Security Directory

C

Converge

convergeevent.com

60

The website represents an event named 'Converge' scheduled for September 7-11, 2025, hosted at Omni La Costa in Carlsbad, California, USA. It is built on the Cvent platform, leveraging modern JavaScript technologies including React and GraphQL, and integrates Google Tag Manager and Google Analytics for tracking. The site content is minimal, primarily serving as an event landing page with no visible forms or detailed business descriptions. WHOIS data is unavailable, indicating the domain may be unregistered or privacy protected, which reduces trustworthiness. No privacy or cookie policies are present, and no contact information is provided, limiting compliance and user trust. Security posture is moderate with HTTPS enabled but lacking security headers and explicit policies.

Universal Specialities Limited (USL) is a well-established New Zealand-based supplier specializing in healthcare and related market products, including medical, sport, consumer, equipment, and aesthetics sectors. With over 35 years of experience, USL operates multiple divisions and subsidiaries, providing a broad range of products and services to healthcare professionals and related industries. The company emphasizes quality, customer service, and innovation, supported by ISO 9001:2015 certification. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook SDK, Bootstrap, and lazy loading techniques to optimize performance and user experience. The site is mobile-optimized and uses HTTPS with secure login forms, although some security headers are missing. Analytics and tracking tools are used moderately, with no explicit privacy or cookie policies detected, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates good practices with HTTPS enforcement and secure form handling but lacks published incident response or vulnerability disclosure information. The absence of privacy and cookie policies is a compliance gap, especially under GDPR and similar regulations. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the HTML content. Overall, USL's website is trustworthy and professional, supporting a legitimate business operation. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing incident response contacts, and improving accessibility features to strengthen compliance and security posture.

USL Biomedical Services is a specialized division within the USL group focused on servicing biomedical equipment for healthcare providers in New Zealand. Their services include installation, training, repair, preventative maintenance, calibration, and electrical safety testing, adhering to AS/NZS 3551:2012 standards. The company targets a broad healthcare audience including public and private hospitals, clinics, aged care, and emergency services. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook SDK, and lazy loading for images, ensuring good mobile optimization and user experience. However, explicit security headers and comprehensive privacy and cookie policies are missing, which are important for compliance and security posture. The site uses HTTPS and secure login forms with CSRF protection, but lacks visible incident response or vulnerability disclosure information. Security-wise, the site shows a moderate security posture with room for improvement in headers and policy transparency. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional, professional, and trustworthy from a business perspective but should enhance privacy compliance and security best practices. Strategically, USL Biomedical Services should focus on publishing clear privacy and cookie policies, implementing security headers, and verifying domain registration details to improve trust and compliance. Enhancing incident response readiness and vulnerability disclosure will further strengthen their security culture and customer confidence.

USL Distribution is a New Zealand-based logistics and warehousing company specializing in healthcare and related sectors. They provide 3PL and 4PL services, managing a large SKU inventory and servicing over 10,000 customers nationwide, including all National District Health Boards. Their business model focuses on efficient supply chain management and direct delivery services, supported by advanced warehouse management systems. Technically, the website employs modern tracking and analytics tools, is mobile-optimized, and uses HTTPS for secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data is typical for .nz domains but should be verified for legitimacy. Overall, the site presents a professional and trustworthy image with good business credibility and moderate technical sophistication.

USL Aesthetics is a New Zealand-based division specializing in distributing advanced aesthetic medical products and equipment to healthcare professionals including Plastic Surgeons, Dermatologists, and Aesthetic Clinics. The company emphasizes customer service, product innovation, and comprehensive support including training and equipment servicing. Their product portfolio includes consumables like breast implants and fillers, as well as capital equipment such as lasers and body sculpting devices. The website reflects a professional healthcare business with a clear market focus and a medium-sized operational scale. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook SDK, and lazy loading for images, combined with Bootstrap for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. However, it lacks explicit privacy and cookie policies and does not implement visible security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and uses secure login forms with CSRF protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust analysis, but the website content and business presence appear legitimate. The site uses tracking technologies moderately, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, USL Aesthetics presents a credible and professional online presence with good technical implementation and security posture, but it should enhance privacy compliance and security header implementation to improve trust and regulatory adherence.

USL Consumer is a New Zealand-based healthcare product distributor established in 2007, serving retail markets including pharmacies, FMCG, and specialist retail. The company offers a broad portfolio of medical grade and consumer healthcare products, leveraging strong supplier partnerships and internal USL group synergies. The website reflects a professional and well-structured digital presence with clear navigation and comprehensive product categorization. Technically, the site employs modern web technologies such as Google Analytics, Facebook SDK, and lazy loading for images, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure login forms, though improvements are recommended in security headers and privacy compliance mechanisms. The absence of WHOIS data limits domain transparency but does not detract significantly from the overall trustworthiness given the professional content and clear business information. Strategic recommendations include enhancing privacy compliance, publishing security policies, and implementing security headers to strengthen the security posture further.

