High-risk security reports

Lohmann & Rauscher USA Inc. is a prominent international supplier specializing in medical devices and hygiene products, targeting healthcare professionals and patients. The company offers a broad portfolio including compression therapy, wound care, casting materials, and educational items. Their market position is strong, supported by recent acquisitions such as Unisurge International Ltd. and the teledermatology startup OnlineDoctor, indicating active growth and innovation. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, but performance data is lacking and the site is currently not secured with HTTPS, which is a critical security gap. Security posture is weak due to the absence of a valid SSL certificate and lack of advanced security headers or policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high given the detailed contact information, structured data, and active corporate communications. Overall, the site requires urgent security improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

I

IC Group A/S

icgroup.net

39

IC Group A/S is a retail company specializing in fashion brands such as Tiger of Sweden and By Malene Birger. The company was publicly traded until 2019 when it was fully acquired by Friheden Invest A/S and subsequently delisted. The website serves primarily as a repository for historical financial statements, corporate responsibility reports, and data ethics documentation. The target audience includes investors, stakeholders, and customers interested in the company's brands and corporate governance. Technically, the website is built using the One.com Web Editor CMS and hosted on One.com infrastructure, with Apache and Varnish servers. However, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a significant security concern. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, including emails, phone numbers, and physical addresses for IC Group and its brands. Overall, the website is functional but requires urgent security and privacy improvements to meet modern standards.

O

Otago Online Consulting GmbH

contentcook.at

26

Otago Online Consulting GmbH is a well-established Austrian online marketing agency specializing in SEO, SEA, social media marketing, display and video advertising, and data analytics. The company has a strong market position with a clear growth strategy including acquisitions such as Content Cook. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with no advanced headers or incident response information published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but urgently needs to implement HTTPS to improve security and trust.

A

Agenda Austria

agenda-austria.at

35

Agenda Austria is an established independent think tank based in Austria, focusing on economic and socio-political research and analysis. The organization provides a variety of content including publications, graphics, podcasts, and events aimed at policymakers, academics, and the interested public. Their market position as the first independent think tank in Austria specializing in these areas is supported by a consistent and professional online presence. Technically, the website is built on WordPress with a modern tech stack including caching, SEO optimization, and consent management tools. The site is well-structured, mobile-optimized, and offers good user experience with clear navigation and rich content. However, the SSL/TLS configuration is currently inadequate, lacking a valid certificate and modern protocol support, which poses a security risk. Security-wise, the site implements several important HTTP security headers and uses reCAPTCHA for form protection, but the absence of valid HTTPS and modern TLS protocols significantly lowers its security posture. Privacy compliance is strong, with clear privacy and cookie policies and GDPR-compliant consent mechanisms. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing domain security with DNSSEC and CAA records.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2, dnsHealth. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

H

HAAI GmbH

haai.at

40

HAAI GmbH is a medium-sized Austrian company specializing in providing innovative hardware, software, and IT services primarily targeting enterprises and small to medium businesses. The company positions itself as a trusted partner with exclusive partnerships with major technology brands such as A1, Apple, Microsoft, and Samsung, offering comprehensive device management and telecommunications solutions. Their business model focuses on B2B services including Device as a Service (DaaS), logistics, and IT security solutions. Technically, the website is built on WordPress with modern plugins and uses Cloudflare for CDN and security. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. The site implements GDPR-compliant cookie consent via Usercentrics and uses Google Tag Manager for analytics, reflecting a moderate level of privacy compliance. Overall, the website is professionally designed with good content quality and clear navigation, but the lack of HTTPS is a major risk that should be addressed promptly.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

