However, explicit security headers are not clearly visible in the HTML, and no dedicated security or incident response policies are published. The WHOIS data is unavailable publicly, which is common in financial sectors for privacy reasons but warrants monitoring. Overall, the website demonstrates a strong digital maturity and trustworthy business presence with minor areas for security enhancement and transparency improvements.

S

Superior National Bank

snb-t.com

71

Superior National Bank is a regional financial institution serving clients primarily in the Upper Peninsula and Southeast Michigan. The bank offers a comprehensive suite of banking services including personal and business lending, deposit accounts, online and mobile banking, retirement planning, and trust and wealth management. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to individual consumers, businesses, municipalities, and corporations. The bank positions itself as a trusted regional player with FDIC insurance and a focus on superior customer experience. Technically, the website is built on WordPress using Elementor and Yoast SEO Premium, indicating a modern CMS infrastructure with SEO optimization. The site integrates multiple third-party banking platforms for secure login portals via iframes, and employs Google Analytics and Google Tag Manager for analytics and marketing. Mobile optimization and accessibility are adequately addressed, though some security headers could be improved. From a security perspective, the site uses HTTPS and secure login mechanisms, with an exit notifier plugin to warn users when leaving the site. However, the absence of WHOIS registration data raises questions about domain registration transparency, which is unusual for a banking institution. No critical vulnerabilities or exposed sensitive data were detected, but the site would benefit from enhanced security headers and a formal security policy or vulnerability disclosure page. Overall, the website is professional and trustworthy in appearance and functionality, but the missing WHOIS data and incomplete security headers suggest areas for improvement. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing explicit security and incident response policies to strengthen trust and compliance.

The website www.fisiononline.com is currently inaccessible due to a Cloudflare Origin DNS error (Error 1016), indicating that the domain is either not registered, expired, or misconfigured in DNS settings. The WHOIS lookup failed to return any registration data, reinforcing the conclusion that the domain is not properly registered or active. Consequently, no business information, contact details, or policies are available on the site. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the origin server or DNS configuration is missing or incorrect, preventing content delivery. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. Overall, the site is non-functional and presents a high risk for trust and legitimacy.

C

Calm Digital Solutions Ltd.

calmdigital.com

57

Calm Digital Solutions Ltd. is a UK-based digital agency specializing in bespoke web design, software development, digital marketing, and branding services. The company targets businesses seeking high-end, UX-centric digital products and services, positioning itself as an experienced regional player with over 20 years in the industry. The website reflects a professional and consistent brand image with clear service offerings and strong partner affiliations. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Google Analytics, Klaviyo, and Lead Forensics. The site is mobile-optimized, well-structured, and SEO-friendly, providing a good user experience. However, some technical improvements such as implementing security headers and publishing a dedicated security policy could enhance the overall infrastructure. From a security perspective, the site uses HTTPS and a cookie consent mechanism, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, Calm Digital demonstrates a solid digital presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in these areas would strengthen trust and compliance.

Positive Angle Media is a small video production company specializing in providing video crews and post production services for corporate, advertising, television, and film clients. The website presents basic information about the company’s services and experience but lacks comprehensive business and compliance details. Technically, the site uses outdated JavaScript libraries and does not enforce HTTPS, which poses security risks. The absence of privacy and cookie policies further indicates low privacy compliance. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. Overall, the site demonstrates a basic digital presence but requires significant improvements in security, compliance, and technical modernization to enhance trust and professionalism.

E

EICC

eicc.co.uk

61

The Edinburgh International Conference Centre (EICC) is a well-established multi-purpose venue located in central Edinburgh, Scotland, specializing in hosting conferences, exhibitions, and large-scale events. The website presents a professional and comprehensive digital presence, emphasizing sustainability, inclusivity, and a strong commitment to delivering impactful events. The venue is positioned as a leading player in the hospitality and events sector within the UK, supported by multiple certifications and awards that reinforce its credibility and market standing. The target audience includes event organizers, delegates, and visitors seeking a high-quality venue with modern facilities and sustainable practices. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Google Maps API, alongside a responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with clear navigation and rich multimedia content enhancing user experience. Security posture is strong with HTTPS enforced and no exposed sensitive data, although some security headers could be improved for enhanced protection. From a security and compliance perspective, the site lacks explicit security policy or incident response contact information, which could be areas for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules violation error, likely caused by querying the subdomain 'www.eicc.co.uk' instead of the registered domain 'eicc.co.uk'. This absence of WHOIS data reduces the ability to fully verify domain registration legitimacy but does not detract from the professional nature of the website content. Overall, the EICC website is a high-quality, trustworthy platform that effectively supports the business objectives of the venue. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and …

