Security Directory

The website at www.razzamatazz.co.uk appears to be a parked domain with minimal content primarily consisting of consent management scripts and advertising iframes. There is no visible business information, contact details, or privacy and terms policies. The WHOIS lookup failed due to domain naming rules violations, indicating the domain may not be properly registered or is invalid. This severely impacts the trustworthiness and legitimacy of the website. Technically, the site uses a Consent Management Platform to handle cookie consent but lacks HTTPS/SSL information and security headers, which are critical for secure web presence. The advertising content includes external domains some of which are suspicious, and no analytics or business intelligence tools are evident. Overall, the site lacks professionalism, business credibility, and security maturity.

D

Dakar Cars Ltd

dakar.co.uk

60

Dakar Cars Ltd is a well-established independent automotive service provider specializing in Land Rover vehicles, operating since 1991 in the UK. The company offers a comprehensive range of services including servicing, repairs, MOT testing, diagnostics, and parts sales. Their market position is strengthened by industry awards and a loyal local customer base. Technically, the website is built on the Duda platform using modern JavaScript libraries and is hosted on a reliable CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a published privacy policy. The absence of WHOIS data due to domain registration issues introduces some trust concerns, though the website content and business information appear legitimate. Overall, the site demonstrates good professionalism and business credibility but would benefit from improved privacy and security practices.

S

Scolmore Group

scolmore.com

61

Scolmore Group operates a website focused on wiring accessories and circuit protection products for domestic, commercial, and industrial use. The company appears to be an established UK-based manufacturer with a domain registered since 1998, indicating a mature business presence. The website's technical infrastructure includes modern font libraries, Cloudflare DNS, and Google Tag Manager for analytics and tracking. However, the site lacks visible privacy and cookie policies, and no explicit contact information or security policies are present in the analyzed content. Security posture is moderate with HTTPS enabled and CSRF tokens present, but missing security headers and vulnerability disclosure mechanisms reduce the overall security maturity. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a long registration history, supporting legitimacy. Overall, the website is functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

The Honourable Society of Lincoln's Inn is a historic and prestigious legal society based in central London, dedicated to the qualification, training, and development of barristers. The website reflects a mature organization with a strong focus on member services, education, and heritage, supported by a well-structured and content-rich digital presence. The organization serves barristers, law students, and legal professionals, offering services such as accommodation, events, scholarships, and a renowned law library. Technically, the website is built on WordPress with modern tools like Google Tag Manager and reCAPTCHA, ensuring a good balance of performance, SEO, and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data for the exact domain is unavailable due to Nominet UK naming rules, but the website's legitimacy is supported by consistent branding and external references. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

T

The Stage

thestage.co.uk

67

The Stage is a well-established UK-based media publication specializing in theatre news, reviews, interviews, and job listings. It serves theatre professionals and enthusiasts with a comprehensive range of content and services including subscription options and event information. The website demonstrates a mature digital presence with a professional design and consistent branding, leveraging modern web technologies and CDN hosting for performance. Security posture is moderate with HTTPS usage and CSRF tokens, but lacks visible security headers and explicit privacy policies. The WHOIS lookup failed due to querying the 'www' subdomain instead of the registered domain, but the website content and structure strongly indicate legitimacy and a trusted brand in the UK theatre media sector. Overall, the site is safe, professional, and well-positioned in its niche.

Platinum Domains is a UK-based small business specializing in the sale of premium, brandable domain names with a focus on fast and secure transfers. The company leverages a modern React-based website offering clear pricing and live chat support to facilitate domain purchases. Their market position is that of a trusted domain broker with transparent pricing and professional service. Technically, the website employs modern web technologies including React and Radix UI, with secure payment processing via Square and a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure payment methods, though the absence of explicit security policies and incident response information suggests room for improvement. Overall, the domain registration details align well with the business purpose, indicating legitimacy and consistency. The website is safe for general audiences with no adult or questionable content detected.

