High-risk security reports

The website www.cclean-bg.com represents a Bulgarian professional cleaning company named КУУЛ КЛИЙН ЕООД, offering a range of cleaning services including office, home, industrial, facade cleaning, and pest control. The business targets local Bulgarian customers with a focus on professional cleaning solutions. The website content is primarily in Bulgarian and provides phone contact numbers but lacks email or physical address details. The site uses Google Analytics and Tag Manager for tracking but does not display privacy or cookie policies, which impacts compliance and user trust. Technically, the website employs standard JavaScript libraries and Google services but lacks modern CMS or frameworks. The site shows basic mobile optimization and SEO practices but no evident security headers or HTTPS confirmation in the provided data. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy and transparency. From a security perspective, the absence of HTTPS confirmation, security headers, and privacy policies indicates a low security posture. No forms or sensitive data collection points were detected on the main page, reducing immediate risk, but the lack of compliance documentation and domain registration transparency are notable weaknesses. Overall, the site is functional but requires significant improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

ДЕЙМОС ЕООД is a Bulgarian media and telecommunications company offering television and internet services alongside media production. The website is primarily in Bulgarian and targets local consumers interested in analog and digital TV, internet packages, and advertising services. The business operates a service provider model with a local/regional market focus. Technically, the website is built on Joomla CMS with several outdated technologies such as old jQuery versions and deprecated media players, which may pose security and compatibility risks. Security posture is moderate but lacks modern security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trust. Overall, the website is functional but requires modernization and improved compliance to enhance security and user trust.

M

Meskay & Femtee (Pvt.) Ltd.

meskayfemtee.net

40

Meskay & Femtee (Pvt.) Ltd. is a Pakistani company specializing in the export of premium quality rice and other grains such as wheat and pulses. Established in 1993, the company emphasizes halal, organic, and food safety standards to serve both domestic and international markets. Their website reflects a professional business presence with clear product offerings, company information, and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, and is mobile optimized with good navigation and content quality. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data present concerns regarding compliance and domain legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced security and privacy measures.

Р

Рип-Импульс

comimpuls.com

45

Рип-Импульс is a Russian manufacturer specializing in the development, serial production, sales, and after-sales service of radio-electronic measuring instruments primarily serving the defense industry and other industrial sectors. The company has a well-established online presence with a domain registered since 2004, indicating a mature business. Their website showcases product catalogs and emphasizes technical consultation and service support. Technically, the website is built on WordPress using WooCommerce and Elementor, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

J

Just all Design

just-all-design.pt

30

Just all Design is a creative and production agency based in Portugal, specializing in fashion brand development, collection design, ecological production, and local manufacturing. Established in 2008, the company targets fashion brands and designers seeking sustainable and locally produced fashion solutions. The website reflects a professional and consistent brand image with active social media engagement on Facebook, Instagram, and LinkedIn. Technically, the site is built on WordPress using the Divi theme and common plugins such as Contact Form 7 and Jetpack, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or cookie policies. The domain is currently expired for over 5 months, posing a risk to business continuity and trust. Overall, the website is functional and professional but requires urgent domain renewal and enhanced security and privacy compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

ANAPO is a Portuguese non-profit association dedicated to representing and defending the egg production sector in Portugal. The website serves as an informational and promotional platform targeting egg producers, industry stakeholders, and consumers interested in egg production, legislation, and benefits. The organization holds a key position in the national market as a sector representative, providing guidance and resources related to egg production and legislation. Technically, the website is built using the Laravel framework and incorporates modern web technologies such as Google reCAPTCHA for bot protection, FontAwesome for icons, and simpleParallax.js for visual effects. The site is mobile-optimized with good SEO practices and moderate performance. It uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF token usage, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security policies and headers to improve its security posture further.

