High-risk security reports

Browsers refuse the HTTPS connection to bancounion.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.

Browsers refuse the HTTPS connection to canarylabs.eu, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.

The analyzed website is currently inaccessible and presents an HTTP ERROR 436 page, which is a non-standard HTTP error indicating a problem with the site or server. The page content is minimal and includes only a generic error message and a reload button pointing to the same domain. The presence of the Chrome offline dinosaur game script indicates this is a default browser error page rather than an active business website. Due to the lack of accessible content, no business information, privacy policies, or contact details are available for analysis. The technical infrastructure appears to be minimal, with no advanced security headers or analytics detected. The security posture is weak due to the absence of HTTPS enforcement and security best practices. Overall, the site is either down, blocked, or misconfigured, preventing meaningful analysis or engagement.

Browsers refuse the HTTPS connection to lr-partner.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.

Browsers refuse the HTTPS connection to onvarma.fi, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.

Browsers refuse the HTTPS connection to greswolde.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.

NeverSSL is a niche utility website designed to assist users in accessing wifi captive portals that block HTTPS redirection by providing a plain HTTP site that can be redirected to for login purposes. The site is minimalistic, with basic content and no commercial or business identity. Its market position is limited to users facing captive portal access issues, and it does not appear to operate as a commercial business. Technically, the website is simple, using only HTML and CSS without modern frameworks or CMS. It lacks HTTPS, security headers, and privacy or cookie policies, which significantly impacts its security posture. The site does not collect user data or use analytics, resulting in minimal privacy concerns but also limited compliance. Overall, the website is functional for its intended purpose but lacks professional security and compliance features.

DIAMO, státní podnik, is a Czech state enterprise headquartered in Stráž pod Ralskem, specializing in remediation and management of mining legacy sites, particularly uranium, ore, and coal mining. The organization plays a strategic role in environmental protection and industrial legacy management within the Czech Republic. The website reflects a professional and government-aligned entity with clear communication of its mission and services. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and is built on OctoberCMS, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit incident response contacts could enhance trust. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given its certifications and state enterprise status.

Fondation des hôtels Sandoz is a Swiss hospitality foundation operating a portfolio of luxury hotels including Beau-Rivage Palace, Lausanne Palace, and others. The website presents a professional image with a focus on luxury hospitality services targeting affluent travelers and hospitality professionals. The site is built on TYPO3 CMS with modern frontend technologies and includes cookie consent management via tarteaucitron.js. Google Analytics is used for audience measurement with user consent options. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Contact information is partially available but not prominently displayed on the main page. Security posture is moderate with HTTPS enabled but missing security headers and published security policies.

321 MED GmbH is a German healthcare technology company specializing in digital practice management solutions for medical practices, clinics, and medical care centers. Their flagship product is an integrated platform that includes online reception, appointment scheduling, AI-powered telephone assistants, and workflow automation designed to streamline administrative tasks and improve patient care. The company is well-positioned in the German healthcare market with over 4,000 clients and a strong reputation supported by high customer ratings and media presence. Technically, the website employs modern web technologies including jQuery, Usercentrics for consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services are provided via Cloudflare, ensuring robust performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with a strong SSL configuration and integrates GDPR-compliant consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, and DNSSEC is not enabled, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website and business demonstrate a high level of professionalism, trustworthiness, and compliance with relevant data protection regulations. The domain registration details align well with the company’s profile, indicating legitimacy and stability. Strategic recommendations include enhancing DNS security, publishing detailed security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

Kara5® is a Swiss-based digital agency specializing in integrated digital growth services including data research, digital strategy, digital marketing, web design, and AI & automation. Established in 2017, the company positions itself as a trusted partner for ambitious companies seeking to enhance their digital presence and achieve measurable progress. The website reflects a mature digital infrastructure with modern technologies and a professional design that supports their market positioning. The presence of notable clients and detailed testimonials further reinforce their credibility. Technically, the site uses a robust tech stack with Cloudflare DNS and CDN, Google Tag Manager, and multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is good with HTTPS, reCAPTCHA protection on forms, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Kara5® demonstrates a strong business and technical foundation with a high trust level and minimal risk exposure.

