Real Estate security reports

O

ohne-makler.net

ohne-makler.net

63

ohne-makler.net is a German real estate platform founded in 2009 that enables users to sell and rent properties without brokers by publishing listings simultaneously on major portals such as ImmoScout24 and Immowelt. The website offers a comprehensive suite of services including multi-portal listing, premium exposés, legal advice, professional photography, and virtual tours, targeting private and professional real estate sellers and landlords. The platform positions itself as a cost-effective and time-saving alternative to traditional broker services with transparent pricing and extensive reach. Technically, the site uses modern JavaScript frameworks like Alpine.js and HTMX, integrates privacy-conscious analytics tools such as Matomo, and employs standard marketing and tracking technologies including Google Tag Manager and Facebook Pixel. The website is well-optimized for mobile devices, has good SEO and accessibility features, and presents a professional, trustworthy user experience. Security-wise, HTTPS is enforced with appropriate headers, but the absence of a published security policy and incident response information suggests room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and reduces trust scores, although the website content and business presence appear legitimate and professional. Overall, the site demonstrates a mature digital presence with solid privacy compliance but would benefit from enhanced transparency in security and domain registration details.

B

Bezrealitky

bezrealitky.com

47

Bezrealitky operates as a commission-free online real estate marketplace primarily serving the Czech Republic and Slovak markets, with multilingual support including English. The platform enables property owners to sell or rent their properties directly to buyers or tenants without intermediary agents, offering services such as premium profile upgrades, legal assistance, tenant credit checks, and property assessments. The company positions itself as a trusted market player with 18 years of experience and a large user base, evidenced by over 1.6 million monthly visits and more than 1.2 million satisfied customers. Technically, the website leverages modern frameworks like Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and is optimized for mobile and desktop users with fast performance and good SEO practices. Security posture is solid with HTTPS enforced and bot protection in place, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. The missing WHOIS data for the .com domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and strong brand consistency mitigate this concern. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, and publishing security policies to bolster trust and compliance.

The website 'Chaty a chalupy' serves as a basic online catalog for rental cottages and chalets in Czech mountain regions, targeting individuals seeking vacation accommodations. The business appears to be operated by Agentura BORA, a Czech entity with a domain registered since 2005, indicating a stable presence in the market. The site offers simple listings with external links to related rental sites but lacks comprehensive business or contact information. Technically, the website is minimalistic with no detected modern frameworks, CMS, or advanced technologies. There is no evidence of HTTPS enforcement or security headers, which poses risks to user data security and trust. The site also lacks privacy, cookie, and terms of service policies, indicating poor compliance with GDPR and other privacy regulations. From a security perspective, the absence of HTTPS and security policies, combined with no incident response or vulnerability disclosure mechanisms, reflects a low security maturity level. No critical vulnerabilities were detected in the provided data, but the lack of basic security controls is a concern. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website scores low on security and privacy compliance, with basic content quality and technical implementation. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trustworthiness and user experience.

A

Anklamer Wohnungsgenossenschaft eG

wg-anklam.de

47

The Anklamer Wohnungsgenossenschaft eG operates as a local housing cooperative based in Anklam, Germany, providing rental apartments and member services to the community. The website serves as a portal for housing offers, member services, and contact information, targeting residents seeking housing solutions in the region. The business model focuses on cooperative housing with a strong community orientation. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including FontAwesome and Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation and content relevance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy and well-maintained, suitable for its target audience and business purpose.

M

Mairitsch Dach GmbH

mairitsch-dach.at

63

Mairitsch Dach GmbH is a small family-owned roofing and construction business based in Poggersdorf, Kärnten, Austria. The company specializes in roofing, roof renovations, metalwork, insulation, installation of roof windows and skylights, flat roof sealing, facade cladding, and repair of snow and storm damage. The website presents a professional and consistent brand image, targeting homeowners and clients needing roofing services in the Kärnten region. The business operates with a small team and emphasizes experience and quality service. Technically, the website is built on the Mono CMS platform provided by Herold, utilizing modern JavaScript libraries and third-party services for analytics and consent management. The site is mobile-optimized and SEO-friendly with good performance metrics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website reflects a trustworthy and legitimate small business with a solid digital presence.