C

Card Player

heatonpark.org.uk

56

The analyzed website content corresponds to Card Player, a media and affiliate marketing platform specializing in poker, online casinos, and crypto gambling content targeted at UK players. The site provides comprehensive guides, reviews, and news related to crypto casinos, including licensing, bonuses, and game types. Technically, the site is built on WordPress with common plugins and uses modern frameworks like Bootstrap. It integrates advertising and tracking services such as Adform and Google Tag Manager. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies in the provided content. The WHOIS data for the domain www.heatonpark.org.uk is invalid or missing, indicating a domain registration issue or mismatch with the content source. Overall, the site is professional and content-rich but requires improvements in privacy compliance and security best practices.

S

State of Utah

utah.gov

52

The Official Website of the State of Utah providing government services, information, and resources to residents, businesses, and visitors.

G

Gwinnett County Government

gwinnettcounty.com

72

Gwinnett County Government operates an official website serving residents, businesses, and visitors of Gwinnett County, Georgia. The site provides comprehensive government services information, including public safety, utilities, employment, and community engagement. It positions itself as a trusted source for local government resources and news. The website leverages modern web technologies such as Liferay CMS, React, and Bootstrap, ensuring a responsive and accessible user experience. Multilingual support is provided via Weglot, enhancing accessibility for a diverse population. Security posture is strong with HTTPS, CSP, and secure form handling, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is notable but does not detract from the site's legitimacy given its official government status and consistent branding. Overall, the site demonstrates a mature digital presence aligned with public sector standards.

L

Lake County Government

lakecountyin.org

63

Lake County Indiana Government operates an official website serving as the primary digital portal for residents, businesses, and visitors to access government services, departments, news, and events. The website reflects a large government entity with a comprehensive offering of public services and resources tailored to the local community. The site targets a broad audience including citizens, government employees, and local businesses. The business model is that of a public sector service provider with a focus on transparency and accessibility. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, Slick Carousel, and other JavaScript libraries, hosted behind Cloudflare DNS services. The site is mobile optimized and includes accessibility features, demonstrating a moderate to good level of digital maturity. SEO and content structure are well implemented, supporting user navigation and information discovery. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of security headers and explicit security or incident response policies published. No cookie consent mechanism was detected, which may impact privacy compliance. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk assessment is low given the official nature of the site and consistent WHOIS data. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security policies, and adding cookie consent to enhance privacy compliance and user trust.

Southern Oregon University (SOU) is a well-established liberal arts university located in Ashland, Oregon, serving the Southern Oregon and Northern California regions. The institution offers a broad range of academic programs including undergraduate, graduate, certificate, and continuing education pathways. SOU also supports international programs and community engagement through various events and cultural activities. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, educators, and the local community. Technically, the site is built on WordPress using the Enfold theme and Avia framework, hosted on Amazon Web Services with Cloudflare bot management and Google Tag Manager integration. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and session management, though some security headers could be explicitly confirmed. Privacy compliance is robust with clear privacy and cookie policies and GDPR-aligned consent. Overall, the website is trustworthy, professionally maintained, and aligned with the university's mission and market position.

