Security Directory

The website ebv.com is part of Avnet's EBV Elektronik division, a mature and established technology distributor with a domain age of 29 years. The site is currently inaccessible due to a Web Application Firewall (WAF) security challenge implemented by Akamai, which blocks direct content access and requires CAPTCHA validation. This limits the ability to analyze the website's content, policies, and user experience. The domain registration is consistent with the business entity, registered transparently without privacy protection, and matches the parent company Avnet. However, the SSL/TLS configuration is critically lacking, with no valid certificate detected and no modern TLS protocols enabled, posing a significant security risk. The site uses Akamai CDN and tracking technologies such as Marketo and Salesforce for marketing and analytics purposes. Overall, the website's security posture is weak due to missing HTTPS and blocked content, while business credibility remains high due to domain maturity and corporate affiliation.

K

Kraus & Naimer

krausnaimer.com

38

Kraus & Naimer is a globally recognized leader in the manufacturing of cam switches and industrial switchgear, offering a broad portfolio of products including main switches, control switches, and customized solutions. The company emphasizes mass customization and international certifications, serving a diverse industrial clientele worldwide. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to industrial customers. Technically, the website is built on TYPO3 CMS and served via Apache, incorporating modern JavaScript libraries and privacy-focused analytics (Matomo). However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive privacy policies. Security-wise, while some security headers are implemented, the lack of HTTPS and modern TLS protocols is a significant vulnerability. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the site is functional and professional but requires urgent security upgrades to meet modern standards and protect user data. Strategically, Kraus & Naimer should prioritize SSL certificate installation and TLS configuration, enhance security policy transparency, and continue leveraging privacy-compliant analytics to maintain regulatory compliance and customer trust.

J

Jacqueline Pehlemann

jacquelinepehlemann.de

36

Jacqueline Pehlemann is a small architecture and interior design office based in Berlin, specializing in residential and hospitality projects such as apartments and hotels. The website serves as a portfolio showcasing detailed project descriptions and high-quality images, targeting clients interested in bespoke architectural and interior design services. The business operates primarily through professional service offerings with a local market focus. Technically, the website is hosted on the Cargo platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. However, the site lacks HTTPS support, which is a critical security deficiency. Security headers are minimal, and no advanced DNS security features like DNSSEC or CAA are implemented. Privacy compliance is weak, with no cookie consent mechanisms and only a basic privacy policy page found. Contact information is not explicitly provided on the site, which may hinder user trust and engagement. Overall, the site demonstrates good content quality and professional design but requires significant improvements in security and privacy to meet modern standards.

A

ASSA ABLOY

assaabloyentrance.com

40

ASSA ABLOY Entrance Systems is a global enterprise specializing in manufacturing and supplying advanced entrance solutions including automatic, commercial, industrial, and digital doors. The company positions itself as a leader in secure and efficient access solutions, targeting businesses and industries requiring high-quality entrance systems. The website reflects a mature digital presence with a professional design and comprehensive product information, supporting its market leadership claims. Technically, the site uses modern web technologies and a proprietary CMS platform, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are well implemented, but the absence of encryption and privacy policies reduces trust and compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices and regulatory requirements.

A

Avantor, Inc.

vwr.com

40

VWR.com is the online presence of Avantor, Inc., a large enterprise specializing in providing life science products and service solutions. The website targets life science professionals and organizations globally, offering a broad range of scientific supplies and services. The business model is primarily B2B, with a strong market position as an established global supplier in the healthcare sector. The site uses localized subdomains to serve different countries, indicating a mature international presence. Technically, the website employs a variety of modern JavaScript libraries and tracking tools, including Google Analytics, Hotjar, and Cloudflare for CDN and security. However, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a significant security concern. The content is professionally presented with good navigation and branding consistency, but mobile optimization and accessibility are basic. From a security perspective, while the site implements a comprehensive Content Security Policy and some security headers, the absence of HTTPS and modern TLS support severely impacts the security posture. No incident response or vulnerability disclosure information is provided, and no explicit contact details are available on the landing page, limiting transparency. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS implementation and privacy compliance mechanisms to enhance trust and security. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, implementing cookie consent mechanisms, and providing clear contact and security policy information.

F

FH Kärnten gemeinnützige Gesellschaft mbH

fh-kaernten.at

40

FH Kärnten is a public higher education institution in Austria offering a wide range of Bachelor, Master, and continuing education programs focused on technology, health, social sciences, and management. The institution emphasizes practical orientation, international cooperation, and sustainable development. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding targeting prospective and current students. Technically, the site is built on TYPO3 CMS and served by Apache, but critically lacks a valid SSL certificate and HTTPS support, which undermines security and user trust. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

STADA is a leading German pharmaceutical company specializing in high-quality medicines, including consumer healthcare products, generics, and specialty pharmaceuticals. The company holds a strong market position as the fourth largest consumer healthcare company in Europe and is recognized as a Top Employer in Germany. Their website reflects a professional and comprehensive digital presence targeting consumers, healthcare professionals, and partners. Technically, the site uses modern JavaScript libraries, consent management tools, and is built on the Umbraco CMS platform. However, the website suffers from a critical security issue: the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines user trust and security. Performance is also suboptimal with slow load times and a large page size. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high with detailed contact information and consistent WHOIS data. Overall, while the business and content quality are excellent, the security posture requires urgent improvement to protect users and maintain trust.

