Security Directory

E

Eskmuir Properties Ltd

eskmuir.co.uk

42

Eskmuir Properties Ltd is a UK-based property investment manager specializing in commercial real estate investments tailored primarily for charities and family trusts. Established in 1990, the company has a strong track record of delivering consistent dividend growth and capital appreciation through active asset and fund management. Their website reflects a professional and focused business with clear communication of their services and investment philosophy. Technically, the site is built on WordPress using the Divi theme, with modern plugins enhancing functionality and SEO. Security posture is good with HTTPS enforced, but lacks some advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting Eskmuir's market position as a niche real estate investment manager.

The website www.marchantlewis.com is currently inaccessible and displays a generic 'Site not found' error page indicating the site is unpublished or the domain is not assigned. There is no visible business content, contact information, or policies available on the site. The WHOIS lookup confirms that the domain is not registered or inactive, with no registrar or creation date information available. This suggests that the domain is either unregistered or expired, and no legitimate business presence exists at this URL. From a technical perspective, the site only loads a minimal HTML error page with a single external font resource. There are no scripts, forms, or analytics detected. Security posture cannot be assessed due to lack of HTTPS and security headers. Privacy and compliance policies are absent, and no contact or business information is provided. The overall risk assessment is high due to the lack of domain registration, absence of website content, and no security or compliance measures. This site should not be considered a legitimate or operational business website at this time. Strategic recommendations include registering the domain properly, deploying a secure and compliant website with clear business information, and implementing standard security best practices.

L

Lakeside Foods Group

lakesidefoods.co.uk

54

Lakeside Foods Group is a well-established UK-based supplier specializing in innovative chilled and frozen food products serving retail, manufacturing, and food service sectors. The company leverages extensive product innovation experience and global sourcing to maintain a strong market position. Their website reflects a professional digital presence built on WordPress, featuring modern design and mobile optimization. Security measures include HTTPS and Google reCAPTCHA on contact forms, with GDPR consent mechanisms in place, although a formal privacy policy page is missing. The presence of multiple industry accreditations and clear company registration details enhance trustworthiness. Overall, the website is accessible, well-structured, and business-focused, with minor gaps in privacy and security policy disclosures.

F

Fountain Court

fountaincourt.co.uk

69

Fountain Court Chambers is a prestigious set of commercial barristers based in London with an additional office in Singapore. They specialize in commercial disputes, litigation, and arbitration, serving clients both in the UK and internationally. The chambers are recognized as leaders in their field, with numerous accolades and a strong reputation for expertise and professionalism. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with their market position. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses industry-standard SEO and analytics tools including Yoast SEO and Google Analytics. The site is mobile-optimized, accessible, and performs moderately well, with room for improvement in security headers and performance tuning. The presence of cookie consent mechanisms and GDPR compliance indicates a good level of privacy awareness. From a security perspective, the site uses HTTPS and Cloudflare bot management, but lacks explicit security headers and a published vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided, but incident response contacts are not explicitly stated. Overall, Fountain Court Chambers presents a trustworthy, professional, and well-maintained online presence suitable for their legal services business. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen their security posture and compliance.

The website www.leighacademy.org.uk is currently inaccessible, presenting a 403 Forbidden error page served by nginx with embedded Cloudflare challenge scripts, indicating that access is blocked by a Web Application Firewall or security mechanism. Due to this blockage, no meaningful content, metadata, or business information could be extracted from the site. The WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, resulting in no registrar, creation, or expiry data being available. This lack of WHOIS transparency and the access restrictions raise concerns about the domain's legitimacy and operational status. From a technical perspective, the site shows no accessible content or detectable technologies, frameworks, or CMS platforms. No security headers or SSL configuration details are available, and no privacy, cookie, or terms of service policies are found. The absence of contact information, incident response details, or vulnerability disclosure mechanisms further limits the ability to assess the site's security posture or compliance with data protection regulations. Given the current state, the security posture is weak due to the lack of accessible information and transparency. The domain's WHOIS inconsistency and the WAF blockage suggest potential operational or configuration issues. The overall risk assessment is elevated due to these factors, and strategic recommendations focus on resolving access issues, improving transparency, and implementing standard security and privacy practices. In summary, the site is effectively blocked from analysis, and no substantive business or security insights can be drawn without further access or data. Contacting the site administrators or relevant authorities is advised for a more thorough evaluation.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Anglian Timber Ltd

angliantimber.co.uk

50

Anglian Timber Ltd is a UK-based supplier and manufacturer specializing in timber and landscaping products. The company serves trade and merchant customers primarily in the building and landscaping sectors, offering a range of products including pressure-treated timber, fencing, decking, and bespoke timber solutions. Their regional presence between Ipswich and Colchester positions them as a local trusted supplier. The website is built on Joomla! CMS with modern front-end technologies such as Bootstrap and jQuery, and includes interactive elements like sliders and embedded Google Reviews. Security measures include HTTPS and Google reCAPTCHA v3, though some security headers are missing. Privacy policy is present but lacks a cookie consent mechanism, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. WHOIS data for the exact domain queried is unavailable due to domain naming rules, but the website content and structure suggest a legitimate business.

