Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website countyinsurance.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page, which prevents access to the actual site content. The domain is registered since 2002 with Ionos SE, a reputable registrar, indicating a legitimate and established domain. However, no business information, contact details, or policies are visible due to the WAF block. The technical infrastructure includes Cloudflare's Turnstile captcha and strict Content-Security-Policy headers, demonstrating a focus on security but limiting content accessibility. Overall, the security posture is moderate given the protection mechanisms, but the lack of accessible content and policies results in a low overall risk assessment and business credibility score.

R

R Longstaff & Co LLP

eckfords.co.uk

56

Eckfords Estate Agents, trading under R Longstaff & Co LLP, is a well-established independent estate agency operating primarily in the Lincolnshire market towns of Bourne and Spalding. Founded in 1990 and merged with R. Longstaff & Co LLP in 2022, the company offers a comprehensive range of property services including residential sales, lettings, property management, commercial and agricultural services, and valuations. The business targets local property buyers, sellers, landlords, and tenants, leveraging deep local knowledge and a strong ethical ethos to maintain its market position. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization, and includes modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized and employs HTTPS with a valid SSL certificate, ensuring secure communications. Google Analytics is used for visitor tracking with a minimal user tracking level. However, the site lacks some security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and CAPTCHA on contact forms but lacks advanced security headers and a vulnerability disclosure policy. The absence of WHOIS data due to domain naming rules error introduces some uncertainty regarding domain registration legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website presents a credible and professional front for a small local real estate business with room for enhancement in security and privacy compliance to strengthen trust and regulatory adherence.

Coxhoe Service & Supply is a small UK-based business specializing in the sale, service, and hire of industrial cleaning equipment such as pressure washers, floor cleaning machines, and heaters. Positioned as a premier regional supplier in the North East of England, the company targets commercial and industrial clients requiring cleaning solutions and spare parts. The website is built on the EKM ecommerce platform and uses legacy technologies like jQuery 1.4.2, with basic SEO and mobile optimization. Security posture is moderate with HTTPS enabled but lacking modern security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, the website is functional and business-focused but would benefit from technical and security improvements to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

Pizzarella Grille

pizzarellagrilleofbrynmawr.com

50

Pizzarella Grille is a local Italian restaurant located in Bryn Mawr, Pennsylvania, specializing in pizza and a wide range of Italian dishes. The business offers dine-in, delivery, pickup, and catering services, targeting local residents and visitors seeking authentic Italian cuisine. The website provides a comprehensive menu with detailed product descriptions and pricing, supporting online ordering. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, and uses Cloudflare for DNS services. The domain is registered with GoDaddy and has been active since 2016, consistent with the business's operational timeline. Security-wise, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy and cookie policies are absent, indicating a compliance gap. Overall, the website is functional and professional but would benefit from improved privacy compliance and security hardening.

The domain www.embassie.com currently appears to be unregistered or expired as indicated by the WHOIS query returning no match. The website is non-functional, displaying a PHP error message about a missing MySQL extension required by WordPress, suggesting a backend misconfiguration or incomplete deployment. There is no accessible content, metadata, or business information available on the site. Technically, the site lacks HTTPS, security headers, and any modern web technologies, resulting in a very low digital maturity score. From a security perspective, the absence of HTTPS and security headers, combined with the backend error, indicates a poor security posture with significant vulnerabilities. No privacy, cookie, or terms of service policies are present, and no contact or business details are available, which further diminishes trustworthiness. Overall, the domain and website are not currently operational or credible, posing a high risk for users and no business value in its current state.

The website www.autocarecornwall.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to content. The WHOIS lookup for the domain failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or misconfigured. No business, contact, or policy information is available on the accessible page, severely limiting the ability to assess the company's operations or legitimacy. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the site scores low on content quality, security posture, and business credibility due to these limitations.

