High-risk security reports

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

QED Project Engineering Limited is an established engineering services company, originally founded in 1978 as Quindes Limited. The company specializes in providing tailored engineering design solutions and personnel secondment services primarily to process and manufacturing industries. Their business model focuses on flexibility, offering services ranging from detailed engineering drawings to turnkey project management. Despite a long history and ISO 9001 certification, the website's technical infrastructure is outdated, relying on deprecated Flash technology and lacking modern security practices such as HTTPS and security headers. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content appears professional and safe. Overall, the company presents as a niche engineering service provider with room for digital modernization and improved security posture.

Guideline Surface Marking ltd is a UK-based national line marking contractor with over 40 years of industry experience. The company provides a wide range of surface marking services including road marking, car park line marking, warehouse floor marking, and sports venue markings. They serve a diverse clientele including local authorities, businesses, and large commercial entities. The website reflects a professional and trustworthy business with multiple industry certifications and accreditations, positioning them as a leading service provider in their sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Microsoft Clarity, and Google Tag Manager. The site is mobile optimized, has good SEO practices, and uses cookie consent mechanisms to comply with privacy regulations. Hosting and domain registration are consistent with a legitimate UK business, though DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is moderate with room for improvement in DNS security and HTTP headers. Overall, the website is safe, professional, and compliant with GDPR requirements. It effectively supports the business's credibility and market position. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing a vulnerability disclosure program to enhance trust and security maturity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Catch22 is a UK-based facilities management recruitment agency with over 40 years of industry experience. The company specializes in providing tailored recruitment solutions across executive, technical, business support, and operational support sectors within facilities management. Positioned as the UK's leading FM recruitment company, Catch22 serves both clients and candidates with a comprehensive service offering including permanent, temporary, and contract staffing. The website reflects a professional brand with consistent messaging and strong industry certifications, reinforcing its market position. Technically, the website is built on WordPress 7.0, leveraging popular plugins such as Yoast SEO and Gravity Forms, and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate with modern web technologies in use. From a security perspective, the site uses HTTPS and secure form handling but lacks visible security headers and published privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data for the domain is unavailable and indicates a registration error, which raises concerns about domain legitimacy despite the professional website presence. No incident response or vulnerability disclosure information is found. Overall, Catch22 presents a credible and professional online presence for its recruitment business, but improvements in transparency around privacy, security policies, and domain registration clarity are recommended to enhance trust and compliance.

EAF Group Ltd is a medium-sized diversified agricultural and retail business based in the United Kingdom. The company operates multiple subsidiaries specializing in animal feeds, equine bedding, haylage, farming, container storage, nursery and garden centre services. The business has a strong regional presence across south, east, and central England with export activities in Europe. Their website reflects a professional and consistent brand image with clear contact information and multiple subsidiary links. Technically, the website is built on WordPress using Elementor, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, including a privacy policy and consent mechanisms. Overall, the website is trustworthy and business credible, though improvements in security and compliance documentation are recommended.

NET GRP Ltd is a UK-based company specializing in manufacturing and servicing telecommunications infrastructure components using Glass Reinforced Plastics (GRP). The company offers bespoke and production run fibreglass architectural cladding, painted cladding, and maintenance services, targeting telecommunications clients requiring high-quality infrastructure integration. The website is professionally designed using WordPress CMS, with good mobile optimization and accessibility. Contact information is clearly provided, including company emails and phone numbers, and a LinkedIn presence supports business credibility. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. The WHOIS data for the domain queried is unavailable due to an invalid domain name format, but the website content and company registration details support legitimacy. Overall, the site presents a trustworthy business with room for improvement in privacy and security practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Celsius Air Conditioning is a small UK-based business specializing in domestic and commercial air conditioning services primarily serving the Manchester area. Their website presents a professional image with clear service offerings and contact information, targeting local customers seeking air conditioning installation and maintenance. The technical infrastructure is built on WordPress using the Divi theme, with integration of Google Fonts and CleanTalk anti-spam services. While the website is mobile-optimized and SEO-friendly, some technical and compliance gaps exist, such as missing privacy and cookie policies and lack of security headers. The security posture is moderate with HTTPS enabled but could be improved with additional headers and vulnerability disclosures. The domain WHOIS data is unavailable due to a registration error indicating the domain name contravenes Nominet UK naming rules, which raises concerns about domain legitimacy or registration status. However, the website content and business information appear legitimate and consistent with a professional service provider. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

The website www.upandundergroup.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS query returned no match, indicating the domain may not be registered or is inactive. Due to the lack of accessible content, no business information, contact details, or security policies are available for analysis. The website lacks metadata, structured data, and any visible scripts or external resources, suggesting minimal or no active web presence. The security posture cannot be assessed due to the absence of accessible content and security headers. Overall, the site appears non-operational or restricted, resulting in a very low trust and legitimacy score.

