Security Directory

一

一加社区 (OnePlus Community)

oneplusbbs.com

56

The website bbs.oneplus.com serves as the official community forum for OnePlus smartphone users, providing a platform for product discussions, user tips, firmware flashing tutorials, and photography sharing. It is clearly branded and targeted at OnePlus customers and enthusiasts, supporting a large user base with rich content. The site uses modern web technologies including Vue.js and integrates with HeyTap account services, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enabled but lacking visible security headers and formal privacy or cookie policies in the provided content snapshot. No contact or incident response information is present, which could be improved to enhance trust and compliance. Overall, the site is legitimate, well-branded, and functional, but would benefit from enhanced privacy compliance and security best practices.

M

MooiRivier Mall

mooiriviermall.co.za

38

MooiRivier Mall is a retail shopping center located in Potchefstroom, South Africa, offering a variety of stores, leasing, advertising, and event opportunities. The mall emphasizes a family-friendly environment with a scenic riverfront and community engagement. It is owned and managed by Attacq Ltd, a registered property practitioner, which adds credibility and stability to its operations. The website reflects a medium-sized retail business targeting local shoppers and families. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and performance is moderate. The absence of certain security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS with anonymized IP tracking via Google Tag Manager, but lacks explicit security policies, incident response contacts, and cookie consent banners. WHOIS data is unavailable due to privacy protection, which is common for commercial properties but limits domain trust verification. Overall, the security posture is adequate but could be enhanced by implementing recommended headers and privacy controls. The overall risk assessment is low to moderate, with no signs of malicious content or vulnerabilities detected. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, publishing incident response information, and enhancing contact transparency to build greater user trust and regulatory adherence.

D

Fine Art Merchandise for visitor attractions, galleries and retail

doricmor.com

52

Doricmor.com is a small business specializing in the production of high-quality fine art merchandise and Giclee prints targeted at visitor attractions, galleries, gift shops, framers, hospitality, and professional artists. The company emphasizes personalized service, small product runs, and quality manufacturing based in Scotland. The website presents a professional and well-structured front-end built on modern technologies such as Vue.js and Vuetify, with integration of Google Analytics for visitor tracking. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and clearly published security policies. Overall, the site is functional and professional but would benefit from enhanced compliance and trust signals.

R

Rivervale

conceptvehicleleasing.co.uk

60

Rivervale is a UK-based vehicle leasing company specializing in car, van, and minibus leasing for both personal and business customers. The company offers a wide range of makes and models with nationwide delivery and maintains a strong reputation evidenced by a 4.9 aggregate rating from over 4900 reviews on Trustpilot. The website is professionally designed with clear navigation and modern technology, including Vue.js and Algolia search integration, supporting a good user experience across devices. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and privacy compliance documentation. The WHOIS data is unavailable due to a domain naming rule violation, which is unusual but does not appear to impact the legitimacy of the business. Overall, Rivervale presents a credible and trustworthy online presence in the vehicle leasing market.

V

Vodworks

vodworks.com

72

Vodworks is a UK-based global software development firm specializing in end-to-end engineering solutions including custom software development, consultancy, AI readiness, and cybersecurity. The company serves enterprises and startups, leveraging a skilled team of over 150 developers across multiple global centers. Their website reflects a mature digital presence with comprehensive service descriptions and client trust signals. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, integrates analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot, and is hosted with Cloudflare DNS services. Security posture is strong with HTTPS enforced and bot protection via Google reCAPTCHA Enterprise, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Vodworks presents a credible, professional, and secure online presence aligned with their business claims.

N

New H3C Technologies Co., Ltd.

h3c.com

66

New H3C Technologies Co., Ltd. is a leading enterprise in digital and AI infrastructure solutions, offering a comprehensive portfolio spanning cloud computing, networking, storage, security, and intelligent terminal products. The company targets a broad audience including enterprises, SMBs, government, education, healthcare, and carriers, positioning itself as a trusted partner for digital transformation and business innovation. The website reflects a mature digital presence with rich content, clear navigation, and professional branding consistent with an enterprise-grade technology provider. Technically, the website employs modern JavaScript frameworks such as Vue.js and jQuery, integrates analytics tools including Google Tag Manager and Azure Application Insights, and delivers content with moderate performance and good mobile optimization. While the site uses HTTPS and secure forms, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong branding and external references to the parent company, Tsinghua Unigroup. From a security perspective, the site demonstrates good practices with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contact details suggests room for enhancing transparency and readiness. Overall, the website is professional, secure, and compliant with privacy policies, though it could benefit from improved cookie consent and security header implementation. Strategically, the company should focus on enhancing its security posture by implementing recommended headers, publishing vulnerability disclosure information, and improving privacy compliance mechanisms. These steps will strengthen trust and align with global standards, supporting its market leadership in digital infrastructure solutions.