M

Mintec (part of Expana)

mintecglobal.com

67

Mintec, now part of Expana, is a specialized B2B provider of global commodity price data and market intelligence focused on the food industry. The company positions itself as a leading independent source for commodity pricing and analytics, targeting professionals and businesses in the food sector. The website reflects a professional and consistent brand image, leveraging HubSpot CMS and integrating advanced marketing and analytics tools to support its business model. Technically, the site employs modern web technologies including HubSpot, jQuery, Google Analytics, and Cookiebot for privacy compliance, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which are areas for improvement. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is well-designed and functional, with good privacy compliance and extensive user tracking, but would benefit from enhanced transparency and security disclosures.

T

Trenton Construction

trentonconstruction.co.uk

45

Trenton Construction is a UK-based small business specializing in full design and build construction services, collaborating with local architectural practices. The website is built on WordPress using Elementor and incorporates anti-spam measures via CleanTalk. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of privacy and terms of service policies and the lack of visible contact information reduce the overall compliance and trustworthiness. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Overall, the website presents a professional front but would benefit from enhanced compliance and security transparency.

C

Caravan Park Electrical Services Ltd

cpes.co.uk

63

Caravan Park Electrical Services Ltd (CPES) is a well-established UK-based company specializing in the design, manufacture, and installation of electrical distribution systems for the leisure industry, particularly caravan parks, holiday parks, and touring parks. Founded in 1982 and headquartered in Spilsby, Lincolnshire, CPES holds a strong market position as a leader in its niche with a broad product range and nationwide coverage. The company emphasizes innovation and bespoke solutions, serving both UK and European markets. Their website reflects a professional and trustworthy business with clear contact channels and certifications such as NICEIC, BHHPA, and CHAS. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Tag Manager, and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, though some HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, CPES demonstrates a solid security posture and compliance with privacy regulations such as GDPR, supported by visible privacy and cookie policies. The business credibility is high, supported by transparent contact information, certifications, and a long domain registration history consistent with the company's claimed founding date. There is no evidence of malicious or suspicious activity, and the website content is safe for general audiences. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

O

Open GI

opengi.co.uk

67

Open GI is a well-established specialist technology partner providing innovative insurance software solutions primarily for brokers, MGAs, and insurers in the UK and Ireland. The company offers a comprehensive suite of services including policy administration systems, product management, digital self-serve solutions, and support services. With over 45 years of market presence and a customer base exceeding 600, Open GI holds a strong position in the insurance technology sector. The website reflects a professional and modern digital presence, leveraging Webflow CMS and integrating advanced tracking and analytics tools such as Google Tag Manager and Microsoft Clarity. Security practices are generally sound with HTTPS enforced and a robust cookie consent mechanism, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature digital infrastructure aligned with business goals and compliance requirements.

I.S. Sundries operates as a UK-based wholesale supplier specializing in florist supplies, including floral foam, funeral tributes, flower food, and floristry tools. The company targets professional florists and wholesale buyers, positioning itself as a reliable trade-only supplier with next day delivery. The website is built on the BigCommerce platform, leveraging modern web technologies and integrations such as Google Analytics 4, Klaviyo for marketing, and Freshchat for customer support. The technical infrastructure is robust, with Cloudflare providing DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced, consent management for cookies, and no visible vulnerabilities. Privacy policies are present and GDPR compliant, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature e-commerce presence with good business credibility and technical implementation.

B

Bromwall Ltd

bromwall.co.uk

44

Bromwall Ltd is a specialist commercial insurance brokerage based in the United Kingdom, offering tailored insurance solutions for commercial, business, and industrial clients. With over 50 years of expertise, the company positions itself as a trusted partner providing bespoke coverage across multiple insurance sectors including goods in transit, liability, financial, property, business, and motor fleet insurance. The website reflects a professional and consistent brand image, targeting businesses seeking comprehensive insurance protection. Technically, the site is built on WordPress with modern frameworks such as UIkit and integrates SEO and user engagement tools like Yoast SEO and Chaty plugin. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and formal security policies on the site. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

Thurston Group

thurstongroup.co.uk

52

Thurston Group is a UK-based company specializing in modular building solutions, positioning itself as a leading provider in the UK market. The website is built on WordPress using the Divi theme and optimized with Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure is standard for a medium-sized business, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

