High-risk security reports

La Vita Restaurants is a family-oriented Italian dining group operating multiple locations in the United Kingdom. The website serves as a digital presence showcasing their restaurant locations, private dining options, gift vouchers, and cake ordering services. The business appears well-established with a domain registered since 2005, indicating longevity and market presence. The site targets general audiences seeking Italian dining experiences and related hospitality services. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and marketing tools like Google Analytics and Facebook Pixel. The infrastructure is modern and supports mobile optimization with good SEO practices. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and formal privacy or cookie policies. No direct contact emails or phone numbers are present on the homepage, limiting immediate contact options. The site does not disclose incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professional, safe, and trustworthy for its hospitality business purpose. However, improvements in privacy compliance, security headers, and contact transparency are recommended to strengthen its security posture and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Madona.lv is the official website of Madona Municipality in Latvia, serving as a comprehensive portal for local government information, public services, cultural events, and tourism. The site targets residents and visitors, providing detailed event calendars, municipal news, and access to various administrative resources. The business model is that of a government entity focused on public service and community engagement. The website maintains a consistent brand identity and offers clear navigation and relevant content for its audience. Technically, the site uses jQuery and Font Awesome, hosted behind Cloudflare DNS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and published security policies. Privacy compliance is good, with GDPR-aligned cookie management and a privacy policy page. Contact information is clearly presented, including official email and phone numbers for municipal police. Overall, the site is trustworthy and professionally maintained, reflecting its role as a government portal.

The website for M&R Fahrzeugtechnik Paderborn is currently inaccessible due to a PHP error, resulting in an error page being displayed instead of functional content. The company appears to operate in the vehicle technology sector in Germany, but no detailed business information or services are presented on the site. The technical infrastructure is based on Joomla CMS, but the presence of a PHP error indicates a lack of maintenance or misconfiguration. No privacy, cookie, or terms of service policies are present, and no contact information is available, which negatively impacts user trust and compliance. Security posture is weak due to visible errors and lack of security headers or HTTPS confirmation. Overall, the site is not currently suitable for professional or customer-facing use and requires urgent technical remediation.

The website www.passepartout-fundke.de represents a small, local retail business specializing in pictures and framing services, operating since 1984 in Greven, Germany. The business offers framed art, custom framing, and art prints from various artists, targeting local customers and art enthusiasts. The website is built on the cm4all Homepage Designer platform hosted by Telekom Deutschland, using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is accessible without any WAF or blocking mechanisms and contains rich visual content including photo slideshows and videos. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners. Contact information is clearly provided via email and phone, but no contact forms or social media links are present.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

InterPflege Westfalen GmbH is a small healthcare service provider specializing in ambulatory nursing and elderly care in Dortmund, Germany. Established in 2011, the company offers professional and individualized care services supported by a team of qualified nursing and social care professionals. The website reflects a local market position with clear communication channels and a focus on trust and professionalism. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery, Google Tag Manager, and Borlabs Cookie for GDPR-compliant cookie consent. Hosting is provided by Alfahosting, inferred from the nameservers. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced, spam protection on forms, and cookie consent mechanisms. However, there is room for improvement by implementing security headers and publishing explicit security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional online presence suitable for its healthcare service business. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility features to further strengthen compliance and user trust.

Stilblüte GmbH is a specialized garden and landscaping company based in Blankenhof, Germany, offering a broad range of services including garden design, lawn care, fence construction, path building, and woodcutting. The company targets private, commercial, and industrial clients in the local region and positions itself as an experienced and reliable provider with over 20 years of experience and more than 1000 completed projects. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Bootstrap framework for responsive design. Hosting is provided by netcup, a reputable German hosting provider. The site performs moderately well with good mobile optimization but lacks advanced accessibility features and SEO enhancements beyond basic meta tags. From a security perspective, the site uses HTTPS (implied by URLs and JSON-LD data), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy awareness, but no privacy policy or terms of service pages were found. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The domain WHOIS data is minimal but consistent with a legitimate hosting provider. The absence of detailed registrant information slightly reduces trust but does not indicate suspicious activity. Strategic recommendations include publishing a privacy policy, adding security headers, and providing incident response contacts to enhance security posture and compliance.

