Security Directory

V

Valley City State University

vcsu.edu

60

Valley City State University (VCSU) is a public higher education institution located in Valley City, North Dakota, with a rich history dating back to 1890. The university offers a broad range of academic programs including undergraduate, graduate, online, and continuing education, serving a diverse student body. VCSU positions itself as a student-focused, learning-centered institution within the North Dakota University System, emphasizing immersive experiences and career readiness. The website reflects this mission with comprehensive academic information, student life resources, and community engagement content. Technically, the website is built on WordPress 6.9.4 and leverages modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Google Analytics. The site is mobile optimized, accessible, and performs moderately well. It integrates multiple external services for analytics, advertising, and accessibility enhancements. However, some security best practices such as security headers and cookie consent mechanisms are not fully implemented. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. There are no visible vulnerabilities or exposed sensitive data in the HTML content. The absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in security transparency and compliance. The WHOIS data query for the subdomain 'www.vcsu.edu' failed, but this is likely due to querying a subdomain rather than the root domain 'vcsu.edu'. This does not significantly detract from the legitimacy of the institution but slightly reduces trust in domain registration transparency. Overall, VCSU's website is professional, content-rich, and trustworthy, serving its educational mission effectively. Strategic recommendations include implementing cookie consent for privacy compliance, adding security headers, publishing security and incident response polici…

JB Elite is a UK-based specialist company providing commercial and domestic swimming pool services including construction, maintenance, refurbishment, and automation. Established in 2013 by experienced engineers, the company holds industry certifications and multiple awards, positioning itself as a trusted provider in the East and West Midlands regions. The website is professionally designed using WordPress and Elementor, featuring clear navigation, responsive design, and SEO optimization. Technical infrastructure includes modern web technologies and integration with third-party services such as CallRail for tracking. Security posture is generally good with HTTPS enforced and secure forms, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data due to domain naming rules violation introduces some trust concerns, but the overall business credibility remains high based on content and trust signals. Strategic recommendations include enhancing security policies, publishing incident response information, and improving privacy compliance features.

C

Charles Andrews Ltd

charlesandrews.co.uk

51

Charles Andrews Ltd is a well-established independent building services consultancy founded in 1945, specializing in mechanical and electrical engineering consultancy services for both public and private sectors. The company boasts a strong market position supported by over 80 years of experience, multiple industry accreditations, and a portfolio of completed projects across various sectors including education, healthcare, and infrastructure. Their website reflects a professional and consistent brand image with clear navigation and comprehensive content about their services and projects. Technically, the website employs a modern JavaScript stack with libraries such as jQuery, Owl Carousel, and Google Tag Manager, and integrates Google reCAPTCHA for security. The site is mobile-optimized and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented; however, the absence of security headers and a published security policy are areas for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules error, which raises some concerns about domain registration legitimacy, though the website content and business information appear credible. Overall, the site demonstrates a mature digital presence with room for enhanced security practices.

B

Bakewell & Horner

bakewellhorner.co.uk

56

Bakewell & Horner is a well-established estate agency based in Wallasey, UK, specializing in residential and commercial property sales, lettings, and management services. The company boasts over 80 years of experience and holds multiple industry accreditations including PropertyMark, ARLA, and is Rightmove qualified. Their market position is strengthened by recent awards such as the Best Estate Agent Guide 2025 and British Property Awards 2025, reflecting a strong local reputation and customer trust. The website targets local residents and property owners in the Wirral region, offering services such as instant property valuations and comprehensive property management. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and AOS for animations. It integrates Google Analytics and Facebook Meta Pixel for analytics and marketing purposes, with a cookie consent mechanism in place. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security best practices such as implementation of security headers are missing, and no security.txt or explicit security policy is found. From a security perspective, the site uses HTTPS with a good SSL configuration and manages user consent for analytics and advertising cookies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS lookup for the domain www.bakewellhorner.co.uk failed due to domain naming rules, indicating the domain may be an alias or subdomain, which slightly impacts trust from a domain registration standpoint. Nonetheless, the website content and business information strongly indicate legitimacy. Overall, the website demonstrates a solid business presence with good technical implementation and privacy compliance. Strategic recommendations include enhancing security headers, adding a security.txt file for vulnerability disclosure, and clarifying domain registration …

T

Telecoms Consortium

telecomsconsortium.com

41

Telecoms Consortium is a UK-based telecommunications service provider established in 2005, offering a range of voice and data solutions tailored for businesses of all sizes, including carriers, resellers, and end users. Their key offerings include hosted telephony, SIP trunking, broadband services, and proprietary management software called Swift. The company positions itself as a reliable partner with a focus on seamless communication solutions and cost savings for clients. The website reflects a mature digital presence built on WordPress with professional design and clear navigation.

