Medium-risk security reports

Eventim B2B operates a professional ticketing platform business in Norway, part of the larger CTS Eventim group, Europe's leading live entertainment and ticketing company. The website presents multiple ticketing solutions tailored for event organizers, festivals, and venues, emphasizing robust technology and dedicated support. Their market position is strong, serving over 700,000 events annually across 26 countries. Technically, the site is built on WordPress with Elementor, optimized for SEO and mobile devices, and integrates modern analytics and marketing tools. Security posture is solid with HTTPS and security headers, though explicit security and incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site reflects a mature, trustworthy B2B service provider with room for enhanced security transparency.

Unie státních zástupců České republiky is a professional non-profit association representing state prosecutors in the Czech Republic. The website serves as an information portal providing organizational details, internal regulations, news, and official statements relevant to its members and the public. The site targets legal professionals and government officials within the Czech Republic. Technically, the website is built on WordPress with common web technologies such as jQuery and FontAwesome, and it integrates Facebook social media features. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. Security-wise, the website uses HTTPS and secure login forms but lacks advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain is a notable concern, limiting trust verification of domain registration details. Overall, the website is functional and professional but could improve its security posture and transparency regarding privacy and terms of service.

Softmedia s.r.o. operates the website softmedia.ai, offering AI-driven business solutions including chatbots, AI audits, tailored AI implementations, and training workshops. The company targets businesses aiming to leverage AI for competitive advantage, emphasizing rapid deployment and practical applications. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital presence. Technically, the site uses modern technologies such as Tailwind CSS and Google Fonts, is hosted with Cloudflare DNS, and employs HTTPS, ensuring good performance and security. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is solid with no evident vulnerabilities, but could be improved by adding security headers and incident response contacts. The WHOIS data shows a suspicious future domain creation date inconsistent with the company's claimed 10+ years experience, which slightly reduces trustworthiness. Overall, the site is trustworthy, professional, and business-focused, but should address compliance and minor security enhancements.

DERIVA solutions s.r.o. is a Czech Republic-based small technology company specializing in custom development of web and mobile applications, including e-commerce systems, tailored websites, and native Android/iOS apps. Their market position is that of a specialized service provider focusing on bespoke software solutions for businesses seeking to digitize or enhance their online presence. The website presents a professional image with clear service offerings and a project showcase, targeting business clients primarily in the Czech market. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and Modernizr, supplemented by Google Analytics and SpeedCurve for performance monitoring. The site is mobile optimized and has good SEO fundamentals, though accessibility is basic. No CMS or hosting provider details are evident. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing accessibility. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. The site includes a cookie consent banner, indicating some privacy awareness, but lacks visible privacy policies, terms of service, or vulnerability disclosure information. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is functional and professional but would benefit from improved transparency in domain registration, enhanced security headers, and comprehensive privacy and security policies to strengthen trust and compliance.

Dick Johnson is a Finnish e-commerce business specializing in men's cosmetics and apparel, targeting men who seek quality grooming products and stylish clothing. The company operates a Shopify-based online store with a clear market niche in men's grooming and fashion in Finland. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern e-commerce technologies and integrates multiple marketing and analytics tools, ensuring robust digital infrastructure and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust. Strategic recommendations include enhancing security transparency and contact information to further improve trust and compliance.

LYOS is a small Finnish e-commerce skincare brand launched in 2024, offering a playful and natural skincare product line. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Facebook Pixel for marketing. The brand has received industry recognition through awards and media features, positioning itself as a niche player in the clean and natural beauty market. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, LYOS presents a professional and trustworthy online presence but should improve privacy and compliance disclosures to enhance user trust and regulatory adherence.

Atria is a leading Finnish food company specializing in fresh meat, fish, poultry, and ready meals with over 120 years of experience. The website reflects a mature digital presence with comprehensive product information, recipes, and corporate content targeting consumers, professionals, and retail partners. Technically, the site uses modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, indicating a well-instrumented infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Business credibility is high, supported by consistent WHOIS data and strong brand presence. Overall, the site is professional, secure, and user-friendly, suitable for its large enterprise status.

