Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

L

Lancaster Signs

lancastersigns.co.uk

46

Lancaster Signs operates a website focused on signage services, presenting itself as a small business with a straightforward branding message "Always a good sign." The website is built on WordPress using the Divi theme and incorporates Google Analytics via MonsterInsights for visitor tracking. The site content is accessible without any WAF or security challenge interference, indicating good availability. However, the absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. The WHOIS lookup failed due to a domain naming rules violation, which raises concerns about the domain's registration legitimacy and reduces overall trust in the domain ownership details. Technically, the site shows moderate performance and mobile optimization but lacks advanced security headers and visible security best practices.

N

Neath Port Talbot Council

npt.gov.uk

68

Neath Port Talbot Council operates as the local government authority for the Neath Port Talbot county borough in Wales, UK. The website serves residents, businesses, and council members by providing access to a wide range of public services including social care, waste management, planning, and community engagement. The site is well-structured with clear navigation and a focus on online service delivery, reflecting a mature digital presence for a government entity. Technically, the website employs modern frameworks such as Bootstrap 5.3 and the Gov.uk Frontend toolkit, alongside Font Awesome for iconography and Google Analytics for user tracking. The CMS appears to be Umbraco, inferred from HTML element attributes. Performance and mobile optimization are good, with accessibility features implemented. Cookie consent mechanisms are in place, though explicit privacy and terms of service pages were not found in the provided content. Security posture is moderate with HTTPS usage implied and no visible security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies and incident response contacts suggests room for improvement in transparency and compliance. WHOIS data was unavailable, but the .gov.uk domain and consistent branding strongly indicate legitimacy. Overall, the website is a reliable and professional portal for local government services, with recommendations to enhance privacy disclosures, security headers, and contact transparency to further strengthen trust and compliance.

The Regimental Shop operates as a niche e-commerce retailer specializing in regimental and military-themed apparel and gifts. The website is built on the Shopify platform, leveraging a modern tech stack including jQuery, Slick Slider, and various Shopify apps for product options and upselling. The site targets military personnel, veterans, and enthusiasts seeking official regimental merchandise. While the site demonstrates good technical implementation and security practices such as HTTPS and hCaptcha integration, it lacks visible privacy and cookie policies, and no explicit contact information is provided, which impacts privacy compliance and business credibility scores. The absence of WHOIS data raises some concerns about domain registration transparency but does not negate the site's operational legitimacy given its Shopify infrastructure and content quality.

Q

Invest in an economical and performant car

quarrycars.co.uk

55

Quarry Cars operates a website focused on providing economical and high-performance vehicle solutions including car rental, leasing, traditional loans, and vehicle accessories. The site targets consumers seeking flexible and affordable vehicle options, including electric and commercial vehicles. The business model centers on vehicle financing and maintenance services, positioning itself as a niche provider in the UK transportation sector. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, offering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy policies. The WHOIS data is incomplete and inconsistent due to querying the subdomain rather than the registered domain, slightly reducing trustworthiness. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

H

Hemingstone Garage

hemingstonebmw.com

53

Hemingstone Garage is a small, family-run automotive business specializing in used BMW cars and related prestige vehicles, located in Ipswich, Suffolk, UK. The company offers a range of services including car sales, diagnostics, repairs, servicing, and finance options. The website presents a professional and trustworthy image with customer testimonials and warranty offerings, targeting local car buyers and BMW owners. Technically, the site is built using modern web technologies including Hugo static site generator, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no incident response or vulnerability disclosure policies are found. The absence of WHOIS domain registration data is a notable transparency concern but does not detract significantly from the overall legitimacy indicated by the website content. Strategic recommendations include improving security headers, adding explicit security and incident response policies, and verifying domain registration details for enhanced trust.

F

Food Store International

foodstoreint.co.uk

55

Food Store International is a family-owned business specializing in the export of British food and grocery brands since 1998. The company targets markets in the Middle East, Africa, the United Kingdom, and internationally, consolidating supply from popular British and global brands. Their business model focuses on reliable delivery and margin protection for their clients. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress 6.9.4 with modern tools such as Google Tag Manager and the Yoast SEO plugin. The site is mobile-optimized and uses a CDN for media assets, indicating a moderate to good digital maturity. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are available, limiting transparency and trust. No vulnerabilities or suspicious content were detected. Overall, the website is safe and professional but requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.

