Medium-risk security reports

The website spasupply.dk is currently a parked domain primarily used for domain resale purposes. It lacks any active business content, contact information, or clear branding. The site is minimalistic, serving mostly advertising and domain sale links, targeting potential domain buyers or investors. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising scripts and Amazon Cloudfront CDN for content delivery. Mobile optimization and accessibility are basic but functional given the limited content. Security posture is weak due to absence of HTTPS information, security headers, and no visible security policies or incident response details. Privacy compliance is minimal with only a basic privacy policy accessible via a popup and no cookie consent mechanism. Overall, the site presents a low trust profile and limited business credibility.

Utzon Center is a well-established cultural and educational institution in Aalborg, Denmark, focused on architecture and design. The center offers exhibitions, educational programs, events, and a restaurant, targeting families, students, and architecture enthusiasts. The website is professionally designed using Drupal 7, with good content quality and clear navigation. It integrates modern marketing and analytics tools with user consent mechanisms. Security posture is adequate with HTTPS and cookie consent, though some security headers and policies are missing. The domain is long-standing and consistent with the business identity, enhancing trustworthiness.

Good Company Pictures is a small creative documentary production company based in Copenhagen, Denmark, specializing in international and Danish documentaries with strong storytelling and characters. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site demonstrates good design quality and mobile optimization but lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is moderate with HTTPS enabled and some JavaScript security hardening, but missing key security headers and incident response contacts. The domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy, though the site is operational and professionally presented. Strategic recommendations include adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

PerfectDomain.com operates as a specialized domain marketplace focusing on premium and brandable domain names, targeting startups and businesses in the technology sector. The platform offers direct domain sales, brand advisory, and acquisition services with flexible payment plans, including installment options. The website is professionally designed with clear navigation and content relevant to domain buyers, supported by trust signals such as Trustpilot reviews and GoDaddy registrar association. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and Cloudflare DNS, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain registrar locks in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, lacking a cookie consent mechanism, which may pose GDPR compliance risks. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy domain marketplace business.

Leneo is a Denmark-based company offering a comprehensive B2B recurring billing and contract management platform tailored for financial, industrial, and technology sectors. Their solution aims to eliminate revenue leakage and reduce manual workloads by automating billing, contract lifecycle management, and integrating seamlessly with existing enterprise systems. The platform supports multiple billing models including subscriptions, usage-based, and leasing, and provides features such as asset management, CPQ, reporting, and IoT-compatible billing. Technically, the website is built using modern frameworks like Next.js and React, with Chakra UI for styling, and integrates Matomo analytics and HubSpot forms for marketing and data collection. Security posture is strong with HTTPS enforced and no exposed sensitive data, though some security headers are missing and no explicit security policy or incident response contacts are published. The WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces trustworthiness but the professional website and clear contact information mitigate concerns. Overall, Leneo presents a credible and professional digital presence with room for improvement in privacy compliance and security transparency.

Hydratech Industries is a Denmark-based company specializing in the supply and servicing of hydraulic cylinders, accumulators, and hydraulic components primarily for offshore, marine, industrial applications, and wind turbines. The company positions itself as a leading global supplier with a focus on fluid power and wind power sectors, offering products and repair services worldwide. Their website reflects a professional B2B business model targeting industrial clients and wind turbine manufacturers. Technically, the website is built on Dynamicweb 8 CMS, uses modern web technologies including Google Analytics for tracking, and is mobile optimized with good SEO practices. Security posture is moderate with HTTPS enforced and secure forms, but lacks explicit security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that impacts domain legitimacy assessment. Overall, the website is functional, professional, and provides comprehensive contact information and service details, but would benefit from enhanced privacy and security disclosures.

Fabrika A/S is a Danish company specializing in electric motors, providing both standardized and customized solutions primarily for industrial clients. The company positions itself as a trusted partner with a broad product range under its own Fabrika brand and the Innomotics brand, emphasizing quality, customization, and technical support. The website reflects a mature digital presence with clear business information, customer stories, and partnership highlights. Technically, the site uses modern frameworks such as Nuxt.js and integrates marketing and analytics tools like Google Tag Manager and HubSpot Forms, indicating a well-maintained infrastructure. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, although some security headers could be explicitly verified. The absence of WHOIS data due to privacy protection is common and justified for this business type, with no suspicious indicators found. Overall, the website demonstrates professionalism, good user experience, and compliance with privacy regulations.

