Real Estate security reports

Ç

ÇİFTÇİOĞLU GRUP

ciftcioglugroup.com

42

ÇİFTÇİOĞLU GRUP is a Turkish construction and contracting company established in 2006, specializing in residential, commercial, and turnkey construction projects. The company positions itself as a reliable partner with over 20 years of engineering experience, offering comprehensive construction services. The website is professionally designed, mobile-optimized, and provides clear contact information, targeting clients in Turkey's real estate and construction sectors. Technically, the site uses modern web standards including HTML5, CSS3, and Google Fonts, but lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but no visible security headers or privacy policies, and no forms on the homepage to collect user data. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and trustworthy from a user perspective but requires improvements in security and compliance documentation.

B

BBI Development S.A.

bbidevelopment.pl

51

BBI Development S.A. is a Warsaw-based real estate investment and development company with a strong portfolio of residential, office, and retail projects. The company has a solid market position supported by multiple awards and a clear focus on urban mixed-use developments. Their website reflects a professional corporate presence targeting investors, tenants, and property buyers in Poland. Technically, the website is built on WordPress with standard technologies like jQuery and Google Tag Manager, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a cookie policy present but no explicit consent mechanism or privacy policy page. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

A

Accruity

accruity.com

51

Accruity is a specialized financial services company providing outsourced bookkeeping, back-office support, and fractional CFO strategy tailored primarily for real estate investors and service-based businesses. Their niche focus on real estate-specific accounting needs such as flip accounting, rental portfolio reporting, and construction job costing positions them as a trusted partner for clients seeking financial clarity and operational efficiency. The company has a professional online presence with clear service offerings and a client-focused approach, supported by a domain registered since 2020 with a reputable registrar. Technically, the website is built on WordPress using Elementor and common plugins, delivering a good user experience with mobile optimization and moderate performance. The site uses HTTPS and integrates Facebook Pixel for marketing analytics, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is decent with HTTPS and no exposed sensitive data, but could be improved by enabling DNSSEC and adding security headers. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices. The website is trustworthy and professional but should address privacy policy and cookie consent to enhance compliance and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security headers to strengthen security and compliance.

O

OBOS

obos.no

75

OBOS is Norway's largest housing cooperative, owned by its members, providing a broad range of services including housing sales, banking, and membership benefits. The organization holds a strong market position in the Norwegian real estate and finance sectors, targeting Norwegian residents seeking housing solutions and financial services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, OBOS demonstrates a high level of trustworthiness and professionalism, with no indications of suspicious activity or content.

H

Hundholmen Byutvikling AS

hundholmenbyutvikling.no

57

Hundholmen Byutvikling AS is a Norwegian real estate development company focused on shaping the urban development of Bodø. Their website highlights ambitions to create modern, sustainable commercial properties and office spaces, targeting businesses seeking prime locations in Bodø. The company appears to be a small-sized local player founded in 2016, with a clear focus on property development and leasing services. The website is professionally designed with good content quality and consistent branding, supporting their market positioning as a trusted local developer. Technically, the website employs modern JavaScript libraries such as Alpine.js and lazy loading techniques to optimize performance and user experience. The site is mobile-optimized and includes SEO best practices like meta tags and structured data. Analytics are handled via Plausible Analytics, indicating a privacy-conscious approach to user tracking. However, some technical improvements could be made by adding security headers and incident response information. From a security perspective, the site uses HTTPS with excellent SSL configuration and includes a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or vulnerability disclosure pages suggests room for improvement in transparency and incident readiness. Overall, the website presents a low-risk profile with a solid business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

L

Landsbyarkitektene AS

landsbyarkitektene.no

60

Landsbyarkitektene AS is a small architectural firm based in Bærum, Norway, specializing in residential and small-scale architectural projects including single-family homes, duplexes, extensions, cabins, and garages. The company targets both private and public customers in the local region. The website is professionally designed using the Squarespace platform, providing a good user experience with clear navigation and mobile optimization. However, the site lacks explicit contact details and formal privacy or cookie policies, which are important for compliance and user trust. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding security headers and privacy compliance features. The WHOIS data is not publicly available due to Norid's privacy policies, which is typical for Norwegian domains, and does not raise immediate concerns about legitimacy. Overall, the website presents a credible and professional business presence but would benefit from enhanced privacy and security disclosures.

U

Utstillingsplassen

upl.no

56

Utstillingsplassen is a well-established Norwegian real estate company with a history dating back to 1852. It is positioned as the largest real estate company in the inland region of Norway, offering property management, leasing, residential and commercial development, and sustainability-focused projects. The website reflects a professional business with clear branding and a focus on trust and sustainability. Technically, the site is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, the site is credible and trustworthy with room for improvement in privacy compliance and security transparency.

