Security Directory

Kontron is a global leader in IoT and embedded computing technology, offering a broad range of smart IoT solutions and electronics manufacturing services. The company targets industrial and technology sectors with a focus on innovation, sustainability, and advanced technology integration. The website is professionally designed using modern frameworks such as Nuxt.js and hosted on Hetzner infrastructure. However, the security posture is weak due to the absence of a valid SSL/TLS certificate and lack of HTTPS enforcement, which poses a significant risk to user data and trust. Privacy compliance is partially addressed through the use of Cookiebot for cookie consent, but no explicit privacy policy or terms of service are found. Overall, the website reflects a credible business but requires urgent security improvements.

I

Institute of Brand Logic

brand-logic.com

22

Institute of Brand Logic is a professional consulting firm specializing in brand strategy, growth strategies, and organizational development with over 25 years of experience. The company operates primarily in Austria with offices in Innsbruck, Vienna, and Munich. Their website is well-designed, content-rich, and targets businesses and executives seeking to strengthen their market position through integrated brand and business development strategies. Technically, the website runs on WordPress with common plugins for multilingual support and performance optimization. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, exposing visitors to potential risks. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy. Business credibility is supported by client testimonials and professional presentation. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

A

APK Pensionskasse AG

apk-pensionskasse.at

40

APK Pensionskasse AG operates as a leading Austrian pension fund provider specializing in occupational retirement provisions. The company offers services to employers and employees to facilitate additional pension savings, managing contributions and investments to provide monthly payouts upon retirement. The website reflects a professional and consistent brand presence with clear business information and regulatory compliance references. Technically, the site is built on TYPO3 CMS and protected by Sucuri Cloudproxy, with Matomo analytics for privacy-conscious tracking. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy compliance is well addressed through cookie banners and a comprehensive privacy policy. Overall, the site demonstrates solid business credibility but requires urgent security improvements.

Tyrol Air Ambulance is a well-established Austrian company specializing in worldwide medical air transport and assistance services. With over 40 years of experience, it operates a dedicated fleet of ambulance jets equipped with advanced medical technology and staffed by experienced medical professionals. The company holds multiple industry awards and accreditations, positioning itself as a leading provider in the air ambulance sector. The website reflects a professional and content-rich presence targeting patients, healthcare providers, and insurance companies requiring medical repatriation and emergency transport services. Technically, the website employs a traditional technology stack with jQuery and several plugins, and uses Matomo for privacy-conscious analytics. However, the absence of HTTPS and a valid SSL certificate is a critical security shortfall, exposing users to risks and undermining trust. Security headers are minimal, and no incident response or vulnerability disclosure policies are publicly available. Overall, the site is well-branded and informative but requires urgent security improvements to align with best practices and regulatory expectations.

K

Kollective Technology

kontiki.com

39

Kollective Technology operates a sophisticated enterprise video and collaboration platform focused on delivering observability, analytics, and optimization for large-scale video events. The company targets large enterprises and IT leadership teams, positioning itself as a leader in the technology sector with AI-powered solutions. The website is professionally designed, content-rich, and well-branded, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrations, hosted behind Cloudflare, and uses various marketing and analytics tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

F

Franziskus Spital GmbH

franziskusspital.at

30

Franziskus Spital GmbH operates as a non-profit healthcare provider with two hospital locations in Vienna, Austria, offering a broad range of medical services including internal medicine, surgery, anesthesiology, and specialized centers such as hernia surgery and breast health. The website targets patients, visitors, referring physicians, and career seekers, positioning itself as a regional healthcare institution with a focus on individualized medicine and comprehensive patient care. Technically, the website employs a mix of legacy and modern JavaScript libraries and includes Google Analytics and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. Security headers are partially implemented but lack advanced protections such as HSTS and DNSSEC. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the site is professionally designed and content-rich but requires urgent security improvements to meet modern standards.

Hitachi Vantara LLC is a leading enterprise technology company specializing in sustainable data infrastructure and hybrid cloud solutions. The company offers a broad portfolio including storage platforms, data management, infrastructure as a service, and integrated systems, supported by a strong partner ecosystem and customer success services. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting enterprise IT professionals. Technically, the site is built on Adobe Experience Manager hosted on AWS, utilizing modern frameworks and third-party integrations for video and analytics. However, the absence of a valid SSL certificate and missing security headers represent significant security weaknesses that reduce the overall security posture. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by structured data, customer testimonials, and clear contact information. Overall, the site is trustworthy and professional but requires urgent improvements in SSL and security headers to enhance user trust and security.