Hawle Beteiligungsgesellschaft m.b.H. is a well-established Austrian manufacturer specializing in water supply valves and related products, serving a global market with a strong European manufacturing base. The company emphasizes sustainability, quality, and innovation, with a broad product portfolio including gate valves, butterfly valves, and digital water management solutions. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site uses modern JavaScript frameworks (Vue.js), Pimcore CMS, and integrates analytics and consent management tools, indicating a good level of digital maturity. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the security posture and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears credible and trustworthy, but urgent improvements in SSL/TLS deployment are recommended to secure user interactions and data.

The Spencer Stuart Portal website serves as a client or internal portal for Spencer Stuart, a global executive search and leadership advisory firm. The site is minimalistic, primarily acting as a loading or shell page that dynamically loads resources and scripts from local bundles and external services such as Pendo for analytics. The business focus is on executive search and leadership consulting, targeting enterprise clients and internal users. The portal likely supports client engagement and administrative functions rather than public marketing. Technically, the site is hosted on Amazon S3 with CloudFront CDN, leveraging AngularJS framework and JavaScript for dynamic content loading. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The absence of modern TLS protocols, security headers, and privacy policies further weakens the security posture. Performance data is unavailable, but the site appears slow and basic in design and user experience. Security evaluation reveals no WAF or blocking mechanisms, but the lack of HTTPS and security best practices exposes the site to risks. No privacy or cookie policies are present, and no contact or legal information is provided, limiting trust and compliance. Pendo analytics is integrated, indicating moderate user tracking without visible privacy compliance measures. Overall, the site is functional as a portal shell but requires urgent improvements in security, privacy compliance, and content completeness to meet enterprise standards and user trust expectations.

The website lobster.media is currently a parked domain landing page primarily monetized through advertising networks such as Google Adsense and Parklogic. It lacks substantive business content, contact information, or any clear business model beyond domain parking. The technical infrastructure is minimal, hosted on Hetzner Online with a Caddy server, but critically lacks a valid SSL certificate and HTTPS support, exposing visitors to security risks. The site does not implement privacy or cookie consent mechanisms and provides no security or incident response policies. Overall, the site demonstrates very low digital maturity and business credibility, with poor content quality and minimal technical sophistication.

The website porsche-inter-auto.ro is a parked domain landing page primarily offering the domain for sale. It lacks any active business content, contact information, or services. The domain is registered with Salestrar Ltd and hosted on Hetzner Online infrastructure, but no SSL certificate or HTTPS support is present, which severely impacts security posture. The site relies on advertising scripts and domain parking monetization. Overall, the digital maturity is low with minimal technical sophistication and poor privacy compliance. Security best practices are not implemented, exposing the site to risks and reducing trustworthiness. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, and improving domain security configurations.

B

Burton Snowboards

burton.com

40

Burton Snowboards is a well-established leader in the snowboarding retail industry, offering a comprehensive range of products including snowboards, boots, bindings, apparel, and accessories. Founded in 1977, the company has a strong brand presence and a loyal customer base, supported by a professional e-commerce platform that targets snowboarding enthusiasts and outdoor sports consumers. The website demonstrates excellent content quality, clear navigation, and consistent branding, reflecting a mature digital presence. Technically, the site leverages modern e-commerce technologies such as Salesforce Commerce Cloud (Demandware), Cloudflare CDN, and integrates multiple marketing and analytics tools including Google Analytics, OneTrust, and Yotpo. However, the current SSL certificate is invalid or missing, which poses a critical security risk and impacts user trust. Security headers are implemented but HSTS is not fully enabled, indicating room for improvement in HTTPS enforcement. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent attention to SSL configuration to enhance security posture.

S

StreamBreak Interactive GmbH

streambreak.tv

56

StreamBreak Interactive GmbH operates a niche technology platform focused on enhancing live streaming experiences by providing interactive minigames and ads that engage viewers during breaks. The company targets streamers, eSports organizers, and advertisers, offering a dashboard for analytics and community interaction. Founded in 2017 and based in Austria, StreamBreak has established a consistent brand presence and has been recognized with awards such as the Twitch Extension Winner in 2019. Technically, the website is built using modern web technologies including Bootstrap and JavaScript, hosted on Uberspace with DNS managed by world4you.at. While the site supports modern TLS protocols and has HSTS enabled, performance is suboptimal with a slow page load time. Mobile optimization and SEO are good, but accessibility is basic. No CMS is detected, indicating a custom or static site. From a security perspective, the site employs HTTPS with strong protocols but lacks DNSSEC, CAA records, and domain protection locks, which are recommended to enhance DNS and domain security. OCSP stapling and certificate transparency are also not implemented. Privacy compliance is basic with a cookie banner and privacy policy present, but no terms of service or explicit GDPR compliance statements. Contact information is limited to an email address. Overall, the website is professional and trustworthy with minor security and performance improvements needed. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing performance, and expanding privacy and security policies to strengthen compliance and user trust.

