Security Directory

Wisepress Ltd. operates as an online retailer specializing in medical and veterinary books, serving medical professionals worldwide. The company has a longstanding presence in the market, participating in medical conferences across the UK and Europe. Their website offers a comprehensive e-commerce platform with categorized medical literature, corporate sales, and voucher options. The target audience includes healthcare professionals, students, and veterinary practitioners. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Analytics and Facebook SDK for tracking, and uses HTTPS to secure communications. Mobile optimization and accessibility are basic but functional. Security posture is moderate with HTTPS enabled but lacks explicit security headers and public security policies. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security practices and clearer business contact information.

F

First Ram Ltd

firstram.co.uk

53

First Ram Ltd operates as a corporate credit insurance brokerage based in Leeds, UK, focusing on providing credit insurance solutions to businesses. The company targets businesses seeking to manage credit risk through insurance products. The website is built on the Webflow platform, utilizing modern web fonts and Font Awesome icons, indicating a moderate level of digital maturity. However, the technical implementation lacks advanced security configurations and privacy compliance features. The absence of WHOIS data due to domain query failure raises concerns about domain legitimacy and ownership transparency. Overall, the security posture is weak with no detected security headers or privacy policies, and contact information is not explicitly provided on the site. Strategic improvements in security, compliance, and transparency are recommended to enhance trust and professionalism.

C

Clare Florist

clareflorist.co.uk

52

Clare Florist is a UK-based family-owned florist business operating since 1996, specializing in next day flower delivery across the UK. The company offers a wide range of hand-selected flower bouquets, gift vouchers, and subscription services, targeting consumers seeking quality floral gifts for various occasions. The website is professionally designed with clear navigation, mobile optimization, and rich content that supports e-commerce transactions. Technically, the site uses modern JavaScript libraries, tracking tools, and analytics services, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, but WHOIS data is unavailable due to a domain registration anomaly, which slightly reduces trust. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

P

Peck Trading Ltd

pecktrading.co.uk

54

Peck Trading Ltd operates a professional B2B e-commerce website specializing in the supply of cleaning, hygiene, engineering, PPE, and safety products primarily targeting UK businesses. The company emphasizes service quality and next day order fulfillment, positioning itself as a reliable supplier in its sector. The website is well-structured with clear navigation and a modern design, leveraging popular frontend technologies such as jQuery, Bootstrap, and Font Awesome, alongside Google Analytics for user tracking. Mobile optimization is good, and the site uses HTTPS to secure communications. From a security perspective, the site employs HTTPS but lacks visible security headers such as Content Security Policy or HSTS, which could enhance protection. No privacy or terms of service pages were detected, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in compliance and transparency. The WHOIS lookup failed due to a domain naming rules violation, which is unusual and reduces trust in domain registration legitimacy, though the website content itself appears professional and legitimate. Overall, the website presents a moderate security posture with good business credibility and technical implementation. The absence of privacy policies and security headers, combined with the WHOIS inconsistency, suggests the need for enhanced compliance and domain registration verification. Strategic improvements in these areas would strengthen trust and security assurance for users and partners.

I

Imagesound Ltd

openearmusic.com

64

Imagesound Ltd is a UK-based company specializing in in-store music, background music, digital signage, creative media, and audiovisual installation services. They serve a global clientele across 166 countries, focusing on immersive brand experiences through music and related technologies. The company emphasizes a personal, in-house production approach and is recognized with trust indicators such as the Queens Award and testimonials from major brands like Fred Perry and Domino's. Technically, the website is built on ASP.NET with modern frontend technologies including Bootstrap, Swiper.js, and GSAP, delivering a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and a published security policy are absent. WHOIS data is unavailable, which slightly impacts domain legitimacy trust. Overall, the website is professional, secure, and compliant with privacy regulations, serving a medium-sized business in the media and retail sectors.

D

DERMAGUARD CZ spol. s.r.o.

dermaguard.com

56

DermaGuard CZ spol. s.r.o. operates a website offering skin protection creams designed for family and workplace use, positioning itself as a trusted provider in the healthcare sector. The company emphasizes product effectiveness against various skin irritants and promotes wholesale distribution opportunities. The website is professionally designed using modern web technologies such as UIkit and jQuery, with mobile responsiveness and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies and security headers. WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and contact information appear consistent with a Czech Republic-based business. Overall, the site presents a moderate risk profile with room for improvement in compliance and security transparency.

M

Minters Ltd

mintersofdeal.co.uk

41

Minters Ltd is a small, established removals and storage service provider based in Kent, United Kingdom, with a history dating back to 1920. The company offers services including removals, packing, clearance, storage, and shredding, targeting local residents and businesses. The website reflects a professional and consistent brand image, with good content quality and clear service offerings. Technically, the site uses modern frontend technologies such as jQuery, Bootstrap, and Font Awesome, providing a responsive and user-friendly experience. However, the absence of visible security headers and privacy policies indicates room for improvement in security and compliance. The WHOIS lookup failed due to domain registration issues, suggesting the domain www.mintersltd.co.uk may be a subdomain or misconfigured, which raises concerns about domain legitimacy despite the business's longstanding presence. Overall, the website is functional and informative but requires enhancements in security posture and privacy compliance to strengthen trust and regulatory adherence.

