Security Directory

Републички педагошки завод Републике Српске is a governmental educational institution serving the Republika Srpska region of Bosnia and Herzegovina. It provides pedagogical advisory services, professional development for educators, student achievement analysis, and supports educational projects including e-learning initiatives. The website is well-structured, primarily in Serbian Cyrillic, targeting educators, students, and educational institutions within the region. The institution holds a key position in the local education sector with a domain registered since 2003, indicating established presence and trust. Technically, the website employs modern web technologies including Bootstrap 4.5, jQuery, Font Awesome, and Google Fonts, hosted by BitLab. The site is mobile responsive and offers good user experience and navigation clarity. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to enhance security posture. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is professional and trustworthy with good business credibility but requires enhancements in privacy compliance and security best practices to reach higher maturity levels.

Р

Републички хидрометеоролошки завод

rhmzrs.com

56

The Republika Srpska Hydrometeorological Institute (Републички хидрометеоролошки завод) is a government agency responsible for meteorological, seismological, hydrological, and environmental monitoring and reporting within Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing weather forecasts, seismic activity reports, hydrological bulletins, and environmental quality data primarily in Serbian language. It targets citizens, governmental bodies, agricultural stakeholders, and scientific communities. The business model is a public service institution funded and operated by the government, with a stable market position as the official source of hydrometeorological information in the region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, Leaflet.js for interactive maps, and Axios for asynchronous requests. Hosting is supported by Cloudflare DNS services, enhancing reliability and performance. The site is mobile optimized with good navigation clarity and professional design, though accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and has domain transfer protections. However, it lacks DNSSEC, security headers like CSP or HSTS, and a cookie consent mechanism, which are areas for improvement. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure policies are published. The WHOIS data aligns well with the website’s governmental nature, showing a consistent registration history and no privacy protection, which is appropriate. Overall, the website is a trustworthy and professional government resource with good content quality and technical implementation. Security posture is moderate with room for enhancements in headers and compliance. Privacy compliance is basic and could be improved with explicit policies and consent mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and security policies, and implementing cookie consent to enhance trust and compliance.

L

Lanaco d.o.o

skolers.org

43

The website skolers.org serves as a centralized portal hub for the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It provides access to multiple educational eServices including portals for education, electronic courses, student enrollment, and electronic diaries for various school levels. The target audience includes students, parents, teachers, and educational institutions within Republika Srpska. The business model is government-affiliated digital service provision, positioning itself as an official and trusted educational platform in the region. Technically, the website uses standard HTML5, CSS3, and jQuery 3.5.1, with a moderate performance and good mobile optimization. The site lacks advanced frameworks or CMS indications and does not show evidence of analytics or tracking scripts in the provided content. SEO and accessibility are basic but functional. The domain is registered with Lanaco d.o.o in Bosnia and Herzegovina, consistent with the website's purpose and geographic focus. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and related regulations. No forms or data collection mechanisms are visible on the main page, reducing immediate data exposure risks. Social media links connect to official Ministry accounts, enhancing trust. Overall, the website is a credible and functional government educational portal with good business credibility but requires improvements in privacy compliance and security best practices to strengthen its posture and user trust.

M

Merkle Inc.

eprize.com

70

Merkle Promotions, a division of Merkle Inc. and a dentsu company, specializes in digital promotions and gamification with over 25 years of experience. The company offers a broad range of promotional solutions including sweepstakes, instant win games, loyalty programs, and Web3 experiences, targeting brands seeking to engage customers through innovative digital activations. Their market position is strong, supported by notable clients such as Starbucks, Johnson & Johnson, and Coca-Cola, and a consistent brand presence. Technically, the website employs modern web technologies including GSAP for animations and Swiper.js for interactive galleries, delivering a visually engaging and mobile-optimized experience. While performance is moderate and SEO practices are good, there is room for improvement in accessibility and explicit CMS or hosting details are not evident. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit incident response or security policy disclosures. No critical vulnerabilities or exposed sensitive data were detected, but the absence of a cookie consent mechanism and incomplete WHOIS data for the domain reduce overall trust. The WHOIS query returned no registration data, which conflicts with the professional branding and may indicate privacy protection or domain registration issues. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security practices and clearer domain registration transparency. Strategic improvements in security headers, cookie consent, and WHOIS clarity are recommended to strengthen compliance and trust.

