Security Directory

U

Universia

mycampusdigital.io

69

The website analyzed is a Single Sign-On (SSO) login portal branded as Campusb2b under the Universia network, targeting users in the education sector who require access to campus-related digital services. The platform facilitates secure user authentication for associated services such as mycampusdigital.io. The business model focuses on providing authentication and access management solutions tailored for educational institutions and their communities. The site presents a consistent brand image with Universia logos and uses HTTPS to secure user credentials during login. From a technical perspective, the site employs standard web technologies including HTML5, CSS, and JavaScript, with specific scripts for password policy enforcement and validation. The performance and mobile optimization are basic but functional. However, the site lacks advanced SEO features, accessibility enhancements, and comprehensive metadata. No content management system or hosting provider information is discernible from the data provided. Security posture is moderate; HTTPS is enforced, and password policy scripts are present, but critical security headers such as Content-Security-Policy and HSTS are missing. No privacy or cookie policies are visible, and no contact or incident response information is provided, which limits compliance and user trust. The WHOIS data for the domain sso.universia.net is unavailable, likely because it is a subdomain, which is typical but reduces transparency. No web application firewall or blocking mechanisms were detected, indicating open accessibility. Overall, the site is functional for its purpose but would benefit from enhanced security headers, visible privacy and cookie policies, improved accessibility, and clearer contact information to increase trust and compliance. The domain's legitimacy is supported by branding and HTTPS but lacks WHOIS transparency. Strategic improvements in these areas would strengthen the platform's security posture and user confidence.

L

Galvena

labsveikals.lv

41

Labsveikals.lv is an active Latvian e-commerce website offering a broad range of products primarily focused on digital technologies, electronics, household appliances, beauty and health products, toys, and clothing. The site features a structured product catalog with detailed categories and a shopping basket functionality, targeting consumers and businesses in Latvia. The website demonstrates a moderate level of digital maturity with a custom or proprietary CMS, usage of modern web technologies such as JavaScript and Google Fonts, and mobile optimization. Security posture is adequate with HTTPS enforced and a GDPR consent banner present, though there is a lack of explicit privacy policy, terms of service, and security incident contact information. Overall, the site appears legitimate and professionally maintained but could improve in privacy compliance and security best practices.

H

Helmand.lv

helmand.lv

50

The website helmand.lv appears to be an e-commerce platform using OpenCart CMS with the Journal3 theme. The site presents minimal business information, with a generic description 'My Store' and no visible contact details or policies. Technically, the site uses modern JavaScript libraries such as Swiper.js and Lozad.js, indicating some level of digital maturity, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no visible security headers or policies, and WHOIS data is unavailable due to query limits, limiting trust verification. Overall, the site shows a low level of business credibility and privacy compliance, suggesting it may be a small or new online store with room for improvement in transparency and security.

M

Maxtrade.lv

maxtrade.lv

40

Maxtrade.lv is a Latvian-based e-commerce retailer offering a broad range of products including computer components, office supplies, electronics, household goods, garden and repair items, furniture, sports equipment, and beauty products. The website targets consumers and businesses primarily in Latvia and the Baltic region, providing an online shopping platform with diverse product categories. The business model is focused on online retail with customer support via phone and email. The site demonstrates moderate branding consistency and good content quality, with clear navigation and product categorization.

The website www.anymedia.lv operates as a basic advertising system platform primarily targeting advertisers, agencies, and media owners in Latvia. It offers services such as ad placement, banner management, discount scale creation, and supports unconventional advertising formats. The site content is minimal and presented in Latvian, with limited navigation and no advanced interactive features. Technically, the site is built with simple HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak, with no evidence of HTTPS, security headers, or privacy and cookie policies. Contact information is limited to a single email address, and no incident response or security policies are disclosed. Overall, the site appears functional but basic, with significant room for improvement in security, privacy compliance, and technical sophistication.

C

Chema Alonso

elladodelmal.com

60

The website 'Un informático en el lado del mal' is a well-established personal blog by Chema Alonso, a recognized figure in cybersecurity. It serves as a platform for sharing knowledge, tutorials, and educational content related to hacking and cybersecurity, supplemented by book publishing and educational bootcamps. The site targets security professionals, students, and enthusiasts, positioning itself as a trusted resource in the cybersecurity education niche. Technically, the site is hosted on Google's Blogger platform, uses HTTPS, and integrates Google Adsense for monetization. The content is rich, updated daily, and well-structured, though mobile optimization and accessibility are basic. Security posture is good with HTTPS and no visible vulnerabilities, but explicit security headers and privacy policies are lacking. The absence of WHOIS registration data is a notable anomaly, though the site’s longevity and external references support its legitimacy. Overall, the site demonstrates a mature digital presence with strong business credibility and a solid security baseline.