T

Thyson Technology Limited

thyson.com

51

Thyson Technology Limited, operating under the Bilfinger nZero brand, is a UK-based company specializing in analytical engineering services focused on energy security, decarbonisation, and net zero initiatives. With a history of over 40 years and thousands of projects completed, the company serves energy producers, transporters, storage facilities, and industrial users by integrating advanced measurement and safety technologies. Their offerings include systems integration, biomethane solutions, emissions monitoring, and service and maintenance, positioning them as a trusted player in the energy sector's transition to cleaner energy sources. Technically, the website is built on a WordPress platform using modern technologies such as jQuery, Modernizr, Font Awesome, and Google Tag Manager, complemented by a cookie consent mechanism via Cookiebot. The site demonstrates good SEO practices, mobile optimization, and accessibility features, providing a solid digital presence. However, some technical improvements are recommended, including enhanced security headers and a published security policy. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and business information support legitimacy. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, with an overall AI score of 78. Strategic recommendations include improving WHOIS transparency, publishing security policies, and enhancing security headers to strengthen trust and compliance.

H

Housing Authority of the City of Pittsburgh

hacp.org

57

The Housing Authority of the City of Pittsburgh (HACP) operates as a government agency providing property management and real estate services primarily focused on affordable housing in Pittsburgh. The website serves residents, landlords, and vendors with information on housing options, eligibility, landlord resources, and emergency housing services. It holds a strong market position as the flagship housing authority in the city, with a domain established since 1997, reflecting a mature and stable organization. The business model is government-oriented, focusing on public service and community support.

Comtec Translations is a UK-based translation and localisation service provider with over 40 years of experience. The company uniquely blends AI-powered machine translation with expert human linguists to deliver high-quality multilingual content tailored to client brand voice and terminology. Recognized with awards and certifications such as B Corp and ISO 27001, Comtec positions itself as a trusted partner for organizations seeking efficient and culturally accurate translation solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a professional and user-friendly experience. Security posture is strong with HTTPS, cookie consent, and ISO 27001 compliance, though some security headers could be improved. Overall, the site reflects a mature, credible business with a solid digital presence.

D

DanD Precast Ltd

dandprecast.co.uk

57

DanD Precast Ltd is a small, family-run manufacturing company based in the United Kingdom specializing in high-quality precast concrete and reconstructed stone products. With over 30 years of craftsmanship and compliance with British Standard EN 9001, the company serves construction professionals and customers seeking bespoke and standard precast solutions. Their website reflects a professional and consistent brand image, providing clear contact information, a gallery of projects, and testimonials to build trust. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and integrates Google Analytics and Microsoft Clarity for user insights. Security measures include HTTPS, Google reCAPTCHA on forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of a privacy policy and terms of service pages indicates gaps in privacy compliance. Overall, the website is well-structured, performant, and trustworthy, but could improve in privacy and security transparency.

ASECCA is a technology service provider specializing in IT asset lifecycle management, offering a managed platform and services that provide full visibility, control, and sustainability for device estates. Their business model includes pay-as-you-go and subscription-based recycling and circularity services, targeting organizations seeking to optimize device reuse, reduce costs, and minimize environmental impact. The website demonstrates a professional design with clear service descriptions and user-friendly navigation, including options to schedule demos and product tours. Technically, the site employs modern frontend technologies such as Tailwind CSS, jQuery, and integrates analytics and chat support tools. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to query quota limits, limiting domain registration transparency. Overall, ASECCA presents as a credible small technology business with a focus on sustainability and IT asset management.

S

Seymour Kitchens

seymourkitchens.co.uk

42

Seymour Kitchens is a well-established, family-run bespoke kitchen manufacturer and supplier based in Guildford, Surrey. With over 30 years of experience, the company offers a range of traditional and contemporary kitchen designs, emphasizing craftsmanship and client-focused service. Their market position is strong within the local bespoke kitchen sector, supported by positive customer testimonials and an active social media presence. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled, though improvements in security headers and privacy compliance are recommended. Overall, the business presents a credible and professional online presence with room for enhanced privacy and security practices.

Baby Bottles Wholesale Ltd is a well-established Midlands-based wholesaler specializing in licensed drinks including beers, ciders, wines, spirits, soft drinks, and snacks. With over 49 years of experience, the company serves a broad range of on-trade outlets such as pubs, clubs, and free houses primarily in the Midlands region. The business emphasizes quality service, flexible delivery, and a wide product portfolio, positioning itself as a leading regional distributor. The website reflects a professional and comprehensive digital presence with clear navigation and detailed product information. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery and GSAP, and implements HTTPS with cookie consent mechanisms, though some security headers are missing. The security posture is solid but could be improved by adding explicit security policies and incident response information. WHOIS data for the queried domain variant is unavailable due to an invalid domain format; however, the actual domain is active and consistent with the business claims. Overall, the website is mature, trustworthy, and well-suited for its target audience, with moderate technical and privacy compliance maturity.

