Security Directory

The website stfdoboj.net is a parked domain managed through Sedo's domain parking service. It provides categorized informational links primarily in Finnish, targeting general users seeking information on various topics such as automotive, electronics, travel, and lifestyle. There is no active business presence or company information on the site, and it functions mainly as a placeholder with monetized links. The technical infrastructure relies on standard HTML and JavaScript with Sedo's parking scripts, hosted via Sedo's parking platform. The site lacks advanced technical frameworks or CMS platforms and shows basic mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS enforcement and security headers, and no contact or privacy policies beyond a basic Sedo privacy link are provided. Overall, the site presents low business credibility and minimal privacy compliance, with no signs of malicious or adult content. The domain WHOIS data is unavailable, indicating possible non-registration or privacy protection, which further reduces trustworthiness.

А

Аутопутеви Републике Српске

autoputevirs.com

46

Аутопутеви Републике Српске is a public enterprise responsible for the construction, maintenance, and management of highways and major roads in Republika Srpska, Bosnia and Herzegovina. The website serves as an information portal for infrastructure projects, public procurement, and traffic updates, targeting citizens, drivers, and governmental stakeholders. The company holds a significant position as a key state entity in transportation infrastructure within the region. Technically, the website is built on WordPress, utilizing common plugins such as RevSlider and Contact Form 7, with Google Analytics for traffic monitoring. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some modern security headers and privacy compliance mechanisms are missing, indicating room for improvement in security and GDPR adherence. Security posture is moderate, with HTTPS enforced and domain transfer protection enabled, but lacking DNSSEC and advanced security headers. No vulnerability disclosure or incident response information is publicly available. Overall, the site is trustworthy and professionally maintained but could enhance its security and privacy compliance. The overall risk is low, but strategic improvements in security headers, cookie consent, and transparency policies are recommended to strengthen compliance and user trust.

The website putevirs.com represents the official online presence of Јавно предузеће Путеви Републике Српске, a government-owned public enterprise responsible for managing, constructing, maintaining, and protecting the road network in Republika Srpska, Bosnia and Herzegovina. The site provides detailed news, updates, and information about road infrastructure projects and public procurement plans, targeting residents and stakeholders within the region. The business model is focused on public sector infrastructure services, positioning the company as a key entity in transportation within Republika Srpska. From a technical perspective, the website employs legacy JavaScript libraries such as MooTools 1.2.1 and custom scripts, with CSS-based styling. The platform appears to be custom-built or uses an unknown CMS, with basic mobile optimization and accessibility features. Performance is moderate, and SEO optimization is basic, with proper meta tags but no advanced structured data or Open Graph tags detected. Security posture is moderate but shows room for improvement. The domain lacks DNSSEC, modern security headers, and there is no visible enforcement of HTTPS or HSTS. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. No incident response or security contact information is provided. Overall, the website is functional and provides relevant content for its audience but lacks modern security and privacy compliance features. The domain registration is consistent and appropriate for the business history, enhancing trustworthiness. Strategic improvements in security headers, privacy policies, and technology modernization are recommended to enhance the site's security and compliance posture.

The website represents the Savez opština i gradova Republike Srpske, a governmental and non-profit organization supporting municipalities and cities in Republika Srpska, Bosnia and Herzegovina. It provides information on organizational structure, program areas, projects, news, and events, targeting local governments and citizens. The site demonstrates a stable market position as a local government representative with strong international partnerships. Technically, the website uses a modern frontend stack including Bootstrap 4, jQuery, Owl Carousel, and integrates third-party services such as Google Analytics and Mailchimp. It enforces HTTPS and uses client-side redirection to ensure secure connections. However, no CMS or hosting provider is explicitly identified, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a moderate posture with HTTPS enforced and domain transfer protection enabled. However, it lacks DNSSEC, explicit security headers, privacy and cookie policies, and incident response contacts. No vulnerabilities or malware indicators were found in the content. The site is safe for general audiences with no adult or questionable content. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen trust and regulatory adherence.

A

Auto-moto savez Republike Srpske

ams-rs.com

49

Auto-moto savez Republike Srpske is a well-established non-profit organization providing roadside assistance, traffic updates, and membership services primarily in Republika Srpska, Bosnia and Herzegovina, and Europe. The website reflects a mature digital presence with a WordPress-based infrastructure, interactive maps, and live border crossing information. The organization targets local residents and travelers, offering key services such as emergency assistance and safety campaigns. The domain is long-standing and consistent with the organization's identity, enhancing trustworthiness. Technically, the site uses modern web technologies and plugins but lacks advanced security headers and DNSSEC, which could improve its security posture. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap for GDPR and regional regulations. Overall, the website is professional and functional with room for security and compliance improvements.