B

Barley Snyder

barley.com

73

Barley Snyder is a professional law firm operating primarily in Pennsylvania, offering a broad range of civil law services to businesses and individuals. The firm positions itself as a modern legal service provider with multiple office locations, targeting clients in various cities including Reading, York, Lancaster, and others. Their website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. The firm leverages WordPress CMS with SEO best practices and integrates Google Tag Manager and reCAPTCHA for analytics and security. Technically, the website is well-structured, mobile-optimized, and employs modern web technologies. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, indicating a good security posture. However, there is no explicit security policy or incident response information published, which could be improved. The absence of WHOIS data is notable but does not detract significantly from the overall trustworthiness given the professional nature of the site. Overall, the website demonstrates a strong business credibility and technical maturity with good privacy compliance. The security posture is solid but could benefit from enhanced transparency around security policies and incident response. The risk level is low, and the site is suitable for general audiences without any adult or questionable content.

A

American Civil Liberties Union

aclu.org

67

The American Civil Liberties Union (ACLU) is a well-established non-profit organization dedicated to defending and expanding civil liberties and constitutional rights across the United States. The website serves as a comprehensive platform for advocacy, education, and fundraising, targeting a broad audience including activists, donors, and the general public. It offers detailed information on key civil rights issues, campaigns, legal battles, and resources such as 'Know Your Rights' materials. The ACLU maintains a strong market position as a leading civil liberties organization with a large national presence. Technically, the website is built on WordPress with modern enhancements including Vue.js components, Yoast SEO for optimization, and integrations with analytics and marketing tools like Heap and Optimizely. The site demonstrates good mobile responsiveness, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with room for optimization in hosting and resource delivery. From a security perspective, the site enforces HTTPS and uses secure forms for data collection. However, explicit security headers are not detected in the provided data, and no public security or incident response policies are found. The absence of a vulnerability disclosure or security.txt file suggests an opportunity for improvement in transparency and security maturity. No vulnerabilities or suspicious elements are evident in the content or scripts. Overall, the ACLU website is a trustworthy, professional, and content-rich platform that effectively supports the organization's mission. The domain registration data is privacy-protected but consistent with the organization's long-standing history. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

P

Preferred Plastics & Packaging Co.

prefplastics.com

44

Preferred Plastics & Packaging Co. is a large wholesale distributor of product packaging supplies in the United States, offering over 700 products across 65 product lines including stretch film, tape, palletizing, packaging equipment, and janitorial supplies. The company positions itself as a leading supplier with a strong market presence and a history dating back to 1983. Their website reflects a professional and consistent brand image targeting businesses in need of packaging solutions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and reCAPTCHA for form security. The site is mobile-optimized and accessible with good navigation and content quality. Security posture is solid with HTTPS and spam protection, though lacking some advanced security headers and explicit security policies. WHOIS data is missing or unavailable, which slightly reduces trust but does not negate the professional appearance and business legitimacy. Overall, the website is safe, business-focused, and well-maintained.

J

Jefferson County, MO

jeffcomo.org

58

Jefferson County, Missouri operates an official government website providing residents and visitors with access to county news, services, departments, and community resources. The site serves as a central hub for information such as emergency alerts, tax payments, permits, employment opportunities, and public meeting calendars. The website is positioned as a trusted government portal with a focus on public service and community engagement. Technically, the website leverages modern web technologies including jQuery, AlpineJS, Google Tag Manager, Azure Application Insights, and an accessibility tool from AudioEye. It is built on the CivicPlus CMS platform, which is common for municipal websites. The site demonstrates good mobile optimization, accessibility features, and moderate performance. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS and anti-forgery tokens in forms, indicating a baseline security posture. The integration of telemetry and accessibility tools shows a commitment to monitoring and inclusivity. The WHOIS data is incomplete or restricted, which is unusual for a .gov domain but likely due to registry policies. No signs of WAF blocking or security challenges were detected, and no vulnerabilities were apparent from the content. Overall, the website is a professional and trustworthy government resource with room for enhancement in privacy compliance and security header implementation. Strategic improvements in these areas would strengthen the site's security posture and user trust.