O

Osborne Clarke LLP

osborneclarke.com

69

Osborne Clarke LLP is a well-established international legal practice with a history dating back to 1748. The firm operates across Europe, Asia, and the US, offering a broad range of legal services including banking and finance, corporate law, dispute resolution, ESG, intellectual property, and regulatory compliance. Their website reflects a professional and comprehensive digital presence, targeting businesses and professionals seeking expert legal counsel internationally. The firm positions itself as a trusted advisor with a strong emphasis on helping clients succeed in tomorrow's world. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery and privacy-focused analytics tools like Simple Analytics. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and rich content. Cookie consent mechanisms and privacy policies are prominently implemented, demonstrating compliance with GDPR and other privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent banners. However, no explicit security policy or incident response contact information is published, and security headers are not visibly present in the HTML. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing or unavailable, which is unusual for a reputable firm and warrants further verification. Overall, Osborne Clarke's website presents a strong business and technical profile with good privacy compliance and user experience. The main risk lies in the lack of publicly available WHOIS data and absence of explicit security policies, which should be addressed to enhance trust and transparency.

M

Metaskil Ltd

metaskil.com

69

Metaskil Ltd is a UK-based IT recruitment agency with over 30 years of experience specializing in culturally aligned candidate placement for IT roles. The company emphasizes matching candidates not only on technical skills but also on values and attitude, offering bespoke interim and permanent staffing solutions. Their market position is that of a trusted, small-sized specialist with strong client relationships and a professional online presence. Technically, the website is built on WordPress using Elementor and integrates Google Tag Manager for analytics. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is basic with a privacy and cookie policy present but no active consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility in the IT recruitment sector.

Intercity Technology is a UK-based IT service provider offering a broad range of managed IT services, cloud migration, cybersecurity, communications, and tech transformation solutions. The company targets businesses of all sizes including small, medium, large enterprises, and public sector organizations. Their market position is supported by 40 years of global tech expertise and certifications such as ISO 27001, along with partnerships like the official IT support partner for BCFC. The website is professionally designed, mobile optimized, and uses modern technologies including HubSpot CMS, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policy and incident response information are not found. WHOIS data is unavailable due to privacy protection, which is typical for this business type and does not detract from legitimacy. Overall, the website demonstrates a mature digital presence with good privacy and security practices, suitable for its business audience.

A

Amity Insulation Services Limited

amitygroup.co.uk

47

Amity Insulation Services Limited is a well-established UK-based company specializing in asbestos surveying, removal, and related environmental and safety training services. With over 30 years of industry experience, the company holds multiple certifications including ARCA awards and ISO 9001 accreditation, positioning it as a trusted leader in the Oxfordshire region. The website reflects a professional business presence with clear service offerings and comprehensive contact information. Technically, the site is built on WordPress with standard plugins and Google Analytics integration, offering good performance and mobile optimization. Security posture is solid with HTTPS enabled, though additional security headers and explicit security policies could enhance protection. Privacy compliance is addressed with visible cookie and privacy policies including consent mechanisms. The absence of WHOIS data due to querying the 'www' subdomain limits domain registration trust verification, but overall business credibility remains high based on website content and certifications.

A

Abbey Precision Ltd

abbeyprecision.com

62

Abbey Precision Ltd is a UK-based precision engineering company specializing in CNC machining of metal and plastic components. With over 30 years of experience, they serve primarily automotive, defence, scientific, and medical sectors. Their business model focuses on B2B manufacturing services, emphasizing quality and precision. The website reflects a professional and established market position with clear service offerings and certifications such as ISO 9001. Technically, the site uses modern JavaScript libraries and analytics tools, hosted on a CDN-backed platform with moderate performance and basic mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though lacking some security headers and formal privacy documentation. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency. The missing WHOIS registration data is a concern and should be investigated to confirm domain legitimacy.