А

Агенција за безбједност саобраћаја Републике Српске

bslzrs.org

44

The website bslzrs.org represents the Agency for Traffic Safety of Republika Srpska, Bosnia and Herzegovina. It primarily serves as an informational platform for the XIV International Conference on Traffic Safety in Local Communities, providing detailed content about traffic safety statistics, conference agenda, speakers, thematic areas, and organizational committees. The agency operates as a governmental and non-profit entity focused on improving traffic safety through research, awareness, and collaboration with regional and international partners. The website targets professionals, researchers, and government officials involved in traffic safety and local community development. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, Slick Carousel, and Google Maps API integration. It is hosted on Bitlab Hosting and demonstrates moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic, and no CMS or advanced platforms are detected. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The WHOIS data shows privacy protection and a recent domain registration date, which is somewhat inconsistent with the historical content but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it requires improvements in privacy compliance, security headers, and transparency to enhance its security posture and regulatory adherence.

BTGport.net is a regional web hosting and domain registration service provider primarily serving the Balkan region, with services offered in Serbian language. The company offers a range of hosting packages, domain registration, web design, and email hosting solutions targeting small to medium businesses and individual users. The website content reflects a business focused on technology and telecommunications services with a local market presence. Technically, the website uses older technologies such as jQuery 1.2.6 and PHP with MySQL, and mentions a proprietary CMS (BTGcms). The site shows basic mobile optimization and SEO but lacks modern security features such as HTTPS enforcement and security headers. The presence of Google Analytics indicates moderate user tracking without visible privacy compliance mechanisms. Security posture is weak due to outdated libraries, lack of HTTPS, and no visible security headers or incident response information. WHOIS data for the domain is missing or not found, which raises concerns about domain legitimacy and registration status, conflicting with the website's claim of operation since 2003. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect users.

G

Getlink

getlink.space

56

Getlink.space is a newly launched (June 2024) online URL shortening service offering free and customizable short links with analytics and link management features. The service targets general internet users, businesses, and influencers seeking to simplify link sharing and track link performance. The website is built using modern web technologies including SvelteKit and Bootstrap, hosted with Cloudflare DNS and protected by privacy-protected domain registration. The site is mobile optimized and provides a good user experience with clear navigation and multi-language support. Security posture is moderate with HTTPS enforced and anti-bot CAPTCHA on forms, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism despite use of Google Adsense and Tag Manager. No direct company contact emails or phone numbers are provided, only a contact form. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

B

Bündnis für Demokratie und Menschenrechte

buendnis-demokratie-menschenrechte.de

47

The website 'Bündnis für Demokratie und Menschenrechte' represents a regional civil society and governmental alliance based in Baden-Württemberg, Germany, focused on promoting democracy and human rights. It serves as a platform for organizations, churches, political parties, and governmental institutions to collaborate and advocate for these values. The website is built on WordPress using the Divi theme and includes event management functionality via the Modern Events Calendar plugin. The technical infrastructure is modern and moderately optimized for performance and mobile devices, with good SEO practices implemented through the Rank Math plugin and structured data markup. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response contact information. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

S

Stadt Filderstadt

filderstadt.de

62

The website www.filderstadt.de serves as the official municipal portal for the city of Filderstadt, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen offices, appointment booking, economic development, education, and tourism. The site is well-structured with extensive navigation and a consistent branding approach, reflecting a professional municipal government presence. The target audience primarily includes local citizens, visitors, and commercial entities within the region. Technically, the website employs a modern technology stack featuring jQuery, jQuery UI, FontAwesome, and other JavaScript libraries, built on the dvv-Mastertemplates CMS platform. It is hosted on German-based servers with secure HTTPS configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site uses HTTPS and deferred script loading, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security transparency and readiness. Overall, the website is safe, trustworthy, and suitable for general audiences, with no adult or questionable content. The WHOIS data aligns with a legitimate municipal entity, reinforcing the site's credibility. Strategic recommendations include publishing a clear privacy policy, enhancing security headers, and providing incident response information to strengthen compliance and user trust.