V

Veiligheidsregio Utrecht

vru.nl

63

Veiligheidsregio Utrecht (VRU) is a regional government entity focused on public safety, emergency response, and crisis management in the Utrecht region of the Netherlands. The website serves as an information hub for residents and stakeholders, providing news, incident updates, safety advice, and career opportunities. The organization positions itself as a trusted authority in safety and emergency services, with a clear mission to contribute daily to the safety of its community. Technically, the website employs modern web technologies including JavaScript, CSS, SVG graphics, and integrates analytics tools such as Piwik PRO, Facebook Pixel, and LinkedIn Insight Tag. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with a reputable government entity, with DNSSEC enabled and HTTPS enforced. From a security perspective, the site demonstrates strong fundamentals including HTTPS, DNSSEC, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available dedicated security or incident response policies and does not provide a vulnerability disclosure or security.txt file. Analytics and tracking are implemented with consent, reflecting a moderate user tracking level aligned with privacy regulations. Overall, VRU's website is professional, trustworthy, and compliant with privacy standards, supporting its role as a regional safety authority. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

L

Lursoft IT

zo.lv

55

The website zo.lv is a Latvian business directory operated by Lursoft IT, providing comprehensive listings of Latvian companies, their sectors, products, and services. It serves as a platform for businesses to register and promote themselves free of charge, targeting Latvian business users and consumers seeking company information. The site is well-established, with a domain age consistent with the business history dating back to 1993, and is supported by Lursoft's parent infrastructure. Technically, the site uses a custom CMS with standard web technologies including jQuery and Revive Adserver for advertising. While the site is functional and professionally designed with good navigation and content relevance, some technical aspects such as the use of an older jQuery version and lack of modern security headers could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. Privacy compliance is strong, with clear privacy and cookie policies linked and implemented. Overall, the site is trustworthy and credible, though there is room for modernization and enhanced security practices.

J

Jaycom

jaycom.se

60

Jaycom is a Swedish SaaS provider specializing in comprehensive software solutions for the insurance industry, offering products such as Leo (a CRM for insurance brokers) and Focus (an insurance system for life and property insurance). The company has been operating since 2001, targeting insurance brokers and companies with tailored digital tools. The website reflects a small but focused business with consistent branding and relevant content for its niche market. Technically, the site uses a custom CMS with standard web technologies like JavaScript and CSS, and it is served over HTTPS with a valid SSL certificate, indicating a secure connection. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the queried domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site demonstrates moderate digital maturity with room for improvement in privacy compliance, security best practices, and richer business information disclosure.

S

Sharpfin

sharpfin.com

58

Sharpfin is a Swedish-based company offering an all-in-one SaaS wealth management platform designed to streamline operations for wealth managers, fund companies, and family offices. The platform emphasizes reducing operational costs, increasing revenue, and enhancing client onboarding and interactions. The company positions itself as a forward-thinking technology provider in the finance sector with a scalable and compliant solution. The website is professionally designed, mobile-optimized, and uses HubSpot CMS along with modern marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. The absence of WHOIS data is a notable anomaly, but the website's professionalism and trust indicators mitigate some concerns. Overall, Sharpfin presents as a credible and modern SaaS provider in the wealth management industry.

LALIGA Store is an official e-commerce platform operated by Fanatics, LLC., offering authentic football kits, apparel, and merchandise for all twenty LALIGA clubs. The website is professionally designed, providing a comprehensive catalog targeting football fans across different demographics including men, women, and children. The platform leverages modern web technologies and integrates analytics tools such as Google Analytics and Facebook Pixel to enhance user experience and marketing effectiveness. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data is a minor concern but is offset by the site's professional presentation and association with a reputable parent company.

The website https://www.engie-axima.fr is a minimal WordPress blog with very limited content, primarily consisting of a default 'Hello world!' post. There is no clear business description, contact information, or security and privacy policies published on the site. The technical infrastructure is based on WordPress CMS with standard JavaScript and CSS assets, and the site is served over HTTPS, indicating basic security configuration. However, advanced security headers and compliance mechanisms are absent. The lack of business and contact details, privacy policies, and security disclosures suggests the site is either under development or not actively maintained as a professional business presence. Overall, the site exhibits a low level of digital maturity and trustworthiness.

S

SCLE

scle-sfe.fr

51

SCLE is a French company specializing in the design and manufacture of custom equipment and turnkey solutions primarily for the energy and railway sectors. With over 50 years of experience, SCLE positions itself as a trusted provider offering high-technology products and services that support energy transition and sustainable transport. The company emphasizes quality, innovation, and long-term client relationships, supported by multiple certifications and partnerships with major industry players such as ENEDIS, SNCF Réseau, and EDF. Technically, the website is built on WordPress and employs privacy-focused analytics (Matomo) alongside a robust cookie consent mechanism (tarteaucitron.js). The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security practices include HTTPS enforcement and privacy-by-design analytics, though some security headers and explicit policies could be enhanced. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear policies and consent mechanisms aligned with GDPR requirements. However, the absence of a published security policy or incident response contacts suggests room for improvement in transparency and readiness. Overall, SCLE's website reflects a professional, trustworthy, and compliant business with a clear focus on its niche markets. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing a vulnerability disclosure program to further strengthen trust and resilience.