LW Developments Ltd is a well-established UK-based real estate development company specializing in land acquisition, planning, and construction of residential and mixed-use schemes. With over 40 years of experience, the company holds a strong market position supported by industry certifications such as RICS and memberships like the Herts Chamber of Commerce. Their website reflects a professional and consistent brand image targeting landowners, local authorities, and residential property buyers. Technically, the website is built on WordPress with modern libraries such as jQuery and Swiper.js, hosted via Nimbus CDN with Azure DNS services. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Security posture is solid but could be improved by enabling DNSSEC, adding security headers, and publishing clear security policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. No vulnerabilities or suspicious activities were detected. Overall, the website and domain registration data align well, indicating a trustworthy and credible business presence online.

H

Heckford

heckford-advertising.co.uk

71

Heckford is a well-established digital marketing and creative agency based in Preston, UK, founded in 2015. The company offers a broad range of services including web design, SEO, social media marketing, signage, exhibitions, graphic design, illustration, CGI, photography, and media buying. Their market position is that of a trusted regional agency with a diverse client base and multiple industry accreditations, reflecting a strong reputation and professional service delivery. The website content is comprehensive, professionally designed, and targets businesses seeking marketing and creative solutions. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and SEO-friendly, with good accessibility features.

New Holland Sheet Metal is a small manufacturing service provider specializing in metal cutting, laser cutting, welding, and rolling services based in Letchworth. The website is built on WordPress using the Divi theme and hosted on a provider indicated by the nameservers 'mysecurecloudhost.com'. The technical infrastructure is basic but functional, with HTTPS enabled and moderate performance. However, the site lacks key compliance elements such as privacy and cookie policies, and no contact information or social media presence is evident in the provided content. Security posture is moderate with HTTPS but missing important security headers and DNSSEC. Overall, the site appears legitimate and established given the domain age but would benefit from improved compliance and security practices.

The website www.colliercatchpole.co.uk is currently inaccessible beyond a Cloudflare security verification challenge page, which prevents direct content access and analysis. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may not be properly registered or is misconfigured. Due to these factors, no business information, contact details, or content descriptions are available. The technical infrastructure relies on Cloudflare's security services, including Turnstile captcha, providing strong protection but limiting visibility. Security posture is strong in terms of protection but lacks visible policies or compliance indicators. Overall, the site presents a high risk due to lack of accessible information and questionable domain legitimacy.

I

iRobot Corporation

irobot.com

61

iRobot® features the best robot vacuum and mop selections for cleaning your unique home. Shop and learn more about the best robot vacuum and mop products here.

P

Patterson-UTI Energy, Inc.

patenergy.com

60

Patterson-UTI Energy, Inc. is a large energy sector company specializing in integrated drilling and completions services, power solutions, and digital performance platforms. The company operates multiple subsidiaries and partners to deliver comprehensive oilfield services across major U.S. basins. Their website reflects a mature digital presence with modern technologies and professional branding, targeting energy operators, investors, and industry professionals. Technically, the website is well-implemented with responsive design, SEO optimization, and analytics integration. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS implied but lacking visible security headers and formal incident response or vulnerability disclosure information. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance transparency.

The website www.clr.com appears to be inaccessible or inactive as indicated by the WHOIS data showing no registration record and the incomplete HTML content provided. The lack of substantive content, absence of privacy and cookie policies, and no contact information suggest the site is either not live or blocked. The technical infrastructure shows use of common web technologies such as Google Tag Manager, Typekit fonts, and FontAwesome icons, and the CMS appears to be WordPress. However, no security headers or SSL configuration details were available to assess the security posture. Overall, the site lacks critical trust and compliance indicators, resulting in a very low risk and credibility score.

S

Southern Company Gas

aglresources.com

63

Southern Company Gas is a major natural gas utility provider in the United States, serving approximately 4.4 million families and businesses. As part of the Southern Company portfolio, it focuses on delivering clean, safe, reliable, and affordable natural gas energy solutions. The company emphasizes sustainability, safety, and community engagement, with a broad portfolio of subsidiaries and marketing services. The website reflects a professional corporate presence with clear branding and relevant content tailored to residential and business customers in the energy sector. Technically, the site is built on Adobe Experience Manager, uses modern web technologies including Google Analytics and Tag Manager, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is missing or unavailable, which slightly reduces trust but does not negate the legitimacy indicated by the website content and external references.