A

Aven Training Partnership Ltd

aventraining.com

45

Aven Training Partnership Ltd is a UK-based company specializing in training and assessment services for construction workers and professionals. Their offerings include NVQ training, CSCS site labourer cards, health and safety courses, first aid training, and consultancy services. The company targets construction industry workers in the UK, positioning itself as a niche provider with recognized certifications and partnerships. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization. It uses common plugins and tracking tools such as Google Analytics and Yoast SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business information appear professional and trustworthy.

Homecare Plus Limited is a family-run domiciliary and independent supported living care provider based in the United Kingdom. The company focuses on delivering high-quality, person-centred care services with an emphasis on dignity, respect, and transparency. Their key services include Independent Supported Living and Domiciliary Care, supported by experienced clinical staff including registered nurses. The company holds a Good rating from the Care Quality Commission (CQC), which is a significant trust indicator in the healthcare sector. Technically, the website is built on WordPress using the Salient theme and common plugins such as WPBakery Page Builder and Formidable Forms. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and privacy-related policies. The website performance is moderate, with basic SEO and accessibility features implemented. From a security perspective, the site benefits from HTTPS and secure form handling but lacks comprehensive security headers and formal privacy and cookie policies. The absence of WHOIS data due to domain registration issues raises concerns about domain legitimacy, although the website content and certifications suggest a legitimate business operation. No signs of WAF or content blocking were detected. Overall, the website presents a professional and trustworthy front for a small healthcare service provider but would benefit from enhanced privacy compliance, improved security headers, and resolution of domain registration inconsistencies to strengthen trust and security posture.

The website www.cobblelanecured.com is currently inaccessible due to rate limiting or blocking mechanisms, as indicated by the minimal HTML content containing only the message 'local_rate_limited'. No meaningful metadata, content, or business information is available for analysis. The WHOIS lookup failed to find any registration data for the domain, suggesting it is either unregistered or the data is not publicly available. This severely limits the ability to assess the legitimacy, business operations, or security posture of the entity behind the domain. From a technical perspective, the lack of accessible content and absence of security headers or HTTPS configuration indicates a very low level of digital maturity. No privacy, cookie, or terms of service policies were found, and no contact or incident response information is available. These factors combined suggest the website is either under development, abandoned, or intentionally blocked. Security posture is weak due to the absence of HTTPS and security headers, and the domain's unregistered status raises significant trust concerns. Without accessible content or registration data, the risk of phishing or malicious intent cannot be ruled out. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include registering the domain properly, implementing HTTPS and security best practices, publishing clear privacy and cookie policies, and providing transparent contact and incident response information to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Smash & Co

fromsmash.com

76

Smash & Co operates the website fromsmash.com, a technology company specializing in secure, fast, and sustainable large file transfer services. The platform offers free and premium plans, including features such as password protection, ephemeral links, and an API for automation. The company positions itself as a responsible alternative to competitors like WeTransfer, emphasizing security and environmental impact reduction. Technically, the website is built on modern Angular framework with integrations for Google Tag Manager and Facebook Pixel, hosted on professional infrastructure with AWS DNS and OVH registrar. Security posture is strong with HTTPS, encryption in transit and at rest, ephemeral links, password protection, and regular external audits by Synacktiv. Privacy compliance is robust with clear policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the website demonstrates high professionalism and trustworthiness.

I

Infomaniak Network SA

swisstransfer.com

67

SwissTransfer is a secure, free large file transfer service operated by Infomaniak Network SA, a Swiss hosting provider. The service allows users to send files up to 50 GB without registration, with files stored in Switzerland and transfers retained for up to 30 days. The website is well-branded and targets a general audience seeking secure and easy file sharing solutions. Technically, the site uses modern frameworks such as Angular and StencilJS, integrates Google reCAPTCHA for bot protection, and employs Matomo for analytics. The site is mobile optimized and uses HTTPS with good security practices, although explicit security headers and privacy policies are not clearly presented in the HTML content. WHOIS data for the .com domain is unavailable, which limits domain trust assessment, but the strong association with Infomaniak supports legitimacy. Overall, the site presents a professional and trustworthy service with room for improvement in privacy transparency and contact availability.

