Real Estate security reports

K

kABI d.o.o.

bazanekretnina.com

67

Bazanekretnina.com is a regional real estate listing platform primarily serving Serbia, Montenegro, Croatia, Slovenia, Spain, Bosnia and Herzegovina, and Italy. The platform offers a wide range of property types including apartments, houses, land, and commercial spaces for sale and rent. The business is operated by kABI d.o.o., a company established in 2007, indicating a mature presence in the regional real estate market. The website targets individuals and businesses interested in real estate transactions within the Balkan region and selected European countries. It provides multilingual support and advanced search capabilities to enhance user experience. Technically, the website employs modern web technologies including Google Fonts, Font Awesome icons, and JavaScript libraries such as Select2 and Swiper for UI components. The site is mobile optimized and uses structured data (JSON-LD) to improve SEO and search engine visibility. Hosting details are not explicitly identified, but the domain is registered with DNC Holdings, Inc. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No contact information such as emails or phone numbers is directly available on the analyzed page, which may affect user confidence and support accessibility. Overall, Bazanekretnina.com presents as a professional and regionally focused real estate platform with good content quality and technical implementation. The main risks relate to privacy compliance gaps and limited visible security policies. Strategic improvements in these areas would enhance trustworthiness and regulatory adherence.

R

Rightmove

rightmove.co.uk

62

Rightmove is the UK's leading online property portal, offering a comprehensive platform for buying, renting, and valuing properties. The website provides extensive listings including residential, commercial, and overseas properties, supported by property news and guides. It targets UK property buyers, renters, investors, and estate agents, positioning itself as a market leader in the real estate sector. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is well optimized for both desktop and mobile users, featuring responsive design and accessibility considerations. Performance appears fast with efficient content delivery. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data due to domain naming rules error is unusual but does not detract significantly from the site's legitimacy given its market presence and content quality. Overall, Rightmove demonstrates a mature digital presence with strong business credibility and user experience. However, improvements in transparency around privacy policies, security disclosures, and WHOIS data would enhance trust and compliance posture.

K

Kabi d.o.o.

agent1.si

56

Agent1.si is a professional website operated by Kabi d.o.o., offering a specialized CRM software solution tailored for real estate agencies and agents primarily in Slovenia and Southeast Europe. The platform focuses on digitalizing real estate agency operations, integrating portfolio management, project management, document handling, marketing, and AI features. The company positions itself as a leading provider in its niche with a mature domain and consistent branding. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Slick Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, serving a clear business purpose in the real estate technology sector.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.

M

Mestne nepremičnine d.o.o.

mestne-nepremicnine.si

39

Mestne nepremičnine d.o.o. is a Slovenian municipal company focused on managing and developing public markets, city parking facilities, and real estate assets of public interest in Maribor. The website presents a professional and consistent brand image, targeting local residents and businesses. The company operates with a clear municipal mandate, providing essential services to the community. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and Rank Math SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security documentation.

Nature Office is a small real estate business specializing in luxury office rentals in the Masaki area of Dar Es Salaam, Tanzania. The company emphasizes biophilic design, integrating nature into office environments to enhance employee well-being and productivity. Their market position targets businesses seeking premium office spaces with natural aesthetics and modern amenities. The website provides detailed visual content, contact information, and social media links to engage potential clients. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics for user tracking. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security. From a security perspective, the site uses HTTPS but does not implement additional security headers or publish security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance improvements, and domain registration transparency to strengthen trust and reduce risk.

T

THE ROOF | Co-Working Space

roofmaintal.com

63

THE ROOF is a coworking space provider based in Maintal, Germany, offering flexible workspaces and meeting rooms to professionals and businesses near Frankfurt and Hanau. The website is built on the Wix platform, featuring a professional design and basic SEO and accessibility features. The technical infrastructure includes common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, with error monitoring via Sentry. Security posture is moderate, with HTTPS implied but lacking explicit security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active website presence suggests a functioning business. Overall, the site is suitable for its business purpose but requires improvements in privacy compliance and security best practices.