KPRS Construction Services, LLC operates as a full-service general construction company specializing in commercial and residential projects across multiple sectors including office, residential, industrial, public works, retail, medical, and infrastructure. The company maintains a strong market position with a diverse project portfolio and multiple office locations, targeting developers, public sector clients, subcontractors, and prospective employees. Their website reflects a professional brand with consistent messaging and trust indicators such as testimonials and licensing information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, GSAP for animations, Google Analytics and Tag Manager for tracking, Google reCAPTCHA for form security, and Prismic as a headless CMS. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate with some use of lazy loading and preloading resources. Security posture is generally good with HTTPS enforced and use of reCAPTCHA on forms, but lacks explicit security headers which could improve protection against common web attacks. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy from a user perspective, but the lack of WHOIS data and domain registration details raises concerns about domain legitimacy. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

K

Kelly Hart & Hallman, LLP

khh.com

48

Kelly Hart & Hallman, LLP is a well-established law firm based in Texas with a broad range of legal services including litigation, corporate law, real estate, bankruptcy, and energy law. The firm has a strong market presence with over 160 attorneys and recognized rankings such as Chambers USA. The website is built on WordPress with modern SEO and technical implementations, providing a professional and user-friendly experience. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and privacy compliance could be improved. The absence of WHOIS data is a concern but does not detract significantly from the firm's apparent legitimacy. Overall, the firm demonstrates a mature digital presence suitable for its professional services.

U

UNION ENERGY HongKong Industries Ltd.

unionenergy.com.hk

38

UNION ENERGY HongKong Industries Ltd. is a specialist manufacturer and supplier of watch parts, bands, buckles, repair tools, and pogo pin connectors. The company targets businesses and professionals in the watch manufacturing and repair industry, positioning itself as a specialist with advanced machinery and a professional R&D team. The website reflects a small-sized manufacturing business based in Hong Kong with a focus on quality and systematic quality control. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile optimized with good design and navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which impacts its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is professional and safe but could improve in privacy compliance and security best practices.

Old Pulteney Whisky operates a professionally designed e-commerce website focused on retailing premium single malt Scotch whisky. The brand emphasizes its heritage and maritime influence, targeting adult whisky enthusiasts globally. The website leverages Shopify's platform and integrates marketing and analytics tools such as Klaviyo and Facebook Pixel to optimize customer engagement and sales. Age verification and privacy compliance mechanisms are implemented to meet regulatory requirements. The domain registration data aligns well with the brand's claims, supporting its legitimacy and long-standing market presence.

The website greenfernbakery.co.uk appears to be a minimal placeholder or parked domain with no substantive content related to a bakery business or any other commercial entity. The site primarily loads scripts related to cookie consent management and advertising, with embedded iframes pointing to external domains that may be suspicious. There is no visible business information, contact details, or privacy and terms of service pages, which significantly limits the ability to assess the business or compliance posture. The WHOIS lookup failed and indicates the domain is not properly registered under Nominet UK rules, raising serious legitimacy concerns. Technically, the site uses JavaScript and a ConsentManager CMP but lacks modern CMS or hosting details. Security posture is weak due to lack of HTTPS and security headers information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Sports Tune Motor Company Limited operates a basic informational website focused on motor company services and real estate-related offerings such as residential and commercial properties, car wash, and classic cars. The site targets a general audience but lacks detailed business positioning or market presence information. The website is built using simple HTML and CSS without modern frameworks or CMS, reflecting a low level of digital maturity. There is no evidence of advanced technical infrastructure or integrations. Security posture is weak, with no HTTPS detected and no security headers or privacy policies implemented. The domain WHOIS data is unavailable due to a naming rule violation, raising concerns about domain legitimacy. Overall, the site presents minimal risk but requires significant improvements in security, privacy compliance, and technical modernization.

The domain www.fpcr.co.uk is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. The WHOIS lookup failed due to the domain being invalid under Nominet UK naming rules, indicating it is not registered or active. Consequently, no business information, contact details, or website content is available for analysis. The lack of HTTPS, security headers, and any metadata further suggests the site is either misconfigured or intentionally blocked. From a technical perspective, the website does not present any detectable technologies, frameworks, or content. The server configuration results in access denial, preventing any meaningful assessment of digital maturity or infrastructure. Security posture is weak due to the absence of HTTPS and security best practices. Overall, the domain appears non-legitimate or inactive, with no trust indicators or compliance information. This presents a high risk for users attempting to access the site, as no assurances of security or privacy are provided. Strategic recommendations include proper domain registration, enabling HTTPS, and publishing essential policies to establish credibility and trust.