B

B&A Insurance Consulting

baic.cz

40

B&A Insurance Consulting is a Czech Republic-based IT consulting and software development company specializing in SAP systems and insurance sector applications. With over 16 years of market presence, the company serves insurance and banking clients, particularly within the VIG group, offering SAP implementation, maintenance, and custom software development services. The website reflects a professional and consistent brand with clear business focus and client testimonials supporting its market position. Technically, the site uses modern frameworks and technologies but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. Privacy compliance is basic but present, with GDPR policies and cookie consent mechanisms implemented. Overall, the company demonstrates credible business operations but requires urgent improvements in security posture to protect its digital presence and client trust.

R

Regus

regus.com

40

Regus is a well-established global provider of flexible workspace solutions, including office space, coworking, virtual offices, and meeting rooms. With a mature domain age of 29 years and a strong market presence as part of the IWG Group, Regus serves a broad audience of businesses seeking flexible and scalable workspace options. The website is professionally designed, leveraging modern technologies such as Next.js and Sitecore CMS, and offers comprehensive content and clear navigation to support user engagement. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that must be addressed promptly to ensure secure communications and maintain user trust. Privacy and cookie policies are present and indicate good compliance with GDPR requirements. Overall, the site demonstrates a strong business credibility and digital maturity but requires immediate security improvements.

A

ANWR Norden AB

anwr.se

38

ANWR Norden AB operates as a leading organization in the voluntary shoe retail sector in the Nordic region, founded in 1919 in Hamburg, Germany. The company connects shoe retailers with top brands and offers a portfolio of services tailored to the needs of trade and industry, including financial services through its own bank, DZB Bank. The website reflects a medium-sized enterprise with a clear business model focused on membership services and retail support. Technically, the website uses standard web technologies and a consent management platform but suffers from slow load times and lacks modern CMS or frameworks. Security posture is weak due to the absence of a valid SSL certificate and modern TLS protocols, despite the presence of HSTS headers. The lack of DMARC, DNSSEC, and other DNS security features further reduces security maturity. Privacy compliance is basic with a privacy policy present but no strong GDPR indicators. Overall, the site is functional but requires significant improvements in security and performance to meet modern standards.

C

Corteva Commercial

pioneer.com

40

Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.

E

Evelyn Partners

tilney.co.uk

40

Evelyn Partners is a well-established UK-based wealth management firm offering a comprehensive range of financial planning and investment management services. The company positions itself as a leader in the UK market with significant assets under management and a broad client base including individuals, families, entrepreneurs, and professional partners. Their website reflects a mature, professional business with strong branding, clear service offerings, and multiple client engagement channels including forms and contact options. Technically, the website leverages modern JavaScript frameworks and is hosted on Microsoft Azure, with good SEO and accessibility practices. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses a critical risk to user trust and data security. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of SSL issues to ensure secure client interactions.

A

Anyline GmbH

anyline.io

40

Anyline GmbH is a mature technology company specializing in AI-powered mobile data capture and OCR scanning solutions, primarily serving industries such as automotive, retail, logistics, enforcement, and energy. The company offers a broad portfolio of products including tire scanning, vehicle identification, barcode scanning, license plate scanning, meter reading, and ID scanning. Their market position is strong with over 10 years of experience and a global customer base including Fortune 500 companies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates translation and consent management tools. However, the site suffers from a lack of HTTPS due to an invalid SSL certificate, resulting in a basic security posture. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and incident response policies are not evident. Overall, the website is content-rich and professionally designed but requires critical security improvements to protect user data and enhance trust.

B

Bose

bose.com

40

Bose.com is the official e-commerce website of Bose Corporation, a leading premium audio equipment brand. The site offers a wide range of products including headphones, earbuds, speakers, soundbars, and home theater systems, targeting consumers seeking high-quality audio solutions. The business model focuses on direct-to-consumer sales supported by comprehensive customer service and product support. The website demonstrates a strong brand presence with consistent messaging and professional design, reflecting Bose's market position as a trusted leader in the audio retail sector. Technically, the website is built on Salesforce Commerce Cloud, hosted on AWS infrastructure, and integrates multiple modern marketing and analytics technologies such as Google Tag Manager, Bazaarvoice, Qualtrics, and Forter. While the site is mobile-optimized and accessible, performance is somewhat slow, and there is room for improvement in technical implementation, particularly in SSL configuration and security headers. From a security perspective, the site currently lacks a valid SSL certificate, which is a critical issue impacting user trust and data protection. No security headers are detected, and advanced security policies or incident response information are not publicly available. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. WHOIS data confirms the domain's legitimacy and consistency with the brand's identity. Overall, Bose.com is a professionally managed, content-rich e-commerce platform with strong business credibility but requires urgent improvements in SSL and security configurations to enhance its security posture and user trust.

