Security Directory

querkraft.at is the website of an Austrian architecture and design firm showcasing a portfolio of projects including schools, residential buildings, museums, and pavilions. The firm targets clients interested in architectural and urban design services, primarily within Austria. The website is built on TYPO3 CMS with Bootstrap and several JavaScript libraries, providing a professional and visually appealing presentation of their work. However, the site lacks critical security features such as HTTPS, which significantly impacts trust and security posture. No privacy or cookie policies are present, and contact information is not explicitly provided, limiting user engagement and compliance with data protection regulations. Overall, the website demonstrates good content quality and business relevance but requires urgent improvements in security and privacy compliance to meet modern standards.

F

FH Kärnten gemeinnützige Gesellschaft mbH

fh-kaernten.at

0

FH Kärnten is a public higher education institution in Austria offering a wide range of Bachelor, Master, and continuing education programs focused on technology, health, social sciences, and management. The institution emphasizes practical orientation, international cooperation, and sustainable development. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding targeting prospective and current students. Technically, the site is built on TYPO3 CMS and served by Apache, but critically lacks a valid SSL certificate and HTTPS support, which undermines security and user trust. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

The website ledworx.com currently serves minimal content, consisting solely of a client-side redirect to a /lander path. There is no substantive business information, metadata, or user-facing content available. The domain is registered and resolves to two IP addresses hosted on Amazon AWS infrastructure, but lacks a valid SSL certificate and does not support HTTPS, which severely limits trust and security. No contact information, privacy policies, or terms of service are present, indicating a very low level of digital maturity and compliance. From a technical perspective, the site is underdeveloped with no detectable CMS, frameworks, or analytics tools. The absence of security headers, DNSSEC, and a valid SSL certificate exposes the site to potential security risks and undermines user trust. The SPF record is configured strictly but without MX records, which may cause email delivery issues if email services are intended. Security posture is weak due to lack of HTTPS and security best practices. No incident response or vulnerability disclosure mechanisms are found. The domain registration appears consistent but provides no additional trust signals. Overall, the site is not suitable for business operations in its current state and requires significant improvements in security, content, and compliance to be viable. Strategic recommendations include obtaining and configuring a valid SSL certificate, implementing security headers and DNSSEC, developing substantive website content including privacy and cookie policies, and establishing clear contact and business information to improve credibility and compliance.

S

SLB

slb.com

0

SLB is a global energy technology company focused on driving innovation for a balanced planet. Their website showcases a comprehensive portfolio of solutions spanning decarbonization, digital transformation, and traditional oil and gas services. The company targets energy industry professionals, investors, partners, and job seekers, positioning itself as a market leader with extensive service offerings and a strong sustainability commitment. Technically, the website employs modern technologies such as jQuery, Brightcove video, Coveo search, and integrates multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and offers rich content with clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of HTTPS support, which is a critical issue. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site reflects a mature enterprise with good business credibility but requires urgent security improvements to protect user data and maintain trust.

K

Kemira Oyj

kemira.com

0

Kemira Oyj is a global leader specializing in sustainable chemical solutions primarily for water-intensive industries such as pulp & paper, water treatment, and energy sectors. The company offers a comprehensive portfolio including water treatment chemicals, fiber production solutions, industrial chemicals, and digital services aimed at process optimization. Their website reflects a mature digital presence with strong emphasis on sustainability, investor relations, and corporate governance, targeting industry professionals, investors, suppliers, and potential employees. The company is headquartered in Helsinki, Finland, and maintains a large operational scale with over 4,700 employees.

V

Versicherungsbüro Schättle GmbH

schaettle.at

0

Versicherungsbüro Schättle GmbH is an independent insurance brokerage firm based in Vienna, Austria, operating three physical offices and offering a range of insurance advisory and brokerage services. The company emphasizes personal consultation, competitive pricing, and strong partnerships with major insurance providers. Their website is professionally designed with good content quality and clear navigation, targeting private individuals and families in Vienna seeking insurance solutions. Technically, the website is built on WordPress with Elementor and several plugins, hosted on a LiteSpeed server with DNS managed by Dynamix. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and easily accessible. Overall, the site demonstrates good business credibility but requires urgent security improvements.

