Security Directory

T

Takka Ltd.

takkaproductions.co.uk

56

Takka Ltd. is a UK-based technology company specializing in bespoke, fast web-based business solutions targeted at forward-looking companies and marketing agencies. Their website demonstrates a professional and accessible design built on Angular 4.1.3, incorporating modern web technologies and Google Tag Manager for analytics. The company emphasizes accessibility with customizable text size and color themes, enhancing user experience. However, the absence of explicit privacy and terms of service policies, as well as missing contact information, limits transparency and user trust. The WHOIS data for the domain www.takka.co.uk is unavailable due to domain registration issues, which raises concerns about domain legitimacy, though the website content itself appears legitimate and professional.

The website www.holdcroftlighting.co.uk is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by the Cloudflare 526 error page. The domain itself appears invalid or unregistered according to the Nominet UK WHOIS response, which states the domain name contains too many parts and cannot be registered. No business information, contact details, or policies are available on the site, and no content beyond the error page is present. Technically, the site is proxied through Cloudflare but lacks a valid SSL certificate on the backend, resulting in a complete block of user access. Security posture is poor due to this critical SSL misconfiguration, and no security headers or best practices are observed. Overall, the site is not functional and provides no business or compliance information, severely limiting trust and credibility.

H

HHUK Creative & Print Services.

hunghing.co.uk

50

HHUK Creative & Print Services operates as the UK partner for Hung Hing Printing, a major and respected printing company in Asia. The business focuses on guiding UK customers through the process of printing in Asia, offering a range of print and creative services including book printing, packaging, and specialty print products. The company positions itself as a hands-on intermediary providing UK-based account management and communication in English, targeting UK businesses seeking cost-effective and quality printing solutions in Asia. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, indicating a stable market presence since its domain registration in 2007. Technically, the website is built on WordPress with WooCommerce, utilizing modern plugins such as Yoast SEO, Contact Form 7, and Slider Revolution. It employs HTTPS with a good SSL configuration and integrates Google Analytics and Google Tag Manager for tracking. The site is moderately performant and mobile-optimized, though accessibility features are basic. SEO is well addressed through meta tags and structured data. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, representing a compliance gap. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Recommendations include adding comprehensive privacy and terms of service pages, enhancing security headers, and publishing a security policy to improve compliance and trust further.

Knight James Associates Ltd is a UK-based independent financial advisory firm established in 2001, offering key services including wealth management, mortgages and lending, and commercial insurance. The company positions itself as impartial and expert, targeting UK customers seeking professional financial advice. The website reflects a professional and consistent brand image, with clear regulatory compliance references such as FCA authorization and Financial Ombudsman Service information. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No privacy policy or incident response information is found, indicating room for compliance improvement. Overall, the domain registration data supports the legitimacy and longevity of the business, with no suspicious indicators detected.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Tyre Specialists | Sandbach | Sandbach Tyre Service Ltd

sandbachtyreserviceltd.co.uk

58

The website www.sandbachtyreserviceltd.co.uk appears to represent a small business likely related to tyre services, hosted on the Wix platform. However, the domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain may be invalid or improperly registered. The website content is minimal and primarily consists of Wix framework code with no visible business descriptions, contact information, or policies. Technically, the site uses standard Wix scripts and polyfills, with moderate performance and good mobile optimization. Security posture is weak, with no detected security headers or advanced configurations, and no HTTPS verification possible from the data. Privacy compliance is lacking, with no privacy or cookie policies found. Overall, the site lacks business credibility signals and trust indicators, resulting in a low legitimacy score and AI rating.

N

Network Scientific Recruitment

networkscientificrecruitment.com

55

Network Scientific Recruitment is a specialized UK-based recruitment agency focusing on scientific, medical device, laboratory, and biotech sectors. The company offers expert recruitment services including temporary, permanent, and contract placements, positioning itself as an award-winning leader in its niche. The website is built on a modern WordPress platform using the Divi theme and SEO optimizations, reflecting a professional digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible and content-rich but requires improvements in transparency and security to enhance trust and compliance.

The website www.mercerdesign.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK's naming rules and cannot be registered. No metadata, structured data, contact information, or business details are present on the site. The lack of accessible content and domain registration data severely limits the ability to assess the company's market position, services, or technical infrastructure. Security posture cannot be evaluated due to absence of security headers, HTTPS status, or incident response information. Overall, the site appears non-operational or misconfigured, resulting in a very low trust and legitimacy score.