A

Acre Accountancy Limited

acreaccountancy.co.uk

68

Acre Accountancy Limited is a small, independent accounting firm based in Hereford, UK, established in 2010. The company offers a broad range of financial services including audit, accounts, taxation, business advisory, and compliance services. Their market position is that of a trusted local provider emphasizing personal, director-led service and cost-effective financial solutions. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the website uses a moderately modern technology stack including jQuery 3.6.0 and Bootstrap 3.0, hosted on a platform powered by totalSOLUTION from yourfirmonline.co.uk. The site is mobile responsive and accessible, with good SEO practices and clear navigation. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS as indicated by the canonical URL, but lacks visible security headers and explicit cookie consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. WHOIS data could not be retrieved due to an invalid query for the www subdomain, which slightly reduces trustworthiness. The site shows trust indicators such as ACCA certification and professional contact details. Overall, the website is safe, professional, and credible with minor improvements recommended in security headers, privacy compliance, and WHOIS data verification to enhance trust and security posture.

A

Atkinson Saul Fairholm Ltd

atkinsonsaulfairholm.co.uk

70

Atkinson Saul Fairholm Ltd is a small, established Chartered Accountants firm based in Lincoln, UK, providing a range of accounting, taxation, and business advisory services primarily to family businesses and individuals in the region. The firm emphasizes a personal approach and cost-effective solutions, with over twenty years of operation. Their key services include tax planning, business structures, compliance, bookkeeping, payroll, and advisory services. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with a responsive design and structured data markup for SEO and business information. While performance is moderate, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The WHOIS data is unavailable due to a domain naming rules violation error, which is unusual and impacts domain trustworthiness from a registration perspective. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie policy present but lacking active consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy features to improve compliance and user trust.

W

Wallace Crooke

wallacecrooke.co.uk

68

Wallace Crooke is a small, professional firm of Chartered Accountants and Business Advisors based in the West Midlands, UK. The company offers a broad range of financial services including business start-up support, compliance, consultancy, investments, pensions, taxation, and business advisory services. Their market position is that of a trusted regional accounting firm with a clear focus on helping businesses and individuals manage their financial and tax affairs effectively. The website content is well-structured, professional, and targeted at local businesses and individuals seeking accounting and advisory services. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, Google Analytics, and Typekit fonts. The site is mobile optimized with good navigation and accessibility features, though some accessibility aspects are basic. Performance is moderate, and SEO practices appear adequate with proper meta tags and canonical links. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS as implied by canonical URLs, but no explicit security headers were detected in the provided HTML content. There is no visible incident response or security policy contact information, and no vulnerability disclosure or security.txt file was found. The WHOIS data is unavailable and indicates domain registration issues, which is a concern for domain legitimacy, but the website content and business information appear consistent and professional. Overall, the security posture is moderate but could be improved with better header configurations and explicit security policies. The overall risk assessment suggests a generally trustworthy and professional business website with some technical and security improvements recommended. Strategic recommendations include implementing security headers, enhancing privacy and incident response disclosures, and resolving domain registration i…

BSP TEX is a well-established UK-based manufacturer specializing in hydraulic piling hammers, ground improvement equipment, and road maintenance machinery with over 117 years of industry experience. The company operates under the TEX GROUP umbrella and offers a broad range of products including piling rigs, rapid impact compactors, road machinery, custom trailers, and stainless steel enclosures. Their market position is strong, supported by certifications such as ISO 27001 and Cyber Essentials Plus, indicating a commitment to quality and security. Technically, the website employs modern web technologies including jQuery, Bootstrap, FontAwesome, and Slick Carousel, delivering a responsive and user-friendly experience. The site is well-structured with clear navigation, comprehensive content, and active news updates, reflecting a mature digital presence. However, some security best practices such as explicit security headers and vulnerability disclosure mechanisms are absent. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, aligning with GDPR compliance. The absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, though the business information and certifications mitigate this concern. No critical vulnerabilities or security issues were detected in the content. Overall, BSP TEX presents a professional and trustworthy online presence with solid business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would further enhance trust and security posture.

H

HC Shipping & Chartering Ltd.

hcshipping.com

50

HC Shipping & Chartering Ltd. is a specialized dry cargo shipbroking company with a strong heritage dating back to 1997, originally partnered with Clarksons PLC and now part of the Casper Group since 2021. The company offers services in short sea and deep sea chartering along with market reports, targeting clients in the maritime shipping industry. Their market position is well established in Europe with growing global reach. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no detailed GDPR statements or terms of service. Overall, the website reflects a credible and professional business with room for improvement in security and compliance transparency.