Newmans Holiday Homes Ltd operates a professional and well-established holiday caravan rental service focused on private caravan hire in Devon and Somerset, UK. The company offers a wide range of holiday caravans and lodges with flexible booking options, local support, and subletting services. The website is well-designed, mobile-optimized, and provides clear navigation and rich content including customer testimonials and detailed park information. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap 5, and Swiper for a responsive and interactive user experience. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is professional and trustworthy from a user perspective but would benefit from enhanced security disclosures and WHOIS transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.minosrestaurant.com appears to be a restaurant-related site but contains minimal visible content beyond technical scripts for cookie consent management. The absence of metadata, structured data, and business information limits the ability to fully assess the business profile. The domain WHOIS data is unavailable or unregistered, raising concerns about domain legitimacy and transparency. Technically, the site uses a Consent Management Platform indicating some GDPR compliance efforts, but lacks visible security headers and SSL configuration details. No contact or privacy policy information is present, which negatively impacts trust and compliance posture. Overall, the site shows a low level of digital maturity and security readiness.

NPW Group operates a professionally designed e-commerce website focused on retail and wholesale distribution of branded products including NPW, Drinking Buddies, and Glow Mood. The company targets consumers and wholesale partners primarily in the United States, with a medium-sized business profile founded in 2019. The website leverages the Shopify platform, ensuring a modern and mobile-optimized user experience with integrated marketing and analytics tools. Security posture is solid with HTTPS and secure payment mechanisms, though improvements are recommended in DNS security and explicit privacy and cookie policies. Overall, the website presents a trustworthy and professional front with clear contact information and brand consistency.

C

Clifton Wealth Partnership Ltd

tailormade-ifa.com

62

Clifton Wealth Partnership Ltd is a UK-based financial advisory and wealth management firm with a history dating back to 1986. The company recently acquired Tailormade Financial Services and operates under the Clifton group of companies. Their services target UK businesses and individual clients seeking specialist financial advice. The website reflects a professional and consistent brand image with clear contact details and regulatory disclosures. Technically, the site uses modern web technologies including Google Tag Manager and Bootstrap, with good mobile optimization and SEO practices. Security posture is moderate; while HTTPS is implied and cookie consent is implemented, the absence of HTTP security headers and published security policies indicates room for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules error, which impacts domain trust verification but does not detract from the professional presentation of the website. Overall, the site is safe, compliant with privacy regulations, and trustworthy from a business perspective.

The British Bung Company Ltd is a UK-based manufacturer specializing in traditional wooden cask closures primarily serving the brewing industry. Their product range includes keystones, shives, pegs, plugs, bespoke items, and miscellaneous wooden closures. The company positions itself as a leading manufacturer in this niche market, targeting brewing professionals and other industrial customers. The website content is professional and informative, reflecting a small-sized manufacturing business with a clear focus on quality and tradition. Technically, the website employs a modern front-end stack including jQuery, Modernizr, Foundation CSS framework, and various UI plugins such as Nivo Slider and carouFredSel. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident from the content. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security configurations. No privacy, cookie, or terms of service policies are present, indicating gaps in privacy compliance. The WHOIS lookup failed due to domain registration errors, raising concerns about domain legitimacy and registration consistency. No incident response or vulnerability disclosure information is available. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration legitimacy to enhance trustworthiness and reduce risk.