Nexus Design Software Limited operates the website nexuscad.com, offering specialized 3D design software focused on kitchen, bedroom, and bathroom interiors with VR capabilities. The company targets interior designers and home design professionals, providing annual licenses for their software products. The website is built on the Weebly/EditMySite platform and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site content is professional and relevant, technical infrastructure shows signs of aging, including the use of an outdated jQuery version and lack of modern security headers. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy and cookie policies exist but lack active consent mechanisms, and no explicit security or incident response policies are publicly available.

4mystaff is a secure web platform provided by Broadstone Corporate Benefits Limited, designed to assist employers in managing pension contributions and fulfilling auto-enrolment obligations. The website targets employers requiring streamlined pension administration services, positioning itself as a niche B2B service provider within the UK finance sector. The platform offers secure login and registration functionalities, supported by anti-forgery tokens and cookie consent mechanisms, reflecting a commitment to user security and privacy compliance. Technically, the site leverages ASP.NET MVC framework with client-side libraries such as jQuery and Modernizr, indicating a mature but somewhat traditional technology stack. The website is mobile-optimized with a moderate performance profile and basic accessibility features. External dependencies include cookie consent services and fingerprinting scripts for user identification, which are implemented with user consent controls. From a security perspective, the site employs HTTPS and anti-forgery tokens, but lacks explicit security headers and documented incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies linked to the parent company’s domain. The absence of WHOIS data due to domain registration rules is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and clear business affiliation. Overall, 4mystaff presents as a professional, secure, and privacy-conscious platform serving a specialized market segment. Strategic improvements in security headers, accessibility, and transparency around security policies would enhance its posture and trust further.

B

Black Square Litho Ltd

blacksquarelitho.co.uk

51

Black Square Litho Ltd is a small, family-run printing company based in Billericay, Essex, offering a range of printing services including digital, litho, and magazine printing, as well as mailing and distribution. The company emphasizes fast, affordable printing combined with personalized customer service, targeting small to medium businesses in the local area. The website is professionally designed with clear navigation and relevant content that reflects the company's business model and market position. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and integrates third-party services like Google Analytics and Tawk.to live chat. The site is mobile-optimized and includes SEO best practices, although some accessibility features are basic. Security-wise, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit security policies. Privacy and cookie policies are present, though a cookie consent mechanism is missing. The WHOIS data is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. This inconsistency reduces trust in domain legitimacy, although the website content and business information appear authentic and professional. Overall, the site presents a moderate security posture with room for improvement in compliance and security best practices. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, clarifying domain registration legitimacy, and expanding privacy and security policy disclosures to strengthen trust and compliance.

P

Purple Creative

purplecs.com

66

Purple Creative is a small, award-winning digital agency based in North Yorkshire, UK, specializing in website design, digital marketing, graphic design, and email/cloud solutions. The company serves a UK-wide client base with a strong local presence and has established trust through client testimonials and media exposure. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with active consent mechanisms. Technically, the site uses modern web technologies including ASP.NET WebForms, Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and missing WHOIS data slightly reduce trust. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Pearces Coaches

coachhireoxford.com

62

Pearces Coaches is a small UK-based transportation company specializing in private coach hire services primarily around Oxford and surrounding areas. The company offers group transportation solutions including wedding transport and school trips, positioning itself as a trusted local service provider with a positive customer reputation. The website is professionally designed using WordPress and incorporates modern web technologies such as Yoast SEO, Cookiebot for cookie consent, and Google Tag Manager for analytics. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and Cloudflare services implied, though explicit security headers could be improved. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. Overall, the website presents a trustworthy and professional front but would benefit from enhanced transparency in privacy and security policies. The WHOIS data is unavailable due to a domain naming rules error, which introduces some uncertainty about domain registration legitimacy, though the website content itself appears legitimate.