B

brick37 Coworking

brick37.de

46

brick37 Coworking is a small-sized coworking space business located in Hanau, Germany, established around 2016. It offers flexible coworking desks, meeting spaces of various sizes including a streaming studio, and virtual office services with mail handling. The business emphasizes community building, startup support, and event hosting, positioning itself as a local hub for entrepreneurs and teams. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and lazy loading for performance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear policies and consent management. The WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is trustworthy and well-maintained.

Garten- & Landschaftsgestaltung Hain GmbH is a well-established family-owned garden and landscape construction company operating since 1945 in the Rhein-Main region of Germany. The company offers comprehensive services including garden planning, implementation, maintenance, natural stone work, and swimming pond construction, targeting private, commercial, and public clients. Their market position is strengthened by multiple awards and a strong regional presence. Technically, the website is built on WordPress with modern JavaScript libraries and includes anti-spam and cookie consent tools, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and anti-spam measures, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and provides a positive user experience.

ج

جيه إل إل

jll-ksa.com

64

The website www.jll-ksa.com represents the Saudi Arabian regional presence of JLL, a global real estate consulting firm. The site offers a comprehensive range of real estate services including property search, investment, portfolio management, technology-driven transformation, and project delivery. The content is professionally presented in Arabic, targeting corporate clients and investors in Saudi Arabia. Technically, the site is built on Adobe Experience Manager, integrates Brightcove for video content, and uses OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and domain verifications, but lacks explicit security headers and published privacy or terms policies. WHOIS data is missing or not publicly available, which raises concerns about domain registration transparency. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

J

JLL

jll.com

72

JLL is a leading global real estate services firm with a strong presence in Finland, offering comprehensive services including property investment, management, and advisory. The website reflects a professional and enterprise-grade digital presence, leveraging Adobe Experience Manager and modern analytics and consent management tools. The site is well-structured, mobile-optimized, and SEO-friendly, providing localized content tailored for the Finnish market. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service pages are not detected in the provided content. WHOIS data is unavailable, which is common for large enterprises but slightly reduces transparency. Overall, the site demonstrates a mature digital infrastructure suitable for a global real estate leader.

P

PORR Construct S.R.L.

porr.ro

55

PORR Construct S.R.L. is a Romanian subsidiary of the PORR Group, a leading European construction company with over 150 years of experience. The company specializes in building construction and civil engineering, delivering a wide range of infrastructure projects including roads, bridges, and public facilities. The website reflects a professional and well-established business with clear market positioning and a comprehensive service portfolio. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site demonstrates strong business credibility and compliance with GDPR.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.

S

Spring Studio GmbH

spring.studio

65

Spring Studio GmbH is a small German company specializing in garden design, planning, construction, and maintenance services primarily targeting private clients in Berlin. Their website is professionally designed using Squarespace, featuring modern technologies such as embedded YouTube videos, Google Tag Manager, Facebook Pixel, and multilingual support via Weglot. The company maintains a clear online presence with contact details, social media integration, and GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and incident response information could improve their resilience. Overall, the website reflects a trustworthy and credible business with good technical implementation and privacy compliance.

AF Hausbau is a well-established regional construction company in Germany specializing in turnkey solid houses with a strong emphasis on customer collaboration and customized solutions. The company operates multiple subsidiaries covering residential, commercial, and engineering construction sectors, reflecting a diversified construction group. The website is built on the Contao CMS platform and uses modern JavaScript libraries to provide a responsive and user-friendly experience. While the site is well-structured and professionally designed, it lacks visible direct contact details such as phone numbers or emails on the main pages, relying primarily on contact forms. Security posture is solid with HTTPS and secure forms, but could be improved by adding security headers and explicit privacy consent mechanisms. No blocking or WAF challenges were detected, allowing full content access and analysis.

