Security Directory

S

Sylvania Group

sylvania-lighting.com

59

Sylvania Group is a well-established company specializing in the manufacturing and marketing of eco-responsible and digital lighting solutions, boasting over 120 years of expertise. The company supports its customers throughout their projects with a comprehensive range of services, positioning itself as a significant player in the energy sector. The website reflects a professional and consistent brand image, targeting business customers and partners in lighting and energy industries. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. The absence of WHOIS registration data is a notable concern, suggesting a need for verification of domain ownership and registration status. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance and security best practices would strengthen its posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

AWE Europe

awe-europe.com

62

AWE Europe operates as a distributor of premium audiovisual products targeting the custom integration trade sector. The company maintains a professional online presence with a well-structured website showcasing multiple premium AV brands and product categories. Their business model focuses on B2B distribution within the UK market, serving integrators and trade professionals. The website employs modern web technologies including ASP.NET WebForms, jQuery, Bootstrap, and Vue.js, indicating a mature technical infrastructure. However, the absence of public WHOIS data raises concerns about domain registration transparency. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and formal privacy compliance documentation. Overall, the site is professional and trustworthy from a user perspective but would benefit from improved compliance and transparency measures.

F

forteq Group

forteq-group.com

58

forteq Group is a global leader in precision plastic manufacturing, primarily serving the automotive industry with innovative and high-precision plastic parts. The company emphasizes innovation, quality, reliability, and sustainability, with a strong global presence and a history spanning over 50 years. Their website reflects a professional B2B business model targeting automotive and industrial clients worldwide. Technically, the website employs modern JavaScript libraries, cookie consent management via Cookiebot, and Google Analytics for traffic analysis. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security-wise, the site uses HTTPS with anonymized IP tracking and cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. The domain registration is consistent and legitimate, though the domain is relatively new compared to the company's long history, suggesting a recent domain acquisition or rebranding. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

A

Airedale House Business Centre

airedalehouse.co.uk

57

Airedale House Business Centre operates as a serviced office provider in Leeds, offering coworking and virtual office solutions. The business targets professionals and companies seeking flexible office space with amenities such as air conditioning and scenic river views. The website is built on the Squarespace platform, featuring a professional design and good mobile optimization. However, the absence of privacy and terms of service policies, as well as lack of explicit contact information, limits the site's compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional web presence. Strategic recommendations include adding privacy and terms policies, improving security headers, and verifying domain registration status.

R

Reignwood Investments UK Ltd.

wentworthclub.com

72

Wentworth Club is a prestigious private golf and country club located in Surrey, England, offering world-class golf courses, tennis and health facilities, dining, and spa services. The club has a rich history dating back to 1922 and is home to major golf tournaments such as the BMW PGA Championship. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting affluent individuals interested in exclusive club memberships and sports. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Slick Slider. It integrates Google Tag Manager for analytics and employs GDPR-compliant cookie management. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly, but overall the site appears legitimate and well-maintained.

The website www.gaincoaching.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the actual website content is blocked by a Web Application Firewall or similar bot protection mechanism. No business content, contact information, or policies are accessible, severely limiting the ability to assess the company's offerings or market position. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, inactive, or protected by privacy services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site’s security posture is minimal, with key improvements needed in SSL configuration, security headers, and content accessibility. The lack of privacy and cookie policies also indicates poor compliance with data protection regulations.

S

ConnectYourDomain Error | Wix.com

shaktiwomen.com

52

The domain www.shaktiwomen.com currently resolves to a Wix error page indicating that the domain is not connected to any live website. There is no actual business content, contact information, or policies available on the site. The domain WHOIS query returned no registration data, suggesting the domain is either unregistered or inactive. The technical infrastructure is limited to Wix platform scripts and React libraries, with no custom content or security configurations. The security posture is weak due to lack of HTTPS information and absence of security headers. Overall, the site is non-functional and does not represent an active business presence.