Flashings and Fabrications is a UK-based small manufacturing business specializing in metal flashings, rainwater systems, louvre systems, gutter systems, architectural features, and rainscreen panels. The company targets construction professionals, architects, and contractors, positioning itself as a niche supplier in the UK construction sector. The website is built on WordPress with a modern tech stack including jQuery, Contact Form 7, and Google reCAPTCHA, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear contact information, enhancing user experience and trust. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks advanced security headers and incident response disclosures. WHOIS data is unavailable due to domain naming rules violation, which raises concerns about domain legitimacy but does not detract from the professional presentation of the business. Overall, the website is functional, professional, and compliant with privacy regulations, though improvements in security and domain transparency are recommended.

P

Planet Sameday Logistics Ltd

planetsameday.co.uk

52

Planet Sameday Logistics Ltd is a UK-based logistics company specializing in pallet distribution, haulage, and warehousing services primarily serving the Leicester area. With over 25 years of industry experience and membership in The Pallet Network (TPN), the company positions itself as a reliable and punctual logistics provider. Their website highlights ISO 9001 certification and offers various delivery options including time-specific and same-day services. Technically, the website is built on WordPress using Elementor and modern web technologies, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. Contact information is clearly presented, including an email, phone number, and a callback request form. Overall, the site reflects a credible small business with room for improvement in privacy compliance and security best practices.

A

Away Resorts

awayresorts.co.uk

66

Away Resorts is a UK-based hospitality company operating 25 holiday parks across multiple regions including Cornwall, Dorset, Hampshire, and Scotland. They offer a variety of accommodation options such as caravans, luxury lodges, holiday homes, and touring & camping pitches. The company targets families and holidaymakers seeking quality UK holiday experiences with a focus on comfort and convenience. Their market position is strong within the UK holiday park sector, supported by a professional and well-structured website that facilitates bookings and holiday home ownership inquiries. Technically, the website leverages modern JavaScript frameworks, cloud hosting via Microsoft Azure, and integrates multiple marketing and analytics tools such as Google Tag Manager, LinkedIn Insight, and AB Tasty. The site is well optimized for mobile devices and SEO, providing a smooth user experience. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact details. The WHOIS lookup for the domain failed due to a naming rules error from Nominet UK, but the website is fully functional and professional, indicating legitimacy. Overall, the site scores well on content quality, technical implementation, and security posture, with minor penalties for missing security transparency and incomplete WHOIS data. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing incident response visibility to improve trust and compliance.

G

GINS Limited

holisticinsurance.co.uk

54

Holistic Insurance Services, operated by GINS Limited, is a UK-based insurance provider specializing in policies for complementary therapy practitioners, counsellors, and life/business coaches. The company holds FCA authorization and offers a range of niche insurance products tailored to specific professional groups within the UK and surrounding territories. The website serves as an informational and transactional platform, providing policy details, online application links, and renewal portals. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS integration. It does not employ advanced analytics or tracking technologies, and no security headers or privacy policies are present. The site is accessible without WAF or security challenges, but mobile optimization and accessibility are basic. The domain WHOIS data is incomplete due to an error related to the 'www' subdomain, which is a DNS configuration issue rather than a registration problem. From a security perspective, the site lacks several best practices such as HTTPS verification, security headers, and published privacy or cookie policies. No contact information for incident response or data protection officers is provided. The FCA authorization and company registration details lend credibility, but the absence of privacy compliance and security features lowers the overall security posture. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved technical modernization to strengthen trust and user experience.

The website www.highdalenursery.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. The domain WHOIS lookup failed due to domain naming rule violations, suggesting the domain may not be properly registered or is misconfigured. No business, contact, or policy information is available on the accessible page, severely limiting the ability to assess the company's operations or credibility. The technical infrastructure shows use of modern frontend technologies like Bootstrap and Google reCAPTCHA, but no further content or metadata is present to evaluate digital maturity or SEO. Security posture is weak with no visible HTTPS or security headers, and privacy compliance cannot be confirmed. Overall, the site presents a high risk due to lack of transparency, blocked content, and questionable domain legitimacy.