R

R2M Ltd

r2mltd.co.uk

66

R2M Ltd is a UK-based supplier specializing in pipes, valves, and fittings for the water industry, offering extensive stock and 24/7 emergency support. The company is part of the Hawle Austria Group, a global engineering leader in water supply solutions. The website reflects a professional and well-established business with a strong focus on innovation and customer service. Technically, the site uses modern frameworks such as Vue.js and integrates privacy-compliant analytics and consent management tools. Security posture is solid with HTTPS and security headers implemented, though no explicit security policy or incident response contacts are published. The WHOIS data is unavailable due to a domain registration error, which raises some concerns but is offset by the website's professionalism and trust indicators. Overall, the site is trustworthy and well-positioned in its market niche.

B

Bit Zesty Ltd

bitzesty.com

71

Bit Zesty Ltd is a UK-based software development company specializing in web, mobile, and AI development with a strong focus on government and startup clients. Established in 2009, the company has built a solid market position supported by multiple industry awards and certifications such as ISO 27001 and Cyber Essentials. Their service offerings cover end-to-end software development including discovery, design, AI integration, support, and team augmentation. The company emphasizes continuous improvement and long-term client relationships, with an average client retention of 2 years and some engagements lasting over a decade. Technically, Bit Zesty employs a modern and diverse technology stack including Ruby on Rails, React Native, Python/Django, Elixir/Phoenix, and various databases like PostgreSQL and MongoDB. The website is hosted behind Cloudflare, ensuring performance and security benefits. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading times. From a security perspective, the company demonstrates maturity with HTTPS enforcement, security certifications, and dedicated incident response services. However, DNSSEC is not enabled, and no public vulnerability disclosure policy or security.txt file was found, which could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Bit Zesty presents a trustworthy and professional digital presence with strong business credibility and technical competence. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and enhancing incident response contact transparency to further strengthen security posture and client trust.

S

Suodatinkeskus

suodatinkeskus.com

55

Suodatinkeskus is a Finnish e-commerce retailer specializing in air filters for ventilation machines, central vacuum cleaners, and related accessories. The website presents a professional and well-structured platform targeting Finnish consumers and businesses requiring these products. The company emphasizes domestic products and fast delivery, positioning itself as a reliable local supplier in the home improvement retail sector. Technically, the site leverages modern JavaScript frameworks such as Vue.js and integrates popular marketing and analytics tools including Google Tag Manager, Google Analytics, Bing Ads, and Yotpo for customer reviews. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policy pages indicates room for improvement. The WHOIS data is notably missing, which raises concerns about domain legitimacy and ownership transparency. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and security hardening.

H

Heraeus Group

heraeus.com

75

Heraeus Group is a globally recognized, family-owned technology company headquartered in Hanau, Germany, with a rich history spanning over 350 years. The company specializes in advanced materials and innovative technology solutions across multiple sectors including metals and recycling, healthcare, semiconductor and electronics, and industrial applications. Their business model focuses on providing customized, technology-driven solutions to industrial and healthcare customers worldwide. The website reflects a mature digital presence with comprehensive content, strong branding, and a clear focus on sustainability and innovation. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, supported by a Magnolia CMS backend. It employs industry-standard analytics and consent management tools, ensuring compliance with privacy regulations like GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registry issues, which slightly impacts trustworthiness. Overall, Heraeus Group's website demonstrates a strong business and technical foundation with good security practices, though improvements in security header implementation and transparency in domain registration are recommended to enhance trust and compliance.

W

WOOD & Company Financial Services, a.s.

wood.com

57

WOOD & Company Financial Services, a.s. is a well-established investment banking and asset management firm focused on the Central and Eastern European markets. With over 35 years of experience, the company offers a range of financial services including markets, investment banking, asset & wealth management, real estate, and venture investments. The company is a member of the global Oaklins network, enhancing its cross-border transaction capabilities. The website reflects a professional and trustworthy brand with comprehensive service offerings and clear contact channels. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted behind Cloudflare DNS, and employs multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. The site is mobile-optimized, fast-loading, and SEO-friendly, with good accessibility features. Security measures include HTTPS enforcement, use of Google reCAPTCHA on forms, and implied security headers, although explicit header details are not fully visible. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance indicators, and consent mechanisms. However, the site lacks a published security policy or incident response contact details, which could be improved. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity. Strategically, WOOD & Company should consider publishing a dedicated security policy and incident response information to enhance transparency and trust. Adding a security.txt file for vulnerability disclosures and explicitly implementing security headers would further strengthen their security posture. Regular audits of third-party scripts are recommended to mitigate potential risks. These improvements will support the company’s reputation as a secure and compliant financial s…