G

Gemeinde Dossenheim

dossenheim.de

67

Gemeinde Dossenheim operates as a local government entity serving the residents and visitors of Dossenheim, Germany. The website provides comprehensive information about municipal services, local economy, culture, events, and digital citizen services. The municipality leverages modern web technologies including TYPO3 CMS and integrates ISO 27001 certified third-party services for recruiting and session management. The site is well-structured, accessible, and optimized for mobile devices, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms including a detailed cookie consent banner and privacy policy. However, explicit incident response and vulnerability disclosure information are absent, which could be improved to enhance trust and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

Q

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagementsystemen mbH

quacert.de

58

QUACERT is a German certification company specializing in accredited certifications for quality, environmental, energy, and education management systems, as well as waste management compliance. With approximately 30 years of experience and DAkkS accreditation, it holds a strong market position serving companies seeking recognized certifications. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Technically, the site uses modern JavaScript components and consent management tools, hosted by a reputable provider. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers and incident response disclosures could be improved. Overall, the site is trustworthy, compliant with GDPR, and free of vulnerabilities or suspicious elements.

N

Netzwerk für berufliche Fortbildung Calw

netzwerk-cw.de

47

Netzwerk für berufliche Fortbildung Calw is a regional network of over 20 educational institutions in the Calw area of Germany, offering tailored vocational training and continuing education programs. Supported by the Baden-Württemberg Ministry of Economy, Labor and Tourism, it aims to facilitate career advancement, re-entry, and reorientation for professionals and job seekers. The website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for cookie consent and Google Analytics with privacy features enabled. The site demonstrates good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and privacy compliance, though some security headers and explicit policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, with no signs of blocking or malicious activity.

The website 'Hadž i umra BiH – Ured za hadž i umru' serves as the official governmental portal for organizing and providing information about Hadž and Umra pilgrimages for citizens of Bosnia and Herzegovina. It offers news, guidelines, and organizational details relevant to pilgrims, positioning itself as the authoritative source in this religious sector within the country. The site targets the Bosnian Muslim community and operates under a governmental/non-profit business model, emphasizing service and information dissemination. Technically, the website is built on WordPress 6.8.2, utilizing common plugins such as WPBakery Page Builder, Everest Forms, Contact Form 7, and Google reCAPTCHA v3 for form security. The design is modern and mobile-optimized, with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in hosting and optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, with a high business credibility score but moderate security and privacy compliance scores. Strategic improvements in privacy policy publication, security header implementation, and accessibility would enhance its security posture and compliance standing.

M

meinKölnBonn

meinkoelnbonn.de

48

meinKölnBonn is a regional content platform operated in affiliation with Sparkasse KölnBonn, providing residents of the Köln and Bonn area with financial advice, lifestyle content, business insights, and local event information. The website positions itself as a trusted source for regional financial and lifestyle topics, leveraging the brand strength of Sparkasse KölnBonn. Technically, the site is built on WordPress with modern frontend technologies such as Swiper.js and lazy loading for images, ensuring a good user experience and mobile optimization. SEO practices are well implemented with Yoast SEO and structured data markup. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the site lacks explicit security headers and a public security policy. Privacy compliance is moderate, with a cookie consent mechanism present but no explicit privacy policy page found. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

unser-holz-bw.de

68

The website represents the official online presence of the Ministry for Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It focuses on public information campaigns related to sustainable forestry, climate protection, and consumer awareness, notably the #UnserHolz campaign promoting wood as a climate-friendly resource. The site targets citizens, environmental stakeholders, and professionals in forestry and construction sectors within Baden-Württemberg. The content is professionally curated, accessible, and well-structured, reflecting a mature digital presence of a government entity. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with user consent, and integrates modern web technologies ensuring good performance and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. Overall, the domain registration and website content align, confirming legitimacy as an official government resource.

M

Middle East Network Operators Group

menog.org

67

The Middle East Network Operators Group (MENOG) operates as a regional platform for Internet network operators and key Internet builders in the Middle East. It facilitates knowledge sharing through meetings, roadshows, and fellowship programs, positioning itself as a vital community organization in the telecommunications sector. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of network professionals. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics with cookies disabled, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the site is trustworthy and functional but could improve transparency and security practices to enhance credibility and compliance.

eKupon.ba is a regional e-commerce platform focused on providing discounted travel, wellness, and leisure offers primarily targeting customers in Bosnia and Herzegovina. The website presents a professional and modern design with a good user experience, showcasing a variety of hotel deals, spa treatments, and travel packages. The platform leverages modern web technologies including Alpine.js and Laravel Livewire, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by adding explicit cookie consent and detailed GDPR-compliant privacy policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site is well-positioned in its market niche but should enhance privacy and compliance transparency to improve trust and regulatory adherence.

I

Internacionalni teatarski festival MESS

mess.ba

59

The Internacionalni teatarski festival MESS website serves as the official online presence for a well-established cultural and theatrical festival in Bosnia and Herzegovina. It provides comprehensive information about upcoming events, exhibitions, and festival news, targeting theater enthusiasts and the cultural community. The website leverages a modern WordPress infrastructure with popular plugins such as Elementor and Slider Revolution, ensuring a visually appealing and moderately performant user experience. However, it lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR adherence and user trust. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the site is credible and professional but would benefit from enhanced privacy and security practices.

