Security Directory

А

Агенција за безбједност саобраћаја Републике Српске

absrs.org

48

The website absrs.org represents the Агенција за безбједност саобраћаја Републике Српске, a government agency dedicated to traffic safety in Republika Srpska, Bosnia and Herzegovina. The agency provides comprehensive information on traffic laws, safety campaigns, licensing procedures, and statistical data to support safer road usage. The site targets the general public, local communities, and government stakeholders, positioning itself as an authoritative source for traffic safety in the region. Technically, the website employs a moderate technology stack including Bootstrap for responsive design, jQuery, Slick Carousel, and Fancybox for UI elements, alongside Google Fonts and Google Analytics for tracking. Hosting is managed by BitLab, with domain registration dating back to 2012, indicating an established presence. The site is accessible, mobile-optimized, and features clear navigation, although some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS URLs but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is implemented via an older ga.js script, and no cookie consent mechanism is detected. The WHOIS data is transparent and consistent with the agency's government status, supporting legitimacy. Overall, the website is functional and trustworthy as a government information portal but would benefit from improved security practices and privacy compliance to enhance user trust and regulatory adherence.

Р

Републички хидрометеоролошки завод

rhmzrs.com

56

The Republika Srpska Hydrometeorological Institute (Републички хидрометеоролошки завод) is a government agency responsible for meteorological, seismological, hydrological, and environmental monitoring and reporting within Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing weather forecasts, seismic activity reports, hydrological bulletins, and environmental quality data primarily in Serbian language. It targets citizens, governmental bodies, agricultural stakeholders, and scientific communities. The business model is a public service institution funded and operated by the government, with a stable market position as the official source of hydrometeorological information in the region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, Leaflet.js for interactive maps, and Axios for asynchronous requests. Hosting is supported by Cloudflare DNS services, enhancing reliability and performance. The site is mobile optimized with good navigation clarity and professional design, though accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and has domain transfer protections. However, it lacks DNSSEC, security headers like CSP or HSTS, and a cookie consent mechanism, which are areas for improvement. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure policies are published. The WHOIS data aligns well with the website’s governmental nature, showing a consistent registration history and no privacy protection, which is appropriate. Overall, the website is a trustworthy and professional government resource with good content quality and technical implementation. Security posture is moderate with room for enhancements in headers and compliance. Privacy compliance is basic and could be improved with explicit policies and consent mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and security policies, and implementing cookie consent to enhance trust and compliance.

L

Lanaco

nasljedje.org

50

The website represents the official online presence of the Republika Srpska Institute for the Protection of Cultural-Historical and Natural Heritage, a government agency under the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It provides information on cultural and natural heritage protection, public procurement, news, projects, and contact details. The site targets the general public, cultural professionals, and government stakeholders. The business model is a government service institution focused on heritage preservation and public information dissemination. Technically, the website is built on WordPress with common plugins such as Slider Revolution and Unyson Framework, using jQuery and Bootstrap for frontend functionality. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting details are not explicitly stated but domain registration and DNS indicate a stable infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. No privacy or cookie policies are found, indicating compliance gaps. Contact information is clearly provided, enhancing trust. No signs of malicious content or adult material are present. Overall, the website is a credible government resource with good content and moderate technical maturity. Improvements in privacy compliance and security hardening are recommended to enhance trust and protect user data.

В

Влада Републике Српске

srpska2030.rs

48

The website srpska2030.rs serves as the official government platform for the Sustainable Development Strategy of Republika Srpska for 2024-2030. It provides comprehensive information on sustainable development goals, normative frameworks, strategic platforms, and public consultation mechanisms. Supported by the UNDP and the Slovak Ministry of Finance, it targets citizens, government officials, and stakeholders interested in sustainable development. The platform is built on WordPress with modern frontend technologies like Bootstrap and AOS, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and privacy compliance elements such as privacy and cookie policies. The domain registration is consistent with the business purpose and recent project timeline, enhancing trustworthiness.

B

Biserje

biserje.ba

48

Biserje is an online cultural magazine based in Bosnia and Herzegovina, focusing on the intersection of tradition and modernity in culture and society. It serves a niche audience interested in Bosnian history, Islam, art, and social topics. The website is powered by WordPress with a modern tech stack including Elementor and Yoast SEO, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism detected. Overall, the site is legitimate, professionally presented, and trustworthy within its domain.