P

PULSE

discoverdebit.com

69

PULSE Network, a subsidiary of Discover Financial Services, operates a comprehensive debit card program platform including the Discover® Debit offering. The website presents a professional and well-structured digital presence targeting financial institutions, issuers, merchants, and partners in the payments ecosystem. The site emphasizes key benefits such as fraud mitigation, marketing support, and a growing global network, supported by endorsements from the American Bankers Association. Technically, the site leverages Adobe Experience Manager CMS and Adobe Launch for content management and analytics, ensuring a modern and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data limits domain registration trust verification, but the website's branding and content strongly indicate legitimacy. Overall, the site is a credible and professional resource for debit program partners and clients.

D

DFS Services LLC

discovernetwork.com

77

Discover Global Network operates as a major global payments network leveraging the combined strength of Discover® Network, Diners Club International®, and PULSE®. The company provides extensive payment acceptance, issuing, fraud prevention, PCI compliance, and technology platform services to businesses and financial institutions worldwide. The website reflects a mature, enterprise-level digital presence with comprehensive content, clear navigation, and strong branding consistent with Discover Financial Services. Technically, the site is built on Adobe Experience Manager with modern web technologies, optimized for mobile and accessibility, and includes multimedia elements and advanced search capabilities. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is missing or unavailable, which is unusual for a large corporate domain and warrants verification. Overall, the site is professional, trustworthy, and well-positioned in the finance industry.

D

DFS Services LLC

discoverglobalnetwork.com

76

Discover Global Network operates as a major payments network leveraging the combined strengths of Discover® Network, Diners Club International®, and PULSE®. The company provides global payment acceptance, fraud prevention, PCI compliance support, and innovative payment technologies to businesses and payment providers worldwide. Their market position is that of a large, enterprise-level financial services network with extensive global reach and transaction volume. Technically, the website is built on Adobe Experience Manager, featuring modern web technologies, responsive design, and multimedia content. The site demonstrates good SEO, accessibility, and user experience practices. Cookie consent and privacy policies are implemented, reflecting compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers and a public security policy or incident response information are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy. Despite this, the website content and branding strongly indicate a legitimate enterprise presence. Verification of domain registration status is recommended to ensure trustworthiness. Overall, the website is professional, secure, and compliant, with minor gaps in security transparency and domain registration information.

P

PULSE

pulsenetwork.com

69

PULSE Network operates as a specialized payments network focusing on debit card services, ATM network access, fraud detection, and partner support primarily for community banks and credit unions. The website presents a professional and consistent brand image, emphasizing service and partnership in the financial sector. Their key offerings include the PULSE Payments Network, ATM Network, Discover® Debit, and related processing and risk mitigation services. The company targets financial institutions, merchants, and ATM acquirers, positioning itself as a trusted partner in the payments ecosystem. Technically, the website is built on Adobe Experience Manager CMS and leverages Adobe Launch for tag management and analytics. The site is mobile responsive, accessible, and optimized for SEO with modern web technologies including HTML5, CSS3, and JavaScript frameworks. Performance is moderate with good user experience and clear navigation. Security best practices such as HTTPS enforcement and cookie consent mechanisms are implemented, though explicit security headers are not detected in the HTML content. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contact, or vulnerability disclosure program indicates room for improvement. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is not uncommon for financial services websites. Overall, the site is trustworthy, professional, and compliant with privacy regulations including GDPR. Strategically, PULSE should enhance its security transparency by publishing incident response and vulnerability disclosure information, improve HTTP security headers, and consider providing direct security contact channels. These steps will strengthen trust and security posture, supporting its market position as a reliable payments network provider.

B

Blaetterbuch - professionell online blättern

blaetterbuch.de

46

Blaetterbuch is a specialized technology provider offering professional online flipbook solutions that digitize print media such as flyers, catalogs, and brochures with realistic page-turning effects. Their service targets businesses seeking to extend the reach of their print publications into digital formats accessible across all major browsers and mobile devices. The company positions itself as a niche provider with a comprehensive service including hosting, customization, and integration of multimedia elements like videos and links. Technically, the website employs a modern web stack including Bootstrap, jQuery, and popular UI libraries such as Owl Carousel and Revolution Slider. The site is mobile-optimized and features a custom CMS backend indicated by dynamic content calls. While performance is moderate, the site is well-structured with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (assumed from URL), implements cookie consent mechanisms, and provides a comprehensive privacy policy compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or malicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving technical performance for a stronger security and user experience profile.

T

TIMOCOM GmbH

timocom.mk

60

TIMOCOM GmbH operates a leading digital marketplace platform for the logistics and road freight transport industry, primarily serving European markets. Founded in 1997 and headquartered in Germany, the company offers a comprehensive suite of services including transport exchanges, tender management, transport orders, and integration interfaces. The website is professionally designed, multilingual, and optimized for performance and user experience, reflecting a mature digital infrastructure supported by modern technologies such as HubSpot, Google Tag Manager, and Azure CDN hosting. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registration data is a notable gap but does not detract significantly from the overall legitimacy given the professional presentation and extensive business information. Strategic recommendations include enhancing transparency around security policies and incident response, and verifying domain registration details to improve trust.