T

Todd Milburn Partnership Limited

todd-milburn.co.uk

43

Todd Milburn Partnership Limited is a well-established UK-based consultancy specializing in property and construction services, including project management, quantity surveying, employer’s agent roles, and principal designer services. With over 30 years of experience, the company positions itself as a trusted independent specialist serving both public and private sector clients. The website reflects a professional and consistent brand image, supported by recognized industry certifications such as RICS and APS. Contact information is clearly provided, enhancing business credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, hosted by 20i Ltd. The site is mobile-optimized and performs moderately well, with good SEO practices evident. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks advanced security headers and published security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the security posture is good but could be improved by implementing security headers, publishing incident response and vulnerability disclosure information, and enhancing privacy compliance. The site is free from adult or questionable content, targeting a general professional audience. The domain registration is consistent with the business claims, showing a long-standing presence and legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security and incident response documentation, and improving accessibility features to further strengthen trust and compliance.

The analyzed website is the Google Accounts sign-in page, a critical entry point for users accessing Google's suite of services including Gmail. As a subdomain of google.com, it inherits the trust and brand recognition of Google LLC, a global technology leader and subsidiary of Alphabet Inc. The site is designed for a broad audience of internet users requiring secure authentication to access their Google accounts. The business model revolves around providing secure, reliable access to cloud-based services and user data management. Technically, the site employs modern web technologies including JavaScript and Google APIs, hosted on Google Cloud infrastructure. It demonstrates excellent performance, mobile optimization, and accessibility standards. Security is robust with enforced HTTPS, comprehensive security headers, and secure form handling, reflecting Google's high security maturity. No vulnerabilities or suspicious indicators were detected. Privacy and cookie policies are not directly present on this sign-in page but are available on Google's main domains, indicating a separation of concerns. The domain's WHOIS data is not separately available for this subdomain, which is typical and does not detract from legitimacy. Overall, the site is highly trustworthy and professionally maintained. Strategic recommendations include ensuring clear links to privacy and cookie policies on all user-facing pages, continuous monitoring for emerging threats, and maintaining transparency in data protection practices to uphold user trust.

T

The Collectors Company

thecollectorscompany.com

59

The Collectors Company is a small independent retail business specializing in collectible teddy bears, diecast models, and calendars, operating primarily through mail order. The website presents a professional and consistent brand image, targeting collectors and enthusiasts in the UK market. The business leverages reputable collectible brands and maintains physical store presence alongside online operations. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy from a business perspective but would benefit from enhanced security and compliance documentation.

S

Sanford Barnes Ltd

reflexexhibitions.com

63

Reflex Exhibitions, operated by Sanford Barnes Ltd, is a UK-based small business specializing in the design and delivery of exhibition stands, pop-up displays, and large-format print solutions. Established in 2002, the company targets UK businesses and organizations seeking high-impact display solutions for trade shows and events. The website presents a professional and consistent brand image with clear contact information and social media presence, supporting its market position as a trusted provider in the exhibition industry. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy and registration transparency, which slightly impacts trustworthiness. However, the website content, business information, and compliance with GDPR and cookie consent regulations indicate a legitimate and professional operation. No adult or questionable content is present, making the site safe for general audiences. Overall, Reflex Exhibitions maintains a solid digital presence with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing a security policy, establishing an incident response contact, and verifying domain registration information to enhance trust and compliance.

The website www.oakhamphysio.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's market position or services. The domain WHOIS lookup failed due to an invalid domain format, raising legitimacy concerns about the domain registration itself. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers, privacy policies, or SEO optimizations. Overall, the site exhibits a low digital maturity and poor business credibility due to lack of accessible content and transparency.

New Beginnings Day Nursery is a small, family-owned childcare provider based in Buckinghamshire, UK, offering full day care and early childhood education services. The website presents a professional and consistent brand image with clear contact information and social media presence. The business targets parents seeking quality nursery services and emphasizes a nurturing environment with qualified staff. Technically, the website is built on the Webador CMS platform, uses HTTPS with valid SSL, and incorporates Google reCAPTCHA for form security. However, it lacks published privacy and cookie policies, which impacts compliance. The WHOIS data is unavailable due to a domain naming rule violation error, which raises questions about domain registration legitimacy but does not directly affect the website's operational credibility. Overall, the site is functional, secure, and trustworthy but would benefit from improved compliance documentation and security headers.

