High-risk security reports

Spirit Hair Design is a small, established hairdressing salon based in Christchurch, UK, operating since 2001. The business offers a comprehensive range of hairdressing services including cuts, colours, wedding packages, and discount schemes targeting students, NHS staff, and children. The website reflects a professional local business with clear contact details and a focus on customer care and quality products. Technically, the site is built using Adobe Muse with a static architecture and includes common web technologies such as jQuery and RequireJS. While the site is accessible and functional, it lacks modern security headers and privacy compliance features. The Facebook SDK is loaded insecurely over HTTP, posing a mixed content risk. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.bjsfireplaces.co.uk appears to be a placeholder or parked domain with minimal content primarily focused on consent management scripts and advertising placeholders. There is no visible business information, contact details, or substantive content describing products or services. The domain WHOIS data is unavailable and indicates the domain name is invalid or not properly registered, which raises significant concerns about legitimacy and trustworthiness. Technically, the site uses a Consent Management Platform to address GDPR compliance, but lacks security headers and other best practices. Overall, the website's digital maturity is low, with poor content quality and minimal SEO or accessibility features.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

B.Kent Electrical Ltd

bkentelectrical.co.uk

49

B Kent Electrical Ltd is a small UK-based electrical contracting company specializing in domestic, commercial, and industrial electrical services. Their market position is that of a local specialist serving Leighton Buzzard, Milton Keynes, Bedford, and surrounding areas. Key services include electrical contracting, testing and inspecting, lighting solutions, fire and security services, and data solutions. The website presents basic but relevant content with certifications from NIC and CHAS, indicating industry compliance and trustworthiness. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery libraries, providing a moderately optimized and mobile-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display any analytics or tracking tools. Security-wise, the site includes a CSRF token but lacks visible security headers and explicit HTTPS enforcement details. No privacy or cookie policies are present, which is a compliance gap. The WHOIS lookup failed due to domain registration issues, indicating the domain name is invalid under Nominet UK rules. This raises concerns about the domain's legitimacy or registration status, although the website content appears professional and legitimate. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website scores moderately on content quality and technical implementation but scores low on privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

U

Universal Metals

universalmetals.co.uk

48

Universal Metals is a small, family-run scrap metal merchant business operating in the United Kingdom, specifically serving areas such as Crawley, Lancing, and Hastings. The company specializes in recycling both ferrous and non-ferrous metals with a focus on zero waste, positioning itself as a responsible and environmentally conscious local business. Their website reflects a professional and consistent brand image, targeting businesses and individuals seeking scrap metal recycling services in their region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant issues detected in loading or navigation. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA, but lacks several important security headers and does not provide explicit security or incident response policies. The absence of a privacy policy and terms of service pages indicates gaps in compliance and transparency. Additionally, the domain WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the website's operational status. Overall, the website presents a trustworthy and professional front for a small local business but would benefit from enhanced security practices, improved privacy compliance, and resolution of domain registration inconsistencies to strengthen its credibility and reduce risk.

The website www.islandmarine.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or forbidden. The site does not provide any meaningful business information, contact details, or policies. The WHOIS lookup failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, raising significant concerns about the legitimacy and registration status of the domain. The technical infrastructure appears minimal with no detectable scripts, analytics, or modern web technologies. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site appears non-operational or misconfigured, with a very low trust and credibility score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.thestaratcotton.co.uk is currently inaccessible and returns a 403 Forbidden error page, indicating that access to the content is blocked or forbidden. The domain itself appears to be invalid or unregistered as per the Nominet UK WHOIS response, which states the domain cannot be registered due to naming rules violations. Consequently, no business information, contact details, or policies are available on the site. The technical infrastructure is minimal, with only a Google Fonts external link detected, and no evidence of CMS, analytics, or security headers. The site lacks privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present. Overall, the website does not provide any usable content or business presence at this time.