USL Sport Healthcare, a division of Universal Specialities Limited, is a well-established supplier of sports healthcare products in New Zealand. The company targets a professional audience including physiotherapists, sports doctors, and sporting organizations, offering a comprehensive range of products to support sports health and rehabilitation. The website reflects a medium-sized business with consistent branding and a professional online presence. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and Bootstrap for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial entities. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security disclosures.

USL Equipment is a New Zealand-based supplier specializing in medical equipment with a broad product range exceeding 2,500 SKUs across more than 30 categories. Their clientele includes public and private hospitals, aged care facilities, GP clinics, and community nursing sectors. The company emphasizes innovation, exemplary customer service, and in-house servicing capabilities, positioning itself as a trusted and established player in the healthcare supply market. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to healthcare providers. Technically, the site employs modern web technologies including Google Analytics, Facebook SDK, and Bootstrap, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and secure login forms, though lacking some security headers and published security policies. Privacy compliance is limited with no visible privacy or cookie policies, which is an area for improvement. WHOIS data is missing, raising some concerns about domain registration transparency, but the website content and business presence appear legitimate. Overall, the site demonstrates a good balance of business credibility and technical implementation with room for enhanced privacy and security practices.

G

Genea Fertility Australia

genea.com.au

61

Genea Fertility Australia is a leading healthcare provider specializing in fertility treatments and fertility preservation services. The company targets individuals and couples seeking personalized reproductive health care and operates primarily within the Australian market. Their website reflects a professional healthcare service provider with a broad range of fertility-related offerings including genetic testing, sperm donation, and patient education. The business model is service-oriented, focusing on patient care and support. Technically, the website is built on Salesforce Experience Cloud using Lightning Web Components, integrating modern analytics and payment technologies such as Google Analytics, Stripe, PayPal, and Adyen. The site demonstrates good digital maturity with a comprehensive Content-Security-Policy, HTTPS enforcement, and mobile optimization. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site employs strong HTTPS and CSP headers, uses secure cookies, and avoids exposing sensitive data. However, additional security headers and explicit incident response policies could enhance the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The site uses extensive tracking and advertising tools but maintains transparency. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. The main limitation is the lack of WHOIS transparency due to privacy protection, which is justified given the healthcare context. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance.

P

Perion

perion.com

62

Perion is an established technology company specializing in AI-powered advertising solutions that connect advertisers and brands with consumers across multiple digital channels. The company positions itself as a leader in the digital advertising space, offering a comprehensive platform that includes Connected TV, dynamic audio ads, digital out-of-home advertising, retail commerce solutions, and audience segmentation. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to advertisers and publishers. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, and various JavaScript libraries such as Swiper.js and jQuery. The site is hosted with a reputable registrar and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance and mobile optimization are good, with SEO best practices implemented through meta tags and structured data. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and clientTransferProhibited domain status. However, it lacks visible security headers and does not publish a dedicated security policy or incident response contacts. Cookie consent is managed effectively with granular user controls, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Perion’s website is professional, secure, and compliant with privacy regulations, reflecting a credible and trustworthy business. Strategic improvements could include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure program to further enhance security posture and transparency.

L

Local News Live

graydc.com

73

Local News Live is a digital news media organization delivering national news stories, video content, and livestreams primarily focused on U.S. current events. The website is professionally designed with consistent branding and targets a general audience interested in news and media content. Technically, the site leverages modern web technologies including React, Google Analytics, and Arc Publishing CMS, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy policies and contact information are lacking. The absence of WHOIS registration data is a notable anomaly that impacts domain trustworthiness. Overall, the site is functional and credible as a media outlet but would benefit from enhanced transparency and compliance documentation.

W

WCJB-TV

wcjbsales.tv

50

WCJB Sales TV is a media and marketing company focused on providing local and national businesses in North Central Florida with digital and broadcast marketing solutions. The company operates under the parent company Gray Television and offers services including television marketing, digital solutions, and creative services. Their website demonstrates a professional and consistent brand presence with clear contact channels and client testimonials, positioning them as a trusted local media partner. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and reCAPTCHA for analytics and security, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and form protections, though it lacks some security headers and cookie consent mechanisms. Overall, the website is credible, well-structured, and serves its business purpose effectively.

S

Smile Store

smilestore.co.nz

47

Smile Store is a New Zealand-based e-commerce platform specializing in oral health products for teeth, mouth, and face care. Positioned as NZ's first and favourite online oral health shop, it offers a wide range of dental and wellness products backed by a team of dental experts. The website targets New Zealand consumers seeking quality and affordable oral care solutions. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA, ensuring a robust digital presence with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers could be improved. Privacy compliance is basic, with privacy and terms pages present but lacking cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the professional site presentation and content suggest a legitimate business. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing clear security and incident response policies.