Langford Rae Property Agents is a small, family-owned independent estate agency established in 1986, specializing in residential property sales, lettings, land sales, acquisitions, and new homes primarily in the Bromley, Bexley, and Sevenoaks areas of the UK. The company emphasizes a five-star personalized service and has a strong local market presence supported by client testimonials and social media engagement. The website is professionally designed using modern web technologies such as Next.js and React, offering a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is limited due to missing explicit privacy and cookie policies. The domain WHOIS data is unavailable due to a registration error, which impacts domain trustworthiness but does not detract from the business legitimacy evident in the website content and branding.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Sherwood Bed Centre is a well-established retail business specializing in beds, mattresses, and bedroom furniture, operating primarily in the East Midlands of the UK. Founded in 1976, it has multiple physical branches and positions itself as the largest independent retailer in its sector within the region. The website serves as a digital storefront showcasing their product range and brand partnerships, supporting their in-store sales and delivery services. Technically, the site is built on WordPress with WooCommerce and the Avada theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and policies are lacking. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is legitimate but relatively new compared to the business age, suggesting recent domain acquisition or migration. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

Fox Property Consultants is a small UK-based real estate surveying and valuation firm specializing in RICS-regulated services including homebuyer surveys, building surveys, and various specialized valuations. The company targets homeowners, property buyers, estate agents, solicitors, and mortgage brokers primarily in Bournemouth, Poole, Christchurch, and surrounding areas. The website is professionally designed using Joomla CMS with modern front-end technologies and includes clear contact information and customer testimonials, supporting a trustworthy market position. Technically, the site uses Google Analytics and reCAPTCHA for analytics and spam prevention, but lacks some security headers and privacy/cookie policies, indicating room for compliance improvement. The WHOIS data is unavailable due to a domain naming rules error, limiting domain registration trust verification. Overall, the site is secure with HTTPS and good content quality but should enhance privacy compliance and security headers to strengthen its security posture and regulatory adherence.

County Fabrications is a small manufacturing business based in Leicester, UK, specializing in bespoke steel and metal fabrications, particularly medium and heavy gauge projects. The company positions itself as a leading provider in its local market, targeting businesses requiring high-quality fabrication services. The website reflects a professional business presence with clear descriptions of services and a focus on quality. Technically, the site is built on WordPress using the Divi theme, incorporating standard SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. Security measures include HTTPS and anti-spam protections via CleanTalk and reCAPTCHA, but lack advanced security headers and explicit security policies. Privacy and cookie policies are absent, indicating a gap in compliance. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

The website www.littlehamptonwelding.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business-related content. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, indicating the domain is likely not properly registered or is invalid. Consequently, no business information, contact details, or policies are available for review. The technical infrastructure appears minimal with only a Google Fonts resource loaded, and no scripts or analytics detected. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site is effectively blocked and provides no trust or credibility signals.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Almost Family is a UK-based expert care agency specializing in domiciliary, respite, and live-in home care services primarily serving Surrey, West Sussex, and London. The company positions itself as a regional leader providing high-quality home care solutions. The website reflects a professional service-oriented business model targeting individuals and families seeking home care support. The digital presence is built on WordPress with the Divi theme, incorporating SEO best practices via Yoast SEO and tracking through Google Analytics and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. The WHOIS data query failed due to an invalid subdomain lookup, limiting domain registration verification. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website 05directmail.com is a basic WordPress blog with minimal content, primarily consisting of a default 'Hello world!' post. It appears to be a personal or placeholder blog site without any clear business or commercial intent. The technical infrastructure is standard for WordPress sites, hosted via GoDaddy, with no advanced frameworks or third-party integrations detected. Security posture is minimal, with HTTPS enabled but lacking DNSSEC and security headers. There are no privacy or cookie policies, nor any contact or incident response information, which limits compliance and trustworthiness. Overall, the site is low risk but also low in business credibility and security maturity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.fishquota.net is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is not found, indicating the domain may not be registered or is expired, which raises significant concerns about the legitimacy and operational status of the website. No business information, contact details, or privacy and cookie policies are available, limiting the ability to assess the company's operations or compliance posture. Technically, the site uses minimal resources, primarily Google Fonts, and lacks security headers or HTTPS confirmation, further indicating a low maturity level. Overall, the site is effectively blocked, resulting in a very low trust and credibility score.