The website csrapid.ro is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks direct access to any substantive content. Due to this, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or attacks. The technical infrastructure includes Cloudflare's challenge platform and Turnstile captcha, but no CMS or other technologies are detectable from the limited HTML content. Security posture cannot be fully assessed due to lack of visible headers or policies. Overall, the site is effectively blocked for analysis, resulting in a low AI score and limited insights.

L

Lazada

lazada.sg

11

Lazada Singapore is a leading e-commerce platform offering a wide range of products including electronics, fashion, and groceries. It operates with a strong market presence supported by its parent company Alibaba Group and subsidiaries like RedMart. The website features comprehensive product categories, official brand stores, and multiple payment and delivery options, ensuring a seamless shopping experience for customers. Technically, the site employs modern frameworks such as React and Rax, with fast performance and good mobile optimization. Security measures include HTTPS, CSRF tokens, and use of security libraries, contributing to a strong security posture. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response contacts are not found. Overall, the site is professional, trustworthy, and well-maintained, with extensive analytics and marketing tools in use.

S

Sainsbury’s Bank

sainsburysbank.co.uk

11

Sainsbury’s Bank operates as a UK-based financial services provider offering a broad range of consumer financial products including insurance, travel money, savings, loans, and credit cards. The website reflects a strong brand alignment with the Sainsbury’s retail group and recent operational changes involving the transfer of certain products to National Westminster Bank Plc. The company targets retail consumers seeking accessible and competitive financial products with a focus on ease of use and customer support. The business model leverages partnerships with established insurance underwriters and payment providers to deliver comprehensive financial services. Technically, the website employs modern web technologies including Google Tag Manager, Tealium, and Usabilla for analytics and user feedback, supported by a CMS likely Magnolia. The site is well-optimized for mobile and accessibility, with good SEO practices and clear navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policy and incident response disclosures are absent. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. Overall, the website demonstrates a mature digital presence consistent with a large financial institution, with good trust indicators and regulatory compliance.

B

BB Online UK Limited

bb-online.com

64

BB Online UK Limited is a well-established domain registrar and intellectual property protection service provider operating since 1997. The company specializes in international domain registration, domain portfolio management, and brand protection services, targeting individuals and businesses seeking comprehensive domain and IP solutions. Their market position is that of a niche, trusted player with a strong emphasis on security and customer support. Technically, the website employs a modern yet straightforward tech stack including jQuery and Bootstrap, offering a mobile-optimized and user-friendly experience. Security posture is strong with HTTPS enforced via a reputable Thawte SSL certificate, DNSSEC support, and cookie consent mechanisms, although some advanced security headers and explicit security policies are absent. Overall, the site demonstrates good privacy compliance and business credibility with clear contact information and trust indicators. The domain registration details align well with the business claims, reinforcing legitimacy.

S

Scenestealer

scenestealer.tv

53

Scenestealer is a technology company focused on empowering creative digital marketing through its Reflow management platform. The website content highlights their data-driven approach to personalizing marketing spend and mentions growth in their Brighton office with job opportunities. The site is basic in content and design, with minimal SEO and no visible advanced marketing or tracking technologies. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance visibility. Overall, the site appears functional but lacks maturity in security and privacy compliance.

EKII.LV is an official Latvian government-related website operated by SIA "VIDES INVESTĪCIJU FONDS" that facilitates electronic submission of monitoring reports for projects funded by EKII and the Modernization Fund. It also serves as an information portal for funding competitions and project updates primarily targeting funding recipients and stakeholders in the energy and environmental sectors in Latvia. The platform integrates basic web technologies and Google Analytics for tracking, with a CMS identified as EMSI. While HTTPS is enabled and cookie consent is implemented, the site lacks comprehensive privacy and security policies, and no incident response contacts are provided. Contact information is limited to phone numbers without email or contact forms. Overall, the site is functional and moderately professional but could improve in privacy compliance, security headers, and mobile optimization.

J

Joe's Pizza

joespizzanyc.com

55

Joe's Pizza is a small, family-owned pizza restaurant established in 1975 in Greenwich Village, New York City. The business offers authentic New York-style pizza slices and has a strong local reputation. The website is built on the Squarespace platform and provides basic information about the business along with an online ordering link. The technical infrastructure is standard for a small hospitality business, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Contact information is not explicitly provided on the website, limiting direct customer engagement channels. Overall, the website serves as a digital presence for the business but could improve in compliance and security best practices.

