Security Directory

E

Eiger International Ltd

eiger-int.com

49

Eiger International Ltd is a small UK-based company specializing in marketing, design, and exhibition services with over 30 years of experience. Their website presents a professional image with clear descriptions of their services and client portfolio. Technically, the site is built on WordPress using the Divi theme and includes standard web technologies such as jQuery and Google Fonts. The site is mobile-optimized and provides a good user experience with clear navigation and contact options. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.

P

Pilgrims Hospices

pilgrimshospices.org

64

Pilgrims Hospices is a well-established non-profit hospice charity serving east Kent, UK, providing comprehensive hospice care and support services to patients, families, and healthcare professionals. The organization is positioned as the largest hospice charity in its region, supported by donations, fundraising, and volunteer efforts. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to its diverse audience including patients, carers, and donors. Technically, the site is built on WordPress with WooCommerce integration for donations and shop services, leveraging modern web technologies and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain appears legitimate and well-maintained, despite the absence of detailed WHOIS registrant data likely due to privacy protection common in non-profit sectors.

The World Trade Centers Association (WTCA) operates a globally recognized network of iconic buildings and organizations dedicated to fostering international business connections and trade. The association serves a diverse audience including commercial property developers, economic development agencies, and international businesses seeking to expand their global footprint. WTCA's business model centers on membership and licensing, providing access to a prestigious brand, global networking opportunities, and a suite of events and resources. The website reflects a mature, professional organization with a strong market position and extensive global reach. Technically, the website employs a modern technology stack including Ruby on Rails, Google Tag Manager, Microsoft Clarity, and various JavaScript libraries to deliver a responsive and engaging user experience. Hosting assets on Amazon S3 and leveraging Google services indicates a scalable and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and includes some security headers, reflecting a solid baseline security posture. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. Privacy compliance is partially addressed with privacy and cookie policies present, but lacks an explicit cookie consent mechanism. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's global stature. The lack of WHOIS data limits domain registration trust verification but is likely due to privacy protection. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving accessibility to further strengthen the organization's digital trust and security posture.

R

REKOR11

albionguesthouse.co.uk

59

REKOR11 operates as an e-commerce platform focused on selling branded merchandise, primarily T-shirts and apparel, with a gaming and entertainment theme. The website leverages the TeePublic platform infrastructure, providing a marketplace for artists and designers. The business targets a general audience, primarily in Indonesia, and offers a range of products with a focus on stable access and user experience. The market position is niche with moderate trust signals including Better Business Bureau accreditation and customer reviews. Technically, the website uses modern web technologies including Google Analytics, Datadog RUM for monitoring, and Cloudinary for image hosting. The platform appears to be built on Ruby on Rails, with good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks important security headers and cookie consent mechanisms. No critical vulnerabilities were detected in the content, but the absence of a security policy or incident response contacts is a gap. Privacy compliance is basic with a privacy policy present but no explicit cookie consent. Overall, the domain WHOIS data is unavailable and indicates registration issues, which raises concerns about domain legitimacy. However, the website content is accessible and professional. Strategic recommendations include improving security headers, implementing cookie consent, publishing security policies, and addressing WHOIS inconsistencies to enhance trust and compliance.

M

MCS Cleaning Services

midlandcleaningservices.co.uk

48

MCS Cleaning Services is a UK-based commercial and B2B cleaning service provider established since 2013. The company offers a broad range of cleaning services including office, factory, hygiene, janitorial supplies, window cleaning, builder/deep cleans, and grounds maintenance. They hold recognized certifications such as ISO 9001 and ISO 14001 and are members of BICSc, indicating a commitment to quality and environmental standards. The website presents a professional image with clear service offerings and client references, targeting commercial clients in the UK market. Technically, the website is built on WordPress using modern Gutenberg blocks and integrates Google Analytics for visitor tracking. It is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. The WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and functional but would benefit from improved security transparency and domain registration clarity.

McCorriston Miller Mukai MacKinnon LLP is a well-established full-service law firm based in Honolulu, Hawaii, serving individuals, businesses, and government entities since 1989. The firm offers a broad range of legal services including litigation, real estate, corporate law, trusts and estates, public finance, construction, health care, and immigration law. Their market position is strong within the Hawaiian legal landscape, supported by a team of over 30 attorneys and multiple industry recognitions such as Best Lawyers in America® honorees. The website reflects a professional and consistent brand image with comprehensive content tailored to their target audience of local clients and organizations.