P

Promotim d.o.o.

kupipoklon.ba

57

KupiPoklon.ba is an established e-commerce platform based in Bosnia and Herzegovina, specializing in the sale of gift vouchers redeemable at a network of retail partners. The business targets general consumers and corporate clients seeking convenient gifting solutions. The website presents a professional design with clear navigation and relevant content in Croatian, supporting multiple brands and services. Technically, the site uses legacy JavaScript libraries such as jQuery 1.3.2 and plugins like Fancybox and Cycle, indicating some technical debt and potential security risks. The platform integrates payment processing partners including Monri, Mastercard, and Visa, reflecting a mature payment infrastructure. Security posture is moderate with HTTPS enforced but lacks modern security headers and uses outdated libraries. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the site is functional and credible but would benefit from modernization and enhanced security and privacy practices.

G

Garden of Dreams

gardenofdreams.ba

48

Garden of Dreams is a cultural event organizer focused on the electronic music festival held in Sarajevo, Bosnia and Herzegovina. The website promotes the 2025 festival and includes a talent development program called Dreamers Talent Camp, aimed at supporting emerging DJs and producers from the region. The business model revolves around event management, sponsorship partnerships, and community engagement through online voting and mentorship programs. The website is built on WordPress with modern frontend technologies and integrates multilingual support and social media channels to reach a broad audience. Technically, the site is well-structured with good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and secure form handling, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Monri Payments

monri.com

74

Monri Payments is a payment processing company offering a variety of products including advanced registers and secure card transaction services. The company appears established with a domain age dating back to 2000, indicating long-term presence in the payment industry. Their website is built on WordPress, leveraging common plugins such as Gravity Forms for contact forms and Yoast SEO for search optimization. The technical infrastructure includes Cloudflare DNS and GoDaddy as registrar, with SSL properly configured and domain locked with multiple EPP statuses to prevent unauthorized changes. Cookie consent is managed via Cookiebot, demonstrating attention to privacy compliance, although no explicit privacy policy or terms of service pages were detected in the main content.

P

Promotim d.o.o.

promotim.ba

44

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

D

Deutscher Hochschulverband

hochschulverband.de

60

The Deutscher Hochschulverband (DHV) is a well-established professional association representing scientists and academics in Germany. The website serves as a comprehensive portal offering legal advice, coaching, seminars, and career support tailored to the academic community. It maintains a strong market position as a key stakeholder in German higher education and research sectors, with a large membership base and diverse service offerings. The site is professionally designed, well-branded, and targets academic professionals effectively. Technically, the website is built on the TYPO3 CMS platform, leveraging privacy-conscious analytics via Matomo and hosted on reputable infrastructure (NetCologne). The site demonstrates good performance, mobile optimization, and accessibility standards. It employs modern web technologies and maintains clear navigation and SEO best practices. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and disables cookies in analytics by default, reflecting a strong privacy posture. However, it lacks explicit security policy documentation and incident response contacts, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, compliant with GDPR, and professionally managed, making it a reliable resource for its target audience. Strategic improvements in security transparency and incident response readiness are recommended to further enhance trust and compliance.

D

Deutscher Landkreistag

landkreistag.de

66

The Deutscher Landkreistag (DLT) is a prominent German government association representing 294 counties, covering 96% of the country's area and serving 68% of its population. The website serves as an information hub for news, publications, events, and digital projects related to county-level governance and administration. It targets municipal officials, policymakers, and stakeholders in local government. The organization operates as a non-profit entity focused on advocacy and support for counties in Germany. Technically, the website is built on Joomla CMS with the Gantry 5 framework, leveraging modern JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia integration. Cookie consent mechanisms are implemented, reflecting GDPR compliance. However, explicit security policies and incident response information are not published. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks visible security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing consistent registration and legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its government audience effectively. Strategic improvements could include publishing detailed security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to strengthen security posture and transparency.