STADA is a leading German pharmaceutical company specializing in high-quality medicines, including consumer healthcare products, generics, and specialty pharmaceuticals. The company holds a strong market position as the fourth largest consumer healthcare company in Europe and is recognized as a Top Employer in Germany. Their website reflects a professional and comprehensive digital presence targeting consumers, healthcare professionals, and partners. Technically, the site uses modern JavaScript libraries, consent management tools, and is built on the Umbraco CMS platform. However, the website suffers from a critical security issue: the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines user trust and security. Performance is also suboptimal with slow load times and a large page size. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high with detailed contact information and consistent WHOIS data. Overall, while the business and content quality are excellent, the security posture requires urgent improvement to protect users and maintain trust.

Hawle Beteiligungsgesellschaft m.b.H. is a well-established Austrian manufacturer specializing in water supply valves and related products, serving a global market with a strong European manufacturing base. The company emphasizes sustainability, quality, and innovation, with a broad product portfolio including gate valves, butterfly valves, and digital water management solutions. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site uses modern JavaScript frameworks (Vue.js), Pimcore CMS, and integrates analytics and consent management tools, indicating a good level of digital maturity. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the security posture and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears credible and trustworthy, but urgent improvements in SSL/TLS deployment are recommended to secure user interactions and data.

R

Roomle GmbH

roomle.com

0

Roomle GmbH operates a sophisticated 3D commerce platform named Rubens, specializing in product personalization, room designing, and augmented reality visualization. The company targets furniture manufacturers, retailers, and other industries seeking to enhance their e-commerce offerings with interactive 3D configurators and AR experiences. The platform integrates with e-commerce and ERP/CRM systems, providing a seamless customer experience and boosting sales. Technically, the website leverages modern web technologies including Vue.js, Storyblok CMS, and Google Cloud hosting, with performance and mobile optimization rated good. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and GDPR compliant, but incident response and vulnerability disclosure mechanisms are lacking. Overall, Roomle presents a professional and trustworthy business with strong market positioning but must urgently address its SSL/TLS deficiencies to ensure secure user interactions.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

W

WordPress

kapschcarrier.com

0

KapschCarrier.com is a small-scale WordPress-based blog focused on telecommunications policy and 5G network insights. The site provides regularly updated content authored by an identified individual, targeting telecom professionals and enthusiasts. Technically, the site uses WordPress with common libraries like jQuery and Swiper.js, hosted behind Cloudflare. However, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which is a critical security deficiency. No privacy, cookie, or terms of service policies are published, and no contact information is available, limiting trust and compliance. The site has good SEO metadata and structured data but lacks analytics or advertising integrations. Overall, the site is functional but has significant security and compliance gaps that should be addressed to improve trustworthiness and user safety.

H

Heidrick & Struggles International, Inc.

heidrick.com

0

Heidrick & Struggles International, Inc. operates a leading global retained executive search and leadership consulting firm. The company specializes in executive search, leadership development, on-demand talent, and organizational culture consulting, serving a broad range of industries with a strong market position. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting corporate clients seeking leadership solutions. Technically, the site uses Sitecore CMS, Microsoft IIS hosting, and integrates Coveo search and OneTrust cookie consent, indicating a modern and scalable infrastructure. However, a critical security gap exists as the site lacks HTTPS/SSL encryption, exposing users to potential risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but urgently requires SSL implementation to meet security best practices.

L

LearnChamp Consulting GmbH & Co KG

learnchamp.com

0

LearnChamp Consulting GmbH & Co KG is a well-established E-Learning agency founded in 2001, specializing in tailored digital learning solutions and LMS implementation with Totara for corporate clients primarily in the DACH region. The company holds recognized certifications including ISO 27001:2022 and has received industry awards, positioning it as a leading provider in its sector. The website reflects a professional and consistent brand image with comprehensive content and multimedia elements targeting business customers. Technically, the site uses modern marketing and embedding technologies such as HubSpot and Vimeo, hosted via Cloudflare and built on Webflow CMS. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Contact information is clearly presented, enhancing business credibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The Spencer Stuart Portal website serves as a client or internal portal for Spencer Stuart, a global executive search and leadership advisory firm. The site is minimalistic, primarily acting as a loading or shell page that dynamically loads resources and scripts from local bundles and external services such as Pendo for analytics. The business focus is on executive search and leadership consulting, targeting enterprise clients and internal users. The portal likely supports client engagement and administrative functions rather than public marketing. Technically, the site is hosted on Amazon S3 with CloudFront CDN, leveraging AngularJS framework and JavaScript for dynamic content loading. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The absence of modern TLS protocols, security headers, and privacy policies further weakens the security posture. Performance data is unavailable, but the site appears slow and basic in design and user experience. Security evaluation reveals no WAF or blocking mechanisms, but the lack of HTTPS and security best practices exposes the site to risks. No privacy or cookie policies are present, and no contact or legal information is provided, limiting trust and compliance. Pendo analytics is integrated, indicating moderate user tracking without visible privacy compliance measures. Overall, the site is functional as a portal shell but requires urgent improvements in security, privacy compliance, and content completeness to meet enterprise standards and user trust expectations.