N

Nelnet Inc

nelnetinc.com

68

Nelnet Inc is a diversified enterprise primarily focused on student loan servicing, education technology, government services, consumer financial services, and renewable energy investments. Founded in 2000 and publicly traded on the NYSE (NNI), Nelnet serves millions of customers across multiple sectors including education, government, and finance. The company operates numerous subsidiaries and business units, offering a broad range of services from loan servicing to payment processing and fiber communications. Their market position is strong, supported by decades of experience and a large associate base. Technically, Nelnet's website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with company history. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, it lacks visible security headers and published security policies or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Tracking technologies such as Google Tag Manager and Facebook Pixel are used, indicating moderate user tracking. Overall, Nelnet presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Security posture is solid but could be enhanced by adding security headers and formal incident response disclosures. No critical vulnerabilities or blocking mechanisms were detected, and the content is safe for general audiences.

F

Firstmark Services

firstmarkservices.com

66

Firstmark Services is a division of Nelnet providing secure, innovative, and flexible financial solutions focused on loan servicing, customer service, and portfolio performance. The company targets financial institutions and private loan clients, positioning itself as an investment-grade rated servicer with a strong market presence supported by its parent company Nelnet. The website reflects a professional and trustworthy business with clear service offerings and a user-friendly interface. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and privacy tools such as Google Analytics, Hotjar, and the Transcend Privacy Plugin. Security posture is solid with HTTPS enabled and domain registration protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate a mature digital presence with good security hygiene and compliance awareness.

B

Blaetterbuch - professionell online blättern

blaetterbuch.de

46

Blaetterbuch is a specialized technology provider offering professional online flipbook solutions that digitize print media such as flyers, catalogs, and brochures with realistic page-turning effects. Their service targets businesses seeking to extend the reach of their print publications into digital formats accessible across all major browsers and mobile devices. The company positions itself as a niche provider with a comprehensive service including hosting, customization, and integration of multimedia elements like videos and links. Technically, the website employs a modern web stack including Bootstrap, jQuery, and popular UI libraries such as Owl Carousel and Revolution Slider. The site is mobile-optimized and features a custom CMS backend indicated by dynamic content calls. While performance is moderate, the site is well-structured with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (assumed from URL), implements cookie consent mechanisms, and provides a comprehensive privacy policy compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or malicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving technical performance for a stronger security and user experience profile.

I

Islamske informativne novine Preporod

preporod.com

47

Preporod.com is the online presence of Islamske informativne novine Preporod, an established Islamic informational newspaper based in Bosnia and Herzegovina. The website serves a Bosnian-speaking Muslim audience with news, cultural, spiritual, and community content. It operates a print and digital media model with subscription options and advertising. Technically, the site is built on Joomla CMS with modern web technologies like Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for user tracking. The security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy and security practices.

P

Promotim d.o.o. Sarajevo

kupikartu.ba

59

Kupikartu.ba is a leading online ticketing platform in Bosnia and Herzegovina, operated by Promotim d.o.o. Sarajevo. The website offers a wide range of event tickets including music concerts, sports events, cultural performances, and cinema. It targets primarily Bosnian, Croatian, and Serbian speaking audiences interested in entertainment and cultural events. The business model focuses on e-commerce ticket sales with integrated payment processing partnerships. Technically, the site uses a modern responsive design built on Bootstrap with integrations for Google Analytics, Google Tag Manager, and advertising via Google Ad Manager. However, the use of an outdated jQuery version presents a security risk. Security posture is moderate with HTTPS enforced but lacks advanced security headers and visible security policies. Privacy compliance is basic with no cookie consent mechanism detected and limited GDPR indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

S

Schmeck den Süden

schmeck-den-sueden.de

48

Schmeck den Süden is a regional culinary platform dedicated to promoting the cuisine and gastronomy of Baden and Württemberg in Germany. The website offers a variety of recipes, product information, and a directory of local gastronomes, targeting food enthusiasts and regional consumers. The business model focuses on content marketing and regional product promotion, supported by newsletters and partnerships. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Borlabs Cookie for privacy compliance. The design is responsive and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, serving as a valuable resource for its target audience.