M

M Cubed Limited

m-cubed.org

67

M Cubed Limited operates as a chartered accountancy firm based in Stoughton, Leicestershire, UK. The company offers a broad range of accounting and consultancy services including taxation, bookkeeping, payroll, business start-up advice, and financial planning. With over 70 years of combined staff experience and professional qualifications (ICAEW/ACCA), M Cubed positions itself as a leading local accountancy firm focused on personalized client service and expertise. The website reflects a professional and trustworthy business with clear contact information and a comprehensive service offering tailored to local businesses and individuals. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and a proprietary clientzone framework. The site is mobile responsive, accessible, and SEO optimized with clear navigation and structured content. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing, which could be improved to enhance user trust and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The WHOIS data is incomplete and malformed, limiting domain ownership verification, but the website content and contact details strongly indicate a legitimate and professional business. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, M Cubed Limited presents a solid business presence with good technical implementation and moderate security posture. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would further strengthen trust and compliance.

V

Valley City State University

vcsu.edu

60

Valley City State University (VCSU) is a public higher education institution located in Valley City, North Dakota, with a rich history dating back to 1890. The university offers a broad range of academic programs including undergraduate, graduate, online, and continuing education, serving a diverse student body. VCSU positions itself as a student-focused, learning-centered institution within the North Dakota University System, emphasizing immersive experiences and career readiness. The website reflects this mission with comprehensive academic information, student life resources, and community engagement content. Technically, the website is built on WordPress 6.9.4 and leverages modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Google Analytics. The site is mobile optimized, accessible, and performs moderately well. It integrates multiple external services for analytics, advertising, and accessibility enhancements. However, some security best practices such as security headers and cookie consent mechanisms are not fully implemented. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. There are no visible vulnerabilities or exposed sensitive data in the HTML content. The absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in security transparency and compliance. The WHOIS data query for the subdomain 'www.vcsu.edu' failed, but this is likely due to querying a subdomain rather than the root domain 'vcsu.edu'. This does not significantly detract from the legitimacy of the institution but slightly reduces trust in domain registration transparency. Overall, VCSU's website is professional, content-rich, and trustworthy, serving its educational mission effectively. Strategic recommendations include implementing cookie consent for privacy compliance, adding security headers, publishing security and incident response polici…

R

Record Electrical Associates Limited

reauk.com

61

Record Electrical Associates Limited operates as a specialized manufacturer and supplier of analogue electrical instruments and meters, serving customers primarily in the UK and internationally. The company emphasizes quality and precision, manufacturing and calibrating instruments in-house to ISO 9001:2015 standards and holding ATEX certification. The REA Group also includes subsidiaries Townson & Mercer and Benchmark Instruments, expanding its reach into laboratory manufacturing and marketing. The website reflects a professional and well-structured digital presence with clear business information and contact details. Technically, the website employs a modern technology stack including Google Analytics, Google reCAPTCHA, jQuery, and GSAP for animations, alongside a proprietary CMS named Web Wizard 3. The site is mobile-optimized with good SEO practices and accessibility features, though some improvements in security headers could enhance the security posture. HTTPS is enforced, and cookie consent mechanisms are implemented, supporting GDPR compliance. From a security perspective, the site demonstrates good baseline practices such as HTTPS and CAPTCHA usage but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the analysis. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and trustworthiness, despite the professional appearance and certifications presented on the site. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, but the absence of WHOIS data and security policy details suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust.

M

Mayer Brown Ltd

mayerbrown.co.uk

56

Mayer Brown Ltd is a well-established UK consultancy specializing in transport planning, infrastructure design, and environmental assessment. Founded in 1996, the company serves a broad professional audience including town planners, developers, builders, and landowners. Their market position is strong, supported by ISO certifications and a portfolio of client testimonials. The website reflects a professional and trustworthy business with comprehensive service offerings and clear contact channels. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is good, with a clear privacy policy and cookie consent. Overall, the website is well-designed, user-friendly, and trustworthy, supporting Mayer Brown's business credibility effectively.

Custom Profiles Ltd is a UK-based leading independent supplier and stockholder of aluminium extrusions, serving manufacturing industries since 2005. They offer a comprehensive range of services including supply, fabrication, finishing, and stockholding of aluminium profiles, targeting customers across the UK, Europe, and worldwide. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, and integrates Google Analytics and Google reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit incident response or security policy disclosures. WHOIS data is missing, raising concerns about domain registration legitimacy, which impacts overall trust. Contact information and social media presence are comprehensive, supporting business credibility. Overall, the website is functional, secure, and business-focused but would benefit from improved privacy compliance and domain registration transparency.