Optima Legal Services Limited is a UK-based specialist property law firm operating under an Alternative Business Structure (ABS) status. The company focuses on remortgage and property legal services, providing dedicated customer service and case tracking solutions. Their market position is supported by regulatory compliance with the Solicitors Regulation Authority (SRA) and public transparency through gender pay gap and modern slavery statements. The website is professionally designed with clear navigation and consistent branding, targeting property owners and clients seeking legal conveyancing services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Tabler.io UI framework. The site is mobile-optimized and includes a cookie consent mechanism that restricts tracking cookies, reflecting a strong privacy posture. However, no advanced security headers were detected, and no visible contact information or security incident response details are provided on the main site. From a security perspective, the site uses HTTPS and enforces strict cookie policies, but lacks published vulnerability disclosure or incident response contacts. The absence of WHOIS data due to domain naming rules violation introduces uncertainty about domain registration legitimacy, although the website content and regulatory references support a legitimate business presence. Overall, the website presents a professional and trustworthy front for a legal services firm but would benefit from enhanced transparency in contact information and security disclosures. The domain registration anomaly should be investigated to ensure full legitimacy and trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

CCL Techlogix

alpharoute.co.uk

67

CCL Techlogix is a specialized provider of Managed 4PL and supply chain technology solutions, focusing on simplifying logistics complexity and enhancing operational visibility for business growth. The company leverages innovative technology and expert support to deliver services such as transport management systems, multi-carrier shipping, fleet management, and sustainability reporting. Their market position is that of a medium-sized, technology-driven logistics service provider with a professional online presence. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Google Maps API. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be via UK2.net, with DNS and domain registration consistent with the business claims. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating awareness of privacy compliance. However, no advanced security headers or explicit security policies were detected, and there is no visible vulnerability disclosure or incident response contact. The domain registration is transparent and consistent, with no suspicious indicators. Overall, the website presents a professional and trustworthy business front with moderate technical maturity and a solid privacy posture. Security practices could be enhanced by implementing additional headers and publishing security policies. The domain age aligns with the company's founding year, supporting legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Culture Dementia UK-dementia alzheimers

culturedementiauk.org

51

The website www.culturedementiauk.org appears to be a Wix-built site focused on dementia culture support, but the content is minimal and lacks substantive business or contact information. The technical infrastructure relies on Wix platform scripts and standard polyfills, with Sentry used for error monitoring. However, there is no evidence of security best practices such as HTTPS enforcement or security headers. The absence of privacy, cookie, and terms of service policies indicates poor compliance with data protection regulations. WHOIS data is unavailable due to a malformed query response, which raises concerns about domain legitimacy and ownership transparency. Overall, the site exhibits low digital maturity and limited trustworthiness.

M

Martikas Ltd

martikas.com

60

Martikas Ltd is a small, privately owned travel agency specializing in luxury, corporate, and LGBT travel services. The company offers unique experiential travel including ski holidays, corporate events, and luxury vacations to destinations such as the Greek Islands. The website is built on GoDaddy's Website Builder platform and hosted by GoDaddy, reflecting a moderate level of digital maturity with basic mobile optimization and SEO. Security measures include HTTPS and Google reCAPTCHA v3 on the contact form, but lack advanced security headers and DNSSEC. Privacy compliance is minimal, relying on Google's privacy policies linked from reCAPTCHA disclosures without hosting their own privacy or cookie policies. Overall, the business appears legitimate with consistent WHOIS data and a domain age appropriate for the company's history.

T

The Writer

thewriter.com

62

The Writer is a UK-based professional brand language consultancy specializing in writing, training, naming, and consulting services. The company targets businesses globally seeking to improve their brand communication and customer engagement through effective language. The website demonstrates a mature digital presence with modern technologies such as Nuxt.js and Vue.js, complemented by SEO best practices and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site projects professionalism and trustworthiness, though the absence of WHOIS data slightly impacts domain trust. Strategic recommendations include publishing a security policy, adding security headers, and establishing a vulnerability disclosure process.

JRW Developments is a UK-based small business specializing in machine tool, industrial electronics, and control systems repair, service, retrofits, design, and programming. Their market position is that of a niche technical service provider with decades of experience, targeting industrial clients and manufacturing companies. Key services include CNC system repairs, PLC programming, machine tool relocation, and custom electronics design. The website is professionally designed with clear navigation and good content relevance, supporting their business model effectively. Technically, the website uses a modern tech stack including Bootstrap 4, jQuery, and Google Analytics for tracking. The site is mobile optimized and includes structured data for SEO and business information. Performance is moderate with basic accessibility features. Privacy and cookie policies are implemented with a consent banner, though explicit GDPR compliance details are limited. Security posture is moderate; HTTPS is used, and cookie consent is present, but no advanced security headers or explicit security policies are found. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying the 'www' subdomain which is not registered, but the domain 'jrw.co.uk' appears legitimate based on website content and contact information. Overall, the website presents a trustworthy and professional image with room for improvement in security best practices and compliance documentation.

