Medium-risk security reports

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 24 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 23 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website comvexx.com is currently inaccessible beyond a Cloudflare Web Application Firewall (WAF) challenge page that requires JavaScript and cookies to proceed. This effectively blocks access to any substantive content, business information, or user interaction elements. The domain is properly configured with Cloudflare DNS and Microsoft Outlook for email services, but the absence of a valid SSL certificate and HTTPS support is a critical security deficiency. The site lacks visible privacy, cookie, or terms of service policies, and no contact or business details are presented on the landing page. Overall, the digital maturity of the site is low due to the lack of accessible content and security best practices implementation.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Logwin AG operates an international logistics and transportation services website offering a broad range of services including sea freight, air freight, warehousing, and transport management. The company targets businesses requiring reliable logistics solutions and positions itself as a professional and dedicated provider with a worldwide network. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery and Fancybox, providing a good user experience with clear navigation and professional design. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Security headers are partially implemented, and privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

N26 SE operates a leading mobile-first digital banking platform in Germany and Europe, offering a range of financial services including checking accounts, savings, investments, and a mobile telecom service branded as N26 SIM. The company holds a full banking license from BaFin, ensuring regulatory compliance and deposit protection up to 100,000 EUR. The website is professionally designed with excellent content quality and clear navigation, targeting consumers who prefer intuitive, app-based banking solutions. Technically, the site leverages modern web technologies such as React, Contentful CMS, and cloud hosting via AWS CloudFront, with integrated analytics and marketing tools like Datadog and Google Tag Manager. However, a critical security issue is the invalid SSL certificate and lack of modern TLS support, which undermines the security posture. Security headers and policies are well implemented, but SSL/TLS must be fixed to ensure trust and compliance. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent SSL remediation to maintain security and user trust.

Related:bitpanda.comvodafone.de

PolyQuest, Inc. is a medium-sized manufacturing company specializing in the distribution and production of virgin and recycled thermoplastic resins including PET, rPET, PP, PE, and PS. Positioned as the largest distributor of PET resins in North America and a leading manufacturer of recycled PET products, the company serves manufacturers and converters across multiple applications such as bottles, films, textiles, and injection molding. The website reflects a professional business model with clear product and application information, targeting industry customers and suppliers. Technically, the site is built on WordPress with Elementor and uses Cloudflare for hosting and CDN services, but lacks a valid SSL certificate, which is a critical security shortfall. The site includes a Salesforce-integrated contact form collecting detailed lead information, and uses Google Analytics for user tracking without a visible cookie consent mechanism, indicating limited privacy compliance. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

Media Magic Video Production Services is a small, established business based in Southern California specializing in video production services for businesses and nonprofits since 1984. Their offerings include website videos, fundraising presentations, trade show videos, commercials, PSAs, and training programs. The website is built on Squarespace, leveraging standard web technologies and Google Analytics for tracking. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. Contact information is clearly provided, and social media presence is active across multiple platforms. Despite good content quality and professional presentation, the absence of HTTPS and privacy policies introduces compliance and trust concerns.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 25 security findings identified across all modules.

PVH Corp. is a leading global apparel company known for its iconic brands Calvin Klein and Tommy Hilfiger. The company operates in over 40 countries with a large workforce and focuses on delivering fashion and lifestyle products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive business information targeting consumers, investors, and job seekers. Technically, the site uses modern frameworks like Vue.js and is hosted on Microsoft IIS with Akamai CDN support, but lacks a valid SSL certificate, which is a critical security gap. Security headers are properly configured, but the absence of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is partially addressed with a clear privacy policy and GDPR indicators, but no cookie consent mechanism is present. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

BILLA Bulgaria operates as a major retail supermarket chain with a strong presence in the Bulgarian market, offering a wide range of food and non-food products, including own brands and partner brands. The company emphasizes customer loyalty through its BILLA Card program and engages actively in social responsibility initiatives. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, hosted on Google Cloud, and integrates payment services like Payone. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which is a critical issue. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. Overall, the website is professional and content-rich but requires urgent security improvements to ensure safe user interactions.

