Retail security reports

T

The Little Red Gallery

thelittleredgallery.co.uk

45

The Little Red Gallery is a small, UK-based art gallery located in Lincoln, specializing in contemporary art from both established and emerging artists. The business operates a physical gallery space and an online shop hosted on Big Cartel, targeting art collectors and enthusiasts. The website is built on Joomla CMS with VirtueMart for e-commerce functionality and uses UIkit for frontend styling. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing user trust and engagement. However, the absence of WHOIS data due to a domain naming rules error raises concerns about domain registration legitimacy, although the website content and business details appear professional and consistent. Security posture is moderate with HTTPS enabled but lacking important security headers and cookie consent mechanisms. Privacy policy is present but basic, and no terms of service or incident response information is found. Overall, the website is functional and credible from a business perspective but would benefit from improved security and compliance measures.

C

Crop Services Scotland Ltd

countrycornerscotland.co.uk

46

Country Corner Scotland is a family-owned retail business operating since 1989 with physical stores in Kelso and Fife, UK. The company specializes in animal care products, equestrian supplies, clothing, and pet accessories, targeting local customers in these regions. Their business model focuses on providing quality products with competitive pricing and excellent customer service. The website serves as an informational and promotional platform showcasing their product categories, store locations, and offers. Technically, the website is built on Drupal 7 with common web technologies such as jQuery and Slick Slider. It employs HTTPS with good SSL configuration and uses Google Analytics with IP anonymization for user tracking. However, the CMS version is outdated, which may pose security risks if not properly maintained. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks important security headers and a cookie consent mechanism, which impacts privacy compliance. No explicit security policies or incident response contacts are provided, and there is no vulnerability disclosure program. The WHOIS data for the queried domain is unavailable and indicates an invalid domain name, suggesting a discrepancy between the domain used and the registered domain, which lowers trust from a domain registration standpoint. Overall, the website is professional and trustworthy in content and business representation but requires improvements in security best practices, privacy compliance, and domain registration clarity to enhance its risk posture and user trust.

Brannie Ties is a small, family-run UK-based business specializing in the design and supply of bespoke ties, scarves, and accessories. The company emphasizes custom designs with free artwork and no hidden charges, targeting schools, clubs, corporate clients, and Masonic societies. The website reflects a well-established business with over 35 years of experience, offering a range of bespoke woven and printed products with a focus on quality and customer service. Technically, the website is built on the IONOS Website Builder platform, utilizing modern JavaScript libraries such as jQuery and analytics tools including Google Analytics and Snowplow. The site is mobile-optimized and provides a good user experience with clear navigation and contact options. Security posture is solid with HTTPS and reCAPTCHA on forms, though additional security headers could enhance protection. Privacy compliance is addressed with visible cookie and privacy policies, indicating GDPR awareness. However, the WHOIS data for the domain is unavailable and indicates the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site scores well on content and technical implementation but is impacted by domain registration inconsistencies.

R

Richard Lang & Son Ltd

richardlang.co.uk

53

Richard Lang & Son Ltd operates as a wholesale supplier specializing in gifts, home decor, and greeting cards, primarily serving the UK market with localized presence in Germany and the Netherlands. The company emphasizes contemporary design and imports, catering to garden centers and wholesale buyers. Their digital presence is built on a Magento e-commerce platform with German localization, integrating modern marketing and analytics tools such as HubSpot and Google Tag Manager. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a professional user experience. Security measures include HTTPS enforcement and CAPTCHA on login forms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site reflects a legitimate and established wholesale business with room for enhanced security and privacy compliance.

Baker Ross is a UK-based e-commerce retailer specializing in arts and crafts supplies, seasonal and themed craft kits primarily targeting children, schools, and educators. The company maintains a strong market position in the retail and educational craft supply sector with a broad product range and next day delivery service within the UK. The website demonstrates a mature digital presence with integrations of advanced search, marketing, and analytics tools, supporting a data-driven approach to customer engagement and sales. Technically, the website is built on the Magento platform, leveraging RequireJS and multiple third-party services such as Klevu Search, Klaviyo, and Microsoft Clarity for enhanced user experience and marketing analytics. The site is mobile optimized and shows good SEO practices, although some security headers could be improved for enhanced protection. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policy and incident response information publicly. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, Baker Ross presents a trustworthy and professional online retail platform with a strong focus on customer experience and compliance. Strategic improvements in security headers and public security documentation would further enhance their security maturity and customer trust.