BritLube Ltd is a British family-owned manufacturer specializing in high-performance lubricants tailored for industrial, manufacturing, engineering, and food-grade applications. The company positions itself as a trusted provider with a strong emphasis on British engineering quality, NSF food-grade certifications, and comprehensive technical support including an AI-powered assistant named Friction-Free Fred. Their market focus is on UK-based industries requiring reliable and compliant lubrication solutions. Technically, the website employs modern JavaScript modules, Google Fonts, and Google Tag Manager for analytics, hosted on reputable platforms such as Supabase and Base44. The site is well-optimized for mobile and desktop with excellent design and navigation clarity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include adding privacy and cookie policies, security headers, and a vulnerability disclosure policy to enhance compliance and security maturity.

Outdoorkit.co.uk is an e-commerce retailer specializing in outdoor clothing, footwear, and equipment catering to men, women, and children. The website offers a wide range of products from well-known outdoor brands and emphasizes next working day delivery, indicating a customer-focused retail operation. The site is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Google Analytics, and CookieFirst for consent management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The WHOIS data is incomplete and indicates domain registration issues, which may affect trustworthiness from a domain registration perspective. Overall, the website is functional and professional but would benefit from enhanced security practices and clearer compliance documentation.

T

The Citrus Centre

citruscentre.co.uk

67

The Citrus Centre is a small, family-run specialist nursery based in the United Kingdom, focusing on the cultivation and retail of over 150 varieties of citrus plants and their relatives. Established since 1998, the business operates both a physical nursery by appointment and an online mail order and click-and-collect service. The website reflects a niche retail business model targeting horticulture enthusiasts and gardeners interested in citrus plants. The company maintains a consistent brand presence and provides clear contact information, supporting its credibility and trustworthiness. Technically, the website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Google Fonts, and integrated marketing and analytics tools including Mailchimp and Meta Pixel. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, typical for Shopify-hosted e-commerce sites. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating GDPR compliance. However, explicit security headers like Content-Security-Policy and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing a long-established domain registered with a reputable UK registrar. Overall, the website presents a professional and trustworthy online presence for a specialized retail nursery. Strategic improvements could include enhancing security headers, publishing a security policy, and adding incident response contact details to further strengthen security posture and customer trust.

T

The Community Church

communitychurch.org.uk

49

The Community Church is a small non-profit religious organization serving the Southport, Ormskirk, and West Lancashire areas. It offers a variety of community-focused services including worship events, youth and student activities, podcasts, and video resources. The church maintains an active online presence with clear navigation and regularly updated event information, targeting local community members and church attendees. The website is professionally designed with consistent branding and trust indicators such as a registered charity number and comprehensive privacy policies. Technically, the website employs modern web technologies including Laravel Livewire, AOS for animations, FontAwesome icons, and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in security headers and explicit incident response disclosures. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating good privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain registration anomalies is a concern but does not currently impact the site's operational legitimacy. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the main recommendation being to address WHOIS registration issues and improve security header implementation. The church's digital maturity is good for its size and sector, supporting its community engagement goals effectively.

A

AG Tax Limited

agtax.co.uk

37

AG Tax Limited is a small UK-based accounting and tax consultancy firm offering a range of services tailored to individuals and companies, including international tax advice through a professional network. The website is built on WordPress using the Vesta theme and includes basic content relevant to their services, contact information, and a client portal link. The technical infrastructure is moderate with standard technologies like jQuery and Google Fonts, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no security headers or explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy. Overall, the website is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and professionalism.

R

Razak & Co

razakandcompany.co.uk

45

Razak & Co is a small, established accounting firm based in Newcastle, UK, offering a comprehensive range of financial services including accounting, auditing, business support, payroll, and taxation. The company has a strong local presence with over 25 years of experience and a professional team. Their website reflects a professional and consistent brand image, targeting SMEs, sole traders, partnerships, and limited companies. The business model focuses on providing tailored accountancy solutions to a diverse client base in the finance sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Slider, and Google Fonts. The site is mobile-optimized with good SEO practices implemented via the Yoast SEO plugin. Performance is moderate, and accessibility is basic but functional. The site uses Google Analytics for user tracking and includes social sharing features. However, there is no visible privacy or cookie policy, which is a compliance gap. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a formal vulnerability disclosure policy. The WHOIS data for the domain is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy and professional front for a small accounting firm but should address privacy compliance and security header implementation. The domain registration inconsistency warrants further investigation to ensure legitimacy and trustworthiness.

