Medium-risk security reports

interstruct AG is a Berlin-based digital creative agency specializing in UX/UI design, web development, and digital strategy. The company positions itself as a specialist in transforming complex business challenges into impactful digital platforms, focusing on measurable results and user-centric solutions. Their key services include consulting, concept development, UX/UI design, content creation, technical implementation, and analytics. The website reflects a mature, professional business with a consistent brand and clear market positioning in the technology sector.

Sloan Servicing is a newly established financial services company specializing in loan servicing solutions. The website is built using modern web technologies, primarily Angular 19, and integrates several marketing and analytics tools such as Pendo, Tealium, Hotjar, and Google Analytics. The technical infrastructure indicates a moderate level of digital maturity with room for improvement in performance and SEO optimization. Security measures include a Content Security Policy and various security headers; however, some misconfigurations such as the improper use of Strict-Transport-Security and lack of DNSSEC reduce the overall security posture. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no terms of service or incident response information is available. Overall, the website is functional but lacks comprehensive business and security transparency, which impacts trust and credibility.

The Nationwide Multistate Licensing System & Registry (NMLS) Resource Center website serves as an authoritative platform providing mortgage licensing information and regulatory resources. It targets mortgage professionals, regulators, and consumers seeking licensing verification and related data. The site is hosted on Microsoft SharePoint Online, leveraging modern web technologies but with basic content presentation and limited interactive features. Security posture is solid with HTTPS enforced, though security headers and privacy compliance mechanisms are lacking. The absence of explicit privacy and cookie policies, as well as contact information, represents areas for improvement. Overall, the website is trustworthy and professional but could enhance user experience and compliance transparency.

Medienhaus/NEXT/ is a well-established German media industry event and knowledge platform operated by AVS Abrechnungs- und Verwaltungs-Systeme GmbH. It serves media professionals by providing digital impulses, best practices, and networking opportunities through annual events and related content. The website is built on TYPO3 CMS and integrates modern privacy and analytics tools such as Usercentrics and Matomo, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, targeting media sector stakeholders in Germany.

The website eobrazovanje.com serves as an official educational portal affiliated with the Ministry of Education and Culture of Republika Srpska and the technology partner Lanaco. It provides educational resources, news, and professional development content targeting teachers, students, parents, and adult learners within the Republika Srpska region. The portal covers multiple education levels including preschool, primary, secondary, and adult education, offering downloadable materials and links to official pedagogical institutions. The site is primarily in Serbian using both Latin and Cyrillic scripts, reflecting its regional focus. Technically, the website is built on Microsoft SharePoint, leveraging a variety of JavaScript libraries such as jQuery, Bootstrap, Font Awesome, and Owl Carousel for UI components and interactivity. The platform is moderately optimized for performance and mobile responsiveness, with basic accessibility features. Hosting appears to be managed or partnered with Lanaco, a known IT company in the region. SEO and metadata are basic but functional. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. The SharePoint form digest mechanism is used to mitigate CSRF risks. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and related privacy regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is a credible and trustworthy government-affiliated educational resource with good content quality and technical implementation. However, it would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen user trust and regulatory adherence.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

Staples Imprint Solutions operates a specialized punch-out simulation website designed to facilitate B2B ordering of customized print products. The site targets business customers and partners who use punch-out catalogs for streamlined ordering processes. The business is positioned within the retail sector under the Staples brand umbrella, with a domain age indicating a mature and stable presence since 2012. Technically, the website is built on ASP.NET Web Forms with JavaScript validation, but lacks modern SEO, accessibility, and mobile optimization features. Security posture is moderate with basic form validation but missing critical security headers and DNSSEC. No privacy or cookie policies are present, and no contact or social media information is provided, limiting transparency and user trust. Overall, the site serves a niche business function but requires improvements in security, privacy compliance, and user experience to enhance credibility and trust.

