High-risk security reports

The domain www.acatlow.co.uk is currently not registered due to violation of Nominet UK's naming rules, specifically that the domain name contains too many parts. Consequently, the website is inaccessible and displays a generic 'Site not found' error page indicating it is unpublished or unassigned. There is no business information, contact details, or policies available on the site. The technical footprint is minimal, with only a font stylesheet loaded from an external CDN. No security headers, HTTPS configuration, or analytics scripts are detected, indicating a lack of digital maturity and security posture. Overall, the domain and website appear inactive and not legitimate for business use at this time.

M

Miller Rayner

miller-rayner.co.uk

44

Miller Rayner operates as a specialized e-commerce retailer focusing on marine and aviation crew dress clothing and uniforms. The website offers a wide range of products including men's and women's uniforms, cadet uniforms, epaulettes, insignia, and related accessories, targeting professionals and cadets in the marine and aviation sectors. The business model is retail-oriented with a niche market focus, primarily serving customers in the United Kingdom. The website is built on WordPress with WooCommerce, leveraging modern plugins and technologies to provide a functional and visually appealing shopping experience. Technical infrastructure includes React vendor scripts, LayerSlider for visual content, and PayPal integration for payments, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure payment SDK usage; however, the absence of security headers and privacy policies suggests room for improvement. The WHOIS data is incomplete due to a domain registration anomaly, but the website is fully accessible without WAF or blocking mechanisms. Overall, the site presents a professional front with moderate trustworthiness but requires enhancements in privacy compliance and security best practices to strengthen its risk profile.

M

MP Burke Transport

mpburketransport.com

40

MP Burke Transport is a small, established haulage and logistics company based in Paisley, Scotland, with over 30 years of experience serving food and drink producers across Scotland and the UK. Their services include UK transport, groupage and logistics, warehousing, and freight forwarding. The company emphasizes quality and professionalism, maintaining a fleet of eight vehicles and trailers with high standards for equipment and driver presentation. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Slider Revolution, with moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional site content. Overall, the website is functional and credible but would benefit from enhanced security and compliance documentation.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

First Zipper UK Ltd

zippaproducts.co.uk

40

Zippa Products is a UK-based family business established in 1985 specializing in supplying promotional workwear, branded clothing, PPE, and custom embroidery and printing services. The company serves a diverse range of industries including construction, offshore, hospitality, sports, and education, providing a comprehensive product range to meet operational and branding needs. The website is professionally designed using WordPress and WooCommerce, optimized for performance and mobile responsiveness, and secured with HTTPS and reCAPTCHA on forms. However, the absence of explicit privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable due to domain lookup issues, which slightly impacts trustworthiness from a domain registration perspective. Overall, the business presents a credible and professional online presence with room for improvement in privacy compliance and security headers.

The website www.garrards-timber.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access. No actual business content, contact information, or company details are accessible, preventing a thorough analysis of the business or its services. The WHOIS lookup for the domain failed due to an invalid domain format error, suggesting the domain 'www.garrards-timber.co.uk' is not a registered domain but rather a subdomain or misconfigured domain name. This lack of registration data severely impacts the trust and legitimacy assessment of the domain. Technically, the site uses modern libraries such as Bootstrap 5.3.3 and Google reCAPTCHA, but no further infrastructure or CMS details are available. Security posture is limited to the presence of reCAPTCHA, with no visible HTTPS or security headers information. Overall, the site is currently blocked from analysis, resulting in a low AI score and limited insights.

A

Arcadia (South West) Limited

arcadiasw.co.uk

45

Arcadia (South West) Limited operates as a professional accounting and tax advisory firm serving owner-managed businesses, sole traders, and private individuals primarily in Somerset and Weston super Mare, UK. The company offers a comprehensive range of services including accounts preparation, bookkeeping, payroll, tax planning, and VAT returns, positioning itself as a trusted local financial services provider. The website reflects a professional and consistent brand image with clear contact information and service descriptions, supporting its market position as a small but client-focused firm. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Smart Slider 3 for UI components. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security practices, particularly the implementation of HTTP security headers and verification of SSL/TLS configurations. From a security perspective, the site employs a cookie consent mechanism and maintains a privacy policy, indicating awareness of GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to an invalid query limits the ability to fully verify domain registration legitimacy, but the website's professional presentation and contact details support its credibility. Overall, the website presents a low-risk profile with a solid business foundation and adequate privacy compliance. Strategic improvements in security headers, SSL configuration, and incident response documentation would enhance the security posture and trustworthiness further.