Premier Patterns & Castings Ltd is a UK-based small manufacturing company specializing in high-quality pattern making, mould making, and metal casting services. With over 30 years of experience, they serve diverse industries including automotive, aerospace, marine, and entertainment. Their website presents a professional image with detailed service offerings and clear contact information, targeting B2B clients in manufacturing sectors. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, providing a good user experience with mobile optimization and clear navigation. However, the website lacks privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. The absence of WHOIS data for the domain is a significant anomaly that reduces domain trustworthiness, although the website content and contact details appear legitimate. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Evans Warrington Limited is a UK-based mechanical services company operating nationally, specializing in various aspects of mechanical services within the Building Services Sector. The company is family-run with over 70 years of experience and a small team of eighteen staff. The website reflects a small business model focused on service provision to clients across the UK. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, hosted by Ionos SE. The site is moderately optimized for SEO and mobile use but lacks advanced accessibility features and comprehensive privacy or cookie policies. Security posture is basic with HTTPS enabled but no detected security headers or incident response information. Overall, the website is functional and professional but could improve in compliance and security transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.gorehall.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or service content. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may be invalid or improperly registered. No metadata, structured data, or contact information is available, and the site lacks privacy or cookie policies. Technically, the site only loads minimal static content including Google Fonts, with no detectable scripts, analytics, or security headers. This severely limits the ability to assess the company's business model, market position, or technical infrastructure. The security posture is poor due to lack of HTTPS and security headers, and the domain's legitimacy is questionable given the WHOIS failure.

Marriott Vacations Worldwide operates as a premium hospitality and vacation ownership company, focusing on developing expansive and immersive vacation and leisure experiences. The company positions itself as a leader in premium resort development and innovative travel options, targeting travelers and vacationers seeking quality leisure services. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress using the Kadence theme and integrates modern technologies such as Brightcove video player and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. The absence of WHOIS data raises some concerns about domain legitimacy, though the website's professional appearance and content mitigate immediate risks. Overall, the site scores well in business credibility and technical implementation but should enhance privacy compliance and security practices to strengthen trust and compliance.

Related:marriott.compaymentech.net

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.trustland.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain is improperly registered or non-existent. Consequently, no business, contact, or compliance information is available from the site. The technical infrastructure appears minimal with no detectable scripts, analytics, or security headers. The site lacks privacy and cookie policies, terms of service, or any forms for user interaction. Overall, the website does not provide any business or security assurances and is effectively non-operational.

Brooksbank Valves Ltd is a UK-based manufacturer specializing in high-quality isolation valves for demanding industries such as Naval Marine, Oil & Gas, and Industrial Gas & Chemical markets. With over 70 years of experience, the company positions itself as an independent family-owned business focused on quality assurance and traceability. The website reflects a professional industrial manufacturing business with clear product offerings and sector focus. Technically, the website uses modern web technologies including Webflow CMS, JavaScript libraries, Google Analytics, and Twitter widgets. The site is mobile-optimized with good navigation and content quality. However, some technical improvements are recommended, including enhanced accessibility and security headers. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies. The absence of privacy and cookie policies indicates potential compliance gaps. The WHOIS data is unavailable due to domain naming rules violation, which reduces trust but the website content and contact information support legitimacy. Overall, the website presents a credible and professional business presence with moderate technical maturity and some security and compliance improvements needed. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and clarifying incident response contacts to enhance trust and compliance.

The website at https://www.thecitizensbankphila.com/investor-relations/ is currently inaccessible, returning a 403 Forbidden error page with no accessible content. The domain WHOIS data is not found, indicating the domain may not be registered or is inactive. Due to the lack of accessible content, no business information, contact details, or compliance policies are available for analysis. The technical footprint is minimal, with only Google Fonts loaded and no detectable analytics or security headers. This severely limits the ability to assess the company's digital maturity or security posture. The overall risk is high due to the lack of transparency and accessibility.

The Bucks County Workforce Development Board website serves as an informational portal for workforce development activities in Bucks County, Pennsylvania. It targets employers, job seekers, and local stakeholders by providing labor market data, resources, and updates on initiatives and board meetings. The site is built on WordPress using the Customify theme and incorporates standard web technologies such as Google Fonts and Font Awesome. The design is professional and consistent with government branding, offering a good user experience with mobile optimization and clear navigation. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, which limits user engagement and trust. Security-wise, HTTPS is enabled but the absence of security headers and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is incomplete and malformed, reducing domain trustworthiness despite the legitimate appearance of the website content.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.shawgroup.com currently serves as a domain-for-sale landing page with minimal content and no active business presence. The domain was first registered in 1996, indicating it is an aged domain; however, the WHOIS data shows no current registration record, suggesting the domain may be expired or in transition. The site offers the domain for sale with a stated price threshold and provides an email contact for inquiries. Technically, the site lacks modern web technologies, security features such as HTTPS, and any form of user interaction or data collection. Security posture is weak due to the absence of SSL and security headers, and there are no indications of compliance with privacy regulations beyond a basic privacy policy link. Overall, the site presents low trustworthiness and minimal business credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