The website www.cs-scotland.co.uk is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. The domain itself is invalid according to the Nominet UK WHOIS lookup, which states the domain name contains too many parts and cannot be registered. Due to this, no registrant or technical WHOIS data is available. The lack of accessible content, metadata, or contact information prevents any meaningful business or technical analysis. The site does not present any privacy, cookie, or security policies, nor does it show any signs of modern web technologies or security best practices. Overall, the digital maturity of this web presence is extremely low, and the security posture is poor given the absence of HTTPS and security headers.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.thecatat.com currently serves only a basic directory index page with a single folder 'cgi-bin' and lacks any substantive content or business information. The domain appears unregistered or inactive as indicated by the WHOIS query returning no match. There are no privacy policies, contact details, or security policies present on the site. Technically, the site is served by LiteSpeed Web Server and uses a simple JavaScript library for table sorting, but lacks modern web features, SEO optimization, and security headers. The absence of HTTPS and directory listing enabled pose security risks. Overall, the site has very low digital maturity and business credibility.

Mike Thomas Preservation is a small UK-based company specializing in building preservation services such as damp proofing, dry and wet rot treatment, and wall tie replacement. Established in 1986 as a division of Mike Thomas Building Services, the company targets property owners and mortgage companies primarily in South Wales. The website presents a professional image with clear service descriptions and PCA membership as a trust indicator. Technically, the site uses common JavaScript libraries and CSS frameworks to deliver a responsive and visually appealing experience, though no CMS or hosting details are evident. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and no privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and informative but requires significant improvements in security and compliance to enhance trust and protect user data.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The Hong Kong Cricket Club is a historic and well-established sports and recreational club founded in 1851, recognized as the oldest cricket club in Asia. It offers a wide range of sports activities including cricket, golf, hockey, tennis, and more, alongside community engagement and dining services. The club targets members and the wider community in Hong Kong, positioning itself as a leading institution in the hospitality and sports sectors. Technically, the website is built on ASP.NET WebForms with JavaScript and jQuery, providing a moderately performant and mobile-optimized experience with good SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, though WHOIS data is unavailable, slightly impacting domain trust verification.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

James F. Kidd & Son Ltd is a well-established Scottish company specializing in the distribution of catering supplies, hygiene products, and packaging solutions primarily serving the hospitality and public sector industries. With a history dating back to 1928 and a strong network of over 350 trusted suppliers, the company maintains a significant market position in Scotland, supported by dedicated local delivery fleets and physical showrooms in Edinburgh and Glasgow. Their business model combines wholesale distribution with an e-commerce platform and trade counter sales, targeting hospitality businesses and public sector clients. Technically, the website is built on a mature e-commerce platform (OpenCart) with a technology stack including jQuery, Bootstrap, and various UI plugins. The site demonstrates good mobile optimization, clear navigation, and integration of analytics tools such as Google Analytics and Hotjar for user behavior insights. Hosting is provided by Zen Internet Limited, a reputable UK hosting provider. From a security perspective, the site enforces HTTPS and uses secure login forms and cookie consent mechanisms. However, it lacks explicit security headers like Content-Security-Policy and uses an outdated jQuery version, which could pose vulnerabilities. No incident response or detailed security policies are publicly available, indicating room for improvement in security maturity. Overall, the website presents a professional and trustworthy front for the business with strong compliance to privacy and cookie regulations. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, updating libraries, and publishing security policies to further strengthen trust and compliance.

HLS Structural Engineers Ltd is a UK-based consulting engineering firm specializing in structural and civil engineering services. The company operates primarily in the London and South East England regions, offering services ranging from residential structural design to large-scale commercial and industrial projects. Their website reflects a professional and established business with a clear focus on quality, reliability, and client satisfaction. The firm also actively recruits experienced structural engineers, indicating growth and operational stability. Technically, the website is built on WordPress using the Avada theme and several plugins including LayerSlider and Complianz GDPR for cookie management. The site employs modern web technologies such as jQuery and Google Analytics for tracking. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in security headers and explicit security policy disclosures. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. No immediate vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and incident response information suggests room for improvement in security posture. The WHOIS data for the domain is unavailable due to a registration error, which slightly impacts trust but does not detract from the professional nature of the website content. Overall, the website presents a credible and professional business presence with moderate technical maturity and a good privacy compliance framework. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying incident response contacts to strengthen trust and compliance further.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.emvest.com is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or restricted. The page provides generic server error information related to file permissions and IP deny rules but no actual business content or branding is present. The WHOIS lookup for the domain returned no registration data, suggesting the domain may be unregistered, expired, or privacy protected without public data. This lack of registration information combined with the access restriction raises significant concerns about the legitimacy and operational status of the website. Technically, the site uses minimal technology, only loading jQuery 3.3.1 from an external CDN, and lacks any modern security headers or HTTPS enforcement visible in the provided data. No privacy, cookie, or terms of service policies are found, nor any contact or business information, which further diminishes trust and compliance posture.