C

ClickReport LLC

clickreport.com

67

ClickReport LLC operates a specialized SaaS platform focused on automated pay-per-click (PPC) fraud detection, prevention, and real-time reporting to protect digital advertising budgets. The company targets businesses and marketers using PPC platforms such as Google Ads, Yahoo, and Bing, offering tools like daily click reports, real-time alerts, and a four-tiered warning system. The website demonstrates a professional and consistent brand presence with clear calls to action for free trials and signups. Technically, the website employs modern web technologies including Bootstrap 4, jQuery, Google Tag Manager, and tracking pixels from Google and Bing. It is mobile optimized and uses HTTPS with secure forms and consent management, reflecting a mature digital infrastructure. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but lacks published vulnerability disclosure or security.txt files. The absence of WHOIS data reduces domain trust slightly, though the website content and business model appear legitimate and professional. No adult or questionable content is present, and privacy policies indicate GDPR compliance. Overall, ClickReport presents a credible and focused business with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and WHOIS data availability would enhance trust and security posture further.

Framna is a newly founded digital product agency established in 2023, specializing in partnering with industry leaders to create innovative digital products that drive market leadership and growth. The company operates across multiple countries with over 500 specialists and emphasizes a product-first approach. Their website is professionally designed, mobile-optimized, and rich in multimedia content, reflecting a mature digital presence despite the company's recent founding. Technically, the site leverages HubSpot CMS, modern JavaScript libraries, and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS and security headers, though some improvements like DNSSEC and published security policies are recommended. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Business credibility is supported by multiple industry awards and reputable partner logos, though direct contact details are limited to forms. Overall, Framna presents as a credible, professional digital agency with room to enhance transparency in security and contact information.

O

Oxley

combo.com

52

The website hosted on oxley.com is a domain marketplace landing page offering the premium domain combo.com for sale. It targets domain investors and buyers interested in premium domains, providing a form to submit offers with flexible payment options. The business model is focused on domain brokerage and sales, with a consistent and professional branding approach. The technical infrastructure leverages established frontend technologies such as jQuery, Bootstrap 3, and Font Awesome, with Google Analytics and Tag Manager integrated for user tracking and marketing insights. Hosting and DNS services are provided via Cloudflare and NameCheap, ensuring reliable performance and security. Security posture is moderate, with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating a gap in compliance. Overall, the site is accessible, safe, and functional but would benefit from enhanced security and privacy measures.

G

GREENYARD a.s.

greenyard.com

47

GREENYARD a.s. is a Slovakian real estate company specializing in rental spaces, primarily commercial properties in Žilina. The website serves as a portal showcasing available rental locations with image galleries and contact information. The business model focuses on property rental and management targeting local businesses or individuals seeking commercial spaces. The company maintains a modest online presence with basic branding and limited content depth. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with Google Analytics for visitor tracking. The site is mobile responsive and moderately optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. Security measures are minimal with no visible security headers or privacy policies, and the WHOIS data is missing, which raises concerns about domain registration legitimacy. From a security perspective, the site uses HTTPS but lacks important security headers and privacy compliance indicators. No forms or sensitive data collection points are present, reducing immediate risk. However, the absence of privacy and cookie policies and missing WHOIS data reduce trustworthiness. Overall, the site is functional but requires improvements in security posture and compliance. The overall risk is moderate due to missing WHOIS data and lack of privacy compliance. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and adding incident response contacts to enhance trust and compliance.

C

CareerSource Florida

careersourceflorida.com

51

CareerSource Florida is a government workforce policy and investment board dedicated to guiding workforce development across the state of Florida. It operates a network of local workforce development boards and career centers, providing services to both employers and job seekers. The organization offers workforce training grants, business services, and policy oversight to foster economic prosperity in Florida. The website reflects a mature digital presence with a professional design, clear navigation, and relevant content tailored to its audience of businesses and job seekers. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools, indicating a focus on user engagement and performance measurement. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration and hosting details align with a legitimate and stable government entity, supporting high business credibility.

I

International Gemological Institute

igi.org

63

The International Gemological Institute (IGI) operates as the world’s largest gemological institute, providing certification and education services related to gems and jewelry. The website content focuses on these core services, targeting industry professionals, jewelers, and students. The business model centers on laboratory services and educational offerings in the gemological sector. The website branding is consistent with the organization's identity, though content quality is basic with limited visible detailed information in the provided HTML snippet. From a technical perspective, the website employs common analytics and tracking technologies such as Google Analytics, Microsoft Clarity, and Facebook Pixel, alongside accessibility tools like UserWay and iconography via Font Awesome. However, there is no evidence of advanced frameworks or CMS platforms in the provided data. Performance and mobile optimization appear moderate to basic, with accessibility features present but no explicit SEO or security enhancements detected. Security posture is limited based on the available data, with no visible security headers or explicit security policies. The SSL/TLS configuration could not be verified from the data provided. The absence of privacy, cookie, and terms of service policies reduces compliance confidence. No contact information or incident response channels are evident, which could impact user trust and regulatory compliance. Overall, the domain WHOIS data is unavailable or privacy protected, which is common for organizations of this nature but reduces transparency. The website is accessible without WAF or blocking mechanisms. The content is safe for general audiences with no adult or questionable material detected. The AI scoring reflects moderate business credibility but lower technical and privacy compliance scores, resulting in an overall average rating.