O

Oaks Flooring Limited

oaksflooring.co.uk

49

Oaks Flooring Limited is a well-established, family-run flooring retailer and installer based in Kent, UK, with over 30 years of experience. The company offers a wide range of flooring products including carpets, luxury vinyl tiles, laminate, wood flooring, and smart choice flooring, targeting both homeowners and trade customers in Kent, Surrey, and London. Their market position is strengthened by multiple showrooms, a strong reputation for quality and service, and a comprehensive installation service. The website reflects a professional and trustworthy business with detailed product offerings, customer testimonials, and clear contact information. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and business review integrations. It employs Google reCAPTCHA for form security and has a cookie consent mechanism in place, indicating a good level of digital maturity and privacy compliance. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and has implemented spam protection on forms. However, no explicit security policies or incident response information is provided, and security headers are not evident in the HTML content. The WHOIS data for the domain is unavailable due to an incorrect query on the subdomain, but the website content and contact details strongly indicate a legitimate business. Overall, the security posture is good but could benefit from enhanced transparency and technical hardening. The overall risk assessment is low, with the main recommendation being to correct WHOIS queries for domain verification, implement security headers, and consider publishing security and incident response policies to further enhance trust and compliance.

Sue Prince Resourcing Ltd is a specialized recruitment agency focusing on senior and managerial roles within the hospitality sector in the UK and internationally. The company serves a diverse client base ranging from large hotel brands and venues to independent hoteliers, offering recruitment services for roles in revenue management, sales, marketing, e-commerce, events, human resources, and general management. The website reflects a niche market positioning with a clear business model centered on personalized recruitment services. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted likely via GoDaddy, and employs standard tracking tools such as Google Analytics and Google Tag Manager. While the site enforces HTTPS and includes basic bot protection on forms, it lacks advanced security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is minimal, with no cookie consent mechanism despite active tracking scripts, and no published security or incident response policies. Overall, the website is professional and functional but would benefit from security and privacy enhancements to strengthen trust and compliance.

M

Memoria Limited

southoxfordmemorial.co.uk

45

Memoria Limited operates the South Oxfordshire Crematorium and Memorial Park, providing a range of funeral, cremation, burial, and memorial services across the UK. The company positions itself as a leading crematorium operator with a focus on distinguished service in beautiful settings. Their website is professionally designed, content-rich, and targets bereaved families seeking compassionate and comprehensive funeral services. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and accessibility. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit incident response information. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the website reflects a credible and trustworthy business with strong customer engagement and positive reviews.

The website www.multistaff.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable due to an error from the Nominet UK registry indicating the domain name is invalid and cannot be registered. Consequently, no business information, contact details, or policies are present on the site. The technical infrastructure appears minimal, with only Google Fonts loaded externally. There is no evidence of security headers, HTTPS status, or compliance documentation. Overall, the site is effectively non-functional and lacks any visible digital maturity or security posture.

Electric Orange is a specialist home cinema, audio, and smart home installation company serving Liverpool, Wirral, Cheshire, and the Northwest of England. The company offers bespoke design and installation services including home cinema rooms, multi-room audio systems, intelligent lighting, and media walls. They hold industry certifications and awards, positioning themselves as a trusted regional provider with over 15 years of experience. The website is built on Squarespace, featuring professional design, clear navigation, and mobile responsiveness. Technical infrastructure includes standard web technologies and analytics tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. The WHOIS data for the domain is unavailable due to a registration error, which raises some concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site demonstrates a good balance of business credibility and technical implementation with room for improvement in privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

J

JH Shouksmith & Sons Ltd

shouksmiths.co.uk

49

JH Shouksmith & Sons Ltd is a well-established UK-based mechanical and electrical contracting company with over 200 years of family-led experience. The company specializes in delivering comprehensive mechanical and electrical packages for construction projects ranging from £50k to over £7m. Their services include plumbing, heating, air conditioning, fire alarms, security, data, PV, and plantroom installations. The business targets construction industry clients across the UK and maintains a strong market position supported by multiple industry certifications and a professional online presence. Technically, the website is built on the SeeCMS platform and utilizes a range of JavaScript libraries including jQuery, Slick Slider, and FontAwesome. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is provided by NetHosted Ltd, consistent with the domain registration data. Analytics are implemented via Google Tag Manager and Google Analytics, with moderate user tracking. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries, though it lacks visible security headers and explicit security policies. The use of an outdated jQuery version and absence of cookie consent mechanisms indicate areas for improvement. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture. Overall, the website is professional, trustworthy, and aligned with the company's business claims. Recommendations include updating JavaScript libraries, implementing security headers, adding cookie consent mechanisms, and publishing terms of service and security policies to strengthen compliance and trust.