The website www.bixleyplastering.co.uk is currently inaccessible and displays a 'Site not found' error page indicating the site is not published or the domain is not assigned. The domain itself is invalid according to Nominet UK WHOIS data, which states the domain name contains too many parts and cannot be registered. Consequently, no business information, contact details, or services are available from the website. The technical infrastructure appears minimal, with only a link to an external font CDN and no evidence of HTTPS or security headers. The site lacks any privacy, cookie, or terms of service policies, and no analytics or tracking technologies are detected. Overall, the digital maturity of this web presence is extremely low due to the absence of published content and invalid domain status. From a security perspective, the absence of HTTPS and security headers, combined with the invalid domain registration, presents a critical risk and lack of trustworthiness. There are no indications of incident response or data protection measures. The site is effectively blocked or unpublished, limiting any meaningful security or compliance assessment. Given these factors, the overall risk assessment is high, with a recommendation to first resolve domain registration issues and publish a legitimate website with proper security and compliance controls. Strategic recommendations include obtaining a valid domain, implementing HTTPS, publishing comprehensive privacy and cookie policies, and establishing basic security headers and incident response contacts to improve trust and compliance.

J

Jo Potts

jopotts.net

44

Jo Potts is a professional video producer and editor offering comprehensive video production, editing, and motion design services. The website serves as a portfolio showcasing recent projects and notable clients, targeting businesses and individuals seeking high-quality video content. The business operates as a small-scale service provider within the media industry. Technically, the website is built on WordPress using the Vantage theme, with common plugins such as WPForms Lite and W3 Total Cache. The site is moderately optimized for performance and mobile devices, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting the contact form, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website partially mitigates this risk. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

The website www.theproofofthepudding.co.uk currently serves only a security verification page implementing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. No meaningful business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or market position. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, suggesting the domain is invalid or misconfigured. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL configuration details. Overall, the website is inaccessible for normal users without passing the security challenge, resulting in a low trust and credibility rating.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Ashton Cleaning Services

ashtoncleaning.co.uk

38

Ashton Cleaning Services is a small, established cleaning company based in Exeter, UK, offering a wide range of domestic, commercial, and specialist cleaning services. With over 20 years of industry experience, the company positions itself as a reliable and professional service provider with a strong local presence and a portfolio of high-profile clients. Their service offerings include house cleaning, school cleaning, trauma cleaning, floor restoration, and COVID-19 cleansing among others. The website is built on WordPress using Elementor, hosted via Cloudflare, and employs modern technologies such as Google reCAPTCHA v3 for form security. While the site is well-designed and provides clear contact information and trust signals such as certifications and testimonials, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and DNSSEC enabled, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced privacy and security disclosures.

The website www.derwent-fencing.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no substantive business content, metadata, or contact information is available for analysis. The WHOIS lookup failed because the query was made on the 'www' subdomain rather than the root domain, resulting in no registrar or domain registration data. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for frontend styling and bot mitigation, but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no contact or business details are exposed. Overall, the site’s security posture is minimal but includes basic bot protection. The lack of accessible content and WHOIS data limits trust and credibility assessments.

The website www.morrisonforklift.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed with an error from Nominet UK indicating the domain name violates naming rules, suggesting potential misconfiguration or invalid registration. Due to the lack of accessible content, no metadata, contact information, or security policies are available for analysis. The technical infrastructure appears minimal or non-functional from the provided data, with no detectable scripts, analytics, or security headers. Overall, the website's security posture is poor, with no visible HTTPS or security best practices. The domain's legitimacy is questionable given the WHOIS error and lack of accessible content.

S

Shanti nails & beauty Builder gel nails nail salon lincoln | 279a high street lincoln LN2 1JG

shantisalon.co.uk

49

The domain www.shantisalon.co.uk is not registered due to violation of Nominet UK's naming rules, specifically because the domain name contains too many parts. Consequently, the website content is inaccessible or blocked, and no meaningful data about the business, contact information, or policies can be extracted. The site appears to be built on the Wix platform, but no further technical or security details are available. This lack of registration and content access severely limits any assessment of the business or security posture. The overall risk is high due to the absence of verifiable information and domain legitimacy.

H

H.D. WHITE LTD SCRAP METAL MERCHANTS - YAPTON BN18

hdwhite.co.uk

48

HD White Ltd operates as a regional scrap metal merchant specializing in scrap cars, yards, and metal recycling services primarily serving the Bognor Regis, Worthing, and Chichester areas in the United Kingdom. The company targets local businesses and individuals requiring metal recycling solutions. The website is professionally designed using WordPress with the Divi theme and includes SEO optimizations and structured data to enhance search visibility. The technical infrastructure includes modern web technologies and integrations such as Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and form protection, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, though the website content itself appears trustworthy and relevant. Overall, the risk is moderate with recommendations to improve compliance and security transparency.

