Security Directory

L

Lilliput Health

lilliputhealth.co.uk

48

Lilliput Health is a well-established private healthcare clinic in the UK specializing in musculoskeletal treatments such as chiropractic, physiotherapy, sports massage, and podiatry. The business operates multiple clinic locations and offers a broad range of therapies targeting individuals seeking private healthcare services. The website demonstrates a solid market position with over 19 years of experience and strong customer trust signals, including high ratings on third-party review platforms. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS, reCAPTCHA, and consent mechanisms, though some security headers could be improved. The WHOIS data is unavailable due to a domain registration error, which is unusual but does not detract from the website's professional appearance and trustworthiness. Overall, the site is credible and functional with room for technical and security enhancements.

L

La Vita Restaurants

lavitapizzeria.co.uk

35

La Vita Restaurants is a family-oriented Italian dining group operating multiple locations in the United Kingdom. The website serves as a digital presence showcasing their restaurant locations, private dining options, gift vouchers, and cake ordering services. The business appears well-established with a domain registered since 2005, indicating longevity and market presence. The site targets general audiences seeking Italian dining experiences and related hospitality services. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and marketing tools like Google Analytics and Facebook Pixel. The infrastructure is modern and supports mobile optimization with good SEO practices. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and formal privacy or cookie policies. No direct contact emails or phone numbers are present on the homepage, limiting immediate contact options. The site does not disclose incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professional, safe, and trustworthy for its hospitality business purpose. However, improvements in privacy compliance, security headers, and contact transparency are recommended to strengthen its security posture and regulatory adherence.

C

County Taxis

county-taxis.co.uk

60

County Taxis is a local taxi hire service operating in Dover and South East Kent, United Kingdom. The company offers reliable and stress-free taxi services to local residents and visitors. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site is accessible, mobile-optimized, and provides essential contact information including a phone number and physical address. However, the domain WHOIS data is unavailable and indicates the domain name is invalid under Nominet UK rules, which raises concerns about domain registration legitimacy. The website lacks privacy and cookie policies, and no security headers were detected, indicating room for improvement in security and compliance. Overall, the site presents a professional local business presence but requires enhancements in security posture and privacy compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

G

Front Page |

greyshairdressing.co.uk

56

Grey Hairdressing is a small UK-based hairdressing service provider with an established online presence since 2008. The website is built on WordPress using the Astra theme and includes common plugins such as Contact Form 7 and Cookie Law Info for cookie consent management. The business targets general consumers seeking hairdressing and styling services. The website design and content quality are basic but functional, with moderate mobile optimization and SEO features. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service. Contact information is not explicitly provided on the site, which may impact user trust and business credibility.

C

Clarity Global

3whitehats.com

68

Clarity Global is a professional B2B digital experience service provider specializing in improving user journeys, conversion rates, and pipeline growth for technology and enterprise clients. Their website is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and HubSpot Ads. The site is well-designed, mobile-optimized, and provides comprehensive service descriptions targeting CMOs and growth leaders. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security policies and incident response information are not published. WHOIS data is unavailable due to privacy or query failure, which is common for such businesses. Overall, the website presents a trustworthy and professional digital presence with good compliance and marketing practices.

L

Lundy's Catering

lundyscatering.com

57

Lundy's Catering is a small hospitality business specializing in catering and event production services for corporate and private events ranging from 10 to 10,000 attendees. The website is built on the Wix platform, indicating a moderate level of digital maturity suitable for small businesses. The technical infrastructure includes standard Wix scripts and polyfills, with error monitoring via Sentry. However, the absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is explicitly provided, which impacts business credibility and privacy compliance. Security posture is basic with no detected security headers or advanced protections.

The website kwiktrip.com is currently inaccessible due to a Web Application Firewall (WAF) protection by Incapsula, which blocks content delivery and prevents analysis of the site's actual content, metadata, and contact information. The domain is well-established, created in 1997, and registered through eNom, LLC with no privacy protection, indicating transparency and legitimacy. The DNS infrastructure is hosted on Microsoft Azure DNS, a reputable provider, which suggests a modern and reliable hosting environment. Due to the WAF blocking, no direct assessment of the website's privacy policies, cookie management, security policies, or business details is possible. The lack of accessible content limits the ability to evaluate the website's technical implementation, SEO, or user experience.

