Security Directory

W

WAFF

waff.com

0

WAFF is a well-established local media company serving Huntsville, Alabama, providing comprehensive news, weather, and sports coverage. The website demonstrates a strong digital presence with rich content, video integration, and community engagement features. The technical infrastructure leverages modern web technologies and Arc Publishing CMS, ensuring good performance and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly impacts the security posture, exposing users to potential risks. Privacy policies and terms of service are well documented, indicating compliance awareness, though cookie consent mechanisms are lacking. Overall, WAFF presents a professional and trustworthy media outlet with room for security enhancements.

T

TCG UNITECH GmbH

unitech.at

0

TCG UNITECH GmbH is a well-established manufacturing company based in Austria, specializing in lightweight metal and plastic components for the automotive industry. The company operates as part of the Gnutti Carlo Group and offers a range of services including die casting, injection molding, and engineering solutions. Their website reflects a professional corporate presence with detailed information about their products, services, and corporate values. Technically, the site is built on WordPress with modern SEO practices and multilingual support, but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS impacts the overall security posture and trustworthiness of the site. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

Binder Grösswang Rechtsanwälte GmbH is a leading Austrian law firm with over 60 years of experience providing comprehensive legal services to national and international clients. The firm holds a strong market position supported by multiple prestigious awards such as 'Law Firm of the Year - Austria' and consistent Tier 1 rankings. Their service offerings span various legal specialties and industries, targeting businesses and individuals seeking expert legal counsel. Technically, the website is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and accessibility. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

I

iodata GmbH

iodata.de

0

iodata GmbH is a medium-sized German technology company specializing in data analytics, business intelligence, and data integration solutions primarily using Qlik and Talend technologies. Established in 2007, the company positions itself as a leading provider and certified Qlik Elite Channel Partner, offering a comprehensive range of services including consulting, managed services, BI training, and advanced data integration platforms. The website reflects a professional and consistent brand image targeting business clients seeking advanced data-driven decision-making tools. Technically, the site leverages modern web technologies and HubSpot CMS, with integrations for cookie consent and analytics. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to risks and undermining trust. Security headers are partially implemented, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is content-rich and credible but requires urgent security improvements to align with best practices.

M

MM Group

mm-packaging.com

0

MM Packaging, a division of MM Group, is a leading global manufacturer of consumer packaging solutions specializing in pharmaceuticals, food, beauty, and consumer goods sectors. The company operates a network of 56 packaging sites worldwide, emphasizing innovation and sustainability in its product offerings. The website reflects a mature digital presence with comprehensive content, multilingual support, and strong branding consistent with an enterprise-level organization. Technically, the site is built on WordPress with modern marketing and analytics integrations, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility and content quality are high, but the security deficiencies pose a risk to user trust and data protection.

T

The United Nations in Vienna

unvienna.org

0

The United Nations in Vienna website serves as the official digital presence of the UN's Vienna-based offices and agencies. It provides comprehensive information about the UN family in Vienna, their initiatives, sustainable development goals, and visitor information. The site targets a broad audience including diplomats, researchers, media, and the general public interested in UN activities. The business model is informational and public service-oriented, reflecting the UN's governmental and non-profit nature. The website is well-branded, consistent, and authoritative in its domain space. Technically, the site uses a combination of AngularJS and React frameworks, served via Apache, with integration of Google Tag Manager for analytics. The site is mobile optimized and has good navigation and content quality. However, performance metrics are unavailable, and accessibility is basic. SEO is moderately implemented with proper meta tags and Open Graph data. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. While some security headers are present, the absence of TLS protocols, cipher suites, DMARC, DNSSEC, and CAA records indicates a weak security posture. No incident response or vulnerability disclosure information is publicly available. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the website is trustworthy and credible given its UN affiliation and mature domain. However, the lack of HTTPS and modern security practices significantly lowers its security score and poses risks to users. Strategic improvements in SSL deployment, email security, and privacy compliance are recommended to enhance trust and security.

S

Semperit AG Holding

semperitgroup.com

0

Semperit AG Holding is a well-established global manufacturer specializing in industrial polymer products and solutions, with a history dating back to 1824. The company operates multiple business divisions including hoses, profiles, form, conveyor belts, and Rico products, targeting industrial clients and investors. The website reflects a mature and professional digital presence, leveraging TYPO3 CMS and modern web design principles to provide a rich user experience. However, the absence of HTTPS and valid SSL certificates represents a significant security vulnerability that undermines user trust and data protection. While privacy and cookie policies are comprehensive and GDPR compliant, the lack of explicit security and incident response information suggests room for improvement in transparency and preparedness. Overall, the domain registration and WHOIS data confirm the legitimacy and maturity of the business, supporting a high trustworthiness rating despite technical security shortcomings.

