High-risk security reports

C

Christopher’s Ltd

christophersgrill.com

49

Christopher’s Ltd operates a well-established American restaurant and martini bar located in Covent Garden, London. The business has a strong market presence since 1991, offering dining, weekend brunch, a martini bar, and private dining rooms. The website reflects a professional hospitality business targeting general and mature audiences interested in American cuisine and nightlife experiences. Technically, the website is built on WordPress with Elementor and uses modern web technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy policies are present and GDPR compliant, but cookie consent mechanisms could be improved. The lack of WHOIS data for the domain introduces some uncertainty about domain legitimacy, though the website content and branding suggest a legitimate business. Overall, the site scores well on content quality and technical implementation but could enhance security and privacy transparency.

The website www.thinksigma.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. No substantive business content, contact information, or policies are accessible, indicating the site is effectively blocked by a Web Application Firewall or similar security mechanism. The WHOIS lookup for the domain failed due to an invalid domain format error from Nominet, suggesting the domain is either misconfigured or a subdomain incorrectly queried, which severely impacts trust and legitimacy assessments. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL configuration details. Overall, the site is inaccessible for meaningful analysis and lacks transparency and compliance indicators.

T

The Elfrida Society

elfrida.com

48

The Elfrida Society is a well-established non-profit organization dedicated to supporting individuals with learning disabilities, autism, and learning difficulties. With over 100 years of history, it provides advocacy, community engagement, inclusive sports, and various support services primarily in Islington and London. The website reflects a professional and community-focused charity with clear mission, vision, and values. The organization maintains active social media channels and offers multiple ways for the public to engage, donate, or volunteer. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI and animation libraries. It is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. The site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms, reflecting good privacy compliance. However, security headers are missing, and no explicit security policy or incident response contact is provided. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a concern, as it reduces transparency and trust, though the website content and business information appear legitimate and consistent with a reputable charity. No signs of WAF blocking or security challenges were detected, allowing full content access. Overall, the site scores well on content quality, technical implementation, and security posture, with minor penalties for missing WHOIS data and security headers. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

K

KS Cleaning Contractors Ltd

kscleaning.com

48

KS Cleaning Contractors Ltd is a well-established commercial cleaning service provider based in Somerset, UK, with over 45 years of experience since its founding in 1980. The company offers a broad range of cleaning services including office, school, healthcare, retail, hospitality, and builders cleans. Their business model emphasizes directly employed, DBS-checked teams and a proprietary client portal that provides audit trails with photo evidence and GPS check-ins, enhancing transparency and client trust. The website is professionally designed with clear navigation and strong local market positioning, targeting property managers, facilities managers, and developers in Somerset and the wider South West region. Technically, the website employs modern web technologies including Google Tag Manager for analytics and tracking, uses SVG graphics for branding, and is mobile-optimized with fast performance. However, no CMS or hosting provider details were detected. The site lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registration data for the domain is a notable anomaly that affects trustworthiness, although the website content and business information appear consistent and professional. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The client portal's audit features indicate a mature approach to operational security and accountability. However, the lack of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security posture and compliance. Overall, the website scores well in content quality and business credibility but is moderately impacted by privacy compliance and WHOIS inconsistencies. Strategically, KS Cleaning should address the WHOIS registration anomaly, implement standard security headers, introduce cookie consent to comply with GDPR, and publish…

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.teignmouthgolfclub.co.uk is currently inaccessible, returning a 403 Forbidden error page. The content is minimal and does not provide any business information, contact details, or policies. The domain WHOIS data is unavailable and indicates the domain is invalid or misconfigured according to Nominet UK, which raises significant legitimacy concerns. The lack of accessible content and metadata prevents a thorough analysis of the business or technical infrastructure. Security posture cannot be assessed due to the absence of security headers or HTTPS information. Overall, the site appears non-functional or improperly configured, resulting in a very low trust and credibility score.