The website kaizenep.com serves as the login portal for risr/advance, a specialized e-Portfolio solution tailored for medical and healthcare education institutions. It supports multiple organizations, each with customized branding and Single Sign-On (SSO) capabilities, indicating a mature SaaS platform focused on professional development and assessment management. The platform targets medical schools, colleges, and healthcare professionals, providing tools for workplace assessments, annual reviews, and multi-source feedback. Technically, the site employs modern web technologies including Vue.js, JavaScript, and CSS, delivering a responsive and functional user interface. The infrastructure appears to be hosted on KaizenEP's own clusters, with secure HTTPS endpoints and integration with various identity providers for authentication. However, the site lacks visible SEO optimization and accessibility features beyond basic levels. From a security perspective, the site enforces HTTPS and uses SSO with trusted identity providers, which is a strong security posture. Nonetheless, the absence of explicit security headers, privacy policies, cookie consent mechanisms, and incident response contacts represents gaps in compliance and transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a solid technical foundation and business focus but requires improvements in privacy compliance, security transparency, and user trust elements to enhance its risk profile and regulatory adherence.

S

Spotify AB

lifeatspotify.com

62

Spotify AB operates a globally recognized audio streaming platform and maintains a dedicated careers website to attract talent worldwide. The site emphasizes company culture, diversity, and inclusion, showcasing job opportunities across multiple locations. The technical infrastructure leverages modern web technologies including React and Next.js, ensuring a fast, responsive, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, professional digital presence aligned with Spotify's market leadership in technology and media.

Lindentree Associates is a small, specialized consultancy and training provider focused on real-time embedded systems, founded in 1998 by Jim Cooling. The company offers expert services in system analysis, software and electronic design, control engineering, and mentoring, targeting industry professionals and companies requiring deep expertise in embedded systems. The website content is informative and relevant but lacks modern digital maturity features such as privacy policies, contact details, and security certifications. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS, and no evidence of HTTPS or security headers was found, indicating a low level of technical security maturity. The site performs moderately but lacks mobile optimization and accessibility features. From a security perspective, the absence of HTTPS, privacy and cookie policies, and contact information for incident response represent significant gaps. No security best practices or vulnerability disclosures are present, which could expose the business to compliance and trust risks. Overall, the website presents a moderate risk profile due to missing security and privacy controls, limited technical sophistication, and lack of transparency in contact and compliance information. Strategic improvements in security posture, privacy compliance, and digital presence are recommended to enhance trust and reduce risk.

ATM Consulting is a small local business providing on-site computer repair, support, and security services primarily to Toronto businesses and residents. The company focuses on IBM and compatible computers, offering network setup and virus removal among its key services. The website content is basic but relevant, targeting a local audience seeking expert computer services. The market position is that of a local trusted provider with a straightforward business model centered on direct service delivery. Technically, the website is simple, built with basic HTML and CSS without modern frameworks or CMS detected. There is no evidence of HTTPS or advanced security measures, and the site lacks privacy and cookie policies, which indicates low digital maturity and compliance gaps. The site has minimal tracking or analytics, suggesting limited data collection practices. From a security perspective, the absence of HTTPS and security headers is a significant weakness, exposing users to potential risks. No incident response or vulnerability disclosure information is provided, and no certifications or compliance frameworks are referenced. Contact information is clearly presented, which supports business credibility but does not compensate for the security shortcomings. Overall, the website scores low to moderate on security and privacy compliance, with basic content quality and business credibility. Strategic improvements in security infrastructure, privacy compliance, and technical modernization are recommended to enhance trust and protect users.

The website gsdsoftware.ie is currently a domain parking page with no active business content, contact information, or services presented. It primarily serves advertisements via the Parkingcrew network and links to a third-party privacy policy unrelated to the domain owner. The site lacks HTTPS, security headers, and any form of user interaction or data collection. The technical infrastructure is minimal, relying on external HTTP scripts and stylesheets, indicating poor digital maturity and security posture. The domain is privacy protected in WHOIS, which combined with the lack of content, suggests the domain is not actively used for a legitimate business. Overall, the site presents a low trust profile with significant security and compliance gaps.

The domain nunetic.com currently hosts a placeholder page indicating that the website is no longer available. The page is served by 34SP.com, a UK-based web hosting provider specializing in domain registration and hosting services. No actual business content or services are accessible on the domain, and the page primarily serves as a notification to domain owners and visitors about the site's offline status. The hosting provider's contact email is provided for support inquiries. From a technical perspective, the website is minimal with basic HTML and CSS, lacking any advanced frameworks, CMS, or scripts. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present. The site is not optimized for SEO or accessibility and offers a poor user experience due to the lack of content and navigation. Security posture is weak due to the absence of HTTPS, security headers, and incident response information. No vulnerabilities or malicious content are detected, but the lack of security best practices and policies is notable. The domain's WHOIS data was not provided, limiting trust and legitimacy analysis. Overall, the site is offline and non-functional, resulting in a very low AI score. Strategic recommendations include enabling HTTPS, adding security headers, publishing privacy and cookie policies, and restoring business content to improve credibility and security posture.