T

TIMOCOM GmbH

timocom.bg

56

TIMOCOM GmbH operates a leading European logistics marketplace platform, specializing in road freight services including freight exchange, closed freight exchange, auctions, route and cost management, and transport orders. Founded in 1997 and headquartered in Germany, TIMOCOM serves a broad audience of logistics providers, carriers, freight forwarders, and shippers across multiple European countries. The website is professionally designed, multilingual, and integrates modern technologies such as HubSpot marketing tools, Google Tag Manager, and Usercentrics for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not publicly disclosed. Overall, TIMOCOM presents a trustworthy and well-established business with comprehensive logistics services and a strong market position.

T

TIMOCOM GmbH

timocom.pl

59

TIMOCOM GmbH operates a leading European digital marketplace for the logistics industry, providing services such as freight exchange, live shipment monitoring, and fast payment solutions. The platform targets logistics companies including carriers, freight forwarders, and shippers, facilitating efficient transport management and optimization. The company, founded in 1997 and headquartered in Germany, maintains a strong market position with over 156,000 users and up to one million daily freight offers. Technically, the website employs modern web technologies, including JavaScript frameworks, HubSpot marketing tools, and Azure CDN hosting, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement and consent management, though explicit security headers could be further confirmed. The absence of WHOIS data for the .pl domain is a notable anomaly but does not detract from the professional and trustworthy presentation of the business. Overall, TIMOCOM presents a mature, well-established digital logistics platform with comprehensive service offerings and a strong digital presence.

T

TIMOCOM GmbH

timocom.it

60

TIMOCOM GmbH operates a leading Road Freight Marketplace platform primarily serving the European logistics and transportation sector. Founded in 1997 and headquartered in Germany, the company offers a comprehensive suite of services including freight exchange, closed freight networks, transport order management, tracking, and value-added services. The platform targets shippers, freight forwarders, and transport companies, providing efficient and flexible logistics solutions. The website is professionally designed, multilingual, and reflects a mature digital presence with strong branding and trust signals.

T

TIMOCOM GmbH

timocom.dk

57

TIMOCOM GmbH operates a leading digital marketplace for the logistics and road freight transport industry, offering a comprehensive suite of services including freight exchange, closed freight exchange, transport orders, route and cost calculations, and APIs for seamless integration with existing transport management systems. The company targets logistics providers, freight forwarders, carriers, and transport buyers across Europe, positioning itself as one of the largest logistics networks in the region. Founded in 1997 and headquartered in Germany, TIMOCOM demonstrates a mature and professional digital presence with multi-language support and extensive customer success stories. Technically, the website leverages modern web technologies such as JavaScript, SVG graphics, and is hosted on Microsoft Azure CDN, ensuring fast performance and excellent mobile optimization. The use of Google Tag Manager, HubSpot analytics, and Usercentrics consent management reflects a mature digital marketing and privacy compliance strategy. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policy and incident response information are not publicly disclosed. The absence of WHOIS data for the domain limits transparency but is consistent with .dk domain registry practices. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements, making it a reliable platform for its target audience. Strategic recommendations include enhancing public security disclosures and verifying security headers to further strengthen trust.

E

ENORM Digital GmbH

enorm.media

52

ENORM Digital GmbH is a specialized internet agency based in Cologne, Germany, focusing on online advertising, digital media planning, and real-time advertising services. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, particularly in the cultural and financial sectors. Their business model revolves around delivering targeted online campaigns, programmatic buying, and media optimization to increase brand visibility and lead generation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references, positioning ENORM as a trusted niche player in the German online advertising market. Technically, the website is built on the TYPO3 CMS platform and leverages modern web technologies such as jQuery, Gumby Framework, and Google Maps API. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security header implementation. The presence of multiple external marketing and advertising tools, including Google Analytics and Facebook Pixel, indicates a mature digital marketing infrastructure. From a security perspective, the site uses SSL encryption as stated in its privacy policy, but lacks visible HTTP security headers and a dedicated security policy or incident response contact. Forms are implemented securely using POST methods, and no sensitive data is exposed in the HTML. Privacy compliance is well addressed with a comprehensive privacy statement aligned with GDPR requirements, although a cookie consent mechanism is absent. Overall, the security posture is adequate but could benefit from enhancements in header security and transparency. The domain WHOIS data is unavailable or protected, which is common for small digital agencies and justified for privacy reasons. Despite this, the website provides sufficient legal and contact information, client logos, and consistent branding to establish legitimacy and trustworthiness. No signs of malicious activity or suspicious patterns were detected. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and incident response transparency to further strengthen trust and compliance.