A

Air Control Industries Ltd

aircontrolindustries.com

70

Air Control Industries Ltd is a well-established UK-based manufacturer specializing in industrial air movement solutions including fans, air knife systems, and blowers. With over 50 years of engineering excellence since its founding in 1969, the company serves industrial and manufacturing sectors globally. The website reflects a professional B2B business model targeting industrial clients requiring quality air delivery systems. Technically, the site is built on WordPress with Divi theme and WooCommerce, integrating multiple marketing and analytics tools such as HubSpot, Hotjar, and LinkedIn Insight. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but explicit security headers and a vulnerability disclosure policy are absent. The lack of WHOIS data reduces domain trustworthiness, though the website content and branding suggest legitimacy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

Crown Green Bowler operates as a specialized retail e-commerce business focused on crown green bowls, lawn bowls, indoor bowls, and related accessories. The company, part of DGS (Grinding Wheels and Machines) Ltd., has over 25 years of experience serving bowling enthusiasts primarily in the UK. Their offerings include a wide range of products such as bowls, bags, clothing, jacks, and engraving services, supported by a showroom and trade-in options. The website is professionally designed with clear navigation and a mobile-optimized interface, supporting a positive user experience. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries including jQuery and Tiny Slider. It integrates Google Analytics and Google Maps API for analytics and location services, respectively. Payment integration with Barclays and Stripe is indicated, although Stripe's public key is empty. The site uses HTTPS, but lacks explicit security headers, which could be improved. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. Security posture is moderate; the site uses secure forms and does not expose sensitive data in the HTML. However, the absence of security headers and vulnerability disclosure mechanisms suggests room for enhancement. WHOIS data for the domain queried is unavailable due to an invalid domain name error, likely caused by querying the 'www' subdomain as a domain. Despite this, the website content and business information are consistent and trustworthy. Overall, Crown Green Bowler presents a credible and professional online presence with a solid business foundation. Strategic improvements in security headers, WHOIS transparency, and accessibility could further strengthen their digital maturity and trustworthiness.

Q

Quaife Engineering

quaife.co.uk

46

Quaife Engineering Ltd is a well-established British manufacturer specializing in automotive drivetrain products, including performance transmissions, gearkits, and differentials. The company targets motorsport professionals, OEMs, and classic car enthusiasts, positioning itself as a reputable player in the transportation and manufacturing sectors. Their business model focuses on manufacturing and direct sales, supported by technical and customer service offerings such as warranty registration and technical support. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimization via Yoast SEO Premium. It integrates essential marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs security measures like HTTPS and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and accessibility, though some security headers could be enhanced. From a security perspective, the site maintains a strong posture with encrypted connections and secure form handling. However, it lacks publicly available security policies and incident response information, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, offering a positive user experience and clear business credibility. The WHOIS lookup failure is due to querying a non-registrable subdomain rather than the main domain, and does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts.

B

Bibby Engineers LTD

bibbyengineers.co.uk

47

Bibby Engineers LTD is a well-established manufacturing company specializing in plastic injection moulding and precision engineering services. With over 75 years of history and a strong presence in Cornwall, UK, the company offers a comprehensive range of services including tool making, secondary operations, product design, and recycling initiatives. Their market position is that of a quality-focused, customer-centric manufacturer serving diverse production volumes from prototypes to mass production. The website reflects a professional and consistent brand image with clear service offerings and a focus on reshoring and sustainability. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as PayPal for payments and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced, secure forms, and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible cookie consent and privacy policies aligned with GDPR. Overall, the website presents a credible and trustworthy digital presence for the business.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

I

Internet Brands

internetbrands.com

68

Internet Brands operates as an online media and e-commerce platform provider, leveraging the Wix website builder for its digital presence. The website shows moderate technical maturity with standard cookie consent and Google Tag Manager integration, but lacks visible privacy policies, contact information, and WHOIS transparency. Security posture is basic with HTTPS enabled but missing advanced security headers and incident response details. Overall, the site appears functional but lacks comprehensive compliance and trust signals, which may impact user confidence and regulatory adherence.

