Security Directory

T

TIMOCOM GmbH

timocom.ba

65

TIMOCOM GmbH operates a leading B2B digital marketplace platform specializing in road freight logistics, connecting shippers, freight forwarders, and carriers across Europe. Founded in 1997 and headquartered in Germany, the company offers a comprehensive suite of services including freight exchange, closed freight networks, tender management, route and cost calculation, transport orders, and API integrations. The website is professionally designed, multilingual, and targets logistics industry professionals seeking efficient transport solutions. Technically, the site leverages modern web technologies, HubSpot CMS, and Azure CDN hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, TIMOCOM presents a trustworthy, mature, and well-established digital logistics platform with a strong market position in Europe.

I

Initiative Pro Recyclingpapier

papieratlas.de

38

The website papieratlas.de is operated by the Initiative Pro Recyclingpapier (IPR), a German non-profit initiative focused on promoting the use of recycling paper with the Blue Angel certification across cities, counties, and universities in Germany. The site hosts annual competitions, publishes reports (Papieratlas), and provides educational content to encourage sustainable paper procurement. Supported by key government bodies and associations, it holds a strong position in the environmental and governmental sector in Germany. Technically, the website is built on WordPress with modern versions of jQuery and uses privacy-conscious Matomo analytics. The site is hosted on professional servers (kasserver.com) and employs HTTPS with good SSL configuration. The design is professional, mobile-optimized, and content-rich, with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms. However, it lacks explicit security headers and a public security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie banner. Contact information is transparent and professional. Overall, the website presents a low risk profile with strong legitimacy and trustworthiness. It effectively serves its target audience with relevant content and maintains a good security posture, though improvements in security headers and vulnerability disclosure could enhance its security maturity.

I

Initiative Pro Recyclingpapier

ceos-bekennen-farbe.de

34

The website 'CEOs bekennen Farbe' is a German non-profit campaign led by the Initiative Pro Recyclingpapier, promoting the use of recycled paper with the Blue Angel eco-label among CEOs of notable companies. It features endorsements from over 100 CEOs, news updates, and educational content aimed at encouraging sustainable paper use in the business community. The campaign is well-positioned within the German environmental non-profit sector and collaborates with recognized partners such as BMUV, NABU, and the Club of Rome. Technically, the website is built on WordPress, utilizing jQuery and Slider Revolution for interactive content, and employs Matomo for privacy-conscious analytics. Hosting is provided by kasserver.com, with proper HTTPS encryption and a cookie consent mechanism in place. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and formal security policies. From a security perspective, the site enforces HTTPS and uses minimal cookies, with Matomo configured to disable cookies, reflecting good privacy compliance. However, it does not publish explicit security policies or incident response contacts, and no vulnerability disclosure mechanisms are evident. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and aligned with its non-profit environmental mission. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to strengthen security posture and stakeholder trust.

P

Promotim d.o.o. Sarajevo

kupikartu.ba

59

Kupikartu.ba is a leading online ticketing platform in Bosnia and Herzegovina, operated by Promotim d.o.o. Sarajevo. The website offers a wide range of event tickets including music concerts, sports events, cultural performances, and cinema. It targets primarily Bosnian, Croatian, and Serbian speaking audiences interested in entertainment and cultural events. The business model focuses on e-commerce ticket sales with integrated payment processing partnerships. Technically, the site uses a modern responsive design built on Bootstrap with integrations for Google Analytics, Google Tag Manager, and advertising via Google Ad Manager. However, the use of an outdated jQuery version presents a security risk. Security posture is moderate with HTTPS enforced but lacks advanced security headers and visible security policies. Privacy compliance is basic with no cookie consent mechanism detected and limited GDPR indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

E

ENORM Design

enorm.design

44

ENORM Design is a specialized design agency based in Cologne, Germany, focusing on corporate and brand design, editorial design, and cultural and corporate communication. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, savings banks, and publicly listed corporations, primarily in the art, culture, and finance sectors. The website demonstrates a strong market position with notable awards and a comprehensive portfolio showcasing their expertise. Technically, the website is built on TYPO3 CMS and employs modern JavaScript libraries and frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain registration trust but does not detract significantly from the overall legitimacy given the professional content and legal disclosures. Overall, ENORM Design presents a credible and professional digital presence aligned with its business objectives.

E

ENORM Digital GmbH

enorm.media

52

ENORM Digital GmbH is a specialized internet agency based in Cologne, Germany, focusing on online advertising, digital media planning, and real-time advertising services. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, particularly in the cultural and financial sectors. Their business model revolves around delivering targeted online campaigns, programmatic buying, and media optimization to increase brand visibility and lead generation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references, positioning ENORM as a trusted niche player in the German online advertising market. Technically, the website is built on the TYPO3 CMS platform and leverages modern web technologies such as jQuery, Gumby Framework, and Google Maps API. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security header implementation. The presence of multiple external marketing and advertising tools, including Google Analytics and Facebook Pixel, indicates a mature digital marketing infrastructure. From a security perspective, the site uses SSL encryption as stated in its privacy policy, but lacks visible HTTP security headers and a dedicated security policy or incident response contact. Forms are implemented securely using POST methods, and no sensitive data is exposed in the HTML. Privacy compliance is well addressed with a comprehensive privacy statement aligned with GDPR requirements, although a cookie consent mechanism is absent. Overall, the security posture is adequate but could benefit from enhancements in header security and transparency. The domain WHOIS data is unavailable or protected, which is common for small digital agencies and justified for privacy reasons. Despite this, the website provides sufficient legal and contact information, client logos, and consistent branding to establish legitimacy and trustworthiness. No signs of malicious activity or suspicious patterns were detected. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and incident response transparency to further strengthen trust and compliance.