A

Ambient

ambientww.com

51

Ambient is a London-based experiential marketing agency specializing in creative outdoor advertising and brand experiences. Established in 2002, the company offers a broad range of services including monumental out-of-home advertising, sampling, pop-up shops, roadshows, and PR stunts. The agency positions itself as an award-winning entity with international reach, targeting brands seeking innovative marketing solutions. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with integrations for HubSpot and Google Analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-branded, and trustworthy, with no signs of malicious activity or content blocking.

W

William Houghton Funeral Director

williamhoughtonfunerals.co.uk

44

William Houghton Funeral Director is a small, locally focused funeral service provider operating in Preston and surrounding areas in the UK. The company offers a range of funeral and cremation services, including simple funerals and funeral plans, with multiple office locations to serve their community. Their website is professionally designed using WordPress and the Divi theme, featuring multimedia content such as embedded YouTube videos and a reputable third-party review widget, which enhances their trustworthiness. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed to meet modern data protection standards. The website uses HTTPS and includes reCAPTCHA for form security, but lacks some security headers that could improve its security posture. The WHOIS data for the domain is unavailable due to a registration error indicating the domain name violates Nominet UK naming rules, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the business appears credible and trustworthy based on website content and contact information, but the domain registration anomaly warrants caution.

H

Henley Media Group

henleymediagroup.com

64

Henley Media Group is a well-established UK-based media business founded in 2003, specializing in media production, publishing, and event management. The company serves over 2,000 clients globally and partners with respected organizations, positioning itself as a reputable player in the media industry. The website reflects a professional digital presence built on WordPress with the Divi theme, leveraging modern web technologies and Google Analytics for user insights. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website cubeselfstorage.co.uk currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. No business content, contact information, or policies are accessible on the site. The domain is registered since 2007 with a reputable UK registrar, suggesting an established business presence, but the lack of accessible content severely limits the ability to assess the company's services or market position. Technically, the site uses basic HTML and CSS with Google Fonts, but no advanced frameworks or CMS are detected. Security posture cannot be fully evaluated due to lack of content and headers. Overall, the site appears to be either under maintenance, misconfigured, or access-restricted, resulting in a low trust and quality score.

Audiocounsel is a specialist hi-fi audio equipment retailer based in the United Kingdom, with over 40 years of experience in the industry. The company focuses on providing high-quality audio equipment to enthusiasts and consumers seeking expert advice and premium products. The website reflects a mature business with a clear retail focus, leveraging WordPress with WooCommerce and the Divi theme to deliver a professional online presence. The technical infrastructure includes modern web technologies and integrations such as Google Tag Manager and Tawk.to for analytics and customer engagement. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies, indicating room for improvement in compliance and incident response readiness. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the business to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to strengthen trust and compliance.

Grimaldi is a Brazilian industrial equipment manufacturer specializing in cranes, roll-on/roll-off systems, garbage collectors, and presses. The company targets industrial sectors such as agriculture, construction, waste management, and logistics. Their website reflects a professional and consistent brand image with a focus on innovation and robustness. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, reCAPTCHA, and Microsoft Clarity for analytics, hosted behind Cloudflare for DNS and CDN services. Security posture is adequate with HTTPS and CSRF tokens implemented, though security headers and explicit privacy policies are missing. No blocking or WAF challenges were detected, allowing full content access. Overall, the website is well-structured and serves its business purpose effectively but could improve privacy compliance and security transparency.

Katten Muchin Rosenman LLP is a well-established full-service law firm with nearly 650 attorneys operating across the United States and internationally in London and Shanghai. The firm provides a broad range of legal services including capital markets, pharmaceutical acquisitions, financial services advisory, and restructuring plans. Their website reflects a mature market position with comprehensive content such as case studies, news, publications, and events targeting business clients and legal professionals. Technically, the website is built on a custom CMS platform utilizing modern web technologies including jQuery, Slick Carousel, Font Awesome, Google Fonts, and Google Analytics for tracking. The site is mobile optimized, accessible, and SEO friendly, with a cookie consent mechanism implemented via Usercentrics. Performance is moderate with good design and navigation clarity. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled and security headers are not explicitly detected in the HTML content. There is no publicly visible security policy or incident response contact information. Privacy compliance is strong with clear privacy and cookie policies and GDPR compliance indicators. Overall, the website is professional, trustworthy, and secure with minor recommendations to enhance DNS security and publish explicit security policies. There are no signs of malicious activity or content safety concerns, making it a reliable digital presence for the law firm.