A

Academy of General Dentistry

agd.org

64

The Academy of General Dentistry (AGD) is a professional association serving over 40,000 dentists by providing continuing education, advocacy, and practice resources. The website is well-branded and targets dental professionals seeking career advancement and educational opportunities. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, Facebook Pixel, Bing UET, and Crazy Egg for analytics and marketing, built on the Telerik Sitefinity CMS platform. The site demonstrates good mobile optimization and SEO practices but lacks visible privacy and cookie policies in the provided content. Security posture is moderate with HTTPS implied but missing explicit security headers in the analyzed content. Overall, the domain appears legitimate despite the absence of WHOIS registrant details, likely due to privacy protection. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

The University of North Georgia Alumni Association website serves as a digital hub for alumni engagement, offering membership opportunities, events, scholarships, and ways to stay connected with the university community. The site is professionally designed using the Squarespace platform, featuring clear navigation and a consistent brand presence. Social media integration with Facebook, Instagram, and Flickr supports community interaction. Technically, the site benefits from HTTPS and HSTS for secure communications, though additional security headers could enhance protection. Privacy compliance is limited by the absence of dedicated privacy and terms of service pages, and WHOIS data is unavailable, which restricts domain trust verification. Overall, the site is functional and trustworthy for its intended audience but could improve in compliance and security transparency.

Crum & Forster is a well-established insurance company specializing in property & casualty, accident & health, and specialty insurance solutions. With a history spanning approximately 200 years, it operates as a true underwriting company empowered to provide expert risk management services. The company targets commercial clients and insurance brokers, offering a broad range of insurance products including surety bonds and specialty lines. The website reflects a mature digital presence with professional branding and comprehensive service information. Technically, the site is built on WordPress, leveraging modern analytics and tracking tools such as Google Analytics and LinkedIn Insight, and implements GDPR-compliant privacy and cookie policies with consent management via OneTrust. Security posture is strong with HTTPS enforcement, security headers, and reCAPTCHA integration, though explicit security and incident response policies are not publicly available. The domain WHOIS data is unavailable, which raises some concerns about registration transparency, but the overall business credibility is supported by consistent branding and external references to its parent company, W. R. Berkley Corporation.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

The University of Maryland, Baltimore

umaryland.edu

66

The University of Maryland, Baltimore (UMB) is a prominent public university specializing in health, law, and human services education, research, patient care, and public service. It holds a strong market position as the state's leading institution in these sectors, serving a diverse audience including students, healthcare professionals, legal experts, and public service workers. The website reflects the institution's commitment to excellence and accessibility, featuring comprehensive content and professional branding. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Google Tag Manager, and accessibility tools, hosted on a CMS platform likely TerminalFour. The site demonstrates good performance, mobile optimization, and strong accessibility compliance, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and integrates security best practices, though explicit security headers could be more visible. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR considerations. The absence of WHOIS data is noted but likely due to .edu domain registration norms, not detracting from the site's legitimacy. Overall, the site presents a low-risk profile with strong business credibility and technical maturity, supporting its role as a trusted educational institution.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

State of Nebraska

nebraska.gov

62

Nebraska.gov is the official government website for the State of Nebraska, providing a centralized portal for citizens and businesses to access government resources, news, statistics, and online services. The site targets residents, businesses, and visitors of Nebraska, offering key services such as government information, business licensing, employment resources, education details, and tourism information. The website is positioned as a trusted and authoritative source for state government interactions. Technically, the website employs a modern tech stack including jQuery, Masonry layout, Google Analytics, Google Custom Search, and Google Translate services. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and explicit privacy mechanisms are missing. Performance is moderate, with room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, it lacks visible security headers, a cookie consent mechanism, and publicly available security or incident response policies. The WHOIS data is incomplete or redacted, which is unusual for a government domain, slightly reducing trustworthiness. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent and privacy enhancements, publishing security policies, and improving WHOIS transparency. These steps will strengthen trust, compliance, and security culture for Nebraska.gov.