Klix.ba is the most visited and influential news portal in Bosnia and Herzegovina, providing fast and important news from Sarajevo, the country, and the world. The website operates on an advertising-supported business model, leveraging multiple ad networks including Amazon Ads, PubMatic, and Google Ad Manager. The technical infrastructure includes modern JavaScript libraries, consent management via Didomi, and analytics through DotMetrics and Google Analytics. The site is well-optimized for mobile and desktop users with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement, bot protection via reCAPTCHA, and GDPR-compliant consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, Klix.ba presents a professional, trustworthy, and compliant digital presence with a strong market position in the media sector of Bosnia and Herzegovina.

Schweppes.com serves as a global brand portal for the Schweppes beverage company, providing regional navigation to localized websites primarily for North America and Europe. The site content is minimal and focused on brand presence rather than direct consumer engagement. Technically, the site uses legacy JavaScript libraries such as Prototype.js and modern tracking tools like Google Analytics and Google Tag Manager. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. The WHOIS data is notably missing or indicates the domain is unregistered, which is inconsistent with the brand's global presence and raises legitimacy concerns. Overall, the site is functional but basic, with significant gaps in compliance and security transparency.

ProCredit Bank d.d. Sarajevo is a German-owned financial institution operating in Bosnia and Herzegovina, specializing in retail and SME banking with a strong focus on sustainability and digital innovation. The bank offers a comprehensive range of services including current accounts, savings, loans, and digital banking platforms such as ProBanking and mobile applications. Their market position is strengthened by transparent business ethics, ISO certifications, and a commitment to green financing. Technically, the website is built on modern frameworks like Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, complemented by an incident response mechanism via whistleblowing. However, the absence of a cookie consent mechanism and vulnerability disclosure page are notable compliance gaps. Overall, the bank demonstrates a high level of professionalism, trustworthiness, and digital maturity.

Fiare Media Tools operates as a specialized provider of digital tools aimed at news publishing businesses, offering custom content management systems, layout automation, and integrated newsroom solutions. The website presents a professional and consistent brand image targeting media companies seeking to digitize and automate their publishing workflows. Technically, the site employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent, and uses HTTPS to secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal privacy policies. Overall, the site is functional and well-designed but would benefit from enhanced transparency and security practices.

EUROS Osiguranje is a local insurance company operating in Bosnia and Herzegovina since 2016, offering a range of insurance products including property, auto, and health insurance. The website presents a professional and well-structured digital presence with clear service offerings targeted at residents and businesses within Bosnia and Herzegovina. The technical infrastructure includes modern web technologies such as Google Analytics and Swiper.js, hosted on DNS servers associated with crohost.net. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced compliance and security measures.

Satwork is a well-established company founded in 2005 specializing in satellite vehicle tracking and fleet management services primarily in Bosnia and Herzegovina and the surrounding region. The company offers a comprehensive suite of GPS-based solutions including fuel consumption control, driver communication, route optimization, and digital tachograph data management. With subsidiaries in Serbia, Montenegro, and Austria, Satwork maintains a strong regional presence and is recognized as a market leader in its domain. The website reflects a professional and consistent brand image with detailed service descriptions and multiple contact points, supporting its credibility and customer engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. However, there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, Satwork demonstrates maturity by holding ISO 9001 and ISO/IEC 27001 certifications, indicating a commitment to quality management and information security. The website uses HTTPS for secure communications, especially on login forms, and implements user-friendly features like password visibility toggling. Nonetheless, the absence of explicit incident response contacts, vulnerability disclosure policies, and cookie consent mechanisms highlights areas for compliance enhancement. Overall, Satwork presents a trustworthy and professional online presence aligned with its business operations. The main risks relate to privacy compliance gaps and security header omissions, which should be addressed to strengthen user trust and regulatory adherence. Strategic improvements in these areas will enhance the company’s digital maturity and security posture, supporting sustained growth and customer confidence.

The website www.eaclubs.org is a Wix-hosted site with minimal accessible content and no visible business or organizational details. The site lacks privacy, cookie, and terms of service policies, as well as contact information, which limits its credibility and compliance posture. Technically, it uses standard Wix scripts and polyfills, indicating a basic modern web infrastructure but with limited optimization and SEO features. Security posture is weak due to absence of security headers and no visible HTTPS enforcement details. WHOIS data is unavailable due to a malformed request or privacy protection, which reduces trust in domain legitimacy. Overall, the site appears to be a small-scale or early-stage community or club website with limited digital maturity and security readiness.