G

Ghekko

ghekko.com

47

Ghekko Group is a medium-sized, established telecommunications hardware supplier and service provider with a global reach through facilities in the UK, Ireland, and the USA. The company specializes in supplying, buying back, repairing, and providing technical services for telecom equipment including phones, headsets, networking, and optical transmission hardware. Their market position is strong within the telecommunications sector, targeting business customers requiring cost-effective and efficient communications hardware solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses Bootstrap for responsive design. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, indicating good baseline security practices. However, the absence of explicit security policies, incident response information, and missing WHOIS domain registration data reduce overall trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and business present a professional and trustworthy front with solid technical implementation but would benefit from improved transparency in domain registration and enhanced security documentation to strengthen compliance and trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.shp.org.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup failed due to a domain naming rules violation, indicating the domain name is invalid or improperly registered. No metadata, structured data, or business information is available from the site. The lack of accessible content and WHOIS data severely limits the ability to assess the business or technical maturity of the entity behind the domain. The site does not provide any privacy, cookie, or contact information, and no security headers or HTTPS details are available from the provided data. Overall, the website appears to be either misconfigured, inactive, or intentionally blocked, resulting in a very low trust and credibility profile.

S

Stratus Consultants Ltd

stratusconsultants.com

47

Stratus Consultants Ltd is a Glasgow-based professional services firm specializing in accounting, finance, software solutions, and artificial intelligence consulting. Established in 2009, the company targets small business owners, private individuals, and startups, offering tailored financial and software services to support business growth and tax optimization. The website reflects a solid market position with clear service offerings and client testimonials, emphasizing local expertise and personalized consulting. Technically, the website is built on WordPress using popular plugins such as Elementor and Slider Revolution, with a moderate performance profile and good mobile optimization. The site uses HTTPS and standard web technologies but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. From a security perspective, the site demonstrates basic best practices such as HTTPS and domain transfer protection but lacks published security policies, incident response contacts, and privacy compliance documentation. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy and professional business presence with moderate technical maturity and security posture. Strategic enhancements in privacy compliance, security headers, and DNS security would strengthen the site’s risk profile and user trust.

The website www.indigogrp.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the actual site content is blocked or restricted by a Web Application Firewall or similar bot protection mechanism. No business-related content, metadata, or contact information is accessible, preventing a full assessment of the company's operations or services. The WHOIS lookup for the domain returned no registration data, suggesting the domain may be unregistered, expired, or otherwise inactive, which further complicates trust and legitimacy evaluation. From a technical perspective, the site uses modern front-end libraries such as Bootstrap 5.3.3 and integrates Google reCAPTCHA for security verification. However, no information about SSL/TLS configuration, security headers, or hosting provider is available. The lack of accessible content and metadata limits the ability to assess SEO, accessibility, or performance. Security posture is minimal due to the absence of visible HTTPS enforcement and security headers in the provided data. The presence of Google reCAPTCHA indicates some level of bot mitigation, but the overall security maturity cannot be fully evaluated. Privacy compliance is lacking as no privacy or cookie policies are found, and no GDPR indicators are present. Overall, the domain and website present significant risks due to inaccessibility, lack of registration data, and absence of business or security transparency. Strategic recommendations include verifying domain registration status, ensuring HTTPS and security headers are implemented, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

The website at www.ics-2.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating a bot protection or WAF mechanism is in place. The domain itself is invalid per Nominet UK registry rules and cannot be registered, suggesting the domain is either misconfigured or non-legitimate. No business information, contact details, or policies are available on the site, preventing a full business or compliance assessment. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible HTTPS enforcement and security headers, which are critical for secure web operations. Overall, the site’s security posture is weak due to missing headers and lack of visible SSL, and the domain legitimacy is highly questionable.