The website at www.quadrantabs.co.uk is inaccessible, returning a 403 Forbidden error page with no content or metadata available. The domain itself is invalid according to the Nominet UK WHOIS data, which states the domain name contravenes naming rules and cannot be registered. Consequently, no business information, contact details, or technical infrastructure details can be derived from the site. The lack of accessible content and invalid domain status severely limits any meaningful analysis of the business or its digital presence. From a technical perspective, the site shows no signs of modern web technologies, security headers, or HTTPS configuration. The absence of any metadata, scripts, or external links further indicates the site is either misconfigured or non-existent. Security posture is very weak due to the lack of HTTPS and security headers, and the site is effectively blocked from public access. Given the domain is invalid and unregistered, the legitimacy of the website is highly questionable. There are no privacy, cookie, or terms of service policies present, and no contact or business information is available. Overall, the site presents a high risk of being non-legitimate or abandoned, and no trust indicators are present. Strategically, it is recommended to verify the domain registration status and correct any domain naming issues. If this is a legitimate business, they should ensure proper domain registration, configure HTTPS, and publish relevant business and security information to build trust and comply with privacy regulations.

D

Design Pomegranate

designpomegranate.com

57

Design Pomegranate is a small architectural studio based in Islington, London, specializing in bespoke residential architecture. Their website presents a professional image with a focus on quality and delivery of beautiful living spaces. The company targets clients seeking personalized architectural services for residential projects. The site is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and JSON-LD structured data for SEO and semantic clarity. While the technical infrastructure is adequate with moderate performance and good mobile optimization, there is room for improvement in accessibility and SEO practices. From a security perspective, the website lacks visible security headers and privacy-related policies, which are important for compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and contact information suggest a legitimate business operation. No signs of adult or questionable content were detected, making the site safe for general audiences. Overall, the website demonstrates a solid business presence with professional design and clear contact information but requires enhancements in security posture and privacy compliance to strengthen trust and regulatory adherence. Verification of domain registration status is recommended to ensure legitimacy and reduce risk.

The website www.gemmells.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall or bot protection mechanism. The domain WHOIS lookup failed with an error stating the domain name contains too many parts and cannot be registered under Nominet UK rules, suggesting the domain is invalid or non-registered. Consequently, no registrant or business information is available to verify legitimacy or business operations. The website content is minimal, providing no privacy, cookie, or terms of service policies, nor any contact details or business descriptions. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site exhibits a low security posture and poor business credibility due to lack of accessible information and domain legitimacy concerns.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Harry Charles Estate Agents is a well-established real estate business founded in 2002, specializing in residential and commercial sales and lettings in the Watford and Hemel Hempstead areas of Hertfordshire, UK. The company positions itself as a leading local estate agent with a strong focus on customer service and comprehensive property solutions including valuations and auction services. Their website reflects a professional and consistent brand image, supported by positive customer testimonials and recognized industry certifications. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security practices include HTTPS enforcement and cookie consent management, although some security headers could be improved. The WHOIS data for the domain is unavailable due to a domain registration error, which slightly impacts trust but does not detract from the overall legitimacy of the business presence online. Overall, the site demonstrates a mature digital infrastructure and a solid market position in the real estate sector.