The website lobster.media is currently a parked domain landing page primarily monetized through advertising networks such as Google Adsense and Parklogic. It lacks substantive business content, contact information, or any clear business model beyond domain parking. The technical infrastructure is minimal, hosted on Hetzner Online with a Caddy server, but critically lacks a valid SSL certificate and HTTPS support, exposing visitors to security risks. The site does not implement privacy or cookie consent mechanisms and provides no security or incident response policies. Overall, the site demonstrates very low digital maturity and business credibility, with poor content quality and minimal technical sophistication.

A

Anker Innovations

anker-in.com

0

Anker Innovations is a globally recognized leader in charging technology and consumer electronics, offering products in premium audio, home entertainment, and home security. The company maintains a professional and well-branded online presence with regularly updated content and a focus on sustainability. Technically, the website is built on WordPress with Elementor and integrates modern marketing and analytics tools, although performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which poses significant risks. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website demonstrates good business credibility but requires urgent security improvements to protect user data and trust.

E

Evides N.V.

evides.nl

0

Evides N.V. is a large, established public utility company providing reliable and sustainable drinking water services to approximately 2.5 million consumers and businesses in the southwest Netherlands. The company operates a comprehensive digital infrastructure including a customer portal (Mijn Evides), extensive self-service options, and detailed information resources. Their market position is strong with a focus on quality, sustainability, and customer engagement. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures are in place including a strict Content Security Policy and multiple security headers; however, the SSL certificate is currently invalid and no modern TLS protocols are enabled, representing a critical security risk. Privacy compliance is robust with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

The website jci.cc is currently inaccessible due to a Cloudflare security block, which prevents access to any meaningful content or business information. The site presents a Cloudflare challenge page indicating that the visitor has been blocked, likely due to security rules triggered by the request. This results in a lack of visible metadata, contact details, policies, or business descriptions. The technical infrastructure relies on Cloudflare for security and DNS, with Google MX records for email, but the SSL/TLS configuration is invalid or missing, which is a critical security concern. Overall, the security posture is weak due to the absence of a valid certificate and modern TLS protocols, though some security headers are present. Due to the blocking, the website's content quality, privacy compliance, and business credibility cannot be assessed, resulting in a low overall risk score. Strategic recommendations include resolving SSL issues, enabling HSTS, and providing accessible privacy and contact information to improve trust and compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

The website porsche-inter-auto.ro is a parked domain landing page primarily offering the domain for sale. It lacks any active business content, contact information, or services. The domain is registered with Salestrar Ltd and hosted on Hetzner Online infrastructure, but no SSL certificate or HTTPS support is present, which severely impacts security posture. The site relies on advertising scripts and domain parking monetization. Overall, the digital maturity is low with minimal technical sophistication and poor privacy compliance. Security best practices are not implemented, exposing the site to risks and reducing trustworthiness. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, and improving domain security configurations.