Dormeuil is a well-established luxury fabric and apparel company with a strong online presence via a professionally designed Shopify-based e-commerce website. The company offers high-quality fabrics, apparel, accessories, and bespoke tailoring services targeting affluent customers and professionals in the fashion industry. The website is multilingual and integrates modern e-commerce technologies and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, PCI DSS compliant payment processing, and GDPR compliance, though there is room for improvement in DNS security and explicit vulnerability disclosure. Overall, the site demonstrates high business credibility and trustworthiness with consistent branding and comprehensive customer support.

Lee Floorstok Ltd is a well-established independent trade flooring distributor based in the North West of the United Kingdom, with a history dating back to the 1930s and formal incorporation in 1971. The company operates from large depots in Manchester and Liverpool, serving social housing partnerships, flooring contractors, and independent carpet retail outlets. Their business model focuses on stocking a wide range of contract flooring materials and accessories, supported by a fleet of delivery vehicles offering next day delivery services. The website reflects a professional and consistent brand presence with good content quality and clear navigation.

COOK Trading Ltd operates a well-established UK-based e-commerce and retail business specializing in frozen ready meals and prepared meal delivery services. The company offers nationwide delivery, click & collect options, subscription meal plans, and operates physical shops. The website reflects a strong market position with consistent branding, comprehensive product offerings, and customer engagement through newsletters and social media. Technically, the site leverages modern web technologies including React, Google Tag Manager, and multiple analytics and marketing tools, ensuring a robust digital presence. Security-wise, the website enforces HTTPS, employs iframe protection, and integrates error monitoring and reCAPTCHA, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS domain registration data is a notable anomaly, but the overall site professionalism and trust indicators suggest legitimacy. Strategic recommendations include enhancing security transparency and addressing WHOIS inconsistencies.

T

The Silver Pear

silverpear.co.uk

69

The Silver Pear is a UK-based retail or e-commerce business operating on a WordPress platform with WooCommerce and Elementor. The website presents a basic but functional online presence targeting general consumers in the UK. The technical infrastructure is standard for small to medium e-commerce sites, leveraging popular CMS and plugins. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is minimal with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is provided. The domain is well-established, registered since 2000 with a reputable UK registrar, indicating legitimacy and stability. Overall, the site is safe for general audiences but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

F

Fife Carpet Mill Ltd

fifecarpetmill.co.uk

58

Fife Carpet Mill Ltd is a small, independent retail business specializing in carpets, vinyls, and rugs, operating since 2001 in Cardenden, Fife, UK. The company offers a range of floor coverings and related services including carpet fitting and floor laying, targeting residential customers in the local area. The website reflects a well-established local business with a loyal customer base and a focus on personalized service. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Analytics, and reCAPTCHA v3, providing a responsive and user-friendly experience. The presence of cookie consent and privacy policy pages indicates attention to privacy compliance, although some security best practices like security headers and incident response information are missing. The website is secure with HTTPS and uses spam protection mechanisms. However, WHOIS data is unavailable due to a query error, limiting domain legitimacy verification. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Skultes Kokmateriāli

skulteskokmateriali.lv

42

Skultes Kokmateriāli is a small Latvian business specializing in the retail and delivery of quality wood materials sourced from local forests. Their product range includes sawn timber, terrace boards, facade and interior finishing materials, screw piles, fences, and firewood, with delivery services across Latvia. The company targets general consumers and builders in the Limbažu novads region, positioning itself as a reliable local supplier with a professional online presence. The website is well-designed, mobile-optimized, and provides clear product information and pricing, enhancing user experience and trust. Technically, the website is built using modern technologies such as Next.js and React, hosted on Vercel, ensuring fast performance and good SEO practices. The site includes Vercel Analytics for minimal user tracking. However, there is a lack of visible security headers and no disclosed privacy or cookie policies, which are areas for improvement in compliance and security posture. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. The absence of security headers and formal privacy documentation reduces the overall security maturity. No WAF or blocking mechanisms were detected, and the WHOIS data, while privacy-protected, aligns with the business's Latvian location and nature. Overall, the website presents a trustworthy and professional image suitable for its business scope but should enhance privacy compliance and security headers to improve its security posture and regulatory adherence.

H

Hillier Jewellers

hillierjewellers.co.uk

67

Hillier Jewellers is a UK-based online retailer specializing in fashion jewellery and giftware, offering quality products at competitive prices with promotional incentives such as discounts for first orders. The company targets a broad general audience interested in jewellery and watches, operating primarily through an e-commerce platform. The website demonstrates a solid digital presence with integrated customer reviews and active social media channels, supporting its market position as a reputable retailer in the UK jewellery sector. Technically, the website employs modern web technologies including JavaScript libraries, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and exhibits good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data, reflecting a good security posture. However, the absence of a public security policy and incident response information suggests room for improvement in transparency and preparedness. The WHOIS data retrieval failed due to domain naming issues, which limits full verification of domain legitimacy, but the active and professional website presence supports its credibility. Overall, Hillier Jewellers presents a trustworthy and well-maintained online retail platform with moderate technical maturity and a good security baseline.