The website vmfdigital.com currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. Due to this, no business descriptive content, contact information, or policies are accessible for analysis. The domain is registered since 2008 with a reputable registrar but lacks DNSSEC and advanced security configurations. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the ability to assess compliance and business credibility. The technical infrastructure appears minimal with no detectable scripts or analytics. Overall, the website is inaccessible for meaningful content or security evaluation, resulting in a low trust and quality score.

The website btcidea.eu currently serves as a minimal placeholder page referencing the Mail-in-a-Box project, an open-source email server solution. There is no direct business information, contact details, or service offerings presented on the site, limiting its utility and trustworthiness. The site appears to be in an early or dormant state without active content or engagement features. Technically, the site is hosted via OVH SAS, a reputable hosting provider, but lacks modern web technologies, security headers, and performance optimizations. No HTTPS status was provided, which is a critical security concern. Security posture is weak due to the absence of privacy policies, cookie consent mechanisms, and incident response information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, indicating significant room for improvement.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.trengilly.co.uk currently serves a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is blocked by a Web Application Firewall or similar security mechanism. Due to this, no meaningful business information, contact details, or content is accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the domain may be invalid or improperly configured. The lack of accessible content and WHOIS data severely limits the ability to assess the business or website credibility. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no contact or social media information is present. Overall, the site appears to be in a protected or placeholder state rather than a fully operational business website.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

Best of the West

jrfoodservice.co.uk

42

J&R Foodservice, operating under the Best of the West brand, is a regional wholesale foodservice supplier focused on delivering fresh, frozen, ambient, and cleaning supplies sourced from over 270 approved suppliers, with a strong emphasis on Westcountry producers. The company targets professional kitchens and catering businesses in the South West UK, leveraging its membership in the Sterling Super Group to offer competitive pricing. The website is built on WordPress with standard plugins for SEO and forms, and it features a cookie consent mechanism compliant with GDPR principles. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not negate the legitimacy indicated by website content and contact information. Overall, the website is professional, user-friendly, and trustworthy for its business domain.

E

EMS Ltd

ems-ltd.org

43

EMS Ltd is a UK-based event management company specializing in comprehensive conference management and event marketing services. Their offerings cover a wide range of event types including conferences, exhibitions, seminars, and corporate events. The company positions itself as a seamless extension of client organizations, focusing on delivering event objectives such as increased profitability and enhanced delegate experiences. The website is professionally designed using WordPress with modern plugins and themes, providing good user experience and mobile optimization. Contact information and social media presence support business credibility. However, the absence of privacy and cookie policies indicates compliance gaps, and WHOIS data is incomplete, which slightly impacts trust. Security posture is generally good with HTTPS and reCAPTCHA implemented, but missing security headers and incomplete WHOIS data suggest areas for improvement.

A

ABC Plumbing

abcplumbing.co.uk

48

ABC Plumbing is a well-established small business founded in 2001, providing plumbing and heating services primarily in the West Midlands area of the United Kingdom. The company offers a range of services including breakdown cover, boiler installation and servicing, plumbing and drains, powerflush, and appliance repairs. The website reflects a professional local service provider with a clear focus on residential and light commercial customers. The business emphasizes quality workmanship backed by a 12-month guarantee and maintains transparent contact information and policies. Technically, the website is built on WordPress using modern plugins and frameworks such as Bootstrap and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although some HTTP security headers are missing. No critical vulnerabilities or suspicious domains were detected. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reputable local service provider.

The website www.carrieelspeth.com is currently inaccessible due to rate limiting or blocking mechanisms, as evidenced by the minimal HTML content displaying 'local_rate_limited'. The WHOIS lookup indicates that the domain is not registered or the data is unavailable, which raises significant concerns about the legitimacy and operational status of the website. No metadata, business information, or contact details are present, preventing any meaningful analysis of the company's market position or services. Technically, the site lacks HTTPS and security headers, indicating a very low security posture. Overall, the site is non-functional and presents a high risk from a security and business credibility perspective.

