Security Directory

Spirit Hair Design is a small, established hairdressing salon based in Christchurch, UK, operating since 2001. The business offers a comprehensive range of hairdressing services including cuts, colours, wedding packages, and discount schemes targeting students, NHS staff, and children. The website reflects a professional local business with clear contact details and a focus on customer care and quality products. Technically, the site is built using Adobe Muse with a static architecture and includes common web technologies such as jQuery and RequireJS. While the site is accessible and functional, it lacks modern security headers and privacy compliance features. The Facebook SDK is loaded insecurely over HTTP, posing a mixed content risk. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Myrene Signs Ltd is a UK-based small business specializing in the creation of various signage solutions, including vehicle graphics, banners, engraving, and digital print. Established in 2000, the company leverages both modern technologies and traditional sign writing methods to serve businesses seeking effective branding and signage. Their website reflects a professional and consistent brand image targeting business clients in need of signage services. Technically, the website is built on WordPress using the Total theme and LiteSpeed Cache, hosted by IONOS SE. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is trustworthy and functional but would benefit from enhanced security and compliance measures.

Donview Veterinary Centre is a well-established veterinary service provider operating in Aberdeenshire, UK, with branches in Inverurie and Kintore. The business emphasizes 24-hour veterinary care for pets, horses, and farm animals, leveraging over a century of experience. The website reflects a professional and consistent brand presence, targeting local pet owners and farmers. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager, hosted on WP Engine, ensuring reliable performance and moderate loading speeds. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy policies are absent, indicating room for improvement in compliance and security transparency. Overall, the domain registration is consistent with the business claims, showing a long-standing presence without privacy protection, enhancing trustworthiness.

The website www.bjsfireplaces.co.uk appears to be a placeholder or parked domain with minimal content primarily focused on consent management scripts and advertising placeholders. There is no visible business information, contact details, or substantive content describing products or services. The domain WHOIS data is unavailable and indicates the domain name is invalid or not properly registered, which raises significant concerns about legitimacy and trustworthiness. Technically, the site uses a Consent Management Platform to address GDPR compliance, but lacks security headers and other best practices. Overall, the website's digital maturity is low, with poor content quality and minimal SEO or accessibility features.

The website www.newmiltonelectricalcentre.co.uk is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to the actual site content. This prevents extraction of business, contact, or service information. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may not be properly registered or is invalid. Technically, the site benefits from Cloudflare's security infrastructure including HTTPS and Content Security Policy headers, but no further technical or business details are accessible. The security posture is strong in terms of infrastructure but limited by lack of accessible content. Overall, the site presents a high risk due to inaccessibility and domain registration issues, and lacks visible privacy or compliance policies.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

G

Gregory & Seeley Cranleigh

gregory-seeley.co.uk

61

Gregory & Seeley Cranleigh is a small independent optician business located in Cranleigh, United Kingdom, specializing in eye care services and designer eyewear. The company positions itself as a leading local provider with award-winning optometrists and a range of specialized services including dry eye clinics, myopia management, and hearing care. The website is built on WordPress using modern themes and plugins, demonstrating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is generally strong with HTTPS enforced and use of Google reCAPTCHA, though there is room for improvement in security headers and privacy compliance. The absence of WHOIS data due to domain naming rules is a notable anomaly but the website content and contact information suggest a legitimate business. Overall, the site is professional, trustworthy, and serves its target audience effectively.

C. Brumpton Butchers Ltd is a longstanding family-run butcher business operating in Nottingham with physical stores in Cotgrave and West Bridgford. The company emphasizes quality, local sourcing, and traditional recipes, offering a wide range of meat products and home-baked goods. Their website serves primarily as an informational platform showcasing their offerings and contact details, supported by a professional design and embedded promotional video. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is solid with HTTPS and anti-spam measures, though it lacks advanced security headers and formal privacy policies, which are areas for improvement. The domain WHOIS data is unavailable due to a registration error, which raises some concerns about domain legitimacy from a technical standpoint but does not detract from the business's apparent authenticity. Overall, the website is functional, professional, and safe for general audiences.