G

Getty Realty Corp.

gettyrealty.com

57

Getty Realty Corp. is a publicly traded real estate investment trust (REIT) specializing in net lease convenience, automotive, and single tenant retail properties across the United States. The company is listed on the NYSE under the ticker GTY and maintains a Fitch credit rating of BBB-. Their business model focuses on acquisition, financing, redevelopment, and asset management of freestanding retail properties, serving investors and partners in the commercial real estate sector. The website reflects a professional corporate presence with investor relations content and recent news updates.

Ply-Line Services Ltd. is a specialized provider of custom van solutions, focusing on ply lining kits, roof racks, shelving, bulkheads, and security accessories tailored for commercial vehicles. With nearly 30 years of experience serving businesses across the North of England, the company positions itself as a trusted regional expert offering mobile fitting services. The website reflects a professional and consistent brand image with clear contact channels and service descriptions. Technically, the site is built on WordPress with Elementor, employing modern web technologies and responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS and CAPTCHA-protected contact forms, though it lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data is unavailable due to domain naming issues, but the website's legitimacy is supported by its content and contact transparency. Overall, the site is a reliable digital presence for a small transportation sector business, with room for improvement in privacy and security disclosures.

S

Sterling Hydrotech

sterling-hydrotech.co.uk

40

Sterling Hydrotech is a well-established UK-based specialist in swimming pool filtration and water treatment, operating since 1988. The company offers a comprehensive range of services including design, supply, installation, servicing of filtration and water treatment equipment, and training for pool plant operators. Their market position is strong within commercial leisure facilities, local authorities, schools, NHS, military, and other institutional clients. The website reflects a professional and consistent brand image with clear service offerings and accreditations that enhance trust. Technically, the website is built on WordPress using the Uncode theme, leveraging modern web technologies such as jQuery, Owl Carousel, and Google reCAPTCHA for security. The site is hosted by a reputable UK registrar and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements cookie consent mechanisms aligned with GDPR. However, it lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Sterling Hydrotech presents a low-risk profile with a mature online presence, good business credibility, and adequate security posture. Strategic improvements in security transparency and accessibility could further enhance trust and compliance.

A

AECOM

aecom.com

70

AECOM is a global leader in infrastructure consulting, engineering, design, construction, and management services. The company operates at an enterprise scale with a strong market position in sectors such as energy, transportation, government, healthcare, and water. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with modern libraries and frameworks, including Google Tag Manager and Mapbox, supporting good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers appear absent. Privacy compliance is well addressed with accessible policies and GDPR indicators. Overall, the domain registration data aligns well with the company's profile, confirming legitimacy and trustworthiness.

L

Littlecroft Properties Limited

littlecroftproperties.co.uk

55

Littlecroft Properties Limited is a UK-based real estate company specializing in residential, retail, office, and development properties primarily in East London and Essex. Established since 1975, the company serves property buyers, renters, investors, and developers with a focus on local market expertise. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a commitment to user privacy and regulatory compliance. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various UI plugins. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Analytics are implemented via Google Tag Manager, and cookie consent mechanisms are in place, supporting GDPR compliance. From a security perspective, the site uses HTTPS and secure login forms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected, but improvements in security headers and transparency would enhance the security posture. Overall, the website is trustworthy and professionally maintained, though the WHOIS data query was performed incorrectly on a subdomain, resulting in missing domain registration details. This discrepancy slightly reduces trust but does not indicate malicious intent. Strategic recommendations include enhancing security headers, publishing security policies, and verifying WHOIS data for domain legitimacy.

C

Chris Leishman Design

leishmandesign.co.uk

50

Chris Leishman Design is a small creative design studio based in Torquay, Devon, UK, established in 2009. The company offers a broad range of services including graphic design, branding, photography, illustration, packaging, and online services targeting local, national, and international companies. The website showcases a professional portfolio demonstrating diverse projects and clients, positioning the company as an established player in the creative media sector. Technically, the website is built on WordPress 7.0 with a modern tech stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and published privacy or cookie policies, representing compliance and security gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

D

Dynamic CCTV Limited

dynamic-cctv.com

69

Dynamic CCTV Limited is a UK-based trade-only distributor specializing in CCTV, intruder alarms, access control, fire safety, and networking products. The company partners with leading global brands such as Hikvision, Ruijie, Pyronix, Ajax, and Texecom, offering a comprehensive product portfolio and award-winning technical support. Their business model focuses on B2B distribution with next day delivery services, targeting security professionals and installers. The website reflects a mature digital presence with modern technologies and good user experience, although it lacks visible privacy and terms of service documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and consistent branding. Security posture is generally good with HTTPS and controlled access to pricing, but could be improved with enhanced security headers and published policies. Overall, the site is functional and trustworthy for its target audience but would benefit from improved transparency and compliance documentation.