D

Delek US Holdings, Inc.

delekus.com

70

Delek US Holdings, Inc. is a large, diversified downstream energy company operating primarily in petroleum refining, asphalt, renewable fuels, and logistics. The company operates multiple refineries in the United States with a significant crude oil refining capacity and is publicly traded on the NYSE. The website demonstrates a mature digital presence with comprehensive corporate, investor, and social responsibility content, supported by a modern technology stack including Q4 Inc's investor relations platform and multimedia integrations. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and Fortune 500 status. Overall, the website is well-designed, accessible, and trustworthy for its target audiences including investors, employees, and partners.

The website www.horacemann.com is currently inaccessible, returning a 403 Forbidden error page served by Microsoft Azure Application Gateway. This indicates that the site is blocked by a Web Application Firewall or security configuration, preventing access to any meaningful content. The WHOIS lookup failed to retrieve any registration data, suggesting the domain may be unregistered, expired, or protected by privacy services that do not disclose registrant information. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The security posture is weak as no security headers or SSL details are available, and the site is effectively non-functional for visitors. Overall, the risk is elevated due to the lack of transparency and accessibility, and the legitimacy of the domain cannot be confirmed.

LCS Technologies, Inc. is a specialized Oracle consulting firm providing comprehensive Oracle software solutions and IT support services. Their expertise spans Oracle products such as Exalogic, Enterprise Manager, Exalytics, TimesTen, OBIEE, Exadata, and PeopleSoft, targeting businesses seeking to optimize Oracle technology deployments. The company positions itself as a niche player focused on innovation and measurable business results. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and fonts, with a responsive design optimized for mobile devices. The site performs moderately well with good SEO and accessibility basics, though some advanced security headers are missing. From a security perspective, the site enforces HTTPS and uses secure forms but lacks published privacy and cookie policies, and no incident response or vulnerability disclosure information is available. The absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a professional and trustworthy business front but should improve compliance and security transparency to enhance trust and reduce risk.

The University of South Alabama is a large, comprehensive public university located on the Alabama Gulf Coast, serving a broad audience including prospective and current students, faculty, staff, and the local community. It offers over 120 academic degree programs with a strong emphasis on healthcare education and research, supported by the region's only academic healthcare system. The university positions itself as the flagship institution of the Gulf Coast, providing extensive student services, research opportunities, and community engagement. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the website employs a mature technology stack including Bootstrap, jQuery, Google Tag Manager, and various analytics and marketing tools. It is mobile-optimized and accessible, with good SEO practices. The site uses HTTPS and implements security best practices such as rel="noopener" on external links and reCAPTCHA on forms, though it lacks some advanced security headers like Content-Security-Policy. From a security perspective, the site demonstrates a solid baseline posture with HTTPS and some security best practices, but it lacks explicit incident response contacts, vulnerability disclosure mechanisms, and a cookie consent banner, which are important for compliance and transparency. The WHOIS data is unavailable, which is typical for .edu domains, and does not detract from the domain's legitimacy. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

B

BGR Group

bgrdc.com

60

BGR Group is a premier bipartisan public affairs firm based in Washington, D.C., specializing in policy advocacy, government affairs, public relations, and advisory services. With over 35 years of growth and recognition such as the Bloomberg Government 2025 Standout Firm, BGR Group serves both U.S. and international clients seeking expert guidance on navigating the policy landscape. The firm positions itself as a trusted partner with deep connections and expertise in Washington and state capitals. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Yoast SEO, reflecting a mature digital infrastructure. The site is mobile-optimized, SEO-friendly, and provides a professional user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulatory requirements. Overall, BGR Group presents a credible, professional online presence with room for enhanced privacy and security transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

U

University of Arkansas System

uasys.edu

61

The University of Arkansas System website serves as the official portal for Arkansas's largest higher education system, providing governance, strategic planning, and benefits information for its multiple campuses and units. The site targets students, faculty, staff, and stakeholders within the state's educational ecosystem. It offers clear navigation to campuses, leadership, policies, and news, reflecting a mature and well-structured public institution. Technically, the website is built on WordPress using the Genesis Framework and incorporates various plugins for accessibility, calendar management, and responsive design. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though some images lack alt text. Google Analytics is used for user tracking, but no cookie consent mechanism is present, indicating a potential compliance gap. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected in the provided data, and some accessibility improvements are needed. The WHOIS data confirms domain legitimacy with consistent registration details and a long-term expiry date, supporting the site's trustworthiness. Overall, the website is professional, credible, and safe for general audiences, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