B

B.Kent Electrical Ltd

bkentelectrical.co.uk

49

B Kent Electrical Ltd is a small UK-based electrical contracting company specializing in domestic, commercial, and industrial electrical services. Their market position is that of a local specialist serving Leighton Buzzard, Milton Keynes, Bedford, and surrounding areas. Key services include electrical contracting, testing and inspecting, lighting solutions, fire and security services, and data solutions. The website presents basic but relevant content with certifications from NIC and CHAS, indicating industry compliance and trustworthiness. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery libraries, providing a moderately optimized and mobile-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display any analytics or tracking tools. Security-wise, the site includes a CSRF token but lacks visible security headers and explicit HTTPS enforcement details. No privacy or cookie policies are present, which is a compliance gap. The WHOIS lookup failed due to domain registration issues, indicating the domain name is invalid under Nominet UK rules. This raises concerns about the domain's legitimacy or registration status, although the website content appears professional and legitimate. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website scores moderately on content quality and technical implementation but scores low on privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

U

Universal Metals

universalmetals.co.uk

48

Universal Metals is a small, family-run scrap metal merchant business operating in the United Kingdom, specifically serving areas such as Crawley, Lancing, and Hastings. The company specializes in recycling both ferrous and non-ferrous metals with a focus on zero waste, positioning itself as a responsible and environmentally conscious local business. Their website reflects a professional and consistent brand image, targeting businesses and individuals seeking scrap metal recycling services in their region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant issues detected in loading or navigation. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA, but lacks several important security headers and does not provide explicit security or incident response policies. The absence of a privacy policy and terms of service pages indicates gaps in compliance and transparency. Additionally, the domain WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the website's operational status. Overall, the website presents a trustworthy and professional front for a small local business but would benefit from enhanced security practices, improved privacy compliance, and resolution of domain registration inconsistencies to strengthen its credibility and reduce risk.

Noble Grossart Ltd is a well-established, privately owned merchant bank based in Edinburgh, UK, with a history dating back to 1969. The company specializes in providing independent corporate finance advice, including capital raising, mergers and acquisitions, management buy-outs, corporate restructuring, and debt funding advice. Additionally, through Noble Grossart Investments, the firm invests in unlisted companies with significant growth potential, acting as a strategic and long-term partner. The website reflects a professional and consistent brand image, targeting UK-based companies and institutions seeking financial advisory and investment services. Technically, the website is built using the GoDaddy Website Builder platform, leveraging modern web fonts and service workers for enhanced user experience. The site is hosted by GoDaddy.com, LLC, with HTTPS properly configured, ensuring secure communication. However, the site lacks advanced security headers and privacy-related policies, which are areas for improvement. The website is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies, as well as missing security headers, reduces the overall security posture and privacy compliance. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and readiness. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a credible and trustworthy business with a solid market position in the finance sector. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and providing incident response contacts to strengthen security and compliance posture.

The website www.islandmarine.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or forbidden. The site does not provide any meaningful business information, contact details, or policies. The WHOIS lookup failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, raising significant concerns about the legitimacy and registration status of the domain. The technical infrastructure appears minimal with no detectable scripts, analytics, or modern web technologies. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site appears non-operational or misconfigured, with a very low trust and credibility score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

E

ELECTRICAL REPAIR

jnelectricalservicesllc.com

51

The website www.jnelectricalservicesllc.com operates as a pay-per-call lead generation platform connecting customers with local independent electricians for residential electrical repair services. It offers services such as outlet repair, lighting fixes, circuit breaker and panel issues, wiring, and fixture installation. The site emphasizes fast, reliable, and affordable service with same-day appointments often available. The business model relies on connecting callers to third-party service providers rather than providing services directly. Technically, the website is built with modern HTML5, CSS (using Tailwind CSS utilities), and JavaScript. It is mobile-optimized and presents a professional design with clear navigation and calls to action. However, no CMS or hosting provider information is evident. The site uses a custom call tracking pixel and JavaScript event tracking but lacks common third-party analytics or marketing tools. From a security perspective, the site enforces HTTPS (implied by URL) but lacks visible security headers such as Content-Security-Policy or HSTS in the provided data. No forms collect sensitive data, reducing attack surface, but privacy and cookie policies are absent, indicating poor privacy compliance. The WHOIS data is unavailable or unregistered, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and professional for its purpose but has gaps in transparency, privacy compliance, and domain registration legitimacy. Strategic improvements in security headers, privacy disclosures, and WHOIS transparency would enhance trust and compliance.