S

Spreadshop

myspreadshop.it

54

The website myspreadshop.it serves as a landing page for Spreadshop, a print-on-demand merchandise platform targeting Italian users. It offers users the ability to create and sell custom merchandise online, leveraging the Spreadshirt group infrastructure. The site is minimalistic, focusing on a call to action to open a merchandise store via a partner registration link. The business model centers on e-commerce and print-on-demand services, with a medium-sized market presence supported by the parent company Spreadshirt. The domain is relatively new but consistent with the business timeline and geographic focus. Technically, the site uses basic HTML and CSS with embedded web fonts, but lacks advanced frameworks or CMS indicators. Performance and mobile optimization are basic but functional. No analytics or tracking scripts were detected, indicating minimal user data collection. SEO and accessibility features are present at a basic level. Security posture is moderate with DNSSEC enabled and domain status OK, but no visible security headers or HTTPS confirmation in the provided data. Privacy and cookie policies are absent, reducing compliance confidence. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but lacks formal security policies and incident response information. The absence of privacy and cookie policies and contact details limits trust and compliance with GDPR. No WAF or blocking mechanisms were detected, and content is fully accessible. Overall, the site is safe with no adult or explicit content, targeting a general audience interested in merchandise sales. Recommendations include implementing HTTPS with strong TLS, adding security headers, publishing privacy and cookie policies, providing contact and incident response information, and establishing a vulnerability disclosure process to enhance security posture and compliance.

Z

ZEIT SPRACHEN

zeit-sprachen.de

49

ZEIT SPRACHEN is a reputable language learning brand offering printed and digital magazines for multiple languages including English, French, Spanish, Italian, and German. It operates as a 100% subsidiary of the ZEIT Verlagsgruppe, a well-known German publishing group, positioning itself strongly in the education sector with high-quality journalistic content tailored for language learners and educators. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content.

Z

ZEIT SPRACHEN

spotlight-verlag.de

52

ZEIT SPRACHEN is a German-based language education publisher serving over 1.4 million users with language learning products and cultural content. The website is built on Drupal 11 and integrates modern consent management tools such as Usercentrics, reflecting a commitment to GDPR compliance. The site targets language learners, educators, companies, and advertisers, positioning itself as a reputable player in the education and media sectors within Germany. Technically, the site demonstrates good mobile optimization, SEO practices, and a moderate performance profile, hosted on servers associated with ccn.net. Security posture is adequate but could be improved by implementing security headers and publishing explicit privacy and terms of service documents. No signs of blocking or WAF interference were detected, allowing full content access and analysis.

HERDT-Verlag für Bildungsmedien GmbH operates HERDT|Campus, a digital educational media platform targeting academic institutions in Germany. The platform restricts access to authorized university networks, providing exclusive learning content for research and teaching. The company has a stable market position as a niche provider of digital educational resources, founded in 2013 and maintaining consistent branding and contact transparency. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and the Yii framework, with Cloudflare DNS services enhancing infrastructure reliability. However, the site shows basic SEO and accessibility features and lacks visible advanced security headers or cookie consent mechanisms. Security posture is moderate, with domain registration and DNS configurations indicating legitimacy but missing DNSSEC and security policy disclosures. Overall, the site is safe, professional, and targeted at a general academic audience, but improvements in privacy compliance and security best practices are recommended.

S

Staples

staples.com

73

Staples is a leading enterprise retail and e-commerce company specializing in office supplies, furniture, printing services, and technology products. The website serves a broad audience including businesses and individual consumers, offering a comprehensive range of products and services with a strong emphasis on convenience such as free next-day delivery and loyalty rewards. The site demonstrates a mature digital infrastructure leveraging modern frameworks like React and Next.js, supported by robust analytics and marketing tools including Adobe DTM, New Relic, and Google Analytics. Security posture is strong with HTTPS enforcement, Content Security Policy, and multiple monitoring tools, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data slightly impacts trust but is likely due to privacy protection. Overall, the site is professional, secure, and trustworthy, serving as a critical channel for Staples' business operations.

E

Europ Assistance

europ-assistance.com

63

Europ Assistance is a globally recognized assistance and insurance company, operating since 1963 and part of the Generali Group. The company provides a broad range of services including travel insurance, mobility assistance, home and living support, health services, senior care, and concierge offerings. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to both consumers and business partners worldwide. Technically, the site is built on WordPress using Elementor, enhanced with modern plugins and analytics tools such as Piwik PRO, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and corporate affiliation. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party plugin security.

S

Symetra Life Insurance Company

symetra.com

77

Symetra Life Insurance Company is a well-established insurance and financial services provider founded in 1957 and operating as a subsidiary of Symetra Financial Corporation. The company offers a broad range of products including life insurance, annuities, and employee benefits targeting individuals, families, employees, and employers across the United States. Their market position is solid with over 65 years of experience and a comprehensive portfolio of services. The website reflects a professional and user-friendly digital presence with clear navigation and extensive content tailored to various customer segments. From a technical perspective, the website employs a modern technology stack including Episerver CMS, Google Tag Manager, Google Analytics 4, Facebook Pixel, and other advanced analytics and monitoring tools. The site is mobile optimized, accessible, and SEO-friendly, providing a good user experience. Performance is moderate with room for optimization. Security posture is good with HTTPS enforced and no visible exposed sensitive data. However, explicit security headers are not clearly present, and there is no dedicated security policy or incident response page, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is high with clear contact information, social media presence, and trust indicators such as regulatory disclosures. Overall, the website and business appear legitimate and trustworthy, though the lack of WHOIS data transparency slightly reduces trust. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing vulnerability disclosure information to strengthen security posture and user trust.

