Security Directory

V

Vehicle Technical Sevices

vtslimited.co.uk

46

Vehicle Technical Services Ltd is a small transportation sector company based in Staffordshire, UK, specializing in fleet maintenance solutions including tachograph calibration, servicing, repairs, and diagnostics. The company positions itself as a leader in the local market, serving over 800 fleets with tailored maintenance packages leveraging experienced staff and advanced technology. The website reflects a professional digital presence built on WordPress with modern plugins and good mobile optimization. However, the absence of privacy and cookie policies and lack of email contact information limit its compliance and user engagement capabilities. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response disclosures. The WHOIS data for the domain is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the accessible and professional website content. Strategic recommendations include improving compliance documentation, enhancing security headers, clarifying domain registration status, and adding incident response contacts to strengthen trust and security posture.

M

Mainport Training

mainporttraining.com

50

Mainport Training is a well-established industrial training provider with over 20 years of experience, serving a broad range of sectors including construction, transport, utilities, and offshore industries across the UK and sub-Saharan Africa. The company offers a variety of accredited training courses delivered through class-based, on-site, and online formats. Their market position is strong as a major UK provider with expanding international presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and has domain protections in place but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

The website www.status-cmm.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3, indicating the presence of a web application firewall or bot protection mechanism. No business content, contact information, or policies are available for review. The WHOIS lookup for the domain failed with an error stating the domain name contravenes Nominet UK naming rules, suggesting the domain registration is invalid or improperly configured. This severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site appears to be either under strict protection or misconfigured, resulting in a poor user experience and low trustworthiness.

The website www.indepost.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. This indicates a protective measure against bots but also blocks content access, limiting analysis. The WHOIS lookup for the domain failed due to an error indicating the domain name is invalid under Nominet UK rules, raising significant concerns about the domain's legitimacy and registration status. No business, contact, or policy information is available on the page, and no security headers or SSL details were provided in the data. The technical infrastructure uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible modern CMS or hosting details. Overall, the site is inaccessible for meaningful content or business analysis due to the security challenge and domain registration issues.

S

Stewart Mouland Motorcaravans

stewartmouland.co.uk

56

Stewart Mouland Motorcaravans is a well-established family-run motorhome dealership operating since 1985 in Peacehaven, East Sussex. The company offers a wide range of new and used motorhomes, servicing, hire, and sales services, targeting customers in the Brighton and East Sussex region. Their website reflects a professional and customer-friendly approach with clear contact information, a modern showroom, and a workshop. Technically, the website employs modern analytics and marketing tools with a consent-based cookie mechanism, ensuring compliance with privacy regulations. Security posture is generally strong with HTTPS and CSRF protections, though some security headers are missing. The WHOIS data for the domain is unavailable or invalid, which raises concerns about domain legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site is functional, secure, and compliant, but domain registration details should be further verified.

T

403 - Forbidden

thechampiongroup.co.uk

34

The website www.thechampiongroup.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or restricted. The site lacks any visible business information, metadata, or contact details, making it impossible to assess the company's operations or services from the website itself. The WHOIS lookup failed due to a domain registration error, with no registrar, creation, or expiry dates available, raising concerns about the domain's legitimacy or configuration. Technically, the site shows minimal HTML content with no scripts, analytics, or security headers detected, and no privacy or cookie policies are present. Overall, the website's digital presence is severely limited, and the domain's registration status is unclear, which together suggest a high risk and low trustworthiness for this domain.

R

Rival Colour

rivalcolour.com

49

Rival Colour Ltd is a well-established printing company based in Greenwich, London, with over 20 years of experience providing high-quality digital and litho printing, retouching, scanning, and related services. The company serves a diverse clientele including notable entities such as the Glastonbury Festival and Bauer Media, positioning itself as a trusted local leader in the printing industry. Their website reflects a professional business model focused on delivering bespoke printing solutions to individuals and businesses across London and the UK. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, incorporating modern tools such as Google Tag Manager and reCAPTCHA for analytics and security. While the site is mobile-optimized and SEO-friendly, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS and CAPTCHA protections but could be improved by adding security headers and incident response information. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

