Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

济南沧浪洗涤有限公司 is a medium-sized laundry and textile cleaning company based in China, founded in 2016. The company offers comprehensive laundry services including washing, drying, ironing, and folding, supported by advanced equipment and a professional workforce. Their market position is regional with established partnerships, particularly with major hospitals, indicating a trusted service provider in the manufacturing and service sector. The website reflects a business-focused approach with clear contact information and service descriptions, targeting a general audience seeking laundry solutions. Technically, the website employs a modern but basic tech stack including Bootstrap, jQuery, and Swiper.js, hosted on Alibaba Cloud. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. SEO optimization is minimal but present through meta tags. From a security perspective, the site lacks critical security headers and cookie consent mechanisms, which lowers its security posture. The domain is registered with Alibaba Cloud and has a consistent registration history aligning with the business age, indicating legitimacy. No incident response or vulnerability disclosure information is available, and privacy compliance is minimal, with no GDPR indicators. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance improvements to strengthen trust and regulatory adherence.

长

长园电力技术有限公司

cygdl.com

54

长园电力技术有限公司是一家专注于电力电缆附件和智能电网设备研发、制造及销售的国家高新技术企业，隶属于上市公司长园科技集团股份有限公司。公司提供1kV-500kV交流/直流电力电缆附件、智能电网设备、恢复电缆本体连接技术、电力系统状态监测及智能运维等产品和解决方案，服务于电力行业及智能电网领域。其市场地位稳固，拥有多项国家及省级认证资质，并参与多个大型工程项目。

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

А

Амбър

pogrebenie.net

51

Амбър е утвърдена траурна агенция в София с над 32 години опит, предлагаща широк спектър от траурни услуги и стоки, включително погребения, кремации, траурен комплекс, кетъринг и поддръжка на гробни места. Компанията разполага с няколко офиса и собствен цветарски магазин, което подсилва тяхната пазарна позиция и доверие сред клиентите. Техническата инфраструктура е базирана на Joomla CMS с използване на популярни библиотеки като jQuery и интеграция на Google Tag Manager и Google Ads за маркетинг и анализи. Сайтът е мобилно оптимизиран и предлага добра навигация и съдържание на български език. От гледна точка на сигурността, сайтът използва HTTPS и има имплементирана GDPR-съвместима политика за бисквитки с механизъм за съгласие. Въпреки това липсват някои важни HTTP заглавки за сигурност и DNSSEC не е активиран, което е препоръчително да се подобри. Липсват публично достъпни политики за сигурност и инцидентен отговор, което е препоръчително за повишаване на доверието и съответствието. Общата оценка на сайта е добра с високо ниво на бизнес достоверност и приемливо техническо изпълнение. Препоръчва се подобряване на някои аспекти на сигурността и публикуване на допълнителни политики за пълна съвместимост и прозрачност.

I

immitec GmbH

immitec.de

44

immitec GmbH is a small German company specializing in sustainable energy and capital concepts, focusing on the development, financing, and operation of solar and energy storage projects. With over 20 years of experience, the company positions itself as a trusted partner combining financing expertise with tangible asset projects. The website reflects a professional and consistent brand image targeting investors and clients interested in renewable energy investments. Technically, the site uses modern frameworks such as Bootstrap and AOS for animations, is mobile-optimized, and hosts fonts locally to ensure GDPR compliance. Security-wise, the site uses HTTPS (implied by og:url), but lacks explicit security headers and cookie consent mechanisms. No forms or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. Overall, the site is well-designed, trustworthy, and secure with minor improvements recommended in security headers and privacy notices.