D

Domains By Proxy, LLC

pluro.ai

75

Pluro.ai is a newly established technology company founded in 2024, specializing in web accessibility solutions. Their platform offers instant WCAG compliance checks, issue fixing tools, and ongoing accessibility monitoring aimed primarily at web developers and businesses seeking to improve website accessibility. The company positions itself as a niche SaaS provider focused on simplifying compliance with accessibility standards such as WCAG and ADA. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including HubSpot, Google Tag Manager, Hotjar, and ContentSquare. The hosting infrastructure is based on AWS, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with comprehensive privacy and cookie policies that align with GDPR requirements. No direct contact emails or phone numbers are published, with contact primarily via web forms. Overall, the website is professional, accessible, and trustworthy, with a good balance of technical maturity and business credibility.

D

Dieter-Kaltenbach-Stiftung

kita-ideenreich.de

40

The website represents KiTa ideenReich, a childcare facility operated by the Dieter-Kaltenbach-Stiftung and affiliated with Roche. It targets families seeking quality early childhood education and care, emphasizing developmental support and inclusion. The site is well-structured, professionally designed, and provides clear information about the facility's offerings and operational hours. Technically, the site uses a modern stack including jQuery and Bootstrap 4, hosted on a reliable provider with consistent domain registration data. Security posture is adequate with HTTPS usage, but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No forms or email contacts are directly visible, limiting direct digital communication channels. Overall, the site is trustworthy, safe, and serves its educational mission effectively.

D

Dieter-Kaltenbach-Stiftung

kita-am-baechle.de

43

KiTa Am Bächle is a childcare and kindergarten service provider located in Lörrach, Germany, operated by the Dieter-Kaltenbach-Stiftung foundation. The website serves as an informational portal for parents seeking childcare options, including a nature-focused kindergarten. The business model is non-profit and community-oriented, targeting local families exclusively. The site demonstrates a consistent brand presence and clear navigation, supporting its role as a trusted local childcare provider. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap 4, and FontAwesome, with a responsive design optimized for mobile devices. The CMS appears to be REDAXO, and hosting is likely provided by kasserver.com. Performance is moderate with good SEO practices, though accessibility features are basic. No advanced analytics or tracking scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and email obfuscation but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No forms or sensitive data collection points were found in the provided content, reducing immediate risk exposure. The WHOIS data is structured but lacks detailed registrant information, though no suspicious patterns were identified. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

Spiel- und Kulturhaus Tutti Kiesi

tuttikiesi.de

50

Tutti Kiesi is a small non-profit cultural and educational organization based in Rheinfelden, Germany, providing a variety of community services including creative courses, holiday programs, group offers, leisure activities, care, and venue rentals. The website is well-structured, professionally designed, and targets children, youth, and adults in the local community. Technically, the site uses a PHP backend with REDAXO CMS, Bootstrap 4, jQuery, and FontAwesome, hosted on kasserver.com. It is mobile optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and session management in place, though security headers and incident response policies are not explicitly published. No vulnerabilities or suspicious domains were detected. Overall, the website is trustworthy and safe with no adult or questionable content.

D

Dobra knjiga

dobraknjiga.ba

56

Dobra knjiga is a well-established Bosnian bookstore and publisher specializing in offset and digital printing, publishing, and design services. With over 18 years of experience, it serves readers across Bosnia and Herzegovina and the diaspora, offering a curated selection of quality books through an online e-commerce platform. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail and publishing operations. Security posture is solid with HTTPS and password strength enforcement, though improvements in security headers and GDPR compliance mechanisms are recommended. Overall, the site presents a professional and trustworthy online presence with clear contact information and active social media engagement.

UniCredit Bank Bosnia and Herzegovina operates a professional and comprehensive retail banking website offering a wide range of financial products including loans, savings, digital banking, and insurance. The bank is part of the UniCredit Group, a well-established international banking group, which is reflected in consistent branding and domain registration data. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager CMS, Adobe Analytics, and Tealium tag management, supporting a good user experience and mobile optimization. Security measures include HTTPS enforcement and Content Security Policy headers, although some improvements in header strictness are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes multiple channels such as phone, email, and online forms. Overall, the website is trustworthy, professionally maintained, and suitable for general audiences.