I.S. Sundries operates as a UK-based wholesale supplier specializing in florist supplies, including floral foam, funeral tributes, flower food, and floristry tools. The company targets professional florists and wholesale buyers, positioning itself as a reliable trade-only supplier with next day delivery. The website is built on the BigCommerce platform, leveraging modern web technologies and integrations such as Google Analytics 4, Klaviyo for marketing, and Freshchat for customer support. The technical infrastructure is robust, with Cloudflare providing DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced, consent management for cookies, and no visible vulnerabilities. Privacy policies are present and GDPR compliant, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature e-commerce presence with good business credibility and technical implementation.

V

Verve Group

vervegroup.com.au

68

Verve Group is a small Australian financial services firm specializing in financial planning, tax advice, accounting, and business support, operating primarily in Adelaide and Alice Springs. The company positions itself as a warm, approachable advisor helping individuals and businesses achieve financial freedom and manage their money effectively. Their website reflects a professional and consistent brand image with clear service offerings and client engagement pathways. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, supported by analytics tools such as Google Tag Manager and Microsoft Clarity. Hosting is managed via Wix DNS services, indicating a hybrid infrastructure. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. WHOIS data aligns well with the business claims, showing a legitimate and consistent domain registration. Overall, the website is trustworthy, well-structured, and suitable for its target audience.

Shimano is a globally recognized manufacturing company specializing in advanced manufacturing technologies and craftsmanship, as reflected on their official corporate website. The site provides corporate information, investor relations, recruitment details, and social activities, targeting a general audience including investors, potential employees, and partners. The website demonstrates a professional and consistent brand presence with good content quality and navigation. Technically, the site employs modern web technologies including jQuery 3.6.0, Google Tag Manager, and Google Consent Mode for analytics and privacy compliance. The site is mobile optimized and shows good SEO practices. However, there is no explicit CMS or hosting provider information detected. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces trust slightly but the corporate branding and content strongly support legitimacy. Overall, the website is a well-maintained corporate portal with moderate technical sophistication and basic privacy compliance. Strategic improvements in security headers, transparency of security policies, and WHOIS data availability would enhance trust and security posture.

E

Engineering Factory Supplies

efsltd.co.uk

45

Engineering Factory Supplies (EFS) is a UK-based industrial and commercial product supplier founded in 1985. The company offers a broad range of products including engineering supplies, hand and power tools, workwear and PPE, janitorial supplies, and fixings and fasteners. Positioned as one of the region's largest independent suppliers, EFS targets industrial and commercial customers primarily in manufacturing sectors. The website is built on WordPress with a moderate technical infrastructure, including jQuery and a custom theme, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

A

AFL Telecommunications LLC

aflglobal.co.uk

71

AFL Telecommunications LLC is a large, established company specializing in fiber optic cable, transmission and substation accessories, outside plant equipment, connectors, fusion splicers, test and inspection equipment, and training services. It operates as a subsidiary of Fujikura Ltd., a recognized parent company. The website targets telecommunications professionals, data center operators, and utility companies, offering a comprehensive portfolio of products and services. The digital infrastructure is modern, leveraging Next.js and Sitecore CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and privacy consent mechanisms are recommended. The WHOIS data is missing, which raises some concerns, but the professional presentation and consistent branding support the site's legitimacy. Overall, the site is trustworthy, well-designed, and serves its business audience effectively.

D

Dar Al-Handasah

dar.com

72

Dar Al-Handasah is a leading international multidisciplinary consulting organization specializing in engineering, architecture, planning, environment, project management, and economics. The company serves a broad range of markets including transportation, energy, telecommunications, and heavy industry, positioning itself as a key player in infrastructure and consulting services globally. Their website reflects a professional and comprehensive presentation of their services and expertise, targeting business and government clients seeking high-level consulting solutions. Technically, the website employs modern JavaScript libraries such as jQuery and Video.js, integrates Google Analytics with a robust cookie consent mechanism, and demonstrates good mobile optimization and SEO practices. However, there is no explicit CMS or hosting provider identified, and some accessibility features could be improved. The site is well-structured with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in/out controls, disabling analytics if consent is denied. However, no security headers were detected in the provided data, and there is no published security policy or incident response information. The absence of WHOIS data raises some concerns about domain registration transparency, although the website content and branding suggest legitimacy. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a solid business and technical profile with moderate security maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance. The risk level is moderate with no critical issues detected.

The American Society of Radiologic Technologists (ASRT) is a leading professional association dedicated to advancing the medical imaging and radiation therapy professions. The organization offers a comprehensive suite of services including continuing education credits, advocacy, research publications, and career resources tailored to radiologic technologists, educators, students, and related professionals. ASRT maintains a strong market position as a trusted authority and resource within the healthcare sector, particularly in radiologic technology. The website reflects a professional and well-branded digital presence, supporting its mission to enhance patient care and safety through education and advocacy. Technically, the ASRT website is built on the Telerik Sitefinity CMS platform, leveraging modern JavaScript libraries such as jQuery and frameworks like Foundation for responsive design. The site integrates multiple third-party analytics and marketing tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, and LinkedIn Insight Tag, indicating a mature digital marketing and analytics infrastructure. Hosting appears to utilize Cloudfront and Azure Edge CDNs, contributing to moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and employs secure authentication mechanisms via OIDC. However, some security headers such as Content-Security-Policy and X-Frame-Options are not explicitly present, representing an area for improvement. The absence of a cookie consent mechanism may impact GDPR compliance, although a comprehensive privacy policy is available. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, ASRT demonstrates a high level of professionalism, trustworthiness, and digital maturity. The domain WHOIS data is privacy protected, which is justified for this type of organization. Strategic recommendations include enhancing security headers, implementing cookie co…