NESTRO PETROL a.d. operates the largest network of petrol stations in Bosnia and Herzegovina, managing over 80 retail locations under the NESTRO brand. The company offers various loyalty card programs targeting both individual and corporate customers, enhancing customer retention and engagement. The website reflects a mature business with a clear market position supported by its parent company OPTIMA Grupa d.o.o. The digital presence includes interactive maps, promotions, and news updates, catering to a general audience primarily in the Serbian language with options for Russian and English. Technically, the website utilizes a traditional tech stack including jQuery 1.11.1, Bootstrap, and Google Analytics for tracking, alongside Raygun for error monitoring. While the site is mobile optimized and well-structured, some technical debt is evident due to the use of outdated libraries and lack of modern security headers. The absence of DNSSEC and security policies indicates room for improvement in security posture. Security-wise, the domain is well-established with a consistent WHOIS record and clientTransferProhibited status, indicating domain ownership protection. However, the lack of DNSSEC, security headers, and outdated JavaScript libraries present potential vulnerabilities. No explicit privacy or cookie policies were found, which may impact GDPR compliance. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in security headers, updated libraries, and explicit privacy documentation would enhance trust and compliance. The business is credible with a strong market presence but should address technical and compliance gaps to reduce risk and improve user trust.

Searchspring is a well-established ecommerce technology company specializing in AI-driven search, merchandising, and personalization solutions. With a domain age of over 20 years and a parent company Athos Commerce, it holds a strong market position targeting ecommerce retailers seeking to improve product discovery and conversion rates. The website demonstrates a mature digital presence with modern technologies and integrations, including WordPress CMS, HubSpot marketing tools, and multiple analytics platforms. Security posture is good with HTTPS enforced and domain status protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is robust with clear cookie consent and GDPR-aligned policies. Overall, the site is professional, trustworthy, and technically sound, supporting its business credibility and market leadership.

RedIRIS is a well-established Spanish academic and research network providing connectivity and advanced ICT services to the academic and scientific community since 1988. It operates under the auspices of Red.es, a Spanish public entity, and holds important certifications such as ISO 27001 and ENS, underscoring its commitment to security and quality. The website reflects a professional and consistent brand image targeting academic institutions and researchers in Spain. Technically, the site uses modern web technologies including jQuery, DataTables, and Google Analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and certifications, though explicit security headers and incident response policies are not publicly visible. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy, secure, and professionally maintained, serving a critical role in Spain's academic infrastructure.

Red.es is a Spanish government entity under the Ministry of Economic Affairs and Digital Transformation, dedicated to promoting digital transformation across businesses, citizens, and public administrations. The website serves as a comprehensive portal for initiatives, news, and resources related to digital innovation and funding programs in Spain. The site is well-structured, professionally designed, and targets a broad audience including SMEs, entrepreneurs, and public sector entities. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap 4.6 and utilizes Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, cookie consent management, and antibot protections on forms. However, some security headers could be improved. The security posture is strong with multiple certifications such as ISO 27001 and compliance with the Spanish National Security Scheme (ENS). No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website reflects a mature digital presence consistent with a government agency, with high trustworthiness and professionalism. The domain WHOIS data is restricted as per .es domain policies, which is typical and appropriate for this entity.

Dominios.es is the official Spanish government entity responsible for managing the registration of .es country code top-level domains. It operates under the umbrella of Red.es, a public enterprise of the Spanish government. The website provides comprehensive information and services related to domain registration, management, and security, targeting individuals, businesses, and authorized registrars. The entity holds recognized certifications such as ISO 9001, ISO 27001, and ENS, underscoring its commitment to quality and security. Technically, the site is built on Drupal 10 with modern web technologies and integrates Google Tag Manager and CookiesJSR for analytics and cookie management. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

Well BP is a newly founded digital consulting agency specializing in custom software development, digital product creation, and digital marketing services. The company positions itself as a trusted partner offering flexible engagement models and comprehensive digital solutions across various industries. Their website is professionally designed using WordPress and integrates modern technologies such as Google Maps API and advanced WordPress plugins. The technical infrastructure is solid with Cloudflare DNS and HTTPS enabled, though there is room for improvement in security headers and privacy compliance. The security posture is moderate with no critical vulnerabilities detected but lacks published security policies and cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy, targeting businesses seeking digital transformation services.