SeaProducks, Inc. is a specialized wholesale supplier of geoduck clams based in Tacoma, Washington, serving customers in the USA and Canada. The company offers both aquaculture and wild geoduck clams, sourcing from local growers and tribal harvests. Their market position is niche, focusing on quality seafood products for wholesale buyers. The website is built on WordPress and hosted likely via GoDaddy, featuring a professional but basic design with clear contact information. Technical infrastructure is moderate with room for improvement in mobile optimization and SEO. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

C

City of Worcester

worcesterma.gov

64

The City of Worcester's official website serves as a comprehensive digital portal for residents, businesses, visitors, and government employees. It provides extensive information on city services, events, employment opportunities, and civic engagement. The site is well-branded, professionally designed, and optimized for mobile and accessibility standards, reflecting a mature digital presence for a large municipal government entity. Technically, the site leverages Drupal 11 CMS, integrates modern libraries such as Font Awesome and Google Tag Manager, and employs standard security headers and HTTPS encryption, indicating a solid security posture. Privacy and cookie policies are clearly presented with consent mechanisms, supporting compliance with GDPR and other regulations. While WHOIS data is incomplete due to the .gov domain restrictions, the domain's legitimacy is supported by consistent branding and authoritative content. Overall, the website demonstrates a strong balance of usability, security, and compliance suitable for a government organization.

S

Society of Interventional Radiology

sirweb.org

69

The Society of Interventional Radiology (SIR) is a well-established nonprofit professional medical society representing interventional radiologists globally. Founded in 1973, it serves a large membership base including physicians, trainees, and clinical associates. The organization provides a broad range of services including education, advocacy, research funding, clinical data registries, and publications, positioning itself as a leader in the interventional radiology field. The website reflects this professional stature with comprehensive content, clear navigation, and a strong focus on member and patient engagement. Technically, the website is built on the Umbraco CMS platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. It employs HTTPS with good SSL configuration and uses reCAPTCHA v3 to secure its contact forms. The site is mobile-optimized and accessible, with good SEO practices evident through meta tags and structured data. Cookie consent and privacy policies are prominently implemented, indicating a commitment to privacy compliance. From a security perspective, the site demonstrates solid practices including HTTPS enforcement and spam protection on forms. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the analyzed content. WHOIS data is unavailable or privacy-protected, which is common for nonprofit organizations and does not detract from the site's legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its audience effectively. Strategic recommendations include adding security headers, publishing a security policy, and implementing a security.txt file to improve transparency and incident response readiness.

R

Reyes Holdings

reyesholdings.com

63

Reyes Holdings is a global leader specializing in the production and distribution of food and beverage products. The company operates an enterprise-scale business model focused on B2B distribution, fleet management, and brand partnerships. Their market position is strong, supported by a professional and comprehensive website that highlights their business units, brands, and career opportunities. The website content is well-structured and targeted towards business partners and potential employees. Technically, the website is built using modern frameworks such as Next.js and React, hosted on a CDN for fast performance and optimized for mobile devices. The presence of Google Tag Manager and OneTrust indicates a mature approach to analytics and privacy compliance. The site demonstrates good SEO and accessibility practices. From a security perspective, the website enforces HTTPS and includes standard security headers, contributing to a solid security posture. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance transparency and trust. The absence of WHOIS data is a concern but may be due to privacy protection or technical issues. Overall, the site appears legitimate and professional. Strategically, Reyes Holdings should consider publishing explicit security and incident response policies and implementing a vulnerability disclosure program to further strengthen their security culture and compliance posture.

I

Irr Supply Centers, Inc.

irrsupply.com

52

Irr Supply Centers, Inc. is a well-established wholesale distributor specializing in plumbing, heating, cooling, refrigeration, and electrical equipment and supplies. With a strong market presence in Western New York and Pennsylvania, the company serves contractors and businesses with multiple physical locations and a comprehensive product offering. The website reflects a professional business model focused on B2B distribution, supported by online ordering and customer loyalty programs. The company emphasizes service guarantees and customer satisfaction, reinforcing its market position as a leading distributor in its sectors. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Maps API for location services, and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The infrastructure is supported by Network Solutions as the registrar, with HTTPS enabled but lacking advanced DNS security features like DNSSEC. From a security perspective, the site demonstrates basic security hygiene with HTTPS and reCAPTCHA on forms but lacks published privacy, cookie, or security policies. No security headers were detected, and DNSSEC is not enabled, which presents opportunities for improvement. The absence of vulnerability disclosure or incident response information indicates a gap in transparency and readiness. Overall, the security posture is moderate but could be enhanced to meet higher compliance and trust standards. The overall risk assessment suggests a legitimate and trustworthy business with a solid online presence but with room to improve privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response contacts to enhance trust and compliance.