S

SeventyTwo

72dpi.co.nz

58

SeventyTwo is a specialist New Zealand-based digital agency with over 15 years of experience, offering a broad range of digital services including website development, e-commerce, custom software, UI/UX design, and digital strategy. The company targets progressive Kiwi businesses and positions itself as a trusted partner in digital transformation. The website reflects a professional and consistent brand with strong client testimonials and a diverse client portfolio. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Google Maps API, and reCAPTCHA, and is hosted by a reputable New Zealand registrar. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

M

METVA.CZ

metva.cz

69

METVA.CZ is a specialized weather alert service focused on providing up-to-date meteorological warnings for the Czech Republic. The website offers detailed weather warnings including rain, snow, wind, thunderstorms, and freezing rain, updated every five minutes. It targets the general public and possibly emergency services or businesses requiring timely weather information. The service includes interactive maps and options for SMS and email alerts, positioning itself as a regional leader in weather warnings. The domain is mature, registered since 2010, and uses reputable infrastructure and third-party services for analytics and advertising.

U

UWZ.at

unwetter.ch

70

unwetter.ch is a professional weather warning platform focused on providing real-time and accurate severe weather alerts for Switzerland. The site offers free content such as radar, videos, and news, alongside subscription-based premium alert services delivered via SMS and email. It maintains a consistent brand presence and is part of a network of related European weather warning sites. The technical infrastructure leverages modern JavaScript frameworks, OpenLayers for mapping, and integrates Google Analytics and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is well-structured, user-friendly, and trustworthy, serving a general audience seeking weather information and alerts.

A

Alachua County Tax Collector

alachuacollector.com

50

The Alachua County Tax Collector website serves as the official digital presence for the county's tax collection and licensing services. It offers a broad range of services including property tax payments, motor vehicle and vessel registrations, driver license information, concealed weapon licensing, and birth certificate issuance. The site is well-positioned as a trusted government entity, reinforced by multiple performance awards and positive customer testimonials. Technically, the site is built on WordPress with a modern theme and plugins, integrating appointment booking and payment processing through trusted partner domains. Security posture is solid with HTTPS and reCAPTCHA in place, though explicit security headers and privacy policies are lacking. WHOIS data is incomplete, which slightly impacts transparency but does not detract from the site's legitimacy given its government affiliation. Overall, the site demonstrates a mature digital infrastructure with room for improvement in privacy compliance and security best practices.

F

Florida Department of Health

floridahealth.gov

59

The Florida Department of Health operates as the official state government agency responsible for public health services across Florida. The website serves as a comprehensive resource hub for residents, healthcare professionals, and public health stakeholders, offering information on disease reporting, licensing, health statistics, environmental health, and certificates issuance. The agency holds accreditation from the Public Health Accreditation Board, reinforcing its credibility and leadership in public health. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and Google Analytics, ensuring a responsive and accessible user experience. The site is well-optimized for mobile devices and incorporates accessibility features, although there is room for improvement in cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and follows several best practices, but lacks some security headers and public incident response information. The WHOIS data is incomplete, which is unusual for a government domain, but the website content and domain usage strongly indicate legitimacy. Overall, the site maintains a good security posture with recommendations to improve privacy compliance and transparency. Strategically, the Florida Department of Health website effectively supports its mission to provide public health information and services, with strong branding and trust indicators. Enhancing privacy and security disclosures would further strengthen user trust and regulatory compliance.

C

Children's Trust of Alachua County

childrenstrustofalachuacounty.us

51

Children's Trust of Alachua County is a non-profit organization dedicated to supporting children and youth in Alachua County, Florida. The organization focuses on funding community programs, providing resources, and advocating for children's well-being. Their website reflects a well-structured, community-oriented entity with clear contact information and active social media engagement. The business model is centered on public trust funding and community collaboration, positioning them as a trusted local resource. Technically, the website is built on Drupal 7 with common web technologies such as jQuery and Google Analytics. The site is mobile-optimized, accessible, and performs moderately well. However, it lacks some modern security headers and explicit cookie consent mechanisms, which could be improved to enhance privacy compliance and security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data. There is no evidence of a published security policy or incident response contacts, which are recommended for transparency and preparedness. The absence of WHOIS data limits domain registration trust signals, but the professional presentation and consistent branding support legitimacy. Overall, the website is a credible and professional representation of a local non-profit organization with room for improvement in privacy compliance and security best practices.