T

TIMOCOM GmbH

timocom.rs

61

TIMOCOM GmbH operates a leading European digital marketplace specializing in road freight logistics. The platform connects shippers, freight forwarders, and carriers to optimize transport processes through services such as freight exchange, shipment tracking, and integrated interfaces. The company has a strong market presence with over 156,000 users and extensive service offerings tailored to the logistics industry. The website is professionally designed, multilingual, and optimized for mobile, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and privacy compliance mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. Overall, TIMOCOM demonstrates a robust business and technical foundation with a trustworthy online presence.

The website olx.ba is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of any meaningful business, compliance, or security information from the page. The page title 'Just a moment...' and the presence of Cloudflare challenge scripts confirm that the site is protected by a Web Application Firewall (WAF) which requires human verification before access. Consequently, no privacy policies, contact information, or business details are available for analysis. The technical infrastructure is limited to Cloudflare's security platform with no visible CMS or analytics tools. The security posture cannot be fully assessed due to lack of access, but the presence of Cloudflare indicates some level of protection. Overall, the site cannot be properly evaluated until the WAF challenge is passed and the actual content is accessible.

M

Messenger Links Generator

msng.link

54

The website msng.link offers a specialized online utility service that generates direct messaging links for a wide range of popular messenger platforms including WhatsApp, Telegram, Viber, Facebook Messenger, and others. It targets general internet users and businesses who want to facilitate direct communication via messengers. The business model appears to be free usage supported by advertising revenue, primarily through Google Adsense. The site is small in scale and focused on a niche utility function. Technically, the website employs modern web technologies including SvelteKit and Bootstrap for frontend development, and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate given the nature of the service and lack of sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving privacy compliance to build greater user trust and regulatory adherence.

P

Profi Aesthetics

profi-aesthetics.eu

39

Profi Aesthetics is a small graphic design portfolio business based in Germany, showcasing a diverse range of creative projects including artwork, book design, web design, exhibition design, and event campaigns. The website serves primarily as a visual portfolio targeting general audiences interested in graphic design services. The business model focuses on presenting past projects to attract potential clients or collaborators. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery 1.12.3, and Swiper.js for interactive slideshows. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, the use of an outdated jQuery version and lack of modern frameworks or CMS indicates room for technical modernization. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation from the provided data, which may expose it to certain risks. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. No contact or incident response information is available, limiting transparency and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

C

Collector

collector.se

71

Collector is a Swedish financial services provider offering personal loans, credit cards, and savings accounts primarily targeting private individuals and businesses in Sweden. The company operates under the brand Collector, which is part of Norion Bank AB. The website demonstrates a mature digital presence with a focus on user experience, clear product offerings, and compliance with privacy regulations such as GDPR. The technical infrastructure includes modern web technologies, cookie consent management, and analytics integration, reflecting a well-maintained platform. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and aligned with industry standards for financial services.

Spanish Market d.o.o. is a small manufacturing company based in Bosnia and Herzegovina specializing in the production of packaged bakery products with long shelf life. The website presents a professional and consistent brand image with clear navigation and multilingual support, targeting general consumers and business clients interested in bakery products. The business model focuses on manufacturing and distribution within the local market, supported by downloadable product catalogs and social media presence on LinkedIn and Facebook. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It is served over HTTPS, ensuring secure communication, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security policies and incident response information suggests limited maturity in security governance. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

N

NapravioBiH d.o.o.

napraviobih.ba

52

NapravioBiH d.o.o. is a Bosnian company focused on promoting and distributing products made in Bosnia and Herzegovina, targeting both local artisans and international markets. The company collaborates with sister companies across Europe to facilitate market access and employment opportunities, including for handicapped individuals. Their website reflects a small but professional business with a clear mission to improve the image and economy of Bosnia and Herzegovina through product promotion and distribution. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates social media and video content. However, it lacks advanced CMS or modern frameworks and shows only basic mobile optimization and SEO. Security posture is moderate with HTTPS usage but missing key security headers and no visible security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

Islamska zajednica u Bosni i Hercegovini - Vakufska direkcija

vakuf.ba

61

Vakufska direkcija is a non-profit organization operating under the Islamic Community in Bosnia and Herzegovina, dedicated to managing and promoting vakuf (Islamic endowment) properties and related cultural and religious activities. The website serves as an information hub for the Bosnian Muslim community and interested stakeholders, offering news, project updates, publications, and educational resources. It maintains a consistent brand presence and provides clear contact channels including email, phone, and social media. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with good mobile optimization and SEO practices. HTTPS is enforced with a CSRF token present, indicating a baseline security posture. However, the absence of security headers and explicit privacy and cookie policies highlight areas for improvement in security and compliance. The security posture is solid but could be enhanced by implementing recommended headers and formalizing incident response and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving its non-profit religious and cultural mission effectively, but would benefit from enhanced privacy compliance and security best practices.