N

NSSLGlobal

nsslglobal.com

64

NSSLGlobal is a well-established systems integrator specializing in satellite communications and IT management solutions primarily for maritime, government, defence, and enterprise sectors. With over 50 years of experience, the company offers a broad portfolio of services including cybersecurity, digitalisation, crew welfare, and safety solutions. The website reflects a professional and comprehensive business presence with clear market positioning and a strong focus on customer empowerment. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, Hotjar, and LinkedIn Insight tags. It is well-optimized for SEO, mobile-friendly, and includes accessibility features. The site employs HTTPS with good SSL configuration and uses reCAPTCHA v3 for bot protection. However, explicit security headers are not visibly implemented, and no formal security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as encrypted connections, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The absence of a security.txt file and incident response information suggests room for improvement in transparency and readiness. Privacy compliance is strong with detailed policies and GDPR adherence. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen the security posture and trustworthiness.

Chillisauce is a well-established UK-based event organizing company specializing in stag dos, hen parties, corporate events, and group activity weekends across Europe. With over 20 years of experience and a large customer base, it holds a leading market position in the UK. The website presents a professional and consistent brand image, offering a wide range of services and destinations. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, integrates multiple marketing and analytics tools, and is hosted with reputable providers including Amazon Registrar and Cloudflare DNS. Security posture is good with HTTPS enabled and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is safe for general audiences and trustworthy based on domain age and WHOIS data.

S

SWG Events Limited

swgevents.co.uk

60

SWG Events Limited is a small UK-based company specializing in technical production services for a diverse range of events. Their key offerings include audio, lighting, video, staging, rigging, and production management, positioning them as a leading service provider in their niche market. The website is professionally designed using the Wix platform, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO features. However, the absence of privacy and cookie policies, as well as security headers, indicates room for improvement in compliance and security posture. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but limits domain trust verification. Overall, the website presents a credible business front with clear contact information but lacks comprehensive privacy and security disclosures.

WiFi SPARK operates a specialized healthcare technology business focused on bedside entertainment and payment systems, having acquired Hospedia and rebranded to SPARK TSL. Their support portal provides detailed FAQs and resources for hospitals and patients regarding bedside units. The website is hosted on the Zendesk platform, leveraging modern web technologies such as jQuery and CSS3, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data for the subdomain is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy for its niche audience but would benefit from enhanced privacy disclosures and security documentation.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

W

Witton Lodge Community Association

wittonlodge.org.uk

48

Witton Lodge Community Association is a small non-profit organization based in the United Kingdom, focused on providing community services such as energy advice, housing support, health and wellbeing programs, and employment and skills training primarily for residents of North Birmingham. The website is built on WordPress, leveraging popular plugins like Yoast SEO and Slider Revolution, and integrates Google Analytics and push notification services for user engagement. The site demonstrates good design quality, mobile optimization, and SEO practices, with consistent branding and a clear navigation structure. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service found. Overall, the domain registration is consistent with the business history, enhancing trustworthiness. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture.

D

Dehns

dehns.com

58

Dehns is a leading European intellectual property law firm specializing in patents, trade marks, copyrights, designs, trade secrets, and consulting services. The firm boasts a top-tier reputation and extensive experience across the UK and Europe, serving a diverse clientele including individuals, businesses, in-house counsel, SMEs, startups, universities, and international associates. Their market position is reinforced by multiple prestigious awards and consistent high rankings. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google Maps API, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and public incident response policies. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and trust signals mitigate concerns. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance.

Select Shopfitters Limited is a UK-based small business specializing in bespoke shopfitting services, including retail interiors, office environments, and designer living spaces. The company emphasizes a blend of traditional craftsmanship and modern techniques, serving a diverse clientele from retail brands to private homeowners. Their website reflects a professional and consistent brand image with clear contact information and trust certifications. Technically, the site is built on WordPress using the Avada theme and incorporates common JavaScript libraries for enhanced user experience. While the site is accessible and uses HTTPS, it lacks critical security headers and privacy policies, which are important for compliance and security posture. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trust but is mitigated by the professional site content and certifications. Overall, the website presents a credible business presence with room for improvement in security and privacy compliance.