N

NetEquity Networks

rtl-adconnect.com

52

NetEquity Networks is a small infrastructure sharing start-up based in San Francisco, focused on deploying open access fiber networks globally by leveraging electrical grid infrastructure. Their business model treats fiber as a public utility, aiming to make high-speed internet affordable for everyone within a decade. The website is professionally designed with clear navigation and relevant content targeting stakeholders interested in broadband infrastructure and digital inclusion. Technically, the site uses modern web fonts, Font Awesome icons, and carousel libraries, with good mobile optimization and SEO practices. However, there is no detected CMS or hosting provider information. Security posture is weak due to missing security headers and lack of visible HTTPS enforcement details. Privacy and cookie policies are absent, reducing compliance confidence. WHOIS data is missing, which raises concerns about domain legitimacy despite the professional appearance. Overall, the site presents a credible business front but requires improvements in security, privacy, and domain registration transparency.

A

Animalcare

animalcare.co.uk

60

Animalcare Limited is a well-established UK-based sales and marketing organisation specializing in veterinary medicines and healthcare products. With over 30 years of industry presence, it serves veterinary professionals across the UK, offering a broad portfolio of products and practice support services such as The PAC. The company emphasizes animal health as a benefit to society and operates under the international Animalcare Group umbrella, indicating a strong market position and reputable brand. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies including Google Analytics, Facebook Pixel, and Klaviyo for marketing and analytics. The site is mobile-optimized, well-structured, and includes SEO best practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact limits transparency. Privacy compliance is robust, with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website presents a professional, trustworthy front with moderate to good technical and security maturity. The lack of WHOIS data limits domain trust verification, but the site content and external affiliations support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

4

44 Group

bar44.co.uk

48

Bar 44 is a hospitality business operating multiple tapas bar locations in South Wales and the West Country, UK. The company focuses on high-quality food and drink experiences with a Spanish influence, offering private dining and product sales including gift vouchers and a book. The website reflects a medium-sized regional hospitality group with consistent branding and a professional online presence. Technically, the site uses modern front-end libraries and a third-party AI chat widget, hosted by Ionos SE, but lacks visible advanced security headers and explicit privacy consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but room for improvement in security policies and headers. Overall, the website is accessible, well-structured, and targets a mature audience interested in dining and Spanish cuisine.

R

Riteweld Engineering

riteweldengineering.co.uk

49

Riteweld Engineering is a well-established family-run business specializing in the design, fabrication, and installation of structural and architectural steel projects primarily serving the Banbury, Oxford, and Northampton regions in the UK. With nearly 40 years of industry experience since its founding in 1983, the company holds a strong regional market position as a leading steel fabricator. Their key services include structural steel fabrication, custom architectural steelwork, 3D visualisation, and steel stockholding, supported by a skilled team and modern 3D modelling technologies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and CookieYes for consent management. It employs Google reCAPTCHA for form security and integrates analytics tools like Google Analytics and Snitcher for visitor tracking. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam and bot attacks. Cookie consent mechanisms are in place, indicating GDPR compliance. However, there is no explicit security policy or incident response information published. The WHOIS data for the domain is unavailable due to a domain naming rules error, which limits verification of domain registration legitimacy. Despite this, the website content and business information appear consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy and security practices, though improvements could be made by publishing formal security policies and enhancing HTTP security headers. The lack of WHOIS data is a notable gap but does not currently detract from the business credibility based on available content.

T

The Stage

thestage.co.uk

67

The Stage is a well-established UK-based media publication specializing in theatre news, reviews, interviews, and job listings. It serves theatre professionals and enthusiasts with a comprehensive range of content and services including subscription options and event information. The website demonstrates a mature digital presence with a professional design and consistent branding, leveraging modern web technologies and CDN hosting for performance. Security posture is moderate with HTTPS usage and CSRF tokens, but lacks visible security headers and explicit privacy policies. The WHOIS lookup failed due to querying the 'www' subdomain instead of the registered domain, but the website content and structure strongly indicate legitimacy and a trusted brand in the UK theatre media sector. Overall, the site is safe, professional, and well-positioned in its niche.

A

Arundel Jones Associates

buildingdesign.co.uk

47

BuildingDesign.co.uk is a specialized online directory focused on providing building design, construction, and services information primarily for architects, engineers, and facility managers in the UK. The platform is curated by Arundel Jones Associates and offers a comprehensive resource for product listings, technical data requests, and industry news. The website is built on WordPress with a moderate technical infrastructure and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site presents a professional and trustworthy resource with room for improvement in security and privacy practices.