N

NASON DAVIS Ltd

nasondavis.com

65

NASON DAVIS Ltd is a UK-based small business specializing in the supply of timber products including softwood and hardwood species in various forms such as sawn, planed, strength graded, and laminated goods. The company targets businesses and professionals in the timber and construction sectors, positioning itself as an established supplier within the UK market. The website is built on the Wix platform, leveraging modern JavaScript libraries and polyfills to ensure compatibility and moderate performance. Mobile optimization is good, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and structured data provide credible business information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

RVL Group

rvl-group.com

52

RVL Group is a specialist aviation services provider based at East Midlands Airport in the United Kingdom, with over 30 years of experience serving government and private sector clients. The company operates a modern, versatile fleet offering a range of services including air cargo, passenger and medical charters, aerial survey, surveillance, aerial spray, and comprehensive aircraft management and maintenance. RVL positions itself as a multi-capability airline operating in challenging markets with a strong operational base and regulatory approvals. Technically, the website is built on a modern WordPress CMS platform using the Enfold theme and integrates common industry tools such as Google Analytics and Tag Manager. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS data for the domain raises some concerns about domain legitimacy and transparency, although the website content and trust indicators strongly suggest a legitimate business. Overall, RVL Group demonstrates a mature digital presence with good business credibility but should address domain registration transparency and enhance security disclosures to improve trust and compliance.

W

Wexas Travel

wexas.com

59

Wexas Travel is a well-established luxury travel agency specializing in tailor-made holidays across all seven continents. With over 50 years of experience, the company offers a wide range of services including luxury rail journeys, cruise holidays, safaris, and self-drive tours. The website reflects a strong market position with comprehensive content, clear navigation, and multiple trust indicators such as ATOL and ABTOT licenses and Feefo Platinum reviews. The target audience is discerning travelers seeking personalized luxury travel experiences. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Microsoft Clarity, and various marketing and tracking tools, hosted on AWS Cloudfront CDN. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is good, featuring cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or data source limitations, which slightly impacts trust analysis. Overall, Wexas Travel presents a professional, trustworthy, and secure online presence suitable for its luxury travel business. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officer contacts.

Stax Trade Centres Ltd operates as the largest non-food wholesaler in the UK, providing a wide range of over 45,000 products and 1000+ brands to retailers and tradespeople through five national branches and an online membership platform. The company positions itself as a professional wholesale solution supporting business success with competitive pricing and extensive product categories. The website is well-designed, mobile-optimized, and rich in relevant content including product deals, industry news, and customer testimonials, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as React, Vimeo for video content, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is served over HTTPS with no visible security misconfigurations, though security headers are not explicitly detected. Privacy and terms policies are comprehensive and GDPR compliant, but the absence of a cookie consent mechanism is a minor compliance gap. Security posture is generally strong with secure forms and no exposed sensitive data, but the lack of a published security policy or incident response contact reduces transparency. The WHOIS data is unavailable due to domain registration errors, which introduces some uncertainty about domain legitimacy, though the website content and business information strongly indicate a legitimate and established UK company. Overall, the website presents a professional, trustworthy, and business-focused platform with good technical and security practices. Strategic improvements in security header implementation, cookie consent, and domain registration verification would enhance trust and compliance.

L

Llamau

cardiffwomensaid.org.uk

48

Llamau is a UK-based non-profit organization dedicated to ending homelessness and supporting vulnerable groups such as women, young people, families, and LGBTQ+ individuals. The website provides resources and information about their services, including crisis help, safe accommodation, domestic abuse support, and educational programs. The organization appears to have a solid market position within the UK non-profit sector, focusing on social welfare and community support. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates payment processing via Stripe, and uses Google Analytics and Facebook Pixel for user tracking and marketing. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism with a quick exit button for user safety. However, it lacks explicit security policies and incident response contact details, and no WHOIS data is available due to domain naming rules errors, which slightly impacts trust assessment. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

J

Jūrmalas slimnīca

jurmalasslimnica.lv

67

Jūrmalas slimnīca is a multi-profile and emergency medical institution located in Latvia, providing healthcare services to patients from across Latvia and abroad. The website presents a professional and comprehensive overview of the hospital's services including bariatric surgery, childbirth, plastic surgery, diagnostics, and emergency medical care. The digital infrastructure is based on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website reflects a trustworthy and credible healthcare provider with consistent branding and clear contact information.