M

Mendes & Mount LLP

mendes.com

60

Mendes & Mount LLP is a well-established New York-based law firm specializing in insurance and reinsurance law with over 100 years of experience. The firm offers a broad range of legal services including professional liability, litigation, cyber liability, and reinsurance arbitration. Their website reflects a professional and consistent brand image, targeting insurance companies and legal professionals seeking specialized counsel. The business model is focused on providing expert legal services in a niche market, supported by a medium-sized team of nearly 100 lawyers. Technically, the website is built on WordPress using the PaperStreet theme, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly with structured data implemented for enhanced search presence. Security posture is solid with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, lacking a cookie consent mechanism despite the use of tracking scripts. Overall, the website is trustworthy, professional, and well-positioned in its market niche.

J.A.McNicholl & Company Limited is a small UK-based accounting firm established in 1982, offering Chartered Certified and Management Accounting services. The company targets businesses seeking financial management and business assistance, with key services including new business start-up support and Making Tax Digital compliance. The website is built on the BaseKit CMS platform and hosted by Fasthosts, featuring basic design and navigation with moderate mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies implemented. WHOIS data is unavailable due to domain naming rules violation, raising concerns about domain legitimacy despite professional website content. Overall, the website presents a moderate risk profile with recommendations to improve security, privacy compliance, and domain registration transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.al-consulting.co.uk currently displays only a minimal placeholder message indicating it is under construction, with no additional content, metadata, or contact information. The domain WHOIS lookup failed due to a naming rules violation, suggesting the domain is invalid or improperly registered. This severely limits the ability to assess the business or technical maturity of the site. Technically, the site lacks HTTPS, security headers, and any detectable technologies or CMS, indicating a very low digital maturity level. Security posture is weak due to absence of SSL and security best practices. Overall, the site presents a high risk due to lack of content, invalid domain status, and no visible security or compliance measures.

Truro Arts Company operates as a prominent independent art shop and creative hub located in Truro, Cornwall, UK. The business offers a wide range of art supplies catering to beginners through professional artists, alongside hosting art workshops under the Cornwall School of Art brand. Complementing its retail and educational services, the company runs an arts café and provides venue hire with catering options, positioning itself as a community-focused creative destination. The website reflects a medium-sized business with a clear market position as the largest independent art shop in the South West region. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Cookie Law Info, leveraging jQuery and other JavaScript libraries for UI components like sliders and lightboxes. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Tracking is implemented via Google Analytics and Facebook SDK, with a cookie consent mechanism in place, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks advanced security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS lookup failed due to querying the 'www' subdomain instead of the registered domain, but the website content and contact information suggest a legitimate and established business. Overall, the website presents a professional and trustworthy online presence with room for improvement in security best practices and transparency. Strategic recommendations include implementing security headers, publishing a security policy, and maintaining up-to-date software to enhance security posture and compliance.

Magna Vitae Trust for Leisure & Culture is a UK-based non-profit organization providing a broad range of leisure, fitness, cultural, and community activities. Their services include fitness classes, theatre performances, swimming lessons, and community engagement programs, targeting a general audience interested in health, wellbeing, and cultural enrichment. The organization operates multiple leisure venues and maintains a strong digital presence with social media integration and online booking capabilities. Technically, the website is built on WordPress and leverages modern web technologies such as AlpineJS, jQuery, and Typekit fonts. It uses Cloudflare for DNS and CDN services, and integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good SEO practices and accessibility features, although some accessibility improvements could be made. From a security perspective, the site enforces HTTPS, uses domain locking mechanisms, and provides a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and some advanced security headers, and does not publicly disclose a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid security posture and digital maturity appropriate for a medium-sized non-profit organization. Strategic improvements in security headers, DNSSEC adoption, and transparency in privacy and security policies would enhance trust and compliance further.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