The website www.cclean-bg.com represents a Bulgarian professional cleaning company named КУУЛ КЛИЙН ЕООД, offering a range of cleaning services including office, home, industrial, facade cleaning, and pest control. The business targets local Bulgarian customers with a focus on professional cleaning solutions. The website content is primarily in Bulgarian and provides phone contact numbers but lacks email or physical address details. The site uses Google Analytics and Tag Manager for tracking but does not display privacy or cookie policies, which impacts compliance and user trust. Technically, the website employs standard JavaScript libraries and Google services but lacks modern CMS or frameworks. The site shows basic mobile optimization and SEO practices but no evident security headers or HTTPS confirmation in the provided data. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy and transparency. From a security perspective, the absence of HTTPS confirmation, security headers, and privacy policies indicates a low security posture. No forms or sensitive data collection points were detected on the main page, reducing immediate risk, but the lack of compliance documentation and domain registration transparency are notable weaknesses. Overall, the site is functional but requires significant improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

ДЕЙМОС ЕООД is a Bulgarian media and telecommunications company offering television and internet services alongside media production. The website is primarily in Bulgarian and targets local consumers interested in analog and digital TV, internet packages, and advertising services. The business operates a service provider model with a local/regional market focus. Technically, the website is built on Joomla CMS with several outdated technologies such as old jQuery versions and deprecated media players, which may pose security and compatibility risks. Security posture is moderate but lacks modern security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trust. Overall, the website is functional but requires modernization and improved compliance to enhance security and user trust.

M

Meskay & Femtee (Pvt.) Ltd.

meskayfemtee.net

40

Meskay & Femtee (Pvt.) Ltd. is a Pakistani company specializing in the export of premium quality rice and other grains such as wheat and pulses. Established in 1993, the company emphasizes halal, organic, and food safety standards to serve both domestic and international markets. Their website reflects a professional business presence with clear product offerings, company information, and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, and is mobile optimized with good navigation and content quality. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data present concerns regarding compliance and domain legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced security and privacy measures.

Р

Рип-Импульс

comimpuls.com

45

Рип-Импульс is a Russian manufacturer specializing in the development, serial production, sales, and after-sales service of radio-electronic measuring instruments primarily serving the defense industry and other industrial sectors. The company has a well-established online presence with a domain registered since 2004, indicating a mature business. Their website showcases product catalogs and emphasizes technical consultation and service support. Technically, the website is built on WordPress using WooCommerce and Elementor, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

O

Oleimed, Actividades de Saúde, Lda

sapo.pt

56

Oleimed, Actividades de Saúde, Lda is a small healthcare service provider based in Portugal offering a range of medical and therapeutic services including clinical analyses, audiometric exams, physiotherapy, acupuncture, and various medical consultations. The website serves primarily as an informational blog hosted on the SAPO Blogs platform, targeting local patients and community members seeking healthcare services. The business appears to be locally focused with no indication of a larger corporate structure or subsidiaries. Technically, the website is built on a basic blog platform using HTML, CSS, JavaScript, and React.js components provided by SAPO Blogs. It employs Google Analytics and Google Tag Manager for user tracking and analytics. The site is served over HTTPS with good SSL configuration but lacks advanced security headers and comprehensive privacy or security policies. Mobile optimization and accessibility are basic but functional. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal security or incident response policies indicates room for improvement. Privacy compliance is limited due to the lack of a dedicated privacy policy and terms of service, although a cookie consent banner referencing SAPO's cookie policy is present. Overall, the website is safe and suitable for general audiences, with content focused on healthcare services. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include implementing privacy and security policies, enhancing security headers, and improving privacy compliance to strengthen trust and regulatory adherence.

J

Just all Design

just-all-design.pt

30

Just all Design is a creative and production agency based in Portugal, specializing in fashion brand development, collection design, ecological production, and local manufacturing. Established in 2008, the company targets fashion brands and designers seeking sustainable and locally produced fashion solutions. The website reflects a professional and consistent brand image with active social media engagement on Facebook, Instagram, and LinkedIn. Technically, the site is built on WordPress using the Divi theme and common plugins such as Contact Form 7 and Jetpack, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or cookie policies. The domain is currently expired for over 5 months, posing a risk to business continuity and trust. Overall, the website is functional and professional but requires urgent domain renewal and enhanced security and privacy compliance measures.