P

Parfetts Go Local

golocalextra.co.uk

44

Parfetts Go Local operates as a symbol group retail network in the UK, supporting over 1,000 independent retailers under various fascia options including Go Local, The Local, and Go Local Extra. The company positions itself as the fastest growing symbol group in the UK retail sector, targeting independent retailers seeking brand affiliation and support. The website currently serves as a placeholder with a 'New Website Coming Soon' message, indicating ongoing redevelopment. Technically, the website is built using modern web technologies such as React and Next.js, hosted likely via a CDN. However, the current site content is minimal, lacking comprehensive SEO, accessibility features, and performance optimizations. No analytics or marketing tools are detected, and mobile optimization is basic. The site does not yet provide privacy, cookie, or terms of service policies, nor contact information, which limits user engagement and trust. From a security perspective, the site uses HTTPS but lacks visible security headers and documented security policies. No forms or data collection mechanisms are present, reducing immediate risk exposure. WHOIS data indicates a well-established domain registered since 2012 with consistent registrant information, supporting legitimacy. However, the absence of privacy and cookie policies and contact details represents compliance gaps. Overall, the website is in an early or transitional state with limited content and features. Strategic recommendations include completing the website with full business and legal information, implementing security best practices including headers and policies, enhancing SEO and accessibility, and adding contact channels to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

L

Lancaster Signs

lancastersigns.co.uk

46

Lancaster Signs operates a website focused on signage services, presenting itself as a small business with a straightforward branding message "Always a good sign." The website is built on WordPress using the Divi theme and incorporates Google Analytics via MonsterInsights for visitor tracking. The site content is accessible without any WAF or security challenge interference, indicating good availability. However, the absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. The WHOIS lookup failed due to a domain naming rules violation, which raises concerns about the domain's registration legitimacy and reduces overall trust in the domain ownership details. Technically, the site shows moderate performance and mobile optimization but lacks advanced security headers and visible security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.minosrestaurant.com appears to be a restaurant-related site but contains minimal visible content beyond technical scripts for cookie consent management. The absence of metadata, structured data, and business information limits the ability to fully assess the business profile. The domain WHOIS data is unavailable or unregistered, raising concerns about domain legitimacy and transparency. Technically, the site uses a Consent Management Platform indicating some GDPR compliance efforts, but lacks visible security headers and SSL configuration details. No contact or privacy policy information is present, which negatively impacts trust and compliance posture. Overall, the site shows a low level of digital maturity and security readiness.

The British Bung Company Ltd is a UK-based manufacturer specializing in traditional wooden cask closures primarily serving the brewing industry. Their product range includes keystones, shives, pegs, plugs, bespoke items, and miscellaneous wooden closures. The company positions itself as a leading manufacturer in this niche market, targeting brewing professionals and other industrial customers. The website content is professional and informative, reflecting a small-sized manufacturing business with a clear focus on quality and tradition. Technically, the website employs a modern front-end stack including jQuery, Modernizr, Foundation CSS framework, and various UI plugins such as Nivo Slider and carouFredSel. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident from the content. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security configurations. No privacy, cookie, or terms of service policies are present, indicating gaps in privacy compliance. The WHOIS lookup failed due to domain registration errors, raising concerns about domain legitimacy and registration consistency. No incident response or vulnerability disclosure information is available. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration legitimacy to enhance trustworthiness and reduce risk.

T

Todd Milburn Partnership Limited

todd-milburn.co.uk

43

Todd Milburn Partnership Limited is a well-established UK-based consultancy specializing in property and construction services, including project management, quantity surveying, employer’s agent roles, and principal designer services. With over 30 years of experience, the company positions itself as a trusted independent specialist serving both public and private sector clients. The website reflects a professional and consistent brand image, supported by recognized industry certifications such as RICS and APS. Contact information is clearly provided, enhancing business credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, hosted by 20i Ltd. The site is mobile-optimized and performs moderately well, with good SEO practices evident. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks advanced security headers and published security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the security posture is good but could be improved by implementing security headers, publishing incident response and vulnerability disclosure information, and enhancing privacy compliance. The site is free from adult or questionable content, targeting a general professional audience. The domain registration is consistent with the business claims, showing a long-standing presence and legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security and incident response documentation, and improving accessibility features to further strengthen trust and compliance.