L

Landesamt für Geoinformation und Landentwicklung Baden-Württemberg

lgl-bw.de

54

The Landesamt für Geoinformation und Landentwicklung Baden-Württemberg (LGL) is a government agency responsible for surveying, land development, and geoinformation services within the German state of Baden-Württemberg. The website serves as an official portal providing information on geospatial data, land surveying, cadastral services, and related products. It targets public sector entities, professionals in geoinformation, and the general public interested in land development and mapping services. The agency holds a strong market position as the authoritative body for geoinformation in the region, offering a broad range of services including data provision, training, and product sales. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern JavaScript libraries such as jQuery, DataTables, and Bootstrap for responsive design and interactive features. The site is hosted within the Baden-Württemberg academic network (BelWü), indicating a stable and regionally controlled infrastructure. Performance and mobile optimization are good, with accessibility and SEO practices well implemented. However, explicit security headers and privacy policies are not evident, which could be improved. From a security perspective, the site uses HTTPS and asynchronous script loading, minimizing exposure to common vulnerabilities. No signs of WAF or blocking mechanisms were detected, and no sensitive data leakage was observed. The absence of a published privacy policy, cookie consent mechanism, and vulnerability disclosure reduces the overall privacy compliance and security posture scores. The WHOIS data is minimal but consistent with the agency's regional affiliation, supporting legitimacy. Overall, the LGL website is a professional, trustworthy government portal with solid technical foundations but could enhance its privacy and security transparency. Strategic improvements in publishing privacy and cookie policies, security headers, and incident response contacts would strengthen compliance and user trust.

W

Wildtierportal Baden-Württemberg

wildtierportal-bw.de

64

The Wildtierportal Baden-Württemberg is an official government-affiliated online platform providing comprehensive information on wildlife species, hunting regulations, and research activities within the Baden-Württemberg region of Germany. It serves both the general public interested in wildlife and registered hunters who can access an internal area for managing hunting grounds and reporting. The website is well-structured, professionally designed, and offers detailed content relevant to its audience. Technically, it employs modern web technologies including the Yii PHP framework, jQuery, Bootstrap, and slick carousel for UI components, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some HTTP security headers could be improved. No direct contact emails or phone numbers are published; contact is facilitated via a web form. No security policy or incident response information is publicly available. The domain WHOIS data aligns with the official nature of the site, showing consistent registration and DNS setup. Overall, the platform demonstrates a mature digital presence suitable for a government information portal with good trust indicators and compliance.

S

STRKNG

strkng.com

62

STRKNG operates as an international online photography gallery specializing in contemporary and fine art photography. It serves photographers, models, designers, and brands by providing a platform to showcase portfolios, participate in community voting, and access photography-related events and publications. The business is positioned as a niche media platform with a strong community focus and curated content. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates with Cloudflare DNS and Google Firebase for push notifications. The site is mobile optimized and employs structured data for SEO enhancement. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The site hosts mature content including fine art nude photography, presented responsibly for a mature audience. Overall, the website is professional, trustworthy, and well-maintained with room for security enhancements.

1

1&1 Internet Inc

preporod.info

47

Preporod.info is a Bosnian language online news and community portal focusing on regional news, Islamic community affairs, and cultural topics. The website serves a niche audience interested in Bosnian and Islamic community news, providing regularly updated articles, interviews, and event information. The business operates as a small media outlet with a clear focus on community engagement and information dissemination. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for user tracking. Hosting is provided by HostEurope with a dedicated server setup. The website is mobile optimized and has a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS enabled and domain transfer protection active, but lacks DNSSEC and security headers. Privacy and cookie policies are missing, which impacts compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the domain registration is transparent and consistent with the business profile, registered with a reputable registrar in 2019. The website content is safe for general audiences with no adult or explicit content detected.

R

Radio BIR

bir.ba

44

Radio BIR is a Bosnian Islamic community radio broadcaster offering a diverse range of religious, educational, informational, political, youth, and musical programming. It serves a Bosnian-speaking Muslim audience across multiple regional FM frequencies, positioning itself as a key media outlet within the Islamic community in Bosnia and Herzegovina. The website is built on Joomla CMS and employs common web technologies such as jQuery, Bootstrap, and Font Awesome, reflecting a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is moderate; HTTPS is used, but security headers and privacy policies are lacking, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy.

I

Islamska zajednica u Bosni i Hercegovini

islamskazajednica.ba

50

Islamska zajednica u Bosni i Hercegovini operates as the official religious authority for Muslims in Bosnia and Herzegovina, providing religious guidance, news, educational content, and community services. The website serves a Bosnian-speaking audience including local and diaspora communities, offering structured information about religious offices, events, and educational resources. The organization holds a strong market position as a government-recognized non-profit religious entity. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and Mootools. It is mobile responsive and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and HSTS. No exposed sensitive data or vulnerable libraries were detected, but the absence of explicit privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and providing clear incident response contacts to improve user trust and regulatory compliance.