Z

Zalo Group

zalo.vn

68

Zalo Group operates the Zalo PC platform, a leading Vietnamese messaging application offering desktop clients for Windows, Mac OS, and web access. The platform targets general users and business teams, providing features such as large file transfers, group chat optimization, and synchronization with mobile devices. The website is professionally designed, consistent in branding, and provides clear navigation and relevant content in Vietnamese. The business model includes free software downloads and additional services for enterprises such as Official Accounts and developer APIs. Technically, the site uses modern JavaScript libraries like jQuery and Bootstrap, integrates Google Analytics and adtima for marketing and tracking, and supports multiple platforms. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacks DNSSEC and explicit security headers. Privacy compliance is basic with cookie consent implemented but no detailed privacy or security policies visible on the main page. WHOIS data shows privacy protection but domain age and registrar are consistent with a legitimate business. Overall, the site is trustworthy and professional but could improve security and compliance transparency.

A

Adtaxi

adtaxi.com

58

Adtaxi is a digital marketing agency specializing in programmatic advertising, social media marketing, and search engine marketing (SEM). The company positions itself as client-centric, offering performance-driven solutions tailored to advertisers. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies, indicating a mature approach to digital compliance and user experience. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Technically, the site is built on WordPress with modern libraries and tracking tools such as Google Analytics and Google Tag Manager, supported by Osano for cookie consent management. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit incident response policies. Overall, the website presents a professional front but requires verification of domain registration and enhancement of security policies to improve trust and compliance.

O

Office of Court Administration

efiletexas.gov

57

eFileTexas.gov is the official electronic filing system for Texas courts, operated by the Office of Court Administration. It serves attorneys and legal professionals by providing a mandated platform for e-filing civil, family, probate, and criminal case documents across multiple Texas courts. The website acts as a portal linking to various authorized e-filing service providers and offers resources and information to support legal filing processes statewide. The platform holds a strong market position as the mandated state e-filing system, reflecting its essential role in Texas judicial operations. Technically, the website employs a moderate technology stack including Google Analytics, Crazy Egg, and Marketo for tracking and marketing purposes. Hosting is supported by Microsoft Azure DNS services. The site demonstrates good design and navigation clarity but lacks advanced mobile optimization and accessibility features. Performance is moderate, with no critical technical flaws detected in the HTML content. However, the domain's expired status and lack of DNSSEC present operational and security risks. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and a cookie consent mechanism, which are important for compliance and protection. The expired domain registration is a significant concern that could impact service availability and trust. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, eFileTexas.gov is a credible and authoritative government service with good business credibility and content quality. Strategic improvements in domain management, security headers, and privacy compliance would enhance its security posture and user trust. The site is safe for general audiences and free from adult or questionable content.

S

Stichting Erkend Hypotheekadviseur

seh.nl

58

Stichting Erkend Hypotheekadviseur (SEH) operates as a recognized quality mark and community for financial advisors in the Netherlands, focusing on certification, professional development, and sector visibility. Established in 1998, SEH supports over 5000 advisors with events, publications, and a digital platform to enhance trust and expertise in financial advice. The website is built on modern technologies like SvelteKit and integrates privacy-compliant tools such as Cookiebot and Google Analytics. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities. Contact information and social media presence are clear and professional, supporting business credibility. Overall, the site demonstrates a mature digital infrastructure and a trustworthy business model.

H

Halo 10-Year Residential Guarantee

halo.nz

58

Halo Guarantees Limited operates the Halo 10-Year Residential Guarantee, a specialized service providing building guarantees in New Zealand. The company partners with NZCB approved builders to offer comprehensive coverage for residential building projects, including defect repairs, alternative accommodation, and professional fees. The website is well-structured and targets property owners and builders seeking reliable building guarantees. Technically, the site is built on WordPress using Elementor and Yoast SEO, with Cloudflare DNS and Google Analytics integration, indicating a modern digital infrastructure. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and privacy compliance elements. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy business presence.

A

AXA GLASS bv/srl

axaglass.be

47

Axaglass is a specialized consultancy and distribution company focused on glass container packaging, serving primarily the Belgian and French markets. Their offerings include glass bottles, jars, closures, one-way kegs, and bottling machines, positioning them as a leading agent for glass container factories in their region. The company has an established presence since 2000, with a professional and consistent online presence that supports their business credibility. Technically, the website uses a custom CMS with a Foundation CSS framework and includes modern JavaScript libraries such as jQuery and animation tools. The site is mobile-optimized and includes standard analytics tools like Google Analytics and Google Tag Manager, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. From a security perspective, while HTTPS status is not explicitly confirmed, the site shows no signs of blocking or WAF challenges and implements cookie consent for privacy compliance. However, there is room for improvement in security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policies and technical hardening would enhance their security posture and trustworthiness further.