A

Add Value Media

addvaluemedia.com

49

Add Value Media is a Madrid-based digital marketing consultancy with over 15 years of experience, offering a broad range of services including SEM, SEO, digital consultancy, media planning, and e-commerce solutions. The company positions itself as a Google and Amazon Partner, targeting businesses seeking comprehensive marketing strategies to maximize brand impact and sales. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a secure contact form with reCAPTCHA protection. Technically, the site is built on WordPress with modern plugins and analytics tools, though some security enhancements such as DNSSEC and security headers could be improved. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be more explicit. Overall, the site reflects a credible and professional business with a solid digital presence.

The website at www.carpentryltd.co.uk is currently serving a default hosting placeholder page provided by One.com, indicating that the actual business website content is not present or the domain is not properly configured. The page title and content suggest a web hosting service rather than a carpentry business or related services. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is invalid or improperly registered. This raises significant concerns about the legitimacy and operational status of the domain. Technically, the website uses basic HTML and CSS with Montserrat font loaded from the hosting provider's CDN. There are no advanced frameworks, CMS, or business-specific technologies detected. Security posture is poor with no HTTPS or security headers observed, and no privacy or cookie policies are present. No contact information or business details are available on the page. Overall, the website appears non-functional as a business site and lacks essential security and compliance features.

Ride on Railways Ltd is a small UK-based manufacturer specializing in 5" and 7 1/4" gauge miniature railway equipment. Established in 2000, the company operates as a family-run business offering a range of locomotives, rolling stock, accessories, and custom build projects for hobbyists and commercial miniature railway operators. Their market position is niche, serving enthusiasts and specialized customers within the miniature railway sector. The website content reflects their product offerings and company history, targeting hobbyists and commercial clients alike. Technically, the website is built using legacy HTML and CSS with minimal modern frameworks or CMS detected. The site integrates Facebook social plugins but lacks modern performance and accessibility optimizations. Mobile optimization is poor, and SEO practices are basic. There is no evidence of HTTPS enforcement or security headers, which poses security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. From a security perspective, the site lacks critical protections such as HTTPS, security headers, and published security policies. No incident response or vulnerability disclosure information is provided. The WHOIS data is minimal due to domain naming rules issues but shows the domain was registered in 2000, consistent with the business claims. The overall security posture is weak, with recommendations to implement HTTPS, security headers, and privacy policies to improve trust and compliance. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

T

Teepee Electrical Limited

teepeeelectrical.co.uk

42

Teepee Electrical Limited is a UK-based manufacturer specializing in wiring looms, cable harnesses, and panel assemblies with over 25 years of industry experience. The company serves diverse sectors including automotive, rail, renewable energy, and agriculture, emphasizing quality and customer service. Their website is built on WordPress using modern plugins and SEO tools, featuring a professional design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain registration is consistent and long-term, supporting business legitimacy. Overall, the website presents a credible and professional digital presence aligned with the company's manufacturing focus.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

PZL Ltd t/a PlayZone

playiscool.co.uk

46

PlayZone Lincoln is a family-run indoor play centre located in Lincoln, UK, offering a large 10,000 sq.ft. facility with giant slides, climbing frames, and dedicated areas for children of all ages. The business focuses on providing fun and entertainment through play sessions, children's parties, private hires, and group bookings. The website reflects a professional and consistent brand image targeting families and groups seeking active recreational activities. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and Font Awesome, and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and provides clear navigation and contact options. Security posture is good with HTTPS enforced and anti-spam measures on forms, but lacks some advanced security headers and published incident response policies. The domain WHOIS data is unavailable due to a Nominet UK registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and functional but would benefit from improved domain registration transparency and enhanced security practices.

D

DrainsAid

drainsaid.com

45

DrainsAid is a UK-based drainage services company specializing in total drainage management including reactive, preventative, and repair services for both commercial and domestic clients. Operating primarily in Yorkshire and across the UK, the company offers a broad range of services such as blocked drain clearing, CCTV drainage surveys, trenchless relining, manhole rehabilitation, and excavation repairs. The website reflects a professional and well-structured digital presence with clear service offerings and multiple trust indicators including industry certifications and client logos. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, Google Analytics, and Google Tag Manager. The site is mobile-optimized and SEO-friendly with proper metadata and structured data. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA on forms, though there is room for improvement by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the active and professional nature of the website. This discrepancy impacts the overall trust score and suggests the need for further verification of domain registration details. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, DrainsAid presents a credible and professional business front with good technical implementation and security practices, but the missing WHOIS data warrants caution and further investigation.