B

Burton Snowboards

burton.com

0

Burton Snowboards is a well-established leader in the snowboarding retail industry, offering a comprehensive range of products including snowboards, boots, bindings, apparel, and accessories. Founded in 1977, the company has a strong brand presence and a loyal customer base, supported by a professional e-commerce platform that targets snowboarding enthusiasts and outdoor sports consumers. The website demonstrates excellent content quality, clear navigation, and consistent branding, reflecting a mature digital presence. Technically, the site leverages modern e-commerce technologies such as Salesforce Commerce Cloud (Demandware), Cloudflare CDN, and integrates multiple marketing and analytics tools including Google Analytics, OneTrust, and Yotpo. However, the current SSL certificate is invalid or missing, which poses a critical security risk and impacts user trust. Security headers are implemented but HSTS is not fully enabled, indicating room for improvement in HTTPS enforcement. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent attention to SSL configuration to enhance security posture.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Siltronic AG is a globally recognized leader in the manufacturing of hyperpure silicon wafers, serving major semiconductor manufacturers worldwide. The company operates production sites across Asia, Europe, and the USA, emphasizing quality, precision, and innovation. Their business model focuses on supplying essential silicon wafers for the semiconductor industry, positioning them as a key player in technology manufacturing. The website reflects a professional corporate presence with comprehensive investor relations and career information, targeting industry professionals, investors, and potential employees. Technically, the website is built on TYPO3 CMS and hosted via Amazon CloudFront, integrating modern tools such as Google Tag Manager and FriendlyCaptcha. The site is well-structured, mobile-optimized, and includes a GDPR-compliant cookie consent mechanism. However, the absence of a valid SSL certificate critically undermines the security posture, exposing users to risks and limiting the effectiveness of security headers. From a security perspective, while several best practices are implemented, the lack of HTTPS and TLS support is a major vulnerability. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and readiness. Overall, the site is professional and trustworthy in content but requires urgent security improvements to protect visitors and maintain compliance. Strategically, Siltronic should prioritize obtaining a valid SSL certificate and enabling modern TLS protocols to secure communications. Enhancing transparency around incident response and vulnerability disclosure would further strengthen their security culture and stakeholder confidence.

The website pdcf.org currently serves as a minimal placeholder with no substantive content beyond a client-side redirect to a /lander path. There is no visible business information, contact details, or user engagement features. The domain is registered and active with DNS records pointing to Afternic nameservers, suggesting it may be parked or intended for future sale or development. The SSL certificate is valid but issued to an unrelated domain, indicating a shared or misconfigured certificate. Technically, the site supports modern TLS protocols but lacks security headers, HSTS, and OCSP stapling, which are recommended for improved security. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, limiting compliance and trust. Overall, the site’s security posture is basic, and the lack of content and business data results in a low trust and credibility score.

S

StreamBreak Interactive GmbH

streambreak.tv

0

StreamBreak Interactive GmbH operates a niche technology platform focused on enhancing live streaming experiences by providing interactive minigames and ads that engage viewers during breaks. The company targets streamers, eSports organizers, and advertisers, offering a dashboard for analytics and community interaction. Founded in 2017 and based in Austria, StreamBreak has established a consistent brand presence and has been recognized with awards such as the Twitch Extension Winner in 2019. Technically, the website is built using modern web technologies including Bootstrap and JavaScript, hosted on Uberspace with DNS managed by world4you.at. While the site supports modern TLS protocols and has HSTS enabled, performance is suboptimal with a slow page load time. Mobile optimization and SEO are good, but accessibility is basic. No CMS is detected, indicating a custom or static site. From a security perspective, the site employs HTTPS with strong protocols but lacks DNSSEC, CAA records, and domain protection locks, which are recommended to enhance DNS and domain security. OCSP stapling and certificate transparency are also not implemented. Privacy compliance is basic with a cookie banner and privacy policy present, but no terms of service or explicit GDPR compliance statements. Contact information is limited to an email address. Overall, the website is professional and trustworthy with minor security and performance improvements needed. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing performance, and expanding privacy and security policies to strengthen compliance and user trust.

The website hartlteam.com presents minimal content, primarily functioning as a redirect page that uses FingerprintJS for visitor identification. There is no visible business description, contact information, or user engagement features. The SSL certificate is valid and supports modern TLS protocols, but it is a multi-domain certificate shared with many unrelated domains, which may reduce trust. The technical infrastructure is basic, hosted on Apache with DNS managed by Above.com, and no advanced security headers or policies are implemented. The site lacks privacy, cookie, and terms of service policies, indicating poor compliance with data protection regulations. Overall, the security posture is basic with room for significant improvement, and the website's business credibility is low due to the absence of identifiable company information or trust signals.

B

B&A Insurance Consulting

baic.cz

0

B&A Insurance Consulting is a Czech Republic-based IT consulting and software development company specializing in SAP systems and insurance sector applications. With over 16 years of market presence, the company serves insurance and banking clients, particularly within the VIG group, offering SAP implementation, maintenance, and custom software development services. The website reflects a professional and consistent brand with clear business focus and client testimonials supporting its market position. Technically, the site uses modern frameworks and technologies but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. Privacy compliance is basic but present, with GDPR policies and cookie consent mechanisms implemented. Overall, the company demonstrates credible business operations but requires urgent improvements in security posture to protect its digital presence and client trust.