Hartwall is a well-established Finnish beverage company specializing in a wide range of products including waters, soft drinks, specialty beverages, wines, spirits, beers, ciders, and long drinks. The website reflects a mature digital presence with a professional design and consistent branding, targeting a general and mature audience interested in beverage products. The company leverages multiple modern analytics and marketing technologies such as Piwik Pro, Facebook Pixel, Klaviyo, and Microsoft Azure Application Insights, indicating a sophisticated approach to user engagement and data-driven marketing. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers, although explicit security and incident response policies are not publicly available. Overall, the website demonstrates good compliance with GDPR and privacy regulations, with transparent cookie policies and user consent management. The domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

Supla.fi is a Finnish digital audio streaming platform operated by Sanoma Media Finland Oy, offering a comprehensive range of podcasts, radio channels, and news content. It targets Finnish-speaking audiences seeking diverse audio entertainment and information. The platform is positioned as a leading media service in Finland, leveraging a modern tech stack including Next.js and React for a performant and mobile-optimized user experience. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. No signs of content blocking or WAF interference were detected, allowing full content accessibility. Overall, Supla.fi demonstrates a mature and professional media service with high trustworthiness but should enhance privacy transparency and contact accessibility.

Netzwerk Grüne Arbeitswelt is a specialized network focused on securing skilled workers and providing career orientation within the green economy sector in Germany. The website serves as an educational and informational platform targeting professionals, educators, and stakeholders interested in workforce development for environmentally sustainable industries. The business operates as a small non-profit entity with a clear mission to support the green labor market. Technically, the website is built on WordPress with a modern theme and several plugins including Real Cookie Banner Pro for privacy compliance, Contact Form 7 for user communication, and analytics via Piwik (Matomo). The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some advanced security headers could be added to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable resource in its niche.

Fachvereinigung Betriebs- und Regenwassernutzung e.V. (fbr) is a German non-profit association dedicated to promoting the use and management of operational and rainwater. The website serves as an information hub offering publications, campaigns, and advocacy aimed at professionals such as builders, municipal employees, planners, and experts in water sustainability. The organization holds a recognized position within Germany's environmental and water management sector, providing valuable resources and membership benefits. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs common web technologies including jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with a clear navigation structure and professional design. Privacy and cookie policies are present with consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose, showing consistent and transparent domain registration without privacy protection, appropriate for a non-profit entity. Overall, the website is trustworthy, professionally maintained, and provides valuable content to its target audience. However, improvements in security headers, incident response documentation, and enhanced accessibility could further strengthen its posture.

teampenta GmbH & Co. KG is a small German consultancy specializing in digital strategy and brand consulting, aiming to foster business growth through integrated digital processes and brand development. The company targets businesses seeking comprehensive digital and branding solutions. The website is professionally designed using WordPress and Elementor, hosted by Vautron Rechenzentrum AG, and employs modern SEO and caching technologies. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is safe, business-focused, and trustworthy, though privacy compliance and security practices could be enhanced.

The Deutscher Stahlbau-Verband DSTV is a prominent German industry association representing approximately 350 medium-sized steel construction companies, suppliers, engineering firms, and academic institutions. The organization focuses on advocacy, certification, knowledge sharing, and event organization within the steel construction sector. The website is built on TYPO3 CMS with a modern Bootstrap-based design, offering good mobile optimization and accessibility. It features comprehensive content relevant to its target audience of industry professionals and stakeholders. Security-wise, the site enforces HTTPS, employs a GDPR-compliant cookie consent mechanism, and uses Google Analytics with IP anonymization. However, it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website wdvs-planungsatlas.de is a specialized German platform providing free CAD details and technical construction resources focused on thermal insulation composite systems (WDVS). It is operated by the Verband für Dämmsysteme, Putz und Mörtel e.V., a construction industry association. The site targets architects, planners, and construction professionals seeking optimized construction details for energy-efficient building envelopes. The business model centers on offering free technical content and research reports to support planning and compliance with thermal protection standards. The site is positioned as a niche authoritative resource within the German construction sector. Technically, the website uses a traditional web stack with jQuery, jQuery UI, FancyBox, and Piwik/Matomo analytics. It employs cookie consent mechanisms and CSRF tokens in forms, indicating moderate digital maturity and privacy awareness. The site is mobile optimized with SVG graphics and structured navigation, though no CMS or hosting details are evident. Performance is moderate with room for improvement in security headers and advanced SEO. From a security perspective, the site uses HTTPS and cookie consent but lacks visible HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response information is provided. The login form includes CSRF protection, but no phone or physical address contact details are listed, limiting direct support channels. WHOIS data is minimal but consistent with the site's German construction association identity. Overall, the security posture is moderate with recommendations to enhance header policies and publish security policies. The overall risk assessment is low; the site is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies. Strategic recommendations include improving security headers, publishing terms of service and security policies, and enhancing contact transparency to strengthen trust and compliance.