V

Vestbo BBL

haubo.no

58

Vestbo BBL is a well-established housing cooperative based in Norway, serving nearly 39,000 members and managing over 25,000 homes across Vestlandet. The organization offers membership benefits including housing rights, property management, and digital services. Their market position is strong locally, supported by a comprehensive website that provides detailed information and member services. Technically, the website is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, although explicit security policies and incident response details are absent. Overall, the website reflects a professional and trustworthy organization with good compliance to privacy regulations.

Å

Årdal Boligbyggelag

aabbl.no

64

Årdal Boligbyggelag (ÅBBL) operates as a regional housing cooperative in Norway, providing membership services, housing sales, rental apartments, and support for housing boards. The website is well-structured and targets residents and members interested in cooperative housing solutions in the Årdal area. Key services include membership enrollment, housing purchase assistance, rental listings, and a mobile app for member convenience. The organization positions itself as a trusted local cooperative with a focus on community and housing security. Technically, the website uses modern frameworks such as Bootstrap and jQuery, is built on the Umbraco CMS platform, and includes integrations like Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is good with HTTPS enabled and some best practices observed, though security headers and explicit privacy/cookie policies are lacking. WHOIS data is unavailable due to registry restrictions, which slightly reduces trust but does not detract from the site's legitimacy based on content and technology. Overall, the site is safe, professional, and serves its target audience effectively.

V

Vansjø Boligbyggelag

vansjobbl.no

62

Vansjø Boligbyggelag is a regional housing cooperative based in Moss, Norway, managing approximately 8500 housing units and serving around 17500 members. The organization provides membership services, housing sales facilitation, and member benefits including energy-related bonuses. The website is well-structured, professionally designed, and targets residents and members in the Moss region. Technically, the site uses modern frontend libraries such as Bootstrap, jQuery, and Swiper, and is built on the Umbraco CMS platform. Mobile responsiveness and SEO practices are good, though accessibility is basic. Security posture is moderate with HTTPS enforced but lacking explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no active cookie consent mechanism. The absence of WHOIS data limits domain trust assessment, but the website content and external references support legitimacy. Overall, the site is professional and trustworthy with room for security and privacy improvements.

C

Christiania Malerbedrift AS

cmbas.no

46

Christiania Malerbedrift AS is a professional painting and flooring service provider based in Oslo, Norway, with over 30 years of experience. The company serves private customers, businesses, housing cooperatives, and the public sector, emphasizing quality and reliability. Their website reflects a mature digital presence with clear branding and notable client partnerships. Technically, the site is built on WordPress using Elementor and Astra theme, with good SEO and mobile optimization. Security posture is solid with HTTPS but lacks some security headers and explicit privacy compliance documentation. Overall, the website is trustworthy and professional but could improve privacy and security policies to enhance compliance and user trust.

B

Byggefirma Nilsen & Andersen AS

nilsenogandersen.no

53

Byggefirma Nilsen & Andersen AS is a small, established construction and real estate company based in Bergen, Norway, with over 40 years of experience. The company offers a range of services including carpentry, new builds, rehabilitation, property sales, rental of commercial premises, and architectural services. Their affiliation with Mesterhus adds credibility and quality assurance to their offerings. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. Contact information is prominently displayed, including a contact form secured with Google reCAPTCHA v2. However, the site lacks privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is basic but adequate with HTTPS enforced, though additional security headers and incident response information are absent. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy compliance and security best practices.

B

BGRE, formerly Brookfield Properties

brookfieldpropertiesretail.com

63

BGRE, formerly known as Brookfield Properties, is a large institutional real estate company specializing across multiple sectors including office, hospitality, logistics, living, and retail. The company positions itself as a premier real estate platform with deep market expertise and a global presence. The website is professionally designed using Drupal 11, with modern analytics and cookie consent tools integrated, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security or incident response policies. The absence of WHOIS data raises some concerns about domain legitimacy, though the website content and branding suggest a credible business. Overall, the site is safe, professional, and targeted at institutional clients in real estate sectors.

C

Cahill Homes

cahillhomes.com

48

Cahill Homes is a specialized residential design and construction company focused on delivering high-end lifestyle amenities in Central Florida. Established in 2000, the company positions itself as a recognized innovator in luxury residential design-build services, targeting discerning clients seeking personalized and elevated home experiences. The website reflects a professional and consistent brand image with clear service offerings and client advocacy emphasis. Technically, the site is built on WordPress with Gravity Forms and uses modern JavaScript frameworks like Alpine.js. It is hosted behind Cloudflare DNS but lacks DNSSEC and some security headers, indicating room for improvement in security hardening. The site uses HTTPS and Google reCAPTCHA to protect forms, showing a baseline security posture. However, the absence of privacy and cookie policies represents a compliance gap, especially regarding GDPR and other privacy regulations. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security policies and transparency. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process.