C

Copthall School

copthallschool.org.uk

62

Copthall School is a well-established non-denominational academy for girls aged 11-18 located in London, serving a diverse community with a strong educational focus. The website reflects a professional and comprehensive educational institution with detailed information on admissions, curriculum, pastoral care, and extracurricular activities. The school holds multiple certifications and partnerships that enhance its credibility and market position. Technically, the website uses modern web technologies including jQuery, Font Awesome, Google Fonts, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the school's reputation as a reputable educational institution.

L

Local Vending

localvending.co.uk

46

Local Vending is a UK-based vending machine and supplies provider serving Nottingham, Derby, Nottinghamshire, Derbyshire, and the East Midlands. The company emphasizes flexible, no contract vending solutions, offering a wide range of vending machines including hot drinks, snacks, combination machines, water coolers, and coffee brewers. The website highlights over 30 years of business experience and focuses on customer service and local delivery. Technically, the website uses modern front-end frameworks such as Bootstrap and integrates Google services for maps and analytics. The site is mobile-optimized with a professional design and clear navigation. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit privacy policies. WHOIS data for the domain is unavailable due to a domain naming rules violation error, which raises concerns about domain legitimacy or registration status. Overall, the website is functional and professional but would benefit from improved transparency in privacy and security policies.

C

Christian Mobey Limited

christianmobey.co.uk

53

Christian Mobey Limited is a small UK-based business with a website that provides basic company information and contact details. The company appears to operate locally in Oxfordshire, UK, with a straightforward business model focused on direct customer contact. The website is built on WordPress using the Avada theme and Elementor page builder, indicating a moderate level of digital maturity. The technical infrastructure includes common web technologies and plugins but lacks advanced analytics or marketing tools. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and policies suggests room for improvement. The WHOIS data is incomplete and indicates domain registration issues, which slightly reduces trustworthiness. Overall, the website is functional but basic, with opportunities to enhance privacy compliance and security transparency.

C

Coolfruit Logistix

coolfruitlog.com

42

Coolfruit Logistix is a South African-based international freight forwarding company specializing in high precision cold-chain management. The company offers a comprehensive suite of logistics services including air, sea, and road freight, customs brokerage, warehousing, and distribution. With 17 years of experience, they emphasize personalized and flexible logistics solutions tailored to client needs. The website presents a professional image with clear service descriptions and contact information, targeting businesses requiring specialized freight and cold-chain logistics. Technically, the website is built on WordPress using Elementor and several plugins, including a Google Analytics plugin that is currently not configured. The site is mobile-optimized and loads with moderate performance. However, it lacks some security best practices such as security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, which is positive, but the absence of WHOIS domain registration data raises concerns about domain legitimacy. No security incident response or vulnerability disclosure information is present. Overall, the security posture is moderate but could be improved with better headers and compliance documentation. The overall risk is moderate due to the missing WHOIS data and lack of privacy policies, but the business content and presentation are professional. Strategic improvements in compliance and security practices are recommended to enhance trust and reduce risk.

F

Foxes Sales & Lettings

foxes.co.uk

61

Foxes Sales & Lettings is a well-established independent estate agency operating primarily in Bournemouth, Poole, Ferndown, and surrounding Dorset and Hampshire areas. Founded in 1996, the company offers a comprehensive range of real estate services including property sales, lettings, land acquisition, new homes development, and auction services. The website reflects a mature business with a strong local market presence and a trusted reputation supported by customer testimonials and industry certifications such as ARLA Propertymark and The Property Ombudsman. The target audience includes home buyers, sellers, landlords, and tenants in the regional market.

B

Bond Precision Grinding Ltd

bondprecision.com

41

Bond Precision Grinding Ltd is a UK-based manufacturing company specializing in spring steel supply and subcontract centreless grinding services. Established in 1985, the company has grown to become a leading supplier to coil spring manufacturers in the UK, maintaining a significant stock of steel and investing in modern machinery to expand subcontract capabilities. The website reflects a professional business with clear contact information and a focused service offering. Technically, the site is built on WordPress with common plugins and modern web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible for its business domain but would benefit from improved security and compliance measures.

A

Accruity

accruity.com

51

Accruity is a specialized financial services company providing outsourced bookkeeping, back-office support, and fractional CFO strategy tailored primarily for real estate investors and service-based businesses. Their niche focus on real estate-specific accounting needs such as flip accounting, rental portfolio reporting, and construction job costing positions them as a trusted partner for clients seeking financial clarity and operational efficiency. The company has a professional online presence with clear service offerings and a client-focused approach, supported by a domain registered since 2020 with a reputable registrar. Technically, the website is built on WordPress using Elementor and common plugins, delivering a good user experience with mobile optimization and moderate performance. The site uses HTTPS and integrates Facebook Pixel for marketing analytics, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is decent with HTTPS and no exposed sensitive data, but could be improved by enabling DNSSEC and adding security headers. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices. The website is trustworthy and professional but should address privacy policy and cookie consent to enhance compliance and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security headers to strengthen security and compliance.