M.A.L Pumps Ltd is a UK-based company specializing in the supply and refurbishment of rotary lobe pumps and related services. Established in 2001, the company offers a broad range of pump products including bare shaft pumps, motorized units, and spares for well-known manufacturers such as Alfa Laval. Their services extend to seal and pump refurbishment, technical assistance, and site surveys, targeting industrial and commercial customers in the manufacturing sector. The website reflects a focused B2B business model with a solid market presence in the UK pump supply industry. Technically, the website is built on an outdated WordPress 3.5.1 platform with legacy JavaScript libraries like jQuery 1.8.3, which introduces potential security vulnerabilities. The site uses standard web technologies including Google Fonts and Fancybox for UI elements. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. The absence of modern security headers and outdated software versions indicate a need for technical modernization. From a security perspective, the site uses HTTPS but lacks visible security headers and up-to-date software, increasing risk exposure. No privacy, cookie, or terms of service policies are present, which impacts compliance with GDPR and other regulations. The WHOIS lookup failed due to domain naming rules violations, raising concerns about domain legitimacy and registration consistency. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, while the business content is relevant and the site functional, the security posture and privacy compliance are weak. The domain registration irregularity further reduces trust. Strategic improvements in platform updates, security hardening, and compliance documentation are recommended to enhance credibility and reduce risk.

A

Advanced Components

adcomtec.co.uk

43

Advanced Components is a UK-based distributor and manufacturer specializing in high-performance hydraulic motors, pumps, brakes, and gearboxes. They serve industrial, marine, and OEM markets with over 20 years of experience as the official UK distributor for Kawasaki Precision Machinery and manufacturer of Staffa hydraulic components. The company operates from a purpose-built facility in West Yorkshire, offering extensive stockholding and technical sales support. Their website reflects a professional and well-structured digital presence built on WordPress with modern technologies and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the business credibility and website quality are high, supporting their market position as a trusted supplier in the hydraulic components sector.

O

OCS Worldwide Limited

ocsworldwide.co.uk

48

OCS Worldwide Limited operates as a medium-sized UK-based logistics and eCommerce fulfilment provider specializing in international parcel delivery and cross-border shipping solutions. The company leverages a global network spanning over 60 countries and emphasizes compliance, agility, and premium delivery experiences, particularly focusing on the US market through USPS partnerships. Their website reflects a professional and well-structured digital presence built on WordPress with modern SEO and tracking technologies. Security posture is generally good with HTTPS and secure forms, but lacks some advanced security headers and explicit incident response policies. The WHOIS data is incomplete and indicates domain registration irregularities, which warrants further investigation. Overall, the business appears credible and well-positioned in the eCommerce logistics sector, though improvements in transparency and security disclosures are recommended.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.kiniki.com is currently inaccessible, displaying only a minimal rate limiting message and no substantive content. The WHOIS lookup indicates that the domain is either unregistered or expired, with no registrar, registrant, or creation date information available. Due to the lack of accessible content and domain registration data, it is not possible to assess the business operations, services, or market position of the entity behind this domain. Technically, the site lacks HTTPS and security headers, and no metadata or scripts are present, indicating a very low digital maturity level. Security posture is weak due to the absence of standard protections and policies. Overall, the site presents a high risk and low trust profile, with critical issues including domain registration status and content blocking.