M

Macquarie Telecom

macquarietelecom.com

72

Macquarie Telecom is a prominent Australian telecommunications provider specializing in business communication solutions including cloud, data networking, voice, and cybersecurity services. The company targets enterprise and government sectors, positioning itself as a trusted partner with a strong focus on secure and reliable IT infrastructure. The website reflects a professional and consistent brand image, supporting its market position with clear service offerings and contact channels. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and frameworks such as Bootstrap and jQuery UI, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and security headers, though the absence of a published security policy and vulnerability disclosure reduces transparency. The lack of WHOIS registration data is a notable anomaly that impacts domain trustworthiness, though the overall website and business credibility remain high. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen trust and compliance.

Madona.lv is the official website of Madona Municipality in Latvia, serving as a comprehensive portal for local government information, public services, cultural events, and tourism. The site targets residents and visitors, providing detailed event calendars, municipal news, and access to various administrative resources. The business model is that of a government entity focused on public service and community engagement. The website maintains a consistent brand identity and offers clear navigation and relevant content for its audience. Technically, the site uses jQuery and Font Awesome, hosted behind Cloudflare DNS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and published security policies. Privacy compliance is good, with GDPR-aligned cookie management and a privacy policy page. Contact information is clearly presented, including official email and phone numbers for municipal police. Overall, the site is trustworthy and professionally maintained, reflecting its role as a government portal.

K

Korupcijas novēršanas un apkarošanas birojs

knab.gov.lv

59

Korupcijas novēršanas un apkarošanas birojs (KNAB) is the official Latvian government agency responsible for preventing and combating corruption, overseeing political party financing, and monitoring pre-election agitation. The website serves as a comprehensive resource for the public, political entities, and government officials, providing information on legal frameworks, reporting mechanisms, educational materials, and current news. The site is well-structured, professionally designed, and compliant with privacy and cookie regulations, reflecting a mature digital presence. Technically, the website is built on Drupal CMS, employs modern web technologies, and integrates Google Analytics for user insights. It demonstrates good mobile optimization and accessibility features, ensuring usability across devices and for users with disabilities. Security measures such as HTTPS enforcement and security headers are in place, contributing to a strong security posture. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the site could benefit from publishing a dedicated security policy and vulnerability disclosure program to enhance transparency and incident response readiness. Overall, the domain registration and WHOIS data confirm the site's legitimacy as a government entity. The website poses no content safety concerns and is suitable for a general audience. It maintains active engagement through social media channels and provides clear contact information, reinforcing trust and credibility.

The website for M&R Fahrzeugtechnik Paderborn is currently inaccessible due to a PHP error, resulting in an error page being displayed instead of functional content. The company appears to operate in the vehicle technology sector in Germany, but no detailed business information or services are presented on the site. The technical infrastructure is based on Joomla CMS, but the presence of a PHP error indicates a lack of maintenance or misconfiguration. No privacy, cookie, or terms of service policies are present, and no contact information is available, which negatively impacts user trust and compliance. Security posture is weak due to visible errors and lack of security headers or HTTPS confirmation. Overall, the site is not currently suitable for professional or customer-facing use and requires urgent technical remediation.

P

passepartout bilder & rahmen

passepartout-fundke.de

38

The website www.passepartout-fundke.de represents a small, local retail business specializing in pictures and framing services, operating since 1984 in Greven, Germany. The business offers framed art, custom framing, and art prints from various artists, targeting local customers and art enthusiasts. The website is built on the cm4all Homepage Designer platform hosted by Telekom Deutschland, using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is accessible without any WAF or blocking mechanisms and contains rich visual content including photo slideshows and videos. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners. Contact information is clearly provided via email and phone, but no contact forms or social media links are present.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

M

McDonald's Deutschland

mcdonalds.de

66

McDonald's Deutschland operates as the German branch of the global McDonald's fast food chain, providing localized content, promotions, and restaurant information for customers in Germany. The website is professionally designed, leveraging Adobe Experience Manager and a modern technology stack including Adobe Launch and Akamai services, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, WHOIS data is unavailable, likely due to privacy protection, which is common for large brands. Overall, the site demonstrates a mature digital presence aligned with corporate standards and GDPR compliance.