P

Power Factors

powerfactors.com

65

Power Factors is a specialized company offering a comprehensive renewable energy management software suite called Unity, designed to optimize renewable energy assets across their lifecycle. The company positions itself as a leader in the renewable energy software market, serving a global customer base with advanced solutions including SCADA, power plant control, energy management, and asset performance management. Their offerings are enhanced by AI-driven tools such as Unity REMI, which provide actionable insights and operational efficiencies. Technically, the website is built on HubSpot CMS and integrates modern analytics and marketing technologies with a strong focus on privacy compliance and user experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not fully disclosed. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and business indicators suggest legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security disclosures and domain registration transparency.

P

Power Factors

inaccess.com

65

Power Factors is a medium-sized company specializing in renewable energy management software, offering a comprehensive suite called Unity that supports the entire asset lifecycle for renewable energy assets. Their market position is strong with over 600 global customers and backing from significant investors like Vista Equity Partners and Mubadala. The company targets renewable energy asset owners and operators, providing software and hardware solutions to optimize energy production and management. Technically, the website is built on the HubSpot CMS platform, utilizing modern marketing and analytics tools such as Google Analytics, LinkedIn Insight, and Demandbase. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Performance is moderate, with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers and published security policies are lacking, and no vulnerability disclosure or incident response information is available. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and external references support a credible business presence. Overall, the website demonstrates a mature digital presence with strong business credibility but would benefit from enhanced security transparency and domain registration verification.

The website www.autonstyle.co.uk currently serves only a security verification page implementing Google reCAPTCHA v3 to prevent automated access. No business-related content, contact information, or policies are accessible, indicating the site is effectively blocked by a Web Application Firewall or similar security mechanism. The domain WHOIS lookup failed due to domain naming rules violations, suggesting the domain may not be properly registered or is invalid under Nominet UK policies. This lack of registration data and absence of business information severely limits trust and legitimacy assessments. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for bot protection, but no other technologies or CMS platforms are detectable. The site lacks visible security headers, HTTPS enforcement cannot be confirmed, and no privacy or cookie policies are present, indicating poor privacy compliance and security posture. Security-wise, the use of reCAPTCHA is a positive measure against bots, but the absence of HTTPS confirmation, security headers, and privacy policies are significant gaps. The domain's invalid registration status further undermines trust. Overall, the site is at high risk from a security and compliance perspective, and the content is inaccessible to normal users without passing the verification challenge. Strategically, the site requires immediate remediation to establish valid domain registration, implement HTTPS, add security headers, and provide clear privacy and cookie policies. Without these, the site cannot be considered trustworthy or compliant with standard security and privacy regulations.

M

Melksham Lions Club

melkshamlions.org.uk

48

Melksham Lions Club is a local non-profit community service organization affiliated with Lions Clubs International, serving the Melksham area in Wiltshire, UK. The website provides information about the club's mission, meetings, events, and contact details, targeting local community members interested in volunteering and social activities. The site is built on WordPress with common plugins and integrates social media and basic analytics. Security posture is moderate with HTTPS enabled and email obfuscation, but lacks advanced security headers and privacy compliance features. The WHOIS lookup failed due to domain naming rules but the domain appears legitimate and active. Overall, the website is functional, trustworthy, and serves its community purpose effectively.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Robert Smith Painting & Decorating is a small local business specializing in painting and decorating services. The website is minimalistic and dated, with basic HTML and CSS and no modern web technologies or CMS detected. The site lacks critical security features such as HTTPS and security headers, and no privacy or cookie policies are present, indicating low digital maturity. The WHOIS lookup failed due to domain registration issues, raising concerns about the legitimacy or proper registration of the domain. Overall, the website provides basic information but lacks professional polish and security best practices.