D

Deutsche Lufthansa AG

ltt.aero

40

Lufthansa Technical Training (LTT) is a well-established aviation technical training provider affiliated with Deutsche Lufthansa AG. The company offers a broad range of training services including vocational, basic, and type training for aviation professionals worldwide. Their business model targets both individual trainees and corporate clients, leveraging customized training solutions to meet specific needs. The website reflects a professional and consistent brand image with comprehensive content and strong trust indicators such as EASA certification and Lufthansa Group affiliation. Technically, the site is built on the Scrivito CMS platform and hosted on Amazon S3 with CloudFront CDN, but suffers from a critical lack of HTTPS due to an invalid or missing SSL certificate, which severely impacts security posture. Privacy and cookie policies are well implemented and GDPR compliant, with moderate user tracking via Google Analytics and marketing tools like Intercom and Usercentrics. Overall, the website provides a good user experience and clear navigation but requires urgent security improvements to enable HTTPS and strengthen SSL/TLS configurations.

F

Fast Lane Computer Consultancy FZ LLC

flane.com

40

Fast Lane Computer Consultancy FZ LLC operates the website flane.com, providing IT training and consultancy services primarily in the UAE with international branches in South Africa and Spain. The company targets technology professionals and organizations seeking specialized training in network security, cloud, and IT infrastructure. The website is built on the Wix platform, leveraging multiple Wix applications such as Wix Bookings, Wix Stores, and Wix Blog, indicating a mature digital infrastructure. However, the site lacks a valid SSL certificate, which is a critical security concern that undermines user trust and data protection. While privacy and terms of service policies are present, cookie consent mechanisms and explicit security policies are absent, indicating partial compliance with privacy regulations. Overall, the site demonstrates good business credibility and content quality but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

G

GTW Management Consulting GmbH

gtw-mc.com

24

GTW Management Consulting GmbH is an established international IT consulting firm specializing in SAP-based mass customer billing and related services. With offices in Austria, Switzerland, and Germany, the company serves a broad range of industries including transport, energy, telecommunications, finance, and manufacturing. Their key offerings include SAP BRIM consulting, subscription billing, credit management software, and data migration tools. The website reflects a professional and consistent brand presence with strong client testimonials and partnership with SAP. Technically, the site is built on TYPO3 CMS with common JavaScript libraries, but lacks a valid SSL certificate, which is a critical security shortfall. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the company demonstrates solid business credibility but must urgently address its security posture to protect user data and maintain trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

M

Moore Salzburg GmbH Wirtschaftsprüfungs- und Steuerberatungsgesellschaft

moore-salzburg.at

40

Moore Salzburg GmbH is a professional services firm based in Salzburg, Austria, specializing in tax consulting, auditing, accounting, payroll, and management consulting. The company operates as part of the global Moore network, providing a broad range of financial and consulting services to businesses and individuals. Their website reflects a medium-sized enterprise with a clear focus on regional expertise and international affiliation. Technically, the website is built on ASP.NET WebForms with Kentico CMS, utilizing modern front-end libraries such as Bootstrap and jQuery. However, the site suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, no security headers, and absence of cookie consent mechanisms despite using Matomo analytics. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional but requires urgent security improvements to protect user data and comply with privacy regulations.

A

ATP Koncernen

atp.dk

34

ATP Koncernen is a large Danish financial and governmental entity focused on securing economic welfare through pension management and welfare administration for Danish citizens. The website reflects a strong market position with comprehensive services including lifelong pension and welfare benefits administration. The digital infrastructure is built on Drupal CMS with integrations for cookie consent and analytics, demonstrating a mature technical setup. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing the site to risks and reducing trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to align with best practices.

R

Rustler Gruppe

rustler.eu

40

Rustler Gruppe is a well-established Austrian real estate services company with a strong market position in property management, brokerage, development, facility management, and construction project management. Founded in 1935, it operates primarily in Austria and Central and Eastern Europe, targeting property owners, tenants, and investors. The website reflects a professional digital presence with comprehensive service descriptions and multilingual support. Technically, the site is built on WordPress using the Enfold theme and several plugins including Yoast SEO and Borlabs Cookie for privacy compliance. However, the security posture is weak due to the absence of a valid SSL certificate and disabled TLS protocols, exposing users to potential risks. Privacy compliance is well addressed with cookie consent mechanisms and detailed policies. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

S

SABIC

sabic.com

40

SABIC is a large multinational petrochemical company headquartered in Saudi Arabia, specializing in manufacturing and supplying polymers, chemicals, specialties, and agri-nutrients. The website reflects a mature enterprise with a comprehensive digital presence targeting industrial customers, investors, and job seekers. The content is professionally presented with clear navigation and consistent branding. Technically, the site uses ASP.NET technology with modern JavaScript libraries and Google Tag Manager for analytics and marketing. However, the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, severely impacting security posture. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professional but requires urgent remediation of HTTPS and SSL issues to ensure secure user interactions.