C

City of Fayetteville

fayetteville-ar.gov

61

The City of Fayetteville's official website serves as a comprehensive portal for residents and visitors to access municipal services, pay utility bills, apply for permits, and stay informed about community events and government activities. The site is well-branded with consistent city imagery and provides clear navigation to key services and resources. The target audience primarily includes local residents, businesses, and community stakeholders. Technically, the website leverages modern JavaScript libraries such as jQuery and AlpineJS, integrates Google Tag Manager for analytics, and uses Azure Application Insights for telemetry, indicating a moderate level of digital maturity. Accessibility tools like Monsido and Google Translate enhance usability for diverse users. Security posture is adequate with HTTPS enforced and anti-forgery tokens implemented in forms, but lacks explicit security headers and published security policies. WHOIS data is incomplete or restricted, which slightly impacts trust but does not detract from the site's legitimacy given its official nature. Overall, the website is professional, functional, and trustworthy, though improvements in privacy compliance and security transparency are recommended.

Andrew Turner LLP is a small, established business specializing in bespoke blacksmith and fencing services, including gates, railings, balconies, and structural steelwork. The company targets homeowners and businesses seeking custom metalwork solutions. The website is professionally designed using WordPress.com hosting and Jetpack plugins, providing a good user experience with clear navigation and relevant content. However, explicit privacy and terms of service policies are not present, which could be improved to enhance compliance and trust. The technical infrastructure is modern and stable, though some security best practices like security headers and DNSSEC are missing. Overall, the site is secure with HTTPS and domain registration consistent with the business claims.

P

Project8ball

project8ball.com

40

Project8ball is a UK-based digital agency presenting itself as a disruptive creative and functional service provider. The website indicates a transition to a new brand, VerticalVertical.com, suggesting a strategic rebranding after 8 years of operation. The company targets businesses seeking digital agency services, emphasizing creativity and timely project delivery. The site is built on WordPress with modern plugins and frameworks, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and branding appear professional. Overall, the site is safe, professional, and moderately trustworthy but would benefit from enhanced privacy compliance and security practices.

E

Equilibrium Travel Management

eqtravel.com

50

EQ Travel, operated by Equilibrium Travel Management, is a UK-based corporate travel management company founded in 2010. The company specializes in providing tailored travel solutions for corporate clients, including clinical trial travel, event management, group travel, and online booking services. Their market position is that of an established mid-sized player with a focus on accuracy, confidentiality, and client partnership. The website is built on WordPress with modern plugins and integrates Google Analytics for tracking. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain protection but lacks advanced security headers and cookie consent mechanisms. The WHOIS data confirms legitimacy with consistent registration details and no privacy protection, appropriate for the business type. Overall, the website presents a professional and trustworthy image with room for improvement in privacy compliance and security hardening.

R

Reface Scotland

refacescotland.co.uk

49

Reface Scotland is a well-established bespoke furniture company specializing in replacement kitchen doors, fitted kitchens, bedrooms, and custom home office designs. With over 30 years of experience and a strong market position in Scotland, the company offers made-to-measure furniture solutions with a focus on quality and customer service, including free home measure and design visits. The website is built on WordPress using the Enfold theme and incorporates modern digital marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are not fully visible. Privacy compliance is lacking due to missing privacy and cookie policies, which is a notable gap. Overall, the domain registration data supports the legitimacy and longevity of the business, and the website presents a professional and trustworthy image.

The website for www.bunchrewhousehotel.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, which blocks access to any substantive content. This prevents extraction of business details, contact information, or policies. The domain WHOIS query returned no registration data, indicating the domain may be unregistered or WHOIS data is unavailable, which raises legitimacy concerns. Technically, the site uses modern front-end frameworks like Bootstrap and implements bot protection, but lacks visible security headers or SSL configuration details. No privacy or cookie policies are present, and no contact or business transparency information is available. Overall, the site exhibits a low security posture and poor user experience due to blocked content and lack of trust signals.

Gamefish is a specialized retail business focused on fly fishing equipment, country clothing, and shooting accessories, operating both a physical store in Edinburgh and an international e-commerce website. The company has a well-established market presence since 2003, catering primarily to outdoor enthusiasts and anglers. Their website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Google/Facebook for marketing and analytics. The technical infrastructure is solid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though there is room for improvement in security headers and published policies. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms. Overall, the business demonstrates credibility and professionalism with consistent branding and positive trust signals.