F

Flying Elephant

marcel.app

66

Marcel is a SaaS platform operated by Flying Elephant, offering an all-in-one invoicing and communication solution tailored for Belgian small businesses, freelancers, students, and non-profit organizations. The platform emphasizes ease of use, privacy, and professional presentation, positioning itself as a niche player in the Belgian market. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content to its target audience. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates Google Analytics and Tag Manager for analytics and marketing purposes. It uses HTTPS with strong SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and published security policies are absent, representing an area for improvement. From a security perspective, the site shows good practices such as encrypted connections and privacy consent but lacks visible incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's branding and business claims, supporting legitimacy. Overall, Marcel presents a professional and trustworthy online presence with solid privacy compliance and user experience. Strategic enhancements in security policy transparency and security headers would further strengthen its security posture and trustworthiness.

Toyota Material Handling Australia operates the website www.toyotaskidsteerloader.com.au as a distributor of Toyota Huski skid steer loaders and related construction equipment in Australia. The company positions itself as a leading supplier in the construction and earthmoving sectors, offering a broad range of machinery including Takeuchi excavators and Toyota forklifts. The website content is professionally presented, with clear branding and customer testimonials that reinforce trust and reliability. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. Security measures include HTTPS and Google reCAPTCHA on forms, but lack some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is accessible, well-structured, and aligned with the business's market claims, though WHOIS data is unavailable due to privacy or query failure, slightly reducing trust metrics.

T

Toyota Material Handling Australia

toyotaforklifts.com.au

66

Toyota Material Handling Australia operates as a leading provider of forklifts and material handling equipment across Australia, offering sales, rental, servicing, and parts. The company holds a strong market position supported by a wide product range, extensive service network, and trusted brand reputation. Their website reflects a professional and comprehensive digital presence with clear business information and customer engagement features. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Splide.js for UI components, alongside Google Analytics and Facebook Pixel for marketing analytics. Security posture is solid with HTTPS enforced and secure form validation, though improvements are recommended in security headers and cookie consent mechanisms. WHOIS data is unavailable due to registrar privacy policies, but the website's consistency and branding support legitimacy. Overall, the site is well-structured, user-friendly, and business-focused, suitable for its target audience of Australian industrial and logistics businesses.

H

Fast and Flexible Web Hosting for Small Business with HELP!

help.com

64

HELP! is a small business-focused web hosting provider offering fast, secure, and scalable hosting solutions. The website presents a professional appearance with clear messaging targeting small businesses seeking reliable hosting services. The technical infrastructure includes modern fonts, iconography, and integration with marketing and analytics platforms such as HubSpot, Facebook Pixel, and Google Analytics, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is limited with no visible security headers or privacy policies, and no contact information is provided, which may impact trust and compliance. Overall, while the business offering is clear and the website is functional, significant improvements in security, compliance, and transparency are recommended to enhance trustworthiness and reduce risk.

A

Customer Review Management Software | AddMe Reviews

addme.com

58

The website at www.addme.com appears to be a marketing or social media related platform, as indicated by the presence of multiple tracking and advertising scripts such as HubSpot, Facebook Pixel, LinkedIn Insight Tag, and Google Analytics. However, the lack of WHOIS registration data and absence of any registrant or registrar information raises concerns about the domain's legitimacy and ownership. The website content is accessible without any WAF or security challenge blocking access, but it lacks critical business information such as privacy policies, cookie policies, terms of service, and contact details. Technically, the site uses common web technologies like jQuery and FontAwesome, but there is no evidence of advanced security configurations or headers. Overall, the security posture is weak, and privacy compliance is poor due to missing policies and extensive tracking without clear user consent mechanisms.

D

Domains By Proxy, LLC

znd.co

64

ZND is a digital asset management platform operating in the finance and blockchain sectors, offering services that blend AI, real-time data, and both traditional and decentralized finance products. The website positions itself as a platform for exploring, earning, trading, and borrowing digital assets, targeting investors, traders, and blockchain enthusiasts. The domain is mature, registered since 2015, and uses privacy protection common in the industry. Technically, the site is built with the Framer framework, hosted behind Cloudflare DNS, and integrates Google Analytics for user tracking. The design quality and user experience are good, with mobile optimization and SEO practices in place. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which impacts its privacy compliance and trustworthiness scores. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

V

Victorian Pride Centre Ltd.

pridecentre.org.au

56

The Victorian Pride Centre is a dedicated non-profit community hub serving Australia's LGBTIQA+ communities, providing vital health, cultural, and community services alongside event spaces and resource directories. The organization holds a unique position in Victoria, Australia, as the first purpose-built centre for this community, targeting LGBTIQA+ individuals, allies, and service providers. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding, supporting its mission effectively. Technically, the website is built on a modern WordPress platform with WooCommerce integration for donations, leveraging popular libraries such as jQuery and Bootstrap for responsive design. It employs Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing, alongside a cookie consent mechanism, indicating a moderate level of digital maturity. Performance is moderate with good mobile optimization and accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie policy and consent mechanism present but no explicit privacy policy or terms of service found in the provided content. Contact information is clearly available, enhancing trust. Overall, the Victorian Pride Centre website demonstrates a strong community-focused business model with a solid technical foundation and a good security posture. Strategic improvements in privacy documentation and security headers would further enhance compliance and trust.