S

SS Motors (Fuels) Ltd

ss-motors.co.uk

58

SS Motors (Fuels) Ltd is a small, family-owned independent heating oil supplier operating since 1966, serving regions in Lincolnshire, Cambridgeshire, Suffolk, and Norfolk in the UK. The company offers a range of premium fuel products, boiler servicing and repairs, tank and boiler replacement services, and fuel security solutions. Their market position is that of a trusted local supplier with a strong reputation for quality and service. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting domestic and commercial heating oil customers. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Google reCAPTCHA for form security. It is mobile responsive and implements cookie consent mechanisms, indicating a reasonable level of digital maturity. However, no CMS or hosting provider details are evident, and some security best practices such as security headers are missing. From a security perspective, the site uses HTTPS and protects forms with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy. Despite this, the website content and business information appear consistent and trustworthy. Overall, the website scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

B

Bents Unternehmensgruppe

bents.de

46

Bents Unternehmensgruppe is a well-established German company specializing in office supplies, IT infrastructure, and related services. With over 60 years of experience and multiple physical locations, it serves a broad B2B customer base with a comprehensive portfolio including IT consulting, cloud services, and paper output management. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options. Technically, it uses WordPress CMS with modern JavaScript libraries and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business.

I

Intelligence College in Europe

intelligence-college-europe.org

43

The Intelligence College in Europe (ICE) operates as a non-profit intergovernmental academic platform focused on advancing intelligence and security studies across European member states. It organizes academic conferences, seminars, and outreach activities to foster collaboration and scholarship in intelligence disciplines. The 2026 Academic Conference will be hosted by the University of the Bundeswehr in Munich under the German Presidency, emphasizing the nexus between science and intelligence in a rapidly changing geopolitical and technological landscape. The website is professionally designed using WordPress and Elementor, providing clear and relevant content targeted at academics and intelligence professionals. Contact information is provided via official academic email addresses, reinforcing credibility. However, the site lacks explicit cookie consent mechanisms and detailed privacy policy disclosures, which are areas for improvement in privacy compliance. WHOIS data is unavailable due to privacy protection, but domain expiry information indicates active registration until late 2025.

P

Pair Networks, Inc.

pairdomains.com

58

Pair Domains is a domain registration service operated by Pair Networks, Inc., offering transparent pricing and essential domain services such as DNS, web and email forwarding, and Whois privacy. The company targets web developers and domain registrants seeking reliable and fairly priced domain registration solutions. The website is professionally designed, mobile optimized, and provides clear navigation and trust signals including customer testimonials and ICANN accreditation logos. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Fonts, delivering moderate performance and good SEO practices. Security posture is adequate with HTTPS implied and secure forms, but lacks explicit security headers and cookie consent mechanisms. The WHOIS data for the domain www.pairdomains.com is missing or unavailable, which is unusual for an ICANN accredited registrar and lowers the domain's trustworthiness. Overall, the site is safe, professional, and trustworthy, but the WHOIS inconsistency warrants further investigation.

Elternverein Merenschwand is a small, non-profit community organization dedicated to supporting parents and children in the Merenschwand area of Switzerland. The website serves as an informational hub for community events, educational talks, and parent resources, emphasizing family engagement and local participation. The organization positions itself as a trusted local entity with a focus on community cohesion and family support services. Technically, the website is built on the ClubDesk CMS platform, utilizing modern JavaScript libraries such as jQuery, Owl Carousel, and Featherlight for interactive features. The site is mobile-optimized and includes accessibility considerations, though these could be enhanced further. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security policies and contact transparency are recommended.

G

Globe Trade Centre

gtcgroup.com

69

Globe Trade Centre (GTC) is a leading real estate investor and developer focused on commercial office and retail properties in Central and Eastern Europe (CEE) and South Eastern Europe (SEE). The company emphasizes sustainable business practices and ESG initiatives, targeting investors, tenants, and partners in the real estate sector. The website reflects a mature digital presence with structured investor relations, portfolio showcases, and news updates. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and is built on the Sitecore CMS platform, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration issues, though the professional website content suggests legitimacy. Overall, the site scores well on content quality and privacy compliance but should improve transparency on security policies and domain registration verification.