Feather & Stitch is a UK-based ladies clothing boutique specializing in Scandinavian, French, and global designer fashion. The company operates both a physical boutique in Richmond, London, and an e-commerce platform offering a curated selection of apparel and accessories. The website demonstrates a strong market position as a leading UK stockist for several notable designer brands, targeting fashion-conscious women seeking unique and high-quality clothing. The business model focuses on retail sales supported by a well-maintained online presence, including social media engagement and newsletter marketing. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics 4, Hotjar, and CartStack for analytics and marketing automation. The site is hosted behind Cloudflare, ensuring good performance and security. The website is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility could be made. The presence of reCAPTCHA on forms and cookie consent mechanisms indicates attention to user privacy and spam prevention. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent with granular controls. However, no explicit security policy or incident response contact information is published, which could be improved. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency, although the website content and branding appear professional and trustworthy. Overall, Feather & Stitch presents a professional and secure online retail presence with strong content quality and privacy compliance. The main risk lies in the lack of WHOIS transparency and absence of published security policies. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trustworthiness.

R

Reliance International Shipping & Travel Limited (RIST Limited)

ristlimited.com

41

Reliance International Shipping & Travel Limited (RIST Limited) is a UK-based logistics and shipping service provider established in 2015. The company offers a range of services including sea freight, air freight, vehicle shipping, personal effects shipping, warehousing, and airline ticketing. Positioned as a global logistics solutions provider, RIST Limited targets businesses and individuals requiring reliable and cost-effective shipping worldwide. The website presents a professional image with clear service descriptions and contact information, supporting its market positioning. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. The site lacks advanced analytics or tracking tools, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trustworthiness. No incident response or security policy information is provided, limiting transparency on security readiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and domain legitimacy verification to enhance trust and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and establishing incident response contacts.

HCL Group is a well-established Indian multinational conglomerate with a strong presence in technology, software, healthcare, and corporate social responsibility sectors. Founded in 1976, it has evolved from an IT garage start-up to a global technology leader with diversified subsidiaries including HCLTech, HCLSoftware, HCL Healthcare, and others. The website reflects a mature digital presence with comprehensive information about the group, its subsidiaries, and philanthropic initiatives. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

M

Mansell Recruitment Group Ltd

mansell.co.uk

49

Mansell Recruitment Group Ltd is a well-established specialist technical job agency based in the United Kingdom, focusing on placing engineering professionals across various disciplines. Founded in 1991, the company has built a strong reputation in the UK engineering recruitment market, offering services to both candidates and clients. Their website reflects a professional and consistent brand image, targeting engineering companies and professionals seeking roles in manufacturing, design, electronics, and related sectors. Technically, the website is built on modern web technologies including Webflow CMS, JavaScript libraries like jQuery, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms from abuse. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS lookup for the queried subdomain failed due to domain naming rules, but this is consistent with querying a subdomain rather than the registered domain. The main domain is presumed legitimate based on website content and business information. Overall, Mansell Recruitment Group presents a credible and professional online presence with a solid business model and market position. Strategic improvements in security headers, privacy compliance, and WHOIS data clarity would further strengthen their digital trustworthiness and compliance posture.

T

The Kinetic Co., Inc.

knifemaker.com

59

The Kinetic Co., Inc. is a well-established U.S.-based manufacturer specializing in industrial machine knives and custom blades serving multiple industries including tissue, nonwovens, wood, metal, and packaging. With over 75 years of experience and an ISO 9001:2015 certified manufacturing facility in Milwaukee, WI, the company positions itself as a premier provider offering fast lead times, custom engineering, and contract manufacturing services. Their target audience primarily includes general buyers and procurement teams in industrial sectors seeking high-quality, precision-engineered cutting solutions. Technically, the website is built on WordPress using Elementor, enhanced with performance optimizations such as lazy loading and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the security posture is good but could be improved by adding security headers, incident response information, and comprehensive privacy policies. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain legitimacy. However, the website content and business information are professional and consistent with a legitimate manufacturing company. Strategically, the company should focus on enhancing transparency around privacy and security policies, verifying domain registration details, and continuing to leverage their strong market position and customer trust to maintain competitive advantage.

Magpie Property Management operates as a local estate and letting agency based in St Neots, Cambridgeshire, UK. The company provides property sales, lettings, and management services targeting property buyers, renters, landlords, and property owners in the local area. The website presents a professional appearance with clear branding and relevant content focused on real estate services. However, the domain WHOIS data indicates that the domain 'www.magpieproperty.co.uk' is invalid under Nominet UK naming rules, suggesting possible misconfiguration or use of a subdomain rather than a registered domain. This discrepancy warrants caution regarding domain legitimacy. Technically, the website uses modern web technologies including Bootstrap, Font Awesome 6 Pro, and various JavaScript libraries for UI enhancements. The site includes a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy policy and terms of service pages. No security headers were detected in the provided data, and no analytics or tracking beyond cookie consent were found. The site appears mobile-optimized with good design and navigation. From a security perspective, the site benefits from cookie consent but lacks visible security headers and formal privacy documentation. The absence of WHOIS registration data and domain registration issues reduce trustworthiness. No vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be improved with better documentation and security best practices. The overall risk assessment suggests the business is legitimate and professional in its operations but should address domain registration clarity and enhance security and privacy compliance to improve trust and reduce potential risks.