P

Plumb Crazy Ltd

plumbcrazyltd.com

55

Plumb Crazy Ltd is a small, family-run business based in Helston, Cornwall, specializing in the supply and installation of high-quality kitchens and bathrooms. With over 30 years of industry experience, the company serves both domestic and trade customers, offering bespoke design services and a wide range of products from British manufacturers. The website reflects a well-established local business with a strong reputation and customer focus. Technically, the website is built on Concrete CMS and utilizes modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap for responsive design and user experience. The site is mobile-optimized and includes interactive elements like image sliders and cookie consent mechanisms. However, some technical improvements are recommended, including the addition of security headers and enhanced accessibility features. From a security perspective, the website enforces HTTPS and has implemented a cookie consent banner, indicating some attention to privacy compliance. However, the absence of a visible privacy policy, terms of service, and WHOIS domain registration data reduces overall trust and compliance posture. No critical vulnerabilities or exposed sensitive data were detected, but security headers and incident response information are lacking. Overall, the website presents a professional and trustworthy front for a local business but would benefit from improved transparency in privacy and security policies, as well as domain registration clarity to enhance legitimacy and user trust.

T

The Writer

thewriter.com

62

The Writer is a UK-based professional brand language consultancy specializing in writing, training, naming, and consulting services. The company targets businesses globally seeking to improve their brand communication and customer engagement through effective language. The website demonstrates a mature digital presence with modern technologies such as Nuxt.js and Vue.js, complemented by SEO best practices and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site projects professionalism and trustworthiness, though the absence of WHOIS data slightly impacts domain trust. Strategic recommendations include publishing a security policy, adding security headers, and establishing a vulnerability disclosure process.

Chillisauce is a well-established UK-based event organizing company specializing in stag dos, hen parties, corporate events, and group activity weekends across Europe. With over 20 years of experience and a large customer base, it holds a leading market position in the UK. The website presents a professional and consistent brand image, offering a wide range of services and destinations. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, integrates multiple marketing and analytics tools, and is hosted with reputable providers including Amazon Registrar and Cloudflare DNS. Security posture is good with HTTPS enabled and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is safe for general audiences and trustworthy based on domain age and WHOIS data.

B

Body & Strumpf

body-strumpf.de

58

Body & Strumpf is a German-based e-commerce retailer specializing in hosiery, bodysuits, and related accessories. The company emphasizes its over 45 years of experience and offers free shipping within Germany, targeting consumers interested in quality hosiery products. The website is built on the plentymarkets platform using Vue.js, integrating PayPal for payment processing. The site demonstrates a good level of digital maturity with responsive design and clear navigation, although some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. Overall, the business presents a professional and trustworthy online presence with room for enhanced privacy and security compliance.

E

Eventsforce

eventsforce.com

63

Eventsforce is a professional event management software provider offering a comprehensive suite of tools for event planners, including registration, mobile apps, awards management, abstracts, and hybrid/virtual event solutions. The company positions itself as a trusted and established player in the event technology industry, supported by notable client logos and a partnership with Granicus. The website demonstrates a modern technical infrastructure using JavaScript frameworks like Vue.js and analytics tools such as Google Analytics and LinkedIn Insight. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and published security policies. Privacy compliance indicators such as privacy and cookie policies are not clearly found, which may impact user trust and regulatory compliance. Overall, the website is professional, well-branded, and content-rich, targeting event planners and organizations seeking integrated event management solutions.

P

Printful

printful.com

71

Printful is a leading print-on-demand and dropshipping platform that enables entrepreneurs and businesses to design, create, and sell custom products online without holding inventory. The company offers a comprehensive suite of services including product printing, order fulfillment, warehousing, and seamless integration with popular e-commerce platforms. Their market position is strong, serving a global audience with a professional and user-friendly website that emphasizes ease of use and scalability for online sellers. Technically, Printful employs modern web technologies such as Vue.js for frontend development, integrates Google Analytics and Tag Manager for data insights, and uses Sentry for error monitoring. The website is well optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement, CSRF protection, and security headers, although explicit security policies and incident response contacts are not publicly detailed. From a security standpoint, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and domain registration details introduces a minor trust gap, though the overall professionalism and transparency of the site mitigate this concern. Overall, Printful presents a trustworthy and well-managed online platform with strong business credibility and technical maturity. Strategic recommendations include publishing dedicated security and incident response policies, enhancing transparency on certifications, and maintaining vigilance on third-party integrations to sustain security and compliance standards.

T

The Printed Group Limited trading as Printed.com

printed.com

61

Printed.com is a UK-based digital printing service provider offering a wide range of products including business cards, flyers, wedding stationery, banners, and art prints. The company targets both businesses and individual customers seeking high-quality, fast turnaround printing solutions. The website demonstrates a mature e-commerce platform with comprehensive product categories and user-friendly navigation. Technically, the site leverages modern JavaScript frameworks like Vue.js and integrates multiple third-party analytics and marketing tools such as Google Tag Manager, FullStory, Facebook Pixel, and Hotjar, indicating a sophisticated digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. The absence of WHOIS data for the domain is a notable anomaly that impacts trust and requires further investigation. Overall, the website is professional, well-branded, and compliant with privacy regulations, serving as a credible platform for digital printing services.