C

Corporation Unknown

corporationunknown.com

36

Corporation Unknown is a personal technical blog authored by Paul Goracke, focusing on software development topics, particularly iOS and Core Data. The site serves a niche audience of developers and technology enthusiasts, providing in-depth articles and presentations. The business model is content publishing for personal branding and knowledge sharing, with no evident commercial transactions or services. Technically, the site is built on Octopress, using standard web technologies including jQuery and Modernizr, with integration of third-party services like Disqus and Twitter widgets. The site shows basic mobile optimization and SEO practices but lacks modern security implementations such as HTTPS and security headers. Security posture is weak due to absence of SSL and outdated libraries, and no privacy or cookie policies are present, indicating poor privacy compliance. Overall, the site is functional and content-rich but requires significant improvements in security and privacy to meet modern standards.

A

ASSA ABLOY

cardo.com

62

ASSA ABLOY is a leading global supplier of intelligent access solutions, with a strong market position and a comprehensive portfolio of security and access products. The company targets investors, customers, and media with detailed financial reports, press releases, and corporate communications. The website demonstrates a mature digital infrastructure using modern technologies such as React and Adobe Experience Manager, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security and incident response policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy corporate presence with consistent branding and comprehensive content.

G

GBS Engineering

gbseng.ie

33

GBS Engineering is an established engineering company founded in 1987, specializing in design, fabrication, machining, and profiling services primarily for the pharmaceutical and food sectors. The company operates from a purpose-built 15,000 sq ft workshop in Naas, Co. Kildare, Ireland, positioning itself as a reliable regional provider with a solid market presence. The website reflects a professional business with clear contact information and sector focus, targeting industrial clients in manufacturing sectors. Technically, the website is built on WordPress CMS using common web technologies such as jQuery and standard CSS/JavaScript. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS but does not implement additional security best practices. From a security perspective, the website has a basic security posture with HTTPS enabled but lacks critical security headers like Content-Security-Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the analyzed content, but the absence of security policies and incident response contacts suggests limited security maturity. Privacy compliance is minimal, with no cookie consent or GDPR indicators visible. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and technical optimizations to strengthen trust and reduce risk. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and improving accessibility and SEO to enhance user experience and compliance.

Decoro Resource is a small business consultancy focused on risk, finance, and management systems development. The website content emphasizes the meaning of 'Decoro' as orderliness, technique, and integrity, positioning the company as a provider of business improvement services. The site is a basic static HTML page with minimal technical sophistication and no dynamic features or interactive elements. There is no evidence of modern web technologies, CMS, or analytics tools. Security posture is weak, with no HTTPS detected, no security headers, and no privacy or cookie policies. Contact information and compliance documentation are absent, limiting trust and credibility. Overall, the website appears to be an informational brochure site with limited digital maturity and security awareness.

T

TG4 Soluções de Tecnologia Ltda

tg4.com.br

47

TG4 Soluções de Tecnologia Ltda is a Brazilian technology company specializing in custom software development, strategic consulting, design and UX, and discovery and research services. The company serves a diverse range of industries including healthcare, fintech, education, energy, and telecommunications. With over 10 years of experience and a portfolio of more than 100 projects across 12 countries, TG4 positions itself as a reliable mid-sized technology solutions provider. The website is bilingual, targeting both Portuguese and English-speaking clients, indicating an international business scope. Technically, the website is built on a modern React and Next.js stack, providing a good user experience and mobile optimization. However, there is room for improvement in SEO and accessibility features. Security posture is basic with no visible security headers or published security policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but would benefit from enhanced security and privacy transparency.

The website harveynichols.com is currently inaccessible beyond a CAPTCHA challenge page, indicating the presence of a Web Application Firewall or similar security mechanism blocking direct access to content. Due to this, no business-related content, contact information, or policies are available for analysis. The page only serves to verify real visitors using Google reCAPTCHA v2 technology. The technical infrastructure appears to include standard bot mitigation scripts but lacks visible HTTPS enforcement and advanced security headers in the provided data. This limits the ability to assess the website's security posture, privacy compliance, and business credibility. Overall, the site is effectively locked behind a security layer, preventing meaningful content or metadata extraction.

JRI America, Inc. is an IT service provider supporting Sumitomo Mitsui Banking Corporation (SMBC) Group, a major Japanese banking institution. The company offers business application services, managed services, and consulting primarily to financial sector clients. The website serves as an informational portal with links to parent and related companies, targeting financial institutions and IT professionals. Technically, the website is basic with legacy HTML and CSS, lacking modern frameworks or CMS. It is not mobile optimized and shows minimal SEO or accessibility features. Security posture is weak due to absence of HTTPS and security headers, exposing the site to potential risks. Privacy compliance is limited, with no cookie policy or GDPR indicators, though a privacy notice is linked to the parent company site. Overall, the site reflects a medium-sized corporate entity with moderate trustworthiness but requires significant improvements in security and technical modernization.

