Medium-risk security reports

Obton Forvaltning A/S operates as an investment management company specializing in renewable energy projects, particularly solar energy and battery storage. The company targets investors seeking stable, passive income streams independent of traditional financial markets. With over 4,000 investors and a documented track record, Obton positions itself as a credible player in the Danish renewable energy investment sector. The website content is primarily in Danish and provides detailed information about investment opportunities and the company's business model. Technically, the website employs a modern but somewhat dated technology stack including AngularJS 1.7.8, jQuery, Bootstrap 4, and Font Awesome. It uses Umbraco CMS and integrates multiple third-party analytics and marketing tools such as Google Analytics, Microsoft Clarity, and various advertising networks. The site is mobile-optimized and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for bot protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not confirmed in the provided data. The use of AngularJS, which is end-of-life, may pose future security risks. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy in appearance, but the absence of WHOIS registration data for the domain www.obton.com is a significant concern. This inconsistency reduces the domain's trustworthiness and suggests the need for further verification. The lack of visible contact information and terms of service pages also slightly detracts from business credibility. Strategic improvements in transparency and security header implementation are recommended.

JSK Vibrations is a specialized Danish consultancy firm focused on vibration measurement, analysis, and mitigation services primarily for the construction industry in Scandinavia. The company offers services such as design and delivery of vibration dampers, vibration measurements on various building components, and expert calculations to ensure structural vibration comfort. The website presents a professional image with clear contact details and client references, positioning JSK Vibrations as a trusted niche player in its market segment. Technically, the website is built on WordPress hosted by Automattic Inc. (WordPress.com), utilizing common plugins like Yoast SEO and Jetpack. The site includes multiple tracking and marketing scripts such as Facebook Pixel, LinkedIn Insight Tag, and Albacross, although Google Analytics is present but not fully configured. The site is mobile-optimized with good SEO metadata and structured data, but lacks some security best practices such as security headers and DNSSEC. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. No blocking or WAF challenges were detected, and the domain registration is consistent and legitimate, registered through Automattic Inc. Overall, JSK Vibrations presents a credible and professional online presence with a solid business focus. Strategic improvements in privacy compliance, security headers, and analytics configuration would enhance trust and security posture further.

Adibus a/s is a Danish company specializing in innovative IT and display solutions for public transportation providers and operators. Their offerings include real-time information systems, passenger information and infotainment systems, next stop announcements, station screens, automatic passenger counting, lane management, destination signage, Wi-Fi, driver applications, and various operational optimization tools. The company targets public transport operators primarily in Denmark and the Nordic region, positioning itself as a key technology provider in this niche market. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery, FontAwesome, Google Fonts, and FancyBox, with a CMS likely based on Dynamicweb. The site is mobile optimized and integrates Cookiebot for cookie consent management, alongside Google Analytics for visitor tracking. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent. However, no advanced security headers were detected, and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the website content and professional presentation support legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and security posture but would benefit from enhanced security headers, clearer contact information, and published security policies to strengthen trust and compliance.

AndRobin ApS operates as a specialized healthcare strategic and creative agency based in Denmark, founded in 2019. The company offers a comprehensive suite of services including strategy, creativity, design, and scientific engagement, targeting healthcare organizations and pharmaceutical clients. Their market position is that of a niche agency with a strong focus on medical communications and scientific storytelling, supported by a professional and content-rich website. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern tracking and cookie consent mechanisms in place. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with no explicit privacy policy or terms of service detected, though cookie consent is present. Overall, the website demonstrates good business credibility and technical maturity, with room for enhancements in security and privacy documentation.

Santander Consumer Bank AS is a well-established financial services provider in Norway specializing in consumer loans, savings products, and insurance. The company leverages strong brand recognition, including sponsorship of Formula 1 and Williams Racing, to maintain a prominent market position. Their website targets Norwegian consumers seeking financing solutions and savings options, offering a range of products such as billån, forbrukslån, and refinansiering. The business model focuses on consumer finance with backing from the global Santander Group, indicating a large enterprise scale.

The website data2impact.com appears to represent a small technology service provider specializing in data analytics, automation, and custom software solutions such as Excel data consolidation, PowerPoint automation, and interactive dashboards. However, the website is currently non-functional, displaying an error message indicating an unexpected error, which severely limits content availability and user experience. The technical infrastructure is based on modern frameworks like React and Next.js, but the site lacks critical security headers, privacy policies, and contact information. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the security posture is weak with no visible compliance or incident response information, and the site suffers from poor content quality and minimal user engagement features.

Hotel Pro Forma is a Danish performing arts company specializing in innovative stage performances, installations, and cultural events. The website showcases upcoming and past projects, event dates, and provides information about the organization. The company targets performing arts audiences and collaborators, positioning itself as an established cultural institution in Denmark with international reach. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Revolution Slider, and Events Manager, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and Google Analytics tracking with opt-out options, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which slightly reduces trust but the presence of clear contact information and professional design supports legitimacy. Overall, the site is functional and professional but could improve privacy compliance and security transparency.

Penneo A/S operates a secure digital signing and KYC workflow platform targeting businesses seeking to simplify complex document workflows. Established in 2013, the company has positioned itself as a trusted provider with a strong customer base and significant usage metrics, particularly in Denmark. The website reflects a professional B2B SaaS model with integrations into common business software. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with consent mechanisms in place but lacking explicit privacy and cookie policies. Business credibility is high, supported by social proof and structured data. Overall, the site is well-designed and functional but could improve transparency and security hardening.