K

Keady Credit Union Limited

keadycu.com

73

Keady Credit Union Limited is a member-owned financial cooperative established in 1967, serving over 6500 members primarily in the local community of Keady, Ireland. The organization offers a range of financial services including loans, savings, insurance products, and mobile banking, positioning itself as a trusted local credit union with a not-for-profit business model. The website reflects a professional and consistent brand presence with clear regulatory compliance and contact information. Technically, the website employs standard web technologies such as jQuery and jQuery UI, with a moderate performance profile and good mobile optimization. The presence of a loan calculator tool and cookie consent mechanisms indicate a reasonable level of digital maturity. However, the absence of explicit security headers and incomplete WHOIS data suggest areas for technical and security improvement. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks visible security headers which could enhance protection against common web attacks. Privacy policies and cookie notices are comprehensive and GDPR compliant, supporting good privacy practices. The lack of incident response contact details and vulnerability disclosure mechanisms indicates room for strengthening security transparency. Overall, the website presents a trustworthy and functional platform for its target audience, but the missing WHOIS data and some technical security gaps warrant attention to improve trust and resilience against threats.

The website trailblazerbbq.com is currently inaccessible, returning a 403 Forbidden error page served via Cloudflare, indicating restricted access or blocking. The domain is registered since 2012 with Network Solutions, LLC, showing a long-standing registration but no public registrant details. The website lacks any visible business information, contact details, privacy or cookie policies, and does not expose any forms or interactive content. The technical infrastructure includes Cloudflare DNS but lacks DNSSEC and security headers, and no analytics or tracking scripts are present. Due to the blocked content, a comprehensive analysis of the business and security posture is limited. The site shows poor content quality and no privacy compliance indicators.

The analyzed content corresponds to a local Chrome error page (chrome-error://chromewebdata/) indicating that the actual website content for the domain 'chromewebdata' is inaccessible or blocked. No business-related content, metadata, or contact information is present. The page primarily contains internal Chromium scripts and styles related to the offline dinosaur game, which is a default Chrome feature when no internet connection is available or the page cannot be loaded. Due to the lack of accessible content, no meaningful business or security posture assessment can be performed. The technical infrastructure appears to be minimal and related to browser internal resources rather than a live website. Security posture is limited to the assumption of HTTPS usage by Chrome, but no security headers or policies are detected. Privacy compliance and business credibility cannot be assessed due to missing information.

The domain www.lynndrake.co.uk is not a valid registered domain according to the Nominet UK WHOIS data, which indicates the domain name violates naming rules and cannot be registered. The website content is minimal, consisting solely of a parking placeholder page with no business information, contact details, or user interaction elements. This suggests the domain is inactive or reserved but not operational as a business website. The technical infrastructure is limited to basic JavaScript loading from a third-party parking service, with no CMS or hosting details available. Security posture is weak due to lack of HTTPS, security headers, and privacy policies. Overall, the site lacks credibility and trustworthiness, and no meaningful business or compliance information is present.

S

Setanta Construction

setantaconstruction.com

59

Setanta Construction is a medium-sized UK-based construction company specializing in bespoke timber frame homes and off-site modular construction. The company emphasizes energy-efficient, award-winning homes with over 60 years of experience, targeting architects, developers, housing associations, and local authorities. Their website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations for enhanced user experience and analytics. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance posture. Security is generally good with HTTPS and secure checkout, but could be improved by adding explicit security headers and vulnerability disclosures. The absence of WHOIS data reduces domain trustworthiness, though the business presence and content suggest legitimacy.

A

Amp Commercial Ltd

ampcommercial.com

65

Amp Commercial Ltd is a small UK-based company specializing in commercial property investment and asset management services across England, Wales, and Northern Ireland. Their website presents a professional image with clear navigation and detailed service offerings including property management, business rates consultancy, and professional services such as rent reviews and lease renewals. The company targets commercial property investors and asset owners within their regional market. Technically, the website is built using modern web standards with a CMS identified as MyWebsite and integrates IONOS SiteAnalytics for user behavior tracking. The site is mobile-optimized and includes privacy and cookie policies compliant with GDPR requirements. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which raises concerns about domain registration transparency, but the website content and contact information appear legitimate and consistent with a professional business. Overall, the site scores well in content quality and privacy compliance but would benefit from enhanced security disclosures and domain registration transparency.