R

Retford Saddlery Ltd

retfordsaddlery.co.uk

48

Retford Saddlery Ltd operates as a specialized equestrian retail business based in Nottinghamshire, UK, offering a wide range of products including footwear, safety wear, horse care items, saddlery, and riding clothing. The company targets equestrian enthusiasts and horse owners, positioning itself as a premier local store with an e-commerce presence. The website is built on WordPress using the Avada theme and integrates several plugins such as UberMenu and Mailchimp for enhanced user experience and marketing capabilities. The technical infrastructure is modern and supports mobile optimization, though some accessibility features are basic. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data for the exact domain queried is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias, which slightly impacts trust but does not detract from the overall legitimacy of the business. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and adding incident response information to improve compliance and trust.

S

Swallows Nursery & Plant Centre Ltd

swallowsnursery.co.uk

49

Swallows Nursery & Plant Centre Ltd operates an independent retail plant nursery located in Mixbury, North Oxfordshire, UK. The company specializes in growing and selling high-quality plants, including shrubs, bedding plants, trees, and topiary, with an emphasis on peat-free products. Additionally, the business offers an onsite cafe serving coffee, Nordic cakes, brunch, and lunch on select days, enhancing the customer experience. The nursery also caters to trade buyers and provides delivery services. The website reflects a small, locally focused business with a strong community presence and a commitment to quality and sustainability. Technically, the website is built on WordPress using WooCommerce for e-commerce capabilities, WPBakery Page Builder for layout, and integrates several modern libraries such as Bootstrap 5 and jQuery. The site is mobile-optimized and includes SEO best practices like meta tags and structured data. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms with anti-spam measures. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and incomplete analytics setup slightly reduce the security posture. The WHOIS data for the domain is unavailable or invalid, which raises concerns about domain registration legitimacy, though the presence of a UK company registration number and consistent business information on the site supports its legitimacy. Overall, the website presents a professional and trustworthy front for a small retail nursery business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, clarifying WHOIS/domain registration status, and enhancing analytics implementation to support business growth and security assurance.

N

Neil O'Brien Tailoring

notl.co.uk

49

Neil O'Brien Tailoring is a small bespoke tailoring business specializing in high-quality, hand-tailored suits and shirts made in Italy using premium Italian and English fabrics. The website serves as a coming soon placeholder with a countdown timer, indicating ongoing development. The business targets customers seeking exclusive, made-to-measure menswear in London. Technically, the site uses older JavaScript libraries such as AngularJS and jQuery 1.11.3, with basic mobile optimization and SEO. Security posture is moderate but lacks modern security headers and uses outdated libraries, which could pose risks. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, only a contact form. WHOIS data is unavailable and indicates the domain is invalid under Nominet UK rules, raising concerns about domain legitimacy or configuration. Overall, the site is professional in design but requires improvements in security, privacy compliance, and domain legitimacy verification.

C

Coch-Y-Bonddu Books

anglebooks.com

66

Coch-Y-Bonddu Books operates an e-commerce website specializing in niche books related to fishing, field sports, and countryside natural history. The site targets enthusiasts and collectors in these specialized areas, offering a curated selection of products. The business model is retail-focused, leveraging a Magento 2 platform to provide online shopping capabilities including customer accounts and secure checkout. The website demonstrates a moderate level of digital maturity with a modern tech stack and responsive design, although some areas such as privacy compliance and security headers could be improved. Security posture is generally good with HTTPS and reCAPTCHA integration, but the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site is professional and trustworthy in content but would benefit from enhanced transparency and security practices.

AVS Fencing & Landscaping Supplies Ltd is a well-established UK-based supplier specializing in fencing, landscaping, and outdoor living materials. With over 25 years of experience, the company serves both DIY enthusiasts and trade customers primarily in the South East of England. The website reflects a professional retail and trade supplier business model with a clear focus on quality products and customer service. The company maintains an active online presence with integrated social media channels and customer review platforms such as Trustpilot. Technically, the website is built on the Magento 2 e-commerce platform, leveraging modern JavaScript libraries such as RequireJS and jQuery. It incorporates multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, Bing Ads, and New Relic for performance monitoring. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, suggesting an opportunity for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and include consent mechanisms, indicating basic GDPR compliance. Overall, the website presents a trustworthy and professional front for AVS Fencing & Landscaping. The lack of WHOIS data due to domain registration issues is a concern but does not detract from the legitimacy of the business as evidenced by the detailed contact information and business presence. Strategic recommendations include enhancing security headers, improving incident response visibility, and continuing to monitor third-party scripts for vulnerabilities.