The website www.midaspr.co.uk is currently inaccessible and returns a 403 Forbidden error page, indicating that access to the content is blocked or forbidden. The domain itself is not registered according to the raw WHOIS data, which states that the domain name violates Nominet UK naming rules and cannot be registered. Consequently, there is no available business content, contact information, or security policies on the site. The technical infrastructure appears minimal, with only Google Fonts loaded externally. No analytics, scripts, or CMS technologies are detected. The security posture is poor due to lack of HTTPS, security headers, and absence of privacy or cookie policies. Overall, the website is non-functional and does not provide any business or security information.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.pslprint.com currently serves a minimal directory index page with no substantive content or business information. The absence of metadata, scripts, or structured data indicates a lack of digital maturity and technical infrastructure. The WHOIS query returned no registration data, suggesting the domain may be unregistered, expired, or privacy-protected with no public information, which severely impacts trust and legitimacy. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present to indicate compliance with data protection regulations. Overall, the site appears inactive or placeholder with no clear business presence or user engagement.

K

Kent Group

kentphk.co.uk

60

Kent Group is a UK-based railway infrastructure engineering company with offices in Mansfield and Glasgow, specializing in electrical engineering and signalling power distribution projects. The company presents itself as a national player in the railway infrastructure sector, offering comprehensive engineering services. The website is professionally designed using the Wix platform, featuring project videos and structured data to enhance search visibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content supports a credible business presence. Security posture is moderate with room for improvement in headers and HTTPS enforcement. Privacy compliance is lacking due to missing policies and consent mechanisms. Overall, the website is functional and professional but requires enhancements in security and compliance to strengthen trust and regulatory adherence.

D

Vercel Security Checkpoint

dlapiper.com

52

The website www.dlapiper.com is currently inaccessible due to a Vercel security checkpoint that blocks browser verification, resulting in a failure to load any meaningful content. Consequently, no business, contact, or compliance information is available for analysis. The domain WHOIS data is missing or unregistered, which raises concerns about the legitimacy or current registration status of the domain. The technical infrastructure is hosted on Vercel, but no further details on technology stack or performance can be ascertained due to the blocking mechanism. Security posture cannot be properly evaluated given the lack of accessible content and absence of security headers or SSL details. Overall, the site is effectively non-functional for external users, and the risk assessment is high due to lack of transparency and accessibility.

B

Better Medicare Alliance

bettermedicarealliance.org

61

Better Medicare Alliance is a well-established nonprofit advocacy and research organization focused on Medicare Advantage, representing over 225 ally organizations and more than 1 million grassroots advocates. The website serves as a comprehensive resource hub for Medicare Advantage information, policy insights, and advocacy efforts, targeting beneficiaries, healthcare providers, and policymakers. The organization holds a leading market position in Medicare Advantage advocacy in the United States. Technically, the website is built on WordPress with a custom theme and uses modern plugins such as Gravity Forms and Yoast SEO. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and OptiMonk, supported by a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized domain changes. However, it lacks DNSSEC and some recommended security headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are clearly presented, supporting compliance with GDPR and related regulations. Overall, the website presents a low-risk profile with strong business credibility and professional digital presence. Strategic improvements in security headers and DNS security would further enhance its security posture.

C

Consensus Capital Group

ccplc.com

42

Consensus Capital Group is a private equity and property development organization founded by Mark Emlick, with a domain registered since 2001, indicating a mature business presence. The website presents a professional image with clear business descriptions and consistent branding. The technical infrastructure is based on WordPress CMS using the Blocksy theme and Brizy page builder, supplemented by Rank Math SEO for search engine optimization. The site is hosted with a reputable registrar and uses HTTPS, but lacks DNSSEC and security headers, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit GDPR compliance indicators are present. Contact information is limited to a single generic email address, with no phone numbers or physical addresses found. Overall, the security posture is moderate but could be enhanced by implementing security best practices and compliance documentation.