V

Vallset IL

vallset.no

52

Vallset IL is a Norwegian non-profit sports club established in 2006, offering football, skiing, ski jumping, and community sports activities. The website serves as an information hub for club members and local community participants, providing details on teams, events, membership, and facility rentals. The club maintains a modest but consistent online presence with a focus on community engagement and supporter involvement. Technically, the website employs modern web technologies including Laravel Livewire, Alpine.js, Tailwind CSS, and integrates Google Fonts and YouTube APIs. The site is mobile-optimized and demonstrates good performance and SEO practices. Cookie consent mechanisms are implemented in compliance with GDPR, although explicit privacy and security policies beyond cookie usage are limited. From a security perspective, the site uses HTTPS with secure session management and CSRF protection. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. The domain's WHOIS data is consistent with the club's history and business claims, supporting legitimacy and trustworthiness. Overall, Vallset IL's website is a well-maintained, secure, and user-friendly platform suitable for its community sports audience. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance its security posture and compliance.

N

Norges Friidrettsforbund

friidrett.no

54

Norges Friidrettsforbund operates as the national governing body for athletics in Norway, providing a comprehensive platform for athletes, clubs, coaches, and enthusiasts. The website offers event calendars, statistics, licensing information, national team details, and youth programs, positioning itself as a central hub for Norwegian athletics. The organization maintains partnerships with well-known sponsors and is affiliated with international athletics bodies, reinforcing its authoritative market position. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and external font and icon libraries. The site is mobile-optimized and presents a professional design, though some areas such as accessibility and SEO could be enhanced. The use of HTTPS and trusted third-party services indicates a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data due to privacy protection is typical for organizations but limits transparency. Overall, the security posture is adequate but could benefit from improvements in policy disclosures and header configurations. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response contacts to strengthen compliance and trust. These steps will improve the federation's digital resilience and user confidence.

M

Mango Event og Teknikk

friskluft.no

55

Mango Event og Teknikk is a Norwegian event service provider specializing in activities and teambuilding designed to foster collaboration and engagement. The company offers a broad range of services including meetings and event planning, technical production, interpretation technology, streaming and hybrid solutions, and concept development. Their market position appears to be that of a regional player with a strong presence in Stavanger and services offered nationwide. The website is professionally designed, content-rich, and targets businesses and organizations seeking team-building solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Google Fonts, and Google reCAPTCHA for spam protection. Hosting is via Amazon CloudFront CDN, ensuring moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and includes reCAPTCHA, but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is available, likely due to privacy protection, which is common for small businesses but limits domain trust analysis. Contact information is clearly presented, enhancing business credibility. Overall, the website presents a trustworthy and professional image with good content and technical implementation but would benefit from enhanced privacy compliance and security best practices to improve its security posture and user trust.

M

Med Kjemi AS

med-kjemi.no

51

Med Kjemi AS is a well-established Norwegian company specializing in medical and laboratory products, serving healthcare professionals and laboratories. The website is professionally designed using WordPress and includes a comprehensive product catalog and documentation. The company demonstrates compliance with GDPR through a detailed privacy policy, although cookie consent mechanisms are not evident. Technically, the site uses common WordPress plugins and libraries but relies on an outdated jQuery version, which poses potential security risks. Security posture is moderate with HTTPS enabled but lacks important security headers. No incident response or vulnerability disclosure information is published. Overall, the website reflects a credible and professional business with room for security and privacy improvements.

Fosmo & Deli AS is a Norwegian company established in 1983, specializing in supplying tooling parts and deliveries to the stamping industry. The company is positioned as a well-regarded B2B supplier within the manufacturing sector, serving businesses involved in tooling and stamping. Their website reflects a small-sized enterprise with consistent branding and a focus on their core market niche. Technically, the website is built on WordPress using common plugins such as MetaSlider and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. The absence of WHOIS data and privacy-related policies reduces trust and compliance levels. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

E

Eltera

eltera.no

66

Eltera is a Norwegian electrical services company specializing in demanding electrical installations, energy consulting, and electrical inspections. The company operates multiple local offices across Norway, serving both private and business customers. Their website demonstrates a strong market position with detailed service offerings, career opportunities, and references, supported by a parent company, ElteraGruppen. Technically, the website uses modern web technologies including React-based components, Google Tag Manager, and Cloudinary for media hosting, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection.

