Security Directory

The website www.worknet.co.uk currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the main content is blocked by a Web Application Firewall or similar security mechanism. Due to this, no business-related content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or market position. The domain WHOIS lookup failed with an error citing domain naming rule violations, suggesting potential issues with domain registration legitimacy or configuration. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no analytics or marketing tools beyond reCAPTCHA are detected.

L

Security Verification

lakelandtileandbathrooms.co.uk

48

The website www.lakelandtileandbathrooms.co.uk currently serves only as a security verification page employing Google reCAPTCHA v3 to prevent automated access. No actual business content, contact information, or legal policies are present, indicating that the site is either under protection or not fully deployed. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, suggesting the domain is invalid or misconfigured. This severely limits the ability to assess the business or technical maturity of the entity behind the site. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA v3, but lacks visible security headers and HTTPS information, which are critical for secure web operations. The absence of privacy and cookie policies further indicates poor compliance with data protection regulations. The site is effectively blocked by a WAF or similar security mechanism, preventing full content access and analysis. From a security perspective, the use of reCAPTCHA is a positive measure against bots, but the lack of other security best practices and the invalid domain registration raise significant concerns. The overall risk is high due to the inability to verify legitimacy, lack of transparency, and minimal content. Strategic recommendations include resolving domain registration issues, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear business and contact information to improve trust and compliance.

H

Howells Railway Products Ltd

howells-railway.co.uk

58

Howells Railway Products Ltd is a UK-based manufacturer specializing in precision railway equipment with over 70 years of industry experience. The company offers a diverse range of products and services including specialist design, manufacturing, and re-engineering, serving clients globally across more than 36 countries. Their market position is supported by strong client relationships with major industry players and recognized certifications such as Rail Approved, RISQS, and BSI. Technically, the website is built on WordPress using common plugins like Yoast SEO and Contact Form 7, with integration of Google Analytics and Typekit fonts. The site is well-structured, mobile-optimized, and provides a professional user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and shows minor backend PHP notices. Privacy and cookie policies are not found, indicating room for compliance improvement. WHOIS data is unavailable due to domain naming rules violation, which slightly impacts trust from a domain registration perspective but does not detract from the business legitimacy evident on the site. Overall, the website reflects a credible and established business with moderate technical maturity and some security and compliance gaps to address.

N

Nameshift.com

houseoffire.co.uk

56

The website houseoffire.co.uk is a domain sales landing page operated via Nameshift.com, a Netherlands-based domain escrow and transfer service. The business focuses on providing a secure, fast, and fee-free domain purchase experience for buyers, ensuring payment only after successful domain transfer. The site is minimalistic with placeholder content indicating the domain is for sale rather than an active business presence. The technical infrastructure is modern, leveraging SvelteKit and hosted by Hosting Concepts B.V., but lacks comprehensive privacy and security policies. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the site is legitimate but basic, with room for improvement in compliance and security transparency.

redHotsource is a small UK-based business specializing in high-quality embroidered and printed branded clothing and promotional merchandise, primarily serving clients in Colchester, Essex. The company offers a broad range of services including branded clothing, high visibility apparel, promotional gifts, and printing services, with a notable partnership with the Essex Fire Brigade Recreational Fund. The website is professionally designed using WordPress and WooCommerce with the Divi theme, featuring modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Bing UET. Security measures include HTTPS and Google reCAPTCHA on forms, though some security headers are missing and no incident response information is provided. The domain WHOIS data is unavailable due to a naming rules violation, which impacts trustworthiness from a registration perspective but the website content and contact details appear legitimate and consistent. Overall, the site presents a professional and trustworthy front for its business operations.

C

Citizens Advice Havant

citizensadvicehavant.org

71

Citizens Advice Havant is a well-established local charity providing free, confidential advice services as part of the national Citizens Advice network. Their services cover a broad range of social support areas including debt, benefits, housing, employment, and consumer issues. The organization targets residents in Havant and surrounding areas, operating under a non-profit model funded by government and charitable grants. The website reflects a professional and trustworthy presence with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Vue.js, modular JavaScript, and optimized web fonts, hosted under Cloudflare's registrar services. The site is fast, mobile-optimized, and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be better documented. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Contact information is prominently displayed and verified. No incident response or security policy pages were found, which could be an area for improvement. The domain registration is very recent, which is somewhat unusual given the organization's long history, possibly indicating a recent domain transfer. Overall, the website presents a low-risk profile with strong trust indicators and a solid technical foundation, suitable for its non-profit advisory role.

D

Milling Machines | Lathe Machines - DTS UK

dtsuk.co.uk

58

The website www.dtsuk.co.uk appears to be a minimal Wix-hosted site with very limited content and no identifiable business information or contact details. The domain WHOIS lookup failed due to a registry error indicating the domain name is invalid under Nominet UK naming rules, which severely undermines the legitimacy and trustworthiness of the domain. Technically, the site uses Wix platform technologies and includes Google Tag Manager and Sentry for analytics and error tracking, but lacks essential security headers and privacy compliance mechanisms. There are no visible privacy policies, cookie consent banners, or terms of service, and no contact information is provided. Overall, the site presents a low level of digital maturity and business credibility.