U

Union Banka d.d. Sarajevo

unionbank.ba

53

Union Banka d.d. Sarajevo is a well-established financial institution in Bosnia and Herzegovina, providing a broad range of banking services including accounts, loans, cards, savings, and digital banking platforms such as eUnion and mUnion. The bank targets both individual and corporate clients, with a notable focus on energy efficiency financing and sustainable banking initiatives. The website reflects a mature digital infrastructure built on modern technologies like React and Next.js, offering fast performance and excellent mobile optimization. Security measures such as HTTPS, security headers, and Google reCAPTCHA v3 are implemented, though explicit security policies and incident response information are not publicly detailed. Overall, the bank demonstrates a strong market position with consistent branding and trust indicators, supported by legitimate WHOIS registration data.

B

BH Telecom d.d. Sarajevo

bhtelecom.ba

65

BH Telecom d.d. Sarajevo is the leading telecommunications operator in Bosnia and Herzegovina, offering a comprehensive range of services including mobile telephony, fixed telephony, internet access, television services, and device sales. The company targets both private and business customers within the country, maintaining a strong market position supported by a professional and well-structured website. The digital infrastructure is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's business stature.

The website www.discoverdebitsecurity.com is currently inaccessible due to blocking by the Incapsula Web Application Firewall (WAF), which prevents retrieval of any meaningful content or metadata. The WHOIS lookup indicates that the domain is either unregistered or the data is not publicly available, raising significant concerns about the legitimacy and operational status of the site. Without accessible content, no business information, contact details, or compliance policies can be identified. Technically, the site lacks visible infrastructure or technology indicators, and no security headers or SSL configuration can be verified. This severely limits the ability to assess the website's security posture or privacy compliance. Overall, the site appears non-operational or heavily restricted, resulting in a very low trust and credibility score.

The website at https://pbs-bw.de/Startseite is currently inaccessible beyond a standard 404 error page indicating the requested page does not exist. There is no meaningful content, metadata, or business information available on the page. The domain is registered and active with standard name servers but lacks transparency and detailed WHOIS data. The technical infrastructure cannot be fully assessed due to the absence of content and security headers. No privacy, cookie, or terms of service policies are present, and no contact information is provided. The security posture is minimal with no visible protections or best practices implemented. Overall, the site appears to be either under construction, misconfigured, or abandoned, resulting in a very low trust and credibility score.

S

Samsonite

samsonite.fi

67

Samsonite.fi is the official Finnish e-commerce website for Samsonite luggage and travel accessories, operated by Aboutbags NV based in Belgium. The site offers a comprehensive product catalog including luggage, backpacks, bags, kids' luggage, and personalisation services. It targets Finnish consumers seeking premium travel products and provides localized content and customer support. Technically, the site is built on Salesforce Commerce Cloud with modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and WonderPush. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, although explicit security policies and incident response contacts are not found. WHOIS data aligns well with the business claims, indicating high legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy posture.

The website www.supportandgo.com operates as a service platform for multiple well-known luggage brands including Samsonite, American Tourister, Tumi, Lipault, Gregory, and Hartmann. It provides users with tools to find service support, parts delivery, pick-up services, and dispute resolution. The site targets both consumers and dealers, positioning itself as a key service facilitator within the luggage retail sector. The branding is consistent and professional, reflecting the established reputation of the Samsonite group. Technically, the website is built on ASP.NET MVC framework and utilizes common libraries such as jQuery, Modernizr, and Bootstrap. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Security measures include the use of anti-forgery tokens in forms, but there is a lack of explicit security headers and cookie consent mechanisms, which are areas for improvement. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks important HTTP security headers such as Content Security Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional appearance and brand alignment of the website. Overall, the website presents a moderate risk profile with good business credibility but technical and security gaps that should be addressed. Strategic recommendations include verifying domain registration, implementing comprehensive security headers, adding cookie consent mechanisms, and publishing clear security and incident response policies to enhance trust and compliance.

M

Create and sell with print on demand | Spreadshop

myspreadshop.co.uk

58

The website myspreadshop.co.uk serves as a partner landing page for Spreadshop, a print on demand merchandise platform. It targets individuals and small businesses interested in creating and selling custom merchandise online. The site is minimalistic, providing a call to action to open a merch shop via an affiliate link, and links to Spreadshirt's main sites for legal and company information. Technically, the site uses modern web fonts and responsive design but lacks advanced frameworks or CMS indications. Security posture is basic with no visible security headers or privacy policies, and no HTTPS status provided in the data. The domain is registered since 2021 with EuroDNS SA, consistent with the business age and purpose. Overall, the site is functional but minimal, with room for improvement in privacy, security, and contact transparency.