B

Bébécar

bebecar.com

73

Bébécar is a medium-sized retail and manufacturing company specializing in baby pushchairs, car seats, accessories, and nursery furniture. The company targets parents and caregivers seeking high-quality, safe baby products. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, offering a user-friendly experience with good mobile optimization and clear navigation. The brand maintains consistent and trustworthy branding with active social media presence and compliance with privacy regulations such as GDPR. Technically, the site uses common and reliable technologies including jQuery, WooCommerce, and RevSlider, ensuring moderate performance and good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but does not negate the legitimacy of the business given the professional online presence. Overall, the website is safe, well-maintained, and suitable for its target audience.

T

TDP Textiles Ltd

tdptextiles.com

55

TDP Textiles Ltd is a UK-based market leader specializing in supplying officially licensed apparel, including entertainment, branded, and sports clothing, to major UK retailers. Their business model focuses on B2B supply of licensed character nightwear, underwear, and outerwear. The website reflects a professional and consistent brand presence with clear contact information and partnerships with well-known brands such as Marvel, Disney, and BBC. Technically, the site is built on WordPress using modern technologies like jQuery and WP Rocket for performance optimization. The site is mobile-optimized and offers good user experience and SEO practices. Security posture is basic with HTTPS enforced but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the website content and business information appear credible. Overall, the site scores well in business credibility and content quality but should improve security and privacy compliance.

C

Cobal

cobal.co.uk

66

Cobal is a UK-based company specializing in innovative signage solutions including internal and external architectural signage, wayfinding, environmental graphics, wall graphics, glass manifestations, and workplace accessories. The company targets businesses and organizations looking to enhance their physical spaces with impactful visual communication. The website reflects a niche service provider with a consistent brand presence and a professional digital footprint built on the Squarespace platform. Technically, the website is well-structured with modern web technologies, including HTTPS with HSTS, Google Analytics with consent mechanisms, and responsive design optimized for mobile devices. The use of Squarespace ensures a stable hosting environment and a good baseline for performance and SEO. However, some areas such as accessibility and explicit privacy documentation could be improved. From a security perspective, the site demonstrates good practices with HTTPS enforcement and HSTS. No critical vulnerabilities or exposed sensitive data were detected. The cookie consent banner indicates awareness of privacy compliance, though the absence of a dedicated privacy policy and terms of service pages suggests room for improvement in legal compliance and transparency. Overall, the website presents a moderate risk profile with no major security or content safety concerns. Strategic recommendations include adding comprehensive privacy and terms of service pages, publishing a vulnerability disclosure policy, and enhancing contact information visibility to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Icom (UK) Ltd is a well-established UK-based company specializing in the design, manufacture, and distribution of advanced two-way radio communication products and accessories. With over 60 years of experience, the company serves a diverse clientele including maritime, aviation, amateur radio enthusiasts, and commercial sectors. Their product portfolio includes digital radios, marine radios, LTE radios, satellite PTT devices, and related accessories, supported by training and repair services. The website reflects a mature business with consistent branding and a strong market presence in telecommunications equipment. Technically, the website employs a modern yet stable technology stack including Bootstrap, jQuery, and SlickNav for responsive design and navigation. It integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager, indicating a data-driven approach to user engagement. The site is mobile-optimized with good navigation clarity and content relevance, although accessibility features are basic. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts, but lacks visible security headers like CSP or HSTS in the provided data. There is no explicit security policy or incident response contact information, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with privacy and cookie policies accessible and GDPR compliance implied. Overall, the website is professional, trustworthy, and well-maintained, with a strong business credibility score. Recommendations include enhancing security headers, improving accessibility, and publishing a dedicated security policy to strengthen trust and compliance.

M

MJ Sections Ltd

mjsections.co.uk

56

MJ Sections Ltd is a well-established manufacturer specializing in precision formed sheet metal fabrications and machined components, primarily serving the aerospace, defence, rail, power generation, and space sectors. The company positions itself as a global market leader with over 40 years of engineering innovation, offering a broad range of services including rolling, welding, adhesive bonding, pressing, machining, and heat treatment. Their website reflects a professional and comprehensive digital presence, targeting B2B clients in high-technology industrial markets. Technically, the website is built on WordPress and leverages modern JavaScript libraries and tracking tools such as Google Analytics and Snitcher for marketing insights. The site is mobile-optimized with good SEO practices and a clear navigation structure. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published, indicating room for improvement in security posture. The security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to a domain registration error is noted but does not detract from the website's legitimacy, as the site is fully functional and professionally maintained. Overall, MJ Sections Ltd demonstrates a strong business and digital presence with moderate to high security and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding incident response contact information to further strengthen trust and compliance.