N

NTS Retail

ntsretail.com

28

NTS Retail is a specialized B2B software provider offering smart commerce and retail management solutions primarily for telecommunications operators and specialist retailers. The company positions itself as a preferred partner for leading telco brands worldwide, delivering unified commerce platforms and tailored retail management services. Their website reflects a professional and consistent brand image with strong client references and active social media engagement. Technically, the website is built on Drupal CMS, hosted on Azure DNS infrastructure, and utilizes Apache server technology. It incorporates modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Security-wise, while some security headers are implemented, the lack of HTTPS, HSTS, and incident response information exposes the site to risks and compliance gaps. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site demonstrates good business credibility but requires urgent security improvements. Strategically, the company should prioritize securing its website with HTTPS, implement comprehensive privacy and cookie consent mechanisms, and publish clear security policies and incident response contacts to enhance trust and compliance.

S

SBA Research gGmbH

sba-research.org

28

SBA Research gGmbH is a well-established research center specializing in information security, funded partly by national and European initiatives such as the COMET Competence Centers for Excellent Technologies. The organization offers a broad range of services including research, professional security consulting, security trainings, and vulnerability disclosure. Their market position is strong within Austria and Europe, supported by partnerships with governmental and scientific bodies. The website reflects a professional and content-rich digital presence targeting researchers, security professionals, and industry partners. Technically, the site is built on WordPress with Apache server and uses jQuery for client-side scripting. While the site is mobile-optimized and accessible, performance data is unavailable. Security headers are well implemented, but the lack of a valid SSL certificate and proper HTTPS configuration is a significant weakness. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is supported by ISO 27001 certification and transparent partnership disclosures. Overall, the site is trustworthy but requires urgent SSL/TLS remediation to improve security posture and user trust.

N

n-ce Neuwirth Consulting & Engineering

n-ce.at

40

n-ce Neuwirth Consulting & Engineering is a small Austrian consulting and engineering firm specializing in foundry technology and related industrial applications. The company offers consulting, engineering services, and seminars targeted at clients in the foundry and manufacturing sectors. Their website reflects a professional and consistent brand presence with clear contact information and client references, positioning them as a niche specialist in their market. Technically, the website is built on WordPress with common plugins like WPBakery and Slider Revolution, but suffers from very poor performance and lacks HTTPS security. The absence of SSL/TLS and security headers represents a critical security risk. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no terms of service or incident response information is provided. Overall, the site is accessible and informative but requires urgent security improvements.

A

AURIGON Advisors AG

aurigon.ch

40

AURIGON Advisors AG is a specialized consulting firm focused exclusively on reinsurance and insurance sectors, serving clients primarily in Switzerland, the EU, USA, UK, and Latin America. Their key services include conflict resolution, audits, claims management, exit strategies, and strategic consulting. The company maintains a multilingual website with professional team profiles and contact information, indicating a small but internationally oriented business. Technically, the website is built on WordPress using the Enfold theme and includes multiple shortcodes and scripts, but lacks a valid SSL certificate, which is a critical security deficiency. The cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Overall, the website is functional and professional in content but requires urgent security improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website team-rottensteiner.com currently serves a 404 Not Found error page, indicating that the site content is inaccessible or missing. There is no visible business information, contact details, or policy documents available on the site. The technical infrastructure shows the use of Phusion Passenger as the application server, but the site lacks a valid SSL certificate and does not support any TLS protocols, resulting in an insecure connection. Security headers are partially implemented but limited by the absence of HTTPS. Overall, the website's digital maturity is low, with poor performance, minimal content, and no evident SEO or accessibility features. The security posture is weak due to the lack of HTTPS and modern cryptographic protocols, exposing visitors to potential risks. Given these factors, the site presents a high risk from a security and trust perspective, and strategic improvements are necessary to establish a secure and professional online presence.