S

Skaugs Servicesenter AS

skaugs.no

58

Skaugs Servicesenter AS is a small, established automotive service provider located in Brumunddal, Norway, with nearly 40 years of experience in vehicle repair, EU control, and maintenance services. The company specializes in servicing all car brands with particular expertise in American vehicles and is a MECA approved workshop. Their target audience includes private vehicle owners and local businesses in the Ringsaker area. The website reflects a professional local business model focused on quality service and customer trust. Technically, the website uses modern web technologies including JavaScript ES modules, Google Fonts, and structured data (JSON-LD) for SEO enhancement. The site is mobile optimized, accessible, and well-structured, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data but lacks visible security headers and formal security or incident response policies. No vulnerabilities or tracking scripts were detected, indicating a low-risk profile. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though GDPR-specific details are basic. Overall, the website is trustworthy and professional with a solid business presence. The absence of WHOIS data due to privacy protection slightly reduces transparency but is justified for this business type. Strategic improvements in security headers and explicit security policies would enhance the security posture and trust further.

First Texas Bank operates as a regional community bank serving multiple Texas locations with a focus on personal and business banking services including lending and mortgage solutions. The website presents a professional and consistent brand image with clear navigation and a secure online banking login portal. The technical infrastructure is based on WordPress CMS with modern web technologies such as Bootstrap and jQuery, supported by caching mechanisms to optimize performance. Security posture is strong with HTTPS enforced and secure form handling, though the absence of security headers and visible privacy or cookie policies indicates room for improvement. Overall, the site is trustworthy and well-positioned for its target audience but would benefit from enhanced compliance and security transparency.

E

Everything Epos

e-epos.com

70

Everything Epos is a UK-based company specializing in EPOS (Electronic Point of Sale) systems and software, serving various industries with fast and reliable solutions. Established since 1994, the company positions itself as a trusted supplier with award-winning customer support. Their website reflects a professional and modern digital presence built on WordPress with Elementor, optimized for desktop and mobile users. The technical infrastructure includes reputable hosting via Linode and integration of common marketing and analytics tools such as Facebook Pixel and Google Tag Manager. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the website is trustworthy and business-focused, targeting UK businesses seeking EPOS solutions.

B

Baldwin Salter Ltd

baldwinsalter.co.uk

54

Baldwin Salter Ltd is a well-established small business specializing in plumbing, heating, and building maintenance services primarily serving East Kent and surrounding areas in the UK. The company targets both domestic and commercial clients and has built a strong reputation based on reliability and customer satisfaction. Their website reflects a professional service provider with a clear focus on their core offerings and local market. Technically, the website is built on WordPress using Elementor and several modern plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data supports the legitimacy of the business, with a long domain age consistent with the company's claimed experience. The website is safe for general audiences and does not contain any adult or questionable content.

S

Sacco Mann

saccomann.com

69

Sacco Mann is a UK-based specialist legal recruitment agency with over 25 years of experience connecting legal professionals with law firms and organisations. The company offers tailored recruitment services focusing on legal and intellectual property sectors, supported by a professional team and a strong repeat client base. Their website is built on the Firefish recruitment software platform using ASP.NET technology, featuring a modern and responsive design with clear navigation and good content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the overall business credibility and professionalism are high.

C

Coulon Stone Ltd

coulonstone.com

62

Coulon Stone Ltd is a well-established family-run stonemasonry business based in Buckinghamshire, UK, specializing in bespoke natural and engineered stone surfaces for residential and commercial projects. With over 35 years of expertise, the company offers a comprehensive range of services including kitchen worktops, fireplaces, bathrooms, staircases, flooring, bespoke stone projects, and commercial installations. Their market position is strong locally, supported by a high customer satisfaction rating and professional presentation. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, CookieYes for consent management, and Google Fonts. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. The use of structured data enhances search engine understanding and user experience. From a security perspective, the site employs HTTPS with good SSL configuration and a robust cookie consent mechanism. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration data aligns well with the business history, reinforcing legitimacy. Strategic recommendations include enhancing DNS security, publishing security policies, and further hardening HTTP headers to improve security posture.