Prevas is a well-established Danish technology company specializing in intelligent product development, electronics, software, and mechanical design services. Founded in 1985, it serves a broad range of industries with a focus on innovation and problem-solving. The website reflects a professional and consistent brand presence with clear navigation and multilingual support through sister sites in Sweden, Norway, and an English version. Technically, the site uses modern web technologies including SiteVision CMS, jQuery, and Slick Carousel, with Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are lacking. Contact information is available primarily via email and contact forms, but no phone numbers or physical addresses are explicitly listed. Overall, the site is trustworthy and credible, with room for improvement in security transparency and privacy documentation.

BTX Group A/S is a well-established Scandinavian fashion supplier specializing in women's clothing, operating primarily through wholesale, retail, and private label business models. The company leverages over 85 years of experience in design and quality, positioning itself as a leading player in the Scandinavian fashion retail sector. Their website reflects a professional e-commerce presence built on the Shopify platform, targeting fashion-conscious women in the region and beyond. The site offers a clear brand portfolio and retail channels, supporting their market position effectively. Technically, the website is built on a modern Shopify infrastructure using the Dawn theme, with good mobile optimization and moderate performance. The use of Shopify's CDN and analytics tools indicates a mature digital infrastructure. SEO and accessibility are adequately addressed, though accessibility could be improved further. The site employs HTTPS with a good SSL configuration, but lacks DNSSEC and some advanced security headers. From a security perspective, the site demonstrates solid baseline protections including HTTPS enforcement and domain transfer locks. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a GDPR-compliant privacy policy and cookie consent mechanism in place. Overall, BTX Group's website is a credible, professional, and secure platform supporting their retail business. Strategic improvements in security transparency and DNS security would enhance their posture further.

Sports World is a prominent Danish sports retailer offering a wide range of sportswear, footwear, and equipment from leading brands such as Nike, adidas, and Under Armour. The company operates both online and physical stores, targeting sports enthusiasts and families in Denmark. Their market position is strong within the regional sports retail sector, supported by a professional and user-friendly e-commerce platform. Technically, the website leverages modern frameworks like Next.js and integrates advanced analytics and marketing tools, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, employs security headers, and provides GDPR-compliant cookie consent mechanisms, though it lacks explicit published security policies or incident response information. Overall, the site demonstrates a mature digital presence with minor gaps in transparency and contact information.

Caljan is a well-established company specializing in logistics automation technology since 1963. They serve parcel carriers, retailers, and manufacturers worldwide by providing custom-built logistics equipment and solutions to optimize supply chains, increase throughput, reduce costs, and improve workplace ergonomics and safety. The company operates globally with multiple production facilities and an international organizational structure. Their website reflects a professional B2B business model focused on transportation and manufacturing sectors. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for privacy compliance. The site is hosted via GoDaddy and uses HTTPS with good SSL configuration. The site is mobile optimized and has good SEO and accessibility features, although no CMS or specific frameworks were detected. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS, uses secure cookies including CSRF tokens, and implements a comprehensive cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, Caljan's website demonstrates a strong security posture and privacy compliance aligned with industry standards. The business credibility is supported by a long domain age and consistent registration data. Recommendations include enabling DNSSEC, publishing terms of service and security policies, and adding a vulnerability disclosure mechanism to further enhance trust and compliance.

InfoSuite A/S is a Danish software company specializing in budgeting and forecasting tools, trusted by over 100 companies. Their website presents a professional and consistent brand image, offering integrated business intelligence and financial planning solutions primarily targeting Danish businesses. The company has a long-established domain since 2001, reflecting a mature market presence. Technically, the website is built on WordPress using the Avada theme, with common plugins for SEO, spam protection, and cookie consent, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though the absence of explicit privacy policies, terms of service, and incident response contacts suggests room for improvement in compliance and transparency. Overall, the website is well-designed, user-friendly, and trustworthy, with moderate tracking and marketing tools implemented.

Danske Hospitalsklovne is a well-established Danish non-profit organization founded in 2003, dedicated to supporting hospitalized children by providing hospital clown services that bring comfort and joy during difficult times. The organization operates through donations, sponsorships, fundraising events such as Klovneløb, and partnerships with companies and foundations. Their website reflects a strong market position with clear branding, comprehensive content, and multiple engagement channels for private donors and corporate supporters. Technically, the site is built on WordPress with modern plugins like Gravity Forms and integrates Google Tag Manager and CookieInformation for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and privacy mechanisms in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the domain registration data aligns well with the organization's profile, indicating high legitimacy and trustworthiness.