G

Gemmell's Garden Centre Ltd.

gemmellsgardencentre.co.uk

65

Gemmell's Garden Centre Ltd. operates as Ayrshire’s largest independent garden centre, offering a wide range of gardening products, gifts, a cafe, and kids play facilities. The company targets families and gardening enthusiasts in the Ayrshire region, combining physical retail with an online e-commerce platform. Their market position is strong locally, supported by a comprehensive product catalog and community engagement via social media and newsletters. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and SEO tools, providing a good user experience with mobile responsiveness and structured data for search engines. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data due to a domain naming rules error limits full trust assessment, but the website content and social presence indicate a legitimate business. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for its retail business model.

C

Catalyst Event Production Services

catalyst-eps.com

64

Catalyst Event Production Services is a UK-based small business specializing in creative-led event production and equipment hire. Established in 2008, the company offers comprehensive event design, production, and technical crew services, targeting clients seeking innovative and memorable global events. Their website is professionally designed on the Squarespace platform, featuring multimedia content and active social media engagement. Technically, the site employs modern web technologies including HTTPS, Google Tag Manager, and Wistia video embeds, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and domain status protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent banner present but lacking formal privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

O

Opfer Logan Architects

olarchitects.com

62

Opfer Logan Architects is a Glasgow-based architectural firm with three decades of experience serving clients across the UK in sectors including commercial, retail, hospitality, education, heritage, and residential architecture. The company emphasizes relationship-driven architecture and holds ISO 9001 accreditation, indicating a commitment to quality management. The website is professionally designed using the Squarespace platform, featuring good content quality and clear navigation, optimized for mobile devices. However, the absence of visible contact information, privacy policies, and cookie consent mechanisms indicates gaps in privacy compliance and user engagement. Security posture is solid with HTTPS and HSTS enabled, but could be improved with additional security headers and incident response contacts. The domain WHOIS data is missing or unavailable, raising concerns about domain legitimacy despite the professional web presence. Overall, the site reflects a credible small architectural business but requires improvements in transparency and compliance to enhance trust and security.

Seedhill Service Station Ltd. is a small, family-run automotive service business based in Paisley, UK, with over 40 years of experience. The company specializes in vehicle servicing, MOT testing, car sales, bodywork, vehicle rental, and Mercedes Benz repairs. It holds memberships in reputable industry bodies such as the Good Garage Scheme and the Scottish Motor Trade Association, reinforcing its local market credibility. The website reflects a professional and consistent brand presence targeting local vehicle owners in Paisley and surrounding areas. Technically, the website employs a traditional tech stack including Bootstrap 3.3.7, jQuery, jQuery UI, Google Fonts, and Google Analytics. While the site is mobile-optimized and well-structured, some technologies used are outdated, which may pose security risks. The site uses HTTPS and includes a cookie consent mechanism, but lacks modern security headers and explicit privacy compliance statements. From a security perspective, the website shows moderate maturity with HTTPS enabled and cookie consent implemented. However, the absence of key security headers, use of older JavaScript libraries, and lack of visible incident response or security policies indicate areas for improvement. The WHOIS data is unavailable due to domain naming rules violations, which reduces trustworthiness and complicates verification of domain legitimacy. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced security measures, updated technologies, and improved privacy compliance to strengthen its risk posture and trustworthiness.

L

Lissan Coal Company

lccoil.com

67

LCC Oil is a small, family-owned energy supplier specializing in home heating oil and coal, serving the Cookstown area and beyond. Established in 1997 as part of Lissan Coal Company, it has grown steadily with a focus on competitive pricing, fast delivery, and customer satisfaction. The company offers online ordering and instant price quotes, targeting both domestic and commercial customers including the agriculture sector. The website reflects a professional and consistent brand image with clear business information and a customer login portal. Technically, the website is built using modern frameworks such as Blazor and Bootstrap, with Google reCAPTCHA integrated for bot protection. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. From a security perspective, the site uses HTTPS and implements basic security best practices, but lacks DNSSEC and standard security headers. No incident response or vulnerability disclosure policies are published, which could be improved to enhance security posture. The domain registration data is consistent with the business claims, showing a long-established domain with appropriate protections against unauthorized changes. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policies and contact information transparency. Strategic recommendations include enabling DNSSEC, adding security headers, publishing incident response contacts, and enhancing transparency around security practices.