G

Green Classic & Vintage Spares

gsparkplug.com

64

Green Classic & Vintage Spares operates a specialized e-commerce platform focused on supplying classic and vintage automotive spare parts, including spark plugs, ignition components, fuel and oil products, and motorcycle accessories. The website targets automotive enthusiasts and restoration professionals primarily in the UK market. The company emphasizes competitive pricing and technical expertise, positioning itself as a niche leader in its sector. Technically, the website is built on Magento, leveraging modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel. The site is secured with HTTPS and employs Cloudflare Turnstile captcha for bot mitigation, indicating a moderate level of security maturity. However, the absence of visible privacy and cookie policies and the lack of WHOIS registration data for the domain introduce compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced transparency and security best practices.

The website www.thegreenmanatinglewhite.co.uk is currently inaccessible beyond a Cloudflare security verification page employing Turnstile captcha, indicating bot protection measures are active. The domain itself is not registered due to contravention of Nominet UK naming rules, specifically that the domain name contains too many parts. Consequently, no legitimate WHOIS data or registrant information is available. The website does not expose any business-related content, contact information, or policies, limiting the ability to assess business operations or market positioning. Technically, the site uses Cloudflare's security services and implements a Content-Security-Policy header, but no further technical or SEO optimizations are evident due to the blocked content. Security posture is moderate given the use of Cloudflare protection, but the lack of accessible content and domain registration issues severely impact trust and credibility.

Meridian Healthcare is a small complementary health clinic located in Hinckley, Leicestershire, offering a broad range of holistic health services including osteopathy, chiropody, massage, hypnotherapy, and wellness classes such as Pilates and Tai Chi. The clinic emphasizes individualized patient care blending Western and Eastern health philosophies. The website features patient testimonials and detailed service descriptions, targeting local residents seeking complementary health treatments. Technically, the site uses PulseCMS and older JavaScript libraries, with Facebook SDK integration for social media presence. Security posture is moderate but weakened by outdated libraries and lack of visible security headers or privacy policies. The domain WHOIS data is unavailable due to a naming rules violation error from Nominet UK, raising concerns about domain registration legitimacy. Overall, the website is functional and informative but would benefit from improved security practices and compliance documentation.

The website www.petersykeslandscapes.co.uk currently serves only a security verification page employing Google reCAPTCHA v3 to prevent automated access. No actual business content, contact information, or company details are accessible. The domain WHOIS lookup fails due to a naming rules violation, providing no registrar or registrant data. This severely limits the ability to assess the business legitimacy or operational maturity. Technically, the site uses Bootstrap for styling and Google reCAPTCHA for bot protection but lacks visible security headers or privacy policies. Overall, the site appears inaccessible to general users and lacks transparency, which negatively impacts trust and credibility.

P

Printmarshall Creative

printmarshall.co.uk

45

Printmarshall Creative is a small UK-based business specializing in graphic design and printing services, including business cards, brochures, leaflets, wedding items, and promotional gifts. The company targets local businesses and individuals in Peterborough and surrounding areas, positioning itself as a reliable partner for print projects of various scales. The website is professionally designed using WordPress with SEO optimization and social media integration, reflecting a moderate level of digital maturity. Technically, the site employs common web technologies and plugins but lacks some advanced security headers and explicit privacy documentation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response information are recommended. Overall, the site is trustworthy and safe for general audiences, but the domain WHOIS data is unavailable due to registration issues, which slightly impacts the trust assessment.

S

Samaritans

samaritans.org

70

Samaritans is a well-established UK-based non-profit organization dedicated to providing emotional support and suicide prevention services. The website reflects a strong commitment to accessibility, privacy, and user engagement, targeting individuals in need of mental health support. Their market position is solid within the non-profit sector, with key services including helpline support and community outreach. Technically, the website employs modern technologies such as Google Tag Manager and OneTrust for consent management, ensuring compliance with GDPR and other privacy regulations. The site is mobile-optimized and designed with accessibility in mind, providing a positive user experience. Security posture is robust with HTTPS enforced and consent mechanisms in place, although explicit security headers could be more visible. Overall, the domain appears legitimate despite the lack of WHOIS data, likely due to privacy protection. Strategic recommendations include enhancing security header transparency and establishing a public vulnerability disclosure policy.