I

InterPflege Westfalen GmbH

inter-pflege.de

46

InterPflege Westfalen GmbH is a small healthcare service provider specializing in ambulatory nursing and elderly care in Dortmund, Germany. Established in 2011, the company offers professional and individualized care services supported by a team of qualified nursing and social care professionals. The website reflects a local market position with clear communication channels and a focus on trust and professionalism. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery, Google Tag Manager, and Borlabs Cookie for GDPR-compliant cookie consent. Hosting is provided by Alfahosting, inferred from the nameservers. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced, spam protection on forms, and cookie consent mechanisms. However, there is room for improvement by implementing security headers and publishing explicit security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional online presence suitable for its healthcare service business. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility features to further strengthen compliance and user trust.

Reisebüro Lauffer Manuela Colloff is a small local travel agency based in Recklinghausen, Germany, specializing in personalized travel consultation and booking services including flights, cruises, and bus travel. The website presents a professional and user-friendly interface with clear contact information and service offerings, targeting general consumers seeking travel planning assistance. Technically, the site employs modern web technologies such as Bootstrap 4, jQuery, Swiper.js, and integrates Google Maps and Matomo analytics, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR requirements, with no signs of malicious content or vulnerabilities detected.

Stilblüte GmbH is a specialized garden and landscaping company based in Blankenhof, Germany, offering a broad range of services including garden design, lawn care, fence construction, path building, and woodcutting. The company targets private, commercial, and industrial clients in the local region and positions itself as an experienced and reliable provider with over 20 years of experience and more than 1000 completed projects. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Bootstrap framework for responsive design. Hosting is provided by netcup, a reputable German hosting provider. The site performs moderately well with good mobile optimization but lacks advanced accessibility features and SEO enhancements beyond basic meta tags. From a security perspective, the site uses HTTPS (implied by URLs and JSON-LD data), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy awareness, but no privacy policy or terms of service pages were found. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The domain WHOIS data is minimal but consistent with a legitimate hosting provider. The absence of detailed registrant information slightly reduces trust but does not indicate suspicious activity. Strategic recommendations include publishing a privacy policy, adding security headers, and providing incident response contacts to enhance security posture and compliance.

G

Glas- & Solarreinigung Marcel Lange

pv-reinigung-lange.de

53

Glas- & Solarreinigung Marcel Lange is a small certified specialist company based in Mecklenburg Vorpommern, Germany, offering professional cleaning services for solar and photovoltaic installations as well as glass cleaning. The company positions itself as the first certified solar and photovoltaic cleaner in the region, targeting solar panel owners and businesses requiring maintenance to improve performance and longevity of their installations. The website is built on the IONOS MyWebsite platform, featuring a moderate technical infrastructure with basic mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of cookie consent mechanisms and detailed privacy policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

The website www.glaser-metallbau.de currently serves as a redirect or domain parking page managed by Parklogic, with no accessible business content or metadata. There is no evidence of company information, contact details, or service descriptions. The technical infrastructure is minimal, relying on JavaScript redirects and advertising scripts typical of parked domains. Security posture cannot be properly assessed due to lack of content and security headers. The domain WHOIS data indicates use of Parklogic name servers, suggesting the domain is not actively used by the business it purports to represent. Overall, the site lacks transparency, business credibility, and compliance indicators, resulting in a low trust and security score.

H

Hauskrankenpflege "humaniter" Petra Sielaff GmbH

humaniter-kyritz.de

36

Hauskrankenpflege "humaniter" Petra Sielaff GmbH is a small, local healthcare service provider based in Kyritz, Germany, specializing in home nursing and care services since 1994. The company offers a range of services including in-home care, household management, medical nursing, and supportive care, targeting residents in the Ostprignitz-Ruppin region. The website reflects a consistent and professional brand image with clear contact information and service descriptions, positioning the company as a trusted local care provider. Technically, the website employs a traditional tech stack including Bootstrap, jQuery, and various UI plugins such as Slider Revolution and Owl Carousel. The site is moderately optimized for performance and mobile devices but lacks advanced CMS or modern frameworks. Hosting is managed via GoDaddy's domain control services. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no incident response or security policies are published. There is no cookie consent mechanism or advanced privacy compliance features, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional and trustworthy for its business purpose but requires significant improvements in security posture and privacy compliance to meet modern standards. Strategic enhancements in SSL deployment, security headers, and privacy policies are recommended to reduce risk and improve user trust.