B

Be Dazzled Cleaners Ltd

bedazzledcleaners.co.uk

55

Be Dazzled Cleaners Ltd is a small, well-established domestic cleaning company based in Chessington, UK, offering high-end cleaning services including domestic cleaning, turnkey cleaning, and ironing and laundry services. The company targets residential customers in Chessington and surrounding areas, positioning itself as a trusted provider with over a decade of experience. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site is built on the MultiScreenSite CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Snowplow. The site is hosted on a static CDN with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers are missing and incident response information is absent. Privacy and cookie policies are present but hosted on a third-party domain (Yell.com). WHOIS data is unavailable due to domain naming rules error, indicating the domain is a subdomain or not directly registered, which slightly reduces trustworthiness from a domain registration perspective. Overall, the website is professional, secure, and user-friendly, suitable for its business purpose.

The website www.thestaratcotton.co.uk is currently inaccessible and returns a 403 Forbidden error page, indicating that access to the content is blocked or forbidden. The domain itself appears to be invalid or unregistered as per the Nominet UK WHOIS response, which states the domain cannot be registered due to naming rules violations. Consequently, no business information, contact details, or policies are available on the site. The technical infrastructure is minimal, with only a Google Fonts external link detected, and no evidence of CMS, analytics, or security headers. The site lacks privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present. Overall, the website does not provide any usable content or business presence at this time.

The website www.bixleyplastering.co.uk is currently inaccessible and displays a 'Site not found' error page indicating the site is not published or the domain is not assigned. The domain itself is invalid according to Nominet UK WHOIS data, which states the domain name contains too many parts and cannot be registered. Consequently, no business information, contact details, or services are available from the website. The technical infrastructure appears minimal, with only a link to an external font CDN and no evidence of HTTPS or security headers. The site lacks any privacy, cookie, or terms of service policies, and no analytics or tracking technologies are detected. Overall, the digital maturity of this web presence is extremely low due to the absence of published content and invalid domain status. From a security perspective, the absence of HTTPS and security headers, combined with the invalid domain registration, presents a critical risk and lack of trustworthiness. There are no indications of incident response or data protection measures. The site is effectively blocked or unpublished, limiting any meaningful security or compliance assessment. Given these factors, the overall risk assessment is high, with a recommendation to first resolve domain registration issues and publish a legitimate website with proper security and compliance controls. Strategic recommendations include obtaining a valid domain, implementing HTTPS, publishing comprehensive privacy and cookie policies, and establishing basic security headers and incident response contacts to improve trust and compliance.

P

Park Lane Windows

parklanewindows.co.uk

55

Park Lane Windows is a well-established family-run business specializing in the supply and installation of high-quality, energy-efficient windows, doors, conservatories, and home extensions primarily serving Northamptonshire and surrounding counties in the UK. The company holds multiple trust certifications including FENSA registration and Which? Trusted Trader status, reflecting a strong market position and customer trust. Their website effectively showcases their product range and services, targeting homeowners and property owners seeking reliable home improvement solutions. Technically, the website is built on WordPress with Elementor and integrates modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although the absence of a public security policy and incident response information suggests room for improvement. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with moderate tracking and analytics usage. Strategic recommendations include publishing comprehensive privacy and security policies and enhancing accessibility features to further strengthen compliance and user trust.