S

St Mary's Church Oldswinford

stmaryschurcholdswinford.org.uk

45

St Mary's Church Oldswinford is a local Church of England parish church serving the Oldswinford community in Stourbridge, UK. It operates as a registered charity providing religious services such as Sunday worship, baptisms, weddings, funerals, and community engagement activities. The website reflects a small non-profit organization focused on community outreach and worship facilitation. Technically, the site is built on WordPress using the Mesmerize theme, integrating common plugins for events and social media. The infrastructure is modern with HTTPS enabled and basic mobile optimization, but lacks advanced security headers and privacy compliance mechanisms. Security posture is moderate with no critical vulnerabilities detected but room for improvement in headers and privacy policies. The WHOIS data is unavailable due to domain naming rule violations, which raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate church entity. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

S

Saltford Community Association

saltfordhall.co.uk

44

Saltford Community Association operates Saltford Hall, a community venue funded by local donations and managed by voluntary trustees. The organization serves the local Saltford community by providing room hire, hosting events, and offering financial support funds. The website reflects a small non-profit entity focused on community engagement and local services. Technically, the website is built using WYSIWYG Web Builder 21, incorporates Font Awesome icons, and uses Google Analytics and Tag Manager for visitor tracking. The site is basic in design and mobile optimization but functional with clear navigation. Security posture is moderate; no explicit security headers or SSL configuration details were found, and no forms collect sensitive data. Privacy and cookie policies are absent, which impacts compliance. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises concerns about domain registration legitimacy despite the website's legitimate community focus. Overall, the site is safe, trustworthy for general audiences, but would benefit from improved security and privacy compliance measures.

P

Patchworking Garden Project

patchworkinggardenproject.co.uk

46

Patchworking Garden Project is a small UK-based non-profit organization focused on improving lives through community gardening and fostering friendship. The website serves as a digital presence to promote their mission and engage the community. The organization appears to be well-established since 2014, with active social media channels and a clear community-oriented business model. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in metadata and structured data. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy and terms of service, although a cookie consent mechanism is implemented. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

S

Scouts

scouts.org.uk

54

The website www.scouts.org.uk appears to represent a large non-profit organization focused on scouting activities. However, the WHOIS lookup failed due to domain naming rules violations, and no registration data could be extracted, limiting verification of domain legitimacy. The website content is currently inaccessible or blocked by a Cloudflare security mechanism (Turnstile), preventing a full content and technical analysis. The site uses modern web technologies such as Vue.js and Google Tag Manager for analytics, indicating a contemporary technical infrastructure. Security posture cannot be fully assessed due to lack of visible security headers and SSL details, but the presence of Cloudflare suggests some level of protection. Privacy and cookie policies are not detected in the provided content, which is a compliance gap. Overall, the site is safe for general audiences with no adult content detected. The current risk assessment is moderate due to limited data availability and access restrictions.

S

Salisbury Methodist Church

salisburymethodist.org.uk

47

Salisbury Methodist Church is a longstanding non-profit religious organization serving the local community in Salisbury, UK. Founded in 1750, the church offers worship services both in-person and online, community activities, and outreach programs such as support for the local foodbank. The website reflects a well-maintained digital presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by a reputable UK provider. Security posture is adequate with HTTPS and reCAPTCHA implemented, though additional security headers and formal policies could enhance protection. Privacy compliance is evident with a privacy policy page, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professional, supporting the church's mission effectively.