T

THEATERuntendrunter

theateruntendrunter.de

53

THEATERuntendrunter is a small local theater organization based in Germany, providing theatrical performances and cultural events primarily targeted at the local community and theater enthusiasts. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic technical infrastructure. The site uses HTTPS and includes some modern JavaScript polyfills and error monitoring via Sentry, but lacks advanced security headers and privacy compliance documentation. Contact information and formal policies such as privacy or cookie policies are not present, which limits trust and compliance posture. Overall, the site is functional but basic in design and content, suitable for a small cultural entity.

E

Eggeling Bedachungs- und Sanierungs GmbH

dachdecker-eggeling.de

58

Eggeling Bedachungs- und Sanierungs GmbH is a specialized roofing and construction service provider based in Sülzetal, Germany, serving the Magdeburg and Landkreis Börde regions. Established in 1990, the company offers a range of services including roof installation, renovation, roof plumbing, wood construction, chimney repairs, scaffolding, and crane rental. The website reflects a professional and consistent brand image targeting both private and industrial customers. The business positions itself as a leading local expert with a strong focus on quality and customer service. Technically, the website is built using modern web standards with HTML5, CSS3, and JavaScript, hosted on AWS infrastructure. It employs Google Analytics for visitor insights and uses a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Embedded YouTube videos are present but disabled by default due to cookie settings. From a security perspective, the site enforces HTTPS and uses cookie consent to manage privacy. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a dedicated security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the website demonstrates a solid digital presence with good privacy compliance and a trustworthy business profile. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding incident response contacts to further strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

mr.sol Alternative Energie und Heizungstechnik is a small, specialized service provider based in Germany focusing on renewable energy heating solutions including biomass heating, solar thermal systems, and sanitary installations. Founded in 1994, the company has a strong local presence in the Leipzig and Markranstädt region, offering expert services in modern heating technologies such as pellet and wood heating systems. The website reflects a professional and consistent brand image with clear contact information and certifications that enhance trust. Technically, the website is built on WordPress using modern plugins and themes such as WPBakery Page Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and performance optimization. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and a vulnerability disclosure policy. The contact forms do not have active CAPTCHA protection, which could expose the site to spam. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service. No social media or analytics tracking is evident, which limits user tracking but also reduces marketing insights. Overall, the website is trustworthy and professional with a good business focus but could improve its security posture and privacy compliance to better protect users and enhance credibility.

H

Hertel GmbH Bad Schandau

hertel-gmbh-badschandau.de

49

Hertel GmbH Bad Schandau operates a regional news and analysis platform focused on Bad Schandau and its surroundings, delivering topical content across politics, science, technology, sports, and culture. Founded in 2022, the company positions itself as a local media provider offering comprehensive insights to a general audience. The website employs modern web technologies including Next.js and React, hosted with Cloudflare DNS services, ensuring a contemporary digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content categories. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with cookie and privacy policies present but no active consent mechanism. Overall, the website is safe, professional, and trustworthy, though improvements in security transparency and contact information visibility are recommended.

A

apotheken.de

apotheken.de

71

apotheken.de is a well-established German healthcare and pharmacy information portal offering extensive content on diseases, symptoms, therapies, medications, and pharmacy services including emergency pharmacy locators and medication pre-orders. The website targets the general German-speaking public seeking reliable health information and pharmacy-related services. The business model appears to be based on providing valuable health content and services, likely monetized through advertising and partnerships. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, hosted on Amazon AWS infrastructure. The site is responsive and optimized for mobile devices with good SEO and accessibility features. Security-wise, the website enforces HTTPS, uses security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or suspicious patterns were detected. Overall, apotheken.de demonstrates a strong security posture, good privacy compliance, and high content quality, making it a trustworthy source for health information. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.

The website motorradautomehr.de serves as a professional landing page for the sale of the domain name motorradautomehr.de. It targets businesses and individuals interested in acquiring this domain, offering direct inquiry options via WhatsApp and a web form, supported by an interactive chatbot. The site is designed with a clean, modern aesthetic, optimized for mobile devices, and provides basic privacy and cookie consent mechanisms. However, it lacks detailed company information, contact details, and terms of service, which limits its business credibility and transparency. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It employs modern browser APIs such as Fetch and Beacon for asynchronous communication and tracking. The performance is moderate with good mobile optimization, but no advanced frameworks or CMS are detected. Accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed), but no security headers were detected in the provided data. There is no exposed sensitive data or vulnerable libraries identified. The cookie consent mechanism is implemented inline with GDPR requirements, but no explicit security or incident response policies are published. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, the website presents a professional front for domain sales but would benefit from enhanced transparency, improved security headers, and more comprehensive legal and contact information to increase trust and compliance. The AI score reflects moderate content quality and technical implementation but is penalized for missing business credibility and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