A

AGT Food and Ingredients Inc.

agtfoods.com

57

AGT Food and Ingredients Inc. is a large, Saskatchewan-based diversified food company specializing in plant-based proteins, pulses, grains, and value-added food ingredients. Majority owned by Fairfax Financial Holdings Limited, AGT Foods operates globally with a strong market position as a leader in pulse processing and food ingredient supply. Their business model encompasses packaged foods, food ingredients, co-manufacturing, bulk handling, and trading platforms serving producers, traders, and retail consumers worldwide. The website reflects a professional corporate presence with detailed business descriptions, subsidiary links, and active social media channels. Technically, the website employs modern frontend technologies such as Vue.js and Swiper.js, integrates Google reCAPTCHA for form security, and uses HTTPS with good SSL configuration. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. No content blocking or WAF challenges were detected, allowing full content access and analysis. From a security perspective, the site uses HTTPS and reCAPTCHA but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. No vulnerability disclosures or incident response information are published, and no data protection officer contact is provided. The WHOIS data is missing or not found for the domain, which raises some concerns about domain registration transparency, though the website content and business information appear legitimate and consistent with a large enterprise. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from improved privacy compliance, security headers, and transparency in domain registration details to enhance trust and security posture.

V

Van Mossel Jacksons

jacksons.im

57

Van Mossel Jacksons is a medium-sized automotive dealership operating in the Isle of Man since 2018, offering new and used car sales, servicing, and related automotive services. It is part of the larger Van Mossel Automotive Group, which operates multiple regional sites across Europe. The website is built on modern web technologies including Nuxt.js and Vue.js, with content managed via Storyblok CMS. It features a professional design, good navigation, and mobile optimization, though some accessibility features could be improved. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced security and compliance transparency.

Sheila Bird Studio is a Manchester-based place branding and commercial interior design studio focused on creating vibrant, community-oriented spaces. The company targets developers and businesses aiming to build engaging and beloved communities. Their website reflects a professional and modern design, showcasing multiple projects and client testimonials, positioning them as a credible player in the real estate and design sector. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted with DigitalOcean Spaces for media assets, and integrates Google Analytics for performance insights. The site is fast, mobile-optimized, and SEO-friendly. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks some security headers and published security policies, which are recommended for improvement. The WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness, but the overall digital presence and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details.

A

Auto4 Limited

auto4.co.uk

47

Auto4 Limited operates as a specialist distributor serving the UK tyre industry, providing parts, consumables, and equipment primarily to trade customers. The company positions itself as one of the largest and fastest growing in its niche, targeting tyre industry professionals and businesses. The website offers detailed product categories, trade account management, and customer support via phone and email, reflecting a business-to-business model focused on distribution and supply chain services. Technically, the website employs modern web technologies including Vue.js, jQuery, and slick carousel for UI components, alongside Google Analytics and Tag Manager for tracking and marketing. The site is mobile-optimized with responsive design and clear navigation, though some accessibility features appear basic. The absence of visible security headers and cookie consent mechanisms suggests room for improvement in security and privacy compliance. Security posture is moderate with HTTPS usage implied, secure form validation, and no visible vulnerabilities. However, the lack of published security policies, incident response contacts, and vulnerability disclosure reduces transparency. WHOIS data for the exact queried subdomain is unavailable due to query on 'www.auto4.co.uk' rather than the registered domain 'auto4.co.uk', which slightly impacts trust but does not detract from the overall legitimacy of the business. Overall, Auto4 presents a professional and credible online presence with good business information and technical implementation. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance posture.

Act IV is a small, specialized arts consultancy and event management company based in the United Kingdom. The company focuses on enabling businesses to build creative relationships with arts organizations, artists, and charities, with a strong emphasis on fundraising and creative event experiences. Their market position is niche, targeting clients seeking strategic arts consultancy and unique cultural event management. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built using modern frameworks such as Astro and Vue.js and is hosted on Hostinger. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO is well addressed with proper meta tags and structured data. Analytics are implemented via Amplitude, with minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security best practices. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to an invalid query on the subdomain 'www.activ.org.uk', which is not a valid domain for .uk registrations, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional front for a small arts consultancy business, but improvements in security headers, privacy compliance, and WHOIS data clarity are recommended to enhance trust and compliance.