D

Dorset HealthCare University NHS Foundation Trust

dorsethealthcare.nhs.uk

73

Dorset HealthCare University NHS Foundation Trust is a large regional healthcare provider delivering comprehensive mental health and community-based physical health services across Dorset, UK. The organization operates under the NHS framework, serving patients, visitors, carers, and healthcare professionals with a focus on accessibility and quality care. The website reflects a mature digital presence with clear navigation, professional design, and strong trust indicators including an Outstanding CQC rating. Technically, the site is built on Concrete CMS with modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and includes accessibility tools and multilingual support via Google Translate. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. WHOIS data is unavailable due to the domain being a subdomain under nhs.uk, which is consistent with NHS domain management practices. Overall, the site is trustworthy, compliant with GDPR, and well-positioned to serve its audience effectively.

C

CareTech

caretech-uk.com

71

CareTech is a UK-based healthcare and social care service provider specializing in supporting children and adults with complex needs. The company emphasizes empowering individuals to thrive through dedicated care, support, and education services. Their website reflects a professional and consistent brand image, targeting clients and stakeholders in the healthcare sector. The digital infrastructure leverages modern technologies such as Bootstrap for responsive design, Google Tag Manager, and Microsoft Clarity for analytics, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The lack of WHOIS data raises some concerns about domain legitimacy, but the overall professional presentation and comprehensive privacy policies mitigate immediate risks. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to strengthen trust and compliance.

M

Michael Bailey Associates

michaelbaileyassociates.com

53

Michael Bailey Associates is a well-established international recruitment consultancy specializing in IT & Technology, Life Sciences, Finance, and Energy sectors. With over 30 years of experience, the company offers recruitment and project resource solutions to a global client base, emphasizing strong local networks and market-focused relationships. The website reflects a professional and consistent brand image, targeting job seekers and corporate clients alike. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA v3 for security. It is mobile-optimized with good SEO practices and integrates Google Tag Manager for analytics. The site uses HTTPS exclusively, ensuring secure data transmission. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration on forms. However, it lacks visible security headers and explicit incident response or security policy documentation. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response policies, and verifying domain registration details to strengthen trust and compliance.

A

Apodi

apodi.co.uk

60

Apodi is a UK-based healthcare services provider specializing in facilitating access to medicines and healthcare services, primarily serving pharmaceutical companies, healthcare professionals, and patients. Their offerings include market insight services, specialist healthcare professional (HCP) services, homecare, recruitment, HR and development, and a patient portal. The company positions itself as a trusted partner with strong industry certifications and a focus on improving patient outcomes through innovative healthcare solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI/UX enhancement libraries. It is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Analytics tools such as Google Analytics and planned LinkedIn analytics are integrated with user consent. However, some security best practices like security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data. The cookie consent mechanism and privacy policy indicate good privacy compliance. The absence of a dedicated security policy or incident response contact reduces transparency. WHOIS data for the domain is unavailable or indicates the domain queried is not registered, which slightly impacts trust from a domain legitimacy standpoint but does not detract from the professional presentation and certifications. Overall, Apodi's website demonstrates a solid business and technical foundation with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and security posture further.

M

Molesey Metal Works Ltd

moleseymetalworksltd.co.uk

44

Molesey Metal Works Ltd is a well-established, third-generation metal fabrication and welding company based in West Molesey, Surrey, serving local areas including Esher, Kingston, and Walton-on-Thames. The company offers a broad range of metalworking services including bespoke metalwork, structural steelwork, and architectural metalwork, targeting private, commercial, and industrial clients. Their business model focuses on custom fabrication with direct delivery and strong customer relationships, supported by a skilled team with City & Guilds qualifications and liability insurance. The website reflects a professional and trustworthy business with positive client testimonials and a history of work for prestigious clients such as royal households.

I

Ian Hitchman Fabrications Ltd

ianhitchmanfabrications.co.uk

50

Ian Hitchman Fabrications Ltd is a small, established steel fabrication business based in Troon, UK, with over 40 years of experience specializing in bespoke metalwork including gates, railings, handrails, and industrial metal projects. The company targets residential and industrial clients primarily in Ayrshire and Glasgow. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with analytics and tag management implemented via Google services. Security posture is adequate with HTTPS and a Content Security Policy header, but lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with a privacy policy and cookie consent mechanism. However, the domain WHOIS data is unavailable and shows an error indicating the domain cannot be registered, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy from a business and content perspective but would benefit from clarifying domain registration and enhancing security disclosures.