C

Clínica Veterinária Absolut Pets Lda.

absolutpets.com

66

Clínica Veterinária Absolut Pets Lda. operates a veterinary clinic located in Odivelas, Portugal, offering a wide range of veterinary services including general and specialty consultations, diagnostic exams, grooming, pet shop products, and teleconsultations. The clinic targets pet owners in the local region and positions itself as a professional and trusted provider of animal healthcare services. The website is well-structured, professionally designed, and provides clear contact information including phone and WhatsApp links. The business model focuses on direct veterinary care and pet wellness products, serving a small local market segment. Technically, the website employs modern analytics tools such as Google Analytics and PostHog, uses Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. The site is hosted on a CDN platform and uses service workers to enhance user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, but the website content and business information appear consistent and professional. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in transparency and domain registration clarity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

ANAPO is a Portuguese non-profit association dedicated to representing and defending the egg production sector in Portugal. The website serves as an informational and promotional platform targeting egg producers, industry stakeholders, and consumers interested in egg production, legislation, and benefits. The organization holds a key position in the national market as a sector representative, providing guidance and resources related to egg production and legislation. Technically, the website is built using the Laravel framework and incorporates modern web technologies such as Google reCAPTCHA for bot protection, FontAwesome for icons, and simpleParallax.js for visual effects. The site is mobile-optimized with good SEO practices and moderate performance. It uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF token usage, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security policies and headers to improve its security posture further.

The website vmfdigital.com currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. Due to this, no business descriptive content, contact information, or policies are accessible for analysis. The domain is registered since 2008 with a reputable registrar but lacks DNSSEC and advanced security configurations. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the ability to assess compliance and business credibility. The technical infrastructure appears minimal with no detectable scripts or analytics. Overall, the website is inaccessible for meaningful content or security evaluation, resulting in a low trust and quality score.

The website btcidea.eu currently serves as a minimal placeholder page referencing the Mail-in-a-Box project, an open-source email server solution. There is no direct business information, contact details, or service offerings presented on the site, limiting its utility and trustworthiness. The site appears to be in an early or dormant state without active content or engagement features. Technically, the site is hosted via OVH SAS, a reputable hosting provider, but lacks modern web technologies, security headers, and performance optimizations. No HTTPS status was provided, which is a critical security concern. Security posture is weak due to the absence of privacy policies, cookie consent mechanisms, and incident response information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, indicating significant room for improvement.

WEBINDEX is a German-language business information platform providing access to detailed company data, financial indicators, and market insights to support informed business decisions. The website targets professionals involved in market analysis, due diligence, and strategic planning. The platform integrates Google advertising services for monetization and offers a basic but functional user experience with clear navigation and relevant content. Technically, the site uses standard JavaScript and Google ad technologies, hosted by Spaceship, Inc., with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and privacy compliance. Overall, the site is legitimate with a long-established domain but would benefit from enhanced security and privacy features to increase trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.trengilly.co.uk currently serves a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is blocked by a Web Application Firewall or similar security mechanism. Due to this, no meaningful business information, contact details, or content is accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the domain may be invalid or improperly configured. The lack of accessible content and WHOIS data severely limits the ability to assess the business or website credibility. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no contact or social media information is present. Overall, the site appears to be in a protected or placeholder state rather than a fully operational business website.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

Fmiagency

fmiagency.com

61

FMI Agency is a UK-based specialist agency focusing on brand engagement, incentives, and event management services. Their website presents a professional and well-structured digital presence, showcasing a broad portfolio of services including product marketing, corporate communications, sales incentives, and event management. The company targets brands and businesses seeking to connect with employees, trade partners, and customers through strategic marketing and engagement programs. Technically, the website is built on WordPress with Elementor and Bootstrap frameworks, leveraging modern web technologies and multiple analytics and tracking tools such as Google Analytics, Hotjar, and Mouseflow. The site is mobile optimized and SEO-friendly, though it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS and reCAPTCHA usage, but DNSSEC is not enabled and security headers are not evident. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established entity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