Related:payone.com

Cegeka is a well-established European IT company specializing in end-to-end IT solutions, consulting, and digital transformation services. The company targets enterprise clients across multiple sectors including technology, energy, finance, telecommunications, manufacturing, and government. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. Technically, the site is built on HubSpot CMS, leveraging modern web technologies such as Lit and custom web components, and is hosted behind Cloudflare. However, the SSL certificate is invalid or missing, which significantly impacts the security posture. Security headers are well implemented but cannot fully compensate for the lack of proper HTTPS. Privacy and cookie policies are present and GDPR compliant, though no explicit security or incident response policies are found. Overall, the website demonstrates strong business credibility and marketing sophistication but requires urgent SSL remediation to improve security and trust.

Raiffeisen Informatik Technical Services GmbH is a specialized IT service provider focused on delivering on-site user support and field services primarily for the Raiffeisenbanken group, RBI Konzern, and UNIQA in Austria. The company positions itself as a market leader in providing high-quality, timely, and competent IT and security services tailored to banking and insurance sectors. Their service portfolio includes security technology, banking technology, print management, IT services, and telecommunications. The website content and branding consistently reflect their business focus and certifications, including ISO 9001 and ISO 27001, underscoring their commitment to quality and security. Technically, the website is built on WordPress with Apache server infrastructure and uses jQuery and custom JavaScript for interactivity. DNS is managed via Cloudflare secondary nameservers, but the SSL/TLS configuration is critically lacking, with no valid certificate installed and no TLS protocols enabled, which severely impacts the security posture. Performance metrics indicate slow loading, and while mobile optimization is good, accessibility and SEO optimizations are basic. Security-wise, the site implements several important HTTP security headers such as Content Security Policy, X-Frame-Options, and X-XSS-Protection, but these are undermined by the absence of HTTPS. The lack of OCSP stapling, session resumption, and certificate transparency compliance further weakens the security stance. No cookie consent mechanism or incident response contact information is present, which may affect privacy compliance and incident handling readiness. Overall, the website demonstrates a moderate level of professionalism and business credibility but suffers from critical security configuration issues that must be addressed urgently. Strategic improvements in SSL/TLS deployment, privacy compliance, and incident response transparency are recommended to enhance trust and security posture.

Related:raiffeiseninformatik.at

The website druck-und-zustellung.at presents a minimalistic Angular-based configurator interface with no visible business content, contact information, or legal pages such as privacy policy or terms of service. The technical infrastructure includes modern frontend technologies like Angular and the Didomi Consent SDK for cookie consent management, but lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Security headers are partially implemented, but the absence of TLS protocols and cipher suites severely weakens the security posture. The domain registration appears consistent with an Austrian business presence, but the lack of visible business details and minimal content reduces trust and credibility. Overall, the site is functional but immature in content and security maturity.

The website kedrion.com is currently inaccessible beyond a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any substantive content, including business, contact, or policy information. The domain's DNS and email configurations are well maintained with proper SPF and DMARC records, indicating a good email security posture. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap. The site employs multiple security headers but lacks modern TLS protocols and HSTS, reducing its overall security posture. Due to the WAF challenge blocking content, a full analysis of the website's business model, services, and compliance cannot be performed.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Sepura Limited is a UK-based company specializing in the design, development, and supply of TETRA and LTE digital radio products and applications for business and mission-critical communications. The company holds a strong market position as a leading provider of TETRA radios with a legacy spanning over 125 years. Their solutions target public safety, energy, transportation, and commercial sectors globally, supported by a large partner network and extensive R&D efforts. Technically, the website is built on WordPress with modern plugins and marketing tools, demonstrating good digital maturity and SEO practices. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and trust indicators such as certifications and customer testimonials. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Website security analysis completed with a risk score of 40/100.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Wolfram is a well-established technology company specializing in computational software, cloud services, and educational programs. With a strong market position and a broad target audience including researchers, educators, developers, and enterprises, Wolfram offers a comprehensive suite of products such as the Wolfram Language, Mathematica, and Wolfram|Alpha. The website reflects a mature digital presence with professional design, clear navigation, and extensive content showcasing their offerings and community engagement. Technically, the site uses a custom framework with modern JavaScript libraries and SVG graphics, but lacks a valid SSL certificate, which is a critical security gap. The absence of HTTPS and security headers reduces the overall security posture and exposes users to potential risks. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting good privacy practices. Overall, the site demonstrates high business credibility and trustworthiness but requires urgent security improvements to protect user data and enhance trust.