G

Get Booked Up

getbookedup.com

45

Get Booked Up is a niche software provider specializing in carpet cleaning scheduling and management solutions. The website primarily serves carpet cleaning businesses by offering demo videos tailored through an embedded survey. The company has been established since 2011 and operates a WordPress-based website with integrations such as LearnDash LMS and Infusionsoft for marketing and tracking. The technical infrastructure is moderate with standard WordPress plugins and hosting inferred to be via GoDaddy. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and no visible privacy or cookie policies are published. The site does not expose sensitive data and uses embedded forms securely. Overall, the website is functional but could improve in privacy compliance and security best practices.

C

Central Asia Logistics UAB

central-asia.lt

38

Central Asia Logistics UAB is a Lithuania-based freight and logistics company established in 2011, specializing in transportation services from Western Europe to Central Asia. Their offerings include road, multimodal, and air transport, warehousing, customs, and cargo documentation services. The company emphasizes reliability, speed, and professional service, supported by a modern fleet equipped with GPS tracking and CMR insurance coverage. The website is professionally designed using WordPress and Elementor, providing clear navigation and contact options including a detailed enquiry form. Technically, the site uses modern web technologies and is mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and published security policies. Privacy compliance is limited due to absence of privacy and terms of service pages, though a cookie consent mechanism is present. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site presents a trustworthy and professional business presence with room for improvement in security and compliance documentation.

R

Rapid9 Signs

rapid9signs.com

44

Rapid9 Signs is a small, specialist signage and display printing company based in Newcastle upon Tyne, UK. The company offers a comprehensive range of services including large format digital printing, property marketing signage, retail and business signage, cut vinyl, safety and directional signage, vehicle livery, office signage, and design services. Their market position is that of a local expert providing end-to-end signage solutions with professional installation. The website is built on WordPress and uses common web technologies such as jQuery and Modernizr, with SEO optimization via Yoast plugin. The site is mobile-optimized and provides clear navigation and business contact information. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency and compliance. Overall, the website presents a professional business front but would benefit from enhanced security practices and verified domain registration.

A

Ashtonleigh Nursing Home

ashtonleigh.co.uk

47

Ashtonleigh Nursing Home is a well-established residential care facility located in Horsham, West Sussex, specializing in elderly nursing care including dementia and palliative care. Founded in 1997, it operates as a medium-sized care home with 54 beds and a strong reputation supported by numerous positive reviews and a Good rating from the Care Quality Commission (CQC). The website presents a professional and user-friendly interface, providing comprehensive information about services, facilities, and activities tailored to elderly residents. The business targets families and elderly individuals seeking compassionate and personalized care in the region. Technically, the website employs modern front-end technologies such as Bootstrap 5, jQuery, and Google Tag Manager, ensuring good mobile responsiveness and user experience. However, some security best practices like HTTP security headers and explicit security policies are not evident. Privacy compliance is basic but includes a cookie consent banner and a privacy policy page. The WHOIS data is unavailable due to domain naming rules errors, limiting domain registration trust analysis, but external trust signals and business content support legitimacy. Overall, Ashtonleigh Nursing Home demonstrates a solid market position with room for improvement in security posture and privacy transparency.

A

Allmatic

allmatic.com

46

Allmatic is an Italian company specializing in the design and manufacturing of automation products for gates and related control and safety accessories. The company emphasizes Italian engineering, quality, innovation, and sustainability. Their website reflects a medium-sized manufacturing business with a professional online presence, including product catalogs and social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and contact information suggest a legitimate business. Strategic recommendations include enhancing security headers, implementing cookie consent, and verifying domain registration details to improve trust and compliance.

J

JPN Pharma

jpnpharma.net

42

JPN Pharma Pvt. Ltd. is a well-established pharmaceutical manufacturer based in India, specializing in the production of Active Pharmaceutical Ingredients (APIs) and drug intermediates since 1990. The company has a strong market presence with exports to over 52 countries and holds multiple certifications such as CEP and DMF, indicating compliance with international pharmaceutical standards. Their website reflects a professional and consistent brand image, targeting pharmaceutical companies and healthcare industry professionals globally. Technically, the website is built on WordPress using modern page builders like Elementor and WPBakery, with SEO optimization via Yoast SEO and integration of Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts trustworthiness despite the professional presentation. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, including emails, phone numbers, and physical addresses for multiple plants. Overall, JPN Pharma demonstrates a solid business and technical foundation but should address domain registration transparency and privacy compliance to enhance trust and security posture.