O

Order Office Furniture

orderofficefurniture.co.uk

61

Order Office Furniture is a UK-based specialist retailer of executive office furniture, offering a wide range of desks, chairs, storage solutions, and meeting tables. Established in 2010, the company operates both an 8,000 sq ft physical showroom in Huddersfield and an online e-commerce platform powered by Shopify. They provide additional services such as room planning and installation, targeting businesses and individuals seeking quality office furnishings. The company enjoys a trusted market position supported by positive customer reviews and a comprehensive product offering.

The website www.sizzlewebdesign.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site's content. The WHOIS lookup for the domain failed due to the domain name violating Nominet UK's naming rules, suggesting the domain is either invalid or misconfigured. No business, contact, or policy information is available on the page, preventing a full assessment of the company's operations or compliance posture. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the site scores low on content quality, security posture, and business credibility due to the blocking and lack of accessible information.

L

Linda Johnson Interiors

lindajohnsoninteriors.co.uk

42

Linda Johnson Interiors is a small, family-run bespoke interior design business established in 1987, specializing in made-to-measure curtains, blinds, roman blinds, and soft furnishings primarily serving Derby and surrounding areas. The company emphasizes personalized service, quality workmanship, and customer satisfaction, supported by a strong local reputation and testimonials. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO, with integration of social media and WhatsApp for customer engagement. Technically, the site is moderately performant and mobile-optimized but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks formal security policies, incident response contacts, and security headers such as Content-Security-Policy. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable compliance gap. Overall, the business is credible and trustworthy with a well-presented online presence but should improve privacy and security disclosures to enhance compliance and user trust.

Domestic Property Surveys is a small, established UK-based company specializing in residential property surveys including Homebuyer and Building Surveys across Kent, London, and the South East of England. The company positions itself as an independent and reliable provider with a clear regional focus. Their website is built on the HubSpot CMS platform, leveraging modern web technologies and includes structured data to enhance SEO and business visibility. The site is well-designed, mobile-optimized, and provides clear navigation and contact information. Security posture is good with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent banner but lacks a dedicated privacy policy page. Overall, the website reflects a professional and trustworthy business with room for enhanced privacy and security transparency.

T

Toyota United Kingdom

jemca.co.uk

68

Toyota United Kingdom operates a large and award-winning dealer group under the Jemca Toyota brand, serving the UK automotive market with new and used Toyota vehicles. The website is part of the official Toyota UK domain, reflecting a strong market position and trusted brand presence. The site targets UK consumers interested in Toyota vehicles, offering comprehensive dealer services across 32 branches. Technically, the website leverages modern technologies including Adobe Experience Manager, React components, and robust analytics tools such as Datadog RUM and Google Tag Manager. It employs industry-standard security practices including HTTPS, bot protection via hCaptcha, and cookie consent management through OneTrust. Despite the WHOIS lookup failure due to domain naming rules for subdomains, the domain's legitimacy is supported by its association with the official Toyota UK domain. Overall, the site demonstrates a mature digital infrastructure with good security posture and compliance practices.

L

Lea Motors

leamotors.com

59

Lea Motors is an established independent automotive garage located in Cheshunt, UK, offering a comprehensive range of car and van repair, servicing, and MOT testing services. The business targets local motorists and commercial vehicle owners, including those with hybrid and electric vehicles. The company holds multiple industry certifications and approvals, enhancing its market credibility and trustworthiness. The website is built on WordPress, leveraging modern web technologies and CDN services to deliver a responsive and user-friendly experience. Privacy and cookie policies are clearly presented, and contact information is readily accessible. Security posture is good with HTTPS enabled and Cloudflare DNS, though improvements such as DNSSEC and security headers could be made. Overall, the website reflects a professional and trustworthy business with a solid digital presence.