Gamefish is a specialized retail business focused on fly fishing equipment, country clothing, and shooting accessories, operating both a physical store in Edinburgh and an international e-commerce website. The company has a well-established market presence since 2003, catering primarily to outdoor enthusiasts and anglers. Their website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Google/Facebook for marketing and analytics. The technical infrastructure is solid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though there is room for improvement in security headers and published policies. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms. Overall, the business demonstrates credibility and professionalism with consistent branding and positive trust signals.

C

Clare Florist

clareflorist.co.uk

52

Clare Florist is a UK-based family-owned florist business operating since 1996, specializing in next day flower delivery across the UK. The company offers a wide range of hand-selected flower bouquets, gift vouchers, and subscription services, targeting consumers seeking quality floral gifts for various occasions. The website is professionally designed with clear navigation, mobile optimization, and rich content that supports e-commerce transactions. Technically, the site uses modern JavaScript libraries, tracking tools, and analytics services, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, but WHOIS data is unavailable due to a domain registration anomaly, which slightly reduces trust. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

P

Peck Trading Ltd

pecktrading.co.uk

54

Peck Trading Ltd operates a professional B2B e-commerce website specializing in the supply of cleaning, hygiene, engineering, PPE, and safety products primarily targeting UK businesses. The company emphasizes service quality and next day order fulfillment, positioning itself as a reliable supplier in its sector. The website is well-structured with clear navigation and a modern design, leveraging popular frontend technologies such as jQuery, Bootstrap, and Font Awesome, alongside Google Analytics for user tracking. Mobile optimization is good, and the site uses HTTPS to secure communications. From a security perspective, the site employs HTTPS but lacks visible security headers such as Content Security Policy or HSTS, which could enhance protection. No privacy or terms of service pages were detected, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in compliance and transparency. The WHOIS lookup failed due to a domain naming rules violation, which is unusual and reduces trust in domain registration legitimacy, though the website content itself appears professional and legitimate. Overall, the website presents a moderate security posture with good business credibility and technical implementation. The absence of privacy policies and security headers, combined with the WHOIS inconsistency, suggests the need for enhanced compliance and domain registration verification. Strategic improvements in these areas would strengthen trust and security assurance for users and partners.

P

Poles & Blinds Ltd.

polesandblinds.com

67

Poles & Blinds Ltd. is a UK-based family-owned e-commerce retailer specializing in curtain poles, tracks, blinds, and related accessories. Established since 2006, the company positions itself as a leading online supplier in the UK market, offering trusted brands and expert advice. The website is professionally designed using Magento 2 with the Hyva theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Trustpilot for customer reviews. Contact information is clearly presented, including phone, email, and social media channels, enhancing customer trust and engagement. However, the absence of WHOIS registration data raises questions about domain registration transparency, which should be investigated further.

Colour Gro Ltd is a small UK-based wholesale supplier specializing in quality plants for garden centres, including bedding, edibles, perennials, and herbs. The website serves as a basic informational portal providing contact details and company credentials but lacks advanced features or interactive elements. The company appears to be positioned as a niche supplier within the horticulture retail sector, targeting garden centres and wholesale buyers. Technically, the website is simple, built with basic HTML and CSS, without modern frameworks or CMS detected. There is no evidence of HTTPS or security headers, and no analytics or tracking scripts are present. Mobile optimization and accessibility are basic, and SEO features are minimal. The lack of privacy and cookie policies indicates low digital maturity and compliance. From a security perspective, the absence of HTTPS and security headers, combined with the failure to provide WHOIS data due to domain naming rules violations, raises concerns about domain legitimacy and overall security posture. No vulnerabilities or malicious content were detected, but the site lacks essential security best practices and compliance documentation. Overall, the website presents a low-risk profile but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

S

Sanctuary Bathrooms

sanctuary-bathrooms.co.uk

69

Sanctuary Bathrooms is a UK-based e-commerce retailer specializing in luxury modern and traditional bathroom supplies. The company positions itself as a leading supplier in the UK market, offering branded bathroom products with discounts and free delivery over £500. The website is professionally designed with good content quality and consistent branding, targeting UK consumers interested in high-end bathroom products. Technically, the site uses modern frameworks such as Bootstrap 5 and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, FullStory, and Klaviyo. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or terms policies. WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the site demonstrates a solid business presence but would benefit from improved transparency and security practices.