HarveyHughes Ltd is an established independent rural consultancy firm founded in 2008, specializing in providing professional support and technical advice to farmers, landowners, and rural businesses across the United Kingdom. Their comprehensive service portfolio includes farm management, asset management, environmental management, renewable technology, financial business management, planning and development, and more. The company positions itself as a trusted advisor with a strong focus on experience-led consultancy delivered by qualified professionals. The website reflects a professional and consistent brand image targeting agricultural and rural business clients. Technically, the website is built on WordPress using the Elementor page builder and OceanWP theme, leveraging modern web technologies such as jQuery, FontAwesome, and Swiper.js for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS ensuring encrypted communication, but lacks advanced security headers and DNSSEC, which are recommended to enhance domain and site security. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. There is no visible incident response or vulnerability disclosure information, which could be improved to demonstrate security maturity. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and privacy compliance measures to reduce risk and improve user trust. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing incident response contact channels.

S

Simply Fone Ltd

simplyfone.com

47

Simply Fone Ltd operates as a UK-based telecommunications provider specializing in affordable international and domestic call services for both residential and business customers. The company positions itself as a low-cost alternative with a range of telecom solutions including line rentals, mobile override, business telephone systems, and bulk SMS services. Their market presence is supported by 24/7 customer support and competitive pricing, targeting UK consumers and businesses seeking cost-effective telecom options. Technically, the website employs legacy JavaScript libraries and Google Analytics for tracking, with basic SEO and mobile optimization. Security posture is moderate with HTTPS enabled but lacks critical security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, verifying domain registration, and improving mobile responsiveness to strengthen both security and user experience.

U

UK Antarctic Heritage Trust

ukaht.org

59

UK Antarctic Heritage Trust (UKAHT) is a well-established non-profit organization dedicated to the protection and preservation of historic Antarctic bases along the Antarctic Peninsula. The website serves as an educational and engagement platform, providing information about their conservation efforts, visitor experiences, and ways to support their mission. The organization has a clear market position as a specialist heritage conservation entity with a focus on Antarctic history and environmental stewardship. Their digital presence includes a WordPress-based website with integrated e-commerce via Shopify, social media outreach, and educational content.

P

Private by Design, LLC

agenmatic.ai

65

Agenmatic.ai is a technology company specializing in AI-powered lead generation and client acquisition automation. The platform monitors over 40 online communities including Reddit, HackerNews, and IndieHackers to detect high-intent buying signals and generate personalized AI replies, enabling service providers and agencies to find clients faster and more efficiently. The company targets SaaS firms, freelancers, consultants, and marketing teams, positioning itself as a cutting-edge solution for real-time client discovery and engagement. Technically, the website is built on modern frameworks such as React and Next.js, leveraging Cloudflare DNS and Google Identity Services for authentication. The site demonstrates excellent design quality, mobile optimization, and SEO practices, with fast performance and good accessibility. Analytics are implemented via Microsoft Clarity, providing moderate user tracking. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized transfers or deletions, and avoids exposing sensitive data. However, DNSSEC is not enabled, and no explicit security policy or incident response information is published. Privacy compliance is supported by comprehensive privacy and cookie policies, though no active cookie consent mechanism is detected. Overall, Agenmatic.ai presents a professional and trustworthy online presence with a strong business model and technical foundation. The main risk factors are minor security and privacy compliance gaps and an anomalous WHOIS domain creation date, which should be investigated further. Strategic recommendations include enabling DNSSEC, publishing a security policy, implementing cookie consent, and adding vulnerability disclosure information.

C

...

cryptorun.games

48

The analyzed website is a minimalistic redirect landing page primarily serving as an affiliate gateway to a crypto gaming site (cryptorun.games). It lacks substantive content, business information, or user engagement features. The domain is very recently registered (March 2024) and uses Cloudflare DNS without DNSSEC, indicating basic technical setup but limited maturity. The site employs obfuscated JavaScript and a hidden form with encrypted data, which raises concerns about transparency and potential security risks. No privacy, cookie, or terms of service policies are present, and no contact information is provided, limiting compliance and trust. Overall, the site appears to be a low-trust affiliate marketing platform with questionable content safety due to its association with crypto gaming and potential gambling.

A

AeroEducate

aeroeducate.org

52

AeroEducate is an educational platform dedicated to inspiring the next generation of aviation professionals through free, age-appropriate aviation activities, STEM projects, and career pathways. The website targets K-12 students, parents, teachers, and EAA chapters, providing resources to ignite passion for aviation and aerospace careers. The platform is affiliated with the Experimental Aircraft Association (EAA), lending credibility and trust to its offerings. Technically, the site employs modern JavaScript libraries, the Foundation CSS framework, and Brightcove for video delivery, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.