The Zoologischer Stadtgarten Karlsruhe website represents a well-established zoological garden in Germany focused on family-friendly animal exhibitions, conservation, and education. The site is built on WordPress with the Avada theme, optimized with LiteSpeed caching and enhanced accessibility via the UserWay widget. The technical infrastructure is modern and secure, leveraging HTTPS and Cloudflare DNS services. However, the site lacks explicit privacy and cookie policies, as well as visible contact information and security headers, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, serving its audience effectively but with room to enhance privacy compliance and security transparency.

The Deutscher Hochschulverband (DHV) operates a professional seminar and workshop platform targeting academics and scientists in Germany. The website offers over 250 interdisciplinary continuing education events annually, including online, video, in-person, and in-house seminars. The organization is well-established and recognized in the education sector, providing tailored knowledge and career development opportunities for its audience. The platform is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website employs a modern tech stack including Bootstrap and jQuery, hosted on INWX name servers. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although security headers and explicit security policies are absent. Privacy compliance is strong, with a clear cookie consent mechanism and a comprehensive privacy policy linked to the parent organization's domain. Overall, the site demonstrates a high level of business credibility and trustworthiness, supported by consistent WHOIS data and transparent contact information. No critical security or privacy issues were detected, and the content is safe for general audiences. Strategic improvements could focus on enhancing security headers and publishing incident response information to further strengthen trust and compliance.

SimpleThings GmbH is a small, established internet agency based in Bonn, Germany, founded in 2001. The company specializes in full-service digital solutions including consulting, web design, software development, online marketing, and hosting. Their market position is strengthened by a focus on open-source technologies such as TYPO3 and Symfony, catering primarily to businesses and organizations seeking professional digital services. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on TYPO3 CMS with integrations of modern frameworks like Symfony and supports various platforms including Magento and Shopware for e-commerce. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of cookie consent mechanisms and explicit security headers suggests room for improvement in privacy and security compliance. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, the lack of explicit security policies and incident response contacts indicates a moderate security posture. No WAF or blocking mechanisms were detected, and the domain appears legitimate and consistent with the business claims. Overall, SimpleThings GmbH presents a trustworthy and professional digital presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security best practices would further strengthen their security posture and regulatory adherence.

Neue Messe Fulda GmbH operates as a regional event organizer and exhibition host based in Fulda, Germany. The company specializes in organizing trade fairs, public exhibitions, conferences, and congresses, providing a platform for businesses and visitors to connect. Their website reflects a professional and consistent brand image, targeting event organizers, exhibitors, and attendees interested in specialized trade fairs and public events. The business model centers on event management and exhibition services, positioning Neue Messe Fulda as a key player in the regional events market. Technically, the website is built on the Odoo CMS platform, utilizing modern frontend technologies such as Bootstrap and jQuery, with integrations like LightGallery for media display and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS with a valid SSL configuration and a cookie consent mechanism, although some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a reasonable posture with encrypted communications and CSRF token usage. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-aligned cookie consent and a privacy policy page. Overall, the website is trustworthy, professionally maintained, and suitable for its business purpose. Strategic enhancements in security transparency and policy publication would further strengthen its compliance and trustworthiness.

unaone imc services Markus Hagge is a small German technology service provider specializing in personalized web hosting, domain registration, cloud solutions, and managed services such as Nextcloud, Jitsi, and BigBlueButton. The company emphasizes data privacy by hosting exclusively in German data centers, appealing to privacy-conscious customers. The website is professionally designed using WordPress with modern plugins and offers a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the overall business presentation and social media presence support credibility. Strategic improvements in security transparency and WHOIS registration clarity are recommended.

The website www.sdgmontenegro.me serves as an official or semi-official platform providing data and indicators related to the United Nations Sustainable Development Goals (SDGs) specifically for Montenegro. It offers users access to indicator data, downloadable datasets, news, and publications related to SDG progress. The target audience includes government agencies, researchers, policymakers, and the general public interested in sustainable development metrics. The platform is built on the Open SDG framework, leveraging modern web technologies such as Bootstrap, jQuery, Chart.js, and Leaflet for interactive data visualization and mapping.