S

Sooriya Hospital

sooriyahospital.com

41

Sooriya Hospital is a well-established multispeciality tertiary care hospital located in Chennai, India, with a strong reputation for providing comprehensive healthcare services across multiple specialties including cardiology, gynaecology, paediatrics, and respiratory medicine. The hospital emphasizes advanced medical technologies, multidisciplinary care, and patient-centric services, positioning itself as a leading healthcare provider in the region. The website reflects a medium-sized healthcare institution with a focus on quality patient care and international patient services. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, delivering a responsive and visually appealing user experience. While the site is mobile optimized and SEO friendly, there is room for improvement in accessibility and performance optimization. The absence of a CMS suggests a custom or static site approach. From a security perspective, the website uses HTTPS and has domain transfer protections in place, but lacks visible security headers and published security policies. No privacy or cookie policies are present, indicating compliance gaps with data protection regulations. The WHOIS data supports the legitimacy of the domain with consistent registration details and a long domain age. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to meet modern standards and regulatory requirements.

О

ООО "VIRTUAL CLOUDS"

onesec.uz

60

ONESEC.UZ is a specialized information security service provider based in Uzbekistan, offering a range of services including security analysis, load testing, consulting, training, forensics, OSINT, and regulatory document development. The website targets businesses and organizations in Uzbekistan seeking cybersecurity solutions. The technical infrastructure includes modern frontend technologies such as Bootstrap and Owl Carousel, integration with Yandex Maps, and tracking via Google Analytics, Facebook Pixel, and Yandex Metrika. The website is hosted by ООО "VIRTUAL CLOUDS", a hosting and registrar company, with domain registration dating back to 2021. Security posture is generally good with HTTPS enabled and Cloudflare DNS usage, but lacks published security policies and incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is professional and functional but could improve transparency and compliance.

S

SIA Madara

madara.lv

48

SIA Madara operates a website focused on providing office and industrial space rental services in Jelgava, Latvia, alongside metal container sales and machine building services. The company targets local businesses and industrial clients seeking large rental spaces and related manufacturing products. The website is professionally designed with clear navigation and multilingual support, primarily in Latvian with English and Russian options. The technical infrastructure employs a variety of JavaScript libraries and frameworks, including jQuery, Bootstrap, and Google Maps API, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate; while HTTPS is presumed, no explicit security headers or incident response policies are evident. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism implemented. Business credibility is supported by clear contact information and a certification page, though the absence of terms of service and incident response contacts are noted. Overall, the website presents a trustworthy and professional front for a small local business with room for security and compliance improvements.

3

3PIĘTRO

3pietro.eu

42

3PIĘTRO is a small real estate agency based in Poland, specializing in property sales, rental management, and home staging services primarily in Sosnowiec and nearby cities. The website presents a professional and content-rich platform with detailed property listings and team member contacts, supported by active social media channels. Technically, the site uses a custom real estate CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts, delivering a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable due to registry privacy, limiting domain trust assessment, but the website content and structure indicate a legitimate local business. Overall, the site scores moderately well in content quality and business credibility but should improve privacy compliance and security best practices.

S

Samorząd Województwa Mazowieckiego

mazovia.pl

59

Mazovia.pl is the official website of the Samorząd Województwa Mazowieckiego (Mazowieckie Voivodeship Government) in Poland. It serves as a comprehensive information portal providing news, announcements, and resources related to regional governance, culture, transport, health, education, ecology, and public safety. The site targets residents, local government officials, businesses, media, and NGOs within the Mazowieckie region. Its business model is that of a public sector communication platform, emphasizing transparency and citizen engagement. Technically, the website is built on a custom CMS platform (SmartSite by BIT Sp. z o.o.) and leverages common web technologies such as jQuery, Bootstrap, Font Awesome, and various carousel and UI libraries. The site is hosted by home.pl sp. z o.o., a reputable Polish hosting provider. The site demonstrates good mobile optimization, accessibility features including contrast toggles and sign language translation links, and SEO best practices with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers in the provided HTML. DNSSEC is not enabled for the domain, which is a recommended improvement. There is no visible security policy, incident response contact, or vulnerability disclosure mechanism such as a security.txt file. Cookie consent and privacy policies are present and appear GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, mazovia.pl is a trustworthy and professionally maintained government website with a strong focus on accessibility and compliance. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing a vulnerability disclosure process to enhance security posture further.

CraftW. is a Latvian IT services company established in 2005, specializing in software development, network infrastructure design, and IT support services. The company targets business clients seeking tailored IT solutions and has a moderate market presence with over 15 years of experience. The website reflects a professional digital presence with clear service descriptions and project references. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google services for analytics and advertising. However, there is a lack of visible privacy and cookie policies, and no explicit security headers or HTTPS status were confirmed, indicating room for improvement in security and compliance. Overall, the security posture is moderate but could benefit from enhanced policies and technical safeguards. The domain registration aligns with the company's founding date, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, improving security headers, and publishing incident response contacts to enhance trust and compliance.