L

Livermores Estate Agents

livermores.co.uk

53

Livermores Estate Agents is a well-established real estate agency operating in Dartford and Crayford, UK, with over 30 years of experience. The company offers a comprehensive range of services including property sales, lettings, investment advice, and mortgage and finance consultation. Their market position is that of a trusted local leader with a strong community presence and professional branding. The website is built using modern technologies such as Gatsby and React, ensuring fast performance and excellent mobile optimization. Security measures are robust with HTTPS enforced and appropriate security headers in place, although the absence of a published security policy and incident response information suggests room for improvement. Privacy and cookie policies are present and GDPR compliant, reflecting a commitment to user data protection. Overall, the website presents a professional and trustworthy image, though the lack of WHOIS domain registration data is a notable concern that slightly impacts trustworthiness from a domain perspective.

B

Business South

businesssouth.org

52

Business South is a regional business advocacy and networking organization focused on the Central South of England. It brings together business leaders, educators, public bodies, and entrepreneurs to foster economic growth and innovation. The website presents a professional image with clear business-oriented content, events, and resources supporting regional development. Technically, the site is built on WordPress with a modern tech stack including popular plugins for events and forms, hosted with Cloudflare DNS and secured with HTTPS. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is good with a cookie banner and privacy policy linked, but no terms of service or security policy is found. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

I

ITS Construction

itsconstruction.co.uk

59

ITS Construction is a well-established UK-based construction recruitment agency with over 50 years of experience, specializing in supplying skilled, unskilled, and professional personnel across England, Wales, and South Wales. The company serves both clients and candidates, offering services such as candidate registration, job search, alerts, and payroll. The website reflects a strong market position with partnerships with major construction firms and multiple certifications, enhancing trust and credibility. Technically, the website is built on WordPress using modern frameworks and plugins, including WPBakery Page Builder and WP Job Manager. It employs Google Tag Manager and Microsoft Clarity for analytics and tracking, and implements Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie policy. Overall, ITS Construction presents a professional, trustworthy, and secure online presence suitable for its business model. Strategic improvements include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen compliance and user trust.

B

Baldwin Salter Ltd

baldwinsalter.co.uk

54

Baldwin Salter Ltd is a well-established small business specializing in plumbing, heating, and building maintenance services primarily serving East Kent and surrounding areas in the UK. The company targets both domestic and commercial clients and has built a strong reputation based on reliability and customer satisfaction. Their website reflects a professional service provider with a clear focus on their core offerings and local market. Technically, the website is built on WordPress using Elementor and several modern plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data supports the legitimacy of the business, with a long domain age consistent with the company's claimed experience. The website is safe for general audiences and does not contain any adult or questionable content.

B

Berkeley Integra Ltd

biplc.co.uk

51

Berkeley Integra Ltd is a UK-based specialist installation contractor focusing on proprietary partitioning, dry lining, suspended ceilings, and associated interior works primarily for commercial environments. The company positions itself as a leading supplier in the UK with a strong reputation for quality workmanship and client service, supported by multiple industry accreditations. Their target audience includes main contractors, architects, and bespoke designers seeking high-quality partitioning solutions. The website reflects a professional business model centered on service delivery within the real estate and construction sectors. Technically, the website is built on WordPress using WPBakery Page Builder and several modern plugins such as Contact Form 7 and Google reCAPTCHA v3, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security posture. The absence of WHOIS data due to domain naming irregularities slightly impacts trust but does not negate the legitimacy suggested by the website content and certifications. Overall, Berkeley Integra's website presents a credible and professional business presence with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

U

Urban Splash

urbansplash.co.uk

68

Urban Splash is a UK-based award-winning regeneration company specializing in creating exceptional residential and commercial spaces. The company focuses on urban regeneration projects, delivering innovative and sustainable places for people to live and work. Their market position is strong within the real estate development sector, targeting property buyers, renters, commercial tenants, and design professionals. The website reflects a mature digital presence with good content quality and clear business messaging. Technically, the website employs modern technologies including Craft CMS, Django backend elements, Google Tag Manager, and Cloudflare for performance and security. The site is mobile-optimized and includes comprehensive cookie consent and privacy mechanisms, indicating a good level of digital maturity and compliance with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and implements CSRF protection cookies. However, some security headers are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. The cookie consent mechanism and privacy policy are comprehensive and user-friendly, supporting privacy compliance. Overall, the website presents a low risk profile with strong business credibility and technical implementation. The main limitation is the lack of WHOIS data transparency due to Nominet UK restrictions, which slightly reduces domain trust verification. Strategic recommendations include enhancing security headers and maintaining regular audits of third-party scripts to sustain security posture.