V

Volkshochschule Wiesental

vhs-wiesental.de

45

Volkshochschule Wiesental operates as a regional adult education provider in Germany, offering a broad range of courses including languages, health, IT, integration, and youth education. The website reflects a well-structured educational institution with a clear target audience of adults, parents, and children. Their market position is that of a trusted community learning center with a consistent brand presence and active social media engagement. Technically, the site is built on TYPO3 CMS with modern libraries like jQuery and Bootstrap, hosted on kasserver.com, and demonstrates good mobile responsiveness and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

V

vhs Dossenheim

vhs-dossenheim.de

63

vhs Dossenheim is a small-sized adult education institution based in Germany, offering a variety of courses including languages, culture, health, and professional development. The website serves as an informational and program registration platform targeting the general public interested in continuing education. The institution maintains cooperative partnerships, such as with Volkshochschule Heidelberg e.V., enhancing its educational offerings and regional presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks explicit security headers and documented security policies. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

vhs Karlsruhe is a regional adult education institution based in Germany, offering a wide range of courses including languages, health, culture, professional development, and family education. The website is built on TYPO3 CMS with a modern and responsive design, providing good user experience and clear navigation. The technical infrastructure is solid, leveraging modern web technologies and asynchronous script loading for performance. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. No signs of malicious content or blocking mechanisms were detected, indicating full accessibility. Overall, the site is trustworthy and professionally maintained, serving its educational mission effectively.

V

vhs Karlsruhe Land

vhs-karlsruhe-land.de

49

vhs Karlsruhe Land is a regional adult education provider serving 16 municipalities in the Karlsruhe Land area of Germany. The organization offers a broad range of educational courses, workshops, seminars, and cultural events targeting adults and youth. Their business model focuses on public educational services with a strong regional presence and partnerships with other educational platforms. The website is built on WordPress with modern frontend technologies and demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Hydrogroup d.o.o. is a Bosnia and Herzegovina based company specializing in pools, wellness, fountains, and hydromassage pools. Established in 2000, it offers comprehensive services including design, supply, installation, maintenance, and consumables. The company has a solid regional presence with over 350 reference projects and partnerships with leading global brands. The website is built on WordPress with a moderate technical infrastructure including Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and Wordfence plugin, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

K

Kozmo Shop

kozmoshop.ba

39

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

Grand Hotel Neum is a well-established hospitality business located in Bosnia and Herzegovina, offering a wide range of services including accommodation, wellness, dining, and congress facilities. The website reflects a medium-sized hotel with a strong market position as the largest and most luxurious hotel on the Neum riviera. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and integrates third-party booking and analytics services. While the site is functional and content-rich, it lacks modern privacy and security compliance features such as privacy and cookie policies, GDPR indicators, and security headers. The domain registration data supports the legitimacy and long-term operation of the business. Overall, the website is professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

M

Messenger Links Generator

msng.link

54

The website msng.link offers a specialized online utility service that generates direct messaging links for a wide range of popular messenger platforms including WhatsApp, Telegram, Viber, Facebook Messenger, and others. It targets general internet users and businesses who want to facilitate direct communication via messengers. The business model appears to be free usage supported by advertising revenue, primarily through Google Adsense. The site is small in scale and focused on a niche utility function. Technically, the website employs modern web technologies including SvelteKit and Bootstrap for frontend development, and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate given the nature of the service and lack of sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving privacy compliance to build greater user trust and regulatory adherence.

A

Adriaticket

adriaticket.com

54

Adriaticket is an established online ticketing and event promotion platform primarily serving Croatian and regional markets. Founded in 2012, it offers ticket sales for concerts, festivals, and cultural events, leveraging a custom-built website with AngularJS and Bootstrap frameworks. The platform integrates multiple third-party services including Google Maps, Facebook SDK, and YouTube APIs to enhance user experience. While the website is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but absence of DNSSEC and security headers present areas for improvement. Overall, Adriaticket demonstrates a solid business presence with moderate risk, suitable for general audiences and event attendees.