P

pc-web: it-solutions GmbH

pc-web.at

21

pc-web: it-solutions GmbH is an Austrian IT service provider specializing in IT solutions, software development, cloud computing, telephony, and online solutions. The company targets businesses and organizations seeking tailored and secure IT services. Their market position is that of an established regional provider with a medium-sized operation founded in 2023. The website presents a professional and comprehensive overview of their services, supported by customer testimonials and structured data indicating legitimacy. Technically, the website uses modern JavaScript frameworks and analytics tools but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Strategic improvements in SSL configuration and security headers are recommended to enhance trust and protect users.

The website sber.at currently hosts a default Plesk server page with minimal content focused on describing the Plesk hosting panel software. It does not represent a distinct business or service and lacks any custom branding or business-specific information. The technical infrastructure is basic, served by nginx without HTTPS enabled, and hosted via easyname.eu nameservers. The site lacks performance optimization and SEO features. Security posture is weak due to the absence of SSL/TLS, security headers, and privacy policies. No contact or business information is provided, limiting trust and credibility. Overall, the site appears to be a placeholder or default hosting page rather than an active business website.

CEVA Logistics is a leading global supply chain management and freight company offering a broad range of logistics services including air, ocean, ground, contract logistics, and customs brokerage. The company operates worldwide with a large workforce and is part of the CMA CGM Group. The website demonstrates a mature digital presence with comprehensive content, multiple language support, and active news and career sections. Technically, the site uses modern frameworks like Nuxt.js and Vue.js and is hosted behind Cloudflare, but critically lacks a valid SSL certificate and proper HTTPS configuration, which severely impacts its security posture. Security headers are well implemented, but the absence of TLS protocols and session resumption reduces security effectiveness. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain trust.

C

CommScope

commscope.com

36

CommScope is a leading global provider of broadband, enterprise, and wireless network infrastructure solutions. The company offers a broad portfolio of products and services including broadband access systems, cable assemblies, connectors, networking systems, and video processing solutions. Their website reflects a mature enterprise with a strong market position, targeting telecommunications professionals, enterprises, and government agencies. The site is well-structured, multilingual, and professionally designed, showcasing their extensive product lines and corporate information. Technically, the website uses modern JavaScript frameworks, cloud hosting via Cloudflare, and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture and user trust. Security headers are partially implemented but lack completeness, and no explicit security or incident response policies are publicly disclosed. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL/TLS issues to ensure secure communications and compliance.

H

Helvetia Versicherungen

helvetia.de

40

Helvetia Versicherungen is a well-established insurance provider in Germany offering a broad range of insurance and pension products for private and corporate customers. The company emphasizes customer service, sustainability, and innovative insurance solutions, supported by over 160 years of experience. The website is professionally designed, content-rich, and targets German-speaking customers with clear navigation and comprehensive service information. Technically, the site uses Adobe Experience Manager CMS and Cloudflare for DNS and CDN services, with Adobe DTM for marketing analytics. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Security headers are properly configured, but the lack of HTTPS and modern TLS protocols is a major vulnerability. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is evident. Business credibility is high, supported by awards and customer reviews. Overall, the site is trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.

R

Raiffeisen Bank International

stepicceecharity.org

53

Stepic CEE Charity is a non-profit initiative founded in 2006 by Herbert Stepic, affiliated with Raiffeisen Bank International AG, focused on supporting socially disadvantaged groups in Central and Eastern Europe through education and social projects. The website presents a professional and well-structured digital presence with clear donation calls and comprehensive privacy compliance via OneTrust CMP. However, the absence of a valid SSL/TLS certificate significantly undermines the security posture, exposing users to risks. The charity demonstrates good trust indicators and business credibility but lacks published terms of service and phone contact details. Overall, the digital infrastructure uses modern technologies such as Vue.js and Adobe Experience Manager, hosted on Fastly, with moderate user tracking and advertising transparency.

SALT. Optics is a premium eyewear brand specializing in high-quality sun and optical glasses, leveraging Japanese craftsmanship and luxury materials. The company operates primarily through an e-commerce platform powered by Shopify, targeting consumers who value timeless design and superior lens technology. The website is professionally designed with clear navigation, product showcases, and informative content including blog posts and company philosophy. Technically, the site uses modern web technologies and integrates multiple marketing and analytics tools, but lacks a valid SSL certificate, which critically impacts its security posture. Security headers are well implemented, but the absence of HTTPS undermines user trust and data protection. Privacy and cookie policies are present, indicating some compliance with GDPR and related regulations. Overall, the site presents a moderate risk due to missing HTTPS, but otherwise demonstrates a solid business and technical foundation.