The website www.oakhamphysio.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's market position or services. The domain WHOIS lookup failed due to an invalid domain format, raising legitimacy concerns about the domain registration itself. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers, privacy policies, or SEO optimizations. Overall, the site exhibits a low digital maturity and poor business credibility due to lack of accessible content and transparency.

O

Oaks Flooring Limited

oaksflooring.co.uk

49

Oaks Flooring Limited is a well-established, family-run flooring retailer and installer based in Kent, UK, with over 30 years of experience. The company offers a wide range of flooring products including carpets, luxury vinyl tiles, laminate, wood flooring, and smart choice flooring, targeting both homeowners and trade customers in Kent, Surrey, and London. Their market position is strengthened by multiple showrooms, a strong reputation for quality and service, and a comprehensive installation service. The website reflects a professional and trustworthy business with detailed product offerings, customer testimonials, and clear contact information. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and business review integrations. It employs Google reCAPTCHA for form security and has a cookie consent mechanism in place, indicating a good level of digital maturity and privacy compliance. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and has implemented spam protection on forms. However, no explicit security policies or incident response information is provided, and security headers are not evident in the HTML content. The WHOIS data for the domain is unavailable due to an incorrect query on the subdomain, but the website content and contact details strongly indicate a legitimate business. Overall, the security posture is good but could benefit from enhanced transparency and technical hardening. The overall risk assessment is low, with the main recommendation being to correct WHOIS queries for domain verification, implement security headers, and consider publishing security and incident response policies to further enhance trust and compliance.

Sue Prince Resourcing Ltd is a specialized recruitment agency focusing on senior and managerial roles within the hospitality sector in the UK and internationally. The company serves a diverse client base ranging from large hotel brands and venues to independent hoteliers, offering recruitment services for roles in revenue management, sales, marketing, e-commerce, events, human resources, and general management. The website reflects a niche market positioning with a clear business model centered on personalized recruitment services. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted likely via GoDaddy, and employs standard tracking tools such as Google Analytics and Google Tag Manager. While the site enforces HTTPS and includes basic bot protection on forms, it lacks advanced security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is minimal, with no cookie consent mechanism despite active tracking scripts, and no published security or incident response policies. Overall, the website is professional and functional but would benefit from security and privacy enhancements to strengthen trust and compliance.

M

Memoria Limited

southoxfordmemorial.co.uk

45

Memoria Limited operates the South Oxfordshire Crematorium and Memorial Park, providing a range of funeral, cremation, burial, and memorial services across the UK. The company positions itself as a leading crematorium operator with a focus on distinguished service in beautiful settings. Their website is professionally designed, content-rich, and targets bereaved families seeking compassionate and comprehensive funeral services. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and accessibility. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit incident response information. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the website reflects a credible and trustworthy business with strong customer engagement and positive reviews.

The website www.multistaff.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable due to an error from the Nominet UK registry indicating the domain name is invalid and cannot be registered. Consequently, no business information, contact details, or policies are present on the site. The technical infrastructure appears minimal, with only Google Fonts loaded externally. There is no evidence of security headers, HTTPS status, or compliance documentation. Overall, the site is effectively non-functional and lacks any visible digital maturity or security posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

J

JH Shouksmith & Sons Ltd

shouksmiths.co.uk

49

JH Shouksmith & Sons Ltd is a well-established UK-based mechanical and electrical contracting company with over 200 years of family-led experience. The company specializes in delivering comprehensive mechanical and electrical packages for construction projects ranging from £50k to over £7m. Their services include plumbing, heating, air conditioning, fire alarms, security, data, PV, and plantroom installations. The business targets construction industry clients across the UK and maintains a strong market position supported by multiple industry certifications and a professional online presence. Technically, the website is built on the SeeCMS platform and utilizes a range of JavaScript libraries including jQuery, Slick Slider, and FontAwesome. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is provided by NetHosted Ltd, consistent with the domain registration data. Analytics are implemented via Google Tag Manager and Google Analytics, with moderate user tracking. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries, though it lacks visible security headers and explicit security policies. The use of an outdated jQuery version and absence of cookie consent mechanisms indicate areas for improvement. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture. Overall, the website is professional, trustworthy, and aligned with the company's business claims. Recommendations include updating JavaScript libraries, implementing security headers, adding cookie consent mechanisms, and publishing terms of service and security policies to strengthen compliance and trust.