W

Willow Printing & Design Limited

willowprinting.co.uk

60

Willow Printing & Design Limited is a well-established printing and design company based in Newton-le-Willows, UK, operating since 1978. The company offers a broad range of services including graphic design, digital and lithographic printing, print finishing, and despatch services. Their business model combines traditional printing services with an e-commerce platform for personalised gifts and business products, targeting both local and national customers including businesses and families. The website reflects a consistent brand image and professional presentation, supporting their market position as a trusted local provider.

E

EAF Group Ltd.

essexanimalfeeds.co.uk

47

EAF Group Ltd is a medium-sized diversified agricultural and retail business based in the United Kingdom. The company operates multiple subsidiaries specializing in animal feeds, equine bedding, haylage, farming, container storage, nursery and garden centre services. The business has a strong regional presence across south, east, and central England with export activities in Europe. Their website reflects a professional and consistent brand image with clear contact information and multiple subsidiary links. Technically, the website is built on WordPress using Elementor, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, including a privacy policy and consent mechanisms. Overall, the website is trustworthy and business credible, though improvements in security and compliance documentation are recommended.

Eurosat Distribution Ltd operates as the UK's largest specialist supplier and distributor of satellite, aerial, and TV equipment primarily targeting trade professionals and commercial customers. The company offers a comprehensive range of products through its online webshop and provides full technical support for domestic and commercial IRS signal distribution, particularly for multi-dwelling units. The business is positioned as a key player in the UK retail and telecommunications sectors, with a medium-sized operation and a parent company named Neem Holdings Ltd. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. From a technical perspective, the website employs JavaScript technologies including Google Analytics and Google Tag Manager for analytics and marketing purposes. It is built on a custom CMS platform provided by itseeze, with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though there is room for improvement in accessibility features. The website uses HTTPS, and a cookie consent mechanism is implemented, indicating attention to privacy compliance. Security posture is moderate; while HTTPS is in use and cookie consent is managed, the site lacks explicit security headers and does not provide detailed security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a notable concern, reducing the overall trust score, though the website content and business information appear legitimate and professional. Overall, Eurosat London presents a solid business and digital presence with good compliance and user experience. Strategic improvements in security headers, WHOIS transparency, and incident response information would enhance trust and security posture.

F

Fayers

fayers.co.uk

58

Fayers is a well-established family-owned plumbing and building supplies merchant operating primarily in London. The company offers a broad range of products and services targeted at trade professionals including plumbers, builders, and contractors. Their website reflects a professional and consistent brand image with clear navigation and relevant content, supporting their market position as a trusted supplier since 1884. Technically, the website is built on WordPress using common plugins such as Smart Slider 3 and FontAwesome, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and several security headers, though there is room for improvement in CSP implementation and incident response transparency. Privacy compliance is strong, with GDPR-aligned policies and cookie consent mechanisms in place. Overall, the website presents a credible and trustworthy digital presence, though the lack of WHOIS data due to domain naming rules slightly reduces trustworthiness from a domain registration perspective.

Green Tree Doors is a UK-based e-commerce retailer specializing in high-quality internal and external doors, including door pairs, bifolds, pocket doors, sliding doors, frames, and hardware. Established in 2016, the company targets both consumers and trade customers seeking competitively priced door solutions. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics, Facebook Pixel, Microsoft Clarity, and Judge.me for customer reviews. Social media presence across major platforms supports brand engagement and marketing efforts. Security posture is solid with HTTPS enforced and secure payment options, though explicit privacy and cookie policies are not detected in the provided content. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and security transparency.

Sherwood Bed Centre is a well-established retail business specializing in beds, mattresses, and bedroom furniture, operating primarily in the East Midlands of the UK. Founded in 1976, it has multiple physical branches and positions itself as the largest independent retailer in its sector within the region. The website serves as a digital storefront showcasing their product range and brand partnerships, supporting their in-store sales and delivery services. Technically, the site is built on WordPress with WooCommerce and the Avada theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and policies are lacking. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is legitimate but relatively new compared to the business age, suggesting recent domain acquisition or migration. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

North Sails operates as a leading global brand specializing in sailmaking and related apparel and water sports products. The company maintains a strong market position as the world's largest sailmaker, offering a comprehensive range of products through a well-designed e-commerce platform. Their website demonstrates a high level of digital maturity, leveraging Shopify's robust platform, integrated analytics, and marketing tools such as Klaviyo and Google Tag Manager to optimize user experience and customer engagement. The site is multilingual and supports multiple currencies, indicating a global customer base. Security posture is strong with HTTPS enforcement and security headers, though public security policies and incident response contacts are not disclosed, representing an area for improvement. Overall, the website is professional, trustworthy, and privacy compliant, but the lack of WHOIS data introduces some uncertainty regarding domain registration transparency.