L

Letting Solutions Letting Agents

letting-solutions.co.uk

46

Letting Solutions Letting Agents is a professional property letting agency operating primarily in West Lothian, UK. The company offers a comprehensive range of services for tenants and landlords including property letting, management, corporate lets, and instant rental valuations. The website positions the company as a leading independent letting agent in the region, targeting local tenants and landlords. Technically, the website is built on modern frameworks such as Next.js and React, providing a responsive and user-friendly experience. The site includes rich content, clear navigation, and integrates social media and scheduling tools like Calendly. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS lookup for the domain failed due to querying a subdomain rather than the registered domain, which slightly impacts trust from a domain registration perspective. Overall, the website is professional, trustworthy, and well-structured but would benefit from enhanced privacy compliance and security header implementation.

C

Clare Florist

clareflorist.co.uk

52

Clare Florist is a UK-based family-owned florist business operating since 1996, specializing in next day flower delivery across the UK. The company offers a wide range of hand-selected flower bouquets, gift vouchers, and subscription services, targeting consumers seeking quality floral gifts for various occasions. The website is professionally designed with clear navigation, mobile optimization, and rich content that supports e-commerce transactions. Technically, the site uses modern JavaScript libraries, tracking tools, and analytics services, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, but WHOIS data is unavailable due to a domain registration anomaly, which slightly reduces trust. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

Scotia Handling Services is a UK-based small business specializing in construction equipment handling and testing services, particularly focusing on lifting equipment safety. The company has a well-established domain since 2004, indicating a stable market presence. Their website is built on WordPress using the Divi theme, incorporating standard tracking tools such as Google Analytics and Google Tag Manager. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO practices. However, it lacks comprehensive privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced compliance and security measures.

W H Malcolm Ltd operates as a well-established UK-based company specializing in logistics, rail, construction, maintenance, and sports surfaces. The company demonstrates a strong market position with multiple service divisions and recognized industry awards, targeting business customers and partners in transportation and construction sectors. The website content is professionally presented, consistent in branding, and provides comprehensive information about the company's services and corporate details. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Fonts, and multiple analytics platforms, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The WHOIS lookup failed due to querying an invalid subdomain, but company registration details and website content support legitimacy. Overall, the site is secure, compliant with GDPR, and trustworthy, with room for improvement in security policy transparency and technical security headers.

NJSR Chartered Architects LLP is a UK-based architectural firm with offices in Southport and Manchester. The website currently serves as a placeholder announcing an upcoming new website launch. Contact information for both offices is clearly provided, indicating an operational business focused on architectural services. The technical infrastructure is basic, utilizing jQuery and Nicepage for site construction, with limited SEO and accessibility features. Security posture is minimal with no detected security headers or privacy policies, and WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy or configuration. Overall, the site is functional but lacks comprehensive security and privacy compliance measures.

A

Arch Safety

archsafety.com

46

Arch Safety is a specialized training and site services provider focused on rope access, safety, and rescue training primarily serving the energy sector in Ireland. They hold leading positions in GWO and IRATA training, offering a range of accredited courses and site services tailored to industrial clients. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website uses modern frameworks such as Bootstrap 5 and jQuery, integrates Google Maps API, and employs secure HTTPS connections. The site is mobile optimized and performs moderately well, though accessibility features could be improved. No major technical issues or vulnerabilities were detected, but security headers are not visibly implemented. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, it lacks visible security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, though the professional site and accreditations mitigate some concerns. Overall, Arch Safety presents a credible and professional online presence with room for improvement in privacy compliance and security transparency. The domain registration ambiguity warrants monitoring but does not currently indicate malicious intent.

KCP Car and Commercial Ltd. is a family-owned UK-based distributor specializing in automotive parts for cars, light commercial vehicles, and trucks. The company offers a large inventory of over 50,000 part numbers from reputable brands, serving garage customers across the UK and export markets. Their business model focuses on quality products, technical support, and reliable delivery services. The website reflects a basic but functional online presence with clear contact information and business details. Technically, the website uses older web technologies including jQuery 1.4.4 and basic HTML/CSS. There is no evidence of modern CMS or frameworks, and mobile optimization is poor. The site lacks HTTPS enforcement and security headers, which poses risks to user data and trust. No privacy or cookie policies are present, indicating low privacy compliance. From a security perspective, the site shows weaknesses such as outdated libraries and missing HTTPS, which are critical vulnerabilities. The WHOIS data is unavailable due to domain naming rules violation, raising concerns about domain legitimacy. However, the website content and business information appear consistent and professional, suggesting the main domain may be valid but was queried incorrectly. Overall, the website has moderate business credibility but requires urgent improvements in security posture, privacy compliance, and technical modernization to reduce risks and enhance trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.