The website www.mcmath.info is currently inaccessible to visitors, presenting a 403 Forbidden error page that indicates permission or access control restrictions. The page content is limited to technical explanations about 403 errors and guidance on file permissions and .htaccess modifications, with no business or contact information available. The lack of accessible content and absence of privacy, cookie, or terms of service policies suggest the site is either under maintenance, misconfigured, or restricted. Technically, the site loads jQuery 3.3.1 but lacks modern security headers or visible HTTPS enforcement, which raises concerns about its security posture. WHOIS data is unavailable due to a malformed query response, preventing verification of domain registration details and reducing trust in the domain's legitimacy. Overall, the site exhibits poor content quality, minimal technical sophistication, and weak security and privacy compliance.

Gibbon Equipment Hire is a small, independent, family-run business based in Blackwood, South Wales, specializing in building and industrial equipment hire. The company emphasizes over 40 years of extensive industry knowledge, positioning itself as a trusted local provider in the equipment rental market. The website is built on WordPress using the Divi theme and incorporates SEO enhancements via the Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and presents professional content relevant to its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable and indicates a domain registration anomaly, which may be due to querying the 'www' subdomain rather than the root domain. Overall, the website is functional and business-focused but would benefit from improved security practices and compliance documentation.

Enviroflo Engineering is a UK-based engineering company specializing in dust control solutions for the mineral extraction industry. As a subsidiary of Ecolab and partner of Nalco, it offers dust extraction and suppression systems globally, targeting mining, quarrying, asphalt, and biomass energy sectors. The company has a niche market position with a focused B2B business model and a domain age consistent with its operational history since 2006. The website content is relevant and professional, though it lacks modern web technologies and comprehensive compliance documentation. Technically, the site is basic with HTML and CSS, moderate performance, and limited mobile optimization. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and confirming HTTPS usage. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced security and compliance features.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F. A. Morris Ltd is a small Sheffield-based manufacturing company specializing in precision engineering, abrasive products, and pattern holders with over 45 years of experience. The company holds BS EN ISO 9002 certification, indicating a commitment to quality standards. The website content is minimal and primarily informational, focusing on the company's products and contact address. The technical infrastructure appears outdated, using framesets and lacking modern web technologies or CMS platforms. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating a low level of digital maturity and security posture. The WHOIS data for the domain www.famorris.co.uk is unavailable due to domain registration errors, which raises concerns about domain legitimacy and trustworthiness. Overall, the website provides basic business information but lacks modern security and privacy compliance features.

Philpott & Cowlin Limited is a well-established company founded in 1920, specializing in supplying welding equipment and consumables to the metal fabrication industry in South West England and South Wales. The company offers a broad range of products and services including welding machines, consumables, machine repairs, servicing, calibration, and hire equipment. Their market position is that of a reputable regional supplier with over 100 years of industry experience and recognized certifications such as Bureau Veritas ISO 9001. The website content reflects a focused B2B business model targeting manufacturing and metal fabrication sectors. Technically, the website uses older JavaScript libraries such as jQuery 1.9.1 and Jssor Slider for UI elements. The site has basic SEO and accessibility features but lacks modern performance optimizations and mobile responsiveness is only basic. No CMS or hosting provider information is evident. Security posture is moderate with no visible HTTPS or security headers in the provided data, and the use of outdated libraries introduces potential vulnerabilities. From a security and compliance perspective, the site lacks privacy and cookie policies, GDPR compliance indicators, and incident response contacts. The WHOIS data is incomplete and indicates domain registration issues, which raises concerns about domain legitimacy despite the professional business content. No forms or email contacts are present on the homepage, limiting data collection risks but also reducing user engagement options. Overall, the website is functional and provides relevant business information but requires improvements in security, privacy compliance, and technical modernization to enhance trust and reduce risk. The domain registration anomaly should be investigated further to ensure legitimacy and continuity.