B

Bundesimmobiliengesellschaft

big.at

60

Bundesimmobiliengesellschaft (BIG) is a major Austrian real estate company specializing in public sector properties, particularly educational buildings and specialized real estate. The company holds a strong market position as one of the largest property owners in Austria's education sector, offering services including construction and project management, facility management, and tenant services. The website reflects a professional and consistent brand image targeting public institutions, investors, and stakeholders in the real estate and education sectors. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, and employs Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforcement, security headers, and a cookie consent mechanism, although no explicit security policy or incident response information is published. WHOIS data confirms the legitimacy and transparency of the domain registration, consistent with the company's public profile. Overall, the website is well-structured, accessible, and compliant with GDPR requirements, supporting trust and credibility.

S

Sto

stoinspires.sk

58

StoInspires.sk is a professional website operated by Sto SE & Co. KGaA, focusing on architectural inspiration and facade materials. The site showcases various projects and product lines such as StoSignature and StoColor System, targeting architects, builders, and designers primarily in Slovakia and surrounding regions. The platform supports brand awareness and product promotion through rich content and visual showcases. Technically, the site is built on Drupal 7 with Bootstrap and jQuery, integrating modern libraries for UI and analytics. Security posture is adequate with HTTPS and some best practices, but lacks comprehensive security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but missing privacy and terms pages. Overall, the site is trustworthy and professionally maintained, though improvements in compliance and security documentation are recommended.

AREA is a medium-sized Austrian company specializing in interior design, furniture, and architecture with physical stores in Salzburg, Linz, and Vienna. The company offers a combination of planning, design, and furniture sales, targeting both private and commercial customers seeking personalized interior solutions. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence with active social media engagement and newsletter offerings. Technically, the site uses the Contao CMS and modern video formats, delivering a good user experience with mobile optimization and SEO considerations. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and dedicated security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WUNSCHHAUS Architektur & Baukunst

wunschhaus.at

49

WUNSCHHAUS Architektur & Baukunst is a well-established architecture and construction firm based in Vienna, Austria, specializing in custom single-family homes with a focus on modern and classical designs. The company has a strong market position supported by a portfolio of over 569 completed houses and recognition such as the Rising Star Austria award in 2019. Their website reflects a professional and content-rich digital presence, targeting private individuals and families in the Vienna region seeking architectural services. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though lacking explicit security headers and published security policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

F

Flexiskin GmbH

flexiskin.at

55

Flexiskin GmbH is a specialized construction company focused on providing high-quality Polyurea spray coatings and waterproofing solutions for garages, parking decks, facades, and other building structures. The company holds patents for its products and positions itself as a leading expert in reactive sprayable liquid plastics within the European market. The website is built on the Wix platform, leveraging Wix's proprietary technologies and frameworks, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some Wix security hardening scripts, though explicit security headers and privacy policies are missing. The absence of visible contact information and privacy compliance documentation suggests areas for improvement in transparency and regulatory adherence. Overall, the site presents a professional image suitable for its target audience of construction professionals and building owners.

K

Kammer der ZiviltechnikerInnen Arch+Ing | Tirol und Vorarlberg

kammerwest.at

58

The website www.kammerwest.at represents the Kammer der ZiviltechnikerInnen Arch+Ing for the regions of Tirol and Vorarlberg in Austria. It serves as a professional chamber and service organization for architects and civil engineers, providing member services, continuing education, contract information, job postings, and event announcements. The site targets professionals in civil engineering and architecture as well as clients and stakeholders in the region. Technically, the site is built on a modern Nuxt.js and Vue.js framework, featuring responsive design and moderate performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

The website i-pronajem.cz operates as a niche real estate rental listing platform primarily targeting the Czech market. It offers listings for apartments, cottages, and chalets, catering to both private owners and commercial real estate agencies. The business model revolves around providing a platform for rental advertisements, positioning itself as a local player in the real estate sector since 2008. The site content is basic but relevant to its audience, with moderate branding consistency and limited trust indicators. Technically, the website uses standard HTML, CSS, and JavaScript without modern frameworks or CMS detected. Hosting is provided by VAS Hosting, a Czech hosting provider, which aligns with the domain's geographic focus. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No advanced analytics or marketing tools are evident, and tracking is limited to a visitor counter pixel. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent and legitimate, supporting the site's credibility. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website presents a functional but basic platform with significant opportunities to enhance security posture, privacy compliance, and user engagement through improved technical implementation and transparency.