I

IFZA

ifza.com

60

IFZA is a well-established Free Zone Community based in Dubai, UAE, providing comprehensive business setup services primarily targeting SMEs, entrepreneurs, and foreign investors. The company operates on a unique B2B model, leveraging a network of professional partners and business communities to facilitate company formation and related services. The website reflects a mature digital presence with good SEO and structured data implementation, supporting its market position as a leading free zone community in Dubai. Technically, the site is built on WordPress with modern JavaScript libraries and integrates monitoring tools such as New Relic and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks advanced DNS security features like DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

G

GOLDBECK

goldbeck.de

61

GOLDBECK is an enterprise-level company specializing in integrated building solutions, offering comprehensive services from design through construction to operational services. The website reflects a professional presence targeting business clients primarily in Germany's real estate and construction sectors. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Tailwind CSS and utilizes Azure DNS for hosting infrastructure. The presence of Usercentrics for cookie consent and Google Tag Manager for analytics indicates a moderate level of digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and vulnerability disclosures suggests room for improvement. Overall, the site is accessible without WAF or blocking mechanisms, providing a good user experience and trustworthy business representation.

M

Messe München GmbH

exporeal.net

62

EXPO REAL is a leading international trade fair and conference for the real estate and investment industry, organized by Messe München GmbH. The website provides comprehensive information about the event, including ticketing, exhibitor services, conference programs, and visitor information. It targets professionals and stakeholders in the real estate sector, offering a platform for networking and industry insights. The technical infrastructure is modern, leveraging JavaScript modules, web components, and consent management tools like Usercentrics, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is strong with HTTPS enforced, no visible vulnerabilities, and good privacy practices, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, reflecting the stature of the EXPO REAL event in the European real estate market.

H

Hanse Haus

hanse-haus.ch

77

Hanse Haus is a well-established German prefabricated house provider with a strong presence in Switzerland, offering individually planned turnkey and shell houses. The company emphasizes customer satisfaction, quality, and personalized service, supported by a large workforce and a history dating back to 1929. Their website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site uses TYPO3 CMS and integrates modern analytics and cookie consent tools, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure with good privacy and security practices, supporting the company's credible market position.

F

frankfurt let‘s talk

frankfurtletstalk.de

53

frankfurt let‘s talk is a specialized event organizer focusing on ESG (Environmental, Social, Governance) challenges and solutions within the real estate and construction industries. The website promotes the second ESG conference scheduled for September 2, 2025, in Frankfurt am Main, targeting professionals, decision-makers, and innovators in the sector. The business model revolves around knowledge sharing, networking, and fostering collaboration to address climate and sustainability challenges. The site is well-branded, professionally designed, and provides comprehensive event details, speaker profiles, and program schedules. Technically, the website is built on WordPress using the Divi theme, optimized with Autoptimize and managed cookie consent via Complianz, indicating a mature digital infrastructure. The site is mobile-optimized, SEO-friendly, and uses modern libraries such as jQuery 3.7.1. Hosting appears to be with rzone.de, a known hosting provider. Performance is moderate with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. WHOIS data shows a relatively new domain consistent with the business timeline, with no privacy protection but limited registrant details. Overall, the website presents a trustworthy, professional, and compliant platform for ESG-focused real estate events, with recommendations to enhance security headers and publish incident response information to further strengthen trust and security posture.

L

Lighthouse Engineering

lighthouseeng.com

61

Lighthouse Engineering is a specialized service provider focusing on residential and commercial foundation inspections and planning. The company appears to be established since 2007, with a domain age consistent with its business history. The website is built on WordPress using the Divi theme and incorporates Yoast SEO for search optimization. The technical infrastructure includes Cloudflare DNS but lacks DNSSEC and security headers, indicating room for improvement in security hardening. The website content is professional and relevant to its target audience of property owners and developers, but lacks explicit privacy, cookie, and terms of service policies, which impacts compliance posture. Overall, the security posture is basic with HTTPS enabled but missing advanced protections and incident response information. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure and incident response contacts to enhance trust and compliance.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

S

SSP AG

ssp.ag

48

SSP AG is a leading German architectural and engineering firm specializing in integral planning, with approximately 200 employees across multiple offices in Bochum, Karlsruhe, Aachen, Berlin, and Münster. The company emphasizes attractiveness, adaptability, and energy efficiency in its projects, positioning itself as a top integrative planning office in Germany. Their website reflects a professional and modern digital presence built on WordPress, enhanced with SEO and cookie management tools, and supported by a GDPR-compliant privacy framework. The site is well-structured, mobile-optimized, and regularly updated with news and project highlights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is privacy-protected, which is common and justified for this business type, and no suspicious patterns were detected. Overall, SSP AG demonstrates a mature digital infrastructure aligned with its market position and business needs.