B

B-Secur

b-secur.com

58

B-Secur is a healthcare technology company specializing in advanced heart health solutions, including FDA-cleared ECG and bioimpedance algorithms. The company targets medical device manufacturers and healthcare providers, offering hardware expertise and regulatory guidance. Their market position is strong, supported by certifications such as ISO 13485 and endorsements from clinicians. Technically, the website is built on WordPress with modern frameworks and integrates analytics and marketing tools like Google Analytics, HubSpot, and Cookiebot for privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not fully implemented. The absence of WHOIS data is a minor concern but the overall digital maturity and professionalism are high. Strategic recommendations include enhancing security headers, improving contact visibility, and adding a vulnerability disclosure page to strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

Fred J Malcolm

fredjmalcolm.com

63

Fred J Malcolm Ltd is a well-established jewellery retailer based in Belfast, Northern Ireland, with a history dating back to 1926. The company specializes in diamond engagement rings, wedding and eternity rings, and a variety of jewellery and dress rings. Their business model focuses on retail sales through physical showrooms complemented by an informative and visually appealing website. The company maintains a strong local market presence and targets consumers seeking high-quality diamond jewellery. The website features comprehensive product categories and emphasizes customer experience and heritage. Technically, the website employs a modern technology stack including jQuery, Fancybox, Google Analytics, Google Tag Manager, and CookieYes for consent management. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility is basic but functional. The website uses HTTPS exclusively, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in security transparency and WHOIS data clarity are recommended to enhance trust and compliance.

Alphega Pharmacy operates a large network of over 1,300 independent pharmacies across the UK, providing community healthcare services including prescription ordering, pharmacy locator, online medicine shop, and professional pharmacy services. The website is built on WordPress using Elementor and integrates Google Tag Manager and OneTrust for analytics and cookie consent. The site is well-structured, mobile-optimized, and presents professional healthcare content targeted at UK pharmacy customers. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. WHOIS data is unavailable due to a domain naming rules error, which is unusual and warrants further investigation. Overall, the website is trustworthy and functional but could improve transparency and security practices.

T

The Mulberry Bush

themulberry-bush.com

58

The Mulberry Bush is a small UK-based retail business specializing in paper crafting, wedding stationery, and related crafting supplies. It operates both an online e-commerce platform and a physical store located in Thatcham, Berkshire. The company also offers workshops and events to engage its crafting community. The website is professionally designed with clear navigation and a consistent brand presence, targeting hobbyists, crafters, and wedding planners. Technically, the site uses modern JavaScript libraries and integrates Google services for analytics and reCAPTCHA for form security. Payment processing is securely handled via PayPal SDK. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear authentic and professional. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Security posture is good with HTTPS and secure payment, but explicit security headers are not detected, and no incident response or vulnerability disclosure information is provided.

A

Andrews Removals Sheffield

andrewsremovals.com

57

Andrews Removals Sheffield is a well-established local removals and storage company serving Sheffield and surrounding areas since 2001. The company offers a comprehensive range of services including house removals, office removals, packing, storage, and house clearance. Their market position is that of a trusted, customer-focused service provider with positive customer reviews and a professional online presence. Technically, the website is built on WordPress using Elementor and Astra theme, with integrations for Google Analytics and GDPR cookie consent. The infrastructure is modern and adequate for their business needs, hosted with GoDaddy and using Cloudflare DNS. Security posture is good with HTTPS enabled and anti-spam measures in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