U

U.G. BIHAMK

bihamk.ba

65

BIHAMK is the largest automotive club association in Bosnia and Herzegovina, with a long-standing history dating back to 1946. The organization provides a comprehensive range of services including roadside assistance, technical vehicle inspections, international driving documents, vehicle homologation, and rent-a-car services. Their market position is strong within the regional transportation sector, supported by memberships in international bodies such as FIA and AIT. The website reflects a mature digital presence with modern design, clear navigation, and rich content tailored to motorists and vehicle owners in Bosnia and Herzegovina and the wider region. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and uses HTTPS with strong security headers, indicating a solid security posture. However, the absence of explicit cookie consent mechanisms and dedicated security or incident response pages suggests areas for compliance and security improvement. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.

M

MASS-light

mass-light.ba

45

MASS-light is a regional retail company specializing in lighting products with physical stores across Bosnia and Herzegovina and an online e-commerce platform. The website presents a professional catalog of lighting products, including chandeliers, lamps, and outdoor lighting, targeting consumers in Bosnia and Herzegovina. The technical infrastructure uses modern web technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF tokens, but lacks publicly visible security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and compliance documentation.

S

Suomen Hintavertailu Oy

hinta.fi

56

Suomen Hintavertailu Oy operates the website hinta.fi, a well-established Finnish price comparison platform founded in 2003. The site offers consumers a comprehensive service to compare prices across over a million products and dozens of retailers, positioning itself as a trusted resource in the Finnish retail sector. The business model centers on aggregating product pricing and availability data to facilitate informed purchasing decisions for Finnish consumers. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Web1 Oy, consistent with the domain registrar and nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy, cookie consent banner, and GDPR adherence. However, no explicit security policy or incident response information is published. Overall, the website presents a low-risk profile with high legitimacy supported by consistent WHOIS data, transparent registrant information, and a long domain age. Strategic recommendations include enhancing DNS security with DNSSEC, adding security headers, and publishing security and incident response policies to further strengthen trust and compliance.

C

ClickEshop

clickeshop.sk

60

ClickEshop is a Slovak-based technology company specializing in providing a professional content management system for creating web pages and e-shops. Established in 2010, it serves a medium-sized market with over 10,000 projects completed, offering services including web hosting, email hosting, domain registration, and custom web design. The platform targets small to medium businesses and individuals seeking easy-to-use, customizable online presence solutions. The website is multilingual, supporting Slovak, English, German, and Czech languages, enhancing its regional reach. Technically, the website uses a proprietary CMS with modern web technologies such as jQuery, HTML5, and CSS3. It is hosted on a secure cloud infrastructure with HTTPS and DNSSEC enabled, ensuring a good security baseline. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. SEO practices are implemented, and Google Analytics is used for traffic analysis. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security policies, vulnerability disclosure, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration. Overall, ClickEshop presents a trustworthy and professional online presence with solid technical and business foundations. To enhance compliance and security posture, it should implement cookie consent, publish security policies, and consider formal vulnerability disclosure mechanisms.

C

ClickEshop

clickeshop.de

59

ClickEshop is a small technology company specializing in providing a proprietary platform for creating professional websites and webshops, including hosting, email, and domain services. With over 18 years of market presence and thousands of successful projects, it targets small to medium businesses and individuals seeking easy-to-use, customizable web solutions. The website is well-designed, mobile-optimized, and offers multilingual support, enhancing user experience and accessibility. Technically, the platform uses modern web standards such as HTML5, CSS3, and JavaScript with jQuery, and enforces HTTPS for secure communications. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. Contact information is clearly provided, including email, phone, and a contact form, supporting customer engagement. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices.