B

B+S Banksysteme AG

bs-ag.com

40

B+S Banksysteme AG is a German-based software manufacturer specializing in banking and financial services software solutions. With over 40 years of experience, the company serves a broad range of clients including traditional banks, fintechs, and neobanks primarily in the D-A-CH region. Their offerings include core banking applications, online and mobile banking, banking APIs, and modular banking services underpinned by a ZAG license. The company maintains a medium-sized presence with subsidiaries such as B+S Banksysteme Salzburg GmbH and emphasizes customer-centric service models like Banking as a Service. Technically, the website is built on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution. While the site is well-structured, SEO optimized, and mobile responsive, it suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. The security headers are well configured, but the lack of TLS protocols and the presence of unsafe inline scripts reduce the overall security posture. From a security perspective, the site demonstrates good header policies and content security policies but critically lacks HTTPS, which exposes users to potential risks. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are present. Contact information is clearly provided, including multiple phone numbers, email addresses, and physical locations, supporting business credibility. Overall, the website presents a professional and trustworthy business front with strong market positioning in banking software. However, the lack of HTTPS significantly undermines security and trustworthiness, necessitating urgent remediation to protect user data and comply with modern security standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 17 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website headstart-marketing.de is currently a reserved domain hosted by STRATO, displaying a placeholder page with no business content or services. The domain is registered with German name servers and has no active content or contact information, indicating it is not yet operational. Technically, the site is served over HTTP without a valid SSL certificate, lacking modern security protocols and headers, which poses significant security risks. There are no privacy or cookie policies, no forms, and no analytics or tracking technologies implemented. Overall, the site is in an initial state with minimal digital maturity and poor security posture. Strategic recommendations include obtaining a valid SSL certificate, implementing security headers, and publishing essential compliance documents before launching any business operations.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website profcon.com presents a minimal online presence with only a basic HTML page containing the domain name and no additional content or metadata. The lack of privacy policies, contact information, and business details suggests the site is either under development or abandoned. Technically, the site is served by an Apache server but lacks a valid SSL certificate, resulting in no HTTPS support and a poor security posture. DNS records are configured with basic mail exchange and SPF records but lack advanced security features such as DNSSEC or CAA. Overall, the site demonstrates very low digital maturity and minimal business credibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 18 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website cswg.com is currently inaccessible due to a Web Application Firewall (WAF) protection mechanism implemented by Incapsula, which blocks direct access to the site's content. As a result, no business information, contact details, or user-facing content is available for analysis. The domain is registered with consistent DNS records and mail exchange servers, indicating a legitimate registration, but the lack of SSL/TLS certificate and HTTPS support significantly reduces the site's security posture. The absence of privacy policies, cookie consent mechanisms, and terms of service further indicates a lack of compliance with common web standards and regulations. Overall, the site appears to be in a protected but inaccessible state, limiting the ability to assess its business operations or technical maturity.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

F

FinTech Connector

fintechconnector.com

40

FinTech Connector is a US-based fintech community platform that connects financial services professionals, organizations, and fintech entrepreneurs globally to collaborate and innovate in financial services. The platform offers matchmaking, collaboration marketplaces, funding portals, and hosts fintech events to foster innovation and impact. The website is professionally designed and hosted on Squarespace, leveraging modern web technologies and social media integration to engage its target audience effectively. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Privacy and cookie policies are present but lack a full consent mechanism, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and trust.

A

Altstoff Recycling Austria

ara.at

34

Altstoff Recycling Austria (ARA) is a leading non-profit organization in Austria specializing in circular economy and recycling services, particularly for packaging, electrical devices, and batteries. The website presents comprehensive information about their services, target audiences (businesses and consumers), and their role as a market leader in Austria. The technical infrastructure uses modern web technologies such as nginx, htmx, and lazy loading, hosted on Azure DNS. However, the site lacks HTTPS, which is a critical security deficiency. Security headers are well configured, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to enable HTTPS and enhance user trust.

Canon Production Printing operates as a global leader in the production printing industry, specializing in continuous-feed, cut-sheet, and large-format printers for high-volume and specialized printing applications. The company targets business and professional customers in printing, publishing, and display graphics sectors, leveraging a B2B manufacturing and technology solutions business model. The website reflects a strong market position with comprehensive product and corporate information, supported by active social media channels and a clear corporate identity. Technically, the website is built on WordPress with a modern theme and SEO tools, indicating a mature digital infrastructure. However, performance metrics are lacking, and the site shows moderate mobile optimization and basic accessibility features. Hosting is via Microsoft Azure DNS, and the site uses common JavaScript libraries and plugins. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, severely impacting the site's security posture. Additional security features such as HSTS, DMARC, DNSSEC, and advanced security headers are missing, exposing the site to potential risks. The site does implement cookie consent mechanisms and has a vulnerability disclosure policy, indicating some security awareness. Overall, while the business and content quality are excellent, the security shortcomings present significant risks. Strategic improvements in SSL/TLS deployment and security hardening are essential to protect the brand and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 15 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.