J

Jo Potts

jopotts.net

44

Jo Potts is a professional video producer and editor offering comprehensive video production, editing, and motion design services. The website serves as a portfolio showcasing recent projects and notable clients, targeting businesses and individuals seeking high-quality video content. The business operates as a small-scale service provider within the media industry. Technically, the website is built on WordPress using the Vantage theme, with common plugins such as WPForms Lite and W3 Total Cache. The site is moderately optimized for performance and mobile devices, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting the contact form, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website partially mitigates this risk. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

The website www.theproofofthepudding.co.uk currently serves only a security verification page implementing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. No meaningful business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or market position. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, suggesting the domain is invalid or misconfigured. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL configuration details. Overall, the website is inaccessible for normal users without passing the security challenge, resulting in a low trust and credibility rating.

The Finchley Vet is a small veterinary clinic based in Finchley, London, providing pet healthcare services to the local community. The website is built on WordPress using the Divi Builder theme and incorporates common web technologies such as Google Fonts, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The domain is registered with a reputable UK registrar since 2015, consistent with the business's operational timeline. The website design and user experience are good, with basic mobile optimization and clear navigation. However, the content quality is basic, lacking comprehensive business and compliance information such as privacy and cookie policies. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks security headers and incident response details. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P S Bookkeeping & Accountancy is a well-established small business specializing in bookkeeping, payroll, company accounts, VAT, and tax services primarily serving clients in Colchester and the wider UK. Founded in 1988, the company emphasizes personal, reliable, and cost-effective accounting solutions tailored to businesses of all sizes. Their market position is that of a trusted local specialist with a loyal client base and a reputation for quality service. The website reflects this with clear service descriptions and contact information. Technically, the website is built on Drupal 7 with the Foundation CSS framework, utilizing modern JavaScript libraries such as jQuery and integrating Google Analytics and reCAPTCHA for analytics and security. Hosting is via Cloudflare, providing robust SSL/TLS encryption. The site is moderately performant and mobile-optimized, though some technical debt is evident due to the older CMS version. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA, but lacks several recommended security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is comprehensive and professional, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security headers would enhance trust and security posture further.

J

JE Consulting

je-consulting.co.uk

63

JE Consulting is a UK-based marketing consultancy specializing in professional sectors such as accounting, legal, and healthcare. The company offers integrated services including social media management, web design, direct marketing, graphic design, and PR. Positioned as a niche expert, JE Consulting targets professional firms seeking to enhance their market presence with innovative and unified marketing strategies. The website reflects a mature digital presence with comprehensive content, client testimonials, and clear business information, supporting its credibility and market position. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, Google Tag Manager, and reCAPTCHA v3 for form security. The site is mobile-optimized, SEO-friendly, and employs GDPR-compliant cookie consent mechanisms. Performance is moderate with good accessibility and navigation, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA to prevent spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent management. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The WHOIS data is unavailable due to a query error related to the www subdomain, but this does not detract from the legitimacy of the business as evidenced by consistent company information and professional presentation. Strategic recommendations include enhancing security headers and conducting regular security audits to maintain a robust security posture.

A

Ashton Cleaning Services

ashtoncleaning.co.uk

38

Ashton Cleaning Services is a small, established cleaning company based in Exeter, UK, offering a wide range of domestic, commercial, and specialist cleaning services. With over 20 years of industry experience, the company positions itself as a reliable and professional service provider with a strong local presence and a portfolio of high-profile clients. Their service offerings include house cleaning, school cleaning, trauma cleaning, floor restoration, and COVID-19 cleansing among others. The website is built on WordPress using Elementor, hosted via Cloudflare, and employs modern technologies such as Google reCAPTCHA v3 for form security. While the site is well-designed and provides clear contact information and trust signals such as certifications and testimonials, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and DNSSEC enabled, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced privacy and security disclosures.

Woodstock Trade is a UK-based small business specializing in plumbing, heating, and bathroom services. The company targets homeowners, trade professionals, and businesses requiring these services. The website is professionally designed using the Squarespace platform, featuring clear navigation and mobile optimization. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and other privacy regulations. Security posture is generally good with HTTPS and HSTS enabled, but additional security headers and policies are recommended. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises some concerns about domain registration legitimacy. Overall, the website presents a trustworthy and professional front but would benefit from enhanced privacy compliance and security best practices.