The website 'Održivi razvoj za sve' is a Serbian platform dedicated to facilitating public dialogue and information sharing on the Sustainable Development Goals (Agenda 2030) within Serbia. It operates as a non-profit initiative, supported by multiple partner organizations, and targets policymakers, NGOs, and the general public interested in sustainable development. The platform offers resources such as news, newsletters, e-learning modules, and document repositories to support its mission. Technically, the site is built on WordPress 6.8.2, utilizing modern web technologies including jQuery, OwlCarousel, FontAwesome, and Slider Revolution. It employs Matomo analytics for user tracking, indicating a privacy-conscious approach. The website is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and some recommended security headers. There is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is present. Cookie consent is implemented, but no explicit privacy policy page was found, which is a compliance gap. Overall, the website presents a professional and trustworthy front for its niche non-profit mission. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving accessibility features to strengthen compliance and user trust.

Indikatori.rs is a Serbian national government portal managed by the Republic Statistical Office, designed to aggregate and provide access to various statistical indicators from multiple sources. The platform aims to facilitate easy access to indicator data, quality reports, metadata, and comparative statistics for Serbia and other countries. The website is funded by the European Union and targets data producers and users including government entities and researchers. Technically, the site uses Bootstrap and jQuery for frontend presentation, with a moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed but lacking DNSSEC and security headers. No privacy or cookie policies are present, which impacts compliance. The domain registration is consistent and legitimate, with no suspicious patterns. Overall, the site is professional and trustworthy but could improve privacy and security practices.

Lighthouse Engineering is a specialized service provider focusing on residential and commercial foundation inspections and planning. The company appears to be established since 2007, with a domain age consistent with its business history. The website is built on WordPress using the Divi theme and incorporates Yoast SEO for search optimization. The technical infrastructure includes Cloudflare DNS but lacks DNSSEC and security headers, indicating room for improvement in security hardening. The website content is professional and relevant to its target audience of property owners and developers, but lacks explicit privacy, cookie, and terms of service policies, which impacts compliance posture. Overall, the security posture is basic with HTTPS enabled but missing advanced protections and incident response information. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure and incident response contacts to enhance trust and compliance.

VR Bank Heilbronn Schwäbisch Hall eG is a regional cooperative bank serving customers primarily in the Heilbronn and Schwäbisch Hall regions of Germany. The website provides information about the bank's services and local presence, targeting local customers seeking banking and financial products. The business model is cooperative banking with a focus on community and local support. The site uses modern web technologies including Angular and Angular Material, with Dynatrace monitoring for performance insights. However, the website lacks visible privacy and cookie policies, contact information, and explicit security headers, which are important for compliance and trust. The security posture is basic with room for improvement in policy transparency and technical security measures. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance and security practices.

The website ekulturars.com is registered since 2011 and appears to be a long-standing domain. However, the website content is completely empty with no metadata, no visible content, no contact information, and no policies. This indicates the site is either inactive or a placeholder. The technical infrastructure is minimal with no detected CMS, frameworks, or analytics. Security posture is basic with HTTPS enabled but no DNSSEC or security headers. There are no signs of privacy compliance or business credibility on the site. Overall, the site presents a low risk but also low trust and engagement potential.

The domain indigotools.com is registered since 2005 with IONOS SE as the registrar, indicating a potentially established business presence. However, the website content is currently inaccessible, returning an HTTP 404 error page with no metadata, structured data, or business information available. This lack of content prevents any meaningful analysis of the company's services, market position, or technical infrastructure. The absence of contact information, privacy policies, or security headers further limits the assessment of the site's security posture and compliance status. Given the domain age and registration consistency, the domain itself appears legitimate, but the website is non-functional or under maintenance, which significantly impacts trust and usability.