W

wild GmbH

wild.as

29

wild GmbH is a technology and design company specializing in creating award-winning digital products such as websites, apps, and digital content for modern brands, startups, and enterprises. The company positions itself as an innovative partner combining design, technology, and business strategy. Their website reflects a professional and consistent brand image with extensive project showcases and active social media presence. Technically, the website uses modern JavaScript libraries and image CDN services but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. The absence of HTTPS and security headers exposes the site to potential risks. Privacy compliance is partially addressed with a cookie consent banner and privacy policy, though GDPR compliance is not clearly demonstrated. No direct contact information is provided on the site, which may affect user trust. WHOIS data confirms the domain is active and registered without privacy protection, consistent with the business profile. Overall, the site is content-rich and professionally designed but requires urgent security improvements to meet modern standards.

W

Worthington Enterprises

worthingtonindustries.com

38

Worthington Enterprises is a publicly traded enterprise specializing in the acquisition, design, and manufacturing of innovative building and consumer products, as well as sustainable energy solutions. The company recently separated from Worthington Steel, forming two independent entities focused on differentiated growth strategies. The website reflects a professional corporate presence with clear branding and investor relations information. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics but suffers from a critical lack of valid SSL/TLS configuration, exposing users to security risks. Privacy and cookie policies are well implemented, supporting GDPR compliance. Overall, the site is content-rich and professionally maintained but requires urgent security improvements to protect visitors and maintain trust.

H

H World International

deutschehospitality.com

40

H World International is a large hospitality group operating multiple hotel brands with a focus on cultural diversity, tradition, and sustainable growth. The company targets hotel guests, business partners, franchisees, and job seekers, offering hotel accommodation, franchising, business travel, and development services. The website is professionally designed with clear navigation and good content relevance, supporting the company's market position as an established international hospitality group. Technically, the site uses standard web technologies and is hosted on Amazon AWS, but lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture significantly. Privacy compliance is supported by a comprehensive privacy policy, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust.

D

dm drogerie markt

dm-drogeriemarkt.at

40

dm drogerie markt is a leading retail company in Austria specializing in drugstore products with a strong online presence. The website serves as a platform for product search, store availability, and customer engagement, targeting Austrian consumers. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple third-party services for analytics, marketing, and user consent management. However, the website currently lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are well implemented, but the absence of HTTPS severely impacts the overall security posture. Privacy compliance is minimal with no detected privacy or cookie policies in the provided content. Business credibility is strong given the consistent domain registration and professional website design.

Wind Tre S.p.A. is a major Italian telecommunications operator offering a comprehensive range of services including mobile telephony, fiber and fixed internet, energy supply, and insurance products. The company targets both private consumers and business customers in Italy, positioning itself as a one-stop provider for connectivity, energy, and insurance needs. The website reflects a mature, well-established enterprise with a strong brand presence and extensive service offerings. Technically, the site is built on Adobe Experience Manager with integrations of Adobe Target and Google Tag Manager for marketing and analytics. However, the main domain lacks a valid SSL/TLS certificate and does not support HTTPS, which is a significant security concern. The site includes comprehensive legal, privacy, and cookie policies, demonstrating good privacy compliance and transparency. Contact information is clearly provided, including verified company emails, phone numbers, and social media channels. Overall, the security posture is basic due to missing HTTPS and related configurations, but the business credibility and content quality are high.

W

Weingut Michael Schroth

weingut-schroth.de

34

Weingut Michael Schroth is a small regional winery located in Grünstadt-Asselheim, Germany, specializing in a variety of wines including Winzersekt, Chardonnay, and Riesling. The website serves primarily as a digital presence showcasing the winery's offerings and regional identity. The business model focuses on wine production and sales targeted at wine consumers interested in the Pfalz region's specialties. Technically, the website uses basic HTML, CSS, JavaScript, and Adobe Typekit fonts, with jQuery for scripting. Hosting appears to be provided by Ionos, but the site suffers from slow load times and minimal mobile optimization. Security posture is weak, with no SSL/TLS certificate, no HTTPS, and absence of security headers or DNS security features. Privacy and compliance policies are missing, and no contact information is provided on the landing page, limiting user trust and regulatory compliance. Overall, the site is functional but lacks modern security and privacy standards, which poses risks to visitors and the business's credibility.