PeopleLink is a Danish consulting and recruitment company founded in 2009, specializing in connecting people and businesses through services such as Search & Selection, Assessment, Career & Outplacement, Organizational Development, Strategy & Business, Business Coaching, and Board Advisory. The company targets both businesses and candidates within Denmark, positioning itself as an experienced and trusted partner in recruitment and organizational consulting. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress using modern plugins and themes such as Yoast SEO Premium and Neve Theme, ensuring good SEO optimization and mobile responsiveness. The site employs GDPR-compliant cookie consent mechanisms and integrates Google Analytics for user tracking. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust slightly but does not significantly impact the overall legitimacy given the professional site presentation. Overall, the website presents a low to moderate risk profile with room for improvement in security best practices and transparency regarding privacy and incident response policies. Strategic recommendations include implementing security headers, publishing a privacy policy and security incident response information, and clarifying domain registration details to enhance trust.

Integration X A/S is a Denmark-based company specializing in automation software solutions for AdOps and creative management, targeting media companies globally. Their offerings focus on streamlining advertising operations and page planning for both digital and print media, positioning them as a trusted partner with a strong client base of leading media companies. The website demonstrates a solid digital infrastructure built on WordPress with modern SEO and analytics tools, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and publishing security policies could enhance their security maturity. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting their business credibility and market position.

Ubro SystemPac A/S is a Danish company specializing in end-of-line packaging solutions, offering high-quality packaging materials and machinery developed by leading manufacturers. The company targets businesses requiring tailored packaging solutions and provides consulting, implementation, and ongoing service support. As part of the Swedish OptiGroup AB, Ubro SystemPac holds a stable market position in the manufacturing sector with a medium-sized business footprint established since 2010. The website reflects a professional digital presence built on WordPress with Elementor, incorporating modern web technologies and analytics tools such as Google Analytics and MonsterInsights. A comprehensive cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is solid with HTTPS enforced, though improvements are recommended in DNSSEC and security headers. Overall, the website is accessible, well-structured, and trustworthy, supporting the company's business credibility and customer engagement.

Aasted is a family-owned manufacturing company specializing in world-class machinery for the chocolate, bakery, and confectionery industries. With over 100 years of engineering expertise, the company offers a range of equipment, consultancy, energy solutions, and technology center services targeting B2B clients in the manufacturing sector. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with modern SEO and analytics tools, supported by Cloudflare for security and performance. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit security and incident response policies are not published. Privacy compliance is good with GDPR-aligned cookie management. Overall, the website is trustworthy and well-maintained, supporting the company's market position as an established manufacturer.

Tonsser is a well-established technology company founded in 2012, specializing in a football-focused mobile app platform designed for next-generation athletes. The platform offers comprehensive player profile building, performance tracking, and talent identification services, positioning itself as an innovative player in the sports technology market. The website reflects a professional and consistent brand image, supported by strong media coverage and community testimonials, enhancing its market credibility. Technically, the website is built on modern web technologies including Webflow CMS, Cloudflare DNS, and integrates key marketing and analytics tools such as Facebook Pixel and Google Analytics. It supports multiple languages via Weglot, ensuring accessibility to a broad international audience. The site demonstrates excellent performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs domain transfer protection, but lacks DNSSEC and some recommended security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Tonsser presents a low-risk profile with a mature domain and consistent business information. Strategic recommendations include enhancing DNS security, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

Blackbox Branding is a Danish company specializing in the production and development of promotional and fundraising game products such as scratch cards, advent calendars, lotteries, and security printing solutions. Established in 2011 and operating as part of Bording Danmark A/S, the company serves businesses and organizations across Scandinavia, providing marketing and fundraising tools with a focus on physical and digital game concepts. Their product portfolio includes tickets, code cards, direct mails, gift cards with effects, and marketing game terminals, positioning them as a niche B2B service provider in the retail and promotional marketing sector. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Google Analytics and Tag Manager integrated for user tracking. The site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate. Security practices include HTTPS and a cookie consent mechanism, but there is room for improvement in security headers and DNSSEC implementation. No explicit security or incident response policies are published. The security posture is adequate with no critical vulnerabilities detected, but enhancements in security headers and formal policies would strengthen their defense and compliance stance. The domain registration is consistent with the business history, enhancing trustworthiness. Overall, the website reflects a professional and credible business with solid digital maturity but could benefit from enhanced security and compliance transparency. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing security and incident response policies, and conducting regular security audits of third-party scripts to mitigate risks and improve trust.