O

Overhead Line Fittings (U.K.) Limited

overheadlinefittings.co.uk

46

Overhead Line Fittings (U.K.) Limited is a UK-based manufacturer specializing in electrical fittings and accessories for overhead transmission and distribution power lines. Established in 1961, the company serves major clients such as the National Grid and Distribution Network Operators, offering bespoke design solutions, manufacturing, and in-house testing facilities. Their product range includes insulators, conductor accessories, safety and maintenance products, and electrical joining paste. The company positions itself as a leading UK manufacturer with a medium-sized operation focused on the energy sector. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, AOS for animations, Owl Carousel for product displays, and Font Awesome for icons. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. No advanced frameworks or hosting details were identified. Security-wise, the site enforces HTTPS but lacks security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected, but improvements are recommended to enhance security posture and privacy compliance. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which is inconsistent with the active website presence. Despite this, the website provides clear contact information, company registration details, and accreditation logos, supporting its legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

S.I.Evans & Son is a small, locally focused building and carpentry service provider with a long-standing history dating back to the 1940s. The company offers a wide range of construction-related services including painting, decorating, carpentry, roofing, and extensions, targeting homeowners and property managers. The website is built on WordPress using the Salient theme and WPBakery Page Builder, indicating a moderate level of digital maturity with a focus on usability and responsive design. The technical infrastructure is standard for small business websites, hosted by Hosting Concepts B.V., with HTTPS enabled ensuring secure communications. However, the absence of DNSSEC and security headers indicates room for improvement in domain and web security configurations. The security posture is moderate with no critical vulnerabilities detected but lacks published security policies or incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap given GDPR requirements. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices to improve compliance and user trust.

A

Alloy Heat Treatment

alloyheat.co.uk

48

Alloy Heat Treatment is a UK-based specialist company focused on the heat treatment of aluminium alloys, with over 50 years of industry experience. The company holds key accreditations such as NADCAP and AS 9100, positioning itself as a preferred supplier to aerospace primes and serving sectors including aerospace, automotive, and engineering. Their service portfolio includes heat treatment, setting, flaw detection, shotblast, degreasing, and metallurgical testing, supported by advanced technologies like 3D scanning. The website reflects a mature business with consistent branding and strong trust indicators.

G

Guest Krieger Limited

guestkrieger.com

70

Guest Krieger Limited is an independent Lloyd’s insurance broker with a long-standing presence in the London market since 2000. The company focuses on providing specialist insurance brokerage services including general liability, financial lines, professional liability, cyber liability, and multinational programmes. Their business model emphasizes professionalism, client service, and maintaining strong relationships with insurance partners. The website reflects a professional and consistent brand image targeting insurance clients and brokers seeking access to the London market. Technically, the website is built on WordPress using Elementor, with standard modern web technologies and a cookie consent mechanism via OneTrust, indicating GDPR awareness. The site is mobile optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain transfer locks enabled, though DNSSEC is not enabled. No privacy policy or terms of service pages were found, and no direct contact information is visible, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

T Rogers & Co (Packers) Ltd

trogers.co.uk

57

T Rogers & Co (Packers) Ltd is a specialized service provider based in London, offering professional handling of fine art and antiques including import, export, packing, shipping, and storage. The company targets art professionals, collectors, galleries, and museums, positioning itself as a niche provider in the fine art logistics sector. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. Security posture is adequate with HTTPS usage but lacks advanced security headers and privacy compliance documentation. The absence of privacy and cookie policies represents a compliance gap. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

G

Global CCS Institute

globalccsinstitute.com

59

The Global CCS Institute website presents a professional and comprehensive platform dedicated to advancing carbon capture and storage (CCS) globally. The organization operates as a large, Australia-based non-profit entity focused on connecting policy, projects, and people to enable CCS deployment at scale. Their services include global advocacy, a CCS project database, analysis, training, and membership engagement. The website is well-structured, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Analytics, Google Tag Manager, and Zoho Campaigns for marketing automation. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though there is room for improvement in implementing security headers and explicit incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS registration details raises some concerns about domain legitimacy verification. Overall, the site is trustworthy and authoritative in its domain, but would benefit from enhanced transparency in domain registration and improved privacy controls. Strategic recommendations include adding security headers, publishing a security.txt file, implementing cookie consent, and clarifying incident response contacts to strengthen trust and compliance.