Z

Zentralvereinigung der Architekt:innen Österreichs

zv-architekten.at

49

The Zentralvereinigung der Architekt:innen Österreichs is a well-established professional association representing architects in Austria. The website serves as a platform to promote architectural culture, organize awards such as the Bauherr:innenpreis, and provide information on events, exhibitions, and publications relevant to the Austrian architecture community. The organization targets architects, building owners, and architecture enthusiasts within Austria, operating primarily as a non-profit entity focused on cultural and professional development in architecture. Technically, the website is built on the Plone CMS platform, utilizing modern frontend technologies including JavaScript libraries like Slick Slider and Leaflet for interactive content. The site is mobile-optimized and presents a good user experience with clear navigation and professional design. However, some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts enhancing responsiveness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit privacy or cookie policies, nor does it offer vulnerability disclosure or incident response information. These gaps represent areas for improvement to enhance user trust and compliance with data protection regulations. Overall, the website is trustworthy and professional, reflecting the organization's reputable standing in the Austrian architectural sector. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and publishing vulnerability disclosure and incident response contacts to strengthen security posture and regulatory compliance.

nextroom.at is a well-established Austrian online platform specializing in architecture, offering a comprehensive database of architectural projects, event calendars, press reviews, and newsletters. The platform targets architects, planners, manufacturers, photographers, and architecture enthusiasts, positioning itself as a key resource in the Austrian architectural community since 1997. The website demonstrates consistent branding and high-quality content relevant to its audience. Technically, the site employs a modern JavaScript stack including jQuery, Owl Carousel, PhotoSwipe, and integrates Google services such as Analytics and reCAPTCHA. It features responsive design and cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and privacy controls in place, though additional security headers could enhance protection. Contact information is clearly presented, and partnerships with reputable architecture and government organizations bolster trust. Overall, nextroom.at presents a professional, secure, and user-friendly platform with strong compliance and business credibility.

D

DI Dr. Agnes Fedl Garten- und Landschaftsplanung GmbH

gartenplanung-fedl.at

52

DI Dr. Agnes Fedl Garten- und Landschaftsplanung GmbH is a specialized garden and landscape planning company based in Austria, primarily serving the Steiermark region including Graz and surrounding areas. The company offers comprehensive services in garden planning, landscape architecture, ecological construction supervision, and 3D visualization. The website reflects a well-established regional presence with multiple media mentions and certifications, indicating a strong market position in the landscaping and ecological planning sector. Technically, the website is built on the SIQUANDO Pro CMS platform, utilizing common web technologies such as jQuery and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, some modern security headers are missing, and explicit privacy and terms of service documents are not found, which could be improved for better compliance and trust. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks advanced security headers and formal incident response or vulnerability disclosure policies. The WHOIS data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy image suitable for its target audience of private and institutional clients seeking garden and landscape planning services. Strategic improvements in privacy documentation and security hardening would enhance compliance and user trust.

The website gartenarchitekten.at serves as a specialized platform for garden architects in Austria, providing information about garden architecture, planning, and networking opportunities. It targets both professionals in the garden architecture field and potential clients seeking garden planning services. The business model appears to be informational and promotional, focusing on connecting garden architects with clients and raising awareness about the profession in Austria. The site is small-scale and niche-focused, with content primarily in German and centered on garden architecture education and services. Technically, the website is built using the SIQUANDO Pro CMS and utilizes jQuery for client-side scripting. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. There is no evidence of modern frameworks or extensive analytics/tracking tools. The cookie consent mechanism is implemented, indicating some attention to privacy compliance, though the privacy policy is basic and located on an external domain. From a security perspective, the site lacks visible security headers and does not provide a dedicated security policy or incident response contact. HTTPS status is unknown from the provided data, which is a critical factor for security posture. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the business claims, showing no privacy protection and matching registrant information. Overall, the security maturity is low to moderate, with room for improvement in SSL configuration, security headers, and formal policies. The overall risk assessment suggests the site is legitimate and safe for general users but would benefit from enhanced security measures and clearer compliance documentation. Strategic recommendations include implementing HTTPS with strong SSL/TLS, adding security headers, publishing comprehensive privacy and security policies, and improving mobile and accessibility features to enhance user trust and compliance.