GMB Union is a well-established UK trade union with a mature domain and a large membership base exceeding 500,000. The website serves as a comprehensive platform for union campaigns, news, member benefits, and sector-specific advice, targeting workers across public and private sectors. The technical infrastructure is based on MODX Revolution CMS, hosted on a Plesk platform with nginx web server, and uses modern JavaScript libraries for enhanced user experience. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security concern. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security or incident response policies are found. Overall, the website is professionally designed, content-rich, and trustworthy but requires urgent improvements in its security posture to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website represents a small German engineering consultancy specializing in building physics, damage assessment, and related services for private clients, insurers, and courts. The business offers expert reports, simulations, and consulting in areas such as thermal protection, moisture protection, and building acoustics. The site is hosted on the Strato platform using the cm4all CMS and employs legacy JavaScript libraries. While the content is relevant and professionally presented, the technical infrastructure is outdated and lacks modern security features. Critically, the site does not support HTTPS, exposing visitors to security risks and undermining trust. Cookie consent mechanisms are implemented, but privacy compliance could be improved. Overall, the business appears legitimate and consistent with its domain registration data, but the website requires urgent security upgrades to meet modern standards.

KTM Sportmotorcycle GmbH operates a professionally designed and content-rich website targeting motorcycle enthusiasts primarily in Finland and Europe. The company is a leading European manufacturer of high-performance street and offroad motorcycles, supported by a large-scale business model including sales, parts, accessories, and motorsport activities. The website leverages modern technologies such as Adobe Experience Manager, Scene7 Dynamic Media, and Google Tag Manager, indicating a mature digital infrastructure. However, a critical security weakness is present due to an invalid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy and cookie policies are well implemented and GDPR compliant, supporting good privacy practices. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

A

Ahoi Kapptn FlexCo

ahoikapptn.com

40

Ahoi Kapptn FlexCo is a technology-focused company specializing in digital solutions for businesses, including consulting, UI/UX design, AI applications, and scalable software development. The company serves a diverse clientele including notable brands such as Red Bull, SAP, and the Austrian Football Association, positioning itself as a trusted provider of innovative digital products. Their business model revolves around delivering end-to-end digital product development and optimization services, targeting businesses seeking to evolve their digital presence and capabilities. Technically, the website is built on a modern stack using Next.js and React, hosted on Vercel, with native mobile app development capabilities demonstrated in their projects. The site is well-structured, mobile-optimized, and rich in content, reflecting a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which undermines user trust and data security. Privacy compliance is generally good, with a clear privacy policy and GDPR adherence, though the lack of a cookie consent mechanism is a notable shortfall. Overall, the website presents a professional and credible business front but requires urgent security improvements to align with best practices and user expectations.

B

BVAEB Versicherungsanstalt öffentlich Bediensteter, Eisenbahnen und Bergbau

bvaeb.at

40

BVAEB is an Austrian government social insurance institution serving public servants, railway workers, and mining employees. It provides comprehensive information and services related to health insurance, accident insurance, pension, and family benefits. The website is well-structured and targets insured persons, employers, and partners within its sector. Technically, the site uses Apache, Jakarta Faces, and modern JavaScript libraries, but suffers from a critical lack of valid SSL/TLS certificates, severely impacting its security posture. Privacy and cookie policies are implemented with consent mechanisms, and contact information is clearly provided. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and comply with modern standards.

K

Kwizda – Kwizda Unternehmensgruppe

kwizda.at

32

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 30 security findings identified across all modules.

Ö

Österreichische Gesundheitskasse

meineoegk.at

40

The website meineoegk.at serves as the official service portal for the Österreichische Gesundheitskasse, Austria's public health insurance provider. It offers a broad range of online services including e-Rezept, insurance data access, pension applications, and various social insurance related forms. The portal targets insured Austrian residents and provides a secure login mechanism via ID Austria, ensuring user data protection and access control. The site is professionally designed with clear navigation and comprehensive content relevant to its audience. Technically, it employs a custom CMS with Jakarta Faces framework and uses modern JavaScript libraries such as jQuery 3.6.0 and Slick Carousel for UI components. Analytics is managed through Piwik PRO with user consent mechanisms in place, reflecting good privacy practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the site's security posture. The Content Security Policy is robust but includes unsafe directives that could be improved. Overall, the site is trustworthy and authoritative but requires urgent security enhancements to protect user data and comply with best practices.

S

Supersnow

supersnow.pl

29

Security assessment completed with an overall score of 0/100 (unknown risk). 6 critical issues require immediate attention. Total of 31 security findings identified across all modules.

B

BH Technologies, Eclairage Public & Gestion des déchets

bh-technologies.com

40

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 28 security findings identified across all modules.