The website www.davidbury.co.uk is currently inaccessible due to a Cloudflare security block, which prevents any meaningful content or metadata extraction. The WHOIS lookup for the domain failed with an error indicating the domain name contains too many parts, suggesting the domain is either invalid or improperly registered. Consequently, no business information, contact details, or policies are available for review. The technical infrastructure appears to rely on Cloudflare for security and hosting, but the blocking prevents assessment of performance, SEO, or security headers. The security posture is weak due to the lack of accessible data and the domain registration issues. Overall, the site presents a high risk due to inaccessibility and questionable domain legitimacy.

The website at https://www.careinbathing.co.uk/lander is currently a minimal parking or placeholder page with no substantive business content, contact information, or policies. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is likely invalid or improperly registered. This severely limits the ability to assess the business or technical maturity of the site. The technical infrastructure is minimal, relying on a parking lander system with basic JavaScript and CSS resources loaded from a third-party parking service domain. No security headers, HTTPS information, or privacy compliance indicators are present. Overall, the site lacks any meaningful content or trust signals and appears inactive or not properly configured for business use.

W

Wolverhampton Voluntary & Community Action

wolverhamptonvsc.org.uk

43

Wolverhampton Voluntary & Community Action is a small non-profit organization dedicated to providing support services to the voluntary and community sector within Wolverhampton. The website presents a professional and consistent brand image, focusing on community engagement and support. Technically, the site is built on WordPress using the Divi theme and integrates marketing tools such as MailerLite. The site is accessible, mobile-optimized, and uses HTTPS, indicating a basic level of security maturity. However, the absence of privacy and cookie policies, as well as the lack of contact information and security headers, suggests room for improvement in compliance and security posture. The WHOIS data is unavailable due to domain registration issues, which impacts domain trustworthiness but does not necessarily reflect on the organization's legitimacy. Overall, the website is functional and relevant to its target audience but would benefit from enhanced privacy, security, and transparency measures.

The website www.blythmachinery.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block triggered by the visitor's IP ASN. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain may be invalid or improperly registered. Consequently, no actual website content, metadata, or business information is available for analysis. The site displays only an access denied error page with no contact or policy information, severely limiting any assessment of business operations or security posture. Technically, the site is protected by Cloudflare, but the blocking of ASN 24940 restricts access, indicating a restrictive security posture that may impact legitimate users. No security headers or SSL details could be assessed due to lack of content. The absence of privacy, cookie, and terms of service policies further reduces compliance confidence. From a security perspective, the domain's WHOIS data absence and naming violation raise legitimacy concerns. The lack of accessible content prevents evaluation of vulnerabilities or incident response readiness. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include resolving domain registration issues with Nominet UK, reviewing Cloudflare WAF rules to avoid blocking legitimate traffic, publishing essential privacy and contact information, and conducting a comprehensive security audit once the site is accessible.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.practicon.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to a Nominet UK naming rules violation, indicating the domain is either invalid or misconfigured. No business, contact, or policy information is available on the site, severely limiting the ability to assess the company's operations or legitimacy. Technically, the site uses modern frontend frameworks like Bootstrap and Google reCAPTCHA but lacks visible security headers and HTTPS confirmation. Overall, the site appears to be blocked by a web application firewall or bot protection mechanism, resulting in a very low trust and security posture score.

T

TRAC Aircon

trac-aircon.co.uk

46

TRAC Aircon is a UK-based small business specializing in air conditioning installation and maintenance services. The company targets residential and commercial customers within the UK energy sector. The website is professionally designed with good content quality and clear navigation, supporting the business model of service provision. The technical infrastructure is based on WordPress with WooCommerce, integrating modern analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and formal privacy policies. The absence of WHOIS registration data due to domain registration errors introduces some legitimacy concerns, though the website content and structure suggest a legitimate business presence. Overall, the risk is moderate with recommendations to improve security headers, privacy compliance, and domain registration transparency.

The website www.modbod.co.nz is currently inaccessible due to rate limiting or blocking mechanisms, as indicated by the minimal HTML content containing the message 'local_rate_limited'. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered or inactive. Consequently, no business, contact, or technical information could be extracted from the site. The lack of HTTPS, security headers, and privacy policies further indicates a very low security posture and digital maturity. Overall, the site appears non-operational or protected by a security mechanism that prevents content access, resulting in a very low trust and legitimacy score.