I

International Sava River Basin Commission

savacommission.org

47

The International Sava River Basin Commission operates as an intergovernmental organization dedicated to the sustainable management and development of the Sava River Basin. It provides a platform for cooperation among basin countries focusing on water management, navigation, flood protection, sediment management, and environmental preservation. The website reflects a professional and authoritative presence with comprehensive content and official documentation supporting its mandate. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Slick Carousel, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile optimized and exhibits good performance and SEO practices. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure login forms but lacks important security headers and published security policies such as privacy, cookie, and incident response information. The absence of WHOIS data reduces domain trust verification, though the website content and contact details support legitimacy. Overall, the security posture is moderate with recommendations to enhance compliance and transparency. The overall risk assessment is low to moderate, with strategic recommendations focusing on publishing privacy and cookie policies, implementing security headers, adding vulnerability disclosure mechanisms, and improving WHOIS transparency to strengthen trust and compliance.

E

Examples.com

examples.com

59

Examples.com is an educational website offering a wide range of free interactive resources, including guides, lessons, practice tests for AP exams, and various online calculators and converters. The site targets teachers and students seeking comprehensive educational materials across subjects such as English, Maths, Science, and more. The business model focuses on providing free educational content to support learning and exam preparation, positioning itself as a valuable resource in the education sector. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Owl Carousel, MathJax, and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, with clear navigation and structured content. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and structure appear professional and trustworthy. Overall, Examples.com presents a solid educational platform with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance its trustworthiness and compliance posture.

F

Farmakoterapie

farmakoterapie.cz

51

Farmakoterapie.cz is a specialized Czech online medical journal and educational platform targeting healthcare professionals. It offers a wide range of clinical articles, case studies, video content, podcasts, and e-books primarily focused on pharmacotherapy and related medical fields. The site maintains partnerships with major pharmaceutical companies, enhancing its credibility and market position within the Czech healthcare sector. The content is professional, relevant, and designed to support medical education and clinical practice. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, some improvements in accessibility and SEO could be considered. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is no visible cookie consent mechanism, which could be enhanced to improve GDPR compliance. The absence of a security.txt or vulnerability disclosure policy suggests room for improvement in transparency and incident response readiness. Overall, Farmakoterapie.cz presents a trustworthy and professional platform for its niche audience. The lack of WHOIS data limits domain ownership transparency but does not detract from the site's legitimacy given its content quality and industry partnerships. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance mechanisms.

B

benevol Schweiz

dossier-freiwillig-engagiert.ch

49

The website 'Dossier freiwillig engagiert' is a Swiss non-profit digital platform managed by benevol Schweiz that recognizes and documents voluntary and unpaid engagement. It serves volunteers and organizations by providing a national quality label and a digital dossier to showcase volunteer experience and competencies. The platform is positioned as a recognized resource within Switzerland's voluntary sector, supported by reputable partners such as benevol Schweiz and SAJV. The site is professionally designed, multilingual, and provides clear navigation and relevant content tailored to its audience. Technically, the website employs modern JavaScript libraries including jQuery and Numeral.js, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No CMS or hosting provider details are explicitly detected. The site uses external scripts responsibly and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerability disclosure or security.txt files are present. The WHOIS data aligns well with the website's claims, showing consistent registrant information and domain legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for improvement in security policy transparency and technical security headers. The business credibility is high due to clear contact information, partner endorsements, and professional presentation. The risk level is low, and the site is suitable for its intended audience without any adult or questionable content.

M

mehr.wert.aarau.

mehrwert-aarau.ch

53

mehr.wert.aarau. is a regional educational network platform based in Aarau, Switzerland, focused on fostering collaboration between education and the local economy. The website serves as an informational hub promoting vocational training, lifelong learning, and addressing workforce challenges through projects and events. The organization positions itself as a non-profit entity facilitating knowledge exchange and regional development. Technically, the website is built on Joomla CMS with Bootstrap framework, ensuring a modern and responsive design. The site is HTTPS secured and uses common web technologies such as jQuery and FontAwesome. However, it lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. No forms collecting personal data are present on the homepage, reducing immediate privacy risks. The security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

A

Aarau Impact

aarauimpact.ch

54

Aarau Impact is a recently established (2023) public-private partnership business ecosystem focused on fostering innovation and startups in Aarau, Switzerland. The website serves as an information portal for community members, entrepreneurs, and stakeholders interested in innovation programs and networking events. The organization is supported by the City of Aarau and local business promotion entities, positioning it as a key regional innovation hub. Technically, the website is built on Joomla CMS with Bootstrap and modern frontend libraries, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

URI Soča is a Slovenian public tertiary healthcare institute specializing in comprehensive rehabilitation services for children and adults. The website clearly targets patients and healthcare professionals, offering detailed information about rehabilitation medicine, vocational rehabilitation, rehabilitation engineering, pharmacy services, orthotics and prosthetics, and research activities. The domain is well-established since 2011, consistent with the organization's history. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Select2, and is hosted with Slovenian academic DNS providers, indicating a reliable infrastructure. The website is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Privacy compliance is strong with a comprehensive privacy and cookie policy aligned with GDPR. Overall, the site is professional, trustworthy, and serves its audience well.