The website su.edu.krd is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile CAPTCHA. This indicates the site is protected by Cloudflare's Web Application Firewall (WAF) and anti-bot mechanisms, preventing direct content access. Due to this, no business-related content, contact information, or policies are visible, limiting the ability to assess the organization's market position or services. Technically, the site uses Cloudflare's security infrastructure but lacks visible SEO, accessibility, or privacy compliance features. Security posture benefits from Cloudflare protection but lacks visible security headers or policies. Overall, the site presents a low trust profile due to lack of accessible content and transparency.

Goodbody / Figurplan is a small German fitness consultancy specializing in personalized training plans aimed at weight loss, muscle gain, and fitness improvement. The website content is primarily in German and targets individuals seeking customized fitness coaching, particularly in the Nuremberg area. The business model revolves around creating tailored training plans and providing studio-based and online coaching services. The site content is basic and lacks modern digital marketing or e-commerce features. Technically, the website is simple, built with static HTML and CSS without modern frameworks or CMS. It lacks HTTPS, security headers, and mobile optimization, indicating a low level of digital maturity. No analytics or tracking technologies are present, and no forms are available for user interaction or data collection. From a security perspective, the absence of HTTPS and security headers is a significant vulnerability. The site does not provide clear privacy or cookie policies beyond a basic Datenschutz page, and no incident response or security policies are published. The lack of contact information and security best practices reduces trustworthiness and compliance with GDPR requirements. Overall, the website presents moderate business credibility but poor technical and security posture. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

Ó Ruairc Associates Limited is a small systems consultancy firm specializing in systems consulting and software development lifecycle services such as requirements gathering, design, development, testing, and management. The website serves as a basic informational portal to introduce the company and provide a contact email. The technical infrastructure is minimal, relying on static HTML and CSS without modern frameworks or CMS platforms. The site lacks mobile optimization and accessibility features, indicating a low level of digital maturity. Security posture is weak, with no HTTPS detected, absence of security headers, and no privacy or cookie policies, exposing the site to potential risks and non-compliance with data protection regulations. Overall, the website presents a basic professional presence but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Ventac is a well-established company specializing in the design and manufacture of noise control solutions for commercial vehicles and industrial sectors. With a history dating back to 1972, Ventac has positioned itself as a trusted provider of acoustic solutions, offering a range of services including turnkey noise control systems, acoustic consulting, and testing services. The company targets vehicle manufacturers, industrial clients, and environmental noise control stakeholders, emphasizing innovation and quality in its offerings. Technically, the website is built on WordPress and employs modern JavaScript libraries such as Swiper.js for enhanced user experience. The site is mobile-optimized and features good SEO practices, although some accessibility features could be improved. The presence of multiple third-party analytics and marketing tools indicates a moderate level of digital maturity, though the absence of a cookie consent mechanism is a notable gap in privacy compliance. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks several important security headers that could enhance protection against common web threats. No explicit security policies or incident response contacts are published, which could be improved to bolster trust and compliance. Overall, the security posture is solid but could benefit from enhancements in headers and privacy mechanisms. The domain registration details align well with the company's business claims, reinforcing legitimacy and trustworthiness. The website presents comprehensive business information, clear contact details, and strong trust indicators such as testimonials and industry awards. The overall risk is low, with recommendations focusing on improving privacy compliance and security headers to further strengthen the site's security and user trust.

B

Bon Secours

bshsi.org

50

Bon Secours is a well-established Catholic healthcare ministry operating primarily in Virginia, South Carolina, and Florida. As part of the larger Bon Secours Mercy Health system, it offers a broad range of healthcare services including primary care, specialty care, urgent care, and senior living. The website reflects a strong mission-driven approach focused on compassionate care and community health. The organization maintains a significant market position as a large healthcare provider in the United States. Technically, the website employs modern web technologies such as Google Tag Manager, Google Maps API, and interactive UI components like Flickity carousels. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Analytics are implemented via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks visible security headers and published security or incident response policies. There is no cookie consent mechanism detected, which may impact privacy compliance. No critical vulnerabilities or suspicious elements were found. Overall, the website is professional, trustworthy, and well-aligned with the organization's healthcare mission. Strategic improvements in privacy compliance and security transparency would enhance the site's security posture and regulatory adherence.