D

DI Dr. Agnes Fedl Garten- und Landschaftsplanung GmbH

freiraumarchitektur.at

50

DI Dr. Agnes Fedl Garten- und Landschaftsplanung GmbH operates a professional website focused on landscape architecture and open space planning services primarily for private clients, businesses, developers, and municipalities in Austria. The company has a strong local presence with a history dating back to 1997, offering comprehensive planning and design services that emphasize environmental protection and social-cultural needs. The website reflects a well-structured, content-rich platform with clear navigation and professional branding. Technically, the site uses SIQUANDO Pro CMS, integrates Google Analytics and AddThis for marketing and analytics, and employs jQuery for interactive elements. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and explicit security policies are absent. Overall, the site is trustworthy and professionally maintained with no signs of malicious content or blocking mechanisms.

H

HELIA & PARTNERS

heliapartners.cz

58

HELIA & PARTNERS is a small local business operating in the real estate sector in Ústí nad Labem-město, Czech Republic. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic mobile optimization and standard Wix technologies. The site lacks comprehensive privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate but could be improved by implementing security headers and ensuring strong SSL configurations. The absence of WHOIS data reduces domain trustworthiness and raises concerns about domain registration transparency. Overall, the website is functional but basic, with room for improvement in security, compliance, and business credibility.

Z

ZinCo GmbH

zinco.de

50

ZinCo GmbH is a German-based manufacturer and provider of green roof systems, fall protection solutions, and solar integration products. The company positions itself as a pioneer and leader in the green roofing industry, offering extensive and intensive green roof systems, retention green roofs, and dachdurchdringungsfreie (penetration-free) fall protection systems. Their website is professionally designed, content-rich, and targets architects, planners, construction professionals, and private customers. The company also offers seminars, planning support, and seminar room rentals, emphasizing sustainability and climate adaptation solutions. Technically, the website is built on Drupal 10 with modern web technologies, providing good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though some security best practices like explicit security policies and headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and free of suspicious content.

H

Helix Pflanzensysteme GmbH

helix-pflanzensysteme.de

58

Helix Pflanzensysteme GmbH is a specialized company focused on vertical greening systems and sustainable urban green solutions, serving architects, urban planners, and municipalities primarily in Germany. Their website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content about their services including planning, construction, and maintenance of green facades and noise barriers. The technical infrastructure is based on TYPO3 CMS, with modern web technologies and integrations such as Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with detailed policies and user consent options. Overall, the website reflects a trustworthy and credible business with a strong market position in the real estate and urban ecology sector.

D

D\D Landschaftsplanung

dnd.at

48

D\D Landschaftsplanung is a specialized landscape planning firm based in Vienna, Austria, focusing on urban green space and landscape architecture projects. The company maintains a professional web presence showcasing projects, news, and contact information, targeting clients and professionals interested in landscape architecture. The website employs a modern technical stack including Bootstrap 5 and jQuery, with responsive design and basic accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and documented incident response policies. Privacy compliance is strong with a comprehensive privacy and cookie policy in German and English. Overall, the website is trustworthy and professionally maintained, though improvements in security headers and incident response documentation are recommended.

R

Rataplan - Architektur ZT GmbH

rataplan.at

47

Rataplan - Architektur ZT GmbH is an Austrian architectural firm specializing in architectural design and project consulting services. The website serves as a portfolio and informational platform showcasing their projects and company philosophy, targeting clients seeking architectural expertise. The business operates in the real estate sector and appears to be a small-sized firm with a localized market presence. Technically, the website is built on the Contao CMS platform and uses jQuery 3.5.1 for client-side scripting. The site includes a cookie consent mechanism compliant with GDPR, indicating awareness of privacy regulations. However, the technical implementation is basic with moderate performance and limited mobile optimization. No advanced frameworks or analytics tools are detected. From a security perspective, the site uses HTTPS and implements a cookie consent banner disclosing third-party cookies. There is no evidence of security headers or explicit security policies, and no contact information or incident response details are provided. The absence of terms of service and vulnerability disclosure policies suggests room for improvement in compliance and transparency. Overall, the website is functional and moderately secure but lacks comprehensive business contact details and advanced security measures. Strategic improvements in security headers, contact transparency, and mobile optimization would enhance trust and compliance.

F

FRASEBA GmbH

fraseba.de

64

FRASEBA GmbH is a German-based company specializing in substrates, soils, and related landscaping products and services. The company targets businesses, private customers, and municipal clients, offering a broad product range including tree, roof, lawn, and plant substrates, as well as gravel, lava, and soil processing services. Their market position is that of a reliable regional supplier with industry certifications and memberships enhancing their credibility. Technically, the website employs modern web technologies, including Cookiebot for consent management and Matomo for privacy-conscious analytics, with responsive design and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive business reputation.