I

IOSBET

shelfsailor.com

32

The website shelfsailor.com operates as an online slot gaming platform branded as IOSBET, targeting the Indonesian market. It offers online slot games with a system designed to increase winning chances daily. The site positions itself as a new entrant in the online gaming sector with a focus on Indonesian users, leveraging affiliate partnerships with established e-commerce platforms like Lazada. The business model revolves around online gaming services with promotional and affiliate marketing components. Technically, the site employs modern JavaScript frameworks including React and uses extensive tracking and analytics tools from Alibaba's ecosystem, indicating a moderate level of digital maturity. However, the site suffers from slow performance due to large page size and numerous resources, and it lacks mobile optimization and accessibility features. Security-wise, the absence of HTTPS and security headers significantly weakens its posture, exposing users to potential risks. No privacy or cookie policies are present, and contact information is missing, which raises compliance and trust concerns. Overall, the site is accessible without WAF or security challenges but requires urgent improvements in security, privacy compliance, and performance to enhance user trust and operational integrity.

K

Kering Eyewear S.p.A.

keringeyewear.com

40

Kering Eyewear S.p.A. is a prominent luxury eyewear company operating under the global Kering Group umbrella. Established in 2014 and headquartered in Italy, it designs, develops, and distributes eyewear for a portfolio of 14 prestigious brands, including proprietary and licensed luxury houses. The company positions itself as a market leader in the luxury eyewear segment, targeting discerning consumers and industry partners. The website reflects a high level of professionalism with rich multimedia content, clear navigation, and consistent branding across multiple languages and regions. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, hosted on Microsoft Azure infrastructure. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented, indicating good GDPR compliance. Contact information is available, though no phone numbers are explicitly provided. Overall, the site demonstrates strong business credibility but requires urgent security improvements to meet modern standards.

G

Geiger.com

geiger.com

40

Geiger.com is a large, family-owned US-based distributor specializing in promotional products, corporate gifts, and imprinted apparel. The company positions itself as the largest family-owned promotional product distributor in the US, serving a broad business audience with a comprehensive product catalog and services including custom products, kitting, corporate programs, and expos. The website reflects a mature digital presence with extensive product categories, client brand logos, and active social media engagement. Technically, the website uses modern JavaScript frameworks such as Vue.js and Bootstrap 5, hosted likely on AWS infrastructure. Marketing and analytics tools include Google Tag Manager, Google Analytics, Osano CMP for consent management, Filestack for file handling, and Searchspring for search functionality. The site is mobile-optimized and accessible with good SEO practices, though performance metrics indicate slow loading. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. While some security headers are present, key TLS protocols and best practices like HSTS, OCSP stapling, and session resumption are not enabled. No incident response or vulnerability disclosure policies are found. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professionally designed and credible from a business standpoint but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL/TLS deployment, enabling modern security headers and protocols, implementing cookie consent, and publishing incident response information.

O

Oskar Schmidt GmbH

schmidtauto.at

33

Autohaus Schmidt, officially Oskar Schmidt GmbH, is a well-established automobile dealership and service provider based in Salzburg, Austria, with a history dating back to 1928. The company operates multiple locations and offers a wide range of services including new and used car sales, vehicle rental, servicing, repairs, and financing. Their market position is strong within the regional transportation sector, supported by authorized partnerships with major car brands such as Ford, Volvo, Peugeot, and Citroën. The website reflects a professional and consistent brand image targeting car buyers and service customers in Salzburg and surrounding areas. Technically, the website uses modern JavaScript, AWS CloudFront CDN, and Google Tag Manager for analytics and marketing. However, it lacks HTTPS, which is a critical security deficiency. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, indicating a good level of privacy awareness. Performance data is unavailable, but the site appears mobile-optimized and SEO-friendly. From a security perspective, the absence of SSL/TLS encryption severely impacts the site's security posture, exposing users to potential risks. Other security headers and best practices are partially implemented but overshadowed by the lack of HTTPS. No incident response or vulnerability disclosure policies are present. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, while the business and website demonstrate professionalism and good content quality, the critical lack of HTTPS significantly lowers the security score and overall risk profile. Strategic improvements in security infrastructure are essential to protect users and maintain trust.

B

Bombardier

bombardier.com

52

Bombardier is a mature enterprise specializing in the design, manufacture, and maintenance of ultra-long-range business jets and specialized defense aircraft. The company targets discerning individuals, businesses, and governments globally, maintaining a strong market position with a comprehensive portfolio of aircraft and support services. The website reflects a high level of professionalism, rich multimedia content, and consistent branding aligned with Bombardier's industry stature. Technically, the site leverages Drupal CMS, modern JavaScript frameworks, and monitoring tools like New Relic, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. However, the absence of HTTPS and security headers presents significant vulnerabilities. Overall, the domain registration is consistent with the business history, reinforcing legitimacy. Strategic improvements in SSL deployment and security configurations are essential to enhance trust and compliance.

dormakaba Holding is a globally recognized leader in smart and secure access solutions, providing a comprehensive range of products and services for secure access to buildings and rooms. The company operates internationally with a strong presence in multiple countries and serves diverse markets including security, technology, and manufacturing sectors. The website reflects a mature, well-established business with a clear focus on innovation, sustainability, and customer engagement. Technically, the site leverages modern frameworks such as Vue.js and Contentful CMS, ensuring a responsive and user-friendly experience across devices. Security measures are robust with multiple security headers and a comprehensive content security policy, although the SSL certificate is currently invalid, which is a critical issue that needs immediate attention. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, dormakaba demonstrates a strong security posture and business credibility, supported by transparent investor relations and active communication channels.