The website stfdoboj.net is a parked domain managed through Sedo's domain parking service. It provides categorized informational links primarily in Finnish, targeting general users seeking information on various topics such as automotive, electronics, travel, and lifestyle. There is no active business presence or company information on the site, and it functions mainly as a placeholder with monetized links. The technical infrastructure relies on standard HTML and JavaScript with Sedo's parking scripts, hosted via Sedo's parking platform. The site lacks advanced technical frameworks or CMS platforms and shows basic mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS enforcement and security headers, and no contact or privacy policies beyond a basic Sedo privacy link are provided. Overall, the site presents low business credibility and minimal privacy compliance, with no signs of malicious or adult content. The domain WHOIS data is unavailable, indicating possible non-registration or privacy protection, which further reduces trustworthiness.

The website putevirs.com represents the official online presence of Јавно предузеће Путеви Републике Српске, a government-owned public enterprise responsible for managing, constructing, maintaining, and protecting the road network in Republika Srpska, Bosnia and Herzegovina. The site provides detailed news, updates, and information about road infrastructure projects and public procurement plans, targeting residents and stakeholders within the region. The business model is focused on public sector infrastructure services, positioning the company as a key entity in transportation within Republika Srpska. From a technical perspective, the website employs legacy JavaScript libraries such as MooTools 1.2.1 and custom scripts, with CSS-based styling. The platform appears to be custom-built or uses an unknown CMS, with basic mobile optimization and accessibility features. Performance is moderate, and SEO optimization is basic, with proper meta tags but no advanced structured data or Open Graph tags detected. Security posture is moderate but shows room for improvement. The domain lacks DNSSEC, modern security headers, and there is no visible enforcement of HTTPS or HSTS. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. No incident response or security contact information is provided. Overall, the website is functional and provides relevant content for its audience but lacks modern security and privacy compliance features. The domain registration is consistent and appropriate for the business history, enhancing trustworthiness. Strategic improvements in security headers, privacy policies, and technology modernization are recommended to enhance the site's security and compliance posture.

Auto-moto savez Republike Srpske is a well-established non-profit organization providing roadside assistance, traffic updates, and membership services primarily in Republika Srpska, Bosnia and Herzegovina, and Europe. The website reflects a mature digital presence with a WordPress-based infrastructure, interactive maps, and live border crossing information. The organization targets local residents and travelers, offering key services such as emergency assistance and safety campaigns. The domain is long-standing and consistent with the organization's identity, enhancing trustworthiness. Technically, the site uses modern web technologies and plugins but lacks advanced security headers and DNSSEC, which could improve its security posture. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap for GDPR and regional regulations. Overall, the website is professional and functional with room for security and compliance improvements.

Getlink.space is a newly launched (June 2024) online URL shortening service offering free and customizable short links with analytics and link management features. The service targets general internet users, businesses, and influencers seeking to simplify link sharing and track link performance. The website is built using modern web technologies including SvelteKit and Bootstrap, hosted with Cloudflare DNS and protected by privacy-protected domain registration. The site is mobile optimized and provides a good user experience with clear navigation and multi-language support. Security posture is moderate with HTTPS enforced and anti-bot CAPTCHA on forms, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism despite use of Google Adsense and Tag Manager. No direct company contact emails or phone numbers are provided, only a contact form. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

Xpert Business is a well-established non-profit educational platform operated by the Volkshochschulverband Baden-Württemberg, offering modular vocational training and certification in business and accounting across Germany. The website provides comprehensive course information, certification pathways, and partnerships with universities and chambers, positioning it as a credible and recognized provider in the adult education sector. Technically, the site uses standard web technologies including jQuery and CSS, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong, with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

The website www.filderstadt.de serves as the official municipal portal for the city of Filderstadt, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen offices, appointment booking, economic development, education, and tourism. The site is well-structured with extensive navigation and a consistent branding approach, reflecting a professional municipal government presence. The target audience primarily includes local citizens, visitors, and commercial entities within the region. Technically, the website employs a modern technology stack featuring jQuery, jQuery UI, FontAwesome, and other JavaScript libraries, built on the dvv-Mastertemplates CMS platform. It is hosted on German-based servers with secure HTTPS configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site uses HTTPS and deferred script loading, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security transparency and readiness. Overall, the website is safe, trustworthy, and suitable for general audiences, with no adult or questionable content. The WHOIS data aligns with a legitimate municipal entity, reinforcing the site's credibility. Strategic recommendations include publishing a clear privacy policy, enhancing security headers, and providing incident response information to strengthen compliance and user trust.