N

NetApp Instaclustr

instaclustr.com

80

NetApp Instaclustr operates a managed platform specializing in open source data infrastructure technologies such as Apache Kafka, Cassandra, PostgreSQL, OpenSearch, and others. Positioned as an enterprise-grade solution, it targets organizations seeking to simplify and scale their data infrastructure both on-premises and in the cloud. The company leverages its parent company NetApp's brand and resources to establish market trust and credibility. The website demonstrates a mature digital presence with comprehensive content, professional design, and strong SEO and accessibility features. The technical infrastructure is modern, utilizing WordPress CMS with advanced marketing and analytics integrations. Security posture is robust, supported by multiple certifications including GDPR, SOC2, and ISO standards, though explicit security headers could be further verified. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for enterprise domains. Overall, the site reflects a secure, compliant, and professional business operation with a clear focus on managed open source services.

P

Platon Technologies, s.r.o.

platon.org

64

Platon Technologies, s.r.o. is a Slovak-based technology company specializing in domain registration, web hosting, server management, SSL certificates, mass mailing, and CDN cloud services. With over 15 years of experience, they operate their own data center infrastructure and provide fully managed services targeting businesses and individuals seeking reliable internet infrastructure solutions. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive contact options including email, phone, and contact forms. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and Google reCAPTCHA v3 for security on forms. While HTTPS is enforced and no sensitive data is exposed, the absence of explicit security headers and lack of a published security policy or incident response information are areas for improvement. The WHOIS data is malformed and unavailable, which slightly reduces domain trustworthiness, but the overall business presence and transparency on the site support legitimacy. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

Impuls savjetovanje is a professional consulting firm specializing in securing and managing EU funds, international cooperation projects, education, and sustainability advisory services. The company has a strong market presence in Croatia and the surrounding region, demonstrated by its extensive portfolio of over 400 successful projects and partnerships with recognized organizations. Their website reflects a mature digital infrastructure built on WordPress with modern frameworks and plugins, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, hCaptcha, and GDPR-compliant cookie consent are implemented effectively, indicating a solid security posture. However, the absence of publicly available WHOIS data due to privacy protection is noted but justified given the business nature. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

E

Elproms Team j.d.o.o.

elproms.com

54

Elproms Team j.d.o.o. is a Croatian IT company specializing in Internet of Things (IoT) technology and smart business solutions. Founded in 2018 and headquartered in Zagreb, the company offers enterprise software products such as Improve Card for business monitoring and Qualy for ISO 9001 conformity. Their market positioning targets manufacturing companies and businesses seeking smart home, smart city, and Industry 4.0 solutions. The website reflects a professional and consistent brand image with clear contact details and partner affiliations. Technically, the site uses modern web technologies including Bootstrap and jQuery, is mobile optimized, and implements cookie consent mechanisms. Security posture is solid with HTTPS enforced and CSRF protection on forms, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with accessible policies and GDPR consent. Overall, the company presents a credible and trustworthy digital presence.

A

Auraknihy

auraknihy.sk

41

Auraknihy.sk is a Slovak online bookstore specializing in a wide range of books, 3D puzzles, audiobooks, and educational products. The business targets general consumers interested in literature and educational hobbies, operating primarily as a small regional e-commerce retailer. The website is built on Joomla CMS with VirtueMart e-commerce, featuring user accounts, shopping cart, and newsletter subscription functionalities. The site is well-branded, with consistent design and clear navigation, supporting a positive user experience. Technically, it uses modern JavaScript libraries and frameworks, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, CSRF protection, and cookie consent, but lacks a dedicated security policy or incident response information. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

U

Udruga konzultantskih društava u graditeljstvu

ukdg.hr

45

UKDG is a Croatian non-profit association representing consulting companies in the construction sector. Founded in 2011, it aims to protect and enhance the business interests and reputation of its members by promoting professional standards and ethics. The website reflects a mature organization with clear business objectives, member services, and international affiliation through FIDIC membership. Technically, the site uses a modern stack including Bootstrap, jQuery, and various UI libraries, hosted under Croatian registrar CARNET with consistent domain registration data. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and some security headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

W

Weidmüller Lanškroun s.r.o.

weidmueller-lanskroun.com

42

Weidmüller Lanškroun s.r.o. is a manufacturing subsidiary of the multinational Weidmüller Holding Co&KGaA, specializing in the production of precise spare parts, tools, molds, and providing metal and plastic pressing along with simple automation solutions. The company targets industrial clients requiring high-quality manufacturing services. The website reflects a professional and consistent brand image with clear contact details and partner affiliations, positioning the company as a reliable manufacturing entity within its sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Active24 infrastructure. The site is mobile optimized with good navigation and moderate performance. However, no CMS or advanced frameworks were detected, indicating a straightforward static or custom-built site. From a security perspective, the site uses HTTPS (implied by domain status and typical practice), but lacks visible security headers and does not implement DNSSEC. There is no privacy or cookie policy present, which is a compliance gap. No incident response or security policy information is provided. No forms are present on the main page, reducing attack surface but also limiting user interaction. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