The Royal Air Force website serves as the official digital presence of the UK's air and space defense force, providing comprehensive information about its operations, aircraft, personnel, and community support. The site is professionally designed with a clear focus on delivering authoritative content to a broad audience including UK citizens, military personnel, and international allies. The use of modern web technologies such as Bootstrap and Mura CMS, combined with strong SEO and accessibility practices, reflects a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is consistent with UK Ministry of Defence domain privacy policies and does not detract from the site's legitimacy. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

K

Kirby Muxloe Free Church

kirbyfree.org

58

Kirby Muxloe Free Church is a small, community-focused non-profit religious organization based in the United Kingdom. The church provides regular Sunday services, children and youth programs, community events, and supports missionary work. The website reflects a well-established local institution with historical roots dating back to the late 19th century. Technically, the site is built on the IONOS MyWebsite platform, utilizing legacy JavaScript libraries and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacking modern security headers and using outdated libraries, which pose potential risks. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from technical and compliance improvements.

F

Friends of Portland Works

friendsofportlandworks.org

52

Friends of Portland Works is a small UK-based non-profit charity dedicated to preserving and renovating the historic Portland Works building in Sheffield, notable for its role in the history of stainless steel. The organization operates primarily through fundraising and community engagement, targeting local supporters and heritage enthusiasts. Their website reflects a focused mission with clear information about trustees, history, and ways to get involved. Technically, the site is built on WordPress with common plugins and uses GoDaddy hosting. It employs Google Analytics for visitor tracking but lacks advanced security headers and cookie consent mechanisms. The domain registration is consistent with the charity's founding date and shows good domain management practices. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture.

A

ARCSR

arcsr.org

62

ARCSR is an academic and research-focused entity specializing in architecture education and studio-based research. The website serves as a platform to present their educational and research activities related to the built environment, particularly in contexts of rapid change and resource scarcity. The site is built on the Wix platform, leveraging standard Wix technologies and scripts, and is hosted by Wix. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. No contact or incident response information is provided, which limits trust and compliance indicators. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.rugbydementiasupport.org.uk is currently inaccessible due to a Cloudflare origin DNS error (Error 1016), indicating that Cloudflare cannot resolve the domain to an origin server. The WHOIS lookup failed with an error stating the domain name contains too many parts and cannot be registered, suggesting the domain is either misconfigured or invalid under Nominet UK rules. Consequently, no actual website content, metadata, or business information is available for analysis. The site is protected by Cloudflare, but the DNS misconfiguration prevents content delivery, resulting in a poor security posture and zero content quality. No privacy, cookie, or terms policies are detectable, and no contact information or forms are present. The domain's legitimacy is questionable due to the lack of valid WHOIS data and registration status. Overall, the site is non-functional and untrustworthy in its current state.

R

Rough Lee Care Home

roughleehome.org.uk

48

Rough Lee Care Home is a small, established non-profit residential care provider for adults with physical disabilities, operated by The Alex Group Charity in Accrington, UK. The website presents a professional and well-structured digital presence built on WordPress with modern plugins and SEO optimizations. The home has a strong reputation supported by consistent 5-star RDB ratings and CQC registration. However, the domain WHOIS data is unavailable due to a naming rules violation, which raises some concerns about domain registration legitimacy. Security posture is adequate with HTTPS and secure forms, but lacks explicit security headers and incident response policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the website is trustworthy and informative but would benefit from enhanced privacy compliance and security transparency.

S

Sea Sanctuary

seasanctuary.org.uk

53

Sea Sanctuary is a small UK-based non-profit organization focused on marine sanctuary experiences and community engagement. The website currently serves as a holding page with minimal content but provides clear contact information and uses modern WordPress infrastructure. The technical setup includes WooCommerce and Elementor plugins, Google Analytics for visitor tracking, and a comprehensive cookie consent mechanism powered by CookieYes. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no detected privacy policy or terms of service pages. Overall, the website is legitimate and stable, but content and compliance could be improved to enhance trust and user experience.