L

LINX

linx.net

63

LINX operates as one of the world's largest Internet exchanges, connecting approximately 900 member ASNs across over 75 countries. The company provides critical internet exchange services facilitating network interconnection and traffic exchange for ISPs, enterprises, and network operators. The website reflects a professional and consistent brand presence with a focus on technical and business audiences in the telecommunications sector. The business model is membership-based, positioning LINX as a key player in the global internet infrastructure market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel for UI components. It integrates Google Analytics and HubSpot for analytics and marketing, alongside CleanTalk for anti-spam protection and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or malware were detected in the content, but the absence of WHOIS data and security.txt reduces transparency and trustworthiness. Overall, the website is professional and trustworthy from a business and user experience standpoint, but improvements in security transparency and contact information publication are recommended to enhance compliance and user trust.

F

France IX Services

franceix.net

66

France-IX Services operates as a leading interconnection provider in France, offering a comprehensive suite of network connectivity solutions including peering, cloud access, IP transit, and private interconnection services. The company targets businesses and network operators seeking robust and scalable interconnection platforms across major French cities. Their market position is strong within the French telecommunications sector, supported by a consistent brand presence and strategic partnerships such as with HubSIX. The website reflects a professional and well-structured digital presence, emphasizing ease of navigation and clear service offerings. Technically, the website leverages modern web technologies including Bootstrap, jQuery, HTMX, and Django as the backend CMS, ensuring a responsive and performant user experience. The site is mobile-optimized and accessible, with good SEO practices evident through meta tags and structured navigation. However, some technical gaps exist in security headers and explicit SSL configuration details, which could be improved to enhance security posture. From a security perspective, the site implements a cookie consent mechanism compliant with GDPR, but lacks visible security policies, incident response contacts, and a security.txt file. No direct company contact emails or phone numbers are provided, relying instead on contact forms. The absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and business signals strongly indicate a legitimate enterprise. Overall, France-IX presents a credible and professional business with a solid digital footprint. The primary risks relate to incomplete WHOIS data and minor security best practice gaps. Addressing these areas would strengthen trust and compliance, supporting continued growth and customer confidence.

F

Fondacija Sarajevo Navigator

sarajevo.travel

64

Fondacija Sarajevo Navigator operates the official Destination Sarajevo Guide website, providing comprehensive tourism information including events, accommodations, sightseeing, and activities in Sarajevo, Bosnia and Herzegovina. The website serves as a key resource for tourists planning visits, offering detailed guides, booking integration, and cultural insights. The business is positioned as an authoritative local tourism promoter with a small organizational size and a focus on hospitality and cultural tourism. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising services including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and well-structured, with good SEO practices and consistent branding. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

I

Islamska zajednica u Bosni i Hercegovini - Vakufska direkcija

vakuf.ba

61

Vakufska direkcija is a non-profit organization operating under the Islamic Community in Bosnia and Herzegovina, dedicated to managing and promoting vakuf (Islamic endowment) properties and related cultural and religious activities. The website serves as an information hub for the Bosnian Muslim community and interested stakeholders, offering news, project updates, publications, and educational resources. It maintains a consistent brand presence and provides clear contact channels including email, phone, and social media. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with good mobile optimization and SEO practices. HTTPS is enforced with a CSRF token present, indicating a baseline security posture. However, the absence of security headers and explicit privacy and cookie policies highlight areas for improvement in security and compliance. The security posture is solid but could be enhanced by implementing recommended headers and formalizing incident response and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving its non-profit religious and cultural mission effectively, but would benefit from enhanced privacy compliance and security best practices.

E

Učebnice, cvičebnice, pracovné zošity | EXPOLPEDGOGIKA

expolpedagogika.sk

60

The website www.expolpedagogika.sk operates as an e-commerce platform specializing in the sale of educational materials such as textbooks, exercise books, and workbooks primarily targeting schools and students in Slovakia. The site presents a professional and consistent brand image with a clear focus on educational products for basic, special, and secondary schools. The business model is retail-oriented with an emphasis on regional market presence and customer convenience, including free delivery for orders above a certain threshold. From a technical perspective, the website leverages a modern technology stack including OpenCart CMS, Bootstrap framework, and popular marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical enhancements. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place. However, the absence of security headers and explicit privacy and terms of service policies indicates areas for improvement. No critical vulnerabilities or WAF blocking were detected, suggesting a stable operational environment. The use of privacy protection in WHOIS data is typical for small businesses and does not raise immediate concerns. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy and security policies, improved contact information visibility, and implementation of additional security best practices to strengthen trust and compliance.