H

HOSTSTAR - Multimedia Networks AG

selinatec.com

0

Hoststar is a webhosting and domain registration provider targeting German-speaking customers with affordable hosting packages and cloud services. The website content is currently a default hosting placeholder page indicating readiness for customer content upload. The technical infrastructure uses nginx web server and common web libraries like jQuery and WOW.js, hosted by Hoststar itself. However, the SSL certificate is invalid or missing, resulting in poor HTTPS security. The site lacks cookie consent mechanisms and vulnerability disclosures, indicating limited privacy and security maturity. Contact information and business details are clearly presented, supporting moderate business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

L

lbase

lbase.software

0

lbase is a specialized business unit of Axians, providing advanced logistics software solutions such as transport management systems (TMS) and warehouse management systems (WMS). Leveraging AI, algorithms, and eco-partnerships, lbase aims to optimize supply chain processes for efficiency and flexibility. The company is well-positioned in the European logistics market with a mature domain and strong parent company backing from VINCI Energies. The website reflects a professional and comprehensive digital presence with clear business information and compliance with GDPR and cookie regulations. Technically, the site uses WordPress with modern plugins and analytics tools, though performance could be improved. Security posture is strong with HTTPS, HSTS, SPF, and DMARC properly configured, but could benefit from enabling DNSSEC and OCSP stapling. Overall, lbase demonstrates a mature, trustworthy, and compliant online presence suitable for its B2B logistics software market.

R

Regus

regus.com

0

Regus is a well-established global provider of flexible workspace solutions, including office space, coworking, virtual offices, and meeting rooms. With a mature domain age of 29 years and a strong market presence as part of the IWG Group, Regus serves a broad audience of businesses seeking flexible and scalable workspace options. The website is professionally designed, leveraging modern technologies such as Next.js and Sitecore CMS, and offers comprehensive content and clear navigation to support user engagement. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that must be addressed promptly to ensure secure communications and maintain user trust. Privacy and cookie policies are present and indicate good compliance with GDPR requirements. Overall, the site demonstrates a strong business credibility and digital maturity but requires immediate security improvements.

E

ertex solar

ertex-solar.at

0

Ertex solar is a specialized company focused on building-integrated photovoltaics (BIPV), offering innovative solar energy solutions integrated into architectural elements such as façades, balconies, and roofs. With a strong emphasis on aesthetics and energy transition, the company serves architects, developers, and environmentally conscious clients globally. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive product information. Technically, the site runs on a modern WordPress stack with SEO and performance optimizations, hosted on OVHcloud. Security posture is solid with HTTPS and multiple security headers, though SSL/TLS protocol support requires enhancement. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain and WHOIS data corroborate the legitimacy and consistency of the business claims.

A

ANWR Norden AB

anwr.se

0

ANWR Norden AB operates as a leading organization in the voluntary shoe retail sector in the Nordic region, founded in 1919 in Hamburg, Germany. The company connects shoe retailers with top brands and offers a portfolio of services tailored to the needs of trade and industry, including financial services through its own bank, DZB Bank. The website reflects a medium-sized enterprise with a clear business model focused on membership services and retail support. Technically, the website uses standard web technologies and a consent management platform but suffers from slow load times and lacks modern CMS or frameworks. Security posture is weak due to the absence of a valid SSL certificate and modern TLS protocols, despite the presence of HSTS headers. The lack of DMARC, DNSSEC, and other DNS security features further reduces security maturity. Privacy compliance is basic with a privacy policy present but no strong GDPR indicators. Overall, the site is functional but requires significant improvements in security and performance to meet modern standards.

C

Corteva Commercial

pioneer.com

0

Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.

I

IC Resources

ic-resources.com

0

IC Resources is a well-established technology recruitment agency specializing in deep tech sectors such as software, semiconductor, electronics, and manufacturing. Founded in 1999, it operates globally with offices in the UK, Germany, and the USA. The company connects innovative organizations with highly skilled technology professionals, offering services including job search assistance, CV advice, and talent acquisition for clients. The website reflects a professional and comprehensive digital presence with rich content and client testimonials, positioning IC Resources as a trusted partner in the technology recruitment market. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Contact Form 7, supported by a PHP 8.2 backend and hosted via StackCDN. While the site is mobile-optimized and SEO-friendly, performance metrics are not available, and accessibility is basic. The absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Security headers are present but insufficient to compensate for the lack of encryption. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the security posture is weak due to missing HTTPS and TLS protocols, which should be addressed urgently. The business credibility is strong, supported by consistent WHOIS data and transparent contact information. Strategic recommendations include immediate SSL/TLS implementation, enhanced security headers, and improved privacy and cookie consent mechanisms to align with GDPR requirements and user trust expectations.