F

Freeman Spogli

freemanspogli.com

62

Freeman Spogli is a private equity firm specializing in partnerships with founders and management teams in the consumer and distribution sectors. Established since 1983, the firm focuses on building enduring businesses through strategic investments and active engagement with portfolio companies. The website reflects a mature, professional business with a clear market position in middle market private equity. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS enforced, though some security headers could be improved. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. The absence of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not overshadow the professional presentation and business credibility. Overall, the site is well-designed, content-rich, and trustworthy from a business perspective.

D

DEB Disposables Ltd

deb-disposables.co.uk

57

DEB Disposables Ltd is a UK-based distributor specializing in hygiene products and packaging, serving manufacturing, healthcare, food production, engineering, and education sectors primarily in Manchester and the North West. The company has a longstanding history since 1978 and offers a broad product range with trade pricing and fast local delivery. The website is professionally designed using modern technologies such as Vue.js, Stripe for payments, and Tawk.to for live chat support, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and CSRF protections, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is addressed with cookie consent and privacy policies. However, the domain WHOIS data is unavailable due to a naming rules error, which raises concerns about domain legitimacy and registration consistency. Overall, the website is trustworthy and business-focused but would benefit from improved transparency on domain registration and enhanced security headers.

Discover ASR's Citadines website presents a professional hospitality service offering hotel apartments and serviced apartments under the Ascott Star Rewards loyalty program. The site targets travelers seeking comfortable, home-like accommodations with convenient booking options. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js, integrates marketing and analytics tools like Braze and Adobe DTM, and employs consent management via TrustArc to address GDPR requirements. However, the absence of visible privacy policies and terms of service pages, coupled with missing WHOIS domain registration data, introduces concerns regarding transparency and domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Overall, the website is functional and well-branded but would benefit from enhanced compliance and security disclosures.

R

Welcome to Riverhouse Barn

riverhousebarn.co.uk

51

Riverhouse Barn's website presents a hospitality venue, likely a barn used for events such as weddings. The site is built using modern frontend technologies including Vue.js, Nuxt.js, and Tailwind CSS, with Google Tag Manager integrated for analytics and consent management. The website content is accessible and safe for general audiences, with no adult or explicit content detected. However, the absence of privacy, cookie, and terms of service policies indicates a gap in compliance with data protection regulations such as GDPR. The WHOIS data for the domain is unavailable and indicates the domain name is invalid under Nominet UK rules, raising concerns about domain legitimacy or configuration issues. Security posture is basic with no detected security headers and unknown SSL configuration, suggesting room for improvement in securing the site and protecting user data. Overall, the site appears functional but lacks critical compliance and security features.

M

MandM

mandmdirect.com

72

MandM is a well-established UK-based e-commerce retailer specializing in branded clothing, footwear, and accessories at discounted prices. The website targets men, women, and children primarily in the UK and European markets. It offers a broad range of products from big brands, positioning itself as a cost-effective alternative to traditional retail. The business model focuses on direct online sales with a strong digital presence and customer engagement through multiple social media platforms. Technically, the website employs modern web technologies including Vue.js, jQuery, and Algolia for search functionality, supported by robust tracking and marketing tools such as Google Tag Manager and Exponea. Hosting and content delivery appear to be managed via Akamai CDN, ensuring good performance and availability. The site is mobile-optimized and incorporates accessibility features, though there is room for improvement in accessibility compliance. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements security headers like Content Security Policy and X-Frame-Options. Cookie consent and privacy policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. However, explicit security policies and incident response information are not publicly available, which could be enhanced to improve transparency and trust. Overall, MandM demonstrates a strong digital maturity and business credibility with a secure and user-friendly platform. The absence of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the business. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility to further strengthen the website's security and compliance posture.

W

Windermere Lake Cruises

windermere-lakecruises.co.uk

65

Windermere Lake Cruises operates as a prominent tourism and leisure service provider in the Lake District, UK, offering a variety of lake cruises, self-drive boat rentals, group bookings, and private hire services. The website reflects a well-established business with a clear market position as a leading local attraction. The digital infrastructure leverages modern web technologies including Vue.js, Google Tag Manager, and a CDN hosted on Amazon S3, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and standard security headers, though there is room for improvement in publishing formal security policies and incident response contacts. The absence of WHOIS data due to domain naming rules error is a notable anomaly, slightly impacting trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a general audience interested in tourism and outdoor activities.

M

MK Marking Systems

mkmarking.co.uk

60

MK Marking Systems is a well-established signage company based in Milton Keynes, UK, specializing in the design, manufacture, and installation of a wide range of signage products. With over 40 years of experience, the company serves local businesses and organizations with high-quality signage solutions including vehicle graphics, exterior and interior signs, and safety signage. Their market position is strong locally, supported by industry certifications and positive customer testimonials. The website demonstrates a mature digital presence built on modern technologies such as Nuxt.js and Sanity CMS, with good performance and mobile optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for potential customers.