R

Regency Executive Travel

regencyexectravel.co.uk

60

Regency Executive Travel is a small, established chauffeur and executive car hire company based in Milton Keynes, UK, operating since 1986. They offer luxury chauffeur services, airport transfers, wedding cars, and special occasion transportation. The website presents a professional and user-friendly interface with clear navigation and relevant content targeting individuals and businesses seeking premium transportation services in the region. Technically, the site uses a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager, with HTTPS enforced and security features like reCAPTCHA and cookie consent implemented. However, some outdated libraries and missing security headers suggest room for improvement. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, though the website content and contact information appear credible. Overall, the site demonstrates a good security posture but lacks explicit security policies and incident response information. Strategic recommendations include enhancing security headers, updating libraries, and clarifying domain registration status to improve trust and compliance.

Fixfast is a specialist manufacturer and supplier of fasteners and building components primarily for industrial, commercial, and larger residential buildings. The company focuses on the design, manufacture, and supply of specialist components for walls and roofs, positioning itself as a key player in the building envelope sector. The website reflects a professional and modern digital presence, leveraging Magento CMS with Hyvä themes, Algolia search, and integrated marketing and analytics tools such as HubSpot and Cookiebot. The technical infrastructure is robust, with good mobile optimization, security headers, and HTTPS enforcement, indicating a mature digital setup. Security posture is strong with no evident vulnerabilities, and privacy compliance is well addressed through comprehensive cookie consent mechanisms and a detailed privacy policy. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and technology usage suggest a legitimate business. Overall, the site is professional, secure, and compliant, but would benefit from clearer contact information and terms of service documentation.

Salop Towing Ltd is a small, family-run business established in 2002, specializing in the supply and installation of towbars, towing electrics, and vehicle accessories primarily serving the motor trade and the general public in Shrewsbury, UK. The company holds recognized certifications such as NTTA Quality Secured Towbar Centre and Thatcham Certified Installer, positioning it as a trusted local service provider with a strong reputation and customer guarantees. The website reflects a professional and consistent brand image with clear service offerings and customer-focused features such as disabled access and free parking. Technically, the website employs a traditional tech stack including jQuery 1.11.3, Bootstrap, Font Awesome, and Google Analytics. The site is mobile responsive with good navigation and content quality, although some modernization opportunities exist, such as updating JavaScript libraries and enhancing accessibility. The absence of structured data and limited SEO optimization suggests room for improvement in digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit cookie consent mechanisms, which are important for compliance and protection. No forms or sensitive data collection points were detected, reducing immediate risk exposure. The WHOIS lookup for the domain 'www.saloptowing.co.uk' failed due to an invalid domain name format, but the website is accessible, indicating the actual domain is likely 'saloptowing.co.uk'. This discrepancy slightly impacts trust but does not indicate malicious activity. Overall, the website is safe, professional, and trustworthy with moderate technical and security posture. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance the site's resilience and compliance standing.

Thermoplumb is a small UK-based local business specializing in plumbing and heating services, established in 2018. The website currently displays only an offline message, preventing access to detailed content or contact information. The business appears to target local customers seeking professional and friendly plumbing and heating services. The technical infrastructure includes a Vue.js frontend and Google Analytics for user tracking, hosted by Ionos SE. However, the site lacks visible privacy, cookie, or terms of service policies, and no contact details or forms are accessible. Security posture is minimal with no detected security headers or explicit policies. The domain registration is consistent and legitimate, matching the business profile. Overall, the website's offline status severely limits content and security analysis, resulting in a low AI score and limited trust indicators.

studiosixcreative.co.uk is a small UK-based WordPress blog focused on gambling-related content such as casino bonuses and slot machines. The website presents a professional design with good navigation and mobile optimization, leveraging modern technologies like Bootstrap and jQuery. However, the security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms. No privacy policy, cookie consent, or contact information is provided, which impacts trust and compliance. The WHOIS data shows inconsistencies with a domain creation date in the future relative to content publication dates, raising legitimacy concerns. Overall, the site serves a mature audience interested in gambling topics but requires improvements in security and compliance to enhance trustworthiness.