Gemeinde Dossenheim operates as a local government entity serving the residents and visitors of Dossenheim, Germany. The website provides comprehensive information about municipal services, local economy, culture, events, and digital citizen services. The municipality leverages modern web technologies including TYPO3 CMS and integrates ISO 27001 certified third-party services for recruiting and session management. The site is well-structured, accessible, and optimized for mobile devices, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms including a detailed cookie consent banner and privacy policy. However, explicit incident response and vulnerability disclosure information are absent, which could be improved to enhance trust and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

QUACERT is a German certification company specializing in accredited certifications for quality, environmental, energy, and education management systems, as well as waste management compliance. With approximately 30 years of experience and DAkkS accreditation, it holds a strong market position serving companies seeking recognized certifications. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Technically, the site uses modern JavaScript components and consent management tools, hosted by a reputable provider. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers and incident response disclosures could be improved. Overall, the site is trustworthy, compliant with GDPR, and free of vulnerabilities or suspicious elements.

The website represents the official online presence of the Ministry for Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It focuses on public information campaigns related to sustainable forestry, climate protection, and consumer awareness, notably the #UnserHolz campaign promoting wood as a climate-friendly resource. The site targets citizens, environmental stakeholders, and professionals in forestry and construction sectors within Baden-Württemberg. The content is professionally curated, accessible, and well-structured, reflecting a mature digital presence of a government entity. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with user consent, and integrates modern web technologies ensuring good performance and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. Overall, the domain registration and website content align, confirming legitimacy as an official government resource.

eKupon.ba is a regional e-commerce platform focused on providing discounted travel, wellness, and leisure offers primarily targeting customers in Bosnia and Herzegovina. The website presents a professional and modern design with a good user experience, showcasing a variety of hotel deals, spa treatments, and travel packages. The platform leverages modern web technologies including Alpine.js and Laravel Livewire, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by adding explicit cookie consent and detailed GDPR-compliant privacy policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site is well-positioned in its market niche but should enhance privacy and compliance transparency to improve trust and regulatory adherence.

The Internacionalni teatarski festival MESS website serves as the official online presence for a well-established cultural and theatrical festival in Bosnia and Herzegovina. It provides comprehensive information about upcoming events, exhibitions, and festival news, targeting theater enthusiasts and the cultural community. The website leverages a modern WordPress infrastructure with popular plugins such as Elementor and Slider Revolution, ensuring a visually appealing and moderately performant user experience. However, it lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR adherence and user trust. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the site is credible and professional but would benefit from enhanced privacy and security practices.

KupiPoklon.ba is an established e-commerce platform based in Bosnia and Herzegovina, specializing in the sale of gift vouchers redeemable at a network of retail partners. The business targets general consumers and corporate clients seeking convenient gifting solutions. The website presents a professional design with clear navigation and relevant content in Croatian, supporting multiple brands and services. Technically, the site uses legacy JavaScript libraries such as jQuery 1.3.2 and plugins like Fancybox and Cycle, indicating some technical debt and potential security risks. The platform integrates payment processing partners including Monri, Mastercard, and Visa, reflecting a mature payment infrastructure. Security posture is moderate with HTTPS enforced but lacks modern security headers and uses outdated libraries. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the site is functional and credible but would benefit from modernization and enhanced security and privacy practices.

The Deutscher Hochschulverband (DHV) is a well-established professional association representing scientists and academics in Germany. The website serves as a comprehensive portal offering legal advice, coaching, seminars, and career support tailored to the academic community. It maintains a strong market position as a key stakeholder in German higher education and research sectors, with a large membership base and diverse service offerings. The site is professionally designed, well-branded, and targets academic professionals effectively. Technically, the website is built on the TYPO3 CMS platform, leveraging privacy-conscious analytics via Matomo and hosted on reputable infrastructure (NetCologne). The site demonstrates good performance, mobile optimization, and accessibility standards. It employs modern web technologies and maintains clear navigation and SEO best practices. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and disables cookies in analytics by default, reflecting a strong privacy posture. However, it lacks explicit security policy documentation and incident response contacts, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, compliant with GDPR, and professionally managed, making it a reliable resource for its target audience. Strategic improvements in security transparency and incident response readiness are recommended to further enhance trust and compliance.