N

Nova Medical Finance

novamedical.co.nz

65

Nova Medical Finance is a New Zealand-based medical finance provider specializing in flexible payment plans for a variety of medical procedures including plastic surgery, bariatric surgery, laser eye surgery, dentistry, and fertility treatments. The company emphasizes its doctor ownership and close relationships with leading specialists, positioning itself as a trusted partner for patients seeking financing for life-changing medical treatments. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience in New Zealand. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, Google Tag Manager, Google Analytics, and Google reCAPTCHA to enhance user experience, tracking, and security. The site is served over HTTPS with no visible security vulnerabilities in the content. However, some security best practices like security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows good use of HTTPS and anti-bot measures but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the site maintains a moderate to good security posture but would benefit from enhanced transparency and compliance features. Strategically, the business should focus on verifying and publishing domain registration details, implementing comprehensive privacy and cookie policies with user consent, adding security headers, and establishing clear incident response and vulnerability disclosure policies to build greater trust and compliance with data protection regulations.

Pukekohe Travel is a well-established, owner-operated New Zealand travel agency with 47 years of experience specializing in escorted tours, cruises, rail tours, leisure, and business travel. The website presents a professional and comprehensive overview of their services, targeting travelers seeking curated travel experiences. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance marketing and security. The site is mobile-optimized with good SEO practices and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data limits domain legitimacy verification, but the business content and trust indicators suggest a credible operation. Overall, the website is functional, professional, and trustworthy with minor security and privacy compliance gaps.

T

The Shed Shop

theshedshop.co.nz

60

The Shed Shop is a New Zealand-based small business specializing in the custom design, manufacture, delivery, and installation of garden sheds made from timber and pre-painted steel. The company emphasizes fully tailored solutions to meet diverse customer needs across the North Island. Their website reflects a professional and customer-focused approach with clear contact details and testimonials, positioning them as a niche provider in the garden shed market. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside Typekit fonts and Bootstrap framework, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers highlight compliance and security gaps. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and registration status, though the website content itself appears legitimate and professional. Overall, the site is accessible, well-structured, and user-friendly but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

Loveridge Builders Ltd is a New Zealand-based construction company specializing in large-scale developments and residential building projects. With 25 years of experience, the company positions itself as a trusted partner for developers and home buyers, offering services from design collaboration to building completion. The website reflects a professional and consistent brand image, emphasizing certifications such as Licensed Building Practitioner and Master Builders Guarantee, which enhance trust and credibility. Technically, the website employs modern web technologies including Vue.js, Google Analytics, and lazy loading for images, contributing to good performance and mobile optimization. However, there is room for improvement in accessibility and security headers implementation. The absence of privacy and cookie policies indicates a compliance gap that should be addressed to meet GDPR and other privacy regulations. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The lack of WHOIS data limits domain trust assessment, but the business content and certifications suggest legitimacy. Overall, the security posture is moderate with recommendations to enhance header security and privacy disclosures. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance and security best practices will strengthen the company's digital trustworthiness and regulatory adherence.

Nevis Bluff Wines Ltd is a small New Zealand-based winery specializing in Pinot Noir wines from the Central Otago region. The company emphasizes natural winemaking with minimal intervention and targets wine consumers and restaurants. The website is professionally designed with good content quality and clear navigation, including an age verification modal appropriate for alcohol sales compliance. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Typekit fonts, and Bootstrap framework, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS enforced and age verification implemented, but lacks explicit security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable, which reduces trust from a domain registration perspective, though the website content and branding appear legitimate. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

CoverCorp Limited, operating under Absolute Awnings Ltd, is a specialized awning manufacturer and installer based in Auckland, New Zealand. With over 28 years of heritage, the company offers a range of custom awning products including retractable awnings, fixed frame awnings, retractable roof systems, and patio screens. Their business model focuses on providing tailored outdoor shading solutions to residential and commercial clients, supported by consultation and financing options. The website reflects a professional market position with strong customer testimonials and detailed product information.