Baumit.com is an international building materials company specializing in facade renders, paints, insulation, and innovative construction technologies such as 3D concrete printing. The company emphasizes sustainability and healthy living environments, targeting private customers and construction professionals across Europe and beyond. The website demonstrates a mature digital presence with modern technologies like Vue.js and integrates analytics and tracking tools for user behavior insights. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data for the subdomain is not available, which is typical, and the main domain is well-established, supporting the site's legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Airex AG operates a professionally designed website focused on the manufacture and sale of high-quality Swiss-made training and therapy mats. The company holds a strong market position as a world leader in its niche, with a history dating back to 1952 and a broad international presence. The website supports this with clear product categorization, educational resources, and community engagement. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Google Analytics, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

Contec Deutschland GmbH is a medium-sized German company specializing in flat roofing, green roofing, energy solutions, and water management systems. Established in 2014, the company targets professional clients in construction and environmental sectors, offering a range of specialized services including flat roofs, roof greening, energy-efficient roofing, and water-related solutions. The website reflects a professional B2B business model with consistent branding and clear navigation. Technically, the site uses a Cloudrexx CMS with a mix of legacy and modern JavaScript libraries, including jQuery 1.9.1 and Bootstrap 3.3.7, and integrates marketing and analytics tools such as Google Tag Manager and Newsletter2Go. Security posture is generally good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and updating outdated libraries. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professionally maintained, though some technical and security enhancements are recommended.

CONICA AG is a Swiss-based company specializing in high-end flooring solutions for sports and industrial sectors, with a history dating back to 1977. The company positions itself as a market leader offering durable and innovative flooring products tailored to professional clients such as sports facility managers and industrial companies. Their website reflects a professional and consistent brand image, supporting multiple languages to cater to an international audience. Technically, the website is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, though the absence of a public security policy or vulnerability disclosure page suggests room for improvement in transparency. The missing WHOIS data for the domain is a notable anomaly, which slightly impacts the overall trust score but does not detract from the professional presentation and business legitimacy evident on the site.

Cobiax is an international company specializing in voided slab technology for the construction industry, offering innovative and sustainable building solutions. Their product lines include Cobiax CLS and SL, supported by software tools like CQL for design and planning. The company targets architects, builders, and innovators, positioning itself as a leader with a 'Made in Germany' reputation and worldwide presence. The website is professionally designed using AMP technology, ensuring fast performance and excellent mobile optimization. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS data for the domain www.cobiax.com introduces uncertainty about domain registration legitimacy. Security posture is generally good with HTTPS and cookie consent, but lacks explicit security headers and published incident response information. Overall, the website reflects a mature digital presence with room for improvement in transparency and security disclosures.

ClayTec GmbH & Co. KG is a medium-sized, family-owned German company specializing in the production and distribution of sustainable clay-based building materials. With over 40 years of experience, the company positions itself as a leader in circular and climate-friendly construction solutions, targeting construction professionals, architects, and environmentally conscious consumers. The website reflects a professional and comprehensive digital presence, offering detailed product information, application techniques, and a partner network. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

CLAGE GmbH is a German-based company specializing in decentralized warm water supply solutions, including a wide range of instantaneous water heaters, warm water storage, and Zip water systems. The company holds a market-leading position in small instantaneous water heaters and offers extensive product consultation, support, and training services. Their website is professionally designed, well-structured, and targets end consumers, architects, planners, and partners in the energy and water heating sector. Technically, the website uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS registration data is a concern but does not detract significantly from the website's credibility given the professional presentation and active content. Overall, the website demonstrates a mature digital presence with room for security and compliance improvements.

CarStorCon® Technologies GmbH is a German-based innovative company specializing in climate-positive building materials, particularly CO2-neutral concrete and asphalt solutions using their proprietary Clim@Add® additive technology. The company targets manufacturers, builders, and architects aiming to decarbonize the construction industry. Their market position is that of a niche technology provider with certified CO2 neutrality, emphasizing sustainability and material innovation. Technically, the website is built on a modern WordPress platform with Elementor and Yoast SEO, supported by Google Analytics and Weglot for multilingual capabilities. Security posture is solid with HTTPS, domain locking, and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is professional, well-branded, and trustworthy, with no signs of malicious content or blocking mechanisms.