I

IFS Group

ifsgroup.com

56

IFS Group is a well-established logistics company based in Northern Ireland, specializing in freight forwarding, warehousing, customs brokerage, and transport services with a global reach. The company has a strong market position supported by over 55 years of experience and holds multiple industry certifications such as ISO 9001, AEO, IATA, BIFA, and UKWA. Their website reflects a professional and comprehensive presentation of their services, targeting businesses seeking reliable and efficient supply chain solutions. Technically, the website is built on WordPress with modern technologies, optimized for performance and mobile use, and includes structured data for SEO benefits. Security-wise, the site uses HTTPS, domain lock statuses, and spam protection on forms, but could improve by enabling DNSSEC and publishing explicit security policies. Overall, the domain registration is consistent with the company's history, enhancing trustworthiness. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The site does not show any signs of malicious content or blocking by WAFs, and the content is safe for general audiences.

S

www.shaanzperiperitaunton.com

shaanzperiperitaunton.com

52

The website shaanzperiperitaunton.com is currently inaccessible, presenting a deprecated URL error message with minimal HTML content. This indicates that the site is either under maintenance, deprecated, or blocked behind Cloudflare's security mechanisms. Due to the lack of accessible content, no meaningful business description, services, or market positioning can be determined. The domain is registered with Cloudflare, Inc. since 2019, which aligns with a small or new business timeline, but no registrant details or contact information are available to verify legitimacy or business operations. From a technical perspective, the site is hosted behind Cloudflare but lacks DNSSEC and security headers, indicating a basic security posture. The SSL configuration is presumed basic but present due to Cloudflare's involvement. No metadata, scripts, or analytics tools are detected, suggesting minimal digital maturity or an inactive website. Security posture is weak due to the absence of security policies, incident response contacts, and privacy compliance documentation. The lack of content and contact details further reduces trustworthiness and business credibility. The domain registration is transparent but provides limited assurance without corroborating website content. Overall, the site presents a high risk for users due to inaccessibility and lack of transparency. Strategic recommendations include restoring accessible content, implementing comprehensive privacy and security policies, enabling DNSSEC, and improving technical and security configurations to build trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Socomec

socomec.com

66

Socomec is an established enterprise specializing in expert solutions for low voltage electrical networks, focusing on power control, safety, critical power, energy efficiency, and solar power. The company operates internationally with dedicated regional websites for multiple countries, indicating a broad market presence and a B2B business model targeting industrial and commercial electrical network operators and integrators. The website serves primarily as a country selector landing page directing users to localized content. Technically, the website employs modern web technologies including React and Piwik PRO analytics, with a progressive web app manifest and SVG icons. The site demonstrates good mobile optimization and a professional design, though accessibility and SEO could be improved. Security posture is moderate with HTTPS implied and cookie consent mechanisms implemented, but lacks visible security headers and explicit security policies. The WHOIS data is unavailable or protected, which is common for enterprise domains but reduces transparency. No contact emails or phone numbers are directly available on this landing page, though social media presence on LinkedIn and YouTube supports legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and compliance. The absence of WHOIS data is a minor concern but does not outweigh the strong business and technical indicators.

The website 'Hair Loss Consultancy' appears to be a minimal placeholder or non-functional site related to hair loss consultation services. The content is extremely limited, consisting only of a frameset structure with no metadata, no contact information, and no visible business details. The domain WHOIS lookup failed due to a naming rules violation, indicating the domain may not be legitimately registered or active. This severely impacts the trustworthiness and legitimacy of the website. Technically, the site uses outdated HTML framesets, lacks modern web technologies, and shows no evidence of HTTPS or security best practices. No privacy or cookie policies are present, and no analytics or tracking technologies are detected. Overall, the site is not professionally maintained and lacks essential features for a credible healthcare consultancy website.

The website erinadvocate.com is currently inaccessible, returning an error page indicating failure to contact the origin server. This prevents any meaningful extraction of business or technical content. The domain is registered since 1999 with Tucows Domains Inc., indicating a longstanding registration, but no DNSSEC is enabled. Due to the lack of accessible content, no privacy, cookie, or security policies are found, and no contact information or business details are available. The technical infrastructure cannot be assessed beyond the registrar and DNS information. Security posture is weak due to lack of HTTPS and security headers, and the site appears to be blocked or down, possibly due to WAF or origin server issues. Overall, the site cannot be properly evaluated, resulting in a low AI score and limited insights.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