L

LLA Logistics Learning Alliance

logisticslearningalliance.com

59

LLA Logistics Learning Alliance is a UK-based training provider specializing in logistics and supply chain management education, serving both humanitarian and commercial sectors. Established in 2004, the company offers accredited courses and qualifications from recognized bodies such as CILT, IoSCM, and the Fritz Institute, positioning itself as a leading supplier in the UK market. Their business model focuses on delivering customizable training programs to logistics professionals, leveraging over 20 years of industry experience. Technically, the website is built on WordPress using the Divi theme, integrating modern web technologies including Google Analytics, Google Tag Manager, and Tawk.to for live chat support. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are managed by IONOS SE, with HTTPS enabled ensuring secure communications. From a security perspective, the site employs HTTPS and has domain transfer protections in place but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies were found, indicating gaps in privacy compliance. The website does not show signs of WAF or content blocking, and no vulnerabilities or malicious indicators were detected. Overall, the website presents a professional and trustworthy front for its educational services but should improve privacy compliance and security hardening to align with best practices and regulatory requirements.

B

Best of the West

jrfoodservice.co.uk

42

J&R Foodservice, operating under the Best of the West brand, is a regional wholesale foodservice supplier focused on delivering fresh, frozen, ambient, and cleaning supplies sourced from over 270 approved suppliers, with a strong emphasis on Westcountry producers. The company targets professional kitchens and catering businesses in the South West UK, leveraging its membership in the Sterling Super Group to offer competitive pricing. The website is built on WordPress with standard plugins for SEO and forms, and it features a cookie consent mechanism compliant with GDPR principles. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not negate the legitimacy indicated by website content and contact information. Overall, the website is professional, user-friendly, and trustworthy for its business domain.

E

EMS Ltd

ems-ltd.org

43

EMS Ltd is a UK-based event management company specializing in comprehensive conference management and event marketing services. Their offerings cover a wide range of event types including conferences, exhibitions, seminars, and corporate events. The company positions itself as a seamless extension of client organizations, focusing on delivering event objectives such as increased profitability and enhanced delegate experiences. The website is professionally designed using WordPress with modern plugins and themes, providing good user experience and mobile optimization. Contact information and social media presence support business credibility. However, the absence of privacy and cookie policies indicates compliance gaps, and WHOIS data is incomplete, which slightly impacts trust. Security posture is generally good with HTTPS and reCAPTCHA implemented, but missing security headers and incomplete WHOIS data suggest areas for improvement.

A

ABC Plumbing

abcplumbing.co.uk

48

ABC Plumbing is a well-established small business founded in 2001, providing plumbing and heating services primarily in the West Midlands area of the United Kingdom. The company offers a range of services including breakdown cover, boiler installation and servicing, plumbing and drains, powerflush, and appliance repairs. The website reflects a professional local service provider with a clear focus on residential and light commercial customers. The business emphasizes quality workmanship backed by a 12-month guarantee and maintains transparent contact information and policies. Technically, the website is built on WordPress using modern plugins and frameworks such as Bootstrap and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although some HTTP security headers are missing. No critical vulnerabilities or suspicious domains were detected. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reputable local service provider.

L

Home | Lumina Coaching

luminacoaching.co.uk

53

The website www.luminacoaching.co.uk appears to be a coaching service site built on the Wix platform. The site uses standard Wix hosting and scripts, including Sentry for error tracking. However, the site lacks critical business and security information such as privacy policies, cookie consent mechanisms, contact details, and structured data for SEO. The WHOIS lookup for the domain failed, indicating the domain name violates Nominet UK naming rules, which raises concerns about the domain's legitimacy. Technically, the site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with no evident security headers or policies. Overall, the site presents minimal content and limited trust signals, resulting in a low trustworthiness score.

The website www.carrieelspeth.com is currently inaccessible due to rate limiting or blocking mechanisms, as evidenced by the minimal HTML content displaying 'local_rate_limited'. The WHOIS lookup indicates that the domain is not registered or the data is unavailable, which raises significant concerns about the legitimacy and operational status of the website. No metadata, business information, or contact details are present, preventing any meaningful analysis of the company's market position or services. Technically, the site lacks HTTPS and security headers, indicating a very low security posture. Overall, the site is non-functional and presents a high risk from a security and business credibility perspective.