Layton City operates as the official municipal government website for the city of Layton, Utah, providing a broad range of services and information to residents, businesses, and visitors. The site offers utility payments, recreation registrations, business licensing, police services, and community event information, positioning itself as a comprehensive local government portal. The presence of official social media links and a .gov domain reinforces its authoritative role in the community. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, and Google Analytics, ensuring a responsive and user-friendly experience. While the site is mobile optimized and well-structured, there is room for improvement in accessibility and performance optimization. The absence of a CMS detection suggests a custom or proprietary platform. From a security perspective, the site uses HTTPS but lacks several important security headers and does not provide a cookie consent mechanism, which may impact privacy compliance. No vulnerability disclosure or incident response information is available, indicating potential gaps in security transparency. The WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces trust despite the .gov TLD's inherent legitimacy. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in security policies, privacy compliance, and WHOIS transparency are recommended to enhance its security posture and user trust.

W

WSFS Financial Corporation

wsfsbank.com

67

WSFS Financial Corporation operates a comprehensive and professional investor relations website that serves as a key communication channel for shareholders and financial analysts. The company is a large, established financial institution with a strong regional presence in the Greater Philadelphia and Delaware area. The website provides detailed financial reports, governance information, and news updates, reflecting a mature business model focused on banking and wealth management services. Technically, the site leverages a modern investor relations platform (Q4 Inc) with robust JavaScript frameworks and analytics integrations, ensuring a responsive and accessible user experience. Security measures such as HTTPS, Content Security Policy, and anti-CSRF tokens are implemented, indicating a solid security posture. Privacy and cookie policies are clearly linked and appear comprehensive, supporting GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The domain www.rkfdbank.com appears to be unregistered or expired as indicated by the WHOIS query returning no match. The website content is minimal, consisting only of a basic HTML skeleton with no visible business information, contact details, or user-facing content. This suggests the domain is either parked or inactive. The technical infrastructure is limited to basic JavaScript and React framework references, but no meaningful CMS or hosting provider information is available. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site does not represent an operational business or service and poses a high risk for trust and legitimacy.

The website www.tcpglobal.com is currently inaccessible due to rate limiting or web application firewall (WAF) protections, as indicated by the minimal placeholder content 'local_rate_limited'. No meaningful website content, metadata, or business information is available for analysis. The WHOIS query returned no registration data, suggesting the domain may be unregistered, expired, or protected by privacy services that do not disclose registrant details. This severely limits the ability to assess the company's business operations, market position, or digital maturity. The technical infrastructure cannot be evaluated due to lack of accessible content, and no security headers or HTTPS status could be confirmed. Overall, the security posture is unknown but likely poor given the absence of accessible data and registration information.

Y

Yum! Brands

tacobell.com

63

Yum! Brands operates the Taco Bell brand, a major player in the fast food industry specializing in Mexican-inspired cuisine. The website analyzed is a brand page under the Yum! Brands corporate site, presenting Taco Bell's brand identity and information. The site uses modern web technologies including Bootstrap, Google Tag Manager, and reCAPTCHA, indicating a mature digital infrastructure. However, the page lacks visible privacy and cookie policies, which is a compliance concern. Security posture is moderate with use of HTTPS and bot protection but missing explicit security headers. WHOIS data is unavailable due to registry restrictions, but the domain is a known corporate asset. Overall, the site is professional and trustworthy but could improve privacy compliance and security header implementation.