C

Coulon Stone Ltd

coulonstone.com

62

Coulon Stone Ltd is a well-established family-run stonemasonry business based in Buckinghamshire, UK, specializing in bespoke natural and engineered stone surfaces for residential and commercial projects. With over 35 years of expertise, the company offers a comprehensive range of services including kitchen worktops, fireplaces, bathrooms, staircases, flooring, bespoke stone projects, and commercial installations. Their market position is strong locally, supported by a high customer satisfaction rating and professional presentation. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, CookieYes for consent management, and Google Fonts. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. The use of structured data enhances search engine understanding and user experience. From a security perspective, the site employs HTTPS with good SSL configuration and a robust cookie consent mechanism. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration data aligns well with the business history, reinforcing legitimacy. Strategic recommendations include enhancing DNS security, publishing security policies, and further hardening HTTP headers to improve security posture.

T

The Window Exchange

thewindowexchange.co.uk

45

The Window Exchange is a small, established UK-based business specializing in bespoke home improvement services including windows, doors, outdoor living, and garage doors. Founded in 1989, it serves homeowners primarily in Cheshire areas such as Northwich, Middlewich, and Winsford. The company emphasizes quality, energy efficiency, and customer satisfaction, supported by a 10-year guarantee and multiple industry certifications. The website reflects a professional and consistent brand image with clear contact information and positive customer testimonials. Technically, the website is built on Drupal 11 with modern JavaScript libraries such as Swiper and mmenu, and uses Bootstrap for responsive design. Google Analytics is implemented for user tracking. The site performs moderately well with good mobile optimization and SEO practices, though accessibility features are basic. No hosting provider or SSL configuration details were identified from the content. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which lowers its privacy compliance score. The WHOIS lookup failed due to a domain naming rules error, which is unusual and reduces domain trustworthiness. However, the website content is fully accessible and professional, with no signs of malicious activity or vulnerabilities. Overall, the security posture is moderate but could be improved by adding security headers, privacy policies, and incident response contacts. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers and SSL configuration, and resolving WHOIS inconsistencies to improve domain trust. These steps will strengthen the company's security posture and enhance user trust and compliance.

U

UAB Indema

indema.lt

42

UAB Indema is a Lithuanian construction and real estate development company with over 12 years of experience. The company focuses on construction project management, general contracting, engineering solutions, and real estate development, serving both local and international clients. Their website is professionally designed using WordPress and Elementor, featuring clear navigation, responsive design, and SEO optimization. The site includes GDPR-compliant cookie consent mechanisms and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and basic security best practices, though there is room for improvement in security policy transparency and HTTP headers. WHOIS data shows some inconsistencies, notably a domain creation date in the future, which may be a data error but slightly impacts trust. Overall, the website is safe, professional, and trustworthy, with clear contact information and business legitimacy.

U

UAB „Marijampolės nekilnojamojo turto agentūra“

mnta.lt

39

UAB „Marijampolės nekilnojamojo turto agentūra“ operates a professional website offering comprehensive valuation services for real estate, movable assets, and businesses primarily in Lithuania. The company is positioned as an established local player with certifications recognized by Lithuanian regulatory bodies and acceptance by major banks. The website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The WHOIS data presents inconsistencies, notably a domain creation date in the future, which requires verification. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations.

S

Staticus

staticus.lt

53

Staticus is a well-established full-service façade engineering company operating primarily in Northern Europe, with over 20 years of experience. The company offers comprehensive façade solutions including design, production, installation, and maintenance, positioning itself as one of the largest façade contractors in Europe. Their business model focuses on delivering sustainable and benchmark-setting projects to clients in the construction and real estate sectors. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and MailerLite. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in DNS security and explicit incident response disclosures. Overall, the site is trustworthy, compliant with GDPR, and demonstrates a strong business credibility.

R

Rural Arisings

ruralarisings.co.uk

60

Rural Arisings is a UK-based small business specializing in environmental remediation and the creation of green spaces by reusing construction and demolition materials. Established in 2002, the company serves local governments, developers, agricultural and industrial clients, offering end-to-end project management from site appraisal to construction. The website reflects a professional and consistent brand with clear business focus and multiple industry certifications, including ISO standards and membership in relevant associations. Technically, the website is built on Drupal 11 with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and cookie consent mechanisms to enhance privacy compliance. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks visible security headers and incident response information. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website presents a credible business with room for improvement in security and privacy compliance. Strategic recommendations include implementing security headers, cookie consent, publishing security policies, and resolving domain registration issues to strengthen trust and compliance.