International Cards and Gifts Ltd is a UK-based, family owned specialist greetings card publisher with over 30 years of experience. The company focuses on supplying high-quality greeting cards to independent retailers, emphasizing traditional and contemporary designs. Their business model is primarily B2B, serving trade customers with an online ordering system for approved accounts. The website reflects a modest but professional digital presence built using EverWeb and jQuery technologies, with a focus on product showcasing and customer contact. Technically, the website uses a static site builder platform with jQuery and a Galleria image gallery plugin. While the site is accessible and contains relevant business content, it suffers from multiple broken image links and lacks modern security practices such as HTTPS enforcement and security headers. Mobile optimization and accessibility are basic, and SEO practices are minimal. From a security perspective, the site lacks visible security headers, does not enforce HTTPS in canonical URLs, and has no privacy or cookie policies, which raises compliance concerns. The WHOIS data for the domain is missing, indicating potential domain registration issues that significantly impact trustworthiness. No vulnerability disclosure or incident response information is provided. Overall, the website presents a legitimate business with a clear market focus but requires urgent improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

M

Moores Ltd

moorescoleraine.com

59

Moores of Coleraine is a well-established independent department store in Northern Ireland, operating since 1925. The business offers a wide range of premium brands across multiple retail categories including menswear, womenswear, childrenswear, beauty, homeware, and interiors. It also provides in-store dining options and personal styling services, with an online shopping platform to complement its physical store. The website reflects a medium-sized retail business with a consistent brand presence and a focus on customer experience. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Slick Carousel. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3 for analytics, marketing, and security purposes. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no publicly available security policy or incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or data unavailability, which impacts domain legitimacy assessment. Overall, the website is professional, user-friendly, and trustworthy in content and design, but the lack of WHOIS transparency and some security header omissions suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to strengthen trust and compliance.

J

James F. Kidd & Son Ltd

jameskidd.co.uk

49

James F. Kidd & Son Ltd is a well-established Scottish company specializing in the distribution of catering supplies, hygiene products, and packaging solutions primarily serving the hospitality and public sector industries. With a history dating back to 1928 and a strong network of over 350 trusted suppliers, the company maintains a significant market position in Scotland, supported by dedicated local delivery fleets and physical showrooms in Edinburgh and Glasgow. Their business model combines wholesale distribution with an e-commerce platform and trade counter sales, targeting hospitality businesses and public sector clients. Technically, the website is built on a mature e-commerce platform (OpenCart) with a technology stack including jQuery, Bootstrap, and various UI plugins. The site demonstrates good mobile optimization, clear navigation, and integration of analytics tools such as Google Analytics and Hotjar for user behavior insights. Hosting is provided by Zen Internet Limited, a reputable UK hosting provider. From a security perspective, the site enforces HTTPS and uses secure login forms and cookie consent mechanisms. However, it lacks explicit security headers like Content-Security-Policy and uses an outdated jQuery version, which could pose vulnerabilities. No incident response or detailed security policies are publicly available, indicating room for improvement in security maturity. Overall, the website presents a professional and trustworthy front for the business with strong compliance to privacy and cookie regulations. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, updating libraries, and publishing security policies to further strengthen trust and compliance.

J

John Nicholls

johnnicholls.co.uk

54

John Nicholls is a UK-based retailer specializing in luxury bespoke kitchens and bathrooms. The company offers a comprehensive service including free design consultations, 3D CAD visualizations, home surveys, free local delivery, and installation. Their market position is supported by partnerships with leading suppliers and a well-equipped showroom. The website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and privacy compliance, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional and trustworthy with no signs of malicious activity or content blocking.

A

ABRAMS

abramsbooks.com

49

ABRAMS is a well-established publishing company specializing in art and illustrated books, including children’s literature, with a history dating back to 1949. The website reflects a mature digital presence built on WordPress with a modern tech stack including Foundation framework and jQuery. It features rich content, clear navigation, and multiple imprints and subsidiaries, indicating a large-scale operation. The site uses HTTPS and includes privacy and cookie policies, demonstrating attention to compliance and user privacy. However, WHOIS data for the domain is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the overall legitimacy given the professional site and branding.