G

Grünwert Garten- und Landschaftsbau GmbH

gruenwert.at

45

Grünwert Garten- und Landschaftsbau GmbH is a medium-sized Austrian company specializing in landscaping, green roofing, tree and green area care, and large tree transplantation services. Established in 2014, it serves primarily the Eastern Austria region, targeting businesses and planners who require expert green environment development. The company positions itself as a reliable and competent partner with a strong focus on sustainability and environmental responsibility. Their website reflects this with professional design, clear service offerings, and comprehensive contact information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and GDPR compliance tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though additional security headers and policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is trustworthy, professional, and well-optimized for its audience.

S

SiMZim

simzim.at

55

SiMZim is a small landscape architecture and urban planning service provider based in Austria, presenting a professional website hosted on WordPress.com. The site showcases various projects, including current and completed works, targeting professionals and clients interested in landscape architecture. The technical infrastructure relies on WordPress with Jetpack and Gutenberg, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy compliance is minimal with no explicit cookie consent or GDPR compliance indicators. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

K

kosaplaner gmbh

kosaplaner.at

56

kosaplaner GmbH is a specialized general planning company operating in the construction sector, focusing on high and civil engineering as well as electrical planning. With nearly two decades of experience, the company serves commercial, public, and private clients primarily in Austria, offering comprehensive project management from concept to completion. The website reflects a professional and trustworthy business with clear service offerings and certifications that reinforce its market position. Technically, the site uses modern JavaScript libraries and Google reCAPTCHA v3 for bot protection, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is well-designed, mobile-optimized, and provides clear contact information, supporting a high trustworthiness rating.

W

WoodRocks Bau GmbH

wood-rocks.com

66

WoodRocks Bau GmbH is a medium-sized Austrian company specializing in sustainable wood construction and residential building solutions. The company emphasizes holistic, future-proof building practices with a strong focus on human and environmental integration. Their services span from initial contact and planning through prefabrication and construction to completed residential complexes. The website reflects a professional and consistent brand image, targeting a broad audience interested in sustainable living and affordable housing. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for cookie consent management, with embedded multimedia content and responsive design. The site is well-structured with good SEO and accessibility basics, although some advanced security headers are missing. The presence of HTTPS and secure forms with CSRF tokens indicates a solid baseline security posture. Security-wise, the site shows good practices such as cookie consent and encrypted communications but lacks explicit security policies or incident response information. The absence of WHOIS registration data is a concern and reduces trustworthiness, though the website content and contact details support legitimacy. No vulnerabilities or suspicious content were detected. Overall, the website scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for missing WHOIS data and security headers. Strategic improvements in security transparency and WHOIS registration verification are recommended to enhance trust and compliance.

S

Sempergreen

sempergreen.com

47

Sempergreen is a globally recognized market leader specializing in sustainable green solutions including green roofs, living walls, and ground cover. The company targets a professional audience comprising contractors, architects, roofers, landscape architects, gardeners, and civil engineers. Their business model focuses on providing direct-green products and tailored project recommendations, supported by a network of nurseries and dealers worldwide. The website reflects a medium-sized enterprise with a strong brand presence and consistent messaging aligned with environmental sustainability. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Matomo Analytics, Cookiebot for consent management, and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were explicitly detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security maturity. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further to ensure trustworthiness. Overall, the website is professional, content-rich, and user-friendly, but the domain registration inconsistency and limited security policy disclosures present moderate risks. Strategic enhancements in security governance and domain verification are recommended to strengthen trust and compliance.

HKK Landschaftsarchitektur GmbH is a German landscape architecture firm specializing in the design and planning of innovative green spaces. The company emphasizes quality, individuality, and sustainable interaction with nature and people. Their website showcases a portfolio of projects, services, and career opportunities, targeting clients such as investors, municipalities, and private individuals. The firm operates primarily in Frankfurt am Main and Dresden regions, positioning itself as a medium-sized, creative, and international team. Technically, the website is built on TYPO3 CMS with modern JavaScript enhancements, providing a good user experience with mobile optimization and clear navigation. Security-wise, the site uses HTTPS and email obfuscation but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

S

StadtLABOR – Innovationen für urbane Lebensqualität GmbH

stadtlaborgraz.at

47

StadtLABOR – Innovationen für urbane Lebensqualität GmbH is a small Austrian company specializing in sustainable and cooperative urban development. Their website presents them as an innovation lab focused on integrating climate protection, resource conservation, and innovation into urban projects and neighborhood development. The company targets municipalities, urban planners, and citizens interested in sustainable city living. Their business model revolves around consulting, project management, and community engagement in urban development. Technically, the website is built on WordPress using the Neve theme, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is professional, trustworthy, and well-branded, with active social media channels and recent content updates.