C

ClickEshop

clickeshop.cz

61

ClickEshop.cz is a Czech-based technology company specializing in providing professional web and e-shop creation services through a proprietary CMS platform. Established in 2010, the company has a strong market presence with over 10,000 projects completed and offers a comprehensive suite of services including web hosting, email hosting, customizable templates, and tailored web design solutions. The website is well-structured, targeting small to medium businesses and individuals seeking accessible and professional online presence solutions. Multi-language support through sister domains enhances its regional reach. Technically, the website employs modern web technologies such as jQuery and custom JavaScript, with a proprietary CMS platform. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Hosting is managed via their own nameservers, indicating control over infrastructure. However, some technical improvements are recommended, including the implementation of security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the security posture is adequate but could be improved to meet higher compliance standards. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing security headers. These improvements will strengthen trust, compliance, and security culture, supporting sustainable business growth.

S

Säästöpankki

saastopankki.fi

73

Säästöpankki is a Finnish savings bank offering retail banking and financial services to Finnish customers. The website presents a professional image with a clear focus on banking services, financial advice, and customer support. The site targets Finnish-speaking users primarily but offers alternate language versions. The business model centers on traditional banking with digital customer engagement. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is strong with HTTPS enforced and CSRF protections, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate online presence for a financial institution.

L

Lampa Studio d.o.o.

lampa.ba

61

Lampa Studio d.o.o. is a Bosnia and Herzegovina-based technology service provider specializing in web design, custom web development, eCommerce solutions, and mobile applications. Founded in 2011, the company targets businesses and organizations seeking modern, user-friendly digital solutions with a focus on usability and contemporary design. Their market position is supported by a strong portfolio of regional clients and active social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a credible business entity.

G

Gransy, s.r.o.

clickeshop.com

62

ClickEshop.com is a professional ecommerce and website building platform operated by Gransy, s.r.o., established in 2010. The company offers a comprehensive content management system with integrated web hosting, email services, and customizable graphic templates targeting small to medium businesses and individuals seeking easy-to-use webshop solutions. The platform boasts over 10,000 projects and more than a decade of experience, positioning itself as a reliable player in the ecommerce technology sector. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery, and features a proprietary CMS tailored for ecommerce. Mobile optimization and SEO practices are well implemented, though performance is moderate. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced protections such as DNSSEC and security headers. Privacy compliance is partial, with terms of service present but no explicit cookie or privacy policy pages. Contact information is clearly provided, including phone, email, and a contact form, enhancing business credibility. Overall, the site is accessible, professional, and safe for general audiences.

P

Pelcro

pelcro.com

68

Pelcro is a technology company offering an all-in-one subscription management platform tailored for businesses selling digital memberships, subscriptions, magazines, and newspapers. Positioned as a niche SaaS provider, Pelcro targets digital content businesses seeking streamlined subscription and membership management solutions. The website is professionally designed using the Wix platform, integrating marketing and analytics tools such as HubSpot and Google Analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security posture is solid with HTTPS enforcement, security headers, and secure cookie handling, although explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a trustworthy and professional presence with good privacy compliance and user experience, suitable for its business model and audience.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bawue-zu-tisch.de

62

The website 'Baden-Württemberg zu Tisch' is an official government platform managed by the Ministry of Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg. It promotes regional food products, sustainable nutrition, and community engagement aligned with the state's nutrition strategy. The site targets residents of Baden-Württemberg across all age groups and provides information on projects, offers, news, and downloadable resources related to nutrition and sustainability. The platform is well-branded, consistent, and trustworthy, featuring endorsements from government officials and accessibility options such as easy language and sign language.

W

weber.digital GmbH

weber.digital

55

weber.digital GmbH is a German-based digital agency specializing in digital transformation, product development, and digital marketing services. Established in 2015, the company targets businesses seeking to modernize and innovate their digital presence. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating GDPR compliance. Technically, the site uses modern web technologies including custom fonts and JavaScript libraries like Swiper.js, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and domain lock statuses, though additional HTTP security headers and a published security policy would enhance trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

The website www.dielne.sk serves as a specialized platform focused on protected workshops and social enterprises in Slovakia, facilitating companies to fulfill their legal employment obligations under Slovak law. It offers a searchable directory of 380 registered organizations, registration for new entities, and informational resources including a substitute fulfillment calculator. The platform is operated by Profesia, spol. s r.o., a member of the Alma Media group, indicating a credible backing and niche market positioning within the non-profit sector. Technically, the site employs a traditional web stack with Bootstrap 2.x, jQuery 1.8.0, and Select2 for UI components, alongside Cookiebot for cookie consent management and Google Tag Manager for analytics. While the site is functional and moderately optimized for mobile, it uses somewhat outdated libraries and lacks visible modern security headers, suggesting room for technical modernization and security hardening. From a security perspective, the site enforces cookie consent and uses HTTPS (assumed but not confirmed in data), but lacks explicit privacy policies, terms of service, and security incident response information. No critical vulnerabilities or WAF blocking were detected, but the absence of security headers and outdated libraries represent moderate risks. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional resource for its target audience but would benefit from enhanced privacy compliance, updated technical stack, and improved security practices to strengthen its posture and user trust.