R

Raabe

raabe.sk

68

Raabe.sk is a specialized Slovak educational publisher and e-commerce platform offering a wide range of educational materials, including books, digital products, and training services targeted at teachers, school directors, healthcare professionals, and parents. The website demonstrates a mature digital presence with modern technologies such as OpenCart, Bootstrap, and integrated marketing and analytics tools. It maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and external link warnings, though some minor improvements in security headers are recommended. Overall, the site is professional, trustworthy, and well-positioned in the Slovak education and healthcare publishing market.

Q

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH

azwv.de

47

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH operates a professional website focused on AZAV certification and quality management for labor market service providers in Germany. The company positions itself as a specialized certification body offering accreditation services, consulting, and training related to labor market integration and vocational education. The website content is well-structured, informative, and targeted at education and labor market institutions seeking AZAV compliance. Technically, the site uses Joomla CMS with common libraries such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The domain WHOIS data is minimal but consistent with the business profile, and no blocking or WAF mechanisms interfere with content access. Overall, the site demonstrates a good level of professionalism and trustworthiness appropriate for a small specialized certification entity.

D

Deutscher Nachhaltigkeitskodex (DNK)

deutscher-nachhaltigkeitskodex.de

59

The Deutscher Nachhaltigkeitskodex (DNK) website serves as a comprehensive platform providing free support for companies, especially small and medium-sized enterprises (SMEs), to comply with the EU's Corporate Sustainability Reporting Directive (CSRD). It offers a modular suite of services including a digital reporting platform, checklists, helpdesk support, and sector-specific guidance. The DNK is backed by the German Federal Ministry for Economic Affairs and Climate Action (BMWK) and developed by the Council for Sustainable Development (RNE), positioning it as a trusted and authoritative resource in the sustainability reporting domain. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates Google Maps for interactive features, and uses Consentmanager.net for GDPR-compliant cookie management. Analytics are handled via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design that enhances user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the site's official nature, supported by government and recognized sustainability organizations. Overall, the site demonstrates a strong security posture with room for improvement in explicit security policies and incident response disclosures. The overall risk assessment is low, with the site presenting a trustworthy, professional, and compliant platform for sustainability reporting. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party components to sustain and improve the security and compliance posture.

The website 'Wasser-Risiko-Check' is a public service platform operated by Stadtentwässerungsbetriebe Köln, aimed at providing residents and building owners in selected municipalities of North Rhine-Westphalia with an online tool to assess flood risks related to heavy rain, high water, and groundwater. The platform offers an interactive map, a questionnaire, and downloadable PDF forms to help users understand their building's vulnerability and potential protective measures. The project is publicly funded and cooperates with multiple local municipalities, positioning itself as a niche governmental risk advisory service. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, OpenLayers for mapping, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and provides a user-friendly interface with clear navigation. However, no CMS or advanced frameworks were detected, and hosting appears to be managed via generic servers. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies. Business credibility is supported by clear branding, contact email, and governmental cooperation, though no phone contacts or social media links are provided. Overall, the website is a trustworthy, well-structured public service tool with good content quality and privacy compliance. Security posture is adequate but could be enhanced by adding security headers and incident response information. The domain WHOIS data is minimal but not suspicious, consistent with a public service project. Strategic recommendations include improving security headers, adding terms of service, and enhancing transparency around security policies.

K

kr3m. media GmbH

kr3m.com

56

kr3m. media GmbH is a German-based company specializing in providing HTML5 gaming platforms primarily targeting large publishers and media companies. Their flagship product, the Playground, enhances reach through SEO, customer engagement, and subscription generation. The company positions itself as a market leader in the HTML5 games sector with a focus on white-label partnerships. Technically, the website is built on WordPress with modern plugins such as WooCommerce and Elementor, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain age and WHOIS data support the legitimacy of the business. Recommendations include improving privacy compliance, adding security headers, and publishing clear contact and incident response information.

weber.cloud is a German-based managed hosting and cloud solutions provider operating since 2016 with a strong focus on data sovereignty and high-quality service. The company offers specialized hosting services including Managed Hosting, AI Hosting, custom cloud solutions, and professional IT services, targeting businesses, online shops, and public institutions primarily in Germany. Their infrastructure is hosted in their own data center in Balingen, Germany, emphasizing compliance with German data protection laws. Technically, the website is well-implemented using modern frameworks like Bootstrap and jQuery, with good performance and mobile optimization. Security posture is solid with HTTPS, secure forms, and cookie consent mechanisms, though some improvements like DNSSEC and security.txt are recommended. The domain WHOIS data aligns well with the business claims, showing legitimacy and consistency. Overall, the website reflects a professional, trustworthy, and compliant cloud service provider with a clear market niche.