The website www.glaser-metallbau.de currently serves as a redirect or domain parking page managed by Parklogic, with no accessible business content or metadata. There is no evidence of company information, contact details, or service descriptions. The technical infrastructure is minimal, relying on JavaScript redirects and advertising scripts typical of parked domains. Security posture cannot be properly assessed due to lack of content and security headers. The domain WHOIS data indicates use of Parklogic name servers, suggesting the domain is not actively used by the business it purports to represent. Overall, the site lacks transparency, business credibility, and compliance indicators, resulting in a low trust and security score.

Hauskrankenpflege "humaniter" Petra Sielaff GmbH is a small, local healthcare service provider based in Kyritz, Germany, specializing in home nursing and care services since 1994. The company offers a range of services including in-home care, household management, medical nursing, and supportive care, targeting residents in the Ostprignitz-Ruppin region. The website reflects a consistent and professional brand image with clear contact information and service descriptions, positioning the company as a trusted local care provider. Technically, the website employs a traditional tech stack including Bootstrap, jQuery, and various UI plugins such as Slider Revolution and Owl Carousel. The site is moderately optimized for performance and mobile devices but lacks advanced CMS or modern frameworks. Hosting is managed via GoDaddy's domain control services. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no incident response or security policies are published. There is no cookie consent mechanism or advanced privacy compliance features, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional and trustworthy for its business purpose but requires significant improvements in security posture and privacy compliance to meet modern standards. Strategic enhancements in SSL deployment, security headers, and privacy policies are recommended to reduce risk and improve user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website superguan.net is currently an empty placeholder with no visible content, metadata, or business information. The domain is registered through Alibaba Cloud Computing (Beijing) Co., Ltd. since 2017, indicating a stable registration but no active website presence. There are no privacy policies, contact details, or security measures evident on the site. Technically, the site lacks any detectable technologies, scripts, or frameworks, and no HTTPS or security headers are confirmed. This results in a very low security posture and poor digital maturity. Overall, the site presents a high risk due to lack of content, security, and compliance features, making it unsuitable for trust or business engagement at this time.

The website www.shankechuanmei.com represents a medium-sized manufacturing company based in Jiangsu Province, China, specializing in high voltage leak detection machines primarily for the pharmaceutical and industrial sectors. The company claims a history dating back to 2004 and offers products such as high-frequency high-voltage leak detection equipment and online detection instruments. The website content is primarily in Chinese and targets industrial clients requiring specialized testing equipment. Technically, the site uses common JavaScript libraries like jQuery and Swiper.js and integrates Baidu analytics for tracking. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and no privacy or cookie policies are present. Contact information including phone numbers, email, and physical address is clearly provided, supporting business credibility. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration consistency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.dushiky.com is currently inactive or unregistered as indicated by the WHOIS data and the website returning a 404 Not Found error page. There is no accessible content, business information, or contact details available on the site. The lack of HTTPS and security headers further indicates a minimal or non-existent technical infrastructure. Due to the absence of any business presence or digital assets, the security posture is non-assessable and effectively non-existent. Overall, the domain appears abandoned or unclaimed, representing a high risk for trust and legitimacy. Strategic recommendations include registering the domain properly, deploying a secure website with HTTPS, and establishing clear business and privacy policies to build credibility.

The analyzed URL and domain correspond to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local error display within the browser rather than an actual website. Consequently, no real business or website content is accessible. The page includes embedded Chromium offline game scripts and styles but lacks any metadata, privacy policies, contact information, or business details. This indicates that the content is not a live website but a browser-generated error page. The technical infrastructure is minimal and specific to Chromium's offline error handling. Security posture cannot be fully assessed due to the absence of a real website context. Overall, this is not a legitimate website but a browser internal page, and no business or compliance information is available.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The analyzed domain currently serves a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business information, contact details, or policies are present on the page. The page content is primarily JavaScript and CSS related to the Chrome offline dinosaur game, which is a default error page shown by the browser when the real site cannot be loaded. Due to this, the website lacks any meaningful business or security information, and no trust indicators are available. The domain WHOIS data is privacy protected, providing no registrant details, which further reduces trustworthiness. Overall, the site is not operational or accessible for analysis and should be considered non-functional from a business or security perspective.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