R

Re-Gen UK Construction Ltd

re-genuk.com

47

Re-Gen UK Construction Ltd is a small-sized construction company specializing in public, private, and social housing refurbishment and construction services primarily in London and Essex. The company offers a broad range of services including mechanical and electrical work, planned and reactive maintenance, regeneration, office and commercial fit outs, and private development. The leadership team brings over 30 years of experience, positioning the company as a trusted regional player with a focus on quality and local supplier engagement. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable digital infrastructure. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Performance is moderate, and no advanced analytics or tracking tools are detected, suggesting a privacy-conscious approach. From a security perspective, the site enforces HTTPS but does not implement key security headers or cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security posture. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information appear professional and consistent with the business claims. Overall, the website presents a credible business front with room for improvement in security and privacy compliance. Strategic enhancements in security headers, cookie consent, and WHOIS transparency would strengthen trust and compliance.

B

Boothroyd & Company

boothroyd.co.uk

48

Boothroyd & Company is an independent estate and letting agency based in Kenilworth, Warwickshire, specializing in residential property sales, lettings, and management. The company positions itself as a trusted local expert with multiple customer service awards, targeting property buyers, sellers, landlords, and tenants in the local area. Their business model focuses on personalized service and local market knowledge, supported by a professional website showcasing their services and customer testimonials. Technically, the website is built on WordPress using popular plugins such as PropertyHive and Contact Form 7, with integrations for Google Analytics and Google reCAPTCHA to enhance user experience and security. The site demonstrates good SEO practices and mobile optimization, although some accessibility features could be improved. Performance is moderate, with modern web technologies employed. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates a compliance gap with GDPR and related regulations. WHOIS data for the domain is unavailable due to a domain naming rules error, which limits the ability to fully verify domain legitimacy. Overall, the website presents a professional and trustworthy front for a small local real estate business, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

Bloor Homes is a well-established UK-based homebuilding company with a history dating back to 1969. The company specializes in developing new homes and offers comprehensive services to home buyers, including buying guides and customer support. Their website reflects a professional and consistent brand image targeting UK home buyers. Technically, the website uses modern technologies such as React, Kentico CMS, and integrates analytics and consent management tools like Microsoft Application Insights and OneTrust. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies and vulnerability disclosure information. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent business information. Overall, the website presents a trustworthy and professional digital presence with room for minor security enhancements.

W

White Rose Real Estates Limited

whiteroseproperty.co.uk

44

White Rose Real Estates Limited operates as a specialized property agency and consultancy focusing on industrial and commercial real estate in the Midlands region of the United Kingdom. The company offers services including property letting, sales, valuation, and surveying, targeting businesses and investors seeking commercial properties. The website reflects a professional and ethical business approach, regulated by RICS, and provides clear contact channels and service descriptions. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Analytics and reCAPTCHA for user interaction and spam prevention. However, the use of an outdated jQuery version and lack of explicit security headers indicate areas for improvement in security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is well-structured and trustworthy, though WHOIS data is incomplete due to domain registration anomalies.

R

R.C.T Construction Limited

rctconstruction.co.uk

51

RCT Construction Ltd. is a UK-based property development, investment, and construction company established in 1990. The company targets property investors and clients seeking development and construction services. The website presents a professional image with clear contact information and a focus on property-related services. Technically, the website is built on WordPress using common plugins such as LayerSlider and Contact Form 7, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. The WHOIS data is unavailable due to domain naming rules violation, which raises concerns about domain registration legitimacy, although the website content appears consistent with a legitimate business. Overall, the site is functional and professional but would benefit from improved security practices and clearer domain registration information.

C

Creative Places

creativeplaces.com

63

Creative Places is a specialist property consultancy focused on R&D, innovation, and life sciences real estate in the UK, particularly in Cambridge and the Golden Triangle. The company offers agency and consultancy services to clients involved in research, education, and creative industries, leveraging deep sector expertise and a strong track record in major UK projects. The website reflects a professional and well-branded business presence with clear service offerings and client engagement channels. Technically, the site uses modern frontend technologies including MDBootstrap, jQuery, and Font Awesome, and is mobile responsive with good SEO practices. Security posture is adequate with HTTPS and secure form handling, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy and cookie policies exist but lack active consent mechanisms. WHOIS data is unavailable, which raises concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but should improve security and privacy compliance aspects.