T

Tony Hamer & Sons Ltd

tonyhamer.co.uk

51

Tony Hamer & Sons Ltd is a small UK-based haulage and decorative aggregate supply company operating primarily in Shropshire and surrounding regions. The company offers transportation services for goods and vehicles across the UK and abroad, emphasizing reliability and cost-effectiveness. The website reflects a professional business presence with clear service offerings and a consistent brand image. Technically, the site is built on the IONOS MyWebsite platform, utilizing common JavaScript libraries such as jQuery and lightbox plugins, and is hosted by IONOS. The site is mobile-optimized and has good SEO fundamentals but lacks advanced accessibility features. From a security perspective, the website uses HTTPS but lacks important security headers and includes an external script loaded over an unsecured HTTP connection, which poses a potential vulnerability. There are no visible privacy, cookie, or terms of service policies, which indicates a gap in compliance with data protection regulations such as GDPR. The WHOIS lookup failed due to domain naming rules violations, which raises concerns about domain legitimacy and registration status, although the website content itself appears legitimate and business-focused. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and technical security hardening. The absence of contact emails and phone numbers on the site limits direct communication channels for customers and security incident reporting. Strategic recommendations include securing all external resources, implementing comprehensive privacy and cookie policies, adding clear contact information, and conducting a security audit to address potential vulnerabilities. The domain registration issues should be investigated further to ensure legitimacy and trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

H

HireRight

hireright.com

73

HireRight is a global leader in employment background screening and verification services, offering a comprehensive suite of solutions including identity verification, social media searches, drug testing, and compliance checks. The company targets employers and HR professionals seeking to streamline and secure their hiring processes. Their market position is strong, supported by industry awards and a broad partner ecosystem. Technically, the website is built on modern frameworks such as Next.js and React, with extensive use of analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and business transparency. Strategic recommendations include publishing detailed security policies and improving transparency around incident response and vulnerability disclosures.

The International Tree Foundation is a small non-profit organization focused on environmental restoration through tree planting and forest conservation. Their website presents a clear mission to nurture sustainable communities and promote the benefits of trees. The organization targets a general audience interested in environmental causes and community engagement. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and standard marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and demonstrates good design and user experience. Security-wise, the site enforces HTTPS with HSTS and does not expose sensitive data, but lacks some advanced security headers and explicit privacy and cookie policies. The WHOIS data is malformed and incomplete, limiting domain registration trust analysis, but the website's professional presentation and social media presence support its legitimacy. Overall, the site is safe, professional, and trustworthy, though improvements in privacy compliance and security headers are recommended.

P

Penta International

pentainternational.co.uk

57

Penta International is an established education services provider specializing in training, consultancy, school management, and inspection services primarily in the United Kingdom and internationally. Founded in 1996, the company serves a broad audience including primary, secondary, and special schools, as well as government education bodies. The website reflects a professional and consistent brand presence with clear service offerings and client testimonials, positioning Penta International as a reputable player in the education sector. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. Hosting is via Amazon CloudFront CDN, ensuring reasonable performance and availability. The site is mobile-optimized and exhibits good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data and the registry's indication that the domain is invalid raise concerns about domain legitimacy or possible misconfiguration. No signs of malware or phishing were detected, but the domain registration inconsistency warrants further investigation. Overall, the website presents a low to moderate risk profile with strong business credibility but some gaps in privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy disclosures, and domain registration verification are recommended to enhance trust and compliance.

The website www.villageheating.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. Due to this, no metadata, structured data, or contact details are available for analysis. The lack of WHOIS data further limits the ability to verify domain legitimacy or business details. Technically, the site shows minimal content and no detectable technologies or scripts, indicating either a misconfiguration or intentional access restriction. Security posture cannot be assessed properly due to the absence of headers and content. Overall, the site appears to be blocked or restricted, resulting in a very low trust and credibility score.

N

Nant

nantgwrtheyrn.org

72

Nant Gwrtheyrn is a well-established Welsh language centre founded in 2003, specializing in Welsh for Adults as a second language. It offers intensive residential courses, accommodation, and event hosting services, focusing on promoting Welsh culture, heritage, and language. The website reflects a niche educational and cultural hospitality business with a strong community and heritage orientation. Technically, the site uses modern web technologies including Umbraco CMS, JavaScript libraries like GSAP and Swiper, and is hosted on 1&1 IONOS with secure HTTPS. The site is mobile optimized, accessible, and SEO friendly. Security posture is good with HTTPS and domain registration protections, but could improve by enabling DNSSEC and adding security headers. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism was detected. Overall, the website is professional, trustworthy, and serves its target audience effectively.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.paradigm-uk.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or metadata are available for analysis. The WHOIS query also failed to provide any registrar or registrant information, indicating privacy protection or data unavailability. Technically, the site lacks detectable technologies, scripts, or SEO metadata, and no security headers or SSL configuration details are present. This severely limits the ability to assess the site's digital maturity or security posture. From a security perspective, the 403 error suggests server-side access restrictions, which may be intentional for security or administrative reasons but also hinder transparency and trust. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in a high-risk profile and limited trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