M

MAX Badkamers

maxbadkamers.nl

63

MAX Badkamers is a Dutch company specializing in high-quality bathroom renovations and bathroom elements. Founded in 2019, the company targets homeowners seeking safe, comfortable, and modern bathroom solutions. The website reflects a professional business with a strong customer satisfaction rating (9.2/10 from 322 reviews) and offers services such as showroom visits, free brochures, and home advice. The business operates primarily in the real estate sector, focusing on home improvement. Technically, the website is built on a modern Next.js framework with React, integrating various marketing and analytics tools including Cookiebot for cookie consent management, Google Analytics, Facebook Pixel, and Bing Ads. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and published security policies limits the security maturity. Privacy compliance is partially met with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service. No incident response or vulnerability disclosure information is published, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security best practices.

Office Planning Solutions is a small, specialized service provider focused on creative office space and facility planning primarily for real estate brokerages, corporate offices, and banking facilities. The company has a long-standing presence since 2004 and is nationally recognized for its personalized approach to office space design and strategic facility planning. The website reflects a professional business with clear contact information and relevant service descriptions, targeting businesses seeking to optimize their office environments. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DreamHost with domain registration through NameCheap. The site is mobile optimized and offers good navigation and user experience, though SEO and accessibility features are basic. No CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. There are no visible forms or input fields on the homepage, reducing immediate attack surface, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy but would benefit from improved privacy compliance and enhanced security headers. The domain registration data supports legitimacy with consistent business history and transparent registration details.

V

VDB Holidayhome

vdbholidayhome.nl

41

VDB Holiday Home is a Dutch company specializing in the sale and investment of recreational holiday homes located in scenic natural parks across the Netherlands. The company offers both new and occasion chalets, targeting individuals seeking private holiday residences as well as investors interested in combining recreation with investment. The website reflects a niche market position with a focus on quality and location. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy, with clear contact information and consistent branding, but could improve in privacy and security transparency.

G

Goedhuis

goedhuis.nl

45

Goedhuis is a Dutch company specializing in the innovative construction of affordable, sustainable, and customizable detached homes. They leverage a unique sandwich panel system to build energy-neutral houses faster and more efficiently than traditional builders. The company offers an online configurator for customers to personalize their homes and supports the sales process with a showroom in Hendrik-Ido-Ambacht. Their market position is that of an innovative and transparent builder in the Dutch residential real estate sector, targeting individuals and families seeking modern, energy-efficient homes. Technically, the website is built on WordPress with modern plugins and performance optimizations, including Yoast SEO, Google Analytics, Facebook Pixel, and WP Rocket. The site is mobile-optimized and uses HTTPS with DNSSEC enabled, indicating good security practices. However, there are areas for improvement such as implementing a cookie consent mechanism, adding Content Security Policy headers, and publishing a security.txt file for vulnerability disclosures. Overall, the website is professional, trustworthy, and content-rich, supporting a medium-sized business with a solid digital presence.

D

Daibau International d.o.o.

daibau.cz

67

Daibau.cz is a Czech Republic-based online platform specializing in connecting customers with verified construction and renovation service providers. The platform offers a comprehensive directory of service providers, project inquiry submission, price estimation tools, and customer reviews, positioning itself as the largest service platform in its market. The website demonstrates a good level of digital maturity, employing modern web technologies such as jQuery, lazy loading, Google Tag Manager, and Facebook Pixel for analytics and marketing. It also implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforcement and CSRF protection, though some HTTP security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the professional presentation and extensive content suggest a legitimate business. Overall, the site provides a user-friendly experience with good mobile optimization and clear navigation.