F

Fran and Jane

franandjane.com

54

Fran and Jane is a specialized ladies' fashion boutique operating an e-commerce platform hosted on Shopify. The company offers a curated selection of modern and luxury fashion items including dresses, tops, knitwear, accessories, and fragrances. Their market position is that of a niche boutique targeting fashion-conscious women seeking quality and style. The website demonstrates a mature digital infrastructure leveraging Shopify's robust platform, integrated with multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Judge.me for customer reviews. The site is well-designed, mobile-optimized, and provides clear navigation and contact options, enhancing user experience and trust. Security posture is strong with HTTPS enforced and standard Shopify security headers, though explicit cookie consent mechanisms and terms of service pages are missing, which could impact full GDPR compliance. Overall, the website presents a professional and trustworthy online retail presence with room for improvement in privacy compliance and security transparency.

S

St. Vincent's Private Hospital

svph.ie

55

St. Vincent's Private Hospital is a leading private healthcare provider based in Dublin, Ireland, recognized as the largest acute private hospital in the city. The hospital offers a wide range of specialist medical services including cancer care, cardiology, gastroenterology, and orthopaedics, supported by a large number of consultants. The website targets patients, visitors, and healthcare professionals, providing comprehensive information and easy navigation tailored to these groups. The hospital operates under the St. Vincent’s Healthcare Group umbrella, reinforcing its market position and credibility. Technically, the website employs modern web technologies including responsive design, Typekit fonts, and JavaScript polyfills to ensure broad compatibility and good user experience. The content is well-structured with clear navigation and search functionalities. Cookie consent and privacy mechanisms are robust, indicating a mature approach to privacy compliance. Analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar are used responsibly with user consent. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, enhancing security posture. However, explicit security headers are not detected, and no dedicated security or incident response policies are published, representing areas for improvement. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations, making it a trustworthy digital presence for a major healthcare institution.

Canon Ireland operates as a leading provider of digital imaging and printing products, including cameras, lenses, camcorders, and printers, targeting both consumer and business markets in Ireland. The company is part of the larger Canon Inc. group, with a strong market position supported by a comprehensive product portfolio and professional services. The website reflects a mature digital presence with modern design, clear navigation, and extensive product information. Technically, the site employs a robust technology stack including Google Tag Manager, Tealium, and Optimizely for analytics and marketing, with secure HTTPS implementation and appropriate security headers. Privacy and cookie policies are present and indicate GDPR compliance, although a dedicated security policy and incident response information are not explicitly found. Overall, the site demonstrates a high level of professionalism and trustworthiness, with no signs of content blocking or security vulnerabilities.

The website at bibo.com.ph appears to be a minimal or placeholder page with no substantive content or business information. The page primarily loads scripts and assets from eng00.com and related domains, suggesting it may be a redirect or under development. There is no visible privacy policy, cookie policy, terms of service, or contact information, which limits the ability to assess compliance or business credibility. Technically, the site uses modern font loading and JavaScript bundles but lacks visible security headers or SSL configuration details in the provided data. The absence of HTTPS and security policies indicates a weak security posture. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, resulting in a low overall risk score.

Massada is a Spanish-based e-commerce company specializing in natural and biotechnological cosmetic products. The company formulates and manufactures its own extracts using flowers, plants, and minerals combined with organic biotechnological active ingredients to provide effective and respectful formulas. Their market position is that of a niche natural cosmetics brand with a strong emphasis on innovation and natural ingredients. The website is built on the Shopify platform, leveraging modern technologies and integrations such as Google Analytics, Facebook Pixel, and various marketing tools. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional and trustworthy user experience. Security practices are solid with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response contacts are not present. Overall, the website demonstrates good compliance with GDPR and cookie regulations, with clear contact information and multiple communication channels.

The domain insei.com is currently a parked domain managed by GoDaddy, LLC, a major domain registrar and parking service provider. The website does not host any active business content or services and primarily serves as a placeholder to offer the domain for sale. The target audience is domain investors or buyers interested in acquiring the domain. The page includes minimal branding consistent with GoDaddy's domain parking service and a Trustpilot widget to indicate some trust signals. From a technical perspective, the site uses basic JavaScript and CSS with third-party scripts for cookie consent management (TrustArc) and customer reviews (Trustpilot). The hosting is provided by GoDaddy, and the page loads quickly with basic mobile optimization. However, there is no evidence of HTTPS usage or advanced security headers, which limits the security posture of the site. Security evaluation reveals a lack of explicit security policies, incident response contacts, or certifications. Cookie consent mechanisms are present, but privacy policy details are minimal and not fully GDPR compliant. No forms or data collection fields are present, reducing risk exposure. The domain registration is consistent with GoDaddy ownership, indicating legitimacy. Overall, the site scores low on content quality and business credibility due to its parked status and minimal content. Security posture is basic with room for improvement, especially in HTTPS implementation and security headers. Privacy compliance is basic with cookie consent but limited policy detail. Strategic recommendations include enabling HTTPS, enhancing privacy disclosures, and providing clearer business and security information to improve trust and compliance.