A

Add Value Media

addvaluemedia.com

49

Add Value Media is a Madrid-based digital marketing consultancy with over 15 years of experience, offering a broad range of services including SEM, SEO, digital consultancy, media planning, and e-commerce solutions. The company positions itself as a Google and Amazon Partner, targeting businesses seeking comprehensive marketing strategies to maximize brand impact and sales. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a secure contact form with reCAPTCHA protection. Technically, the site is built on WordPress with modern plugins and analytics tools, though some security enhancements such as DNSSEC and security headers could be improved. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be more explicit. Overall, the site reflects a credible and professional business with a solid digital presence.

Central Fire Systems is a small UK-based company specializing in fire-rated and compliance-critical ceiling and compartmentation works for commercial buildings, primarily serving clients in South England. Their business model focuses on compliance-led coordination and management, subcontracting physical installation to insured specialist installers. The website presents a professional image with clear service descriptions and a target audience including fire risk assessors, consultants, and facilities managers. Technically, the site is built using modern React and Next.js frameworks, offering good mobile optimization and a moderate performance profile. However, there is a lack of advanced SEO and accessibility features. Security posture is moderate with HTTPS assumed but no visible security headers or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data raises concerns due to a future domain creation date, which conflicts with the website's operational appearance, reducing trustworthiness. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and WHOIS legitimacy to enhance trust and compliance.

The website at www.carpentryltd.co.uk is currently serving a default hosting placeholder page provided by One.com, indicating that the actual business website content is not present or the domain is not properly configured. The page title and content suggest a web hosting service rather than a carpentry business or related services. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is invalid or improperly registered. This raises significant concerns about the legitimacy and operational status of the domain. Technically, the website uses basic HTML and CSS with Montserrat font loaded from the hosting provider's CDN. There are no advanced frameworks, CMS, or business-specific technologies detected. Security posture is poor with no HTTPS or security headers observed, and no privacy or cookie policies are present. No contact information or business details are available on the page. Overall, the website appears non-functional as a business site and lacks essential security and compliance features.

Ride on Railways Ltd is a small UK-based manufacturer specializing in 5" and 7 1/4" gauge miniature railway equipment. Established in 2000, the company operates as a family-run business offering a range of locomotives, rolling stock, accessories, and custom build projects for hobbyists and commercial miniature railway operators. Their market position is niche, serving enthusiasts and specialized customers within the miniature railway sector. The website content reflects their product offerings and company history, targeting hobbyists and commercial clients alike. Technically, the website is built using legacy HTML and CSS with minimal modern frameworks or CMS detected. The site integrates Facebook social plugins but lacks modern performance and accessibility optimizations. Mobile optimization is poor, and SEO practices are basic. There is no evidence of HTTPS enforcement or security headers, which poses security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. From a security perspective, the site lacks critical protections such as HTTPS, security headers, and published security policies. No incident response or vulnerability disclosure information is provided. The WHOIS data is minimal due to domain naming rules issues but shows the domain was registered in 2000, consistent with the business claims. The overall security posture is weak, with recommendations to implement HTTPS, security headers, and privacy policies to improve trust and compliance. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

T

Teepee Electrical Limited

teepeeelectrical.co.uk

42

Teepee Electrical Limited is a UK-based manufacturer specializing in wiring looms, cable harnesses, and panel assemblies with over 25 years of industry experience. The company serves diverse sectors including automotive, rail, renewable energy, and agriculture, emphasizing quality and customer service. Their website is built on WordPress using modern plugins and SEO tools, featuring a professional design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain registration is consistent and long-term, supporting business legitimacy. Overall, the website presents a credible and professional digital presence aligned with the company's manufacturing focus.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