The website www.monks-crane.com appears to represent an online entertainment brand named TapTap点点 (188改名·VIP中文), offering a variety of gaming and sports-related services including live casino, esports, lottery, and sports betting. The content is primarily in Chinese and targets a mature audience interested in online gaming and sports. However, the domain WHOIS data is missing or indicates the domain is unregistered, which is inconsistent with the active website presence and raises significant legitimacy concerns. Technically, the site uses common JavaScript libraries such as jQuery and Vue.js and is built on Visual SiteBuilder CMS, but lacks HTTPS and standard security headers, exposing it to potential security risks. No privacy or cookie policies are present, and contact information is limited to a physical address in Shandong, China. External scripts are loaded from suspicious domains, further increasing risk.

C

Carbon Financial Partners Limited

carbonfinancial.co.uk

57

Carbon Financial Partners Limited is a well-established financial planning firm headquartered in Edinburgh, UK, with a strong market position supported by high client satisfaction and professional certifications such as Chartered Financial Planner and Fellow of the Personal Finance Society. The company operates as part of The Progeny Group, offering personalized financial planning, investment management, pensions advice, and a free second opinion service. Their target audience includes individuals seeking expert financial advice to achieve life ambitions. Technically, the website leverages modern technologies including Vue.js, Google Tag Manager, and is hosted on Amazon S3, providing good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

N

Northside Truck & Van Ltd

northside.co.uk

64

Northside Truck & Van Ltd is a reputable commercial vehicle dealership specializing in Mercedes-Benz and FUSO trucks and vans, primarily serving the Yorkshire region in the United Kingdom. The company offers new and used vehicle sales alongside servicing and maintenance, positioning itself as a trusted regional specialist. The website reflects a professional and consistent brand image with good content quality and user experience, targeting businesses and individuals seeking commercial vehicles. Technically, the site employs modern technologies including Google Analytics, Google Tag Manager, Osano consent management, and Vue.js, hosted via Amazon Cloudfront CDN, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. However, WHOIS data is unavailable due to domain registration issues, slightly impacting trustworthiness. Overall, the website is professional, secure, and compliant, with room for improvement in contact transparency and security documentation.

L

Line Group Limited

linegrouplimited.com

51

Line Group Limited is a Gibraltar-based fiduciary services provider specializing in international fiduciary, company management, trust, accounting, and corporate banking services. Established in 2012, the company serves a global clientele with a strong local presence and a team of approximately 70 professionals. Their website reflects a professional and comprehensive presentation of their services and team, targeting clients seeking wealth management, trust services, and corporate solutions in Gibraltar. The business model focuses on providing tailored fiduciary and corporate services with a strong emphasis on trust and compliance. Technically, the website is built on WordPress with modern JavaScript frameworks including Vue.js, Alpine.js, and jQuery, complemented by SEO optimization through Yoast. The site uses Google Analytics and Passle for content marketing and analytics. Hosting appears to be managed via GoDaddy, consistent with the domain registrar. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Security posture is adequate but could be enhanced by enabling DNSSEC and adding security headers and policies. The domain registration data supports the legitimacy of the business. Strategic recommendations include improving DNS security, publishing security policies, and ongoing monitoring of third-party scripts.

T

tesa SE

tesa.co.uk

73

tesa SE is a leading global manufacturer of adhesive tapes serving industry, craftsmen, and consumers worldwide. The company offers a broad portfolio of adhesive solutions and technical consulting services, positioning itself as a trusted partner in multiple sectors including automotive, electronics, construction, and consumer goods. The website reflects a mature digital presence with comprehensive content, multi-language support, and a focus on sustainability. Technically, the site employs modern web technologies such as Vue.js, Google Analytics 4, and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the site is professional, trustworthy, and well-optimized, though the absence of WHOIS data for the domain introduces a minor trust concern. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing a vulnerability disclosure policy.

G

Grand Garage

grandgarage.co.uk

64

Grand Garage is a well-established family-run automotive dealership specializing in Peugeot and Citroen vehicles, located in Margate, Kent, UK. The company offers a comprehensive range of services including used car sales, servicing, warranty, finance options, and Motability vehicle servicing. The business holds manufacturer recognition such as the Peugeot Gold Lion Award and Citroen Service Retailer status, positioning it as a trusted local dealership. Technically, the website employs modern JavaScript frameworks like Vue.js and Vuetify, integrates analytics tools such as Google Analytics and Snowplow, and uses a reputable CDN for hosting. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable due to an incorrect query on the subdomain, but the website content and business information appear consistent and professional. Overall, the site presents a low risk with good trust indicators and compliance with privacy regulations.

