Würth is a well-known international supplier of industrial and craft products. The Austrian website at wuerth.at has been online for 25 years and clearly belongs to the real company. But there is a serious problem: the site does not use HTTPS. When you visit it, your connection is not encrypted, and if you enter a username and password to log in, that information is sent in plain text. For any online shop that requires a login, this is a major red flag. Most established retailers today enforce HTTPS to protect customer data. Until Würth Austria fixes this, it's not safe to create an account or place an order on wuerth.at. The company itself is legitimate, but the website's security is not. If you need to do business with Würth in Austria, consider using their phone support or another channel until the site is updated.
In plain English
This is the real Würth Austria website, but it has a critical security flaw: no HTTPS encryption. That means any login credentials you enter travel over the internet in plain text, which is dangerous. Until the company enables encryption, treat the site as unsafe to use for any task that requires a password or payment.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site does not support HTTPS at all. Any connection is unencrypted, which means passwords and other sensitive data can be intercepted in transit. For a site that requires login credentials, this is a critical security failure.
The domain is 25 years old and registered to a real company with full contact details matching the Würth brand. The WHOIS information is transparent and consistent with a long-established business.
Clean blacklists, no malware flags, and 25 years of Wayback Machine history strongly support that this is the real Würth Austria website with a consistent long-term web presence.
The site publishes an about page, contact information, social media links, and a legal disclosure (Impressum). These are strong signals that the operator is open about who they are.
Privacy policy, terms of service, and legal disclosure are all present. For an EU-based commercial site, these meet regulatory requirements for data protection and consumer rights.
Email authentication and DNS are set up correctly, and the site loads quickly. But the lack of HTTPS means the infrastructure is not securing connections, which is a significant gap.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.