L

Lions Clubs District 105SE

lionsgiving.co.uk

61

Lions Clubs District 105SE operates as a charitable foundation supporting Lions Clubs in the South East England region, including Kent, Sussex, and Surrey. The organization focuses on humanitarian appeals, community service projects, fundraising, and membership engagement. The website serves as a hub for information dissemination, donation facilitation, and volunteer recruitment, positioning itself as a trusted regional non-profit entity affiliated with Lions Clubs International. Technically, the website is built on Microsoft ASP.NET WebForms technology, utilizing modern JavaScript libraries such as jQuery and Font Awesome for UI enhancements. It integrates third-party services including Termly for cookie consent management and Azure Application Insights for telemetry. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by clear privacy and cookie policies, and GDPR considerations appear addressed. Contact information is prominently provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front for the charitable organization, though WHOIS data is incomplete due to a lookup failure. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security and incident response policies to further strengthen trust and compliance.

The website www.charity-link.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS query for the domain failed, providing no registrar, registration dates, or registrant information, which raises concerns about the domain's legitimacy and transparency. No metadata, structured data, or business information is available to assess the company's operations or market position. Technically, the site lacks any detectable technologies, scripts, or security headers, and no privacy or cookie policies are present. This severely limits the ability to evaluate the website's digital maturity or compliance posture. Security-wise, the absence of HTTPS information and security headers, combined with the access restriction, indicates a poor security posture and potential misconfiguration or intentional blocking. Overall, the site scores very low on trustworthiness and business credibility, and the lack of accessible content prevents a thorough analysis.

The Mashudu Projects is a small UK-based charity established in 2001, focused on providing support and empowerment to the poor and needy in the Vhembe District of Limpopo Province, South Africa. The organization relies on volunteer efforts and donations to deliver community aid, education, and health-related projects. The website serves as an informational platform to attract volunteers and donors but lacks modern digital features and comprehensive contact or policy information. Technically, the website is built using basic HTML and CSS without any detected CMS or advanced frameworks. It lacks mobile optimization and accessibility features, and no modern analytics or marketing tools are integrated. The site does not use HTTPS, which is a significant security concern, and no security headers or privacy policies are present, indicating a low level of digital maturity and compliance. From a security perspective, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, exposes the site to risks and non-compliance with data protection regulations such as GDPR. The malformed WHOIS data further reduces trust in the domain's legitimacy. Overall, the security posture is weak, and the site would benefit from immediate improvements in encryption, policy transparency, and secure data handling. The overall risk assessment suggests that while the organization appears legitimate based on content and charity registration, the website's technical and security shortcomings could undermine user trust and expose the organization to compliance risks. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, securing forms, and clarifying domain registration details to enhance credibility and security.

S

Reconnect Your Domain | Wix.com

severnambulance.org.uk

50

The domain www.severnambulance.org.uk is currently not connected to any live website content. The website displays a Wix placeholder page indicating that the domain is not linked to an active site. The WHOIS lookup failed due to the domain violating Nominet UK's naming rules, specifically that the domain name contains too many parts, rendering it invalid for registration. Consequently, no registrar, creation, expiry, or registrant information is available. The absence of any business content, contact details, or policies on the website suggests that this domain is either misconfigured or not legitimately in use. From a technical perspective, the site is hosted on the Wix platform and uses React 18.2.0 along with Wix's FedOps logger. However, the site lacks any meaningful content, SEO optimization, or accessibility features. Security posture is weak due to the absence of HTTPS headers, security policies, or forms. No analytics or advertising scripts beyond Wix's standard scripts are present. Security evaluation highlights critical issues including the domain's invalid status, lack of SSL configuration details, and no security headers. The site does not provide privacy or cookie policies, nor does it offer any contact or incident response information. These factors collectively indicate a very low trustworthiness and business credibility. Overall, the domain appears inactive or improperly configured, with no evidence of legitimate business operations or security compliance. It is recommended to either properly register and configure the domain or discontinue its use to avoid confusion or potential misuse.

The website www.k2-eng.com is currently inaccessible, returning a 403 Forbidden error page served by openresty/1.25.3.1. There is no visible content, metadata, or business information available for analysis. The WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or inactive. Due to the lack of accessible content and registration data, a comprehensive assessment of the business, technical infrastructure, and security posture is not possible. The site appears offline or restricted by server or firewall settings, resulting in a very low trust and credibility score.