C. Hasse & Sohn is a well-established German company specializing in roofing and building protection systems, including flat roof membranes, green roof solutions, building waterproofing, liquid plastics, and thermal insulation materials. With a history spanning over 150 years, the company serves construction professionals, architects, and planners, offering both products and technical consulting. Their market position is that of a reputable regional player with a specialized product portfolio and certifications such as ISO 50001. The website reflects a professional and consistent brand image, with comprehensive contact information and trust indicators like certification badges and a Kununu Top Company award. Technically, the site is built on WordPress with WooCommerce and the Enfold theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, with a detailed privacy policy and cookie management. Overall, the site is trustworthy, professional, and well-maintained, supporting the company's business credibility and digital presence.

Betonwerk Büscher GmbH & Co. KG operates the website zurueckfuerdiezukunft.de, focusing on sustainable construction materials, specifically recycling concrete products certified by the German Institute for Building Technology (DIBt). The company is a pioneer in Germany, offering innovative building elements made from 100% recycled natural stone substitutes, targeting construction firms and licensees interested in eco-friendly building solutions. The website is built on a modern WordPress platform with Elementor and Yoast SEO, ensuring good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and social media presence supporting business credibility.

bluMartin GmbH operates a professional website focused on decentralized residential ventilation systems with heat recovery, targeting builders, architects, and installers primarily in Germany. The company positions itself as a specialized provider of energy-efficient ventilation solutions, offering products, planning support, and after-sales services. The website is well-structured, content-rich, and supported by certifications and customer testimonials, indicating a strong market presence in its niche. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. It employs lazy loading and integrates Facebook Pixel for marketing analytics. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance and business credibility. However, it could improve by publishing a formal security policy and enhancing HTTP security headers. The domain WHOIS data is minimal but consistent with the business profile, supporting legitimacy. Strategic recommendations include strengthening security posture, enhancing transparency on incident response, and maintaining up-to-date software to mitigate risks.

bito Aktiengesellschaft is a well-established German manufacturer and distributor specializing in paints, floor coverings, and thermal insulation composite systems. With over 40 years of presence primarily in Berlin, Hamburg, and Brandenburg, the company serves professional audiences including painters, floor layers, architects, and planners. Their business model focuses on B2B sales combined with direct logistics to construction sites, positioning them as a reliable regional brand in the manufacturing and retail sectors. The website reflects this professional orientation with clear service offerings and contact information.

Birdshades is a specialized company focused on developing and providing invisible bird protection window films that leverage birds' ability to see UV light, invisible to humans, to prevent bird-window collisions. The company targets building owners, architects, and environmental partners aiming to reduce human-wildlife conflicts in urban environments. The website is built on WordPress with modern plugins like Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and includes customer testimonials and scientific backing, enhancing trustworthiness. Security posture is good with HTTPS enabled, but lacks some security headers and visible privacy and cookie policies, which are compliance gaps. WHOIS data is missing or unavailable, which reduces domain trustworthiness. Overall, the website presents a professional and credible business but should improve privacy compliance and security headers to enhance trust and compliance.

BIRCO GmbH operates as a specialized manufacturer and system provider in the drainage and water management sector, focusing on sustainable solutions for rainwater treatment, retention, and infiltration. The company offers a broad portfolio of products including drainage channels, infiltration trenches, and related infrastructure components, supported by digital tools and project management services. Their website reflects a mature digital presence with comprehensive product information, clear navigation, and multi-language support targeting construction professionals and planners primarily in Germany and neighboring countries. Technically, the site is built on TYPO3 CMS with modern frameworks and includes robust security measures such as HTTPS and security headers. Privacy compliance is well addressed with explicit cookie consent mechanisms and detailed privacy policies. However, the site lacks a dedicated security policy and incident response contact details, which could enhance trust and transparency. Overall, BIRCO GmbH presents a professional, secure, and user-friendly online presence aligned with its business objectives.