C

Carl Stahl ARC GmbH

carlstahl-architektur.com

65

Carl Stahl ARC GmbH is a medium-sized German company specializing in stainless steel cable and net systems for demanding architectural projects. Their offerings include consulting, planning, static calculations, manufacturing, and installation services targeted primarily at architects, planners, and construction professionals. The company positions itself as a reliable partner providing flexible and sustainable solutions for architectural safety and design. Technically, the website is built on the Contao CMS and uses modern JavaScript libraries and services such as Weglot for multilingual support, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices. Security-wise, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. No explicit security or incident response policies are published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

baukult

baukult.at

46

baukult is a small architecture firm specializing in historic building renovation (Altbau-Sanierung) and sustainable wood construction (Holzbau) based in Vienna, Austria. The company positions itself as a niche player focusing on urban real estate projects, offering services including architectural design, planning, expert reports, and real estate consulting. Their website reflects a professional and consistent brand image with a clear focus on their core services and target audience of property owners and investors in Vienna. The digital infrastructure is built on WordPress with modern plugins and performance optimizations, ensuring a fast and mobile-friendly user experience. Security measures include HTTPS and security plugins, though additional security headers and explicit policies could enhance their posture. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility in the regional market.

Z

ZinCo GmbH

zinco-greenroof.com

56

ZinCo GmbH is a well-established German company specializing in the manufacturing and design of green roof systems globally. The company positions itself as an international pioneer with a comprehensive product portfolio and planning tools aimed at architects, builders, and environmental planners. The website is professionally designed using Drupal 10, featuring good mobile optimization, clear navigation, and rich content including case studies and product details. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements such as enabling DNSSEC and additional security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site reflects a credible and mature business with a strong market presence in the green roofing sector.

S

SIA 1k.lv

1k.lv

60

1k.lv is a Latvian technology-driven real estate marketplace and agency offering a full spectrum of property sales services including valuation, marketing, legal support, and transaction closure. The company positions itself as a professional and licensed agent with 15 years of experience, targeting property sellers and buyers in Latvia. The website is well-structured with clear business information and contact details, supported by structured data for SEO. Technically, the site uses modern React-based infrastructure with module scripts, Google Fonts, and integrates with services like Supabase and Google Analytics. Security posture is good with HTTPS and a strict Content Security Policy, though the use of 'unsafe-inline' and 'unsafe-eval' in CSP reduces security effectiveness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or Terms of Service page. Overall, the site is professional, trustworthy, and well-optimized for its market, but could improve security and compliance aspects.

G

GruenstattGrau Forschungs- und Entwicklung GmbH

gruenstattgrau.org

43

GruenstattGrau Forschungs- und Entwicklung GmbH operates the website gruenstattgrau.org as a professional association focused on building greening in Austria. The site serves as an information hub for different types of building greening, technical knowledge, and showcases examples through galleries. It targets professionals and enthusiasts in the green building sector, providing networking opportunities and news updates. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, offering a good user experience with responsive design and clear navigation. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic, with a privacy policy linked in the imprint but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche, though improvements in security and privacy compliance are recommended.

G

GRÜNSTATTGRAU

gruenstattgrau.at

56

GRÜNSTATTGRAU is an Austrian research and innovation laboratory specializing in building greening, including roof, facade, and interior greening solutions. Positioned as Austria's competence center for building greening, it offers a range of services such as consulting, certification, education, and networking to support sustainable urban development. The website reflects a professional and consistent brand image, targeting professionals and stakeholders in urban sustainability and green infrastructure. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

C

ClayTec GmbH & Co. KG

claytec.de

53

ClayTec GmbH & Co. KG is a medium-sized, family-owned German company specializing in the production and distribution of sustainable clay-based building materials. With over 40 years of experience, the company positions itself as a leader in circular and climate-friendly construction solutions, targeting construction professionals, architects, and environmentally conscious consumers. The website reflects a professional and comprehensive digital presence, offering detailed product information, application techniques, and a partner network. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

B

BESCO - Berliner Steincontor GmbH

besco-gmbh.de

42

BESCO - Berliner Steincontor GmbH is a German-based company specializing in supplying natural stone products for public and private construction projects. With over 20 years of experience, the company offers tailored natural stone solutions under the belgrano® brand, supporting clients from planning through project completion. Their target audience includes municipalities, private builders, architects, and landscape architects. The website is professionally designed, multilingual, and provides comprehensive product and project information alongside clear contact options. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes SEO and tracking tools such as Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site reflects a mature digital presence with good business credibility and compliance awareness.