M

Mark Specialist Applications Limited

markspecialistapplications.co.uk

51

Mark Specialist Applications Limited is a UK-based specialist provider of industrial repair and protective coating services, focusing on sectors such as marine, petrochemical, manufacturing, power generation, and water treatment. The company offers a comprehensive range of onsite and workshop services including blast cleaning, butyl liners, erosion and corrosion control, and composite repairs. Their expertise and over 100 years of combined technical experience position them as a trusted partner for maintenance and asset protection in demanding industrial environments. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience and business credibility. However, the WHOIS data is incomplete due to a domain naming rules error, which slightly impacts trustworthiness from a domain registration perspective. The site lacks cookie consent mechanisms and visible security headers, indicating areas for improvement in privacy compliance and security posture. Overall, the digital infrastructure is modern and functional, but enhancements in security policies and compliance disclosures would strengthen the company's online trust and regulatory adherence.

S

Suzanne Lock Business Services

suzannelock.com

52

Suzanne Lock Business Services operates a professional website offering accounting, bookkeeping, and payroll services targeted at UK small businesses. The business model is based on fixed monthly fees and emphasizes a family-run approach with Xero-based solutions. The website is built on the Wix platform, utilizing standard Wix scripts and polyfills, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is limited, with no visible security headers or privacy policies, and the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site presents a professional front but requires improvements in security and compliance to enhance trustworthiness.

The website www.seventhwavedesign.com is currently inaccessible, displaying a Cloudflare 523 error indicating that the origin server is unreachable. This prevents access to any actual website content, metadata, or business information. The domain WHOIS query returned no match, suggesting the domain may not be registered or is under privacy protection, but no registrant details are available. Due to the lack of accessible content and registration data, a comprehensive business and security assessment is not feasible. The site appears to be protected by Cloudflare as a CDN and WAF, but the origin server is either down or misconfigured, causing the error. No privacy policies, contact information, or security headers are detectable, and no analytics or advertising scripts are present.

The website www.learnwithgo.co.uk currently serves only a security verification page implementing an invisible Google reCAPTCHA v3 challenge, indicating that access to the actual website content is blocked by a Web Application Firewall or similar bot protection mechanism. No meaningful business content, contact information, or policies are accessible, severely limiting the ability to assess the company or its services. The domain WHOIS lookup failed with an error from the Nominet UK registry stating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or misconfigured. This raises significant concerns about the legitimacy and operational status of the website. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for bot mitigation but lacks visible HTTPS enforcement, security headers, or SEO and accessibility optimizations. The minimal content and lack of business or compliance information result in a low trust and credibility profile. Security posture is weak beyond the bot protection mechanism, with no evidence of standard security headers or policies. Overall, the website is inaccessible for meaningful analysis due to the security challenge page and domain registration issues. The risk profile is high due to the lack of transparency, missing WHOIS data, and absence of compliance or contact information. Strategic recommendations include resolving domain registration issues, removing or properly configuring the WAF to allow legitimate access, implementing HTTPS and security headers, and publishing comprehensive privacy and contact information to improve trust and compliance.

Goldworks International UK LTD operates as a UK-based supplier specializing in used trucks, tipper trucks, and related equipment, serving both business and private clients domestically and internationally. The company positions itself as a leading used vehicle supplier in the UK with a broad inventory and export capabilities. The website is professionally designed with multilingual support, facilitating international customer engagement. Technically, the site employs Bootstrap and jQuery, though some libraries are outdated, which may pose security risks. HTTPS is enforced with visible SSL seals, but security headers are absent, and no cookie consent mechanism is present, indicating partial compliance with modern security and privacy standards. The WHOIS data is missing or inconsistent, which detracts from domain trustworthiness but does not directly impact the operational legitimacy evidenced by clear contact information and business details. Overall, the website presents a credible business front with room for technical and security improvements.