What is the security score of pflaum.at?

pflaum.at scored 40 out of 100 in Guard's security assessment. This indicates an elevated risk level with significant security gaps that should be addressed.

What does ArcelorMittal Construction do?

ArcelorMittal Construction operates in the Manufacturing sector based in Austria. The website is built using Algolia Search, Matomo Analytics, jQuery. Guard's scan analyzes the website's security infrastructure and compliance posture.

Guard's security scan evaluates pflaum.at across multiple security dimensions including SSL certificate validity, security headers, DNS configuration, email authentication (SPF, DKIM, DMARC), and regulatory compliance (GDPR, NIS2). With a score of 40/100 classified as "Elevated Risk", review the detailed findings above to make an informed assessment about the website's trustworthiness.

Is pflaum.at Safe? Score 40/100 | Guard

Q: Is pflaum.at safe to use?

Based on Guard's automated security analysis, pflaum.at received a security score of 40/100 and is classified as "Elevated Risk". ArcelorMittal Construction is a large, established manufacturing company specializing in steel-based building solutions for architectural projects, with a strong presence in Austria and multiple European markets. The website reflects a professional and comprehensive business offering, targeting cons

Is pflaum.at Safe? Security Analysis for ArcelorMittal Construction

http://pflaum.at

Check if pflaum.at is a scam or legitimate. Free security scan and reviews.

ManufacturingAustrialarge

Algolia SearchMatomo AnalyticsjQueryMustache.jsFontAwesome+2 more

Analyzed 6/15/2025Completed 10:22:03 AM9mo ago

Security Score

HIGH RISK

Below Manufacturing avg (52)

10,000+

Domains scanned

500+

Security teams trust us

EveryPay

Secure checkout

Instant

Reports delivered

Professional PDF & Marketing Data

Get the professional PDF report for pflaum.at

Export this security analysis as a professional PDF document, receive it via email, and access marketing intelligence data including contact emails and phone numbers. One-time purchase for lifetime access.

PDF Report & Export

PDF download, email delivery, unlock code

39.90 €one-time • Incl. 21% VAT

Marketing Intelligence

Contact emails, phone numbers & warm leads

49.90 €one-time • Incl. 21% VAT

Plan Comparison

Feature	PDF Report	Marketing+
Full security analysis
Professional PDF export
Email delivery
Lifetime access + unlock code
Contact emails & phones	—
Marketing outreach data	—

Delivery email

Already purchased?

Order summary

Domainpflaum.at

Access tierFull report or marketing add-on

I have read and agree to the Terms & Conditions and Privacy Policy.I acknowledge the Returns & Refunds policy and understand the digital delivery terms.

Digital reports are delivered immediately after payment. By continuing you acknowledge the withdrawal waiver described in our Returns & Refunds policy.

Secure payments processed via EveryPay. Prices in EUR; Incl. 21% VAT.

SEQ SIA

Lastadijas 12 k-3, Riga, Latvia, LV-1050

Reg. No. 40203410806 • VAT LV40203410806

Support: guard@offseq.com • +371 2256 5353

AI Summary

ArcelorMittal Construction is a large, established manufacturing company specializing in steel-based building solutions for architectural projects, with a strong presence in Austria and multiple European markets. The website reflects a professional and comprehensive business offering, targeting construction professionals and project developers with a broad portfolio of products and services emphasizing sustainability and innovation. Technically, the website uses modern JavaScript libraries and analytics tools, hosted behind Cloudflare, but suffers from a critical lack of valid SSL/TLS configuration, exposing users to security risks. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. The security posture is weak due to missing HTTPS, but other security headers and practices are present. Overall, the website is trustworthy and professional but requires urgent security improvements to protect users and maintain credibility.

Detected Technologies

Algolia SearchMatomo AnalyticsjQueryMustache.jsFontAwesomeBootstrapTarteaucitron (cookie consent)

11 urgent findings need attention

4 critical · 7 high

+ 3 more findings in the full report below

Continuous monitoring

Keep pflaum.at under constant watch

Guard tracks your live infrastructure daily: certificate expiry, DNS & mail authentication drift, uptime changes, subdomain inventory, and unexpected tracker or content shifts. A full timeline captures every diff so you can prove remediation and spot regressions instantly.