UNIKO Písek, s.r.o. is a Czech construction company specializing in general contracting for industrial, engineering, agricultural, civil, and residential buildings. Founded in 1992, it operates with a small team of 25 employees and holds ISO 9001 certification, indicating a commitment to quality management. The company presents a professional website with detailed project references and clear contact information, targeting clients in the Czech Republic's construction sector. Technically, the website is built on WordPress 6.7.2 using the dt-presscore theme and includes modern technologies such as jQuery and Google reCAPTCHA v3 for bot protection. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features. Hosting and domain registration are consistent with the company's location and history. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but lacks important HTTP security headers and does not publish a security policy or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable GDPR compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance measures to improve its risk posture and user trust.

A

Asental Group

asental.cz

44

Asental Group operates as a medium-sized real estate company specializing in commercial and industrial property development, sales, and leasing primarily in the Czech Republic. Their website showcases multiple real estate projects including office complexes and industrial parks, targeting investors and businesses seeking property solutions in the region. The company maintains a professional online presence with clear navigation, project details, and compliance with privacy regulations. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and well-maintained, with room for security enhancements.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

R

raumwerk ag

raumwerkag.ch

28

raumwerk ag is a Swiss-based company specializing in comprehensive and reliable construction processes, including project development, building permit procedures, realization phases, and project handover. As a total contractor and part of the RaumUnion AG group, raumwerk ag emphasizes responsible specialists, customer security, transparency, and quality execution. The company targets clients seeking trustworthy construction project management and related services in the real estate sector. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and jQuery. It uses WP Rocket for performance optimization and loads resources efficiently. The site is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration, but no security headers were detected. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were found, indicating minimal user tracking. The WHOIS data is consistent with the business claims, showing legitimacy and domain age appropriate for the company's stated history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

B

baumanager ag

baumanager.ag

48

baumanager ag is a Swiss-based architectural and construction project management company, operating as a small but specialized service provider. The company emphasizes holistic and innovative architectural solutions, coordinating project quality, costs, and timelines effectively. As a subsidiary of RaumUnion AG, it benefits from a reputable parent company association. The website is professionally designed using WordPress with modern frontend technologies, providing a good user experience and clear business information. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its target audience well, but compliance and security enhancements are recommended.

Z

Zindel United

zindel-united.swiss

53

Zindel United is a Swiss-based company specializing in sustainable architectural design and construction services. Their business model focuses on creating resource-conscious and generational building solutions, positioning them as a reputable player in the Swiss real estate and construction sector. The website reflects a medium-sized enterprise with a professional online presence, targeting clients interested in sustainable and innovative building projects. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in implementing additional security headers. Overall, the website is trustworthy, well-structured, and compliant with GDPR and Swiss data protection laws.

R

RaumUnion AG

raumunion.ch

49

RaumUnion AG is a Swiss-based company specializing in architecture and realization services, targeting institutional investors, real estate funds, private investors, public entities, foundations, and cooperatives. Their offerings include modular and flexible services for new constructions and renovations across residential, commercial, healthcare, and industrial sectors. The company positions itself as an expert with tailored project models to meet diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries like Alpine.js and jQuery, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and partner relationships.

P

PEYTON legal

peytonlegal.cz

49

PEYTON legal is a Czech Republic-based legal services provider specializing in comprehensive corporate housekeeping and transactional legal advisory services. The firm aims to be a reliable partner to its clients, focusing on corporate law and real estate legal matters. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients and corporate entities. Technically, the site is built on WordPress with modern libraries such as jQuery and Slick Carousel, and integrates Google Analytics and CookieHub for analytics and cookie consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation and trust signals mitigate some concerns. Contact is primarily via a web form, with no explicit emails or phone numbers found. Overall, the site is well-structured, GDPR compliant, and suitable for its target audience.