C

Campion Homes

campionhomes.com

67

Campion Homes is a well-established, award-winning family-owned home builder specializing in new build homes across central Scotland. With over 35 years of experience, the company offers thoughtfully designed residential developments and emphasizes quality, energy efficiency, and customer satisfaction. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern technologies including ASP.NET Core, Umbraco CMS, Google Analytics, and CookieScript for privacy compliance. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms integrated with Google Consent Mode, though the absence of explicit HTTP security headers suggests room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the professional presentation, certifications, and contact details support the company's credibility. Overall, the site is safe, professional, and compliant with privacy regulations, targeting home buyers in Scotland.

B

Blueprint Architectural Services

blueprintarchitectural.com

46

Blueprint Architectural Services is a professional architectural practice based in Wrexham, UK, offering a wide range of architectural services including residential, commercial, industrial projects, and building conversions. Established in 2002, the company serves clients primarily in North Wales and surrounding counties, providing comprehensive design, planning, and construction consultation services. The website reflects a well-structured business with clear service offerings and client engagement mechanisms such as free initial site visits and fixed fee quotations. Technically, the website is built on CMS Made Simple and incorporates modern web technologies including jQuery, FontAwesome, Google Analytics, and Matomo for analytics. The site is mobile-optimized with good navigation and SEO practices. Privacy compliance is addressed with a GDPR policy and cookie consent banner, demonstrating awareness of data protection requirements. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which could impact trustworthiness. Overall, Blueprint Architectural Services presents a professional and credible online presence with room for improvement in security policies and domain registration transparency. Strategic recommendations include enhancing security headers, publishing incident response information, and resolving WHOIS data inconsistencies to strengthen trust and compliance.

P

Porcellana Tile Studio

porcellanatilestudio.com

44

Porcellana Tile Studio is a specialized boutique tile and stone studio focusing on luxurious interiors for private clients, designers, and architects. The company positions itself as an award-winning provider offering original ideas and exceptional quality in the luxury interior design sector. The website reflects a small-sized business with a clear niche market and a professional presentation. Technically, the website is built on WordPress using the Divi theme and includes modern web fonts and tracking scripts, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The domain registration is consistent with the business age, registered since 2012 with a reputable registrar and domain status protections in place. Overall, the security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy compliance mechanisms. The website content is safe for general audiences with no adult or questionable content detected.

A

Allan Morris

allan-morris.co.uk

49

Allan Morris operates as a real estate agency in the United Kingdom, focusing on property sales and lettings. The website presents a professional and modern interface built using React and Gatsby, indicating a good level of digital maturity. The business targets property buyers, sellers, landlords, and tenants within its regional market. Despite the professional presentation, the domain WHOIS data is incomplete and shows an error indicating the domain name is non-standard or misconfigured, which raises questions about domain legitimacy. The website lacks critical privacy and cookie policies, contact information, and security disclosures, which impacts its compliance and trustworthiness.

KAM Project Consultants Ltd is a UK and Germany based consulting firm specializing in the industrial and logistics sectors with expanding real estate services. Founded in 2013 and part of the Contollo Group, KAM offers cost management, project management, and employer’s agent services to high-profile clients. The website reflects a professional and modern digital presence with clear branding and client trust signals. Technically, the site is built on WordPress with modern web standards, Google Tag Manager for analytics, and is mobile optimized. Security posture is good with HTTPS and secure form handling, though security headers and privacy policies are lacking. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains strong. Strategic recommendations include adding privacy and cookie policies, security headers, and incident response contacts to enhance compliance and trust.

D

DMA Health & Safety Ltd

dmasafety.net

41

DMA Health & Safety Ltd is a UK-based consultancy specializing in health and safety and CDM advisory services, with over twenty years of experience serving a diverse client base including local authorities, housing associations, universities, and various commercial and industrial sectors. The company positions itself as a pragmatic and cost-effective partner, particularly for SMEs and start-ups, emphasizing proactive health and safety management. The website reflects a professional and consistent brand image, with clear contact information and a focus on the construction and real estate sectors. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and FontAwesome, and integrates Google Analytics for user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the presence of a company registration number and professional website content mitigate this somewhat. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

G

General and Technical Flooring Services Limited

gtfsl.co.uk

63

General and Technical Flooring Services Limited is a well-established commercial flooring provider operating across Scotland with over 30 years of experience. The company offers comprehensive flooring services including uplift and disposal, preparation, supply, and installation, targeting businesses and facilities managers. Their market position is strong regionally, supported by professional branding, customer testimonials, and a clear focus on quality, safety, and sustainability. The website is built on WordPress with modern technologies such as Tailwind CSS and integrates analytics and marketing tools like Google Analytics and Microsoft Clarity. Hosting appears to be managed by WPEngine, ensuring reliable infrastructure. Security posture is good with HTTPS and anti-spam measures, though improvements are recommended in security headers and cookie consent mechanisms. WHOIS data is unavailable due to domain registration error, which slightly impacts trust but the website content and business information appear consistent and professional. Overall, the site is well-structured, user-friendly, and trustworthy, with moderate tracking and good SEO practices.