The website www.derwent-fencing.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no substantive business content, metadata, or contact information is available for analysis. The WHOIS lookup failed because the query was made on the 'www' subdomain rather than the root domain, resulting in no registrar or domain registration data. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for frontend styling and bot mitigation, but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no contact or business details are exposed. Overall, the site’s security posture is minimal but includes basic bot protection. The lack of accessible content and WHOIS data limits trust and credibility assessments.

The website www.soulsrestaurant.co.uk is currently inaccessible and displays a generic 'Site not found' error page indicating that the site is unpublished or the domain is not assigned. The WHOIS lookup for the domain failed due to the domain name violating Nominet UK's naming rules, specifically that the domain contains too many parts, rendering it invalid and unregistered. Consequently, no registrant or domain status information is available. The lack of accessible content, absence of business information, and invalid domain status indicate that this website is not operational or legitimate at this time. From a technical perspective, the website does not provide any meaningful content or metadata. There are no forms, scripts, or analytics detected. The only external resources are fonts and images loaded from a third-party CDN. No security headers or HTTPS configuration details are available, suggesting a minimal or non-existent security posture. The website is not optimized for mobile or accessibility, and SEO elements are missing. Security-wise, the site shows no evidence of best practices such as HTTPS, security headers, or privacy policies. The domain's invalid status and lack of registrant data further diminish trustworthiness. There are no indications of vulnerabilities or incident response mechanisms due to the absence of content. Overall, the security posture is very weak, and the site is effectively non-functional. Given these findings, the overall risk assessment is high. The domain is not legitimate, and the website is inaccessible. Strategic recommendations include registering a valid domain name, implementing HTTPS, publishing privacy and cookie policies, adding business contact information, and developing a professional website with security best practices to establish trust and compliance.

The website www.morrisonforklift.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed with an error from Nominet UK indicating the domain name violates naming rules, suggesting potential misconfiguration or invalid registration. Due to the lack of accessible content, no metadata, contact information, or security policies are available for analysis. The technical infrastructure appears minimal or non-functional from the provided data, with no detectable scripts, analytics, or security headers. Overall, the website's security posture is poor, with no visible HTTPS or security best practices. The domain's legitimacy is questionable given the WHOIS error and lack of accessible content.

The website www.elite-meat.co.uk is currently inaccessible due to a Cloudflare security challenge page that blocks direct content access. The WHOIS lookup for the domain failed with an error indicating the domain name contravenes Nominet UK naming rules, suggesting potential registration or legitimacy issues. No business, contact, or policy information is visible on the site, and no forms or data collection mechanisms are present. The site appears to be either misconfigured or intentionally protected behind a strict security layer, preventing meaningful content or business insights extraction. The technical infrastructure relies on Cloudflare's security services, but no CMS or additional technologies are detectable due to the blocked content.

S

Shanti nails & beauty Builder gel nails nail salon lincoln | 279a high street lincoln LN2 1JG

shantisalon.co.uk

49

The domain www.shantisalon.co.uk is not registered due to violation of Nominet UK's naming rules, specifically because the domain name contains too many parts. Consequently, the website content is inaccessible or blocked, and no meaningful data about the business, contact information, or policies can be extracted. The site appears to be built on the Wix platform, but no further technical or security details are available. This lack of registration and content access severely limits any assessment of the business or security posture. The overall risk is high due to the absence of verifiable information and domain legitimacy.

A

Autopak

autopakmachinery.co.uk

62

Autopak Machinery is a UK-based company specializing in the design and manufacture of bespoke bag filling and handling equipment, with over 20 years of industry experience. Their website presents a professional and comprehensive overview of their product range and services, targeting manufacturing companies requiring customized industrial machinery solutions. The company emphasizes technical expertise, customer support, and tailored solutions to meet unique customer requirements. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and analytics tools, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. The absence of WHOIS data due to domain registration issues slightly impacts trustworthiness, though the website content and business presentation remain credible and professional. Overall, the site is well-structured, mobile-optimized, and provides clear contact channels, supporting a positive user experience.