The website at www.quadrantabs.co.uk is inaccessible, returning a 403 Forbidden error page with no content or metadata available. The domain itself is invalid according to the Nominet UK WHOIS data, which states the domain name contravenes naming rules and cannot be registered. Consequently, no business information, contact details, or technical infrastructure details can be derived from the site. The lack of accessible content and invalid domain status severely limits any meaningful analysis of the business or its digital presence. From a technical perspective, the site shows no signs of modern web technologies, security headers, or HTTPS configuration. The absence of any metadata, scripts, or external links further indicates the site is either misconfigured or non-existent. Security posture is very weak due to the lack of HTTPS and security headers, and the site is effectively blocked from public access. Given the domain is invalid and unregistered, the legitimacy of the website is highly questionable. There are no privacy, cookie, or terms of service policies present, and no contact or business information is available. Overall, the site presents a high risk of being non-legitimate or abandoned, and no trust indicators are present. Strategically, it is recommended to verify the domain registration status and correct any domain naming issues. If this is a legitimate business, they should ensure proper domain registration, configure HTTPS, and publish relevant business and security information to build trust and comply with privacy regulations.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.airconditioningwales.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. No actual business content, contact information, or policies are available for review. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK rules, suggesting the domain may not be properly registered or is misconfigured. This severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection, but no other frameworks or CMS are detectable. The lack of visible security headers and absence of HTTPS information further reduce confidence in the site's security maturity. Privacy and cookie policies are missing, and no contact or business details are presented, which negatively impacts trust and compliance. From a security perspective, the use of reCAPTCHA is a positive control against automated abuse, but the absence of other security best practices and the domain registration issues raise concerns. The site is effectively blocked for analysis, resulting in a low security score and overall AI rating. Overall, the site appears to be either under construction, misconfigured, or protected by aggressive security controls that prevent meaningful external analysis. Strategic recommendations include resolving domain registration issues, providing full website content and business information, implementing HTTPS and security headers, and publishing privacy and cookie policies to improve trust and compliance.

M

MET Parking Services

metparking.com

45

MET Parking Services operates as a UK-based provider specializing in innovative car park management solutions. The company positions itself as a leading service provider within the transportation sector, targeting car park operators and managers across the UK. The website reflects a professional business model focused on service delivery with a medium-sized organizational footprint, founded around 2017. Technically, the website is built on WordPress using the Avada theme, incorporating modern JavaScript libraries such as jQuery and Splide.js, and integrates SEO tools like Yoast SEO. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. Security-wise, the site employs HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies were detected, indicating gaps in privacy compliance. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the site presents moderate risk with recommendations to improve privacy compliance, security headers, and verify domain registration status.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website hosted at ww19.dartfordreboreandengines.co.uk is operating on an invalid domain as per the Nominet UK WHOIS registry, which explicitly states the domain cannot be registered due to naming rules violations. The site content is minimal and primarily consists of an embedded iframe loading content from a third-party domain, which raises concerns about the legitimacy and intent of the site. There is no visible business information, contact details, or privacy policies, although consent management scripts are present indicating some attempt at GDPR compliance. The lack of HTTPS and security headers further weakens the security posture of the site. Technically, the site uses JavaScript and a ConsentManager CMP for cookie consent, but lacks modern web standards such as SSL/TLS encryption and security headers. The embedded iframe content is suspicious and may pose security risks. The site performance and user experience are poor due to minimal content and unclear navigation. From a security perspective, the invalid domain registration, absence of HTTPS, and suspicious external content are critical vulnerabilities. No incident response or security policies are visible, and no contact channels for security issues are provided. Overall, the site presents a high risk for users and lacks trustworthiness. Strategically, it is recommended to migrate to a valid domain with proper registration, implement HTTPS, remove suspicious third-party content, and provide clear business and privacy information to improve legitimacy and security posture.

The website eclipsehomecare.co.uk currently serves a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. No business-related content, metadata, or structured data is accessible, preventing a full assessment of the company's online presence or services. The domain is registered since 2009 with a reputable UK registrar, 123-Reg Limited, but the lack of accessible content severely limits the ability to evaluate the business or technical infrastructure. No contact information, privacy policies, or security practices are visible on the site. The website's security posture cannot be assessed due to the absence of accessible content and security headers. Overall, the site appears inactive or restricted, which poses a risk to trust and credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