S

SIA Rēzeknes Namsaimnieks

reznam.lv

49

SIA Rēzeknes Namsaimnieks is a Latvian property management company focused on servicing residential and municipal properties in Rēzekne. The website provides information about their services including property maintenance, energy efficiency, procurement, and community projects such as animal shelter support. The company targets local residents and property owners, positioning itself as a regional leader in property management. The website is built on WordPress, leveraging common web technologies and hosted behind Cloudflare DNS services. The site includes client login portals and regularly updated news content, indicating active engagement with its audience. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial with a basic privacy policy present but no explicit GDPR consent tools. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

P

ProEx 2000

proex2000.cz

58

ProEx 2000 is a Czech Republic-based company specializing in roofing and construction materials and services. The website presents a professional and well-structured platform targeting homeowners and construction professionals seeking roofing solutions. The business model appears to be a mix of B2C and B2B sales with a regional focus. Technically, the website employs common modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies on the site reduce the overall trustworthiness and compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and documented incident response or security policies, which are areas for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures to improve trust and compliance.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

L

London Build

londonbuildexpo.com

67

London Build is the UK's leading and largest construction expo, attracting over 38,000 attendees, 750+ speakers, and 450+ exhibitors. The event offers a comprehensive platform for networking, knowledge sharing, and business development within the construction sector. The website is professionally designed, mobile-optimized, and provides detailed information about the event stages, speakers, and exhibitor opportunities. Technically, the site uses a modern tech stack including jQuery, ScriptJS, and CookieYes for consent management, hosted on a platform powered by ASP.events SHOWOFF CMS. Security posture is good with HTTPS enforced and bot protection cookies in use, though security headers are not visibly present and no explicit security or incident response policies are published. Privacy compliance is strong with a clear cookie consent mechanism and links to comprehensive privacy and cookie policies hosted on the parent company’s domain. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

M

Melbourne Build Expo

melbournebuildexpo.com

64

Melbourne Build Expo is a newly established but rapidly growing trade show event focused on the construction and design industry in Victoria, Australia. It is officially supported by government officials and features a large number of speakers, exhibitors, and networking opportunities. The website is professionally designed using modern web technologies and a specialized CMS platform, providing a good user experience and mobile optimization. However, the site lacks some key compliance documents such as privacy policy and terms of service, which should be addressed to improve trust and legal compliance. Security posture is adequate with HTTPS and cookie consent implemented, but could be enhanced by adding security headers and publishing a security policy. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency with the event's timeline.

S

Sydney Build Expo

sydneybuildexpo.com

64

Sydney Build Expo is a major Australian construction and design trade show, hosting hundreds of exhibitors and speakers, targeting professionals across the construction industry. The website is professionally designed, content-rich, and optimized for user experience, showcasing detailed event information, speaker profiles, and networking opportunities. Technically, the site uses modern web technologies including jQuery, FontAwesome, and Google Tag Manager, with a CMS platform SHOWOFF by ASP.events. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit privacy and security policies are missing. WHOIS data is unavailable, which raises some legitimacy concerns, but the site content and external partnerships suggest a legitimate business presence. Overall, the site is a credible and professional platform for the Sydney Build Expo event.

N

New York Build

newyorkbuildexpo.com

66

New York Build is a major construction and design trade show held in New York City, targeting professionals such as contractors, architects, engineers, developers, government officials, investors, and realtors. The event features a large number of attendees, exhibitors, and speakers, positioning itself as the largest construction and design show in New York. The website is built on the SHOWOFF CMS platform by ASP.events and uses modern web technologies including jQuery, Google Tag Manager, and Leadinfo for analytics and tracking. The site is well-structured with good navigation, mobile optimization, and accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not explicitly detected and privacy policies are missing. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the professional presentation and event branding suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and verify domain registration details.