Edward Sexton is a prestigious bespoke tailoring business located on Savile Row, London, with a heritage dating back to 1969. The company specializes in classic menswear and ladies tailoring, blending traditional craftsmanship with a modern English eccentricity. The website serves as an e-commerce platform hosted on Shopify, targeting affluent customers seeking luxury custom tailoring services. The site is professionally designed with excellent content quality and clear branding, reflecting the company's market position as a high-end tailor. Technically, the website leverages a mature Shopify infrastructure with integrations including Google Analytics, Facebook Pixel, and various marketing and consent management tools. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional digital presence consistent with the luxury tailoring industry. The absence of WHOIS data for the domain is due to domain registration constraints but does not detract significantly from the site's legitimacy. Strategic recommendations include publishing explicit security and incident response policies and enhancing direct contact information visibility to improve trust and compliance. This assessment indicates a well-maintained, secure, and privacy-conscious website suitable for its target market, with room for improvement in transparency and security documentation.

Our Dogs Publishing operates a specialized media platform focused on the pedigree dog show community in the United Kingdom. The website offers a weekly newspaper, online membership with archives, show reports, breed notes, and advertising services. It targets dog breeders, exhibitors, and enthusiasts, positioning itself as a key information source within this niche market. The business model relies on subscriptions, advertising, and e-commerce sales of dog-related books and products. Technically, the site uses a traditional web stack with jQuery, Google Analytics, Facebook Pixel, and consent management tools, indicating moderate digital maturity. Mobile optimization is basic but functional with a dedicated mobile site redirect. Security posture is adequate with HTTPS and a Content Security Policy, though the use of 'unsafe-inline' reduces CSP effectiveness. No explicit security or incident response policies are published, and WHOIS data extraction failed due to querying a subdomain rather than the registered domain, slightly impacting trust. Overall, the site is professional, content-rich, and compliant with privacy regulations, serving a general audience safely.

W

WN Properties

wnproperties.co.uk

50

WN Properties is a small independent real estate agency specializing in residential sales, lettings, and property management in South West Essex, UK. The website presents a professional image with clear business information, comprehensive property search functionality, and active social media presence. The business targets local home buyers, sellers, renters, and landlords, positioning itself as a trusted local expert with a strong client rating and certifications such as Client Money Protection. Technically, the website is built on Joomla CMS and uses modern JavaScript libraries to enhance user experience. It is mobile-optimized and provides good SEO and accessibility features. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and formal security policies. The WHOIS data is unavailable due to domain registration errors, which raises some legitimacy concerns, though the website content and business information appear consistent and professional. Overall, the site scores well on content quality, privacy compliance, and business credibility but could improve in security best practices and domain registration transparency.

The website www.seatingvfm.com is currently inaccessible, displaying only a minimal error message indicating a failure to establish a database connection. No usable content, metadata, or business information is available for analysis. The WHOIS lookup returned no registration data, suggesting the domain may not be registered or is newly registered without public WHOIS records. The lack of HTTPS, security headers, and any contact or policy information indicates a very low digital maturity and security posture. Overall, the site appears non-operational or improperly configured, presenting significant risks for trust and legitimacy.

T

Trilogy Hair Salon York

hairsalonyork.co.uk

56

Trilogy Hair Salon York is a luxury hair salon located in York city centre, operated by a team of experienced stylists with over 30 years of combined expertise. The business offers a range of hair services including cuts, colour, balayage, bridal hair, and styling, targeting a general audience seeking professional and high-quality hair care. The website presents a professional and consistent brand image with clear navigation and relevant content, supporting its market position as a premium local salon. Technically, the website employs modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and a booking widget from Vagaro. The site is mobile-optimized, uses HTTPS, and includes cookie consent mechanisms, reflecting a moderate to good level of digital maturity. However, there is room for improvement in security headers and explicit security policy disclosures. From a security perspective, the site benefits from HTTPS encryption and bot mitigation but lacks visible security headers and detailed incident response information. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, although the website content and contact information appear trustworthy. Overall, the security posture is moderate with recommendations to enhance header policies and transparency. The overall risk assessment suggests the website is functional and professional but requires verification of domain registration legitimacy and improvements in security best practices. Strategic recommendations include implementing comprehensive security headers, publishing incident response policies, and conducting regular third-party script audits to strengthen trust and compliance.