А

Агенција за безбједност саобраћаја Републике Српске

absrs.org

48

The website absrs.org represents the Агенција за безбједност саобраћаја Републике Српске, a government agency dedicated to traffic safety in Republika Srpska, Bosnia and Herzegovina. The agency provides comprehensive information on traffic laws, safety campaigns, licensing procedures, and statistical data to support safer road usage. The site targets the general public, local communities, and government stakeholders, positioning itself as an authoritative source for traffic safety in the region. Technically, the website employs a moderate technology stack including Bootstrap for responsive design, jQuery, Slick Carousel, and Fancybox for UI elements, alongside Google Fonts and Google Analytics for tracking. Hosting is managed by BitLab, with domain registration dating back to 2012, indicating an established presence. The site is accessible, mobile-optimized, and features clear navigation, although some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS URLs but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is implemented via an older ga.js script, and no cookie consent mechanism is detected. The WHOIS data is transparent and consistent with the agency's government status, supporting legitimacy. Overall, the website is functional and trustworthy as a government information portal but would benefit from improved security practices and privacy compliance to enhance user trust and regulatory adherence.

HugeDomains operates as a reputable domain marketplace specializing in the sale of premium domain names, offering customers options to purchase domains outright or through payment plans. The company has been in business since 2005 and serves a broad audience of businesses and individuals seeking memorable and SEO-friendly domain names. The website is professionally designed with clear navigation, customer testimonials, and trust signals such as a 30-day money back guarantee and secure payment options including PayPal and Escrow.com. Technically, the site employs modern JavaScript libraries, Google Analytics for tracking, and Google reCAPTCHA for bot protection, ensuring a secure and user-friendly experience. However, explicit security policies and incident response information are not publicly available, and WHOIS data for the domain is missing or inaccessible, which slightly impacts trust assessments. Overall, the site demonstrates a strong security posture with HTTPS and SSL encryption, complemented by cookie consent mechanisms and privacy policies that indicate GDPR compliance. The business model is clear and well-positioned in the e-commerce domain sales sector, with a medium-sized operational scale and consistent branding.

A

Agencija za upravljanje oduzetom imovinom Republike Srpske

auoirs.net

56

The website represents the Agencija za upravljanje oduzetom imovinom Republike Srpske, a government agency under the Ministry of Justice of Republika Srpska, Bosnia and Herzegovina. The agency manages assets confiscated through criminal proceedings, as established by law. The website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity with good SEO practices but lacking advanced security configurations such as DNSSEC and security headers. The site is accessible via HTTPS, ensuring encrypted communication, but lacks visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. No contact emails, phone numbers, or social media links were found, limiting direct communication channels. Overall, the site is professional and consistent with a government entity but could improve in privacy compliance and security posture.

Р

Републички завод за стандардизацију и метрологију

rzsm.org

53

The Republika Srpska Institute for Standardization and Metrology (RZSM) is a government administrative organization under the Ministry of Economy and Entrepreneurship of Republika Srpska, Bosnia and Herzegovina. It is responsible for standardization, metrology, control of precious metal items, and conformity assessment of products within Republika Srpska. The website serves as an official informational portal targeting citizens, businesses, and institutions in the region, providing regulatory and procedural information related to its mandate. Technically, the website is built on Joomla CMS with modern frontend technologies including WebComponents and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting details are limited but domain registration and DNS setup appear legitimate and stable. No advanced analytics or tracking tools are present, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled and no explicit security headers were detected in the provided HTML content. There are no published privacy or cookie policies, which is a compliance gap. No forms or user input fields were found, reducing attack surface. The domain WHOIS data is consistent with the business claims and shows a mature registration age. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security headers, published privacy and cookie policies, and DNSSEC implementation to improve security posture and compliance. The absence of tracking and advertising tools supports a low-risk profile for user privacy.

Републички педагошки завод Републике Српске is a governmental educational institution serving the Republika Srpska region of Bosnia and Herzegovina. It provides pedagogical advisory services, professional development for educators, student achievement analysis, and supports educational projects including e-learning initiatives. The website is well-structured, primarily in Serbian Cyrillic, targeting educators, students, and educational institutions within the region. The institution holds a key position in the local education sector with a domain registered since 2003, indicating established presence and trust. Technically, the website employs modern web technologies including Bootstrap 4.5, jQuery, Font Awesome, and Google Fonts, hosted by BitLab. The site is mobile responsive and offers good user experience and navigation clarity. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to enhance security posture. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is professional and trustworthy with good business credibility but requires enhancements in privacy compliance and security best practices to reach higher maturity levels.