C

Chicago Build

chicagobuildexpo.com

60

Chicago Build 2025 is a major construction and design trade show positioned as the Midwest's largest event in this sector. It attracts over 30,000 attendees, 400+ speakers, and 350+ exhibitors, offering a comprehensive platform for networking, education, and business development within the construction industry. The event is organized by Oliver Kinross Events and features multiple conference tracks and workshops. The website is professionally designed, mobile-optimized, and provides rich content about the event, speakers, exhibitors, and industry news. Technically, it uses a modern tech stack including jQuery, FontAwesome, and a proprietary CMS (SHOWOFF by ASP.events). Security posture is moderate with HTTPS implied but lacks visible security headers and privacy compliance documentation. WHOIS data is missing, raising concerns about domain legitimacy, though the site content and branding suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

N

Nineteen Events

theworkplaceevent.com

71

The Workplace Event is a UK-based professional event platform focused on workplace and facilities innovation, bringing together a diverse audience of workplace leaders, facilities managers, HR professionals, and technology experts. The event offers a comprehensive program including exhibitions, seminars, networking opportunities, and awards, positioning itself as the largest gathering of its kind in the UK. The website is well-branded and professionally designed, reflecting a mature business presence in the real estate and facilities sector. Technically, the website employs a modern tech stack including jQuery, bxSlider, and HubSpot integrations, supported by multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and Cyber Essentials certification, but could benefit from enhanced security headers and a published security policy. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing, which is unusual and slightly reduces trustworthiness. Overall, the site demonstrates a solid security and compliance posture with room for improvement in transparency and security header implementation.

M

M2C

m2c.eu

46

M2C is an established international group specializing in integrated facility management, security services, and digital innovation for building management. Operating in 13 European countries and the USA, M2C offers comprehensive services including maintenance, cleaning, security, and advanced technology solutions to optimize building operations. The company also invests in software development through its subsidiary Good Sailors, which emphasizes social responsibility by employing disabled developers. M2C recently entered the Prague Stock Exchange, signaling growth and investor interest. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Hotjar. The site is well-structured, mobile-optimized, and uses multiple languages to serve a broad audience. Security practices include HTTPS and asynchronous loading of tracking scripts, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a visible privacy policy and terms of service reduces privacy compliance scores. The WHOIS data is privacy protected, which is common but limits transparency. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy disclosures. Strategically, M2C should enhance its privacy and legal policy visibility, strengthen security headers, and maintain rigorous audits of third-party scripts to uphold trust and compliance in a competitive market.

N

Noor Jobs AB

ledigajobb.se

64

Ledigajobb.se is a Swedish job search platform operated by Noor Jobs AB, founded in 2018. The website offers a large inventory of job listings across Sweden and some international locations, targeting job seekers and employers. The platform provides career advice, guides, and recruitment advertising services, positioning itself as a significant player in the Swedish employment market. Technically, the site uses modern web technologies including Bootstrap, Google Fonts, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. It is hosted behind Cloudflare DNS and likely uses CDN services for performance. The site is mobile-optimized and implements a Progressive Web App (PWA) approach for enhanced user experience. Security-wise, the site enforces HTTPS and uses modern JavaScript libraries without visible vulnerabilities. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose security or incident response policies. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms on the homepage. The domain registration is transparent, consistent with the business location and history, and shows no suspicious patterns. Overall, the website is professional and functional but could improve in privacy and security transparency.

A

AproapeAcasă

aproapeacasa.ro

48

AproapeAcasă is a Romanian real estate platform launched recently in 2024, offering property listings, free evaluations, and professional consultancy to facilitate buying, selling, and renting homes. The website is built on WordPress with modern SEO and marketing tools, targeting individuals and businesses in Romania seeking real estate solutions. The platform positions itself as a trusted intermediary with premium promotion services and dedicated support. Technically, the site uses a solid WordPress infrastructure with Elementor and various plugins, hosted under a Romanian registrar with DNS via Cloudflare. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced privacy and security measures.

D

Delta AG

delta.at

52

Delta AG operates as a comprehensive service provider in the construction sector, offering architecture, general planning, construction management, green building, and IT services primarily in Austria. The company positions itself as a trusted partner for building projects, with a professional and consistent online presence targeting business clients in the real estate and construction industries. The website is built on WordPress with modern SEO and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates good compliance with GDPR and marketing transparency, but lacks visible direct contact information and formal security policies. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.