The website www.airconditioningwales.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. No actual business content, contact information, or policies are available for review. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK rules, suggesting the domain may not be properly registered or is misconfigured. This severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection, but no other frameworks or CMS are detectable. The lack of visible security headers and absence of HTTPS information further reduce confidence in the site's security maturity. Privacy and cookie policies are missing, and no contact or business details are presented, which negatively impacts trust and compliance. From a security perspective, the use of reCAPTCHA is a positive control against automated abuse, but the absence of other security best practices and the domain registration issues raise concerns. The site is effectively blocked for analysis, resulting in a low security score and overall AI rating. Overall, the site appears to be either under construction, misconfigured, or protected by aggressive security controls that prevent meaningful external analysis. Strategic recommendations include resolving domain registration issues, providing full website content and business information, implementing HTTPS and security headers, and publishing privacy and cookie policies to improve trust and compliance.

M

MET Parking Services

metparking.com

45

MET Parking Services operates as a UK-based provider specializing in innovative car park management solutions. The company positions itself as a leading service provider within the transportation sector, targeting car park operators and managers across the UK. The website reflects a professional business model focused on service delivery with a medium-sized organizational footprint, founded around 2017. Technically, the website is built on WordPress using the Avada theme, incorporating modern JavaScript libraries such as jQuery and Splide.js, and integrates SEO tools like Yoast SEO. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. Security-wise, the site employs HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies were detected, indicating gaps in privacy compliance. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the site presents moderate risk with recommendations to improve privacy compliance, security headers, and verify domain registration status.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website hosted at ww19.dartfordreboreandengines.co.uk is operating on an invalid domain as per the Nominet UK WHOIS registry, which explicitly states the domain cannot be registered due to naming rules violations. The site content is minimal and primarily consists of an embedded iframe loading content from a third-party domain, which raises concerns about the legitimacy and intent of the site. There is no visible business information, contact details, or privacy policies, although consent management scripts are present indicating some attempt at GDPR compliance. The lack of HTTPS and security headers further weakens the security posture of the site. Technically, the site uses JavaScript and a ConsentManager CMP for cookie consent, but lacks modern web standards such as SSL/TLS encryption and security headers. The embedded iframe content is suspicious and may pose security risks. The site performance and user experience are poor due to minimal content and unclear navigation. From a security perspective, the invalid domain registration, absence of HTTPS, and suspicious external content are critical vulnerabilities. No incident response or security policies are visible, and no contact channels for security issues are provided. Overall, the site presents a high risk for users and lacks trustworthiness. Strategically, it is recommended to migrate to a valid domain with proper registration, implement HTTPS, remove suspicious third-party content, and provide clear business and privacy information to improve legitimacy and security posture.

Orchard Press is a small, established print and design business based in Olney, UK, founded in 2004. The company offers a broad range of services including general printing, photocopying, office services, invitations, poster printing, photo printing, and has an in-house design team. They also partner with Prickly Pear Web Design to provide website design and development services. The website is built on WordPress using Elementor, featuring a professional design and good user experience with clear navigation and mobile optimization. Contact information is prominently displayed with multiple channels including email, phone, and contact forms. Security posture is adequate with HTTPS and Google reCAPTCHA v3 implemented, though security headers are missing and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website reflects a trustworthy and credible small business with room for improvement in privacy and security best practices.

The website eclipsehomecare.co.uk currently serves a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. No business-related content, metadata, or structured data is accessible, preventing a full assessment of the company's online presence or services. The domain is registered since 2009 with a reputable UK registrar, 123-Reg Limited, but the lack of accessible content severely limits the ability to evaluate the business or technical infrastructure. No contact information, privacy policies, or security practices are visible on the site. The website's security posture cannot be assessed due to the absence of accessible content and security headers. Overall, the site appears inactive or restricted, which poses a risk to trust and credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

V

Vanilla Catering & Events

vanillacatering.co.uk

60

Vanilla Catering & Events is a UK-based small hospitality business specializing in catering services for weddings, corporate events, and private parties. With over seventeen years of experience, the company emphasizes fresh, locally sourced ingredients and professional service. The website reflects a well-established local catering company with a strong reputation supported by client testimonials and clear contact information. Technically, the website uses modern web technologies including jQuery, Google Analytics, and Google Fonts, with good mobile optimization and SEO practices. However, no CMS or backend platform is explicitly identified. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