immitec GmbH is a small German company specializing in sustainable energy and capital concepts, focusing on the development, financing, and operation of solar and energy storage projects. With over 20 years of experience, the company positions itself as a trusted partner combining financing expertise with tangible asset projects. The website reflects a professional and consistent brand image targeting investors and clients interested in renewable energy investments. Technically, the site uses modern frameworks such as Bootstrap and AOS for animations, is mobile-optimized, and hosts fonts locally to ensure GDPR compliance. Security-wise, the site uses HTTPS (implied by og:url), but lacks explicit security headers and cookie consent mechanisms. No forms or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. Overall, the site is well-designed, trustworthy, and secure with minor improvements recommended in security headers and privacy notices.

The website www.cclean-bg.com represents a Bulgarian professional cleaning company named КУУЛ КЛИЙН ЕООД, offering a range of cleaning services including office, home, industrial, facade cleaning, and pest control. The business targets local Bulgarian customers with a focus on professional cleaning solutions. The website content is primarily in Bulgarian and provides phone contact numbers but lacks email or physical address details. The site uses Google Analytics and Tag Manager for tracking but does not display privacy or cookie policies, which impacts compliance and user trust. Technically, the website employs standard JavaScript libraries and Google services but lacks modern CMS or frameworks. The site shows basic mobile optimization and SEO practices but no evident security headers or HTTPS confirmation in the provided data. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy and transparency. From a security perspective, the absence of HTTPS confirmation, security headers, and privacy policies indicates a low security posture. No forms or sensitive data collection points were detected on the main page, reducing immediate risk, but the lack of compliance documentation and domain registration transparency are notable weaknesses. Overall, the site is functional but requires significant improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

ДЕЙМОС ЕООД is a Bulgarian media and telecommunications company offering television and internet services alongside media production. The website is primarily in Bulgarian and targets local consumers interested in analog and digital TV, internet packages, and advertising services. The business operates a service provider model with a local/regional market focus. Technically, the website is built on Joomla CMS with several outdated technologies such as old jQuery versions and deprecated media players, which may pose security and compatibility risks. Security posture is moderate but lacks modern security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trust. Overall, the website is functional but requires modernization and improved compliance to enhance security and user trust.

Meskay & Femtee (Pvt.) Ltd. is a Pakistani company specializing in the export of premium quality rice and other grains such as wheat and pulses. Established in 1993, the company emphasizes halal, organic, and food safety standards to serve both domestic and international markets. Their website reflects a professional business presence with clear product offerings, company information, and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, and is mobile optimized with good navigation and content quality. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data present concerns regarding compliance and domain legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced security and privacy measures.

Рип-Импульс is a Russian manufacturer specializing in the development, serial production, sales, and after-sales service of radio-electronic measuring instruments primarily serving the defense industry and other industrial sectors. The company has a well-established online presence with a domain registered since 2004, indicating a mature business. Their website showcases product catalogs and emphasizes technical consultation and service support. Technically, the website is built on WordPress using WooCommerce and Elementor, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Just all Design is a creative and production agency based in Portugal, specializing in fashion brand development, collection design, ecological production, and local manufacturing. Established in 2008, the company targets fashion brands and designers seeking sustainable and locally produced fashion solutions. The website reflects a professional and consistent brand image with active social media engagement on Facebook, Instagram, and LinkedIn. Technically, the site is built on WordPress using the Divi theme and common plugins such as Contact Form 7 and Jetpack, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or cookie policies. The domain is currently expired for over 5 months, posing a risk to business continuity and trust. Overall, the website is functional and professional but requires urgent domain renewal and enhanced security and privacy compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

ANAPO is a Portuguese non-profit association dedicated to representing and defending the egg production sector in Portugal. The website serves as an informational and promotional platform targeting egg producers, industry stakeholders, and consumers interested in egg production, legislation, and benefits. The organization holds a key position in the national market as a sector representative, providing guidance and resources related to egg production and legislation. Technically, the website is built using the Laravel framework and incorporates modern web technologies such as Google reCAPTCHA for bot protection, FontAwesome for icons, and simpleParallax.js for visual effects. The site is mobile-optimized with good SEO practices and moderate performance. It uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF token usage, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security policies and headers to improve its security posture further.