R

Roberts Radio

robertsradio.com

63

Roberts Radio is a well-established British audio brand with nearly 90 years of history, offering a range of consumer audio products including radios, sound systems, turntables, and accessories. The website targets German-speaking consumers and operates an e-commerce platform to sell its products. The brand emphasizes British engineering and design quality. Technically, the website is built on Drupal 11, employs modern marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Facebook Pixel, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and accessible, with good SEO and user experience. Security-wise, the site uses HTTPS and reCAPTCHA v3, but lacks explicit security headers and published security policies or incident response contacts. The WHOIS data for the domain is missing, which is unusual and reduces trust somewhat, but the professional presentation and multiple trust signals on the site support its legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, with room for improvement in security policy transparency and WHOIS data availability.

Dayton Group is a well-established food solutions provider with a century-long history, operating primarily in the Baltic region and Finland. The company specializes in sales, service, and support of equipment for retail, manufacturing, and hospitality sectors. Their market position is strong regionally, supported by multiple subsidiaries and a consistent brand presence. The website reflects a professional business with clear service offerings and contact channels. Technically, the site is built on WordPress with Bootstrap and uses standard analytics tools, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing security headers and explicit privacy and cookie policies. No blocking or WAF challenges were detected, allowing full content access. Overall, the site is trustworthy and business credible but has room for enhanced privacy compliance and security best practices.

T

The Block Fashion

theblockfashion.com

55

The Block Fashion is an independent premium womenswear boutique located in Hertfordshire, UK. The website presents a professional retail business focused on offering high-quality womenswear fashion. The business targets women interested in premium clothing and operates primarily as a retail boutique. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with Google Analytics and Tag Manager integrated for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

P

Panel Warehouse

panelwarehouse.com

67

Panel Warehouse is an e-commerce retailer specializing in office screens, display boards, notice boards, and office partitions. The company targets businesses and offices seeking high-quality display and partition solutions. Their website presents a professional and consistent brand image with a clear focus on their niche market. The business operates primarily in the United Kingdom and offers a variety of products through an online platform. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Bing Ads, indicating a mature digital marketing approach. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business presence appear credible. Privacy and cookie policies are present and GDPR compliant, but no explicit security policy or incident response information is published. Overall, the website is professional and trustworthy from a user perspective but would benefit from improved transparency in domain registration and security disclosures.

I

Image Scotland Limited trading as Scottish Mountain Gear

scottishmountaingear.com

67

Scottish Mountain Gear, operated by Image Scotland Limited, is a specialist service provider focused on repair and cleaning of outdoor equipment such as clothing, rucksacks, tents, and down-filled products. The company partners with well-known outdoor brands and offers online booking for its services, positioning itself as a niche player in the UK outdoor retail service sector. The website is professionally designed with good navigation and mobile optimization, leveraging technologies like jQuery, Bootstrap, and Revolution Slider. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid business presence but would benefit from enhanced security practices and domain registration transparency.

Apollo Gardening Ltd. operates a professional retail website focused on supplying a comprehensive range of gardening essentials including landscaping fabrics, wire mesh, plant supports, and garden decor. The company targets everyday gardeners and garden maintenance professionals primarily in the United Kingdom. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of a publicly available WHOIS record raises questions about domain registration transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. Overall, the business presents as a small, legitimate gardening supplier with room for improvement in compliance and security transparency.

Grapes Direct is a UK-based specialist grape importer connecting top grape growers worldwide with UK supermarkets. The company operates a year-round supply chain, importing grapes from multiple countries and providing technical support to optimize product quality. Their business model focuses on partnership with growers and simplifying the complex grape supply chain. The website is built on legacy ASP.NET Web Forms technology and uses Google Analytics for visitor tracking. While the site is accessible and professionally presented with clear contact information, it lacks modern security headers and privacy compliance documentation. The WHOIS data indicates the domain registration failed due to naming rules, raising concerns about domain legitimacy. Overall, the website presents a credible business front but requires improvements in security posture and compliance to enhance trust and reduce risk.

M

Manor Brick Centres Ltd (The Brickyard)

manorbrick.com

48

Manor Brick Centres Ltd operates a retail and wholesale business specializing in bricks and paving materials across South Wales, with physical branches in Cardiff, Swansea, and Caerphilly. The company targets both trade professionals and the general public, offering a large inventory with clearance pricing and a free brick-matching service. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to its market segment. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Google Fonts for typography. The site is mobile-optimized and structured with good SEO practices, though accessibility features are basic. There is no evidence of a CMS or advanced frameworks, indicating a likely custom or lightweight implementation. Performance is moderate with no blocking or WAF detected. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk is moderate with recommendations to improve transparency, implement security headers, and clarify domain registration status to enhance trust and compliance.