Flughafen Wien AG operates Vienna International Airport, providing a wide range of passenger services including flight information, parking, lounges, VIP services, and retail. The website targets passengers, business partners, and visitors, positioning itself as a leading airport in Austria with comprehensive service offerings. The digital infrastructure uses modern frameworks like Bootstrap and integrates privacy-conscious analytics via Matomo. However, the absence of a valid SSL certificate and HTTPS significantly undermines the security posture. Security headers are partially implemented, but critical improvements are needed to secure user data and communications. The domain is mature and legitimately registered, consistent with the airport's long-standing presence. Overall, the website is professional and content-rich but requires urgent security enhancements.

S

Skyliner Automatisering B.V.

skyliner.nl

0

Skyliner Automatisering B.V. is a mature Dutch ICT service provider established in 1999, offering a broad range of ICT solutions including system management, cloud services, VoIP, software development, and security services. The company targets businesses and organizations in the Netherlands seeking reliable and comprehensive ICT support. Their market position is supported by long domain tenure, recognized certifications, and positive customer testimonials. Technically, the website is built on WordPress with modern plugins and scripts, but suffers from a lack of proper SSL/TLS configuration, impacting security posture. The site is well structured with good SEO and mobile optimization, though performance metrics indicate slow loading. Security-wise, the absence of HTTPS and security headers are critical issues, though no active vulnerabilities or WAF blocking were detected. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website reflects a credible and professional ICT business but requires urgent improvements in SSL security to enhance trust and compliance.

R

Reppublika Research

mindtake.com

0

Reppublika Research is a well-established full-service market research institute specializing in data-driven media and consumer research across Germany, Austria, and the CEE region. With over two decades of experience, the company offers comprehensive quantitative, qualitative, and behavioral research services, supported by proprietary panels and advanced technical capabilities. Their client portfolio includes major corporations such as Google, IKEA, and Allianz, underscoring their strong market position and credibility. Technically, the website is built on the Wix platform, leveraging a modern tech stack including React 18 and various Wix apps, ensuring a professional and content-rich online presence. However, the security posture is currently limited by the absence of a valid SSL certificate and proper HTTPS configuration, which poses a significant risk and impacts user trust. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the company demonstrates strong business credibility and digital maturity but should prioritize improving its security infrastructure to enhance trust and protect user data.

The website prinzhorn-holding.com is currently inaccessible due to a configuration issue where plain HTTP requests are sent to an SSL-enabled server port, resulting in a 400 Bad Request error. This prevents access to any meaningful content, including business information, policies, or contact details. The technical infrastructure is based on Apache running on Amazon Linux with OpenSSL, but no valid SSL certificate is installed, and no modern TLS protocols are enabled. DNS records are properly configured with valid MX and NS entries, and SPF records indicate legitimate email sending sources. However, the lack of HTTPS and security headers severely impacts the security posture. No privacy or cookie policies are present, and no contact or business information is visible on the landing page, limiting trust and credibility. Overall, the site is not currently usable for visitors and requires urgent remediation of SSL and content accessibility issues.

I

International Jet Management GmbH

ijm.at

0

International Jet Management GmbH is a specialized aviation management company based in Austria, providing aircraft management, charter services, and fleet operations primarily targeting business aviation clients. The company holds recognized certifications such as IS-BAO and has approvals from aviation authorities, positioning it as a credible player in the transportation sector. The website reflects a professional business presence with clear service offerings and contact information. Technically, the website is built on WordPress with common libraries like jQuery and Modernizr, and uses Yoast SEO for optimization. However, the site lacks HTTPS, which is a significant security concern. The absence of SSL/TLS encryption exposes users to potential data interception risks. Security headers are minimal, and no advanced security policies or incident response contacts are published. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security posture to protect user data and enhance trust.