Freed Translations is a UK-based small business specializing in professional translation and localization services with over 20 years of industry experience. Their core offering is a guaranteed risk-free translation service supported by a detailed 5-step quality assurance process. The company targets businesses requiring accurate and reliable translations across sectors such as IT, Quality/Six Sigma, Food & Drink, Education & Tourism, and Marketing. The website presents a professional image with clear navigation and comprehensive service descriptions. Technically, the website uses a standard modern JavaScript stack including jQuery and cookie consent tools, with good mobile optimization and SEO practices. However, there is no evidence of advanced frameworks or CMS platforms. Performance is moderate, and accessibility is basic but functional. Security posture is average with no visible HTTP security headers and unknown SSL configuration, though forms are secured with required fields. From a security perspective, the site lacks explicit security policies, incident response contacts, and vulnerability disclosures. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy and trustworthiness. Despite this, the website content is professional and safe, with clear contact information and social media presence. Overall, Freed Translations offers a credible business service with room for improvement in security transparency and domain registration legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive policies, and resolving domain registration inconsistencies to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

R

Ray Corporation Ltd

ray-corporation.com

39

Ray Corporation Ltd presents itself as a UK-registered company specializing in telecommunications, particularly VoIP wholesale services, alongside software development and export-import consultancy. The website content is accessible and provides basic information about the company’s services and contact details. However, the technical infrastructure is outdated, relying on deprecated Flash technology and lacking modern security features such as HTTPS and security headers. The absence of privacy and cookie policies further weakens compliance posture. Critically, WHOIS data for the domain is missing, indicating potential domain registration issues that severely impact trustworthiness. Overall, while the business claims a long history and diverse service offerings, the digital presence and security posture require significant improvements to meet modern standards.

A

Armour Environmental Services Limited

armourpest.co.uk

42

Armourpest is a UK-based pest control service provider specializing in domestic and commercial pest management across Essex and London. The company is well-established since 2008 and holds memberships in recognized industry bodies such as the NPTA and BPCA, which supports its market credibility. Their key services include heat treatment, bird proofing, and general pest control, targeting both residential and commercial clients. The website reflects a professional business with clear contact information and a consistent brand presence. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, and a Django-based CMS hosted on DigitalOcean. The site is mobile-optimized and features interactive elements like slick carousels and forms protected by CSRF tokens. However, some SEO and accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and implements CSRF protection on forms, but lacks visible security headers and does not provide a privacy or cookie policy, which are important for GDPR compliance. There is no incident response or vulnerability disclosure information available, which could be improved to enhance trust and security posture. Overall, Armourpest presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Addressing these gaps would strengthen their digital maturity and reduce potential risks.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.timbawood.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is either invalid or misconfigured. No business information, contact details, or policies are available on the site, severely limiting the ability to assess the company's operations or credibility. Technically, the site only loads minimal CSS and fonts from Google Fonts, with no scripts or analytics detected. Security posture cannot be evaluated due to lack of accessible content and missing security headers. Overall, the site appears non-functional or improperly configured, resulting in a very low trust and credibility score.

Ginseng Tang Ltd operates the Ginseng Tang Acupuncture Clinic, a small healthcare business specializing in acupuncture and traditional Chinese medicine services in the West Midlands, UK. The clinic has a strong local presence with over 20 years of establishment and offers a variety of treatments including pain relief, emotional health support, and herbal remedies. The website reflects a professional service with clear business information, customer testimonials, and recognized certifications from reputable acupuncture organizations. Technically, the website is built on the Weebly/EditMySite platform using common web technologies such as jQuery and Google Analytics. It includes integrated booking and social media widgets enhancing user engagement. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies, which are areas for improvement. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the legitimacy suggested by the website content. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

The website techarb.co.uk currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the full website content is blocked by a Web Application Firewall or similar security mechanism. Due to this, no business content, contact information, or policies are accessible for analysis. The domain is registered since 2007 under Cloud Next Ltd, a UK registrar, which suggests a legitimate and established domain. The technical infrastructure includes Bootstrap for styling and Google reCAPTCHA for bot protection, but no further technologies or CMS are detectable. Security posture is limited to the presence of reCAPTCHA, with no visible security headers or HTTPS enforcement details. Overall, the website cannot be fully assessed due to the blocking mechanism, resulting in a low AI score and limited insights.