D

Doorstore (Wirral) Ltd

doorstorewirral.co.uk

51

Doorstore (Wirral) Ltd is a small, family-run business specializing in the supply and installation of wooden, composite, and UPVC doors and windows in the Wirral and Chester areas. The company positions itself as a local leader with over 30 years of experience, targeting homeowners and property owners seeking quality door and window solutions. The website reflects this with clear service descriptions and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Google reCAPTCHA, indicating a moderate level of digital maturity. However, the Google Analytics plugin is present but not configured, suggesting incomplete analytics implementation. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks advanced security headers and explicit security policies. The WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy but does not negate the professional presentation and business consistency observed. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy compliance measures.

M

Mitchells Millbrook Limited

mitchellsworktops.co.uk

49

Mitchells Millbrook Limited operates a specialized retail and trade business supplying kitchen worktops and bathroom surfaces from Southampton, UK. With over 70 years of experience, they maintain a large stock and offer custom fabrication services supported by onsite workshop facilities. Their target market includes both trade professionals and retail customers primarily in the South of England. The website reflects a professional and established business with clear service offerings and local delivery capabilities. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance optimization. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and formal security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. The WHOIS data is unavailable due to a domain lookup error, which limits trust assessment from a domain registration perspective. Overall, the website is functional, professional, and trustworthy from a business and content perspective but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

Country Love Crafts is a UK-based small retail business specializing in supplying ready-to-decorate craft shapes and pottery materials. The company serves craft studios, hobbyists, and pottery businesses with a broad product range including bisque blanks, clay, glazes, kilns, and decorating supplies. They operate an e-commerce platform powered by Odoo and maintain partnerships with global brands such as DecoArt and Duncan Ceramics. The website is professionally designed with good content quality and clear navigation, targeting craft enthusiasts and studios. Technically, the website uses modern web technologies including Odoo CMS, Bootstrap, FontAwesome, and Google Tag Manager for analytics. The site is mobile optimized and performs moderately well. However, there is a lack of visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The cookie consent mechanism is implemented, indicating some level of privacy compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens, but the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. No critical vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be enhanced by adding security headers, privacy policies, and incident response information. The overall risk assessment suggests the business is operational and credible in its niche but should address domain registration transparency and strengthen security and privacy compliance to improve trust and reduce risk exposure.

C

Campbell Miller Tools

campbellmillertools.co.uk

62

Campbell Miller Tools operates a professional e-commerce website specializing in power tools and accessories, targeting retailers and professional users primarily in the United Kingdom. The company leverages over 70 years of experience and stocks many leading brand names, positioning itself as a trusted supplier in the UK market. The website is built on the Shopify platform, utilizing a modern theme and integrating multiple analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is robust, with fast performance, mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced, use of hCaptcha for form protection, and cookie consent mechanisms in place. However, explicit privacy and terms of service pages are not clearly found, which could be improved for compliance and transparency. WHOIS data for the www subdomain is unavailable due to naming rules, but this is consistent with it being a subdomain of campbellmillertools.co.uk. Overall, the website presents a professional and trustworthy front with moderate to high legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

Tails Cocktails

tailscocktails.com

57

Tails Cocktails is a premium ready-to-drink cocktail brand offering consumers high-quality pre-mixed cocktails to enjoy at home. The website is professionally designed, leveraging WordPress CMS and modern web technologies including Google Tag Manager and OneTrust for privacy compliance. The brand is associated with Bacardi Limited, a well-known global beverage company, enhancing its market credibility. The site includes comprehensive privacy and cookie policies, an age gate for legal compliance, and a branded contact support portal. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response information are absent. WHOIS data is privacy protected, which is typical for commercial brands in this sector. Overall, the site presents a trustworthy and professional digital presence with good SEO and user experience.

ECS (Electrical & Contractors Supplies) is a small UK-based electrical wholesaler founded in 1973, operating under parent company Rowenmead Ltd. The company serves electricians and electrical contractors with a large stock of electrical supplies, free delivery, and personalized customer service. Their sister company OSS specializes in safety and security equipment. The website content is basic but relevant, targeting local and regional customers in the electrical industry. Technically, the website is built using Serif WebPlus X8 with jQuery, lacks modern CMS or frameworks, and shows limited mobile optimization and accessibility. Security posture is weak due to missing HTTPS and security headers, and no privacy or cookie policies are present, indicating potential compliance gaps. WHOIS data is missing or indicates the domain may not be registered, which is a critical concern for legitimacy. Overall, the website is functional but requires significant improvements in security, compliance, and technical modernization.