L

L Hawkins & Sons Ltd.

lhawkinsandsonsltd.co.uk

46

L Hawkins & Sons Ltd. is an independent, family-run funeral director business based in Leatherhead, Surrey, with a history dating back to the 1880s. The company offers a range of funeral services including cremation, religious and non-religious funerals, and burials, supported by affiliations with recognized industry organizations and a reputation for compassionate service. Their website reflects a professional and trustworthy local business with clear contact channels and service descriptions. Technically, the website is built using Vue.js and hosted likely via Namecheap, with WordPress CMS elements inferred. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were found, but the absence of cookie consent and incident response information indicates compliance gaps. Overall, the security posture is moderate but could be enhanced to meet best practices and regulatory requirements. The overall risk is low given the nature of the business and website content, but strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to strengthen trust and regulatory adherence.

M

Morris Clarke Recruitment

morrisclarke.co.uk

55

Morris Clarke Recruitment is a small UK-based recruitment agency specializing in staffing services across Daventry, Lutterworth, Market Harborough, and Rugby. The company emphasizes personalized recruitment processes by engaging directly with candidates and clients to tailor solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting job seekers and employers in their regional market. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN and Cloudflare for performance and security. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and terms of service. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Beijer Ref UK

hrponline.co.uk

60

Beijer Ref UK is a leading wholesale supplier of premium refrigeration and air conditioning equipment in the United Kingdom. The company positions itself as the UK’s foremost wholesaler in this sector, targeting trade professionals and businesses requiring HVAC solutions. Their business model focuses on providing top brands, expert support, and fast delivery services, catering primarily to the trade market. Founded in 2015, the company has established a strong market presence with a large operational scale. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, indicating a contemporary and maintainable digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Hosting and domain registration details align with a reputable UK-based business, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website enforces HTTPS and uses deferred loading for third-party scripts like OneSignal. However, it lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection against certain web attacks. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. No explicit security policy or incident response contact information is provided. Overall, the website presents a professional and trustworthy front with a solid business foundation. Strategic improvements in security headers and privacy consent mechanisms would enhance compliance and user trust. The domain registration data supports the legitimacy of the business, with no suspicious patterns detected.

G

GT Towing Ltd

gttowing.co.uk

62

GT Towing Ltd is a well-established small business based in Hertfordshire, UK, specializing in towing equipment including towbars, trailers, roof racks, and bike racks. The company offers sales, fitting, servicing, and hire services, targeting both commercial and domestic customers. Their market position is supported by a long domain history since 1998 and recognized certifications such as NTTA and NCC approvals. The website is professionally designed with clear navigation and relevant content tailored to their audience. Technically, the site uses modern analytics and marketing tools including Google Analytics, Facebook Pixel, Hotjar, and Stripe for payments, indicating a mature digital infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the site is trustworthy and professional with good business credibility.

Breazeale, Sachse & Wilson, L.L.P. is a professional law firm operating primarily in Louisiana with offices in Baton Rouge and New Orleans. The firm offers a broad range of legal services including labor and employment law, healthcare law, corporate law, and litigation. Their website presents a professional image with detailed attorney profiles, legal articles, and news updates, targeting businesses and individuals seeking legal counsel in the region. The firm maintains an active presence on major social media platforms, enhancing their outreach and client engagement. Technically, the website leverages modern frontend technologies such as Vue.js and Bootstrap, combined with jQuery and slick carousel for interactive elements. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. Analytics tools like Clicky and WiseAdmin are used for visitor tracking, but privacy compliance could be improved with explicit cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no security headers were detected in the HTML content, and there is no visible security policy or incident response contact information. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the professional content and consistent branding support legitimacy. Overall, the security posture is adequate but could benefit from enhancements in headers, policies, and transparency. The overall risk assessment indicates a well-maintained professional website with minor gaps in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent banners, publishing security and incident response policies, and resolving WHOIS data inconsistencies to strengthen trust and compliance.

Simpleview Europe is a specialized technology provider offering destination marketing solutions across Europe, including CMS, CRM, DMS, and digital marketing services. The company operates under the parent company Granicus and targets tourism organizations and destination marketing entities. The website demonstrates a mature digital presence with modern technologies and extensive marketing and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data reduces trust slightly but is mitigated by the professional site and known parent company. Privacy compliance could be enhanced by publishing a clear privacy policy and terms of service.

Thermoplumb is a small UK-based local business specializing in plumbing and heating services, established in 2018. The website currently displays only an offline message, preventing access to detailed content or contact information. The business appears to target local customers seeking professional and friendly plumbing and heating services. The technical infrastructure includes a Vue.js frontend and Google Analytics for user tracking, hosted by Ionos SE. However, the site lacks visible privacy, cookie, or terms of service policies, and no contact details or forms are accessible. Security posture is minimal with no detected security headers or explicit policies. The domain registration is consistent and legitimate, matching the business profile. Overall, the website's offline status severely limits content and security analysis, resulting in a low AI score and limited trust indicators.