B

Beauregard Electric Cooperative, Inc.

beci.org

62

Beauregard Electric Cooperative, Inc. is a well-established non-profit electric utility cooperative serving primarily Louisiana with a history spanning 87 years. The cooperative provides a range of services including residential and commercial electric service, billing and payment options, and community engagement programs such as scholarships and educational grants. The website reflects a professional and community-focused organization with clear navigation and relevant content for its members and stakeholders. Technically, the site is built on WordPress using modern themes and plugins, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is good with HTTPS enforced and secure login forms, but lacks some security headers and visible incident response contacts. Privacy policies are present and GDPR compliant, though no explicit cookie consent mechanism is implemented. WHOIS data is unavailable due to privacy protection or query failure, which limits domain registration verification but is justified for this type of entity. Overall, the website is trustworthy, professional, and serves its target audience effectively.

K

Knox County Tennessee Government

knoxcounty.org

61

Knox County Tennessee Government operates an official website providing comprehensive information and services to residents, businesses, and visitors of Knox County. The site offers access to government officials, departments, public notices, and online services such as property tax payments and license renewals. The website targets local constituents and serves as a central hub for county government resources. Technically, the site employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and integrates third-party services like Google Analytics and Termly for cookie consent management. The design is responsive and user-friendly, with clear navigation and accessibility considerations. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit incident response policies are lacking. WHOIS data is unavailable from the provided raw output, limiting domain trust assessment, but the official .org domain and government content support legitimacy. Overall, the site is professional, trustworthy, and fulfills its role as a government information portal.

M

MAXIS Global Benefits Network

maxis-gbn.com

66

MAXIS Global Benefits Network is a well-established global network co-founded by major insurers MetLife and AXA, providing multinational employers with comprehensive employee benefits solutions across over 100 markets. The website reflects a mature business with a clear market position as a leading global employee benefits network, offering tailored global employee benefits programmes, health and wellness services, and local wellness solutions. The target audience is multinational corporations seeking global employee benefits management. Technically, the website employs modern technologies including Bootstrap, jQuery, Matomo Analytics, and OneTrust for cookie consent, hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site is mobile-optimized, accessible, and SEO-friendly with professional design and clear navigation. Security posture is strong with HTTPS enforced, security headers implied, and no exposed sensitive data detected. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Overall, the domain registration data supports legitimacy and trustworthiness. The website is safe for general audiences with no adult or questionable content detected.

I

Isuzu UK

isuzu.co.uk

64

Isuzu UK operates a professional and comprehensive website focused on promoting its award-winning Isuzu D-Max pick-up truck range, including diesel and electric variants. The company targets UK consumers and businesses, offering vehicle sales, financing options, fleet services, accessories, and customer support. The website demonstrates strong branding, clear navigation, and rich multimedia content, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and WooCommerce, integrating modern tracking and consent management tools. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information could be improved. The WHOIS data is unavailable due to a domain naming rules violation, which is unusual but the website content and structure indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional digital asset for Isuzu UK.

L

Look Local Newspaper

looklocal.org.uk

60

Look Local Newspaper is a small, independently owned local newspaper serving North Sheffield and surrounding areas since 1998. It distributes weekly print editions to over 20,000 homes and drop-off points, complemented by an online edition with a modest readership. The business focuses on community news, local events, and advertising services for local businesses, positioning itself as a trusted and established media source within its community. The website is hosted on the Google Sites platform, leveraging Google Fonts and APIs, providing a functional and moderately optimized user experience with good mobile responsiveness. However, the site lacks comprehensive privacy and terms of service policies, which are important for compliance and user trust. Security posture is basic with HTTPS enabled but missing security headers and no visible advanced security measures. WHOIS data is unavailable due to domain naming rules violation, which raises some concerns about domain registration legitimacy, although the website content appears genuine and consistent with the business claims. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved privacy compliance and security enhancements.

N

N8ked AI

n8ked.app

67

N8ked AI operates a web-based platform specializing in AI-powered image transformation, specifically removing clothing from photos to generate photorealistic nude images. The service targets adult users and positions itself as a leading solution with over 450,000 users and 2 million images processed. It offers a freemium business model with free credits and paid one-time credit packs, avoiding subscriptions. Technically, the site is built on the Astro framework, optimized for performance and mobile devices, and uses modern web fonts and analytics. Security posture is strong with HTTPS, encryption of uploads, and a strict zero-retention policy for user images, enhancing user privacy and trust. However, the site lacks explicit cookie consent mechanisms and published security or incident response policies. Overall, the platform is professional, privacy-conscious, and well-positioned in its niche, but could improve transparency around security and compliance.