K

Kuber Art With Soul

kuberhandicraft.com

44

Kuber Art With Soul is a well-established handicrafts wholesaler, manufacturer, and supplier based in Jaipur, India, with a domain age of over 23 years supporting its market presence. The company specializes in intricately crafted art pieces made from stone, marble, wood, metal, and silver, targeting wholesalers, art collectors, and home decor buyers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Slider Revolution, and various plugins enhancing user experience and mobile responsiveness. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site demonstrates high business credibility but requires improvements in privacy and security best practices.

R

R.C.T Construction Limited

rctconstruction.co.uk

51

RCT Construction Ltd. is a UK-based property development, investment, and construction company established in 1990. The company targets property investors and clients seeking development and construction services. The website presents a professional image with clear contact information and a focus on property-related services. Technically, the website is built on WordPress using common plugins such as LayerSlider and Contact Form 7, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. The WHOIS data is unavailable due to domain naming rules violation, which raises concerns about domain registration legitimacy, although the website content appears consistent with a legitimate business. Overall, the site is functional and professional but would benefit from improved security practices and clearer domain registration information.

A

ARS Forged

americanrim.com

44

ARS Forged is a specialized manufacturer and wholesaler of multi-piece spun-forged wheel rims, positioning itself as the world’s largest dedicated 3-piece rim manufacturer. The company targets automotive professionals and enthusiasts in luxury, exotic, SUV, racing, and hot rod vehicle segments. Their business model focuses on in-house manufacturing and maintaining a comprehensive inventory enabling same-day shipping. The website reflects a medium-sized manufacturing business with a solid market position and a history dating back to 1991. Technically, the website is built on a modern WordPress and WooCommerce stack, leveraging multiple plugins for e-commerce, product visualization, and analytics. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting is provided by GoDaddy, with no DNSSEC enabled. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The WHOIS data presents inconsistencies, notably a future domain creation date, which undermines domain trustworthiness. No privacy or cookie policies were found, indicating compliance gaps. Analytics and tracking are moderately implemented via Jetpack and other services. Overall, the site is professional and trustworthy in content and design but requires improvements in privacy compliance, security hardening, and domain registration transparency to enhance its security posture and business credibility.

N

National Council of Juvenile and Family Court Judges

ncjfcj.org

55

The National Council of Juvenile and Family Court Judges (NCJFCJ) is a well-established non-profit organization focused on improving juvenile and family court systems across the United States. The organization provides education, training, research, and policy development services aimed at professionals working in juvenile justice, family law, and domestic violence cases. Their market position is strong as a leader and trusted source in this specialized legal and social services sector. The website reflects a mature digital presence with comprehensive resources, events, and partnerships showcased clearly. Technically, the website is built on WordPress using modern tools such as Elementor, Google Tag Manager, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Security posture is good with HTTPS enforced and some security best practices observed, though explicit security headers could be improved. Privacy compliance is moderate, with a privacy policy present but lacking a visible cookie consent mechanism. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. The website is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response policies to further strengthen trust and compliance.

B

Boston Market

bostonmarket.com

63

Boston Market is a well-known restaurant brand specializing in rotisserie chicken and related meal offerings. The website presents a professional and visually appealing interface built using the Framer platform, incorporating modern web fonts and tracking technologies such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy or privacy protection status. Security posture is weak due to missing security headers and lack of explicit privacy and cookie policies. Overall, the site is functional and targets a general audience interested in food services, but improvements in transparency and security are recommended.

The City of Peabody official website serves as a comprehensive digital portal for municipal services, public information, and community engagement for residents and businesses in Peabody, Massachusetts. It provides access to payments, permits, property searches, city budget details, job openings, trash and recycling information, and official news updates. The site targets local citizens, government employees, and visitors, positioning itself as a trusted source of city governance and services. The business model is that of a government entity focused on transparency, accessibility, and public service delivery. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, and Google Fonts, ensuring a responsive and accessible user experience. It integrates search functionality and accessibility tools such as ReciteMe. The site is mobile optimized and includes SEO best practices, although some security headers are missing. Analytics are implemented via Google Analytics and Google Tag Manager, with moderate user tracking. From a security perspective, the site uses HTTPS and includes an exit modal warning users when navigating to certain external payment or service domains, enhancing user awareness. However, the absence of key security headers and a formal security policy or incident response page indicates room for improvement. WHOIS data is incomplete, but the .gov domain status and consistent official content support legitimacy. Privacy compliance is basic, with no explicit cookie consent mechanism detected. Overall, the website is a well-structured, professional municipal portal with good content quality and user experience. Strategic recommendations include implementing security headers, publishing a security policy, adding cookie consent for GDPR compliance, and maintaining regular security audits to enhance trust and compliance.