D

DGNB GmbH

dgnb-system.de

56

DGNB GmbH operates as a leading non-profit organization specializing in sustainability certification for buildings and urban districts, positioning itself as a global benchmark in sustainable building practices. The website provides comprehensive information about the DGNB certification system, its benefits, criteria, and processes, targeting professionals and organizations in the construction and real estate sectors. The company offers certification services, educational programs, and consulting to promote sustainable building standards. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and is hosted on agenturserver infrastructure, delivering a well-structured, mobile-optimized, and SEO-friendly user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a mature digital presence with strong business credibility and trust indicators.

D

DGNB GmbH

dgnb-akademie.de

57

DGNB GmbH operates the DGNB Akademie, a central platform dedicated to education and certification in sustainable building and real estate management. The company offers a broad range of training programs, seminars, and certifications recognized nationally and internationally, targeting professionals in architecture, construction, and real estate sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted on agenturserver infrastructure, indicating a stable and modern setup. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Overall, the site demonstrates high business credibility with clear contact information, trust signals like testimonials and certifications, and compliance with GDPR and cookie regulations. No blocking or WAF interference was detected, allowing full content accessibility.

K

Kiinteistö Oy Ideapark Ab

ideapark.fi

45

Ideapark.fi represents a Finnish real estate company specializing in operating shopping centers across multiple Finnish cities including Lempäälä, Oulu, and Seinäjoki. The website serves primarily as a landing page directing visitors to regional subdomains for each shopping center location. The business is well established with a domain age of over 17 years and a registrant organization that matches the website's business focus and geographic location. From a technical perspective, the website employs basic modern web technologies including Google Analytics, Google Tag Manager, and Adobe Typekit fonts. Hosting and DNS infrastructure leverage Amazon AWS services, indicating a reliable hosting environment. However, the site lacks advanced CMS or frameworks and shows minimal content and interactivity on the main page. Security posture is limited with no visible security headers, no published privacy or cookie policies, and no explicit HTTPS verification in the provided data. The site uses tracking and advertising pixels without visible consent mechanisms, which may raise privacy compliance concerns under GDPR. No contact emails or phone numbers are present on the homepage, though WHOIS data provides a physical address. Overall, the website is functional and consistent with the business it represents but requires improvements in privacy compliance, security best practices, and richer content to enhance trust and user experience.

I

ISOTRA

artosi.cz

47

The website www.artosi.cz represents a Czech company specializing in the design, manufacture, and sale of advanced bioclimatic pergolas under the ARTOSI brand, developed by ISOTRA, a recognized leader in shading technology. The site showcases detailed product information, references, and accessories, targeting homeowners and businesses seeking high-quality outdoor shading solutions. The technical infrastructure includes modern web technologies such as Google Tag Manager, YouTube embeds, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and comprehensive privacy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance disclosures.

L

Lattianvalu- ja Rakennuspalvelu Kuula Oy

kuulaoy.fi

43

Lattianvalu- ja Rakennuspalvelu Kuula Oy is a Finnish construction company specializing in floor casting and concrete works, operating primarily in the Ylivieska region and surrounding areas. The company has a solid regional presence with a workforce ranging from 6 to 15 employees seasonally and a significant volume of concrete work annually. Their website reflects a professional image with clear branding and detailed business information, targeting construction clients and partners in Finland. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts and Google Analytics for tracking. While the site is mobile-optimized and SEO-friendly, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding standard security headers and incident response information. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and transparency.