H

Hype Sports Management Ltd.

hypesportsmanagement.com

58

Hype Sports Management Ltd. is a UK-based premier sports management agency specializing in comprehensive athlete representation and career development services across multiple sports disciplines. The company offers a broad range of services including sports management, collegiate athlete support, football management, property investment, private wealth management, and accounting services. Positioned as a premium and intelligence-driven agency, Hype emphasizes bespoke solutions and deep industry knowledge to engineer success for its clients. The website reflects a professional and modern digital presence with rich multimedia content and clear branding. Technically, the website employs modern web technologies including ES modules, CSS, and HTML5, with embedded video content and custom fonts. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, there is no evidence of a CMS or specific hosting provider from the HTML content. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers and cookie consent mechanisms. No explicit privacy or incident response policies are found beyond basic privacy and terms pages. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the professional site appearance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a high-quality business front with some gaps in security and compliance best practices. Strategic recommendations include enhancing security headers, implementing cookie consent, verifying domain registration legitimacy, and publishing detailed security and incident response policies to strengthen trust and compliance.

P

Pollock Hammond Ltd

pollockhammondarchitects.com

54

Pollock Hammond Ltd is a small architectural and conservation consultancy firm based in Linlithgow, United Kingdom. The company offers a range of services including new builds, alterations, extensions, historic building conservation, and conversions primarily serving clients across Scotland and the wider UK. The website is professionally designed using the Squarespace platform, featuring a portfolio of projects and clear navigation. However, the absence of privacy and cookie policies and lack of WHOIS registration data for the domain raise concerns about compliance and legitimacy verification. Technically, the site uses modern web technologies and is mobile-optimized but lacks security headers and explicit privacy compliance indicators. Overall, the business presents a credible front with good content quality but would benefit from enhanced security and compliance measures.

T

Tate Stevenson Architects Ltd

tatestevenson.com

61

Tate Stevenson Architects Ltd is a small architectural firm based in Moira, Northern Ireland, specializing in commercial, industrial, educational, private housing, and social housing developments. The company targets clients in Northern Ireland seeking professional architectural services. The website is built on the Wix platform, featuring a professional design with good mobile optimization and basic SEO. Technical infrastructure relies on Wix hosting and standard JavaScript libraries, including Sentry for error monitoring. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and business information appear consistent and professional. Overall, the site presents a moderate risk profile with recommendations to improve privacy policies, security headers, and domain registration transparency.

C

Coldwell Banker Real Estate LLC

buyhomes.com

66

The website represents a real estate consultancy service operated by Corey Scholtka, affiliated with Coldwell Banker Real Estate LLC. It targets home buyers and sellers in the Metro Milwaukee and Waukesha County areas, offering property search and real estate consulting services. The site is professionally branded and leverages the MoxiWorks platform, integrating multiple analytics and marketing tools to support business operations. The technical infrastructure is modern, with HTTPS and security headers properly implemented, ensuring a secure browsing experience. Privacy and terms of service policies are present and comprehensive, although a cookie consent mechanism is missing, which is a minor compliance gap. The absence of WHOIS data for the subdomain is noted but is mitigated by the strong parent company affiliation and professional presentation. Overall, the site demonstrates a mature digital presence with good security posture and business credibility.

R

R Longstaff & Co LLP

eckfords.co.uk

56

Eckfords Estate Agents, trading under R Longstaff & Co LLP, is a well-established independent estate agency operating primarily in the Lincolnshire market towns of Bourne and Spalding. Founded in 1990 and merged with R. Longstaff & Co LLP in 2022, the company offers a comprehensive range of property services including residential sales, lettings, property management, commercial and agricultural services, and valuations. The business targets local property buyers, sellers, landlords, and tenants, leveraging deep local knowledge and a strong ethical ethos to maintain its market position. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization, and includes modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized and employs HTTPS with a valid SSL certificate, ensuring secure communications. Google Analytics is used for visitor tracking with a minimal user tracking level. However, the site lacks some security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and CAPTCHA on contact forms but lacks advanced security headers and a vulnerability disclosure policy. The absence of WHOIS data due to domain naming rules error introduces some uncertainty regarding domain registration legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website presents a credible and professional front for a small local real estate business with room for enhancement in security and privacy compliance to strengthen trust and regulatory adherence.