H

HC Shipping & Chartering Ltd.

hcshipping.com

50

HC Shipping & Chartering Ltd. is a specialized dry cargo shipbroking company with a strong heritage dating back to 1997, originally partnered with Clarksons PLC and now part of the Casper Group since 2021. The company offers services in short sea and deep sea chartering along with market reports, targeting clients in the maritime shipping industry. Their market position is well established in Europe with growing global reach. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no detailed GDPR statements or terms of service. Overall, the website reflects a credible and professional business with room for improvement in security and compliance transparency.

Great Run is a prominent UK-based organizer of running events including 5k, 10k, and half marathons, with flagship events such as the AJ Bell Great North Run. The website serves runners by providing event information, training resources, results, photos, and official merchandise. The site is well-positioned in the UK running event market, targeting a broad audience from beginners to seasoned runners. Technically, the website is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the domain appears legitimate and professionally maintained, with privacy-protected WHOIS data typical for this business type.

Z

Zen Internet

hng.co.uk

47

The website www.hng.co.uk is a domain holding page hosted by Zen Internet, a reputable UK-based hosting provider. The page indicates that the domain is active but currently unused by its owner, providing basic instructions for uploading content and support contact details. The domain itself is not registered independently according to the WHOIS lookup, which failed due to domain naming rules, suggesting this is a subdomain or placeholder rather than a standalone registered domain. The website content is minimal and serves primarily as a placeholder with no active business operations or published content. From a technical perspective, the site uses basic HTML5 and CSS3 with Google Fonts for styling. There is no evidence of a CMS or advanced frameworks. The hosting provider is Zen Internet, known for reliable UK hosting services. The site is mobile optimized with a simple, clean design but lacks advanced SEO, accessibility features, or performance optimizations. No analytics or tracking scripts are present. Security posture is limited; no security headers or HTTPS status were visible from the provided data, and no privacy or cookie policies are present. The lack of WHOIS data and domain registration information reduces trustworthiness for business use. The site does not collect user data or have forms, reducing attack surface but also limiting functionality. Overall, the site is safe with no adult or explicit content, but it is a basic placeholder with minimal business credibility or security maturity. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and clarifying domain registration status to improve trust and compliance.

Haygrove Limited is a UK-based company specializing in the design, manufacture, and supply of commercial polytunnels, substrate gutter systems, and associated growing technologies. With over 30 years of experience, the company also operates farms growing berries, cherries, and organic produce across multiple countries. Their market position is that of an established international supplier and grower, serving commercial agricultural clients globally. The website reflects a professional business with clear branding, comprehensive product offerings, and a focus on sustainability and innovation. Technically, the website employs a modern technology stack including jQuery, Foundation CSS framework, Font Awesome, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Lead Forensics. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, indicating a mature digital presence. However, some accessibility features could be improved, and security headers are not detected. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS domain registration data is a notable concern, potentially indicating domain registration issues, which impacts the overall trustworthiness assessment. Overall, Haygrove's website is professional and business-focused with good content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain legitimacy and ownership. Enhancing security headers and publishing security policies would strengthen their security posture and trust with visitors.

The website www.rosedalebrickwork.com is currently inaccessible due to a Cloudflare 520 error indicating an unknown issue between Cloudflare and the origin web server. The site displays only an error page with no business content, metadata, or contact information. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered or privacy protected, which raises concerns about legitimacy. The technical infrastructure relies on Cloudflare as a proxy, but the origin server is not responding correctly. Security posture is weak due to lack of security headers and no visible HTTPS enforcement. Privacy compliance and business credibility cannot be verified due to lack of content. Overall, the site is not operational and presents significant risks for trust and security.