广州君科科技信息咨询有限公司 operates as a specialized industrial valve manufacturer and information consulting service provider based in China. The company emphasizes decades of experience in valve design, production, and sales, offering a broad range of products including hydraulic control valves, buried gate valves, silent check valves, soft-seal butterfly valves, and electric two-way valves compliant with national and American standards. Their market position is that of a medium-sized, experienced manufacturer targeting industrial and energy sectors with a focus on quality and customization. Technically, the website employs a basic but functional technology stack including HTML5, CSS, JavaScript, and jQuery libraries. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident. The site is accessible without WAF or blocking mechanisms. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The WHOIS data is missing, raising concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data are detected in the HTML content. Overall, the website presents a professional business front but suffers from critical gaps in domain registration transparency, security best practices, and privacy compliance. Strategic improvements in these areas are recommended to enhance trust and security.

广州立一办公设备有限公司是一家成立于2005年的办公设备租赁、销售及维修服务公司，专注于广州地区的复印机租赁市场，拥有一定的市场知名度和客户基础。网站内容丰富，涵盖租赁中心、产品中心、办公耗材、维修中心及成功案例，展示了公司的业务范围和客户合作情况。技术基础较为传统，使用了多种较老的JavaScript库和插件，网站设计和移动优化处于基础水平，导航结构清晰但缺乏现代化体验。安全方面，网站未启用DNSSEC，未检测到HTTPS强制或安全头，且使用了过时的脚本库，存在潜在安全风险。隐私和合规政策缺失，未见GDPR或类似合规措施，存在合规风险。总体而言，网站业务信息明确，可信度中等，技术和安全方面有较大提升空间。

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.cjtchem.com is currently inaccessible, returning a 403 Forbidden error page served by nginx, indicating that access is blocked or restricted. No website content, metadata, or business information is available for analysis. The WHOIS query returned no match, suggesting the domain is either unregistered, expired, or otherwise not publicly registered. Due to the lack of accessible content and registration data, it is not possible to assess the company's business operations, market position, or services. The technical infrastructure cannot be evaluated, and no security posture can be determined beyond the fact that the site is inaccessible. Overall, the domain appears inactive or improperly configured, resulting in a very low trust and legitimacy score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website eu-linco.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2006 with Ionos SE, a reputable registrar, indicating a potentially long-standing business presence. However, the lack of accessible content, absence of privacy, cookie, and terms of service policies, and no contact information severely limit the ability to assess the business or security posture. Technically, the site loads minimal resources such as Google Fonts but lacks visible security headers or SSL configuration details in the provided data. Overall, the site appears to be either restricted or misconfigured, resulting in a poor user experience and low trustworthiness.

The website www.clawsonfarms.co.uk appears to be inaccessible or blocked, as indicated by the incomplete HTML content and the WHOIS lookup failure. The WHOIS data shows that the domain name violates Nominet UK's naming rules and cannot be registered, which raises serious legitimacy concerns. Due to the lack of accessible content, no business description, contact information, or security policies could be identified. The only detectable external script is Google Tag Manager, suggesting some level of analytics integration. Overall, the website's technical infrastructure and digital maturity cannot be properly assessed due to content blocking or truncation. The security posture is unknown, with no security headers or SSL details available. The domain's invalid status and lack of transparency pose a high risk, and the website should be treated with caution until further information is available.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

James Good Limited is a UK-based branding and marketing consultancy specializing in corporate brand strategy, identity design, copywriting, and marketing services primarily targeting B2B clients. The company positions itself as a seasoned expert partner offering strategic and pragmatic marketing leadership and consulting services. Their website reflects a professional and well-structured digital presence built on Drupal 10, incorporating modern marketing analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and provides clear navigation and comprehensive content about their services and client portfolio. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms but lacks advanced security headers and published security policies. The WHOIS data for the domain is unavailable due to a domain naming rules error, which limits domain trust verification. Overall, the website demonstrates a mature digital footprint with good privacy compliance and business credibility, though improvements in security posture and domain registration transparency are recommended.

The website www.1stclasswindows.net is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed, indicating that the domain may not be registered or WHOIS data is restricted or unavailable. Consequently, no business information, contact details, or privacy policies are present on the site. The site only loads Google Fonts as an external resource, with no scripts, analytics, or tracking technologies detected. The lack of accessible content and registration data severely limits the ability to assess the business or technical maturity of the entity behind the domain. Security posture cannot be evaluated due to the absence of SSL or security headers information.