H

Hartlauer Handelsgesellschaft m.b.H.

hartlauer.at

40

Hartlauer Handelsgesellschaft m.b.H. operates a large retail and e-commerce platform focused on optics, photography, mobile phones, and hearing aids in Austria. With over 160 physical stores and a comprehensive online shop, it serves a broad consumer base with premium products and services including free eye tests and hearing aid trials. The website is professionally designed with excellent content quality and user experience, supported by a modern technology stack primarily based on Salesforce Commerce Cloud and integrated marketing and analytics tools. However, a critical security issue is present due to the lack of a valid SSL certificate and absence of HTTPS, severely impacting the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and the company demonstrates strong business credibility with clear contact information and trust seals. Strategic security improvements are urgently needed to protect user data and maintain trust.

D

d:code:it Ltd

dcodeit.com

38

d:code:it Ltd is a digital design and development studio specializing in transforming enterprises, particularly in the financial services sector. The company targets global banks and enterprises, offering innovative financial solutions, trading applications, and management consulting services. Their market position is that of a niche, specialized provider with a strong focus on complex UI and fintech applications. The website reflects a professional and consistent brand image with detailed leadership information and a comprehensive privacy policy demonstrating GDPR compliance. Technically, the website is hosted on AWS infrastructure using Amazon S3 and CloudFront CDN, with modern JavaScript and SVG animations enhancing user experience. However, the site suffers from an invalid SSL certificate and lack of modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed in the policy, but no explicit cookie consent mechanism is present. Overall, the site is functional and professional but requires urgent security improvements to ensure trust and compliance.

L

Life and Career Design Consulting GmbH

lifeandcareer.eu

40

Life and Career Design Consulting GmbH is a small Austrian consulting firm specializing in career development and interim management services. Their website, built on Squarespace, offers bilingual content in German and English, targeting professionals seeking coaching, training, and assessment services. The company maintains a professional online presence with clear contact information and active social media channels. Technically, the website uses standard Squarespace infrastructure and Typekit fonts but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The absence of privacy and terms of service policies indicates gaps in compliance. Security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Overall, the business appears legitimate and consistent with its domain registration data, but improvements in security and privacy compliance are necessary to enhance trust and user safety.

M

marketmind GmbH

marketmind.at

24

marketmind GmbH is a well-established marketing consulting agency founded in 1996 and based in Vienna, Austria. It operates primarily in the DACH region, serving clients across sectors such as energy, transport, banking, telecommunications, government, non-profit, retail, hospitality, and media. The company offers data-driven marketing research, consulting, and data science services with a strong focus on UX research, branding, segmenting, and customer experience. The website reflects a mature digital presence with detailed team profiles, client testimonials, and comprehensive service descriptions, positioning marketmind as a leading player in its market segment. Technically, the website is hosted on Microsoft IIS with ASP.NET technology and uses Cloudflare for DNS and nameservers. The site employs modern web technologies such as JSON-LD structured data, WebP images, and custom fonts. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. Performance metrics are not available, but the site is mobile-optimized and accessible with good SEO practices. From a security perspective, the absence of HTTPS and TLS protocols severely impacts the security posture. While some security headers like X-Content-Type-Options are present, the lack of HSTS, OCSP stapling, and session resumption mechanisms indicates room for significant improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR compliance indicators. The site uses marketing and analytics tools such as Google Analytics and LinkedIn Insight Tag with transparent disclosures. Overall, marketmind GmbH presents a professional and trustworthy business with excellent content quality and business credibility. The main risk lies in the missing HTTPS configuration, which should be addressed urgently to protect user data and improve trust. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and maintaining ongoing compliance with privacy regulations.

C

Campofrío Food Group, S.A.U

campofrio.es

40

Campofrío Food Group, S.A.U is a well-established Spanish company specializing in the production and commercialization of meat products. It holds a strong market position in Spain with a diverse portfolio of brands and products, focusing on quality, innovation, and sustainability. The website demonstrates a high level of content quality, with detailed product information, recipes, and corporate social responsibility initiatives. Technically, the site uses modern frameworks such as Next.js and Drupal CMS, ensuring good mobile optimization and user experience. However, the absence of a valid SSL certificate significantly impacts the security posture, reducing the overall security score. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature approach to data protection. The company is part of the larger Sigma Alimentos group, with several subsidiary brands and dedicated service platforms. Overall, the website is professional and trustworthy but requires urgent attention to its SSL configuration to enhance security and user trust.