D

Diesel

diesel.com

0

Diesel operates a global e-commerce platform specializing in fashion apparel and accessories, providing localized shopping experiences through country-specific domains. The website analyzed is a country selector landing page that directs users to various regional sites. The technical infrastructure leverages Salesforce Commerce Cloud (Demandware) and is hosted behind Cloudflare, with usage of Adobe Fonts and Tealium for analytics and marketing. However, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security deficiency. Security headers are partially implemented, but the absence of HTTPS significantly undermines the security posture. Privacy and cookie policies are not present on this landing page, and no contact information is provided, limiting transparency and compliance with privacy regulations. Overall, the site demonstrates a basic level of technical and content maturity but requires urgent improvements in security and privacy compliance to meet modern standards.

P

Post & Co

post-co.com

0

Post & Co is an independent provider specializing in marine liability and logistics insurance, serving a broad range of clients in the maritime and logistics sectors including ship owners, charterers, terminal and transport operators, and port authorities. The company emphasizes quality service, innovation, and market focus, with a presence in Rotterdam, Antwerp, and Frankfurt. Their website reflects a professional business with multilingual support and clear contact channels. Technically, the site is built on WordPress using common plugins and frameworks but lacks a valid SSL certificate, which significantly impacts security posture. The site uses Google Analytics and has cookie consent mechanisms in place, indicating some privacy compliance. However, the absence of HTTPS and modern TLS protocols presents a critical security risk. Overall, the business appears legitimate and established, but the website requires urgent security improvements to protect user data and enhance trust.

M

MARTIN NEUHAUS

martinneuhaus.de

0

The website martinneuhaus.de serves as a personal portfolio and professional presentation platform for Martin Neuhaus, an actor based in Schwerin, Germany. The site primarily targets German-speaking audiences interested in theater and acting, offering access to showreels and professional contact via email and social media. The business model is focused on personal branding and professional networking within the media industry. The website is small scale and individual in nature, with consistent branding and basic content quality. Technically, the site is built on WordPress 6.8.1 using the Mesmerize Pro theme and several common plugins such as Contact Form 7 and CoBlocks. It is hosted likely on GoDaddy infrastructure, inferred from DNS and mail server data. The site suffers from slow performance with a load time exceeding 20 seconds, but it is mobile optimized and has good SEO metadata implemented. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. No security headers or advanced TLS protocols are enabled, and no incident response or vulnerability disclosure policies are found. Privacy compliance is minimal with no privacy or cookie policies detected. The domain registration is consistent and legitimate, with no privacy protection or suspicious red flags, but domain protection locks are not enabled. Overall, the site presents moderate business credibility but poor security and privacy posture. Strategic improvements should focus on enabling HTTPS, implementing security headers, adding privacy and cookie policies, and improving site performance to enhance trust and compliance.

WEB Windenergie AG is a large Austrian renewable energy company specializing in wind, photovoltaic, and hydropower plants. The company emphasizes citizen participation and operates across eight countries on two continents. Their business model focuses on green energy production and investment opportunities, positioning them as a leading player in Austria's renewable energy sector. The website is professionally designed with comprehensive content targeting private customers, business clients, municipalities, and investors. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and responsive design, but lacks HTTPS, which is a critical security flaw. Security headers are partially implemented, but the absence of SSL/TLS severely impacts the security posture. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Contact information and trust signals such as certifications and social media presence enhance business credibility. Overall, the site is functional and professional but urgently requires HTTPS implementation to improve security and trust.

Digital Realty Trust operates a global platform of data centers and colocation services under the PlatformDIGITAL® brand, serving a broad range of enterprise, cloud, and network customers. The company is a market leader with a large global footprint, extensive certifications, and a strong partner ecosystem including AWS, Google Cloud, IBM, Oracle, NVIDIA, HPE, and Microsoft Azure. The website content is rich, professionally designed, and well-structured, targeting enterprises needing secure, scalable, and interconnected IT infrastructure. Technically, the site uses modern frameworks like Next.js and React, with integrations for marketing and analytics tools such as Marketo and VWO. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that impacts trust and security. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site demonstrates high business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

D

DS Smith

dssmith.com

0

DS Smith is a leading international manufacturer specializing in sustainable packaging solutions, paper products, and recycling services. The company positions itself as a global leader in sustainability within the packaging industry, targeting businesses seeking eco-friendly and innovative packaging and recycling options. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistency. Technically, the site uses modern web technologies including React, Google Tag Manager, Google Analytics, and Microsoft Application Insights, hosted behind Cloudflare for performance and security. However, the SSL certificate is currently invalid or missing, which undermines the security posture. The site implements strong security headers and content security policies but has a notable subdomain takeover vulnerability on shop.dssmith.com. Privacy and cookie policies are present with consent mechanisms, indicating good GDPR compliance. Contact information is primarily via forms and physical address, with no explicit emails or phone numbers on the homepage. Social media presence is robust and consistent with corporate branding.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

