Skip to main content

Is merrycheftechnical.com a Scam? Security Check Results - Welbilt UK Ltd. Reviews

merrycheftechnical.com favicon

Is merrycheftechnical.com Safe? Security Analysis for Welbilt UK Ltd.

Check if merrycheftechnical.com is a scam or legitimate. Free security scan and reviews.

ManufacturingUnited Kingdommedium
jQueryjQuery UIGoogle AnalyticsGoogle Tag ManagerCycle2 jQuery slideshow plugin+1 more
Analyzed 10/3/2025Completed 5:22:30 PM
54
Security Score
MEDIUM RISK

AI Summary

Merrychef Technical is a support-focused website operated by Welbilt UK Ltd., providing comprehensive technical documentation, spare parts catalogs, and maintenance guides for Merrychef ovens. The site targets authorized service agents, technicians, and end-users seeking operational and servicing information. The business model centers on supporting the Merrychef product line through authorized channels and approved partners, positioning itself as a trusted resource in the manufacturing sector for high-speed oven technology. Technically, the website employs a traditional jQuery-based stack with Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. The absence of a known CMS suggests a custom or bespoke platform. While the site is functional and professionally designed, there is room for improvement in modernizing the tech stack and enhancing mobile responsiveness. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some privacy awareness. However, no security headers were detected, and no explicit security or incident response policies are published. The WHOIS data is notably absent, raising concerns about domain registration legitimacy despite the professional content and branding. This discrepancy impacts the overall trust assessment. Overall, the website presents a solid business resource with good content quality and user experience but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

Detected Technologies

jQueryjQuery UIGoogle AnalyticsGoogle Tag ManagerCycle2 jQuery slideshow pluginGoogle Fonts (Open Sans)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The website serves as a technical support portal for Merrychef ovens, a product line under Welbilt UK Ltd. Its market positioning is as a specialized support and parts resource, catering primarily to authorized service agents and technical users. The business model relies on providing official documentation and facilitating spare parts procurement through approved partners, supporting the operational continuity of Merrychef ovens. The absence of direct sales or e-commerce functions suggests a focus on service and support rather than retail. The company appears to maintain a medium-sized operation within the manufacturing sector, with a clear brand identity and consistent messaging. The partnership ecosystem includes official spare parts suppliers and service agents, reinforcing the brand's reliability. Growth indicators are not explicit but the site’s comprehensive technical content supports ongoing customer engagement and retention.

Extracted Contact Information

Marketing Intelligence Data

Security Posture Analysis

Comprehensive Security Assessment

The current security maturity level is moderate but with notable gaps. The use of HTTPS and cookie consent mechanisms are positive indicators. However, the lack of visible security headers such as Content-Security-Policy, X-Frame-Options, and HSTS reduces the site's defense against common web attacks. No vulnerability disclosure or incident response information is provided, limiting transparency and preparedness. The absence of WHOIS registration data is a significant red flag, potentially indicating domain registration issues or privacy concerns. Data protection practices appear minimal, with no explicit GDPR compliance beyond cookie consent. Incident response readiness and security culture indicators are not evident from the site content. Overall, the security posture requires enhancement to meet best practices and regulatory expectations.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive security headers including Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Strict-Transport-Security.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Welbilt UK Ltd.

Description:

Technical website providing support documents, product information, installation, operation, cleaning, and maintenance guidance for Merrychef ovens.

Key Services:
Technical support documentationSpare parts catalogInstallation and operation guidesCleaning and maintenance guidesService manuals and PPM manuals
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQueryjQuery UIGoogle AnalyticsGoogle Tag ManagerCycle2 jQuery slideshow pluginGoogle Fonts (Open Sans)
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
55/100
Best Practices:
  • Use of HTTPS (implied by canonical link https://)
  • Cookie consent banner with opt-in

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:basic

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is accessible with full content and no blocking detected

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

70/100
Score

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

53/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 30 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:78.129.200.144
Name Servers:
dns1.cscdns.netDNS only
dns2.cscdns.netDNS only
MX Records:
10: custmx.cscdns.net
SOA:Serial: 2019060505, TTL: 14400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:46ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a legacy jQuery-based front-end with additional libraries such as jQuery UI and Cycle2 for slideshows. Google Fonts and Google Analytics/Tag Manager are integrated for styling and analytics respectively. The site lacks a detectable CMS, indicating a custom or proprietary platform. Performance is moderate with some optimization opportunities, especially for mobile responsiveness and accessibility. The absence of modern frameworks or progressive web app features suggests technical debt and potential modernization needs. Security-related technical implementations are minimal, with no advanced protections visible in the HTML content. Overall, the technical infrastructure supports the business needs but would benefit from modernization and enhanced security controls.
Analyze Another Website