S

SOLEN, s. r. o.

mudr.online

54

mudr.online is an online platform operated by SOLEN, s. r. o., providing online events, webinars, and AD tests primarily for medical professionals in Slovakia. The website is professionally designed with a clear focus on educational services in the healthcare sector. The platform leverages modern web technologies including jQuery, Vimeo API, and Cookiebot for consent management, ensuring GDPR compliance. The domain registration and business information are consistent and legitimate, supporting the credibility of the service. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the site presents a trustworthy and compliant online educational service.

BigMedia, spol. s r.o. is a well-established leader in the Central European outdoor advertising market, specializing in a broad range of advertising formats including billboards, digital displays, and transport advertising. The company offers comprehensive services from rental to production and installation, targeting businesses and advertisers seeking out-of-home advertising solutions. Their market position is strong, supported by a domain registered since 2008 and active social media presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Quantcast Choice for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

F

Fantaisie Software

purebasic.com

48

PureBasic.com is the official website for PureBasic, a modern BASIC programming language developed by Fantaisie Software since 1998. The site provides comprehensive information about the language's features, supported platforms, and related products such as SpiderBasic. The business targets both beginner and expert programmers seeking a fast, portable, and easy-to-use BASIC compiler and IDE. The website is professionally designed with clear navigation and relevant content, supporting multiple languages and offering user login functionality. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript libraries like jQuery, Modernizr, and Google Analytics for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. No CMS or hosting provider details are evident. Performance is moderate with no blocking or WAF detected. Security posture is moderate; the site uses HTTPS but lacks visible security headers and published security policies. Forms use POST methods but no explicit cookie consent or GDPR compliance mechanisms are present. WHOIS data is missing, which reduces trustworthiness but the site content and business information appear legitimate. No vulnerabilities or exposed sensitive data were detected. Overall, PureBasic.com is a trustworthy and professional site for a niche programming language product. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance.

Q

QM Sports Care

qmsportscare.eu

44

QM Sports Care is a small retail business specializing in premium, natural-based massage and sports care products targeted at professional and recreational athletes. The company positions itself as a trusted supplier in the sports care market, emphasizing natural ingredients and quality. The website reflects a professional brand image with consistent branding and a clear focus on its target audience. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS implied but no visible security headers or vulnerability disclosures. Overall, the site is safe and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Ř

Řešení pro audio / videokonference

headsety.cz

45

The website www.headsety.cz is an e-commerce platform specializing in professional audio and videoconferencing equipment, primarily targeting call centers, offices, and industrial users in the Czech Republic. The site offers a range of products including headsets, videoconferencing devices, and hands-free communication tools. The business presents itself professionally with clear product offerings, pricing, and customer support channels. The website is built on the OpenCart CMS platform and employs modern web technologies such as jQuery, Bootstrap, and Google Analytics for tracking and marketing purposes. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. However, the absence of WHOIS registrant data and lack of explicit security policies or incident response information slightly reduce the overall trustworthiness. The site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and a vulnerability disclosure page. Overall, the website is functional, secure at a basic level, and professionally maintained, suitable for its niche market.

R

Regionalverband Großraum Braunschweig

regionalverband-braunschweig.de

49

Regionalverband Großraum Braunschweig is a regional governmental organization responsible for regional development, mobility, and sustainable planning in the Großraum Braunschweig area of Germany. It coordinates public transport services, regional planning, and climate protection initiatives, serving multiple cities and counties. The website reflects a mature digital presence using TYPO3 CMS and modern frontend technologies, with good mobile optimization and accessibility. Privacy and cookie consent mechanisms are implemented in compliance with GDPR. Security posture is solid with HTTPS and consent management, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

M

MEVA-HU Kft

mevakomi.hu

44

MEVA-HU Kft is a Hungarian company specializing in industrial products including waste storage, oil management, warehousing, workshop equipment, and outdoor equipment. The company operates a B2B e-commerce platform supported by regional partner sites in Slovakia, Poland, Germany, and the Czech Republic. Their market position is that of an established regional supplier with a comprehensive product catalog and ISO 9001:2015 certification, indicating quality management standards. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for industrial clients. Technically, the site uses a BohemiaSoft e-commerce platform with common JavaScript libraries and Google Analytics for tracking. Security posture is generally good with HTTPS, CSRF protections, and cookie consent mechanisms, though some outdated libraries and missing security headers present moderate risks. Privacy compliance is strong with clear GDPR-aligned policies and consent banners. Overall, the site is trustworthy and credible, with clear contact information and certifications. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security and trust.