H

H.D. WHITE LTD SCRAP METAL MERCHANTS - YAPTON BN18

hdwhite.co.uk

48

HD White Ltd operates as a regional scrap metal merchant specializing in scrap cars, yards, and metal recycling services primarily serving the Bognor Regis, Worthing, and Chichester areas in the United Kingdom. The company targets local businesses and individuals requiring metal recycling solutions. The website is professionally designed using WordPress with the Divi theme and includes SEO optimizations and structured data to enhance search visibility. The technical infrastructure includes modern web technologies and integrations such as Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and form protection, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, though the website content itself appears trustworthy and relevant. Overall, the risk is moderate with recommendations to improve compliance and security transparency.

G

Garnetts Gardens

garnettsgardens.co.uk

49

Garnetts Gardens is a well-established, family-run retail plant nursery located in Hacheston, United Kingdom. Founded in 1994, the business has expanded from a small shed to a comprehensive garden centre offering a farm shop, café, gift area, and caravan site. The website reflects a local community focus with services tailored to gardening enthusiasts and local customers. The business model centers on retail and hospitality services with a strong emphasis on homegrown plants and knowledgeable customer support. Technically, the website is built using the Site.pro website builder platform, incorporating standard JavaScript libraries and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. The website is accessible without any WAF or security challenges, indicating good availability. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service documents. There is no evidence of advanced security frameworks or incident response mechanisms. The site collects minimal user data via a simple Google Maps directions form but does not implement consent mechanisms or privacy compliance features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a legitimate small business website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing data protection practices to improve trust and compliance.

Boward is a small treesurgery business operating a WordPress-based website focused on gardening and tree care content. The site features a blog authored by 'Jack Boomer' with posts dating from 2022. The business appears to be a local or small-scale service provider with no evident parent company or subsidiaries. Technically, the website uses standard WordPress technologies including jQuery and several JavaScript libraries for UI enhancements. Hosting is provided by OVH, a reputable provider. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. No contact emails, phone numbers, or social media links are provided, which limits business credibility and user trust. WHOIS data is consistent with the business profile, showing domain registration in 2022 with OVH. Overall, the website is functional and content-rich but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance.

The domain www.doorrepairservice.co.uk is currently non-operational and displays a generic 'Site not found' error page indicating the site is not published or the domain is not assigned. The WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, specifically that the domain contains too many parts, rendering it invalid or unregistered. Consequently, no business information, contact details, or metadata are available to assess the company's operations or market position. The website lacks any meaningful content, forms, or external links, and no security or privacy policies are present. From a technical perspective, the website does not provide evidence of HTTPS or security headers, and no modern technologies or CMS platforms are detected. The site is not mobile optimized and has poor accessibility and SEO characteristics. The security posture is weak due to the absence of HTTPS and security best practices. Privacy compliance is non-existent, with no cookie or privacy policies found. Overall, the domain's legitimacy is highly questionable given the WHOIS failure and invalid domain status. The website is effectively inaccessible, providing no business or security assurances. This represents a critical risk for users attempting to engage with this domain, as it lacks trust indicators and operational presence. Strategic recommendations include registering a valid domain name compliant with Nominet UK rules, implementing HTTPS with proper SSL certificates, establishing clear privacy and cookie policies, and publishing verifiable business contact information to improve trust and compliance.

H

Hearns Specialised Joinery Ltd

hearnsjoinery.co.uk

58

Hearns Specialised Joinery Ltd is a small, established bespoke joinery business based in Dorking, Surrey, with a history dating back to 1982. The company specializes in custom doors, staircases, windows, and bespoke furniture, targeting homeowners and property owners in Surrey and South West London. Their website reflects a professional and consistent brand image, emphasizing craftsmanship and quality materials. Technically, the website uses modern JavaScript libraries, cookie consent management, and Google Analytics, with good SEO and mobile optimization. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and a published security policy. The WHOIS data is unavailable due to domain naming rule violations, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional, trustworthy in content, but domain registration issues reduce full trust.