C

Cardinal Capital Management Inc.

cardinalcapitalmanagement.com

43

Cardinal Capital Management Inc. is an independent, SEC registered investment advisory firm specializing in providing high-quality investment management services to individuals, trusts, and institutional investors. The firm emphasizes a fiduciary approach, ensuring clients' interests are prioritized. Their team boasts over 75 years of combined investment experience, managing diverse portfolios including U.S. Large Cap, Small Cap, Non-U.S. equity, and fixed income strategies. The company targets clients seeking personalized, valuation-oriented investment solutions. Technically, the website is built on WordPress using the Genesis Framework, enhanced with SEO and analytics plugins such as Yoast SEO and MonsterInsights for Google Analytics. The site demonstrates good mobile optimization, clear navigation, and moderate performance. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and protection. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. No critical vulnerabilities or malware indicators were found. The lack of WHOIS registration data is a notable concern, potentially impacting trustworthiness. The firm should consider publishing explicit security policies and incident response contacts to strengthen its security posture. Overall, Cardinal Capital Management presents a professional and trustworthy online presence with room for improvement in privacy compliance and security hardening. Addressing these areas will enhance client trust and regulatory adherence.

L

LawnHopper

lawnhopper.co.uk

41

LawnHopper is a UK-based lawn care specialist company with over 25 years of experience providing professional lawn treatment services including scarification, aeration, weed and moss control, seeding, and fertilising. The company operates a pay-as-you-go business model serving residential and commercial customers across the UK. The website is built on WordPress using modern plugins and technologies such as Google reCAPTCHA and Cookie Law Info to ensure security and privacy compliance. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and anti-bot measures in place, though additional security headers and published security policies could enhance trust. WHOIS data is unavailable due to an erroneous lookup on the subdomain, which slightly reduces domain trustworthiness. Overall, the website presents a professional and trustworthy front for the business with minor areas for improvement in security and transparency.

Shoreline (UK) Ltd. is a specialized manufacturer of refrigeration equipment serving marine and medical markets. Their product lines include 12/24 Volt DC fridges and freezers for yachts, canal boats, motorhomes, and trucks, as well as medical refrigeration units for hospitals, clinics, laboratories, and veterinary surgeries. Established in 1996, the company emphasizes UK-based manufacturing and quality standards. The website reflects a focused business model targeting niche markets with clear contact information and separate dedicated domains for their marine and medical divisions. Technically, the website uses standard HTML, CSS, and Adobe Typekit fonts but lacks advanced frameworks or CMS indications. The site is accessible without WAF or blocking mechanisms but shows limited mobile optimization and basic SEO. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and absence of privacy or cookie policies. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is professional but requires improvements in security, compliance, and technical modernization.

S

Select Interiors NE Ltd

selectinteriors.net

49

Select Interiors NE Ltd is a small UK-based company specializing in the design and manufacture of high-quality kitchen, bedroom, and study cabinetry for both trade and retail customers. Established in 2009, the company emphasizes craftsmanship, bespoke design, and customer service including project management. Their website reflects a professional and consistent brand presence with clear contact channels and social media engagement. Technically, the site is built on WordPress with common plugins and is hosted behind Cloudflare DNS, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain locks, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

FHP

fhp.co.uk

49

FHP is a professional commercial estate agency operating primarily in Nottingham, Derby, Birmingham, and the Midlands. They offer a comprehensive range of services including property search, sales and lettings, acquisitions, valuations, business rates consultancy, rent reviews, lease renewals, development consultancy, expert witness services, EPCs, and property management. The company positions itself as a leading regional player with a strong focus on commercial real estate sectors such as retail, office, industrial, student accommodation, education, land, investment, and compulsory purchase. The website is well-maintained, professionally designed, and provides clear contact information and social media presence, enhancing business credibility.