PZL Ltd t/a PlayZone

playiscool.co.uk

46

PlayZone Lincoln is a family-run indoor play centre located in Lincoln, UK, offering a large 10,000 sq.ft. facility with giant slides, climbing frames, and dedicated areas for children of all ages. The business focuses on providing fun and entertainment through play sessions, children's parties, private hires, and group bookings. The website reflects a professional and consistent brand image targeting families and groups seeking active recreational activities. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and Font Awesome, and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and provides clear navigation and contact options. Security posture is good with HTTPS enforced and anti-spam measures on forms, but lacks some advanced security headers and published incident response policies. The domain WHOIS data is unavailable due to a Nominet UK registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and functional but would benefit from improved domain registration transparency and enhanced security practices.

D

DrainsAid

drainsaid.com

45

DrainsAid is a UK-based drainage services company specializing in total drainage management including reactive, preventative, and repair services for both commercial and domestic clients. Operating primarily in Yorkshire and across the UK, the company offers a broad range of services such as blocked drain clearing, CCTV drainage surveys, trenchless relining, manhole rehabilitation, and excavation repairs. The website reflects a professional and well-structured digital presence with clear service offerings and multiple trust indicators including industry certifications and client logos. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, Google Analytics, and Google Tag Manager. The site is mobile-optimized and SEO-friendly with proper metadata and structured data. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA on forms, though there is room for improvement by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the active and professional nature of the website. This discrepancy impacts the overall trust score and suggests the need for further verification of domain registration details. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, DrainsAid presents a credible and professional business front with good technical implementation and security practices, but the missing WHOIS data warrants caution and further investigation.

M.A.L Pumps Ltd is a UK-based company specializing in the supply and refurbishment of rotary lobe pumps and related services. Established in 2001, the company offers a broad range of pump products including bare shaft pumps, motorized units, and spares for well-known manufacturers such as Alfa Laval. Their services extend to seal and pump refurbishment, technical assistance, and site surveys, targeting industrial and commercial customers in the manufacturing sector. The website reflects a focused B2B business model with a solid market presence in the UK pump supply industry. Technically, the website is built on an outdated WordPress 3.5.1 platform with legacy JavaScript libraries like jQuery 1.8.3, which introduces potential security vulnerabilities. The site uses standard web technologies including Google Fonts and Fancybox for UI elements. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. The absence of modern security headers and outdated software versions indicate a need for technical modernization. From a security perspective, the site uses HTTPS but lacks visible security headers and up-to-date software, increasing risk exposure. No privacy, cookie, or terms of service policies are present, which impacts compliance with GDPR and other regulations. The WHOIS lookup failed due to domain naming rules violations, raising concerns about domain legitimacy and registration consistency. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, while the business content is relevant and the site functional, the security posture and privacy compliance are weak. The domain registration irregularity further reduces trust. Strategic improvements in platform updates, security hardening, and compliance documentation are recommended to enhance credibility and reduce risk.

B

Benenden Health

benenden.org.uk

69

Benenden Health is a UK-based private healthcare provider offering affordable healthcare membership services including GP helpline, diagnostics, and approved surgical treatments. The company positions itself as a cost-effective alternative to traditional private healthcare, targeting individuals and groups seeking accessible healthcare solutions. The website reflects a mature digital presence with a professional design and clear service offerings. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and integrates marketing and analytics tools such as Google Tag Manager, Pardot, and Visual Website Optimizer. Hosting is inferred to be on Microsoft Azure CDN, supporting good performance and availability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie management. WHOIS data is unavailable due to a Nominet UK lookup error, which limits domain trust verification but the website content and branding align with the known company. Overall, the site is professional, secure, and compliant, suitable for its healthcare audience.

The website www.bixi.co.uk is currently inaccessible due to a Cloudflare security challenge page that blocks direct access to content. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain is not properly registered or is invalid. Consequently, no business information, contact details, or policies are available on the site. The technical infrastructure relies on Cloudflare's security services, including Turnstile captcha, to protect against bots and malicious traffic. However, the lack of accessible content and domain registration issues severely limit the ability to assess the company's market position or services. The security posture shows some best practices in using Cloudflare and content security policies, but the overall trustworthiness and legitimacy are low due to domain issues and lack of visible business data.