M

MVR-Yhtymä Oy

mvr-yhtyma.fi

47

MVR-Yhtymä Oy is a Finnish construction company with a strong regional presence, specializing in industrial construction, public contracting, housing production, and turnkey construction projects. The company emphasizes quality, sustainability, and creating living spaces that go beyond mere buildings. Their market position is supported by over 35 years of experience and multiple certifications, positioning them as a trusted partner in the Finnish construction sector. The website reflects a professional image with clear service offerings and project references. Technically, the site is built on WordPress with Bootstrap and modern web technologies, ensuring good mobile optimization and user experience. Analytics tools such as Google Analytics and Tag Manager are used for user tracking, though privacy compliance could be enhanced with cookie consent mechanisms. Security posture is adequate with HTTPS enabled, but could benefit from additional security headers and DNSSEC implementation. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

DGNB GmbH

dgnb-navigator.de

49

DGNB GmbH operates the DGNB Navigator, a specialized online platform dedicated to sustainable building products. The platform connects manufacturers providing detailed sustainability data with architects, planners, and DGNB auditors, facilitating informed product selection and integration into DGNB certification processes. The website is professionally designed, multilingual (German and English), and supported by a mature CMS (TYPO3). It hosts a large ecosystem of partners and manufacturers, reinforcing its market position as a unique sustainability-focused product database in the construction sector. Technically, the site is well-structured and mobile-optimized, though it lacks some advanced security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but could be improved with better header policies and incident response information. Overall, the site is trustworthy and serves a niche but important role in sustainable construction, with room for enhanced privacy compliance and security best practices.

Z

ZIA Zentraler Immobilien Ausschuss e.V.

zia-deutschland.de

45

ZIA Zentraler Immobilien Ausschuss e.V. is a leading German real estate industry association providing advocacy, events, publications, and networking services to stakeholders in the real estate sector. The website is professionally designed using WordPress with the Divi theme and integrates modern JavaScript libraries and Matomo analytics for user tracking. The site content is rich and relevant, targeting real estate professionals and policymakers. Security posture is good with HTTPS enforced, but lacks explicit security headers and incident response information. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and well-positioned in its industry.

Z

ZIA - Zentraler Immobilien Ausschuss

zia-innovationsradar.de

52

The ZIA-Innovationsradar website serves as a leading platform for innovative solutions in the German real estate sector, focusing on sustainability, digitalization, and investment themes. It is positioned as a key resource for industry professionals, investors, and academics interested in real estate innovation. The site presents well-structured content with a modern design, leveraging technologies like Tailwind CSS and Swiper.js to deliver a responsive and user-friendly experience. However, the technical infrastructure lacks visible advanced CMS or analytics integrations, indicating a relatively straightforward implementation. From a security perspective, the website uses HTTPS and is hosted on a known provider (kasserver.com), but lacks explicit security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of contact information and incident response channels further limits the security posture. WHOIS data is minimal, with no registrant details, which slightly reduces domain trustworthiness. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy compliance, security best practices, and transparent contact information to improve trust and regulatory adherence.

G

Graphica tisk & web s.r.o.

graphica.cz

51

Graphica tisk & web s.r.o. is a Czech Republic based small business specializing in web design, print materials, online advertising, and custom software applications. Established since 1990, the company serves a diverse clientele including developers and businesses primarily in Prague. Their business model emphasizes personalized service, free graphic proposals, and client transparency through online account tracking. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, hosted likely by Active24. The site is mobile responsive with good SEO and accessibility basics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is strong with comprehensive GDPR statements and minimal tracking. WHOIS data is missing, which lowers domain trust but the professional website content and detailed contact information support legitimacy. Overall, the site scores well in content quality and business credibility but should improve security headers and domain transparency.

T

Tilava Oy LKV

tilava.fi

42

Tilava Oy LKV is a Finnish real estate brokerage company established in 2005, offering high-quality property brokerage services. The company targets Finnish real estate clients and partners, positioning itself as an experienced and reliable player in the local market. The website reflects a professional business with clear branding and relevant content focused on real estate services. Technically, the website uses Joomla CMS with common libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or incident response contacts are present, which limits the security posture. Overall, the domain registration data is consistent with the business claims, showing a long-established domain without privacy protection, which supports legitimacy. The website is safe with no adult or questionable content detected.

C

CANABA a.s.

cvzd.cz

54

Centrum vzorových domů (cvzd.cz) is a Czech Republic based company specializing in the exhibition and sale of modern and classic family houses. Established in 2015 and operated by CANABA a.s., it positions itself as the largest permanent year-round exhibition of family houses in the country, targeting individuals and families planning to build or buy homes. The website offers detailed information about various model houses, free project documentation, and consultation services, supported by a professional and user-friendly digital presence. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and reCAPTCHA for security and analytics, and uses a cookie consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and form protections, though some security headers could be enhanced. Overall, the site demonstrates a mature digital infrastructure aligned with business goals and regulatory compliance.