A

AMETEK Grabner Instruments

grabner-instruments.com

40

AMETEK Grabner Instruments is a medium-sized business specializing in the development and manufacturing of automatic petroleum testing equipment, including vapor pressure testers, flashpoint testers, and fuel analyzers. The company operates globally with a strong market position as an innovator and thought leader in fuel analysis technology. Their website reflects a professional business model focused on manufacturing, sales, training, and technical support services for the petroleum and energy sectors. Technically, the website uses ASP.NET technology with JavaScript libraries and is hosted on AWS infrastructure. While the site is mobile optimized and has good content quality, it suffers from slow load times and lacks a valid SSL certificate, which impacts security posture significantly. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Security best practices are partially implemented but require urgent improvements, especially regarding HTTPS and security headers. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate entity.

OeKB Gruppe is a central financial service provider based in Austria, supporting the Austrian economy with a broad range of services including export financing, capital market services, energy market services, development financing, and tourism services. The website presents a professional and comprehensive overview of their offerings, targeting Austrian businesses, investors, and financial institutions. The company holds a strong market position as a key financial institution in Austria. Technically, the website uses a custom CMS with JavaScript and Bootstrap frameworks, but suffers from slow load times and lacks modern security configurations such as a valid SSL certificate and TLS protocols. Mobile optimization and SEO are good, but accessibility is basic. The website lacks cookie consent mechanisms and some security best practices. Security posture is weak due to the absence of HTTPS, no security headers, and missing email authentication records like DMARC. DNSSEC is disabled and CAA records are malformed. These issues pose significant risks to user data confidentiality and trust. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect users and comply with modern standards. Strategic recommendations include implementing HTTPS, enabling security headers, and adding privacy and cookie consent mechanisms.

A

Austria Wirtschaftsservice Gesellschaft mbH

awsg.at

40

Austria Wirtschaftsservice Gesellschaft mbH (aws) is the official Austrian federal promotional bank dedicated to fostering innovation and economic growth within Austria. The website serves as a comprehensive portal for Austrian entrepreneurs and companies seeking funding, subsidies, and advisory services. It offers a broad range of programs targeting startups, SMEs, and established companies, with a strong emphasis on energy, sustainability, and internationalization. The site is well-branded, professionally designed, and provides clear navigation and rich content in German, targeting primarily Austrian businesses and innovators. Technically, the website is built on TYPO3 CMS and uses Apache as the web server. It integrates Matomo analytics for privacy-compliant user tracking and employs modern web technologies including CSP and various security headers. However, the SSL/TLS configuration is currently invalid or missing, which is a critical security concern. Performance metrics are not available, but the site appears mobile-optimized and accessible. From a security perspective, while several security headers are implemented, the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security posture. No explicit security or incident response policies are found on the site. Privacy compliance is strong, with a clear cookie consent mechanism and a comprehensive privacy policy in place, aligned with GDPR requirements. Overall, the site is a credible and professional government service platform with excellent content and user experience but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and improve trustworthiness.

R

RAITEC GmbH

grz.at

38

RAITEC GmbH is a prominent IT service provider specializing in delivering high-tech infrastructure and operational services to the financial sector in Austria. The company supports a large-scale environment with over 50 million daily online transactions, 35,000 client workstations, and extensive data storage capabilities. Their market position is strong as one of Austria's leading IT system houses focused on finance. Technically, the website is built on Adobe Experience Manager with modern JavaScript frameworks and tracking tools, providing a professional and accessible user experience. However, the critical lack of a valid SSL certificate and HTTPS support significantly undermines the security posture. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the business credibility and content quality are high, but urgent security improvements are needed to protect user data and trust.

R

ReinZeit Handels GmbH

reinzeit.com

40

ReinZeit Handels GmbH is an Austrian retail company specializing in eco-friendly cleaning and wellness products, including microfiber cloths, cleaners, laundry detergents, and wellness aroma products. The company emphasizes social responsibility, environmental protection, and Austrian quality standards, targeting consumers interested in sustainable and socially responsible products. Their business model includes direct sales through consultants and an online shop, supported by active social media channels and marketing efforts. Technically, the website is built on WordPress with WooCommerce, using popular plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is hosted on an Austrian IP and uses Apache server technology. However, performance metrics are not available, and the site is moderately optimized for mobile devices. From a security perspective, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical vulnerability. Although some security headers like HSTS and X-Frame-Options are present, the absence of TLS protocols and strong cipher suites significantly weakens the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professionally designed and trustworthy from a business perspective but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing security best practices.

The website datentechnik.com is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and minimal user interface elements. The technical infrastructure is basic, hosted on Hetzner Online with nginx and Caddy servers, and uses third-party ad networks such as AdsDeli and Google Adsense Domains CAF. There is no valid SSL certificate, and the site does not support HTTPS, which significantly impacts security posture. Privacy compliance is minimal, with only a basic privacy policy accessible via a popup but no cookie consent or GDPR indicators. Business credibility is low due to lack of contact information or company details.