weber.cloud, operated by weber.digital GmbH, is a German-based managed hosting and cloud solutions provider founded in 2016. The company operates its own data center in Balingen, Germany, emphasizing data sovereignty, GDPR compliance, and high-quality managed hosting services including specialized TYPO3 hosting, shop hosting, AI hosting, and professional services. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content targeting businesses, online shops, and public institutions. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and analytics tools like Google Analytics and Facebook Pixel, with a strong focus on privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form handling, though DNSSEC is not enabled and some security headers are missing. The domain registration is consistent and transparent, reinforcing trustworthiness. Overall, the website reflects a mature, professional cloud hosting provider with strong regional presence and compliance focus.

S

Städtische Volkshochschule Hechingen

vhs-hechingen.de

51

The Städtische Volkshochschule Hechingen operates as a municipal adult education provider offering a wide range of courses and community learning opportunities. The website reflects a well-maintained digital presence with a focus on accessibility, user engagement, and comprehensive educational content. The institution holds an AZAV certification, underscoring its commitment to quality education. Technically, the site is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, and integrates a GDPR-compliant cookie consent mechanism via Klaro. Analytics are handled through Matomo, respecting user privacy. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though security headers could be improved. Overall, the site is trustworthy, professional, and serves its regional educational mission effectively.

P

Profesia, spol. s r. o.

edujobs.sk

56

Edujobs.sk is a specialized Slovak job portal focusing exclusively on employment opportunities within the education sector. Operated by Profesia, spol. s r. o., a reputable job portal company, it serves as a niche platform connecting educators and school staff with relevant job offers. The website features a comprehensive listing of pedagogical, non-pedagogical, and management positions across Slovakia, supported by advanced search and email alert functionalities. The platform is well-positioned in the Slovak market as a trusted resource for education employment.

L

LEO-BW

leo-bw.de

61

LEO-BW is a regional educational and cultural portal dedicated to providing comprehensive information about Baden-Württemberg's history, culture, and environment. It offers rich multimedia content, advanced search capabilities, and thematic modules targeting researchers, students, and the general public interested in regional studies. The website is positioned as an authoritative source for landeskunde (regional studies) in the German southwest, supported by partnerships with cultural and governmental institutions. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap, and Metal.js. The infrastructure supports multilingual content and map-based search features, indicating a mature digital presence. Performance and mobile optimization are good, with accessibility features implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, but it should enhance privacy compliance and security transparency to better align with modern standards and user expectations.

C

CAS Software AG

fair.digital

46

fair.digital is a German-based initiative founded in 2019 by CAS Software AG, focused on certifying digital products and services that adhere to principles of data protection, transparency, and fairness. The website serves as a platform to promote these certified products and provide information to manufacturers and users seeking GDPR-compliant and fair digital solutions. The initiative positions itself as a niche certification authority in the European digital technology sector, emphasizing digital sovereignty and user rights. Technically, the website is built on WordPress with modern plugins such as WooCommerce and WPBakery, hosted by InterNetX GmbH. It demonstrates good mobile optimization and a professional design, though some accessibility features could be improved. Security-wise, the site uses HTTPS and domain locking but lacks a cookie consent mechanism and explicit security policies, which are recommended for full GDPR compliance. Overall, the website is trustworthy, well-branded, and provides clear contact information via email and address, though no phone contact is provided.

E

European Broadcasting Union

ebu.io

52

EBU.io is a digital collaboration platform developed by the European Broadcasting Union to facilitate open source software development and project collaboration among its members and related users. The platform, launched in 2013, has been deprecated since 2022 except for the RadioDNS project, with other services continuing independently. The website reflects a professional and consistent branding aligned with the EBU identity, targeting broadcasting technology professionals and collaborators. Technically, the site employs a moderate tech stack including jQuery, Bootstrap, Backbone.js, and Google Analytics, hosted on AWS infrastructure. While the site is accessible and functional, it lacks some modern security enhancements such as DNSSEC and visible security headers. Privacy and cookie policies exist but lack explicit consent mechanisms, and no contact or incident response information is provided publicly. Overall, the site demonstrates moderate technical maturity and business credibility but could improve in security posture and privacy compliance.