T

Tranter Inc.

tranter.com

0

Tranter Inc. is a global manufacturer specializing in advanced gasketed and welded plate heat exchangers, serving diverse industrial sectors such as energy, marine, HVAC, and manufacturing. The company emphasizes innovation, quality, and sustainability, supported by a global service network and a strong digital presence powered by HubSpot CMS and marketing tools. Their website offers comprehensive product information, customer stories, and resource materials tailored to industrial clients worldwide. Technically, the website is built on a modern CMS platform with integration of analytics and marketing technologies like Google Tag Manager and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and clear navigation. However, the security posture is critically weak due to the absence of a valid SSL certificate and lack of HTTPS support, exposing visitors to potential risks. While security headers are partially implemented, the lack of TLS protocols and cipher suites significantly undermines the site's security. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a professional and credible business front but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and protect user data. Strategic improvements in security and incident response readiness are recommended to enhance trust and compliance.

The website cofelyaxima-gdfsuez.com currently hosts a minimal placeholder page indicating it is parked, with no active business content or contact information. The domain is registered and configured with basic DNS records including mail forwarding, but lacks any SSL certificate or HTTPS support, resulting in an insecure connection. There are no privacy, cookie, or terms of service policies present, and no evidence of business operations or services offered. The technical infrastructure is minimal, with slow page load and no modern web technologies detected. Security posture is weak due to lack of HTTPS and security headers, and no incident response or data protection information is available. Overall, the site presents a low trust profile and appears inactive or unused for legitimate business purposes.

B

BWT Holding GmbH

christaqua.com

0

BWT Holding GmbH operates a professional and content-rich website focused on providing ultra-pure water solutions for the pharmaceutical, biotech, and cosmetics industries. The company positions itself as a market leader with a comprehensive product and service portfolio including purified water generation, water for injection, pure steam, and automation solutions. The website demonstrates strong branding consistency, excellent content quality, and clear navigation targeting a B2B audience in healthcare. Technically, the site uses Microsoft IIS, JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, with Sitecore CMS inferred. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Contact information is primarily via a contact form, with no explicit emails or phone numbers found. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and ensure secure communications.

H

HumanWare

humanware.com

0

HumanWare is a globally recognized leader in assistive technology for people who are blind or have low vision, offering a wide range of products including electronic magnifiers, braille devices, and software solutions. The company operates under the parent company EssilorLuxottica and serves a diverse audience including students, workers, veterans, and eye care professionals. Their website is professionally designed with rich content and multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the site's security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the business credibility and content quality are high, but urgent improvements in SSL/TLS security are recommended.

D

DaoPay GmbH

daopay.com

0

DaoPay GmbH is a licensed Austrian payment service provider offering a broad range of secure and simple payment solutions for online merchants globally. The company supports over 80 payment methods including major credit cards, PayPal, SEPA, and direct carrier billing, positioning itself as a comprehensive payment gateway and merchant account provider. Their target audience includes online businesses seeking to expand payment options and increase customer convenience. The website is professionally designed with clear navigation and relevant content, supporting a medium-sized enterprise profile in the finance and technology sectors. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Visual Composer, indicating a mature digital infrastructure. However, performance is slow and accessibility is basic. The site is mobile optimized and SEO is well implemented. Security posture is weak due to the absence of a valid SSL certificate and outdated TLS protocols, which poses significant risks for a payment service provider. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Social media presence and contact information are comprehensive, enhancing business credibility. Strategic recommendations include immediate remediation of SSL/TLS issues, enabling modern security protocols, and enhancing DNS security configurations to improve trust and compliance.

S

St. Anna Kinderspital

stanna.at

0

St. Anna Kinderspital is a well-established pediatric hospital located in Vienna, Austria, providing comprehensive medical care for children and adolescents. The website reflects a strong commitment to patient care and family support, offering detailed information about medical departments, services, and patient guidance. The institution operates as a non-profit entity supported by donations, with clear calls to action for donations and career opportunities. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie management, but lacks HTTPS which is a critical security shortfall. Security headers are partially implemented, but the absence of SSL/TLS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but urgently needs to implement HTTPS to protect user data and improve security.