The website www.ceilings-and-partitions.com is currently inaccessible due to a Cloudflare Error 521 indicating the origin web server is down. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, inactive, or improperly configured. The site lacks any visible business information, contact details, privacy or cookie policies, and contains no content beyond the error message. Technically, the site uses Cloudflare as a CDN and WAF, but the origin server is not responding, resulting in a poor technical and security posture. The absence of HTTPS validation and security headers cannot be confirmed due to lack of access. Overall, the website presents a very low trust and credibility profile with critical issues preventing meaningful analysis.

C

Central Car Care

centralcarcare.co.uk

40

Central Car Care is a well-established independent car garage located in Central London, specializing in servicing and repairs for premium car brands such as Mercedes, BMW, VW, and Audi. Founded in 1958, the company offers a comprehensive range of automotive services including diagnostics, MOT testing, and bodywork repairs, targeting car owners primarily in Kensington and surrounding areas. The website reflects a professional business with a clear market position as a leading independent garage in the region. Technically, the website is built on WordPress using Elementor and several popular plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The absence of privacy and cookie policies represents a compliance gap. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic improvements in privacy compliance and security hardening would enhance the website's trust and security profile.

The website www.safeinteesvalley.org is currently inaccessible, returning a 403 Forbidden error which blocks all content and metadata retrieval. Due to this, no business information, contact details, or technical infrastructure data can be extracted or analyzed. The WHOIS query also failed with a malformed request, providing no registrar, creation, expiry, or registrant details, further limiting trust and legitimacy assessment. The lack of accessible content and WHOIS data suggests either a misconfiguration or intentional restriction of the domain. From a security perspective, the absence of accessible content and metadata prevents evaluation of security headers, SSL configuration, or compliance policies. Overall, the site’s digital maturity and security posture cannot be positively assessed, resulting in a low trust and credibility score.

W

Wisdom Toothbrushes Limited

wisdom-toothbrushes.com

49

Wisdom Toothbrushes Limited operates a professional e-commerce website specializing in oral care products including manual and power toothbrushes, teeth whitening, gum health, and eco-friendly products. The company targets general consumers in the UK and has a strong market presence supported by over 200 years of brand heritage. The website is well-branded, consistent, and provides comprehensive product ranges and oral health advice. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript frameworks and caching technologies to deliver a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, with clear contact information and active social media engagement.

S

ServiceCal Ltd

servicecal.co.uk

49

ServiceCal Ltd is a UK-based calibration and repair service provider accredited by UKAS 17025 since 1985. The company offers a broad range of calibration and repair services for various instruments, serving businesses across the UK, particularly in the Northwest and Greater Manchester area. Their business model includes laboratory and on-site calibration, managed services, and nationwide collection and delivery. The website is professionally designed with clear navigation and good content quality, supporting their market position as an established calibration laboratory. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security measures include HTTPS and Google reCAPTCHA, but lack visible security headers and explicit security policies. Privacy compliance is partial, with privacy and cookie policies present but no active consent mechanism. The security posture is moderate; no critical vulnerabilities or exposed sensitive data were detected, but the absence of security headers and incomplete privacy compliance are areas for improvement. The WHOIS lookup failed due to domain naming issues, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website presents a trustworthy and professional business front, but domain registration inconsistencies and some security best practices gaps suggest the need for further verification and enhancements to strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

TCSJOHNHUXLEY

tcsjohnhuxley.com

49

TCSJOHNHUXLEY is a well-established company founded in 2003, specializing in manufacturing and supplying live gaming solutions and services to casinos and iGaming operators worldwide. The company positions itself as a global leader in the gaming equipment industry, offering a broad range of products including gaming tables, chip and cash management systems, electronic gaming solutions, and servicing support. The website reflects a professional and consistent brand image, targeting a specialized audience in the gaming sector. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by popular plugins such as Yoast SEO and WPML for multilingual support. The site uses modern JavaScript libraries like Swiper and AOS for UI effects and integrates Google Analytics and Tag Manager for tracking. Performance and mobile optimization are good, though accessibility features are basic. Hosting and DNS are managed by reputable providers, but DNSSEC is not enabled. From a security perspective, the site uses HTTPS and includes reCAPTCHA on its contact form, indicating attention to basic security practices. However, the absence of DNSSEC, security headers, and explicit security or incident response policies suggests room for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR statements on the contact form, but lacks a cookie consent mechanism. No direct company contact emails or phone numbers are publicly listed, which may affect user trust. Overall, the website is trustworthy and professional with a strong business credibility score. The security posture is moderate, with recommendations to enhance DNS security, implement security headers, and improve privacy compliance. The site content is safe for general audiences, focused on gaming equipment without any adult or explicit material.