V

VPOD/SSP

vpod.ch

11

VPOD/SSP is a well-established Swiss trade union representing employees in the public service sector, including education, healthcare, transportation, and government. The organization offers membership services, educational programs, advocacy on labor rights, and regional support through multiple subdomains. The website reflects a mature digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site is built on the ProcessWire CMS with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-aligned with its mission and audience.

M

Migros Verteilbetrieb AG

mvb.ch

51

Migros Verteilbetrieb AG is a leading logistics company within the Migros Group, specializing in storage, packaging, picking, and distribution of a wide range of products including food, textiles, and frozen goods. It operates multiple large distribution centers in Switzerland, serving hundreds of Migros stores and migrolino shops daily. The company is well-established with over 50 years of operational history, positioning itself as a key logistics partner in the Swiss retail sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and OwlCarousel, and is built on the Umbraco CMS platform. The site is mobile-optimized, uses HTTPS, and includes cookie consent mechanisms compliant with GDPR. While the site lacks explicit security headers and detailed security policies, it demonstrates a solid baseline security posture with no evident vulnerabilities or exposed sensitive data. From a security perspective, the website benefits from HTTPS encryption and cookie consent but could improve by implementing additional HTTP security headers and publishing incident response or security policies. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security and incident response information to further strengthen trust and compliance.

C

CMM – Associação Portuguesa de Construção Metálica e Mista

digitalsteel.pt

40

Digital Steel is a project promoted by the Portuguese Association of Metal and Mixed Construction (CMM) aimed at promoting the digitalization of processes in SMEs within the metal and mixed construction sector in Portugal. The website serves as an informational and promotional platform offering details about workshops, events, and digital transformation initiatives such as BIM, 3D printing, and robot welding. The target audience primarily consists of small and medium enterprises in the construction industry seeking to adopt Industry 4.0 technologies. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

M

MONTI SYSTEM, s.r.o.

monti.cz

54

MONTI SYSTEM, s.r.o. is a Czech company specializing in the development and manufacturing of advanced technology solutions for fuel stations. With over 20 years of experience, they provide hardware and software systems that automate fuel station management, optimize logistics, and ensure compliance with legislative requirements. Their market position is strong within the Czech Republic, serving major clients and fuel station networks. Technically, the website employs modern JavaScript libraries, analytics tools like Google Analytics and Microsoft Clarity, and a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent but lacks visible security headers and formal security policies, indicating room for improvement. The absence of WHOIS data is a concern for domain legitimacy, though the business content and client references support authenticity. Overall, the company demonstrates a professional online presence with good privacy compliance but should enhance security transparency and domain registration clarity.

J

JSON Viewer and Formatter - JSON.pub

json.pub

51

JSON.pub is a specialized online tool designed to convert and visualize JSON strings and other data formats into a readable, user-friendly format. It targets developers, data analysts, and users who need to parse and analyze JSON, XML, CSV, YAML, and other data types. The service emphasizes privacy by processing all data locally in the user's browser, ensuring no data is sent to the server. The website offers features such as syntax highlighting, tree views, and shareable URLs with compressed data, positioning itself as a niche utility in the developer tools market. Technically, the website is built with modern web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery, LZ-String for compression, and DOMPurify for sanitization. It employs a service worker for offline support and uses Simple Analytics for privacy-first user tracking. The site is mobile-optimized with responsive design and good accessibility features, providing a fast and smooth user experience. From a security perspective, JSON.pub follows best practices by ensuring all processing is local, minimizing data exposure risks. The use of DOMPurify to sanitize SVG inputs and the absence of data transmission to servers are strong security measures. However, the site lacks explicit security headers and does not provide privacy or cookie policies, nor contact information for security incidents, which are areas for improvement. Overall, JSON.pub presents a trustworthy and professional service with a strong privacy focus. The absence of WHOIS registrant data is typical for small utility sites and does not detract from its legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact channels for incident response to enhance trust and compliance.

N

Najnákup.sk - porovnania, ceny a recenzie produktov v eshopoch

najnakup.sk

51

Najnákup.sk is a Slovak e-commerce price comparison and product review platform targeting Slovak internet shoppers seeking the best prices and product information across a wide range of categories. The website offers services such as price comparisons, product reviews, discount listings, and eshop directories, positioning itself as a popular and trusted resource in the Slovak online shopping market. Technically, the site is built on a custom ASP.NET MVC framework, utilizing modern JavaScript libraries like jQuery 3.6.0, and integrates advertising and tracking tools such as Google Tag Manager, Google Adsense, and Bing Ads. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No signs of WAF or blocking mechanisms were detected, and no adult or questionable content is present, making it safe for general audiences. Overall, the site shows a moderate to good security posture with room for improvement in privacy compliance and security best practices.