Skip to main content

Is sparkasse.at a Scam? Security Check Results - Erste Bank und Sparkassen Reviews

sparkasse.at favicon

Is sparkasse.at Safe? Security Analysis for Erste Bank und Sparkassen

Check if sparkasse.at is a scam or legitimate. Free security scan and reviews.

FinanceAustrialarge
JavaScript ES ModulesCSS with EmotionGoogle Tag ManagerAdobe AppMeasurement
Analyzed 8/1/2025Completed 5:16:53 PM
52
Security Score
MEDIUM RISK

AI Summary

Erste Bank und Sparkassen operates a comprehensive and modern banking platform targeting private customers in Austria. The website offers a wide range of financial services including checking accounts, internet banking, savings, credit, investment, and retirement planning. The company is positioned as a leading financial institution in Austria with a strong brand presence and consistent messaging. Technically, the website employs modern web technologies including a proprietary CMS framework (GEM), JavaScript ES modules, and integrates analytics tools such as Adobe Analytics and Google Tag Manager. The site is mobile-optimized and accessible, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not publicly visible. Privacy compliance is partial due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

Detected Technologies

JavaScript ES ModulesCSS with EmotionGoogle Tag ManagerAdobe AppMeasurement

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The Erste Bank und Sparkassen website serves the Austrian retail banking sector, focusing on private customers. Its business model revolves around traditional banking products and digital banking services. The company leverages a proprietary CMS and CDN infrastructure to deliver content efficiently. The presence of structured data and Facebook domain verification indicates a mature digital marketing strategy. While no direct contact information or privacy policies were found in the snippet, the brand's reputation and domain registration data support its credibility. The website integrates advanced analytics and tracking, suggesting a data-driven approach to customer engagement. No suspicious domains or partners were identified, indicating a controlled and secure partner ecosystem.

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a solid security foundation with HTTPS and use of security best practices. No exposed sensitive data or vulnerable libraries were detected in the provided content. However, the absence of visible security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and preparedness. The use of Adobe AppMeasurement and Google Tag Manager indicates tracking capabilities that should be managed carefully to ensure privacy compliance. Overall, the security posture is good but could benefit from publishing explicit security and privacy documentation.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a clear and accessible privacy policy and cookie policy with consent mechanisms to improve GDPR compliance.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Erste Bank und Sparkassen

Description:

Das modernste Banking Österreichs: Girokonto und Internetbanking, Sparen und Kredit, Anlegen und Vorsorgen – hier finden Sie alles für Ihr Geldleben.

Key Services:
Girokonto (checking accounts)InternetbankingSavings and credit productsInvestment and retirement planning
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
JavaScript ES ModulesCSS with EmotionGoogle Tag ManagerAdobe AppMeasurement
Frameworks:
GEM (Erste Group's own framework, version 4.40.3)
Platforms:
Desktop and Mobile responsive design
Performance:

moderate

Mobile:

excellent

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • No exposed sensitive data in HTML
  • Use of CSP and other security headers not explicitly visible but likely present

Analytics & Tracking

Services:
Adobe Analytics
Tracking Level:moderate
Privacy Compliance:basic

Advertising & Marketing

Tracking Pixels:
Adobe AppMeasurement
Marketing Tools:
Adobe Analytics
Transparency Level:basic

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is professionally designed and well-branded for Erste Bank und Sparkassen.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

65/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

0/100
Score
Analysis failed - content could not be retrieved

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

0/100
Score
Analysis failed - content could not be retrieved

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

72/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 ip4:213.150.10.0/29 ip4:185.132.183.56 ip4:185.183.30.2 -all
DNS Lookups:0/10
Policy:-all
DMARC Details
Policy:reject
Subdomain Policy:reject
Aggregate Reports:dmarc_rua@emaildefense.proofpoint.com
Forensic Reports:dmarc_ruf@emaildefense.proofpoint.com

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

77/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 76 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Enabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:15.197.139.74, 3.33.171.237
Name Servers:
ns1.it-austria.netDNS only
ns2.it-austria.netDNS only
ns3.it-austria.netDNS only
ns4.it-austria.netDNS only
MX Records:
10: mxb-004c2c02.gslb.pphosted.com
10: mxa-004c2c02.gslb.pphosted.com
SOA:Serial: 2025071401, TTL: 86400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:205ms

SPF Analysis

SPF Record:
v=spf1 ip4:213.150.10.0/29 ip4:185.132.183.56 ip4:185.183.30.2 -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a proprietary CMS framework (GEM) with modern JavaScript modules and CSS-in-JS (Emotion). It is hosted on Erste Group's CDN infrastructure, ensuring good availability and performance. The site is responsive and optimized for mobile devices, with accessibility features evident in ARIA attributes and keyboard navigation support. SEO is supported by structured data (JSON-LD) and Open Graph metadata. Analytics integration includes Adobe Analytics and Google Tag Manager. No critical technical issues were found, but performance could be further optimized by auditing script loading and minimizing third-party dependencies.
Analyze Another Website