The website foggydalefarm.co.nz is currently inaccessible due to rate limiting or blocking mechanisms, as evidenced by the minimal HTML content displaying only 'local_rate_limited'. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered since 2015 under a New Zealand registrar with standard domain protection statuses, indicating a legitimate registration consistent with a small business farm entity. However, no metadata, contact details, or policy documents are available for review. The lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. Given the blocking, the overall AI score is low, reflecting the inability to perform a comprehensive analysis.

The website at https://entreprise-sicanet.business.site/ currently serves a standard 404 error page indicating that the requested content is not found. Despite the domain being registered since 2017 with a reputable registrar (MarkMonitor Inc.) and having locked domain status, the absence of any accessible content, business information, or contact details severely limits the ability to assess the company's operations or market position. The site lacks any privacy, cookie, or terms of service policies, and no security headers or advanced configurations are present. This results in a low trust and security posture assessment. From a technical perspective, the domain is hosted on Google Domains name servers but does not have DNSSEC enabled, which is a recommended security enhancement. The website's performance and mobile optimization cannot be fully evaluated due to the lack of content. No analytics, advertising, or tracking technologies are detected, indicating minimal digital maturity. Security-wise, the site uses HTTPS but lacks additional security headers and policies, which reduces its security score. The absence of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. Overall, the website is not currently functional or representative of an active business presence, posing a risk to credibility and user trust. Strategic recommendations include restoring website content promptly, implementing comprehensive privacy and cookie policies, enabling DNSSEC, and deploying security headers to improve security posture and compliance. These steps will enhance trustworthiness and provide a foundation for further digital maturity and business growth.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Schuller & Lier Transporte Gmbh & Co. KG

schuller-transporte.de

39

Schuller & Lier Transporte Gmbh & Co. KG is a German transportation company established in 1951, specializing in the transport of various goods, container rental, and delivery of construction materials. The company operates a sizable fleet and emphasizes traditional, familial, and efficient service. Their website is professionally designed using WordPress and Elementor, providing clear information about their services and contact details. The site is fully accessible with no blocking mechanisms detected, indicating good digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business presents a credible and professional front, though WHOIS data is missing, which slightly reduces trustworthiness.

A

A. Kißling Galvanische Werke GmbH

kissling-galvanik.de

40

A. Kißling Galvanische Werke GmbH is a well-established German company specializing in galvanic surface finishing and restoration services since 1932. The company offers a broad range of electroplating and chemical coating services, including hard chrome plating, chemical nickel plating, zinc plating, silver plating, and specialized restoration of vintage car parts. Their market position is strong within the manufacturing sector, supported by certifications such as ISO 9001 and environmental awards. The website is professionally designed using WordPress and Elementor, hosted on a reputable German provider, and provides clear contact information and service descriptions. However, the site lacks a cookie consent mechanism and explicit security headers, which are areas for improvement in privacy compliance and security posture. Overall, the company demonstrates a solid business presence with good technical infrastructure and a trustworthy online footprint.

G

Gaetano Biondo GmbH

gaetano-biondo-stuckateur.de

49

Gaetano Biondo GmbH is a small, specialized master craftsman company based in Saarbrücken, Germany, providing high-quality plastering, stucco, drywall, and thermal insulation services since 2006. The company targets private customers, architects, and businesses within Saarland and nearby regions, emphasizing traditional craftsmanship combined with modern techniques. Their website reflects a professional local business with clear service offerings and contact information but lacks comprehensive privacy and security policies. Technically, the site is built on WordPress with Elementor, showing moderate performance and good mobile optimization but missing key security headers and privacy compliance features. The security posture is adequate with HTTPS enabled but could be improved by adding security headers and privacy mechanisms. Overall, the website is trustworthy and professional but should address compliance and security gaps to enhance user trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.