D

DiGGrowth.AI

diggrowth.ai

51

DiGGrowth.AI is a technology startup founded in 2022, offering an AI-powered marketing data assistant platform aimed at simplifying marketing data analysis and providing predictive insights. The website positions itself as a next-generation AI marketing assistant targeting marketing professionals and businesses seeking real-time, actionable marketing intelligence. The business model appears to be SaaS-based, leveraging AI technologies to democratize marketing data insights. Technically, the website is built on WordPress with modern frameworks and optimization tools such as Bootstrap, jQuery, Google Tag Manager, and WP Rocket, indicating a mature digital infrastructure with good performance and SEO practices. Security posture is adequate with HTTPS and reCAPTCHA protections, but lacks advanced security headers and DNSSEC, and no explicit privacy or cookie policies are present, which impacts privacy compliance. Overall, the site is professional and trustworthy with moderate risk, suitable for a small technology business in the AI marketing sector.

S

Stadt Friedrichshafen

friedrichshafen.de

51

The Stadt Friedrichshafen website serves as the official digital presence of the city government of Friedrichshafen, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen services, tourism, cultural events, economic development, and municipal news. The site is well-branded, professionally designed, and targets a broad audience including local citizens and visitors. The business model is that of a municipal government entity focused on public service and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Slick Slider for interactive and responsive user experience. It employs Matomo for analytics, ensuring privacy-conscious data collection. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive digital maturity profile. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns with the official city identity, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and privacy compliance. Strategic recommendations include publishing formal security policies, enhancing security headers, and providing incident response information to further strengthen trust and security posture.

N

Nationalpark Schwarzwald

nationalpark-schwarzwald.de

70

The Nationalpark Schwarzwald website represents a well-established governmental entity focused on nature conservation, education, and public engagement in the Black Forest region of Germany. The site offers comprehensive information about the park, including visitor centers, events, educational programs, and research initiatives. It is supported by the Ministry for Environment, Climate and Energy of Baden-Württemberg, indicating strong institutional backing and legitimacy. Technically, the website is built on TYPO3 CMS with modern web technologies such as jQuery, Bootstrap, and Leaflet for maps. It incorporates accessibility features, responsive design, and SEO best practices, providing a good user experience across devices. The site uses Matomo for analytics and implements a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and has a cookie consent banner. While explicit security headers are not clearly visible in the HTML, the overall posture is solid with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with the site's public sector nature, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Minor improvements in security headers and publishing a security policy could enhance its security maturity further.

W

WIR FÜR GESUNDHEIT GMBH

wir-fuer-gesundheit.de

48

WIR FÜR GESUNDHEIT GMBH operates the largest German cross-provider healthcare network offering enhanced medical services and private patient comfort through its PlusCard product. The company targets employees, employers, clinics, and families in Germany, providing flexible health insurance tariffs and access to a broad network of approximately 450 partner clinics. The website is professionally designed using Drupal 10, integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Pardot, and is hosted behind Akamai CDN infrastructure. Contact information is clearly presented, but explicit privacy and terms of service pages are missing. Cookie consent mechanisms are implemented, indicating some level of GDPR compliance.

W

Wirtschaftsförderung Sindelfingen GmbH

sindelfingen.org

57

Wirtschaftsförderung Sindelfingen GmbH is a regional economic development organization focused on supporting businesses, investors, and startups in Sindelfingen, Germany. The company leverages its strategic location with strong industrial presence, including the Mercedes-Benz Group AG, to promote sustainable economic growth and vibrant urban development. Their services include business support, real estate services, event management, and cooperation facilitation. The website reflects a professional and well-structured digital presence with comprehensive content and multimedia elements. Technically, the site is built on WordPress with modern frameworks and SEO optimizations, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced HTTP security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

Ryzer is a specialized platform focused on connecting athletes with recruiting and instructional events hosted by college coaches and event organizers. Established in 2004, it offers a patented alert system, leaderboards, and athlete showcases to help athletes improve and gain visibility. The website demonstrates a solid market position within the sports education sector, targeting athletes, coaches, and event organizers primarily in the United States. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and HubSpot integrations, hosted on AWS infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent banner and privacy policy present, though no detailed security or incident response policies are published. Overall, the website is trustworthy and professionally maintained, with moderate user tracking through marketing pixels and analytics tools.