T

TDK Electronics AG

epcos.com

0

TDK Electronics AG, formerly EPCOS, is a mature and established enterprise specializing in the manufacturing and sales of electronic components, primarily serving industrial, automotive, and energy sectors. The company operates under the TDK Group umbrella, with a strong European presence and a comprehensive product catalog that includes capacitors, sensors, inductors, transformers, and more. Their website reflects a professional and well-structured digital presence, targeting engineers, distributors, and industrial clients with detailed product information and design support resources. Technically, the website employs modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and OneTrust for cookie consent, indicating a good level of digital maturity. However, the absence of a valid SSL/TLS certificate and HTTPS implementation significantly undermines the security posture, exposing users to potential risks. Despite this, the domain is mature, well-registered, and consistent with the business claims, enhancing overall trustworthiness. Strategic improvements in security infrastructure are recommended to align with industry best practices and regulatory compliance.

E

European Business Competence License (EBC*L) Arab World

ebcl-arab.com

0

The website ebcl-arab.com represents the European Business Competence License (EBC*L) Arab World, an educational organization focused on providing fundamental business management knowledge and certification programs. The company offers various levels of certification (A, B, C), in-house training, and promotes entrepreneurship, targeting students, organizations, and entrepreneurs primarily in Austria and the Arab World. The site is professionally designed using WordPress with the Avada theme and integrates WooCommerce for e-commerce capabilities. It is hosted on Hostinger and employs modern web technologies including jQuery, Revolution Slider, and WP Rocket for performance optimization. From a security perspective, the site uses HTTPS with a valid certificate but lacks modern TLS protocol support and important security headers like HSTS. The absence of a DMARC record indicates potential email security risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The site includes social media integrations and tracking via Google Analytics, indicating moderate user tracking. No critical security issues or WAF blocking were detected, allowing full content access and analysis. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality, though improvements in security headers, privacy compliance, and email security are recommended to enhance trust and protection. The domain registration is consistent with the business claims, though some DNS misconfigurations (CAA records) are noted. Strategic recommendations include enabling HSTS, adding DMARC, implementing cookie consent, and updating TLS configurations.

B

BILTON LEDON Technology GmbH

biltongroup.com

0

BILTON LEDON Technology GmbH operates under the brand Better Light, specializing in high-quality LED lighting solutions manufactured in Austria. The company leverages its expertise from established LED brands BILTON and LEDON to offer a broad portfolio including LED strips, profiles, power supplies, and lighting management systems. Their market position is solidified by a mature domain and professional online presence targeting architects, industrial clients, and lighting professionals. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user tracking. However, performance is slow and security headers are minimal, indicating room for improvement in technical optimization and security hardening. The SSL certificate is valid but nearing expiration, and no advanced security features like HSTS or OCSP stapling are enabled. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness but would benefit from enhanced security practices and performance optimization.

The website wilsonsons.com.br is currently inaccessible due to a 403 Forbidden error, indicating restricted access or blocking at the server or security layer. This prevents extraction of any meaningful content, metadata, or business information from the site itself. The domain is registered and uses professional DNS and email infrastructure, including Amazon AWS name servers and Google MX servers, suggesting a legitimate and established business presence in Brazil, likely in the transportation sector. The SSL certificate is valid and supports modern TLS protocols, but lacks advanced security features such as HSTS and OCSP stapling. No privacy, cookie, or terms of service policies are detectable on the root page, and no contact information or social media links are present in the accessible content. Overall, the site’s security posture is basic but could be improved with additional headers and DNS security measures. Due to the blocked content, the overall risk assessment is limited and the AI scoring is low, reflecting the inability to fully evaluate the site’s content and compliance.