T

Esports Ladder & Tournament Hosting | TWL

teamwarfare.net

54

Team Warfare Ladder (TWL) operates as a specialized esports platform providing ladder and tournament hosting services for competitive gaming communities. The website presents a focused business model targeting esports players and organizers, leveraging modern web technologies and cloud services to deliver its platform. The domain is well-established since 2018, consistent with the business timeline. Technically, the website uses Bootstrap for frontend styling, integrates with Supabase for backend services, and employs Plausible Analytics for user tracking. Hosting is via AWS infrastructure as indicated by DNS records. The site is mobile optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, HTTPS is enabled, but the absence of security headers and DNSSEC reduces the overall security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact and incident response information are not provided, limiting transparency and trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact channels to improve trust and regulatory adherence.

Atkrapies.lv is an official Latvian government website operated by the Ministry of Finance (Finansu ministrija) focused on anti-fraud awareness and prevention. The platform provides educational content, practical advice, and a channel for reporting violations, targeting Latvian citizens and organizations. The website demonstrates a consistent government branding and messaging aligned with its mission to combat fraud and shadow economy activities. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, Google reCAPTCHA, and Google Analytics, ensuring a responsive and interactive user experience. Security measures such as HTTPS and reCAPTCHA are implemented, although explicit privacy and security policies are not prominently published. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy transparency and incident response contact availability.

C

Centre of Healing Minds (CoHM)

cohm.ca

53

Centre of Healing Minds (CoHM) is a specialized psychotherapy and mental health service provider based in Mississauga, Ontario, Canada. The company offers a wide range of therapy services including individual, couples, child, family, and specialized therapies such as EMDR, CBT, and trauma therapy. The business targets individuals seeking mental health support locally and across Ontario, providing both in-person and virtual appointments. The website is professionally designed with clear navigation, strong branding, and comprehensive content that reflects the company's expertise and service offerings. Technically, the site is built on WordPress with Elementor and optimized using WP Rocket and other modern plugins, ensuring fast performance and mobile responsiveness. Security posture is good with HTTPS, security headers, and cookie consent mechanisms, although some improvements in CSP and incident response disclosures are recommended. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible online presence for the business.

H

Wartung wird durchgeführt!

hypoxi-frankfurt-bornheim.de

42

The website www.hypoxi-frankfurt-bornheim.de is currently in maintenance mode, displaying a placeholder page indicating ongoing updates or technical issues. The business appears to be related to fitness or body shaping services, as suggested by the description 'Dein Weg zur Wunschfigur' (Your way to the desired figure). However, no detailed business information, contact details, or service descriptions are available on the site at this time. The site uses WordPress with a common maintenance plugin and includes a link to a Facebook page for social media presence. From a technical perspective, the website employs standard web technologies including WordPress CMS, Bootstrap CSS framework, Font Awesome icons, and the Roboto font from an external font provider. The site appears to be moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal data collection or user tracking. Security posture is limited due to the lack of visible security headers and absence of published privacy or cookie policies. The site uses HTTPS (implied by URLs) but no further security best practices are evident. No forms or input fields are present, reducing immediate attack surface but also limiting user engagement. WHOIS data shows consistent domain registration with multiple UI-DNS name servers, suggesting legitimate domain management, though registrant details are not provided. Overall, the website currently offers minimal content and limited business or security information. The risk level is low due to lack of sensitive data exposure but the site lacks transparency and compliance indicators. Strategic improvements should focus on restoring full website content, publishing privacy and cookie policies, adding contact information, and implementing security best practices to enhance trust and compliance.