C

CyberTrap Software GmbH

cybertrap.com

0

CyberTrap Software GmbH is a cybersecurity company specializing in deception technology to proactively detect, deceive, trap, and learn from cyber attackers. Positioned as a sophisticated provider with global accreditations, CyberTrap targets organizations seeking advanced threat detection solutions. The website is built on HubSpot CMS with integrated marketing and analytics tools, demonstrating a moderate level of digital maturity. However, the absence of HTTPS/SSL is a critical security vulnerability that undermines the security posture. While privacy policies and cookie consent mechanisms are in place and GDPR compliant, the lack of secure transport protocols poses significant risk. Overall, CyberTrap presents a professional and trustworthy business front but must urgently address SSL implementation to improve security and trust.

U

Usecon gmbh

usecon.com

0

Usecon gmbh is an established technology and consulting company based in Vienna, Austria, founded in 2001. The company specializes in digital transformation, development, and AI solutions with a strong focus on human-centered design. Their market position is solid with over 24 years of experience and more than 1000 projects completed, targeting businesses seeking digital innovation and consulting services. The website content is well-structured and professional, supporting their business credibility. Technically, the website uses modern frontend technologies such as JavaScript and Tailwind CSS, but suffers from slow load times and lacks HTTPS support due to an invalid or missing SSL certificate. This significantly impacts the security posture and user trust. No CMS or backend platform is explicitly detected. Mobile optimization is good, but accessibility and SEO optimizations are basic. From a security perspective, the absence of HTTPS and modern TLS protocols is a critical vulnerability. No security headers or incident response policies are present, and no vulnerability disclosure mechanisms are found. Privacy and cookie policies exist and appear GDPR compliant, supporting privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements, especially implementing a valid SSL certificate and enabling HTTPS. Performance optimization and enhanced security headers would further improve the security posture and user trust.

C

Coop Himmelb(l)au

coop-himmelblau.at

0

Coop Himmelb(l)au is a globally recognized architecture firm headquartered in Vienna, Austria, with additional offices in Tirana and Dubai. The firm specializes in innovative architectural design and urban planning, serving a diverse international clientele. Their portfolio includes a wide range of projects such as cultural institutions, residential buildings, office complexes, and mixed-use developments, highlighting their expertise and market presence in the real estate and architectural sectors. The website reflects a professional and comprehensive presentation of their work, targeting clients and stakeholders interested in cutting-edge architectural solutions. Technically, the website is built on a modern stack including Apache server, JavaScript frameworks, and analytics tools like Google Analytics and Matomo. It uses Kirby CMS inferred from URL patterns and asset paths, and is hosted on weber.cloud. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. However, performance metrics are moderate, indicating room for improvement in loading speed. From a security perspective, the site lacks HTTPS, which is a critical vulnerability. While some security headers are present, the absence of SSL/TLS encryption severely impacts the overall security posture. No incident response or security policy documents are found, and no vulnerability disclosure or security.txt files are present. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanisms in place, including GDPR compliance indicators. Overall, the website is professionally designed and content-rich, supporting the firm's strong market position. However, the lack of HTTPS is a major security risk that must be addressed immediately to protect user data and maintain trust. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and publishing security and incident response policies to improve the security maturity and compliance posture.

The website ag-isw.at is currently a parked domain page primarily aimed at selling the domain name. It lacks any active business content, contact information, or service offerings. The site is heavily monetized through advertising scripts, mainly from Google Adsense and related ad networks. Technically, the site suffers from a lack of HTTPS support, with no valid SSL certificate installed, exposing visitors to security risks. Performance is poor with slow load times and minimal optimization. Privacy compliance is minimal, with only a basic privacy policy accessible via a popup link, and no cookie consent mechanisms present. Overall, the site does not present itself as a legitimate business or service provider at this time.

Salzburg AG operates a comprehensive utility and telecommunications service platform primarily serving the Salzburg region in Austria. The company offers high-speed internet services under the CableLink brand, including fiber and wireless options, alongside TV and telephony services. It also provides energy supply and transportation services, positioning itself as a regional market leader with a large operational footprint. The website reflects a mature digital presence with extensive content, clear navigation, and multiple customer engagement channels. Technically, the site uses modern web technologies and analytics tools, though it currently lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but should address SSL issues to enhance security and user trust.