Amplexa Genetics A/S is a Denmark-based healthcare company specializing in advanced genetic testing services, including fertility solutions, clinical diagnostics, neurology-related genetic tests, and research & development support. The company targets healthcare professionals, fertility clinics, patients, and research institutions, positioning itself as a specialized provider with innovative offerings such as non-invasive preimplantation genetic testing (niPGT-A) and comprehensive carrier screening programs. The website reflects a mature business with a domain age of over 17 years, consistent with its market presence. Technically, the website is built on modern frameworks including Next.js and React, with content managed via Sanity CMS. It is hosted on One.com and employs best practices such as HTTPS, cookie consent mechanisms, and responsive design, ensuring a fast and accessible user experience. The site integrates Stripe for payment processing and uses Cookiebot for privacy compliance. From a security perspective, the site demonstrates good posture with HTTPS enforcement, security headers, and encrypted communication for sensitive data. However, DNSSEC is not enabled, and no dedicated security policy or incident response page is present, which are areas for improvement. No vulnerabilities or suspicious patterns were detected. Overall, Amplexa Genetics presents a professional, trustworthy, and compliant online presence suitable for its healthcare sector audience. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure program to enhance trust and security maturity.

Think PR is a creative communications, public relations, and social media agency operating since 2006, primarily serving businesses seeking PR and social media services. The website is built on WordPress with modern technologies such as Yoast SEO and WP Rocket, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, and no explicit security or privacy policies are published. Overall, the site presents a professional image but could improve transparency and compliance by publishing comprehensive privacy and security policies and enhancing security configurations.

Aumento Law firm is a modern legal services provider based in Copenhagen, Denmark, offering a broad range of legal expertise through a team of over 50 attorneys and 25 practice areas. The firm targets businesses and individuals seeking professional legal advice and representation. Their website reflects a professional and consistent brand image, with comprehensive contact information and a clear presentation of their services. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Cookiebot for cookie consent management and Hotjar for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and provides a granular cookie consent mechanism, demonstrating good compliance with privacy regulations like GDPR. However, the absence of explicit terms of service and security policy pages suggests areas for improvement in transparency and compliance documentation. Overall, the domain WHOIS data is privacy-protected, which is typical for professional firms, and no suspicious indicators were found, supporting the legitimacy of the business.

The analyzed website is a login portal for Plesk Obsidian 18.0.69, a popular web hosting control panel platform. It primarily serves web hosting administrators and resellers who manage hosting environments. The site is technically functional and uses modern JavaScript libraries and Cloudflare DNS services, indicating a moderate level of digital maturity. However, the site lacks public-facing business information, privacy policies, and terms of service, which limits transparency and user trust. The cookie consent mechanism is implemented, showing some GDPR compliance awareness. Security posture is moderate with some best practices like CSRF tokens and password input controls, but lacks visible security headers and DNSSEC, which are recommended for enhanced security. The domain is privacy protected, which is common for such control panel portals but reduces registrant transparency.

CCL Industries is a global leader specializing in the manufacturing and conversion of pressure sensitive and extruded film materials for decorative, functional, and informational labels. The company targets businesses across multiple sectors requiring advanced labeling and packaging solutions. Their website reflects a mature enterprise with a comprehensive product portfolio and global market presence. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and analytics tools, indicating a solid digital infrastructure. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy found. Overall, the website is professional and trustworthy, supporting the company's market position as an industry leader.

Kilsmark A/S operates as a parent company providing communication, financial, and human resources services to its sister companies Palcut A/S and Minkpapir A/S. The company is positioned as a small-sized business entity based in Denmark, founded in 2019. The website reflects a professional corporate presence with a focus on business-to-business services within its niche. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and cookie consent management via Cookiebot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is functional and professional but could improve transparency and security documentation to enhance trust and compliance.

INKA Consult is a small consultancy firm based in Denmark, specializing in leadership, organizational development, and advisory services for both Danish organizations and development programs in various developing countries. Their business model focuses on providing strategic consulting, coaching, facilitation, and training courses. The website is built on TYPO3 CMS with a Bootstrap package, reflecting a moderate level of technical maturity and good mobile optimization. However, the site lacks advanced security headers and published privacy or security policies, which are areas for improvement. The domain is well-established since 2002, supporting the company's credibility. Overall, the website presents a professional image but could enhance its security posture and privacy compliance to better align with modern standards.

Tomorrow is a technology company focused on climate action by providing data-driven tools that empower individuals and organizations to understand and reduce their carbon footprint. Their market position is that of an innovative climate tech provider offering sustainability analytics and carbon tracking solutions. The website is built on modern technologies such as React and Gatsby, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response information are lacking. The absence of WHOIS data reduces domain trustworthiness, but the professional website and clear privacy compliance mitigate some concerns. Overall, the risk is moderate with recommendations to improve transparency and security documentation.

Hans Følsgaard A/S is a global technology company specializing in the development, production, and delivery of customized solutions and branded products across industrial, infrastructure, renewable energy, power engineering, telecommunications, and transportation sectors. The company targets B2B clients worldwide, positioning itself as a key player with a diversified product portfolio and strong industry presence. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored for its industrial audience. Technically, the website is built on the Rapido CMS platform and leverages modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and YouTube iframe API for embedded media. The site is mobile-optimized with good SEO practices and uses HTTPS to secure communications. However, some security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security and compliance perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, including granular user controls and detailed cookie declarations. No explicit contact information or security policies are visible, and the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Despite this, the website content and structure indicate a legitimate business operation. Overall, the site demonstrates a solid digital presence with good privacy compliance and user experience. The main risk lies in the lack of transparent domain registration data and absence of explicit contact and security policy information, which should be addressed to enhance trust and compliance.