P

Pflegedienst zur Sonnenblume

pflegedienst-zur-sonnenblume.de

47

Pflegedienst zur Sonnenblume is a small regional mobile nursing service provider operating primarily in the Hoyerswerda area and surrounding towns in Germany. The company focuses on delivering compassionate and respectful care to individuals in need of nursing support at home. Their website reflects a professional and consistent brand image, with clear descriptions of their services and target audience. The business appears well-established since 2015, with a clear local market presence. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for SEO, accessibility, and GDPR compliance. Hosting is provided by Strato servers, and the site uses HTTPS with a good SSL configuration. The website is moderately performant and mobile-optimized, providing a good user experience. From a security perspective, the site employs HTTPS and privacy-focused plugins but lacks advanced security headers and explicit incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy and cookie policy and consent mechanisms in place. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers, incident response information, and broader contact details could enhance trust and security posture further.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.kamani.net operates as a platform specializing in the brokerage and trading of used industrial machinery, plants, and tools. It targets industrial buyers and sellers seeking second-hand equipment, offering services such as trading, commissioning, and brokerage. The business appears to be a small-scale niche player without clear information on company size or founding year. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks mobile optimization and advanced SEO features. Security posture is weak, with no HTTPS detected and absence of security headers or advanced form protections. Privacy compliance is minimal but includes a basic GDPR privacy policy and terms of service in German. The domain WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional but outdated and lacks critical security and compliance features.

T

Test

subaru.de

50

The website www.subaru.de represents Subaru Deutschland, a large automotive business focused on all-wheel drive SUVs and electric vehicles tailored for the German market. The site offers comprehensive services including vehicle configuration, test drives, dealer search, and after-sales support. The business model centers on direct consumer engagement through digital channels, supported by a professional and well-branded online presence. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, with a strong emphasis on GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trust but does not outweigh the professional presentation and compliance indicators. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

T

Teuwsen Sportgeraete

teuwsen-sportgeraete.de

44

Teuwsen Sportgeraete is a German-based small manufacturing company specializing in custom fitness and rehabilitation equipment with nearly 40 years of experience. The company offers tailored solutions including custom-built devices, powder coating, and upholstery services, targeting fitness studios, rehabilitation centers, and private customers with specific space requirements. The website is built on WordPress with modern plugins such as Slider Revolution and integrates Google reCAPTCHA for form security. While the site is professionally designed and provides clear navigation, it lacks some advanced privacy and security features such as cookie consent mechanisms and security headers. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the company maintains a moderate security posture with room for improvement in compliance and technical security practices.

Getränkefachgroßhandel Preckel operates as a beverage wholesale distributor and rental service provider in Germany, focusing on beers, non-alcoholic drinks, and related equipment rentals. The website content is minimal, primarily serving as a redirect page with outdated Flash content, indicating low digital maturity. The business targets regional customers needing beverage supplies and rental services. Technically, the site relies on deprecated Flash technology, lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which raises compliance concerns. No contact information or social media presence is evident, limiting user engagement and trust. Overall, the site presents a basic online presence with significant modernization and security improvements needed.

The analyzed URL leads to a Cloudflare security verification challenge page, which blocks direct access to the actual website content. The page serves as a bot protection mechanism and does not contain any business-related information, contact details, or policies. The domain is registered with World4You Internet Services GmbH since 1998 and is currently active with standard domain protections but lacks DNSSEC. Due to the WAF challenge, the content quality and business credibility cannot be assessed. The technical implementation shows use of modern security headers and HTTPS, but no further technologies or CMS are detectable. Privacy and compliance information are absent, indicating a lack of visible GDPR or cookie policy compliance. Overall, the site is secure from a domain and transport perspective but inaccessible for content analysis, resulting in a low AI score.

L

Löwen-Apotheke

loewen-apotheke-wickrath.de

68

Löwen-Apotheke Mönchengladbach-Wickrath is a local pharmacy serving the Mönchengladbach-Wickrath area in Germany, offering traditional pharmacy services combined with modern digital features such as e-prescriptions, product pre-ordering, and personal consultation. The website reflects a small business model focused on retail healthcare products and services, including cosmetics and home delivery. The company positions itself as a community-focused pharmacy with a commitment to fast, secure, and personal service. Technically, the website employs modern web technologies including JavaScript frameworks, CDN delivery via Amazon Cloudfront, and MapLibre for mapping services. The site is mobile-optimized, accessible, and SEO-friendly, with a manifest for progressive web app capabilities. Performance is moderate, with some lazy loading errors noted but overall a good user experience. From a security perspective, the site uses HTTPS exclusively and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response information is published. No vulnerable libraries or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a professional, secure, and privacy-conscious online presence for a local pharmacy. Strategic improvements could include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to further strengthen trust and compliance.