R

RA Dalton Ltd

radalton.co.uk

65

RA Dalton Ltd is a UK-based specialist company providing installation, servicing, and maintenance of Klargester sewage treatment systems and off-mains drainage solutions. They hold multiple industry certifications and accreditations, positioning themselves as a leading wastewater specialist across the UK. Their website is professionally designed, mobile-optimized, and rich in relevant content, targeting both domestic and commercial customers. Technically, the site runs on WordPress with the Avada theme and integrates Google Analytics and YouTube APIs, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, though improvements can be made by adding HTTP security headers and formal vulnerability disclosure mechanisms. Privacy compliance is adequate with privacy and cookie policies present, but lacks explicit consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and customer testimonials.

S

403 - Forbidden

speedcouriers.co.uk

36

The website www.speedcouriers.co.uk is currently inaccessible, returning a 403 Forbidden error page. The domain WHOIS data is invalid and indicates the domain is not properly registered under Nominet UK rules. No business content, contact information, or privacy policies are available for analysis. The lack of accessible content and domain legitimacy severely limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers, HTTPS confirmation, or modern web technologies. The security posture is weak due to the absence of accessible content and security best practices. Overall, the site presents a high risk due to domain registration issues and lack of transparency.

A

Oops !

atos.net

54

The website atos.net is currently inaccessible due to a web application firewall block by Claranet WebFence, preventing access to any meaningful content or metadata. The domain is well-established, created in 1997, and registered with CSC Corporate Domains, Inc., indicating a legitimate and mature business presence. Due to the blocked content, no detailed analysis of business operations, technical infrastructure, or security posture can be performed. The lack of accessible content also prevents evaluation of privacy compliance, contact information, or marketing practices. Overall, the site appears to be protected by security mechanisms that restrict external analysis.

Maximum Protection Services Ltd is a UK-based security service provider with over 40 years of experience delivering intelligent, innovative, and cost-effective security solutions. The company holds prestigious NSI Gold accreditation and operates an in-house alarm receiving center compliant with BS8418 and BS5979 standards. Their key services include CCTV systems, intruder alarms, access control, fire alarms, rapid deployment, canine services, remote monitoring, and automated gates and barriers. The website reflects a professional and consistent brand image targeting businesses requiring comprehensive security solutions. Technically, the website is built on the Squarespace platform, utilizing modern web technologies such as Google Fonts and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS and HSTS enabled, though DNSSEC is not enabled and advanced security headers are missing. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the security posture is solid but could be improved by publishing security policies, enabling DNSSEC, and adding vulnerability disclosure mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. The website content is safe for general audiences and professionally presented.

The website www.drainagespares.com is currently non-functional, displaying a database connection error page with no accessible content or metadata. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or inactive. There is no evidence of business information, contact details, privacy or cookie policies, or any security measures such as HTTPS or security headers. This severely limits the ability to assess the business or technical maturity of the site. The lack of content and registration data suggests the domain is not currently in legitimate use or is under misconfiguration or development. From a technical perspective, the site lacks any detectable CMS, frameworks, or technologies. The error page indicates a backend database failure, which is a critical operational issue. No security headers or HTTPS were detected, exposing the site to potential security risks if it were live. No analytics, advertising, or tracking technologies are present, consistent with the site being down. Security posture is poor due to the absence of HTTPS, security headers, and the presence of a database error. No privacy or compliance policies are found, indicating non-compliance with GDPR or other regulations. The domain's WHOIS absence further undermines trust and legitimacy. Overall, the site is not currently operational and poses a high risk for users attempting to access it. Strategic recommendations include restoring database connectivity immediately, securing the site with HTTPS, implementing standard security headers, and ensuring proper domain registration and WHOIS data accuracy. Establishing privacy policies and contact information is essential for compliance and trust. Until these issues are resolved, the site should be considered non-operational and untrustworthy.