C

Conestoga Title Insurance Co

conestogatitle.com

60

Conestoga Title Insurance Co operates as a regional title insurance underwriter serving the Mid-Atlantic region of the United States. Their website presents a professional image focused on providing title insurance services and recruiting title agents. The company targets real estate professionals and agents seeking underwriting services. The website is built on the Wix platform, leveraging standard web technologies and Google Analytics for visitor tracking. While the site is well-designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with no advanced security headers detected and no visible incident response or vulnerability disclosure information. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content itself appears professional and consistent with the claimed business.

N

National Community Pharmacists Association

ncpanet.org

66

The National Community Pharmacists Association (NCPA) is a well-established non-profit organization founded in 1898, serving as the voice for independent community pharmacists across the United States. Representing over 21,000 pharmacies and 250,000 employees, NCPA provides advocacy, education, resources, and events tailored to the needs of independent pharmacy owners and professionals. The website reflects a mature business model focused on membership services, legislative support, and professional development within the healthcare sector. Technically, the website is built on Drupal 11 with Commerce 3, leveraging modern analytics and marketing tools such as Google Analytics, HubSpot, Adobe DTM, and LinkedIn Insight Tag. The site is hosted behind Cloudflare DNS and uses HTTPS with a strong SSL configuration. Mobile optimization and accessibility are well addressed, and SEO practices are implemented effectively. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. From a security perspective, the site demonstrates good practices with HTTPS enforcement and domain status protections. There is no evidence of exposed sensitive data or vulnerabilities. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room to enhance transparency and readiness. Privacy compliance is strong, with clear privacy and cookie policies and GDPR consent mechanisms in place. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience. The risk profile is low, with recommendations focusing on enhancing DNS security, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

R

Reinsurance Association of America

reinsurance.org

74

The Reinsurance Association of America (RAA) is a well-established trade association serving the U.S. reinsurance industry. It provides advocacy, education, legal research, analytics, and market intelligence to its members, positioning itself as a key industry resource. The website reflects a professional and consistent brand with comprehensive content tailored to reinsurance professionals, regulators, and stakeholders. Technically, the site is built on a mature ASP.NET framework with Telerik UI components and integrates modern analytics tools such as Google Analytics and Azure Application Insights. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, while HTTPS is implied and cookie consent mechanisms are in place, explicit security headers are not visible in the provided data, suggesting room for improvement in security hardening. The WHOIS data was unavailable from the raw output, which slightly impacts trust assessment, but the website's professional presentation and content quality support its legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and verify WHOIS information for full trust assurance.

The City of Waverly's official website serves as a portal for residents and visitors to access information about city departments and services. The site is positioned as a local government resource, providing details on public works, leisure services, economic development, and other municipal functions. The target audience primarily includes local residents, businesses, and visitors seeking city-related information. The business model is that of a government entity focused on community service rather than commercial revenue generation. Technically, the website employs a traditional web stack with jQuery 1.7.2, Google Analytics, Microsoft Clarity, and various UI libraries such as FancyBox and Owl Carousel. The site demonstrates moderate performance and good mobile responsiveness but lacks modern frameworks or CMS indications. Accessibility and SEO optimizations are basic, with room for improvement. From a security perspective, the site lacks visible security headers and privacy compliance documentation such as privacy or cookie policies. The use of an outdated jQuery version may expose the site to vulnerabilities. The absence of WHOIS data raises questions about domain registration legitimacy, although the site content and branding strongly suggest a legitimate municipal government presence. Overall, the website is functional and professional but requires enhancements in security posture, privacy compliance, and domain legitimacy transparency to improve trust and resilience against threats.

A

Albany County, NY

albanycounty.com

58

Albany County, NY operates an official government website serving residents, businesses, and visitors with comprehensive information about county departments, services, news, events, and resources. The site is well-branded with consistent government identity and provides key services such as job postings, public records access, and business resources. Technically, the website uses a modern stack including AngularJS, Bootstrap, and a specialized CMS platform, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and session management in place, though some security headers and explicit privacy policies are missing. WHOIS data is incomplete, which slightly impacts domain trustworthiness, but the official nature and content quality strongly support legitimacy. Overall, the site is professional, trustworthy, and serves its government function effectively.