CRT Aerials

crtaerials.co.uk

49

CRT Aerials is a small local business specializing in digital TV aerial and satellite dish installation services primarily serving Shrewsbury, Telford, and the wider Shropshire area in the United Kingdom. The company offers a comprehensive range of services including installation, repairs, signal correction, TV wall mounting, and European satellite installations. The website presents a professional and consistent brand image with clear service descriptions and contact information, targeting residential and business customers in the local region. Technically, the website is built on WordPress using the One Page Express theme and incorporates common web technologies such as jQuery, Google Fonts, and Google reCAPTCHA for form security. The site demonstrates good SEO practices with proper meta tags and structured data (JSON-LD). Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements Google reCAPTCHA to protect forms. However, it lacks important security headers and does not publish any security or incident response policies. There is no cookie consent mechanism despite the use of tracking technologies, which may pose compliance risks. The WHOIS data shows a consistent and legitimate domain registration dating back to 2011, supporting the business's credibility. Overall, the website is functional, professional, and trustworthy for its business purpose but could improve its security posture and privacy compliance to better protect users and meet regulatory requirements.

B

Business Property Network

businesspropertynetwork.co.uk

56

Business Property Network is a small real estate agency specializing in commercial property lettings and rentals primarily in Somerset and surrounding areas in the United Kingdom. The website presents a professional and consistent brand image with clear descriptions of their services and target audience focused on businesses seeking commercial properties. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and delivering a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data due to domain registration errors introduces uncertainty about domain legitimacy, though the website content and social media presence suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

Victoria Group operates as a service provider specializing in integrated port operations and supply chain management, targeting businesses requiring logistics and transportation solutions. The website presents a professional and business-focused front with clear descriptions of its core services. However, the domain registration status is questionable due to WHOIS lookup failure and domain registration errors, which may impact trustworthiness. Technically, the website is built on WordPress with modern technologies such as jQuery and Font Awesome, and it employs SEO best practices including structured data and meta tags. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and visible security policies. The security evaluation reveals no immediate vulnerabilities or exposed sensitive data, but the absence of privacy and terms of service pages, as well as missing contact information, represent compliance and trust gaps. The domain's unclear registration status further lowers the overall risk profile. Strategic improvements in security headers, privacy compliance, and domain legitimacy verification are recommended to enhance trust and security posture.

The website www.southernwines.co.uk is currently inaccessible due to rate limiting or blocking, showing only a minimal placeholder message 'local_rate_limited'. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain may be misconfigured or non-existent. Consequently, no business, contact, or technical content is available for analysis. The lack of accessible content and domain registration data severely limits the ability to assess the company's market position, services, or digital maturity. From a security perspective, the absence of HTTPS, security headers, and policies indicates a very low security posture. Overall, the site is not currently operational or accessible for meaningful evaluation.

L

Lilliput Health

lilliputhealth.co.uk

48

Lilliput Health is a well-established private healthcare clinic in the UK specializing in musculoskeletal treatments such as chiropractic, physiotherapy, sports massage, and podiatry. The business operates multiple clinic locations and offers a broad range of therapies targeting individuals seeking private healthcare services. The website demonstrates a solid market position with over 19 years of experience and strong customer trust signals, including high ratings on third-party review platforms. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS, reCAPTCHA, and consent mechanisms, though some security headers could be improved. The WHOIS data is unavailable due to a domain registration error, which is unusual but does not detract from the website's professional appearance and trustworthiness. Overall, the site is credible and functional with room for technical and security enhancements.

L

La Vita Restaurants

lavitapizzeria.co.uk

35

La Vita Restaurants is a family-oriented Italian dining group operating multiple locations in the United Kingdom. The website serves as a digital presence showcasing their restaurant locations, private dining options, gift vouchers, and cake ordering services. The business appears well-established with a domain registered since 2005, indicating longevity and market presence. The site targets general audiences seeking Italian dining experiences and related hospitality services. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and marketing tools like Google Analytics and Facebook Pixel. The infrastructure is modern and supports mobile optimization with good SEO practices. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and formal privacy or cookie policies. No direct contact emails or phone numbers are present on the homepage, limiting immediate contact options. The site does not disclose incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professional, safe, and trustworthy for its hospitality business purpose. However, improvements in privacy compliance, security headers, and contact transparency are recommended to strengthen its security posture and regulatory adherence.