G

Greenshields JCB Ltd

greenshieldsjcb.com

54

Greenshields JCB Ltd is a leading UK dealer specializing in JCB construction and industrial machinery. The company offers a comprehensive range of services including new and used machine sales, parts supply, servicing, finance, and insurance. With a strong market position as the premier JCB dealer in the UK, Greenshields JCB targets construction and industrial sectors requiring reliable equipment and support. The website reflects a professional and consistent brand image, supported by active social media channels and detailed business information. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Bootstrap 5, LayerSlider, and various tracking and marketing tools including Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance and security headers. Security posture is solid with HTTPS enforced, cookie consent management, and bot protection via Google reCAPTCHA. However, the absence of explicit security headers and lack of WHOIS data for the domain slightly reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence for Greenshields JCB Ltd, though the missing WHOIS information warrants caution. Strategic improvements in security headers and transparency around domain registration would enhance credibility and security posture.

K

Kudos Software Ltd

kudos-software.co.uk

70

Kudos Software Ltd is a UK-based company specializing in providing innovative software solutions tailored for the charity retail sector. Their offerings include a comprehensive Charity Retail System, Charity EPoS, Business Intelligence tools, Retail Gift Aid processing, and Dealer Management Software. The company is well-positioned in the UK charity retail market, trusted by over 150 charity and hospice retailers, and emphasizes ease of use for volunteers and staff. Their website reflects a professional and consistent brand image with strong client testimonials and recognized certifications such as Cyber Essentials and Sage Partner status. Technically, the website is built on WordPress 7.0, utilizing modern plugins like Gravity Forms for form management and Yoast SEO for search engine optimization. The site employs Google Tag Manager and Google reCAPTCHA v3 for analytics and security respectively. The website is mobile-optimized, accessible, and demonstrates good SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and provides a cookie consent mechanism with revocation options, indicating a mature approach to privacy and security. However, the absence of explicit security headers and a vulnerability disclosure policy suggests room for enhancement. The WHOIS lookup failed due to a query format error, but the website's content and certifications support its legitimacy. Overall, Kudos Software Ltd presents a secure, professional, and user-friendly digital presence aligned with its business goals. Strategic improvements in security headers and incident response transparency would further strengthen their security posture and trustworthiness.

M

Matrica

matrica.co.uk

64

Matrica is a UK-based company specializing in advanced energy forecasting software solutions aimed at optimizing energy predictions and improving efficiency for businesses. The website presents a professional image with clear business focus and structured data supporting local business information. The technical infrastructure is based on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. While the site is mobile optimized and well designed, it lacks visible privacy and cookie policies, and no security headers were detected, indicating room for improvement in security posture. The WHOIS lookup failed due to domain naming rules violation, suggesting the domain may be a subdomain or alias, which impacts trustworthiness. Overall, the site is functional and business-oriented but requires enhancements in security and compliance to strengthen its risk profile.

E

Excel Packaging & Insulation Co. Limited

excelpackaging.co.uk

58

Excel Packaging & Insulation Co. Limited is a UK-based manufacturer and wholesale supplier specializing in protective packaging solutions including foam packaging, wooden crates, pallets, and sustainable packaging options. The company targets businesses requiring custom packaging solutions and positions itself as a specialist with a focus on quality and sustainability. The website is built on Drupal 10, integrating modern technologies such as Google Tag Manager and reCAPTCHA, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are not explicitly published. Overall, the website is professional and trustworthy, supporting the company's business credibility. However, the absence of explicit privacy and terms of service pages suggests room for improvement in compliance documentation.

BCA Group operates as a leading European used car marketplace with a history dating back to 1946. It manages vehicle remarketing and auctions across multiple European countries, serving both buyers and vendors. The website presents a professional and consistent brand image with localized portals for various countries, indicating a broad market reach and established presence in the transportation sector. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, Adobe Analytics, and OneTrust for cookie consent, reflecting moderate digital maturity. Security posture is adequate with cookie consent and privacy policies in place, but lacks visible security headers and explicit incident response information. The absence of WHOIS data for the domain www.bca.com is a notable anomaly that impacts trustworthiness, although the business information and website content appear legitimate and consistent with a large enterprise. Overall, the site is safe, well-structured, and compliant with GDPR, but could improve transparency and security practices.