G

Garnetts Gardens

garnettsgardens.co.uk

49

Garnetts Gardens is a well-established, family-run retail plant nursery located in Hacheston, United Kingdom. Founded in 1994, the business has expanded from a small shed to a comprehensive garden centre offering a farm shop, café, gift area, and caravan site. The website reflects a local community focus with services tailored to gardening enthusiasts and local customers. The business model centers on retail and hospitality services with a strong emphasis on homegrown plants and knowledgeable customer support. Technically, the website is built using the Site.pro website builder platform, incorporating standard JavaScript libraries and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. The website is accessible without any WAF or security challenges, indicating good availability. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service documents. There is no evidence of advanced security frameworks or incident response mechanisms. The site collects minimal user data via a simple Google Maps directions form but does not implement consent mechanisms or privacy compliance features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a legitimate small business website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing data protection practices to improve trust and compliance.

The domain www.doorrepairservice.co.uk is currently non-operational and displays a generic 'Site not found' error page indicating the site is not published or the domain is not assigned. The WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, specifically that the domain contains too many parts, rendering it invalid or unregistered. Consequently, no business information, contact details, or metadata are available to assess the company's operations or market position. The website lacks any meaningful content, forms, or external links, and no security or privacy policies are present. From a technical perspective, the website does not provide evidence of HTTPS or security headers, and no modern technologies or CMS platforms are detected. The site is not mobile optimized and has poor accessibility and SEO characteristics. The security posture is weak due to the absence of HTTPS and security best practices. Privacy compliance is non-existent, with no cookie or privacy policies found. Overall, the domain's legitimacy is highly questionable given the WHOIS failure and invalid domain status. The website is effectively inaccessible, providing no business or security assurances. This represents a critical risk for users attempting to engage with this domain, as it lacks trust indicators and operational presence. Strategic recommendations include registering a valid domain name compliant with Nominet UK rules, implementing HTTPS with proper SSL certificates, establishing clear privacy and cookie policies, and publishing verifiable business contact information to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.lunson-mitchenall.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violations, suggesting the domain may be invalid or misconfigured. No business information, contact details, or policies are available on the site. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security headers, HTTPS information, or analytics. The overall security posture is poor due to lack of accessible content and missing security best practices. This results in a very low trust and legitimacy score for the domain and website.

The website www.georgeshairdressing.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or service content. The WHOIS lookup failed to find any registration data for the domain, indicating it may be unregistered or the data is not publicly available. The site contains no metadata, no forms, no contact information, and no privacy or cookie policies, which severely limits any meaningful analysis of the business or its digital presence. Technically, the site only loads Google Fonts and lacks HTTPS confirmation or security headers, indicating a poor security posture. Overall, the site appears inactive or improperly configured, posing a high risk for trust and credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.compositedoorworld.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, which blocks access to any substantive content. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is either invalid or improperly configured. Consequently, no business information, contact details, or policies are available for analysis. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection but lacks visible security headers or SSL enforcement in the provided data. The overall security posture is weak due to limited accessible content and missing security best practices. The domain's legitimacy is highly questionable given the WHOIS failure and lack of registration data.

The Wallingford Window Company Ltd is a small UK-based business specializing in the supply and installation of UPVC and aluminium replacement windows, doors, conservatories, and related home improvement products. The company positions itself as a local specialist with expertise and FENSA registration, targeting homeowners and property managers seeking quality home improvement solutions. The website presents a professional design with clear navigation and customer testimonials, supporting its credibility in the market. Technically, the website uses a basic tech stack including jQuery 1.12.4 and is hosted via GoDaddy. The site is mobile optimized and uses HTTPS, but lacks modern security headers and uses an outdated JavaScript library, which could pose security risks. There is no evidence of analytics or tracking services, and privacy and cookie policies are absent, indicating limited privacy compliance. From a security perspective, the site shows moderate posture with HTTPS enabled but missing important security headers and policies. The WHOIS data presents a significant anomaly with a domain creation date in the future, which undermines trust in the domain registration information. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires improvements in security practices, privacy compliance, and domain registration transparency to enhance trustworthiness and reduce risk.