The website vmfdigital.com currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. Due to this, no business descriptive content, contact information, or policies are accessible for analysis. The domain is registered since 2008 with a reputable registrar but lacks DNSSEC and advanced security configurations. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the ability to assess compliance and business credibility. The technical infrastructure appears minimal with no detectable scripts or analytics. Overall, the website is inaccessible for meaningful content or security evaluation, resulting in a low trust and quality score.

The website btcidea.eu currently serves as a minimal placeholder page referencing the Mail-in-a-Box project, an open-source email server solution. There is no direct business information, contact details, or service offerings presented on the site, limiting its utility and trustworthiness. The site appears to be in an early or dormant state without active content or engagement features. Technically, the site is hosted via OVH SAS, a reputable hosting provider, but lacks modern web technologies, security headers, and performance optimizations. No HTTPS status was provided, which is a critical security concern. Security posture is weak due to the absence of privacy policies, cookie consent mechanisms, and incident response information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, indicating significant room for improvement.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

J&R Foodservice, operating under the Best of the West brand, is a regional wholesale foodservice supplier focused on delivering fresh, frozen, ambient, and cleaning supplies sourced from over 270 approved suppliers, with a strong emphasis on Westcountry producers. The company targets professional kitchens and catering businesses in the South West UK, leveraging its membership in the Sterling Super Group to offer competitive pricing. The website is built on WordPress with standard plugins for SEO and forms, and it features a cookie consent mechanism compliant with GDPR principles. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not negate the legitimacy indicated by website content and contact information. Overall, the website is professional, user-friendly, and trustworthy for its business domain.

EMS Ltd is a UK-based event management company specializing in comprehensive conference management and event marketing services. Their offerings cover a wide range of event types including conferences, exhibitions, seminars, and corporate events. The company positions itself as a seamless extension of client organizations, focusing on delivering event objectives such as increased profitability and enhanced delegate experiences. The website is professionally designed using WordPress with modern plugins and themes, providing good user experience and mobile optimization. Contact information and social media presence support business credibility. However, the absence of privacy and cookie policies indicates compliance gaps, and WHOIS data is incomplete, which slightly impacts trust. Security posture is generally good with HTTPS and reCAPTCHA implemented, but missing security headers and incomplete WHOIS data suggest areas for improvement.

Add Value Media is a Madrid-based digital marketing consultancy with over 15 years of experience, offering a broad range of services including SEM, SEO, digital consultancy, media planning, and e-commerce solutions. The company positions itself as a Google and Amazon Partner, targeting businesses seeking comprehensive marketing strategies to maximize brand impact and sales. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a secure contact form with reCAPTCHA protection. Technically, the site is built on WordPress with modern plugins and analytics tools, though some security enhancements such as DNSSEC and security headers could be improved. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be more explicit. Overall, the site reflects a credible and professional business with a solid digital presence.

Teepee Electrical Limited is a UK-based manufacturer specializing in wiring looms, cable harnesses, and panel assemblies with over 25 years of industry experience. The company serves diverse sectors including automotive, rail, renewable energy, and agriculture, emphasizing quality and customer service. Their website is built on WordPress using modern plugins and SEO tools, featuring a professional design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain registration is consistent and long-term, supporting business legitimacy. Overall, the website presents a credible and professional digital presence aligned with the company's manufacturing focus.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

PlayZone Lincoln is a family-run indoor play centre located in Lincoln, UK, offering a large 10,000 sq.ft. facility with giant slides, climbing frames, and dedicated areas for children of all ages. The business focuses on providing fun and entertainment through play sessions, children's parties, private hires, and group bookings. The website reflects a professional and consistent brand image targeting families and groups seeking active recreational activities. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and Font Awesome, and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and provides clear navigation and contact options. Security posture is good with HTTPS enforced and anti-spam measures on forms, but lacks some advanced security headers and published incident response policies. The domain WHOIS data is unavailable due to a Nominet UK registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and functional but would benefit from improved domain registration transparency and enhanced security practices.