The website www.astevenson.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this, no substantive business content, contact information, or policies are accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may be invalid or misconfigured. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL enforcement in the provided data. Overall, the site exhibits minimal digital maturity and poor content quality, with significant gaps in privacy compliance and business credibility.

pb Digital Limited is a UK-based creative design agency specializing in advertising, brand strategy, content creation, project management, and print management services. With over fifteen years of experience, the company serves a diverse client base including notable brands such as BT and BT Wholesale. The website presents a professional image with detailed service descriptions, client portfolios, and team information, targeting businesses seeking comprehensive creative solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Fonts, with good mobile optimization and user experience. However, the absence of explicit security headers and unclear SSL status indicate areas for security improvement. The WHOIS data for the domain is unavailable and indicates the domain is not registered due to naming rules violation, which raises concerns about domain legitimacy despite the professional website content. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the website scores well on business credibility and content quality but requires enhancements in security posture and privacy compliance to improve trustworthiness and risk profile.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.classicaltoilethire.co.uk currently presents a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is blocked by a Web Application Firewall or similar bot protection mechanism. The WHOIS lookup for the domain failed with an error stating the domain cannot be registered due to naming rules violations, suggesting the domain is invalid or not properly registered. Consequently, no business or contact information is available on the site, and no privacy, cookie, or terms of service policies are found. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible HTTPS enforcement or security headers in the provided data. Overall, the site’s security posture is minimal, with only bot protection in place, and the legitimacy of the domain is highly questionable.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Peter Scott Printers Ltd is a UK-based printing services company established in 1960, specializing in high-quality and cost-effective printing solutions with rapid lead times. The company targets businesses and individuals within the UK market, positioning itself as a trusted and experienced print specialist. The website reflects a professional business model focused on manufacturing and printing services, supported by consistent branding and clear contact information. Technically, the website is built on WordPress using the Salient theme and integrates several modern marketing and analytics tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Mailchimp. The site is secured with HTTPS and shows moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with SSL enabled but lacks comprehensive security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.

The website at www.dwa-architects.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or similar bot protection mechanism. This prevents normal user access to any business-related content or services. The WHOIS lookup for the domain failed due to an invalid domain format, suggesting the domain is not properly registered or is a subdomain rather than a standalone domain. Consequently, no registrant or domain age information is available, severely limiting trust and legitimacy assessments. Technically, the site uses modern frontend libraries like Bootstrap and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation in the provided data. No privacy, cookie, or terms of service policies are present, and no contact or business information is accessible.

The website www.fireequipmentservices.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's services or market position. The WHOIS lookup for the domain failed due to an invalid domain format error from Nominet, suggesting the queried domain is either misconfigured or non-existent, which raises significant legitimacy concerns. From a technical perspective, the site uses modern frontend libraries such as Bootstrap 5.3.3 and Google reCAPTCHA for security verification, but no further infrastructure or CMS details are available. The lack of accessible content and metadata prevents evaluation of SEO, accessibility, or performance. Security posture is limited to the presence of reCAPTCHA; no HTTPS enforcement or security headers were observed in the provided data. Overall, the security posture is minimal with no visible vulnerabilities but also no comprehensive security policies or incident response information. The domain's WHOIS data absence and the blocking mechanism reduce trustworthiness and business credibility. Strategic recommendations include resolving domain registration issues, enabling HTTPS, publishing privacy and cookie policies, and providing accessible business information to improve transparency and trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Coleman Bros Ltd

colemanbros.co.uk

40

Coleman Bros Ltd is a small UK-based wholesale supplier specializing in sundries and wallpapers for the decorating trade, with over 60 years of business history. The company targets professional decorators and trade customers, positioning itself as an established supplier in the retail sector. The website content reflects this business focus, providing contact information and a clear description of services. Technically, the website employs modern frontend technologies including Bootstrap, Font Awesome, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO fundamentals but lacks advanced accessibility features. Security posture is moderate with no explicit security headers detected and no visible SSL configuration details; privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data is unavailable due to domain registration errors, raising questions about domain legitimacy despite the professional website content. Overall, the website is functional and business-appropriate but requires improvements in security, privacy compliance, and domain registration clarity.