The website www.cjhughesroofing.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. Due to this bot protection mechanism, the actual business content is inaccessible, preventing a full assessment of the company's services or market position. The domain WHOIS lookup failed with an error indicating the domain name is invalid under registry rules, suggesting the domain is either a subdomain or improperly registered, which raises concerns about legitimacy. Technically, the site uses modern libraries such as Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. No privacy, cookie, or terms of service policies are present, and no contact information is available on the page.

The website www.theestateagencycompany.co.uk is currently inaccessible, returning a 403 Forbidden error page. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is invalid or improperly registered. No business content, metadata, or contact information is available on the site. The lack of accessible content and domain legitimacy severely limits any meaningful analysis of the business or technical infrastructure. Security posture cannot be assessed due to absence of content and headers. Overall, the site appears non-operational or misconfigured, posing a high risk for trust and credibility.

The website www.serenade-windows.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The absence of metadata, structured data, or business information prevents a comprehensive understanding of the company's offerings or market position. The WHOIS query returned no registration data, indicating the domain may not be registered, expired, or the WHOIS data is otherwise unavailable. This severely limits the ability to assess the legitimacy or history of the domain. Technically, the site lacks modern technologies, scripts, or security headers, and no HTTPS or SSL information is available from the provided data. Overall, the site appears non-operational or misconfigured, resulting in a very low trust and credibility score.

S

Status Graphite

status-graphite.com

40

Status Graphite presents itself as a niche manufacturer of hand-made graphite basses and guitars based in England, with a business history dating back to 1981. The website content is minimal and uses outdated technology, lacking modern web standards and security features. There is no evidence of privacy policies, cookie consent mechanisms, or contact information, which limits user trust and compliance with data protection regulations. The absence of WHOIS registration data for the domain raises concerns about the legitimacy and current operational status of the website. Technically, the site is slow, not mobile optimized, and lacks accessibility features. Security posture is weak due to missing HTTPS and security headers. Overall, the site appears to be a legacy or placeholder site rather than a fully operational modern business website.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

The Doughnut (W)Hole

thedoughnutwhole.com

45

The Doughnut (W)Hole website represents a creative or artistic project launched in 2025, as indicated by the domain registration date and content references. The site features multimedia content including embedded Vimeo videos and uses Google Tag Manager for analytics tracking. The technical infrastructure is based on the Cargo CMS platform, with Google Fonts for typography. The website design is basic with moderate branding consistency and limited textual content, targeting a general audience interested in art or culture. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating a gap in compliance. No contact information or incident response details are provided, limiting business credibility and transparency. Overall, the site is safe and accessible without WAF or blocking mechanisms.

S

Specialised Process Solutions Ltd

spsmachinery.co.uk

46

Specialised Process Solutions Ltd is a small UK-based manufacturing company specializing in triple roll mills, mixers, press outs, and table systems primarily serving the ink, paint, adhesive, and food industries. Established in 2002 by industry veterans with over 75 years combined experience, the company emphasizes customer-focused, tailored machinery solutions including sales of new and refurbished equipment and relocation services. The website reflects a niche industrial business with a professional but modest online presence. Technically, the website is built on Joomla CMS with common JavaScript libraries such as jQuery, Bootstrap, and MooTools. The site is mobile-optimized and has a moderate performance profile. However, there is a lack of advanced SEO and accessibility features. Security posture is moderate with cookie consent implemented but missing key security headers and unclear SSL enforcement. No forms or email contacts are present, limiting direct digital engagement. The WHOIS data is unavailable due to a domain naming rules error, which raises concerns about domain registration legitimacy and reduces trustworthiness. Despite this, the website content and business information appear consistent and professional. The company holds ISO9001:2015 certification, which is a positive trust indicator. Overall, the website is functional and informative but would benefit from improved security practices, clearer domain registration transparency, and enhanced privacy and incident response disclosures to strengthen trust and compliance.

R

RS Transports

rstransports.com

44

RS Transports is a small transportation service provider specializing in airport transfers in Paris, including executive, family-friendly, and VIP services. The company targets travelers requiring reliable and comfortable transit between Paris airports and Disneyland Paris. The website is professionally designed as a single-page application using modern JavaScript frameworks and includes clear navigation and contact options. However, the WHOIS data for the domain is unavailable, raising questions about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking advanced security headers and cookie consent mechanisms. Overall, the site presents a trustworthy business front but would benefit from improved transparency and security practices.