pferdewetten.de is an established online horse race betting platform operated by NetX Betting Limited, a Malta-based company licensed by the Malta Gaming Authority (MGA). The website targets primarily German-speaking horse racing enthusiasts and bettors, offering comprehensive race calendars, live streams, and betting options. The platform is regulated under German gambling authorities, ensuring compliance with local laws and player protection standards. The business model focuses on providing a secure and user-friendly betting experience with additional features such as bonuses and support services. Technically, the website employs modern web technologies including React and SVG graphics, delivering a responsive and visually appealing user interface. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Performance is moderate with good mobile optimization and basic accessibility features. SEO and metadata are present but could be enhanced further. From a security perspective, the site uses HTTPS and implements no-cache headers to protect data integrity. Certifications such as MGA licensing and TUV ISO mark reinforce trustworthiness. However, explicit security headers like Content-Security-Policy are not evident, and no dedicated security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, pferdewetten.de presents a trustworthy and professional betting platform with strong regulatory backing and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

W

winmasters.com

winmasters.com

43

Winmasters.com is an online sports betting and casino platform targeting English-speaking users. The website offers sports betting and casino games, positioning itself within the e-commerce gambling sector. The business model revolves around online gambling services, catering primarily to sports bettors and casino players. However, explicit company information, including legal name, contact details, and business history, is not present in the analyzed content, limiting full business profiling. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Cookiebot for analytics and cookie consent management. Hosting appears to leverage Amazon S3 for some resources. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or detailed hosting provider information was detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating some GDPR compliance efforts. However, no explicit privacy policy, terms of service, security policies, or incident response contacts are found. Security headers are not visible in the provided data, and no vulnerability disclosures or security.txt files are present. The absence of contact information and trust indicators reduces the overall security posture and business credibility. Overall, the site is functional but basic in content and compliance. Strategic improvements in transparency, security policies, and user trust elements are recommended to enhance credibility and compliance.

G

GKFX

akfx.com

46

GKFX operates as an online financial trading platform specializing in Forex and CFD trading services. The website presents a basic marketing message targeting retail traders interested in FX and CFDs, with a focus on offering 'top conditions' for trading. The site lacks detailed business information, regulatory disclosures, or comprehensive service descriptions, indicating a small-scale or early-stage online presence. Technically, the website uses standard web technologies including JavaScript, CSS, and SVG graphics. It integrates EmailJS for contact form submissions and relies on an external mailer service. The site appears moderately optimized for mobile devices and has a clean, consistent branding style. However, there is no evidence of advanced frameworks, CMS platforms, or performance optimization beyond basic standards. From a security perspective, the site lacks critical security headers and does not provide privacy or cookie policies, which are essential for GDPR compliance and user trust. The contact form is the sole method of communication, with no direct emails or phone numbers listed. No vulnerability disclosure or incident response information is available, which may pose risks in case of security incidents. Overall, the website demonstrates a basic but functional online presence with moderate professionalism. The absence of key compliance documents and security best practices suggests room for significant improvement to enhance trustworthiness and regulatory adherence.

W

Woodland (Aero Club) Private Limited

woodlandworldwide.com

43

Woodland (Aero Club) Private Limited operates a professional e-commerce platform specializing in premium outdoor footwear, apparel, and accessories. The company targets outdoor enthusiasts and customers seeking durable and stylish products for adventure and casual wear. The website demonstrates a strong brand presence supported by mobile applications on iOS and Android, and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and asynchronous loading of analytics and tracking scripts, though explicit security policies and cookie consent mechanisms are absent. Overall, the site is trustworthy and well-positioned in the retail outdoor gear market.

The website ccxlegal.com presents a minimal online presence with only a logo image and no substantive content or navigation. The lack of privacy policies, contact information, and business details significantly limits the ability to assess the company's market position or services. Technically, the site uses basic HTML and CSS without modern frameworks or scripts, and the mobile viewport configuration is incorrect, likely impairing mobile usability. Security posture is weak due to absence of HTTPS and security headers, exposing visitors to potential risks. Overall, the site appears to be a placeholder or under development, offering limited trust or engagement for users.

The website rechargeplus.com is currently a parked domain page hosted and managed by GoDaddy, LLC. It does not provide any active business services or content beyond offering the domain for sale. The page includes basic branding elements from GoDaddy and a Trustpilot widget for customer reviews, indicating some trust signals. The primary audience is domain buyers or investors interested in acquiring the domain. Technically, the site uses JavaScript, CSS, and third-party scripts for consent management and advertising, hosted on GoDaddy's parking platform. The site shows basic mobile optimization and accessibility but lacks SEO optimization and rich content. Security posture is limited; no HTTPS was detected in the provided data, and security headers are not evident. The site includes a GDPR-compliant cookie consent banner powered by TrustArc, but no contact or security policies are present. Overall, the site is legitimate as a parked domain but offers minimal business or security value in its current state.