The website for uea.ac.uk is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This prevents any meaningful extraction of business, contact, or policy information from the site. The domain is registered and DNS records indicate a legitimate educational institution in the United Kingdom, with proper email security configurations such as SPF and DMARC. However, the lack of a valid SSL certificate and HTTPS support severely impacts the security posture and user trust. The technical infrastructure appears minimal with slow performance and no visible modern web technologies or analytics. Overall, the site is currently blocked or restricted, limiting any comprehensive analysis of its content or business operations.

S

Shell Österreich

shell.at

0

Shell Österreich operates a comprehensive website targeting private and business customers in Austria, offering fuel products, electric vehicle charging, car care, and loyalty programs. The website is professionally designed with excellent content quality, clear navigation, and strong brand consistency. The technical infrastructure is based on Adobe Experience Manager with modern web technologies, but suffers from slow load times and lacks a valid SSL/TLS certificate, resulting in no HTTPS support. This is a critical security vulnerability that significantly impacts the site's security posture. Privacy and cookie policies are well documented and GDPR compliant, but no explicit security or incident response policies are found. Overall, the website is trustworthy and credible but requires urgent security improvements.

M

mtms Solutions

eventdata-services.com

0

mtms Solutions is an Austrian technology company specializing in SaaS software solutions for the event management industry. Their offerings include ticketing, accreditation, messaging services, guest management, live streaming, and business intelligence solutions. The company targets event organizers and businesses requiring integrated event and messaging platforms, positioning itself as a flexible and innovative provider in the event technology sector. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and featuring customer testimonials and certifications such as the Sport Leading Company seal. Technically, the site uses a variety of modern web technologies including Apache, Bootstrap, jQuery, and Matomo analytics, and appears to be built on the Redaxo CMS. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. Security headers are minimal, and no incident response or security policy information is provided. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site demonstrates good business credibility and content quality but requires urgent improvements in security posture to protect user data and enhance trust.

The website at adbsafegate.com is currently inaccessible due to a Cloudflare anti-bot challenge page that blocks access to actual content. This prevents a full assessment of the business, its services, and compliance posture. The domain is registered and DNS hosted on Cloudflare, with no privacy protection enabled. The SSL/TLS configuration is invalid or missing, resulting in no HTTPS support. Security headers are present but cannot compensate for the lack of a valid certificate. No privacy, cookie, or terms of service policies are detectable, nor is any contact information or business data available on the challenge page. Overall, the site is in a blocked state, limiting the ability to analyze content quality, technical implementation, or business credibility.

The BBRZ GRUPPE is a well-established Austrian non-profit organization specializing in education, employment, and vocational integration services. With origins dating back to 1960 and 1975, it holds a significant market position in Austria's social and educational sectors. The website reflects a professional and comprehensive presentation of their services, partnerships, and mission, targeting individuals requiring vocational rehabilitation and integration as well as institutional partners. Technically, the site is built on TYPO3 CMS with modern frontend technologies, offering good mobile optimization and accessibility. However, the absence of HTTPS and critical security headers severely undermines the security posture. Privacy compliance is partially met with a privacy policy present but lacks cookie consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

Kathrein USA operates as a technology company specializing in broadcast, cellular, and IoT antennas, providing connectivity solutions primarily targeting businesses in telecommunications and related sectors. The website presents itself as a medium for sharing industry-related content and company information but lacks comprehensive contact and compliance documentation. Technically, the site is built on WordPress with common web technologies such as jQuery and Bootstrap, hosted behind Cloudflare. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture and user trust. Security headers are partially implemented, but critical modern TLS protocols and encryption are missing. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR indicators. The site uses Clicky Analytics for user tracking without clear privacy disclosures. Overall, the website demonstrates moderate business credibility but requires significant improvements in security and privacy to meet industry standards.

4

42virtual Business Services GmbH

42virtual.com

0

42virtual Business Services GmbH is a small German IT consulting and project management firm specializing in pragmatic and tailored solutions for public sector, banking, insurance, and service industries. Their website presents a professional image with clear business focus and German language content targeting relevant sectors. Technically, the site is built on Webflow CMS and uses jQuery, but suffers from slow load times and lacks modern security configurations. Critically, the absence of a valid SSL certificate and HTTPS support exposes the site to security risks and undermines user trust. Privacy compliance is minimal, with no cookie consent or GDPR indicators detected. Overall, the business appears legitimate and consistent with WHOIS data, but the security posture requires urgent improvement to protect visitors and comply with regulations.