S

Spaceship, Inc.

openenergi.com

45

The website themobilehunt.com is an adult entertainment platform primarily targeting Thai-speaking users, offering a wide range of pornographic videos including amateur clips and OnlyFans content. The business operates a WordPress-based site with user registration and search features, positioning itself as a niche adult content provider. Technically, the site uses standard web technologies including WordPress 7.0, jQuery, and Font Awesome, hosted behind Cloudflare DNS but lacks advanced DNS security features like DNSSEC. Security posture is moderate with HTTPS enabled but missing critical security headers and privacy policies. The site lacks visible incident response or abuse contact information, which is a compliance and security gap. Overall, the site is functional but has room for improvement in security and privacy compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.theshalbourne.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, which blocks access to any substantive content. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may be invalid or misconfigured. No business, contact, or policy information is available on the site, limiting the ability to assess the company's operations or legitimacy. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA scripts but lacks visible security headers or SSL information. Overall, the site presents a low trust profile due to lack of accessible content and domain registration issues.

The website www.academyassociates.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the full site content is blocked by a Web Application Firewall or similar bot protection mechanism. Due to this, no substantive business information, contact details, or policies are accessible for analysis. The WHOIS lookup for the domain returned no registration data, suggesting the domain may be unregistered or the data is withheld, which raises concerns about the legitimacy and operational status of the website. The technical infrastructure shows use of modern frontend libraries like Bootstrap and Google reCAPTCHA, but no further technologies or CMS platforms are detectable. Security posture is limited to bot protection with no visible HTTPS enforcement or security headers. Overall, the site is inaccessible for meaningful content or business evaluation, resulting in a low trust and security score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

M

Paito Warna HK: Angkanet, Virdsam, Nagasaon & Rumus Datubolon

morecambepress.co.uk

43

The website 'morecambepress.co.uk' provides tools and visual data related to Hong Kong lottery (togel) number pattern analysis, targeting enthusiasts interested in gambling prediction. The site features a basic design with common frontend libraries such as jQuery and Bootstrap, but lacks advanced CMS or modern frameworks. The content is primarily in Indonesian language and focuses on gambling-related data visualization. Despite the accessible content, the domain is not officially registered or recognized by the UK domain registry (Nominet), indicating a significant legitimacy concern. No privacy, cookie, or terms of service policies are present, and no verified contact information is provided. The site includes multiple external affiliate links to gambling-related domains, suggesting monetization through referrals. Security posture is weak with no confirmed HTTPS or security headers, and no incident response or data protection information is available.

A

Additional Aids Mobility

aamobility.co.uk

47

Additional Aids Mobility is a UK-based small business specializing in providing high quality and cost effective mobility aids and related services. Established since 2002, the company appears to serve a general audience seeking mobility solutions. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with e-commerce capabilities. Technical infrastructure includes modern web technologies and hosting by 20i Ltd, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, although formal privacy and terms policies are absent, which could impact compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website allenwhite.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2011 with GoDaddy.com, LLC and uses SiteGround name servers, but no active website content or business information is available. The site lacks any privacy, cookie, or terms of service policies, and no contact information or social media links are present. Technically, the site does not show evidence of HTTPS or security headers, and DNSSEC is not enabled, indicating a weak security posture. Overall, the website appears inactive or restricted, limiting any assessment of business operations or digital maturity. The security posture is poor due to lack of HTTPS and security best practices, and privacy compliance is absent. The domain registration is consistent and legitimate, but the blocked content severely impacts trust and usability.

Commodore Motors is a small, local automotive service provider based in Wandsworth, London, specializing in MOT services, vehicle repairs, and car servicing. The business targets local vehicle owners and emphasizes quality service with a friendly approach. The website reflects a basic but functional online presence with clear contact details and embedded location maps, supporting local customer engagement. Technically, the site is built on the Weebly platform, using older JavaScript libraries and Google Analytics for user tracking. While HTTPS is enabled, the absence of modern security headers and outdated libraries present potential security risks. Privacy compliance is weak due to the lack of privacy and cookie policies. Overall, the site is moderately trustworthy but would benefit from enhanced security and compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.