Skip to main content

Is inducs.com a Scam? Security Check Results - INDUCS AG Reviews

inducs.com favicon

Is inducs.com Safe? Security Analysis for INDUCS AG

Check if inducs.com is a scam or legitimate. Free security scan and reviews.

ManufacturingSwitzerlandmedium
jQueryBootstrapFontAwesomeMicrosoft Application Insights
Analyzed 10/3/2025Completed 5:32:21 PM
58
Security Score
MEDIUM RISK

AI Summary

INDUCS AG operates as a manufacturer and provider of induction cooking appliances targeted at professional kitchens and the commercial foodservice industry. The company is part of the Welbilt group, a recognized brand in commercial kitchen equipment, which strengthens its market position. The website presents a professional image with clear product offerings, service and support information, and downloadable resources, catering to industry professionals and businesses requiring reliable induction cooking solutions. The target audience includes commercial kitchen operators and foodservice providers seeking efficient and powerful cooking appliances. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, and Microsoft Application Insights for telemetry and analytics. The site is well-structured with good mobile optimization and accessibility features, indicating a mature digital infrastructure. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the website uses HTTPS with excellent SSL configuration and includes a cookie consent mechanism, demonstrating awareness of privacy compliance. However, there is a lack of explicit security policies, incident response contacts, and security headers, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that slightly impacts trustworthiness but does not negate the professional presentation and association with Welbilt. Overall, the website is professionally maintained, secure at a basic level, and compliant with privacy regulations. The main risk lies in the missing WHOIS data which should be monitored. Strategic recommendations include publishing detailed security policies, adding incident response information, and enhancing security headers to improve the security posture and trust further.

Detected Technologies

jQueryBootstrapFontAwesomeMicrosoft Application Insights

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

INDUCS AG benefits from its affiliation with Welbilt, positioning it strongly in the commercial kitchen appliance market. The company focuses on manufacturing induction cooking appliances and providing related services such as training and customer support. Its business model revolves around product sales complemented by after-sales service and training, targeting professional kitchens globally. The website indicates a medium-sized enterprise with a clear brand identity and consistent messaging. The presence of multilingual options and regional selectors suggests a global or multi-regional market approach. The company leverages digital tools for customer engagement and product information dissemination but lacks visible certifications or security accreditations on the site. The partnership ecosystem includes Welbilt as the parent company, enhancing credibility and market reach.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (3)

i*****@inducs.com
s*****@inducs.com
i*****@inducs.com

Phone Numbers (1)

+4171560****

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate security maturity level with HTTPS enforced and cookie consent implemented, aligning with GDPR requirements. Use of Microsoft Application Insights indicates telemetry monitoring but no evidence of advanced security frameworks or certifications. The absence of security headers such as Content-Security-Policy or X-Frame-Options reduces defense-in-depth. No incident response or vulnerability disclosure information is provided, which limits transparency and preparedness perception. No exposed sensitive data or vulnerable libraries were detected in the HTML content. Overall, the security posture is adequate for a commercial website but could be enhanced by adopting best practices in security policy publication, incident response readiness, and header configurations.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a comprehensive security policy page detailing security practices and compliance.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

INDUCS AG

Description:

Welbilt brands: Cleveland, Convotherm, Delfield, Frymaster, Garland, INDUCS, Kolpak, Koolaire, Lincoln, Manitowoc Ice, Merrychef, Multiplex, Servend and Welbilt. Offers various kinds of induction cooking appliances for professional kitchens.

Key Services:
Induction cooking appliancesService and supportTrainingDownloads of product documentation
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQueryBootstrapFontAwesomeMicrosoft Application Insights
Frameworks:
Bootstrap
Performance:

moderate

Mobile:

good

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enabled
  • Cookie consent mechanism
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
Microsoft Application Insights
Tracking Level:minimal
Privacy Compliance:good

Advertising & Marketing

Tracking Pixels:
Microsoft Application Insights
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF challenge.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

30/100
Score

Weak Strict-Transport-Security configuration

LOW

Current value: "max-age=2592000"

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

73/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:welbilt.com -all
DNS Lookups:1/10
Policy:-all
DKIM Selectors Found
Selector:selector1(1416-bit rsa)
DMARC Details
Policy:reject
Subdomain Policy:reject
Aggregate Reports:a4d3998326ff908@rep.dmarcanalyzer.com
Forensic Reports:a4d3998326ff908@for.dmarcanalyzer.com

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

80/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

Domain Registration Details

Domain Age
25 years(mature)
Expiry Risk
low(197 days)
Protection Level
basicDNSSEC OFF

DNS Records

A Records:40.86.99.202, 13.89.172.12
Name Servers:
dns1.cscdns.net
dns2.cscdns.net
MX Records:
0: mxa-002db801.gslb.pphosted.com
0: mxb-002db801.gslb.pphosted.com
SOA:Serial: 2017063041, TTL: 14400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:50ms

SPF Analysis

SPF Record:
v=spf1 include:welbilt.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using a modern tech stack including Bootstrap for responsive design, jQuery for client-side scripting, and FontAwesome for icons. It integrates Microsoft Application Insights for telemetry and performance monitoring. The site is mobile optimized with good accessibility features such as skip links and ARIA attributes. SEO is supported by meta tags and JSON-LD structured data for breadcrumbs. The site does not appear to use a common CMS, suggesting a custom or proprietary platform. Performance is moderate with preloading of fonts and scripts, but no explicit CDN or hosting provider information was found. The technical implementation is solid but could benefit from enhanced security headers and more visible technical metadata about hosting and CMS for transparency.
Analyze Another Website