S

Scheuch Group

scheuch.com

40

Scheuch Group is a well-established Austrian company specializing in industrial air cleaning and environmental technology solutions, holding a world market leader position since its founding in 1963. The company offers comprehensive services including devices, components, assembly, and consulting tailored to various industries. Their website reflects a professional digital presence with multilingual support and clear business information targeting industrial clients. Technically, the site is built on WordPress with modern plugins and frameworks, but suffers from a critical security weakness due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support. Security headers are partially implemented, but the lack of encryption significantly undermines the site's security posture. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the site is trustworthy and professionally maintained, but urgent improvements in SSL/TLS configuration are necessary to enhance security and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Generali Gruppe Österreich operates as a major insurance provider in Austria, offering a broad spectrum of insurance and financial products targeting both private and corporate customers. The company enjoys a strong market position with over 2 million customers and is part of the global Generali Group. Their website reflects a professional and comprehensive digital presence, showcasing extensive product offerings and customer services. Technically, the site leverages modern frameworks such as React and Gatsby, hosted on AWS infrastructure with CDN support for content delivery. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly undermines the site's security posture. Privacy and cookie policies are well implemented, indicating good compliance with GDPR requirements. Overall, the website is user-friendly, mobile-optimized, and trustworthy, but urgent improvements in SSL/TLS configuration are necessary to ensure secure communications and maintain customer trust.

B

Business network solutions "engineered in Germany": LANCOM Systems GmbH

lancom-systems.com

37

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 23 security findings identified across all modules.

M

Make Brands. Sell Products. with CELUM

celum.com

40

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 21 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 21 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 5 critical issues require immediate attention. Total of 26 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 28 security findings identified across all modules.

A

adesso Austria GmbH - IT-Dienstleister - Kerngeschäftsprozesse optimieren durch gezielten Einsatz moderner IT

adesso.at

40

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

The website amstm.com currently presents only a minimal HTML page with a redirect script and no accessible content, indicating it is either under construction, blocked, or a placeholder. The domain is registered through GoDaddy.com, LLC and has strong domain protection with multiple client prohibitions, but the lack of SSL/TLS certificate and absence of any meaningful content significantly reduce its trustworthiness and usability. Technically, the site lacks modern security configurations such as HTTPS, security headers, and DNSSEC, which are critical for protecting visitors and data integrity. No privacy or cookie policies, contact information, or business details are available, limiting compliance and user trust. Overall, the site is not currently functional as a business or informational platform.

I

IJM Land | Malaysia's Top Property Developer

ijmland.com

33

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 27 security findings identified across all modules.

S

StudiosDigital GmbH

studiosdigital.at

24

StudiosDigital GmbH is a small Austrian technology agency specializing in interactive media and Drupal-based web development. The company targets businesses and organizations in Vienna and Austria seeking professional web presence and digital solutions. Their website reflects a consistent branding and professional content focused on Drupal 7 CMS projects and interactive media services. Technically, the site runs on Drupal 7 with jQuery and nginx but lacks modern security practices such as HTTPS, which is a critical vulnerability. The absence of cookie consent and privacy compliance mechanisms indicates GDPR compliance gaps. Social media integration is present but no advanced analytics or marketing tools are detected. Overall, the website is functional but requires urgent security upgrades and privacy compliance improvements to meet modern standards.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 24 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

T

Timesheet - Mobile Time Tracking

timesheet.io

31

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

The website hollisterco.com appears to represent a large retail brand, Hollister Co., but the actual website content is inaccessible, returning only a minimal 'Bad Request' page. This prevents detailed content and business information extraction. The DNS and email configurations are properly set, indicating legitimate domain management and good email security practices. However, the lack of a valid SSL certificate and absence of HTTPS severely impact the security posture. The site is likely protected by a Web Application Firewall or similar security mechanism that blocks access to the content, further limiting analysis. Overall, the site shows signs of a mature business with enterprise scale but suffers from critical security configuration issues and content accessibility problems.

QCM Holding is a Swiss-based aviation competence center specializing in regulatory and Part-147 training, design approvals, aircraft technical management, and consulting services. With over 25 years of industry presence and recent ownership transition, QCM maintains a strong market position serving aviation professionals and organizations. The website reflects a professional and comprehensive service offering with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business demonstrates credibility and trustworthiness, though the security weaknesses present a risk that should be addressed promptly.

M

Minimax GmbH

minimax.de

37

Minimax GmbH is a well-established leader in the fire protection industry with over 120 years of experience. The company offers a broad range of fire detection, suppression, and prevention systems tailored for various industries including energy, manufacturing, and transportation. Their market position is strong, supported by a comprehensive portfolio of products and services, including maintenance and training. The website reflects a professional and consistent brand image targeting industrial and commercial clients seeking reliable fire safety solutions. Technically, the site uses modern JavaScript modules, a CDN for content delivery, and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, leaving the site vulnerable to interception and undermining user trust. Security headers are properly configured, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to align with best practices and protect users.