Klippa App B.V. is a Dutch technology company specializing in AI-driven document automation solutions that help businesses reduce operational costs, save time, and prevent fraud. Their market position is strong, serving over 1000 brands with products like DocHorizon and SpendControl, targeting finance professionals and enterprises across various sectors including banking, logistics, and public services. The company leverages modern web technologies and cloud infrastructure (Microsoft Azure) to deliver scalable and efficient services. Security practices are generally good with HTTPS and Cloudflare protection, but improvements in SSL/TLS configuration are recommended. The website demonstrates strong compliance with data protection regulations and holds relevant certifications such as ISO 27001 and ISO 9001. Overall, Klippa presents a professional, trustworthy, and technically mature digital presence.

A Place for Mom is a leading senior living referral service that connects families with assisted living, memory care, independent living, home care, nursing homes, and other senior care options. The company operates a large network of communities and home care providers, offering personalized support through expert advisors at no cost to families. Their market position is strong, supported by extensive consumer reviews, award recognitions, and a broad geographic presence across major US cities. Technically, the website is built on modern frameworks such as Next.js and React, leveraging AWS CloudFront for content delivery and integrating advanced analytics and marketing tools like Segment, Optimizely, and Drift. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. While security headers are properly configured, the lack of TLS protocols and OCSP stapling reduces overall security. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for its business but requires urgent improvements in SSL/TLS implementation to ensure secure user interactions and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing DNS security measures.

Website security analysis completed with a risk score of 40/100.

Fluke Corporation is a globally recognized leader in manufacturing and distributing professional electronic test tools, calibration instruments, and networking solutions. The company serves a broad industrial and technical audience, offering rugged, reliable, and accurate measurement products and software. Their market position is strong, supported by a mature domain and multiple subsidiary brands. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates extensive third-party analytics and marketing tools, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security flaw that undermines user trust and data protection. Additionally, the lack of visible privacy and cookie policies raises compliance concerns. Overall, while the business credibility and content quality are high, the security posture requires urgent improvement to align with best practices and regulatory requirements.

Ainsworth Game Technology is a well-established company specializing in gaming technology products, including gaming cabinets and interactive solutions, targeting global markets such as APAC, North America, Latin America, and Europe. The website reflects a professional corporate presence with clear navigation and consistent branding. Technically, the site uses modern frontend technologies like Tailwind CSS, Alpine.js, and integrates Google Analytics and reCAPTCHA for analytics and security. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is basic, with a privacy policy and terms of use present but no cookie consent mechanism. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security configuration to protect user data and enhance trust.

BBI International operates as a specialized media and events company serving the biofuels, biomass, biodiesel, ethanol, carbon capture, sustainable fuels, and unmanned aircraft systems industries. The company publishes multiple niche magazines and organizes several well-established conferences and expos, positioning itself as a key information and networking hub within these sectors. The website content reflects a focused business model targeting industry professionals and companies seeking news, education, and event participation. Technically, the website runs on a Microsoft IIS server using ASP.NET with legacy jQuery scripts and integrates Google Analytics and Tag Manager for tracking. However, the site lacks HTTPS, exposing visitors to security risks and undermining trust. Security posture is weak with no SSL certificate, no advanced security headers, and no cookie consent mechanisms, indicating compliance gaps especially regarding GDPR. The WHOIS data aligns well with the business profile, confirming legitimacy and consistent registration details. Overall, the site provides relevant content but requires significant security and privacy improvements to meet modern standards.

Security assessment completed with an overall score of 0/100 (unknown risk). 2 critical issues require immediate attention. Total of 19 security findings identified across all modules.