S

SmartStream Technologies ltd.

smartstream-stp.com

0

SmartStream Technologies ltd. is a well-established leader in financial data solutions, serving banks, capital markets, buy-side firms, and corporations. Their offerings focus on operational control, cost reduction, risk mitigation, regulatory compliance, and new revenue streams. The company maintains a strong market position with a comprehensive portfolio of services including data transformation, regulatory alignment, managed services, and innovation labs. The website reflects a professional and consistent brand image targeting financial institutions and related sectors. Technically, the website is built on WordPress using Elementor and Slider Revolution, hosted behind Cloudflare for security and performance. It integrates multiple marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Pardot, LinkedIn Insight Tag, and various media embedding services. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, despite Cloudflare protection and Wordfence plugin usage. Security headers are present but could be enhanced with HSTS and OCSP stapling. Privacy compliance is strong with clear GDPR-aligned policies, cookie consent mechanisms, and a data protection officer contact. Overall, the website presents a credible and professional front for SmartStream Technologies but requires urgent SSL/TLS remediation to improve security and trustworthiness. Strategic recommendations include SSL installation, enhanced security headers, and continuous monitoring of third-party integrations.

Q

Quantum Momentum Services

quantummomentum.net

0

Quantum Momentum Services is a small Australian-based business specializing in personal mentoring, coaching, spiritual healing, and business consulting services. The company offers individual mentoring, virtual assistance, and business consulting, targeting individuals and businesses seeking personal development and holistic support. The website is built on the GoDaddy Website Builder platform and integrates PayPal for payment processing. While the site presents relevant and well-structured content with clear contact information and social media presence, it lacks a valid SSL certificate, which significantly impacts its security posture. Basic privacy and terms of service documents are available, but cookie consent mechanisms and security policies are minimal or absent. Overall, the business appears legitimate and consistent with its domain registration data, but improvements in security and privacy compliance are recommended.

Leapwise is a medium-sized software development company based in Croatia, specializing in custom software solutions, system integration, and dedicated development teams primarily targeting enterprise clients in technology, telecommunications, cybersecurity, and IoT sectors. The company positions itself as a trusted partner delivering scalable, modular, and maintainable software with a strong emphasis on quality and long-term client success. The website reflects a high level of professionalism with rich content, client testimonials, and industry certifications, supporting its market credibility. Technically, the website is built on WordPress with modern plugins for SEO, caching, and analytics. However, the absence of a valid SSL/TLS certificate and HTTPS support is a significant security shortfall, exposing users to potential risks and undermining trust. Performance metrics are not available, but the use of caching and lazy loading suggests some optimization efforts. The site is mobile-optimized and accessible with good SEO practices. Security posture is weak due to lack of HTTPS and minimal security headers. No explicit security or incident response policies are published, which could be a concern for enterprise clients. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Contact information is available primarily via forms and a physical address, but no direct company emails or phone numbers are listed. Overall, Leapwise demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS implementation to improve security and trustworthiness. Strategic recommendations include implementing HTTPS, enhancing security headers, and publishing security policies to align with enterprise client expectations.

RHI Magnesita is a global leader in the refractory industry, providing high-grade refractory products, systems, and services primarily for steel, cement, glass, and non-ferrous metals industries. The company emphasizes sustainability and innovation, targeting industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, structured data, and multi-language support. Technically, the site is built on WordPress with modern plugins and libraries, but suffers from critical security shortcomings due to an invalid SSL certificate and lack of HTTPS enforcement. Security headers are present but insufficient without proper TLS. Privacy compliance is well addressed with Cookiebot consent management and a detailed privacy policy. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security posture and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

A

Alpen Privatbank AG

walserprivatbank.com

0

Alpen Privatbank AG is a well-established private banking and wealth management institution operating primarily in the German-speaking regions of Europe, with a strong presence in Austria and Germany. The company offers personalized asset management and investment advisory services, targeting private clients seeking tailored financial solutions. The website reflects a professional and consistent brand image, supported by multiple physical office locations and clear contact information. Technically, the site is built on TYPO3 CMS and hosted by maxcluster.net, but suffers from slow load times and lacks a valid SSL certificate, which significantly impacts security and user trust. The security posture is weak due to the absence of HTTPS and security headers, although privacy compliance is supported by a cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site demonstrates moderate business credibility but requires urgent security improvements to protect user data and enhance trust.