Binné & Sohn GmbH & Co.KG is a medium-sized German manufacturer specializing in secure roofing solutions, including flat roof sealing, insulation, and green roofing products. The company operates with a strong regional presence in northern Germany, offering a comprehensive product range manufactured in-house and supported by technical planning and consulting services. Their website reflects a professional and consistent brand image, targeting construction professionals, architects, and contractors. Technically, the site is built on WordPress with modern optimization and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

BG-Graspointner GmbH is a manufacturing company specializing in sustainable drainage channels suitable for private, public, commercial, and industrial sectors. The company maintains a professional website with a clear focus on product offerings, sustainability, and innovation. Their market position appears solid with international reach and a comprehensive product catalog. Technically, the website is built on Neos CMS and employs modern web technologies including lazy loading, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The lack of WHOIS domain registration data is a concern for transparency but does not detract significantly from the overall legitimacy given the professional content and contact information. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving domain registration transparency.

BETOMAX Systems GmbH & Co. KG is a well-established German company specializing in intelligent products and solutions for constructive concrete and civil engineering. With over six decades of experience and presence in more than 25 countries, BETOMAX is a leading supplier in reinforcement technology, formwork technology, and bridge construction technology. Their target audience includes construction managers, planners, structural engineers, and precast concrete manufacturers. The company offers a broad portfolio of products and services tailored to the construction industry, emphasizing innovation and system solutions. Technically, the website is built on Concrete CMS and utilizes modern web technologies including jQuery and FontAwesome. The site features multimedia content such as product and image videos, and is optimized for mobile devices with good navigation and SEO practices. While the site uses HTTPS and includes anti-bot measures on forms, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the website shows a moderate security posture with HTTPS enabled and some best practices observed. However, the absence of explicit security headers and cookie consent banners, as well as missing WHOIS domain registration data, indicate areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from improved transparency and security controls. The overall risk assessment is moderate with recommendations to strengthen domain registration transparency, implement comprehensive cookie consent, and enhance security headers. These steps will improve compliance, user trust, and resilience against potential threats.

bauforumstahl is a leading German non-profit industry association dedicated to sustainable steel construction. The organization serves as a central hub connecting steel producers, construction companies, engineers, architects, and educational institutions. Their website offers comprehensive information on sustainability initiatives, technical standards, events, and membership benefits, positioning them as a key player in the German steel construction sector. Technically, the website is built on WordPress using the Avada theme and incorporates modern performance and security optimizations such as WP Rocket and Borlabs Cookie for consent management. Security posture is strong with HTTPS and multiple security headers, though minor CSP issues were detected. Privacy compliance is partial due to the absence of an explicit privacy policy page and terms of service. Overall, the site is professional, well-branded, and trustworthy, with clear navigation and mobile optimization. Strategic recommendations include publishing privacy and terms pages, tightening CSP, and adding incident response information.

Baubeschlag-Union GmbH & Co. KG operates as a cooperative group of 13 independent building hardware wholesalers serving crafts, industry, and municipal customers primarily in Germany. The company emphasizes regional proximity, trust-based long-term relationships, and expertise in various hardware and technical product categories. Their website is professionally designed using WordPress with Elementor and Neve theme, offering good mobile optimization and clear navigation. The site includes comprehensive GDPR-compliant privacy and cookie policies with an active consent mechanism. Security posture is solid with HTTPS and privacy plugins, though explicit security headers and incident response policies are absent. Overall, the website reflects a trustworthy medium-sized manufacturing sector business with strong compliance and professional presentation.

Armacell is a global enterprise specializing in innovative insulation and engineered foam products, serving key sectors such as energy, manufacturing, and transportation. The company emphasizes sustainability, energy efficiency, and advanced materials like aerogel. Their website demonstrates a mature digital presence with a modern Drupal CMS, strong mobile optimization, and comprehensive content. Security posture is solid with HTTPS and CDN protections, though additional security headers and explicit policies could enhance trust. The absence of WHOIS data is a concern but does not outweigh the professional presentation and certifications. Overall, Armacell presents as a credible and established business with room for improved transparency in security and domain registration details.

ARIS Systeme GmbH is a specialized system provider and manufacturer focused on sustainable rainwater utilization and management solutions, including firefighting water supply systems. With over 20 years of experience, the company serves B2B clients such as planning offices, municipalities, and specialized trades. Their offerings include underground cisterns, pumping and pressure boosting systems, IoT-enabled products, and comprehensive project support from planning to commissioning. The company is well-positioned in the German energy and water management sector, reinforced by memberships in recognized sustainability and industry networks such as DGNB, fbr, NGA, and BNW. The website reflects a professional and consistent brand image with clear contact points and product information.