S

SAS International

sasint.co.uk

59

SAS International is a well-established British manufacturer specializing in metal ceilings and bespoke architectural metalwork, serving commercial clients across the UK and internationally. The company positions itself as a leader in innovation, acoustic expertise, and quality manufacturing, with a strong portfolio of landmark projects. Their website reflects a mature digital presence with comprehensive product information, legal compliance documentation, and active social media engagement. Technically, the website employs modern JavaScript libraries, tracking tools, and responsive design frameworks such as Bootstrap. It integrates multiple analytics and marketing pixels, including Google Analytics, Facebook Pixel, and Pinterest tracking, indicating a moderate level of user tracking balanced with privacy compliance. The site uses HTTPS with reCAPTCHA v3 for bot protection, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it could improve by publishing a security policy, incident response contacts, and implementing additional HTTP security headers. The domain WHOIS data aligns well with the business claims, showing a long-established domain with consistent registration details, enhancing trustworthiness. Overall, SAS International's website is professional, secure, and compliant with privacy regulations, supporting its market position as a reputable manufacturer. Strategic improvements in security transparency and accessibility could further strengthen its digital maturity and trust.

The website www.acornlabels.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is invalid or misconfigured. No business, contact, or policy information is accessible on the site, severely limiting the ability to assess the company's operations or legitimacy. The technical infrastructure shows use of modern libraries such as Bootstrap and Google reCAPTCHA, but no HTTPS or security headers information is available. Overall, the site exhibits a low security posture and poor digital maturity due to the blocking mechanism and lack of transparency.

M

Mercury Academic Ltd

accurate-solutions.co.uk

56

Mercury Academic Ltd is a specialized software provider offering a leading administration system tailored for Oxbridge colleges, with a strong focus on quality, flexibility, and long-term customer collaboration since 1990. Their business model centers on B2B software solutions, consultancy, and training services targeted at academic institutions within Oxford and Cambridge. The website reflects a professional and consistent brand presence, emphasizing their niche market leadership. Technically, the site is built on Joomla CMS using the Helix Ultimate framework, incorporating modern web technologies such as Bootstrap, jQuery, and Google Fonts. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections, though lacking advanced security headers and formal security policies. Privacy compliance is basic, with a cookie consent banner and a privacy policy page, but no explicit GDPR compliance statements or terms of service. Overall, the domain registration is transparent and consistent with the business identity, supporting trustworthiness. The site uses Google Analytics for user tracking at a moderate level. No critical security issues or suspicious content were detected.

W

Waterfront Conference Company

waterfrontconferencecompany.com

52

Waterfront Conference Company is a specialized event organizer focusing on transport and infrastructure sectors including planning, rail, energy, and ports. The company targets senior professionals and decision makers, offering conferences, events, and training services. The website reflects a mature business with over 30 years of experience, positioning itself as a leading provider in its niche. Technically, the site is built on WordPress with modern frameworks and libraries such as Bootstrap 5, jQuery, and FontAwesome, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly with Yoast SEO plugin usage. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and advanced security headers. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the site is professional, trustworthy, and business-focused with no signs of malicious or adult content.

H

Hops & Barley

hopsandbarley.org

56

Hops & Barley is a UK-based small retail business specializing in online sales and delivery of alcoholic beverages including beer, cider, spirits, wine, and related products. The company emphasizes convenience with free delivery offers in select postcodes and wholesale services. The website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and marketing tools such as Google Analytics and Mailchimp. The presence of an age verification gate demonstrates compliance with legal requirements for alcohol sales. Security posture is moderate with HTTPS enforced but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent with the business claims, supporting legitimacy.

K

HOME | K Howley Logistics

khowley.co.uk

54

The website www.khowley.co.uk appears to be a small-scale or personal site hosted on the Wix platform. The content is minimal and lacks clear business information, contact details, or privacy policies. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is not properly registered or is invalid. This raises significant concerns about the legitimacy and ownership of the domain. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. No security policies or incident response information are present, and no external business or partner domains are linked. Overall, the site has a weak security posture and poor privacy compliance, with minimal trust indicators.