403 - Forbidden

speedcouriers.co.uk

36

The website www.speedcouriers.co.uk is currently inaccessible, returning a 403 Forbidden error page. The domain WHOIS data is invalid and indicates the domain is not properly registered under Nominet UK rules. No business content, contact information, or privacy policies are available for analysis. The lack of accessible content and domain legitimacy severely limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers, HTTPS confirmation, or modern web technologies. The security posture is weak due to the absence of accessible content and security best practices. Overall, the site presents a high risk due to domain registration issues and lack of transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.etherington-meats.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a web application firewall or bot protection mechanism. The domain WHOIS lookup failed with an error from the Nominet UK registry stating the domain name contains too many parts and cannot be registered, suggesting the domain may be invalid or misconfigured. Due to the lack of substantive website content, no business information, contact details, or policies are available for analysis. The technical infrastructure is minimal, relying on Bootstrap CSS and Google reCAPTCHA scripts. Security posture is weak with no visible security headers or HTTPS information. Overall, the site is not currently providing meaningful content or trust signals, resulting in a low legitimacy and security score.

The Rainham Group website currently serves as a placeholder announcing a forthcoming new website focused on commercial refrigeration and air conditioning services including maintenance, service, and installation. The business appears to target commercial clients requiring refrigeration and air conditioning solutions. The website content is minimal, with a single phone contact and no additional business or compliance information. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern CMS or frameworks. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating a low digital maturity level. The absence of WHOIS registration data is a significant concern, suggesting either the domain is not registered or WHOIS information is withheld, which impacts trust and legitimacy. Overall, the security posture is weak with no visible best practices implemented.

Total Book-keeping Limited is a small, local UK-based bookkeeping and accounting service provider with over 10 years of business experience. The company offers a range of services including bookkeeping, VAT returns, CIS returns, and payroll, targeting small and medium businesses primarily in Worcestershire and the Midlands. They have a partnership with NJR Accountancy Services to provide a comprehensive accounting solution. The website content is straightforward and business-focused, though the technical implementation is basic and lacks modern security features such as HTTPS and security headers. The WHOIS data for the domain is invalid or missing, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the business appears credible but would benefit from technical and security improvements.

The website www.tpfire.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable and indicates the domain is invalid according to Nominet UK naming rules, which severely limits the ability to verify the legitimacy or business details of the entity behind the site. No metadata, contact information, or privacy policies are present, and the site lacks any visible business or security-related content. Technically, the site only loads a Google Fonts resource and no other scripts or frameworks are detected. The security posture cannot be assessed due to lack of access and absence of security headers or HTTPS information. Overall, the site is effectively non-functional and does not provide any trust or business signals.

Peter G May Chartered Surveyors is a small UK-based professional service provider specializing in property surveying, valuations, and management for residential and commercial clients. The website presents a basic but clear overview of their services and contact information, targeting local property owners and buyers. Technically, the site uses legacy HTML and JavaScript with no modern CMS or frameworks detected, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR standards. The WHOIS data reveals the domain www.petergmay.co.uk is invalid or unregistered due to Nominet UK naming rules, raising legitimacy concerns despite the professional appearance of the site. Overall, the site requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

CRC North Ltd

crcnorth.com

48

CRC North Ltd is a small, family-owned UK-based firm of Chartered Surveyors established in 1987, specializing in property development, project management, and investment services within the Greater Manchester, Merseyside, and Cheshire regions. The company positions itself as an experienced regional player with a focus on maximizing land and property asset potential through professional expertise and commercial acumen. The website reflects this business focus with clear service descriptions and a professional design, although it lacks comprehensive contact details and policy disclosures. Technically, the website employs common frontend technologies such as jQuery, Bootstrap, and UIkit, with a CMS indicated as MYOB. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. Security-wise, the domain is well-registered with appropriate domain status locks, but the website lacks DNSSEC, security headers, and visible HTTPS enforcement details, which lowers its security posture. The security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are needed in security headers, DNSSEC, and privacy compliance. The absence of privacy and cookie policies and contact information for incident response reduces compliance and trustworthiness. Overall, the website is safe, professional, and suitable for general audiences, but it could benefit from enhanced security and compliance measures. Strategically, CRC North should prioritize publishing privacy and cookie policies, implementing DNSSEC, adding security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen their security posture and align with GDPR and industry best practices.