C

Cavalry LTD

cavalry.co.nz

58

Cavalry LTD operates as a leading outsourced marketing agency based in Auckland, New Zealand, focusing on providing strategic marketing and implementation services to SMEs across New Zealand and Australia. Their key offerings include brand strategy, design, video content, social media management, and brand identity development. The company positions itself as a comprehensive marketing resource for businesses lacking in-house expertise, emphasizing faster and smarter brand market entry. The website content is professional, well-structured, and targets New Zealand SMEs effectively. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, Mailchimp for newsletter management, and responsive design techniques ensuring good mobile optimization. The site loads moderately fast and includes SEO-friendly meta tags and structured navigation. However, there is no detected CMS or hosting provider information, and accessibility features are basic. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. The site uses secure third-party services for forms and tracking but lacks published security policies or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with professional content and business legitimacy. Recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility to improve compliance and security posture.

The Surveying Company is a New Zealand-based professional service provider specializing in land surveying, planning, and civil engineering consulting. The company targets landowners, developers, and planners within New Zealand, offering expert services to support property subdivision, mapping, and engineering projects. The website presents a professional image with clear branding, consistent messaging, and comprehensive service descriptions, positioning the company as a trusted regional player in the real estate and engineering sectors. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. The SSL configuration is excellent, ensuring secure communications, but the absence of security headers is a notable gap. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of security headers and absence of an incident response or vulnerability disclosure policy reduce the overall security maturity. Privacy compliance is partial; while privacy and terms of use pages exist, there is no cookie consent mechanism, which may impact compliance with privacy regulations such as GDPR. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, explicit cookie consent, and improved transparency around security policies. The lack of WHOIS data is a concern for domain legitimacy verification, though the website content and contact information support the company's credibility. Strategic improvements in security and privacy compliance will strengthen trust and reduce risk.

C

Carlielle Kitchens

carliellekitchens.co.nz

53

Carlielle Kitchens is a small, family-owned business specializing in kitchen design, manufacture, and installation with over 25 years of experience serving Auckland, New Zealand. The website presents a professional image with clear branding, a good user experience, and relevant content targeting homeowners and property developers. The company emphasizes quality and trust through certifications and a unique 20-year guarantee. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Typekit fonts, indicating moderate digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers suggest areas for improvement in compliance and security. The WHOIS data is unavailable, which limits domain trust verification, but the website content and external partner links support legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

Eurobike Wholesale Ltd is a New Zealand-based importer and wholesaler specializing in high-quality motorcycle parts and accessories, primarily sourced from Italy. The company focuses on premium brands such as Givi, Brembo, Athena, Spidi, Nolan, Scottoiler, and Domino, targeting motorcycle enthusiasts and retailers within New Zealand. The website presents a comprehensive product catalog with clear navigation and consistent branding, reflecting a medium-sized business with a solid market position in the transportation retail sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, lazy loading for images, and integrates analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate with room for improvement in loading speed and technical modernization. From a security perspective, the site uses HTTPS and includes tracking scripts securely. However, there is a lack of visible security headers and no published privacy or cookie policies, which are critical for compliance with data protection regulations such as GDPR. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and branding suggest a legitimate business. No vulnerabilities or exposed sensitive data were detected. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but scores low in privacy compliance and domain legitimacy verification. Strategic improvements in privacy policy publication, security header implementation, and domain registration transparency are recommended to enhance trust and compliance.

Green Valley Dairies is a New Zealand-based dairy manufacturing company specializing in organic and premium milk products, including barista ranges and creams. The company emphasizes farm-to-bottle freshness and operates Marphona Farms, a leading organic and non-organic farming operation. Their market position is strong within the regional dairy manufacturing sector, targeting cafés, food service industries, and retail consumers. The website reflects a professional and consistent brand image with clear product offerings and social media engagement. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and responsive design frameworks like Bootstrap. The site loads with moderate performance and is mobile optimized, though accessibility features are basic. SEO is implemented at a basic level with meta tags and structured data present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No forms or sensitive data collection points were detected, reducing immediate risk. The absence of WHOIS data for the domain is unusual and slightly reduces trustworthiness, though the site content and branding appear legitimate. Overall, the website is professional and functional with moderate technical maturity and some compliance shortcomings. Strategic improvements in privacy disclosures, security headers, and WHOIS transparency would enhance trust and security posture.

Wave Shade is a New Zealand-based company specializing in the design and wholesale distribution of retractable wave shade products, primarily targeting homeowners and wholesale customers. The company operates under the parent brand NuRange and emphasizes custom-made, durable, and stylish outdoor shade solutions. Their market position is that of a leading provider within New Zealand, with a focus on quality and user-friendly design. The website reflects a professional and consistent brand image with clear business information and customer engagement features such as testimonials and newsletter subscriptions. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Zendesk Chat, Bootstrap framework, and Vimeo video embedding. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration status. Overall, the security posture is moderate but could be improved with better transparency and technical safeguards. The overall risk assessment suggests a legitimate business with a well-presented online presence but with some gaps in privacy compliance and domain registration transparency. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and verifying domain registration details to improve trust and compliance.