The website www.pcsg.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable and indicates that the domain name violates Nominet UK naming rules, suggesting registration or configuration issues. Due to the lack of accessible content, no business description, contact information, or security policies are available for analysis. The technical infrastructure appears minimal with no detectable scripts, analytics, or security headers, and the site lacks mobile optimization and SEO features. The security posture is weak, with no HTTPS enforcement or security best practices observed. Overall, the site is not operational for public access, severely limiting any assessment of business credibility or compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.autohausedinburgh.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no actual business content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain failed due to the domain name violating Nominet UK's naming rules, suggesting the domain is either invalid or misconfigured. This severely limits the ability to assess the business legitimacy or technical maturity of the site. The technical infrastructure shows use of modern frontend libraries such as Bootstrap and Google reCAPTCHA, but no further details on hosting or CMS are available. Security posture is limited to the presence of bot protection, with no visible security headers or SSL configuration data. Overall, the site is not currently accessible for meaningful content or compliance analysis, resulting in a low trust and security score.

The website www.macduffbeef.co.uk is currently inaccessible, returning a 404 Not Found error with no visible content or metadata. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, indicating the domain is invalid or misconfigured. Consequently, no business information, contact details, or security policies are available for analysis. The absence of HTTPS and security headers further diminishes the site's security posture. Overall, the site does not provide any meaningful business or security information, resulting in a very low trust and legitimacy score.

L

LJ Machine Tools

ljmt.co.uk

49

LJ Machine Tools is a small UK-based business specializing in supplying high-quality bolts, power tools, fixings, and fasteners primarily serving tradespeople and contractors in Lurgan. The website currently serves as a placeholder announcing a new website launch in 2025, with minimal content and contact information limited to an email and phone number. The technical infrastructure is based on WordPress with a coming soon plugin, incorporating standard web fonts and Google Analytics for visitor tracking. Security posture is basic with no advanced headers or policies visible, and the domain WHOIS data is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules. This inconsistency raises concerns about domain legitimacy despite the professional appearance of the website content. Overall, the website is safe, with no adult or questionable content detected, but lacks comprehensive privacy and security features.

The website www.yourstory.digital is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this blocking, no actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's market position, services, or credibility. The technical infrastructure is minimal, relying on Bootstrap for styling and Google reCAPTCHA for security verification, with no visible CMS or hosting details. The security posture is basic, focused solely on bot mitigation without visible HTTPS or security headers information. Overall, the site lacks transparency and accessibility, resulting in a low trust and legitimacy score.

The website www.downtongroup.com presents a minimal login portal titled 'Downton Portal' with no publicly accessible business content or descriptive information. The site appears to be an internal or customer login interface built on legacy ASP.NET Web Forms technology. There is no evidence of privacy policies, cookie consent mechanisms, terms of service, or contact information, which limits transparency and user trust. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or inactive, which raises significant legitimacy concerns. Technically, the site lacks modern security best practices such as HTTPS enforcement and security headers, and the user experience is poor with no mobile optimization or accessibility features.

M

Mercer Care Ltd

mercercare.co.uk

49

Mercer Care Ltd operates Bramhall Residential Care Home, a family-run care facility in Lincolnshire, UK, providing residential and respite care services for elderly residents since 1998. The business emphasizes family values, community integration, and quality care, holding a Good rating from the Care Quality Commission. The website reflects a professional and consistent brand image targeting elderly individuals and their families seeking trusted care services. Technically, the website employs modern web technologies including JavaScript, CSS, and SVG graphics, with responsive design and good SEO practices. The site is served over HTTPS with a cookie consent mechanism, though it lacks explicit security headers and advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good SSL configuration and basic security best practices but would benefit from enhanced security headers and a published security policy. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, which slightly reduces transparency but does not undermine the evident legitimacy of the business. Overall, the site is secure, professional, and compliant with privacy regulations. The overall risk is low, with recommendations to improve security headers, publish incident response and vulnerability disclosure policies, and enhance accessibility to further strengthen trust and compliance.