ArgillaTherm is a small German company specializing in natural climate systems, offering multifunctional ceiling cooling and heating solutions with HUMID modules for effective humidity regulation. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Google Tag Manager and Borlabs Cookie for analytics and cookie consent management. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service were found, and contact information is not explicitly provided, which may impact user trust and compliance. Overall, the website is professional and relevant to its niche market but could improve in privacy and security transparency.

Arbonia Riesa GmbH operates a multilingual corporate website targeting primarily German-speaking countries and Russia, presenting itself as a solutions provider likely in an industrial or manufacturing sector. The website is professionally designed with consistent branding and provides clear contact information and social media presence, supporting moderate business credibility. Technically, the site employs modern tools such as Google Tag Manager and Usercentrics for consent management, indicating a reasonable level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with some best practices observed, but lacks visible security headers and a published privacy policy, which are critical for compliance and trust. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

The website at alufinish.de appears to represent a small business based in Germany, likely involved in manufacturing or finishing services related to aluminum, inferred from the domain name. However, the website content is minimal and lacks substantive business descriptions, contact information, or user engagement features. The technical infrastructure is basic, built with standard HTML and CSS, and likely uses the Thrive Architect CMS platform. There is no evidence of modern security practices such as HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating low compliance with GDPR and other privacy regulations. Overall, the site demonstrates low digital maturity and limited online presence, which may impact user trust and business credibility.

The website www.alpolic.eu represents Mitsubishi Polyester Film GmbH, a well-established manufacturer specializing in aluminum composite panels with over 50 years of industry experience. The company targets a broad audience including construction and facade professionals, offering high-quality products with a focus on performance, corrosion protection, and design. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including German, English, and French. Technical infrastructure includes modern analytics tools such as Google Analytics and Matomo, integrated via Google Tag Manager, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies are recommended for improvement. The absence of publicly available WHOIS data due to privacy protection slightly reduces transparency but is common for corporate domains. Overall, the website demonstrates a mature digital presence with good privacy and security practices, supporting the company's credibility and market position.

3A Composites Core Materials is a globally recognized manufacturer and supplier of structural and lightweight core materials, specializing in closed cell foam and FSC-certified balsa wood. With over 85 years of experience, the company serves diverse industrial sectors including energy, transportation, and manufacturing, providing sustainable and high-performance materials. Their website reflects a mature digital presence with professional design, comprehensive product information, and active marketing integrations. Technically, the site uses modern technologies such as Craft CMS, Google Analytics, and various tracking pixels, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are possible in security headers and privacy compliance. The absence of WHOIS data is a notable anomaly that slightly diminishes trust but does not overshadow the professional business presentation. Overall, the company demonstrates strong market positioning and digital maturity with room for enhanced privacy and security practices.

DGNB GmbH operates as a leading non-profit organization specializing in sustainability certification for buildings and urban districts, positioning itself as a global benchmark in sustainable building practices. The website provides comprehensive information about the DGNB certification system, its benefits, criteria, and processes, targeting professionals and organizations in the construction and real estate sectors. The company offers certification services, educational programs, and consulting to promote sustainable building standards. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and is hosted on agenturserver infrastructure, delivering a well-structured, mobile-optimized, and SEO-friendly user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a mature digital presence with strong business credibility and trust indicators.

DGNB GmbH operates the DGNB Akademie, a central platform dedicated to education and certification in sustainable building and real estate management. The company offers a broad range of training programs, seminars, and certifications recognized nationally and internationally, targeting professionals in architecture, construction, and real estate sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted on agenturserver infrastructure, indicating a stable and modern setup. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Overall, the site demonstrates high business credibility with clear contact information, trust signals like testimonials and certifications, and compliance with GDPR and cookie regulations. No blocking or WAF interference was detected, allowing full content accessibility.

MOSAIQ is a digital agency specializing in branding, user experience (UX), and technology solutions. The company targets businesses seeking professional digital projects such as websites, landing pages, and digital branding. The website presents a professional and consistent brand image, indicating a focused small-sized agency based in Germany. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager and Flockler for analytics and content embedding, reflecting a moderate level of digital maturity. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain registration transparency, though the website content itself appears legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced security and privacy compliance measures.