D

Della Valle Architects Ltd

dellavallearchitects.co.uk

56

Della Valle Architects Ltd is a small, award-winning architectural practice based in Shepton Mallet, Somerset, UK. The company is a RIBA Chartered Practice, indicating a high standard of professional architectural services. Their website showcases a portfolio of residential and commercial projects, emphasizing refurbishment, modernisation, extensions, and new dwellings. The firm targets clients seeking quality architectural design services within the Somerset region and surrounding areas. The business model is focused on providing professional architectural consultancy and design services with a strong emphasis on quality and client service. Technically, the website is built using standard web technologies including jQuery and CSS, with responsive design elements for mobile optimization. The site is well-structured with appropriate meta tags and Open Graph data for SEO and social sharing. However, no advanced CMS or hosting provider details are evident. Performance is moderate, and accessibility is basic but functional. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has no visible exposed sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or vulnerability disclosure information. Privacy and cookie policies are present but lack explicit consent mechanisms. The WHOIS data could not be extracted due to a query error related to the domain name format, but the website content and contact information support legitimacy. Overall, the security posture is moderate with room for improvement in headers, policies, and transparency. The overall risk assessment is low, with the main recommendations focusing on enhancing security headers, implementing cookie consent mechanisms, publishing incident response and vulnerability disclosure policies, and improving privacy compliance indicators. These steps will stre…

M

McGarry Memorials (Manchester) Ltd

memorialsmanchester.com

53

McGarry Memorials (Manchester) Ltd is a longstanding family-run business specializing in memorial masonry services in Manchester, UK. Established in 1919, the company offers a range of services including new memorials, inscriptions, cleaning, renovations, and cremation products. The website reflects a professional and consistent brand image with clear service offerings and a focus on quality and customer service. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, hosted via IONOS SE. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers. No privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the domain registration data supports the legitimacy of the business with consistent information and no privacy protection masking registrant details.

Sutton Housing Partnership is a medium-sized housing management organization serving the Sutton community in the United Kingdom. The website provides comprehensive tenant services including tenancy management, repairs reporting, housing applications, and tenant support programs. The organization maintains a professional online presence with clear navigation and relevant content targeted at tenants and leaseholders. Technically, the site is built on VerseOne CMS v5 and uses common JavaScript libraries and Google Translate for accessibility. The site is mobile-optimized and includes accessibility features. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable due to domain naming rules error, which slightly reduces trust but does not detract from the legitimacy suggested by the website content. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

AM Windows

amwindows.co.uk

54

AM Windows is a small, locally focused service provider specializing in premium window and door installations in Bristol, United Kingdom. The company positions itself as a premium quality and style provider targeting homeowners and property managers in the Bristol area. The website is built on WordPress using modern plugins such as Yoast SEO and Ultimate Addons for Gutenberg, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with a cookie consent mechanism, reflecting basic privacy compliance efforts. However, the absence of a privacy policy, terms of service, and clear contact information limits trust and compliance. The WHOIS data presents inconsistencies with a domain creation date in the future, which raises concerns about domain legitimacy. Overall, the website is professional and functional but requires improvements in transparency and security practices to enhance trustworthiness and compliance.

T

The Frost Partnership

frostweb.co.uk

60

The Frost Partnership is a well-established estate agency operating across Buckinghamshire, Berkshire, and Middlesex, offering a wide range of residential and commercial property services including sales, lettings, valuations, property management, and developer services. The company positions itself as a trusted regional leader with a history dating back to 1906 and holds multiple industry certifications and awards. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, Facebook Pixel, and Google Tag Manager, with good mobile optimization and user experience. Security measures include HTTPS enforcement and use of Google reCAPTCHA for forms, although security headers are not detected and could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. The WHOIS data is unavailable due to domain naming rules errors, which is unusual and reduces domain registration trustworthiness, but the website content and business information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional online presence for the company.

L

LBB Chartered Surveyors

lbb.org.uk

46

LBB Chartered Surveyors is a well-established UK-based professional surveying firm with nearly 30 years of experience, specializing in building surveying, valuations, lease extensions, enfranchisement, disputes, and litigation. The company targets property owners, tenants, landlords, and legal professionals primarily in Central London and the South East. Their market position is strong, supported by professional accreditations such as RICS and ALEP, and positive client testimonials. Technically, the website is built on WordPress with Elementor and Gravity Forms, incorporating modern SEO and analytics tools, though some security headers are missing. The security posture is solid with HTTPS and reCAPTCHA in place, but improvements in cookie consent and security policies are recommended. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, though enhancements in privacy and security policies would strengthen compliance and user trust.