The Deutscher Landkreistag (DLT) is a prominent German government association representing 294 counties, covering 96% of the country's area and serving 68% of its population. The website serves as an information hub for news, publications, events, and digital projects related to county-level governance and administration. It targets municipal officials, policymakers, and stakeholders in local government. The organization operates as a non-profit entity focused on advocacy and support for counties in Germany. Technically, the website is built on Joomla CMS with the Gantry 5 framework, leveraging modern JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia integration. Cookie consent mechanisms are implemented, reflecting GDPR compliance. However, explicit security policies and incident response information are not published. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks visible security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing consistent registration and legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its government audience effectively. Strategic improvements could include publishing detailed security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to strengthen security posture and transparency.

The website myspreadshop.it serves as a landing page for Spreadshop, a print-on-demand merchandise platform targeting Italian users. It offers users the ability to create and sell custom merchandise online, leveraging the Spreadshirt group infrastructure. The site is minimalistic, focusing on a call to action to open a merchandise store via a partner registration link. The business model centers on e-commerce and print-on-demand services, with a medium-sized market presence supported by the parent company Spreadshirt. The domain is relatively new but consistent with the business timeline and geographic focus. Technically, the site uses basic HTML and CSS with embedded web fonts, but lacks advanced frameworks or CMS indicators. Performance and mobile optimization are basic but functional. No analytics or tracking scripts were detected, indicating minimal user data collection. SEO and accessibility features are present at a basic level. Security posture is moderate with DNSSEC enabled and domain status OK, but no visible security headers or HTTPS confirmation in the provided data. Privacy and cookie policies are absent, reducing compliance confidence. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but lacks formal security policies and incident response information. The absence of privacy and cookie policies and contact details limits trust and compliance with GDPR. No WAF or blocking mechanisms were detected, and content is fully accessible. Overall, the site is safe with no adult or explicit content, targeting a general audience interested in merchandise sales. Recommendations include implementing HTTPS with strong TLS, adding security headers, publishing privacy and cookie policies, providing contact and incident response information, and establishing a vulnerability disclosure process to enhance security posture and compliance.

ZEIT SPRACHEN is a reputable language learning brand offering printed and digital magazines for multiple languages including English, French, Spanish, Italian, and German. It operates as a 100% subsidiary of the ZEIT Verlagsgruppe, a well-known German publishing group, positioning itself strongly in the education sector with high-quality journalistic content tailored for language learners and educators. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content.

ZEIT SPRACHEN is a German-based language education publisher serving over 1.4 million users with language learning products and cultural content. The website is built on Drupal 11 and integrates modern consent management tools such as Usercentrics, reflecting a commitment to GDPR compliance. The site targets language learners, educators, companies, and advertisers, positioning itself as a reputable player in the education and media sectors within Germany. Technically, the site demonstrates good mobile optimization, SEO practices, and a moderate performance profile, hosted on servers associated with ccn.net. Security posture is adequate but could be improved by implementing security headers and publishing explicit privacy and terms of service documents. No signs of blocking or WAF interference were detected, allowing full content access and analysis.

HERDT-Verlag für Bildungsmedien GmbH operates HERDT|Campus, a digital educational media platform targeting academic institutions in Germany. The platform restricts access to authorized university networks, providing exclusive learning content for research and teaching. The company has a stable market position as a niche provider of digital educational resources, founded in 2013 and maintaining consistent branding and contact transparency. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and the Yii framework, with Cloudflare DNS services enhancing infrastructure reliability. However, the site shows basic SEO and accessibility features and lacks visible advanced security headers or cookie consent mechanisms. Security posture is moderate, with domain registration and DNS configurations indicating legitimacy but missing DNSSEC and security policy disclosures. Overall, the site is safe, professional, and targeted at a general academic audience, but improvements in privacy compliance and security best practices are recommended.