Tikkurila Festivaali is a well-established Finnish music festival organized by Sanoma Media Finland Oy / Nelonen, focusing on domestic music artists and held annually in Vantaa. The website serves as an information and ticket sales platform, showcasing artist lineups, event schedules, and partner collaborations. The festival has a strong local presence and a consistent brand identity supported by social media channels and partner endorsements. Technically, the site is built on WordPress with modern plugins for SEO, social media integration, and user engagement. The infrastructure supports good performance and mobile optimization, although some security best practices like DNSSEC and security headers could be improved. Privacy and cookie policies are not evident, which is a compliance gap. Overall, the site is professional and trustworthy, with a moderate security posture and room for enhanced privacy compliance.

Suomipop Festivaali is a Finnish music festival brand operated by Nelonen Media Live Oy, a subsidiary of Sanoma. The festival is held annually in July in Jyväskylä and Oulu, targeting Finnish pop music fans. The website serves as an information and ticket sales portal, linking to official ticket vendors Tiketti and Lippupiste. The business is well-established with a domain age of over 15 years, reflecting a mature market presence in the Finnish entertainment sector. Technically, the website is built on WordPress with modern tracking and marketing tools such as Google Tag Manager and Adobe DTM. The site is mobile optimized and SEO friendly, with good content quality and consistent branding. Hosting appears stable with Gandi.net nameservers. However, there is room for improvement in security headers and explicit privacy and terms documentation. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site implements a GDPR-compliant cookie consent mechanism, though privacy policy and terms of service pages are not clearly found. WHOIS data is transparent and consistent with the business identity, supporting legitimacy and trust. Overall, Suomipop Festivaali's website is a professional and trustworthy platform for its audience, with moderate technical sophistication and a good security baseline. Strategic improvements in security headers and compliance documentation would enhance trust and reduce risk.

Nelonen Media Live Oy operates Rockfest, Finland's largest rock festival held annually in Turku. The website serves as the primary digital platform for event information, ticket sales, and marketing. The company holds a strong market position in the Finnish live music event sector, leveraging partnerships with ticketing platforms and sponsors. The website is built on WordPress with modern plugins and integrates social media and analytics tools to enhance user engagement and marketing effectiveness. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and DNSSEC could be made. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with a medium-sized operational scale.

Eventim UK operates as a prominent online ticketing platform specializing in the sale of tickets for concerts, festivals, theatre, sports, comedy, and other live events across the United Kingdom. The website offers a broad range of event categories and detailed navigation by city and venue, targeting a general audience interested in live entertainment. The business model centers on e-commerce ticket sales, positioning Eventim UK as a major player in the UK ticketing market. The site branding is consistent and professional, with clear descriptions and a user-friendly interface.

Eventim SE operates a professional and comprehensive online ticket sales platform focused on live entertainment events such as concerts, theater, opera, musicals, and sports in Sweden. The website is well-branded, localized primarily in Swedish with English support, and offers a rich user experience with event discovery, recommendations, and a mobile app. The platform integrates modern web technologies and complies with GDPR through a consent management platform. Despite the absence of WHOIS data for the subdomain www.eventim.se, the overall digital presence and branding strongly indicate a legitimate and established business. Security posture is good with HTTPS enforced and privacy policies in place, though explicit security headers and incident response information are not publicly visible. The site is free from adult or questionable content and does not exhibit blocking or WAF challenges, allowing full content accessibility.

EVENTIM Slovenia operates a leading online ticket sales platform in Slovenia, offering tickets for over 3000 events annually including concerts, festivals, and sports. The website is well-structured with rich event content and uses modern web technologies such as jQuery, Swiper.js, and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance, supported by a consent management platform. Security posture is solid with HTTPS enforced, though security headers and explicit incident response contacts are not evident. The domain registration is consistent with the business claims, showing a long-established presence since 2003. Overall, the website presents a professional and trustworthy e-commerce platform for event ticketing in Slovenia.

Eventim.sk is a well-established online ticketing platform primarily serving Slovakia and nearby regions. It offers tickets for a wide range of events including concerts, sports, cultural shows, and festivals. The platform targets a broad audience interested in entertainment and cultural activities, positioning itself as a regional leader in ticket sales. The website features a professional design with good navigation and content relevance, supporting a positive user experience.