Security drift alerts

Risk score drops, new high-severity issues, and header hardening gaps

Compliance watch

GDPR / NIS2 posture changes with governance evidence snapshots

Infrastructure surface

Unexpected open services, SSL expiry, DNS & email authentication changes

Content & tracker intelligence

Marketing tech shifts, analytics drift, and AI recommendation updates

25 €

per month · billed securely via EveryPay

Less than 1 € / day — cheaper than a single incident response hour

Cancel anytime. Alerts sent to the contacts you choose. Unlock the full report to view historical timelines and alerts.

Purchase to access the monitoring timeline, JSON diffs, alert history, and PDF export for pflaum.at.

Security Headers

2 findings

80/100

GDPR Compliance

6 findings

0/100

NIS2 Compliance

8 findings

5/100

Email Security

1 finding

50/100

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The company operates a B2B business model focused on manufacturing and supplying advanced steel construction materials and solutions. It leverages a strong brand (ArcelorMittal) and regional subsidiaries to maintain market leadership. The website links extensively to regional ArcelorMittal construction sites, indicating a broad partnership ecosystem. The business targets architects, builders, and construction firms seeking sustainable and innovative building materials. The presence of detailed product categories, project showcases, and support services indicates a mature and customer-focused approach. No direct revenue streams or e-commerce functionality are present, consistent with a manufacturing and supply chain business. The company benefits from strong branding consistency and trust signals such as social media presence and corporate website links.

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates moderate security maturity with implementation of several security headers including Content Security Policy, Strict-Transport-Security, X-Frame-Options, and HttpOnly cookies. However, the absence of a valid SSL certificate and lack of HTTPS support is a critical vulnerability that severely undermines the security posture. No advanced security policies or incident response contacts are found on the site. The use of Matomo analytics and cookie consent tools indicates awareness of privacy compliance. The site is not vulnerable to common SSL/TLS attacks due to lack of SSL but this also means data is transmitted insecurely. Overall, the security posture is weak and requires immediate remediation to enable HTTPS and improve trust.

Strategic Recommendations

Priority Actions for Security Improvement

Obtain and install a valid SSL/TLS certificate to enable HTTPS across the entire site immediately.

Get this report delivered to your inbox

Receive a summary of the pflaum.at security findings by email. Quick and easy to share with decision makers.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

80/100

Score

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

5/100

Score

No HTTPS encryption

CRITICAL

NIS2 requires appropriate technical measures including encryption

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Need this report as a PDF?

Download the complete pflaum.at security analysis as a professional PDF. Share it with your team, clients, or stakeholders.

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

50/100

Score

Email Security Check Incomplete

MEDIUM

Some email security checks timed out

SPF

Sender Policy Framework

DKIM

DomainKeys Identified Mail

DMARC

Domain-based Message Authentication

MX Records

Mail Exchange Records

BIMI

Brand Indicators

MTA-STS

Mail Transfer Agent Security

TLS-RPT

TLS Reporting

DNSSEC

DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100

Score

No HTTPS Encryption

CRITICAL

Website does not use HTTPS encryption, making all data transmission vulnerable to interception

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100

Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:104.26.6.129, 104.26.7.129, 172.67.73.142

AAAA Records:2606:4700:20::681a:681, 2606:4700:20::ac43:498e, 2606:4700:20::681a:781

Name Servers:

eric.ns.cloudflare.comDNS only

eva.ns.cloudflare.comDNS only

MX Records:

10: mx1.arcelormittal.com

20: mx2.arcelormittal.com

SOA:Serial: 2373528129, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:576ms

⚡Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100

Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

How does pflaum.at compare?

pflaum.at scores below average. Browse similar domains to see how competitors handle security.

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using a modern JavaScript stack including Algolia for search, Matomo for analytics, Mustache.js for templating, and FontAwesome for icons. It uses Cloudflare for DNS and CDN services. The site is mobile optimized with responsive design and good navigation clarity. Performance metrics indicate slow loading times, possibly due to lack of SSL and resource optimization. No common CMS detected, suggesting a custom or proprietary platform. SEO is well addressed with meta tags and Open Graph data. Accessibility is basic but present. The lack of SSL is a major technical risk. Overall, the infrastructure is modern but requires security and performance improvements.

Professional PDF & Marketing Data