Penzion a Bistro U Kapra is a small hospitality business based in Třeboň, Czech Republic, offering accommodation and a bistro specializing in fish and local cuisine. The website presents a clear business focus with detailed descriptions of rooms, bistro offerings, and contact information, targeting tourists and local visitors. The domain is well-established since 2005, supporting business credibility. Technically, the website uses modern web technologies including HTTPS, Google reCAPTCHA, and Google Maps integration, hosted on WEDOS infrastructure. However, it lacks explicit privacy and cookie policies, and security headers are not evident, indicating areas for compliance and security improvement. Overall, the site is functional, safe, and professionally presented but could enhance trust and compliance by adding missing policies and security best practices.

H

Hudy.cz

hudy.cz

63

Hudy.cz is a well-established e-commerce retailer specializing in outdoor clothing, footwear, backpacks, and camping equipment. The website targets outdoor enthusiasts including hikers, campers, and climbers, offering a broad range of products segmented by gender and age groups. The business operates primarily in the Czech Republic and maintains a professional online presence with detailed product categories and promotional campaigns. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and analytics tools such as Exponea and Smartsupp chat, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and a consistent branding approach. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technical setup suggest legitimacy. Overall, the site scores well in content quality and technical implementation but should enhance privacy compliance and business credibility by publishing clear contact and policy information.

S

SERDA d.o.o. Sarajevo

serda.ba

47

SERDA d.o.o. Sarajevo operates as a regional development agency focused on supporting regional growth, EU project management, and business environment improvements in Bosnia and Herzegovina. The website reflects a professional presence with clear information about ongoing projects, events, and contact details, targeting regional governments, businesses, and EU stakeholders. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

G

Geoportal Baden-Württemberg

geoportal-bw.de

57

Geoportal Baden-Württemberg operates a regional government geospatial data portal providing access to geospatial data, thematic maps, and metadata services primarily for politics, administration, economy, science, and the public in Baden-Württemberg, Germany. The portal is well-positioned as a trusted regional government platform supporting the national GDI-DE and INSPIRE initiatives. Technically, the website is built on a modern Angular framework with Material Design components and uses OpenLayers for map rendering, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

M

Mittwald CM Service GmbH & Co. KG

mittwald-status.de

62

Mittwald CM Service GmbH & Co. KG operates a professional status page providing real-time system status and incident history for its hosting and cloud services. The company is positioned as a medium-sized technology provider in Germany, offering key services such as mail systems, hosting platforms, cloud systems, and a customer center. The website is well-structured and designed to communicate service availability clearly to its customers. Technically, the status page leverages modern web technologies including HTML5, CSS3, JavaScript, and is hosted on a platform provided by Statuspal with DNS managed via Cloudflare. The site demonstrates good performance and mobile optimization, though accessibility and SEO features are basic. No CMS or complex frameworks are detected, indicating a focused and lightweight implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Overall, the website is trustworthy and professional, with minor improvements recommended in privacy compliance (cookie consent) and security best practices. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) rather than an externally hosted website. This page serves as a placeholder or offline error page within the Chrome browser environment and includes embedded scripts for the Chrome offline dinosaur game. There is no business-related content, contact information, or policies present. The page is minimal and does not represent a commercial or organizational website. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering, with no external dependencies or analytics. Security posture is minimal due to the nature of the page being an internal error display with no external exposure. Privacy compliance and business credibility cannot be assessed as no relevant data or policies exist.

M

MACH AG

mach.de

68

MACH AG is a specialized software provider focused on digital transformation solutions for public administration and municipalities in Germany. Their offerings include ERP systems, financial management software, online services, and process management platforms tailored to the needs of government entities. The company positions itself as a trusted partner for digitalization in the public sector, serving both larger and smaller institutions. The website is professionally designed, well-structured, and provides comprehensive information about their products, services, and events such as training and webinars. Technically, the site uses modern web technologies including JavaScript, SVG graphics, lazy loading, and integrates Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, MACH AG demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