W

WT Hills

wthills.com

46

WT Hills is an established independent firm of Chartered Quantity Surveyors and construction consultants operating primarily in the south of England. With over 100 years of combined experience, they provide a comprehensive range of services including cost consultancy, project management, contract administration, CDM advisory, party wall surveying, and dispute resolution. The company maintains multiple regional offices and is regulated by RICS, reinforcing its professional credibility. Their website reflects a professional and consistent brand image targeting construction industry clients such as developers, contractors, and property owners. Technically, the website is built on WordPress using modern themes and plugins, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is partial, with a cookie consent banner but no privacy or terms of service pages. Overall, the website is trustworthy and professional but could enhance security and privacy transparency.

The website www.lionsprings.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. This indicates the site is protected by a Web Application Firewall (WAF) or similar bot mitigation technology, blocking normal content access. The domain WHOIS lookup failed due to a naming rules violation, suggesting the domain is invalid or improperly registered. No business, contact, or policy information is available on the page, limiting the ability to assess the company's operations or credibility. Technically, the site uses modern frontend libraries like Bootstrap and Google reCAPTCHA but lacks visible SEO, accessibility, or performance optimizations. Security posture is minimal beyond bot protection, with no additional security headers or policies detected.

P

Preston Hydraulics

prestonhydraulics.co.uk

46

Preston Hydraulics operates as a supplier and fitter of hydraulic, pneumatic, and industrial hoses, serving primarily industrial and commercial clients in the South West UK. Founded in 1991, the company positions itself as a prominent distributor in its sector, offering key services including supply of pumps, valves, high-pressure hoses, lifting equipment, and repair and fitting services. The website reflects a professional business presence with consistent branding and relevant content tailored to its target audience. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks advanced accessibility features.

S

Welcome - smithfieldmarket.com

smithfieldmarket.com

45

Smithfieldmarket.com is a website established in 2006, likely representing a small business entity. The site is built on WordPress CMS and utilizes common frontend libraries such as Semantic UI, Flowbite, and Font Awesome, with SEO optimization handled by the Yoast SEO plugin. The website content is minimal with no detailed business description or contact information visible in the provided data. The domain registration is consistent and stable, with no privacy protection, indicating transparency and legitimacy. However, the absence of privacy and cookie policies, as well as lack of contact details, reduces the overall trust and compliance posture. Security-wise, HTTPS is enabled and domain status flags provide protection against unauthorized changes, but DNSSEC is not enabled and security headers are not detected, suggesting room for improvement.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website flexi-offices.co.uk represents a small local business, Geum Limited, offering flexible serviced office rentals in St Andrews, Fife, Scotland. The business targets small to medium enterprises or professionals seeking high-quality office space with flexible lease terms. The site provides basic information about the offices, contact details, and location but lacks modern digital features such as privacy policies, cookie consent, or security best practices. Technically, the site is built with simple HTML and CSS, without modern frameworks or CMS, and shows limited mobile optimization and accessibility. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, which may expose the business to compliance risks. WHOIS data is unavailable due to domain naming rules violation, which reduces trust in domain legitimacy. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Tough Construction Ltd is a small UK-based construction company with a long-established domain since 1998. The company is currently rebuilding its website, which is in an under construction state but provides essential contact information including phone and email. The business targets local clients seeking construction services. Technically, the website uses standard HTML, CSS, and JavaScript with Google Fonts and Google Maps integration. It is hosted by 123-Reg Limited, a reputable UK registrar and hosting provider. The site is mobile optimized and uses HTTPS, but lacks advanced security headers and privacy policies. Security posture is moderate with secure form handling but could be improved with additional headers and compliance documentation. Overall, the website is functional but basic, with room for enhancements in privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

It’s About Time is a small, established retail business specializing in antique clocks, watches, barometers, and some Victorian and Georgian furniture. Operating from Westcliff-on-Sea, Essex, UK, the company offers buying, selling, and repair services with over four decades of experience. The business is a member of reputable horology guilds, enhancing its credibility within the antique clock market. The website serves as an informational and sales platform, featuring product listings and contact details, targeting collectors and antique enthusiasts primarily in the UK region. Technically, the website is built with basic HTML, CSS, and JavaScript, including Google Analytics for visitor tracking and Google Ads conversion tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. SEO is basic but present with meta keywords and descriptions. No advanced security headers or policies are implemented, and no privacy or cookie policies are found, indicating limited compliance with modern privacy regulations. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and privacy policies reduces the overall security maturity. WHOIS data for the domain is unavailable due to an invalid query including the 'www' prefix, which reduces trustworthiness from a domain registration perspective. However, the website content and contact information suggest a legitimate small business. Overall, the website is functional and provides essential business information but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.