快

快橙VPN

surreyskinandlaserclinic.com

53

快橙VPN is a Chinese VPN service provider offering secure, permanent VPN connections with multi-device support, a 30-day refund guarantee, and 24/7 customer support. The website targets general internet users seeking unrestricted access to global streaming and social media platforms. The business model is subscription-based with free trial options and multiple platform downloads available. Technically, the site uses modern frameworks such as Nuxt.js and Tailwind CSS, providing a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, and no direct contact information is provided, which impacts compliance and trust. Security posture is moderate with HTTPS enforced but missing advanced security headers and incident response details. The domain uses privacy-protected WHOIS, common in VPN businesses, but this reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact channels.

N

NightCord

nightcord.online

53

Nightcord is a niche technology company offering a custom Discord client enhanced with unique features and third-party plugins. The company targets Discord users seeking additional functionalities beyond the official client. The business model revolves around open-source software distribution with downloadable installers and plugin support, positioning itself as a specialized alternative in the Discord ecosystem. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Nuxt.js and Vue.js, hosted with Cloudflare DNS services, ensuring good performance and accessibility. Security posture is strong with HTTPS and security headers properly implemented, though the site lacks explicit privacy, cookie, and security policies. No contact information is readily available, which slightly impacts business credibility. Overall, the website is trustworthy, safe, and well-maintained, but could improve compliance and transparency aspects.

Whistle Report operates a specialized whistleblowing platform accessible via the subdomain app.whistle-report.com. The service targets organizations requiring secure and compliant channels for whistleblowing and reporting. The website is professionally designed using modern frontend technologies such as Vue.js and Vuetify, providing a good user experience with multilingual support. The platform appears to be a SaaS offering focused on compliance and secure reporting solutions. Technically, the site uses modern JavaScript modules and Apollo GraphQL, indicating a contemporary and maintainable infrastructure. Performance and mobile optimization are good, though SEO and accessibility could be further enhanced. Security posture is adequate with HTTPS and secure input fields, but lacks explicit security headers and vulnerability disclosure information. Privacy compliance is supported by a comprehensive privacy notice, but cookie consent mechanisms are missing. Overall, the site is trustworthy and professional but could improve in transparency and security best practices.

P

Parqet Fintech GmbH

parqet.com

60

Parqet Fintech GmbH operates a sophisticated portfolio tracking and financial visualization platform primarily targeting private investors in Germany. The company offers a comprehensive suite of tools including portfolio dashboards, dividend calendars, financial news feeds, and developer APIs, positioning itself as a leading fintech solution for investment monitoring. With over 350,000 users and strong app store ratings, Parqet has established a solid market presence. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, hosted with Cloudflare DNS services, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is well addressed with clear GDPR-aligned policies and cookie consent mechanisms. Overall, Parqet demonstrates a mature digital infrastructure and trustworthy business model with room for minor security enhancements.

P

PentaGen s.r.o.

pentagen.cz

56

PentaGen s.r.o. is a specialized Czech company founded in 2006, focused on the supply and distribution of products for laboratory diagnostics and in vitro fertilization (IVF). The company targets laboratories, medical professionals, and IVF clinics primarily in the Czech Republic and Slovakia. Their business model is B2B distribution of specialized medical and genetic diagnostic products, supported by technical services and product expertise. The website reflects a professional and consistent brand image with clear navigation and relevant content for their niche market. Technically, the website employs modern JavaScript frameworks such as Vue.js and uses Google Tag Manager for analytics. It is hosted on Czech hosting infrastructure (Forpsi) and shows good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a published security policy are absent. From a security perspective, the site demonstrates good practices including secure forms with captcha and GDPR consent, no exposed sensitive data, and minimal user tracking. The absence of a vulnerability disclosure policy or incident response contact limits transparency in security management. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent with the business claims, indicating a trustworthy domain. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Recommendations include adding security headers, publishing a security policy, and establishing a vulnerability disclosure channel to enhance trust and security posture further.

FPH Offizin is a specialized professional society focused on further education and certification in the field of community pharmacy in Switzerland. The organization aims to position public pharmacies as the primary healthcare contact point by providing high-quality, accessible training and certification programs. The website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and domain protection measures, though DNSSEC is not enabled. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a trustworthy and credible online presence suitable for its target audience of pharmacy professionals.

H

Hostinger

hosting24.com

71

Hostinger is a global web hosting provider offering a wide range of hosting solutions including shared, VPS, cloud hosting, domain registration, and email marketing services. The company targets individuals, small to medium businesses, and agencies seeking affordable and scalable online presence solutions. Their website demonstrates a mature digital infrastructure with modern technologies such as Vue.js and integrations with major analytics and advertising platforms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS registrant data suggests privacy protection, common for hosting providers. Overall, Hostinger presents a professional, trustworthy, and technically sound online presence with room for enhanced transparency in security and contact information.