N

NOLIS GmbH

nolis.de

60

NOLIS GmbH is a well-established German company specializing in digital transformation solutions for municipalities and public sector organizations. With over 25 years of experience and more than 400 municipal clients, NOLIS offers a comprehensive suite of services including a proprietary content management system (NOLIS | CMS), an E-Government software suite, digital citizen services, recruiting solutions, and GIS-based cartography. Their business model focuses on B2B SaaS and consulting, targeting public administrations to streamline and modernize their digital presence and processes. Technically, the website demonstrates a modern and professional infrastructure utilizing HTML5, CSS3, JavaScript, and various libraries such as Swiper.js for UI components and CookieDough for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The proprietary CMS and integration of multiple digital services indicate a robust technical ecosystem tailored for government clients. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. The software suite supports advanced security features like single sign-on and two-factor authentication. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or security issues were detected in the analyzed content. Overall, NOLIS GmbH presents a trustworthy, professional, and technically sound digital presence consistent with its business claims. The domain registration data aligns with the company branding and history, supporting legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response to further strengthen trust and compliance.

The website www.dein-toelzer-land.de serves as a regional tourism and nature conservation platform for the Tölzer Land area in Germany. It promotes environmental awareness, sustainable tourism, and provides information on natural landscapes, nature experiences, and local regulations. The site targets nature enthusiasts and tourists interested in responsible travel. Technically, the website employs modern web technologies including JavaScript frameworks, Cookiebot for cookie consent, and Google Analytics with privacy features enabled. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is managed properly, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. However, explicit privacy policy and terms of service pages were not found in the provided content, which could be enhanced for better compliance. Overall, the website is professional, trustworthy, and well-positioned in its niche.

U

University of South Carolina

sc.edu

59

The University of South Carolina website serves as the official digital presence of a large, established public research university in the United States. It offers comprehensive information about academic programs, research opportunities, student life, admissions, and community engagement. The site targets prospective and current students, faculty, staff, alumni, and families, providing a broad range of services and resources. The business model is centered on education and research, positioning the university as a leading institution in higher education. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript, and the Foundation CSS framework. It integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and SiteImprove Analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The CMS appears to be OmniUpdate, a platform commonly used by educational institutions. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a comprehensive privacy policy available but lacking a clear cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, with a high level of business credibility. The main areas for improvement include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to strengthen the security posture.

The website at app.hailstate.com/StateExcellencePage serves as a marketing landing page for the State Excellence Fund, likely affiliated with Mississippi State University or a related entity. It provides informational content primarily through images and offers a contact form for users to submit inquiries or membership information. The target audience appears to be current and prospective members interested in the fund. The business model focuses on information dissemination and member engagement rather than direct e-commerce or transactional services. Technically, the site is built using standard HTML5, CSS3, and JavaScript, with client-side form validation implemented via LiveValidation.js. The platform leverages Oracle Eloqua for marketing automation and tracking, as evidenced by tracking pixels and form submission endpoints. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and consistent branding. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses form validation to reduce input errors but lacks visible security headers and explicit HTTPS verification in the provided data. No privacy or cookie policies are present, which impacts compliance posture. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but this limits domain registration trust analysis. Overall, the security posture is average with room for improvement in compliance and technical security best practices. The overall risk assessment is moderate. The site is functional and professional but would benefit from enhanced privacy disclosures, security headers, and explicit contact information to improve trust and compliance. Strategic recommendations include implementing HTTPS verification, adding privacy and cookie policies, enhancing security headers, and providing clear contact details to strengthen business credibility and user trust.

G

Gator Boosters, Inc.

gatorboosters.org

53

Gator Boosters, Inc. is a well-established non-profit organization supporting University of Florida athletics through membership programs, donor engagement, and ticketing services. The website serves primarily alumni, fans, and donors interested in supporting Florida Gators sports. The organization operates under the University Athletic Association umbrella and has a clear focus on enhancing the student-athlete experience through fundraising and community involvement. Technically, the website uses modern web technologies including Google Analytics and Amazon Cloudfront CDN, with a responsive design suitable for desktop and mobile users. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The domain is long-standing and legitimate, though WHOIS privacy protection is used, which is common but reduces transparency. Overall, the site is professional and trustworthy but could improve in compliance and security posture.

F

FanMaker

fanmaker.com

65

FanMaker is a technology company specializing in sports loyalty programs and fan engagement solutions. Their offerings include loyalty programs, mobile wallet and gift card solutions, benefit and discount programs, loaded ticket integrations, kids clubs management, fan photo engagement, and custom kiosks. The company targets sports teams and organizations across major leagues such as NFL, NHL, NBA, NCAA, and professional sports networks. The website reflects a mature business with over a decade of market presence and a strong portfolio of partner teams. Technically, the website uses modern web technologies, including JavaScript frameworks and analytics tools like Google Analytics and Facebook Pixel, hosted and registered via Cloudflare. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security best practices like vulnerability disclosure and incident response contacts are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.