Y

yandree GmbH

yandree.com

0

yandree GmbH is a small Austrian IT services company specializing in IT documentation and data migration with over 20 years of experience. The company serves clients primarily in the energy, insurance, hosting, and IT sectors worldwide. Their website is built on Joomla CMS with a modern UI framework and includes comprehensive business and legal information. However, the site lacks HTTPS encryption, which is a critical security shortfall. Cookie consent mechanisms are implemented with a privacy-first approach, denying analytics and advertising cookies by default. The company demonstrates moderate digital maturity but should prioritize securing their website with SSL/TLS and enhancing security policies. Overall, yandree GmbH presents a professional and trustworthy business presence with room for technical and security improvements.

dsm-firmenich Animal Nutrition & Health is a global business focused on providing sustainable animal nutrition and health solutions. Their offerings include essential products, performance solutions branded as Biomin®, and precision services leveraging data analytics. The company targets professionals in animal nutrition, farming, and veterinary sectors, emphasizing sustainability and innovation. Technically, the website is built on Adobe Experience Manager, uses Akamai CDN, and integrates marketing tools like Adobe DTM and Marketo. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are well implemented, indicating good compliance practices. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and trust.

X

Xerox Corporation

xerox.com

0

Xerox Corporation is a globally recognized enterprise specializing in workplace solutions, document management, and digital printing technologies. The company serves a broad range of industries including education, legal, financial services, healthcare, government, and retail, offering products such as printers, multifunction devices, digital presses, software, and managed print services. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding, targeting business customers and partners worldwide. Technically, the website employs modern JavaScript frameworks and analytics tools such as New Relic, Google Tag Manager, and Adobe Launch, hosted likely on Microsoft Azure infrastructure. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security gap is the absence of HTTPS/SSL on the main domain, exposing users to potential risks and undermining trust. Security posture is weak due to lack of SSL/TLS and missing security headers like HSTS, though some content security policies are in place. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by extensive corporate information, partner programs, and trust signals. Overall, the site is professionally designed and content-rich but requires urgent security improvements to enable HTTPS and strengthen SSL configurations to protect users and maintain enterprise trust.

AUSTRIACARD HOLDINGS AG is a well-established technology company specializing in secure data solutions, including payment services, eGovernment authentication, document lifecycle management, and AI-driven data intelligence. With over 130 years of experience and a global footprint spanning Europe, the USA, and the Middle East, the company serves diverse sectors such as banking, government, energy, retail, healthcare, and transportation. It is publicly traded on the Athens and Vienna Stock Exchanges, reflecting a mature market position and transparent corporate governance. The website provides comprehensive business and investor information, demonstrating a strong commitment to sustainability and innovation. Technically, the site is built on WordPress with modern tools like Elementor and Astra theme, ensuring good design quality and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines trust and exposes users to risks. Security headers are well configured but cannot compensate for the lack of encryption. Privacy policies and cookie consent mechanisms are present and GDPR compliant, supporting responsible data handling. Overall, the company presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to meet modern security standards and protect its users.

T

Taideyliopisto

uniarts.fi

0

Taideyliopisto is a leading Finnish arts university formed in 2013 by merging three major arts academies. It offers top-level education in music, visual arts, performing arts, and writing, with a strong emphasis on research and continuous learning. The university holds a notable global position in music education, reflected in its QS ranking. The website is professionally designed, multilingual, and rich in content, targeting students, researchers, and the arts community. Technically, the site runs on WordPress hosted on DigitalOcean with modern JavaScript libraries and analytics tools, though performance metrics are not optimal. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, exposing users to potential risks. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is credible and trustworthy but requires urgent security improvements.

P

PricewaterhouseCoopers

pwc.at

0

PricewaterhouseCoopers Austria (PwC.at) is a leading professional services firm offering audit, tax, consulting, and advisory services. The website presents a comprehensive and professional digital presence targeting businesses and professionals in Austria, emphasizing expertise in finance, sustainability, cybersecurity, and technology consulting. The site uses modern web technologies including Adobe Experience Manager, AngularJS, and Akamai CDN, ensuring a good user experience and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. The site includes comprehensive privacy and cookie policies with GDPR-compliant consent mechanisms, but lacks explicit security policies or incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.