TECNI-MOTOSIERRAS

tecnimotosierras.com

59

TECNI-MOTOSIERRAS is a small retail and distribution business specializing as an authorized dealer of STIHL machinery and accessories in Chía, Colombia. The company offers a range of products including chainsaws, brush cutters, hedge trimmers, blowers, and original spare parts, targeting consumers and businesses requiring quality STIHL equipment. The website reflects a professional presence with clear branding and contact information, supporting customer engagement through multiple channels including social media and WhatsApp. Technically, the website is built on the Multiscreensite platform, utilizing modern web technologies such as jQuery, service workers for PWA capabilities, and analytics tools like Snowplow and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and registers a service worker, indicating a baseline of security best practices. Nonetheless, the absence of security headers and lack of explicit privacy and cookie policies highlight areas for improvement in compliance and security posture. The missing WHOIS data for the domain raises concerns about domain legitimacy and transparency, warranting further verification. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and domain registration transparency to improve trustworthiness and regulatory adherence.

The website superguan.net is currently an empty placeholder with no visible content, metadata, or business information. The domain is registered through Alibaba Cloud Computing (Beijing) Co., Ltd. since 2017, indicating a stable registration but no active website presence. There are no privacy policies, contact details, or security measures evident on the site. Technically, the site lacks any detectable technologies, scripts, or frameworks, and no HTTPS or security headers are confirmed. This results in a very low security posture and poor digital maturity. Overall, the site presents a high risk due to lack of content, security, and compliance features, making it unsuitable for trust or business engagement at this time.

A

ac米兰官方网站

shankechuanmei.com

43

The website www.shankechuanmei.com represents a medium-sized manufacturing company based in Jiangsu Province, China, specializing in high voltage leak detection machines primarily for the pharmaceutical and industrial sectors. The company claims a history dating back to 2004 and offers products such as high-frequency high-voltage leak detection equipment and online detection instruments. The website content is primarily in Chinese and targets industrial clients requiring specialized testing equipment. Technically, the site uses common JavaScript libraries like jQuery and Swiper.js and integrates Baidu analytics for tracking. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and no privacy or cookie policies are present. Contact information including phone numbers, email, and physical address is clearly provided, supporting business credibility. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration consistency.

淘

淘宝网

taobao.com

60

The website shop.m.taobao.com is a mobile-optimized subdomain of Taobao, a leading Chinese e-commerce platform owned by Alibaba Group. It provides users with a mobile-friendly shopping experience, allowing access to a wide range of products. The site leverages Alibaba's proprietary analytics and tracking technologies to monitor user behavior and optimize performance. While the site is well-branded and consistent with Taobao's identity, explicit privacy and cookie policies are not present on this page, which is a compliance gap. The technical infrastructure is modern with extensive use of JavaScript and mobile optimization, but lacks visible security headers and explicit contact information for security or privacy concerns. Overall, the site is legitimate, safe, and trusted within the e-commerce sector, but could improve transparency and security posture.

The website idealyun.com is currently inaccessible beyond a WAF security block page powered by SafeLine WAF, indicating the domain does not match the server. The domain is registered with Alibaba Cloud Computing (Beijing) Co., Ltd. since 2017 and appears to be associated with the SafeLine WAF security product by 长亭 (Chaitin). Due to the WAF block, no actual business content, contact information, or policies are accessible, limiting the ability to fully assess the business or technical maturity. The technical infrastructure shows basic modern web technologies but lacks SEO, accessibility, and privacy compliance features. Security posture is moderate given the use of a WAF but lacks visible security headers or policies. Overall, the site is low trust and low content quality due to the block, with a legitimacy score of 75 based on WHOIS data and domain age.