A

Atlantic Language Services

atlanticlanguages.co.uk

62

Atlantic Language Services is a professional language services provider based in Plymouth, UK, specializing in translation, interpreting, transcription, proofreading, certification, and voiceover services. The company serves local, national, and international clients, positioning itself as a trusted expert in linguistics. Their website reflects a small-sized business with consistent branding and a clear focus on quality and client service. Technically, the website is built on the MultiScreenSite platform, leveraging modern web technologies including jQuery, Google Analytics, and Snowplow for analytics, and Mapbox for geolocation services. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks some security headers and explicit security policies. Privacy compliance is basic but includes cookie consent and links to privacy and terms pages hosted on a partner domain. WHOIS data is unavailable due to domain naming rules error, limiting domain registration trust verification. Overall, the site is professional and trustworthy but could improve in security transparency and WHOIS data availability.

T

Treste Hire & Sales Ltd

treste.co.uk

57

Treste Hire & Sales Ltd is a small UK-based company specializing in the hire and sales of welding, lifting, and site equipment along with consumables and personal protective equipment. The company targets businesses and contractors requiring specialized equipment and consumables, positioning itself as a regional specialist in Chesterfield. The website reflects a professional business model focused on equipment hire, sales, and service support. Technically, the website uses a variety of JavaScript libraries including jQuery and RequireJS, with moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and SEO practices appear adequate with proper meta tags and structured navigation. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Privacy compliance is partial, with a cookie consent banner present but no privacy or terms of service pages. WHOIS data is unavailable due to domain naming rules violation, which reduces trustworthiness from a domain registration perspective. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation.

R

Red IT Solutions Limited

red-it.co.uk

63

Red IT Solutions Limited is a UK-based software company specializing in developing integration apps and bespoke solutions for accounting software platforms such as Sage 50, Sage 200, Sage Intacct, and Xero. With 25 years of experience and a strong focus on the UK and Ireland markets, they provide a wide range of customizable software products that enhance productivity and streamline business operations. Their offerings include mobile data access, e-commerce integrations, data import/export tools, and cloud hosting services. The company positions itself as a trusted partner with UK-based support and development teams, holding certifications such as Approved Sage Tech Partner and Microsoft Partner. Technically, the website is built on modern Webflow CMS with integrations for analytics and scheduling tools, optimized for performance and mobile use. Security posture is strong with HTTPS, captcha protections, and secure forms, though explicit security policies and incident response contacts are not published. WHOIS data for the domain is unavailable due to domain naming rules errors, which slightly impacts trust but does not detract from the professional presentation and business legitimacy. Overall, Red IT Solutions demonstrates a mature digital presence with a solid market position in the accounting software integration niche.

A

Advanced Components

adcomtec.co.uk

43

Advanced Components is a UK-based distributor and manufacturer specializing in high-performance hydraulic motors, pumps, brakes, and gearboxes. They serve industrial, marine, and OEM markets with over 20 years of experience as the official UK distributor for Kawasaki Precision Machinery and manufacturer of Staffa hydraulic components. The company operates from a purpose-built facility in West Yorkshire, offering extensive stockholding and technical sales support. Their website reflects a professional and well-structured digital presence built on WordPress with modern technologies and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the business credibility and website quality are high, supporting their market position as a trusted supplier in the hydraulic components sector.

A

Attain Dev Site

attain.co.uk

62

Attain is a UK-based medium-sized company specializing in healthcare consulting and delivery services exclusively for the NHS. With over 15 years of experience, it positions itself as the largest independent delivery partner dedicated to the NHS, offering services such as clinical expertise, procurement, analytics, and program management. The website is professionally designed using WordPress with modern SEO tools and demonstrates good digital maturity and mobile optimization. Security posture is solid with HTTPS and some best practices, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.