C

City Company Seals

citycoseals.co.uk

50

City Company Seals Ltd is a small UK-based business specializing in manufacturing and retailing a wide range of company seals, brass and wax seals, sealing wax, paper embossers, rubber stamps, and related office stationery. Established in 1973, the company has built a strong reputation with a significant portion of its retail business driven by word-of-mouth and positive customer reviews, including 5-star ratings on Amazon. The website reflects a professional and consistent brand image targeting businesses and individuals requiring official seals and embossers. Technically, the website is built using the RapidWeaver CMS with the Foundation framework and incorporates modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers that could enhance protection against common web vulnerabilities. There is no cookie consent mechanism, which may impact privacy compliance. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy despite the website being active and professional. Overall, the website presents a trustworthy and professional business front with room for improvement in security practices and privacy compliance. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

W

Walden Steels Ltd

waldensteels.co.uk

57

Walden Steels Ltd is a small manufacturing business specializing in bespoke steelwork based in Newport, Gwent, United Kingdom. The company targets local businesses and contractors across South Wales, offering high-quality engineering and steel fabrication services. The website reflects a professional presence with clear contact information and a focus on service offerings. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. SEO and structured data are well implemented, enhancing discoverability and brand presentation. Security posture is adequate with HTTPS enabled and basic anti-bot measures, though additional security headers and policies could improve resilience. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is trustworthy and functional, supporting the company's business objectives effectively.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

N

NTT DATA Business Solutions AG

itelligencegroup.com

69

NTT DATA Business Solutions AG is a leading global SAP consulting and full-service provider operating in over 30 countries, with a strong presence in Germany. The company specializes in SAP software solutions, IT strategy consulting, managed cloud services, and innovative technology services including AI. Their market position is that of a trusted enterprise partner for medium to large businesses seeking comprehensive SAP and IT solutions. The website reflects a mature digital infrastructure built on WordPress with advanced SEO and analytics integrations, demonstrating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, though DNSSEC is not enabled and incident response contacts are not explicitly published. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie consent requirements.

Bidvest Noonan is a well-established facilities management service provider operating primarily in the United Kingdom and Ireland. The company offers a broad range of services including security, cleaning, technical services, energy management, and integrated facilities management solutions. Positioned as a leading provider in its sector, Bidvest Noonan targets corporate clients across multiple industries such as healthcare, education, transport, government, and retail. The website reflects a professional but basic content presentation with clear navigation and consistent branding, although some pages return 404 errors indicating minor content management issues. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern analytics tools like Google Analytics, Ahrefs, and Plausible, alongside a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and uses Cloudflare for DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. Performance is moderate, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent best practices but does not publicly disclose a security policy or incident response plan. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business profile, showing a domain age appropriate for the company's history and no privacy protection, which aligns with transparency expectations for this business type. Overall, Bidvest Noonan's digital presence is credible and compliant with privacy regulations, though there is room to enhance security posture and content completeness. Strategic improvements in security headers, DNS security, and comprehensive policy disclosures would strengthen trust and resilience.

The website www.lunson-mitchenall.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violations, suggesting the domain may be invalid or misconfigured. No business information, contact details, or policies are available on the site. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security headers, HTTPS information, or analytics. The overall security posture is poor due to lack of accessible content and missing security best practices. This results in a very low trust and legitimacy score for the domain and website.

Owens & Minor is a well-established healthcare logistics and supply chain company providing distribution and supply chain management services primarily to healthcare providers such as hospitals and clinics. The company operates at an enterprise scale with a strong market position in the United States. Their website reflects a professional and consistent brand image, targeting healthcare supply chain professionals and organizations. Technically, the website is built on WordPress with modern frameworks like Bootstrap and optimized for performance and mobile devices. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website and business appear credible and trustworthy, though the absence of WHOIS data is a notable anomaly that warrants further verification.

The website www.georgeshairdressing.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or service content. The WHOIS lookup failed to find any registration data for the domain, indicating it may be unregistered or the data is not publicly available. The site contains no metadata, no forms, no contact information, and no privacy or cookie policies, which severely limits any meaningful analysis of the business or its digital presence. Technically, the site only loads Google Fonts and lacks HTTPS confirmation or security headers, indicating a poor security posture. Overall, the site appears inactive or improperly configured, posing a high risk for trust and credibility.