The website '亚洲香蕉视频平台' operates as a free Asian movie streaming platform offering a variety of video content including action, comedy, romance, sci-fi, and horror genres. It targets a general adult audience seeking free video entertainment without advertisements. The platform supports both mobile and desktop viewing and includes user registration and search functionalities. The business model appears to rely on free content delivery possibly monetized through advertising. Technically, the site uses modern web technologies including JavaScript modules, likely built with Vite and a React-like framework. It leverages Cloudflare DNS and Netlify for hosting third-party scripts. SEO is well implemented with comprehensive meta tags and structured data. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site enforces HTTPS but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided. WHOIS data is suspicious with a future domain creation date and registrar-only registrant info, reducing trustworthiness. The site contains adult content without age verification, posing content safety concerns. Overall, the website presents moderate technical quality but significant gaps in privacy, security, and business credibility. Strategic improvements in transparency, security policies, and domain legitimacy are recommended to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.dushiky.com is currently inactive or unregistered as indicated by the WHOIS data and the website returning a 404 Not Found error page. There is no accessible content, business information, or contact details available on the site. The lack of HTTPS and security headers further indicates a minimal or non-existent technical infrastructure. Due to the absence of any business presence or digital assets, the security posture is non-assessable and effectively non-existent. Overall, the domain appears abandoned or unclaimed, representing a high risk for trust and legitimacy. Strategic recommendations include registering the domain properly, deploying a secure website with HTTPS, and establishing clear business and privacy policies to build credibility.

The analyzed URL and domain correspond to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local error display within the browser rather than an actual website. Consequently, no real business or website content is accessible. The page includes embedded Chromium offline game scripts and styles but lacks any metadata, privacy policies, contact information, or business details. This indicates that the content is not a live website but a browser-generated error page. The technical infrastructure is minimal and specific to Chromium's offline error handling. Security posture cannot be fully assessed due to the absence of a real website context. Overall, this is not a legitimate website but a browser internal page, and no business or compliance information is available.

深

深圳市云网万店电子商务有限公司

suning.com

58

Suning.com is a leading Chinese e-commerce platform specializing in a wide range of consumer goods including electronics, home appliances, digital products, clothing, and more. The website operates as a subdomain of the larger Suning ecosystem, which is a well-established retail and technology conglomerate in China. The platform offers comprehensive services such as local delivery, cash on delivery, customer support, and membership programs, positioning itself as a trusted online shopping destination for Chinese consumers. Technically, the website employs standard web technologies including jQuery and JavaScript, with a moderate performance profile and good mobile optimization. The site is accessible and well-structured, with clear navigation and SEO-friendly metadata. However, there is room for improvement in security headers and privacy compliance, particularly regarding cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. While no critical vulnerabilities were detected, the absence of explicit security headers and limited visible incident response information suggest opportunities to enhance the security posture. The WHOIS data for the subdomain is not available, which is typical for subdomains, but the overall trustworthiness is high given the brand and ecosystem context. Overall, Suning's online shopping platform demonstrates strong business credibility and technical maturity, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would further solidify its market position and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The analyzed domain currently serves a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business information, contact details, or policies are present on the page. The page content is primarily JavaScript and CSS related to the Chrome offline dinosaur game, which is a default error page shown by the browser when the real site cannot be loaded. Due to this, the website lacks any meaningful business or security information, and no trust indicators are available. The domain WHOIS data is privacy protected, providing no registrant details, which further reduces trustworthiness. Overall, the site is not operational or accessible for analysis and should be considered non-functional from a business or security perspective.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

1

Captcha Interception

1688.com

54

The analyzed website is a subdomain of 1688.com, which is part of Alibaba's B2B platform. The site appears to be a technical or storefront page with minimal visible content and no explicit business description or contact information. The technical infrastructure includes multiple Alibaba analytics and tracking scripts, indicating integration with Alibaba's ecosystem. Security posture is basic with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the subdomain limits the ability to verify domain legitimacy independently. Overall, the site shows low business credibility and minimal user-facing content, suggesting it may serve as a backend or intermediary storefront rather than a standalone business site.

顺企网 is a large-scale Chinese B2B e-commerce platform providing a comprehensive directory of companies, product supply listings, procurement opportunities, and enterprise news. It serves primarily Chinese enterprises across manufacturing, transportation, energy, and retail sectors. The platform offers free services for product and company information publishing and includes promotional services for businesses. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Baidu Analytics for user tracking. The site is mobile-optimized and features a clear navigation structure with extensive categorized listings. Security-wise, the site enforces HTTPS and includes compliance announcements related to chemical industry regulations, but lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registrant data reduces transparency but the presence of official licenses and compliance notices supports legitimacy. Overall, the site is functional, professional, and serves a broad B2B audience in China.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.