D

Digital Wallonia

digitalwallonia.be

0

Digital Wallonia is the official digital strategy platform for the Wallonia region in Belgium, managed by the Walloon Government. It serves as a comprehensive resource for digital transformation initiatives, programs, and ecosystem mapping in the region. The platform targets businesses, public authorities, and digital stakeholders, providing detailed publications, event agendas, and strategic information. Technically, the site is built on a modern React Static framework, hosted on Amazon infrastructure, and uses Cloudflare DNS services. Despite a valid SSL certificate and no detected vulnerabilities, the site lacks advanced security headers and HSTS, which are recommended for enhanced security. Performance is notably slow, with a page load time exceeding 26 seconds, indicating room for optimization. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness as a government entity but could improve technical and security aspects to enhance user experience and protection.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

E

Evelyn Partners

tilney.co.uk

0

Evelyn Partners is a well-established UK-based wealth management firm offering a comprehensive range of financial planning and investment management services. The company positions itself as a leader in the UK market with significant assets under management and a broad client base including individuals, families, entrepreneurs, and professional partners. Their website reflects a mature, professional business with strong branding, clear service offerings, and multiple client engagement channels including forms and contact options. Technically, the website leverages modern JavaScript frameworks and is hosted on Microsoft Azure, with good SEO and accessibility practices. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses a critical risk to user trust and data security. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of SSL issues to ensure secure client interactions.

R

Revetas Capital

revetas.com

0

Revetas Capital is a Pan-European Real Estate Fund Manager and Investment Advisor with a focus on capital recovery and value creation in European and American markets. The company operates a professional website built on WordPress, featuring an investor login portal protected by password. The website demonstrates moderate digital maturity with integration of Google Tag Manager and cookie consent mechanisms, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Contact information and social media presence are clearly provided, enhancing business credibility. However, the absence of HTTPS and security headers exposes users to potential risks, and no explicit security or incident response policies are found on the site.

S

SHP Harmanec, a.s.

shpgroup.eu

0

SHP Harmanec, a.s. operates a corporate website focused on paper hygiene products for household and professional use, with a history dating back to 1829. The company positions itself as a trusted regional manufacturer with a consistent brand presence and active engagement through social media and newsletters. The website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, supported by SEO tools like Yoast and analytics via Google Analytics and Tag Manager. However, the absence of HTTPS/SSL is a critical security gap that exposes users to risks and undermines trust. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Contact information is clearly presented, including phone numbers, physical address, and contact forms. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

M

Metzenhof

metzenhof.at

0

Metzenhof is a hospitality business based in Austria offering a combination of hotel accommodation, restaurant services, a golf course, and event hosting. The website presents a professional and well-structured digital presence targeting tourists, golfers, and event attendees. The technical infrastructure is built on WordPress with modern frameworks and optimization tools, though performance could be improved. Security posture is basic with valid HTTPS and SPF records but lacks advanced security headers and DNS protections. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy and professionally managed, with room for security enhancements.

A

Anyline GmbH

anyline.io

0

Anyline GmbH is a mature technology company specializing in AI-powered mobile data capture and OCR scanning solutions, primarily serving industries such as automotive, retail, logistics, enforcement, and energy. The company offers a broad portfolio of products including tire scanning, vehicle identification, barcode scanning, license plate scanning, meter reading, and ID scanning. Their market position is strong with over 10 years of experience and a global customer base including Fortune 500 companies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates translation and consent management tools. However, the site suffers from a lack of HTTPS due to an invalid SSL certificate, resulting in a basic security posture. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and incident response policies are not evident. Overall, the website is content-rich and professionally designed but requires critical security improvements to protect user data and enhance trust.

W

WILD GmbH

wild.at

0

WILD GmbH is a well-established Austrian technology partner specializing in contract development and manufacturing of optomechatronic systems, serving sectors such as medical technology, in-vitro diagnostics, optical metrology, laboratory, laser, and semiconductor technology. The company has a strong market position with decades of experience and multiple subsidiaries, offering comprehensive services including development, production, and supply chain management. Their website reflects a mature digital presence with multilingual support, professional design, and rich content tailored to their target audience of technology and healthcare companies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, hosted on infrastructure associated with a1.net. The site demonstrates good performance, mobile optimization, and accessibility. Security headers and SSL configurations are robust, with HSTS, CSP, and XSS protections in place, although some improvements like enabling HSTS preload and DMARC records are recommended. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Borlabs Cookie consent mechanisms and a comprehensive privacy policy. Contact information is clear and detailed, supporting business credibility. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, indicating a trustworthy and professional online presence.