D

DE-CIX Management GmbH

uae-ix.net

70

UAE-IX powered by DE-CIX is a leading carrier and data center-neutral Internet Exchange platform serving the Middle East, particularly the GCC region. It offers high-quality interconnection services to network operators and content providers, leveraging a fully redundant switching infrastructure in secure Dubai data centers. The website reflects a professional and consistent brand presence aligned with DE-CIX, a reputable global Internet Exchange operator. Technically, the site uses modern frameworks and CMS (Neos and Flow PHP), with Google Tag Manager for analytics. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit security headers and vulnerability disclosure information are absent. WHOIS data is missing or unavailable, which slightly reduces trustworthiness and should be investigated further. Overall, the website is well-structured, GDPR compliant, and targets telecommunications professionals and partners in the region.

O

Otava Oy

otavakonserni.fi

57

Otava-konserni is a well-established Finnish media conglomerate specializing in book publishing, learning materials, and media content production. The company holds a leading market position in Finland's publishing industry, with a broad target audience including Finnish consumers, educational institutions, and media consumers. Their business model focuses on multi-channel content delivery, including digital and print formats, supported by a strong brand presence and subsidiaries such as Like and Otavamedia Oy. Technically, the website is built on a modern WordPress platform with integration of popular analytics tools like Google Analytics and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices, although there is room for improvement in accessibility and security headers. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and DNS security. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several recommended security headers. No forms or sensitive data collection points were detected on the main page, reducing immediate risk. However, the absence of explicit privacy and cookie policies and incident response information indicates gaps in compliance and transparency. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and business. Overall, Otava-konserni's website is professional, trustworthy, and well-positioned for its business goals. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory alignment.

O

Otavamedia Oy

etuasiakaskauppa.fi

58

Etuasiakaskauppa.fi is a Finnish e-commerce website operated by Otavamedia Oy, offering a diverse range of discounted products including home textiles, kitchenware, bags, accessories, jewelry, and books. The site targets Finnish consumers seeking affordable and varied household and lifestyle products. The business model is retail-focused with monthly promotional offerings, supported by a reputable media company, Otavamedia Oy, which enhances its market credibility and reach. The website is professionally designed with consistent branding and clear navigation, providing a good user experience.

S

Schmeck den Süden

schmeck-den-sueden.de

48

Schmeck den Süden is a regional culinary platform dedicated to promoting the cuisine and gastronomy of Baden and Württemberg in Germany. The website offers a variety of recipes, product information, and a directory of local gastronomes, targeting food enthusiasts and regional consumers. The business model focuses on content marketing and regional product promotion, supported by newsletters and partnerships. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Borlabs Cookie for privacy compliance. The design is responsive and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, serving as a valuable resource for its target audience.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

nanoportal-bw.de

60

The website 'verbraucherportal-bw.de' is an official government consumer protection portal operated by the Ministry for Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides authoritative information on nanotechnologies in everyday life and a broad range of consumer protection topics. The portal targets consumers in the Baden-Württemberg region, offering educational resources and links to other official nano-technology and environmental agencies. The site is well-branded and consistent with government standards, emphasizing trust and accessibility.

L

Landesamt für Geoinformation und Landentwicklung Baden-Württemberg

lgl-bw.de

54

The Landesamt für Geoinformation und Landentwicklung Baden-Württemberg (LGL) is a government agency responsible for surveying, land development, and geoinformation services within the German state of Baden-Württemberg. The website serves as an official portal providing information on geospatial data, land surveying, cadastral services, and related products. It targets public sector entities, professionals in geoinformation, and the general public interested in land development and mapping services. The agency holds a strong market position as the authoritative body for geoinformation in the region, offering a broad range of services including data provision, training, and product sales. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern JavaScript libraries such as jQuery, DataTables, and Bootstrap for responsive design and interactive features. The site is hosted within the Baden-Württemberg academic network (BelWü), indicating a stable and regionally controlled infrastructure. Performance and mobile optimization are good, with accessibility and SEO practices well implemented. However, explicit security headers and privacy policies are not evident, which could be improved. From a security perspective, the site uses HTTPS and asynchronous script loading, minimizing exposure to common vulnerabilities. No signs of WAF or blocking mechanisms were detected, and no sensitive data leakage was observed. The absence of a published privacy policy, cookie consent mechanism, and vulnerability disclosure reduces the overall privacy compliance and security posture scores. The WHOIS data is minimal but consistent with the agency's regional affiliation, supporting legitimacy. Overall, the LGL website is a professional, trustworthy government portal with solid technical foundations but could enhance its privacy and security transparency. Strategic improvements in publishing privacy and cookie policies, security headers, and incident response contacts would strengthen compliance and user trust.

W

Wildtierportal Baden-Württemberg

wildtierportal-bw.de

64

The Wildtierportal Baden-Württemberg is an official government-affiliated online platform providing comprehensive information on wildlife species, hunting regulations, and research activities within the Baden-Württemberg region of Germany. It serves both the general public interested in wildlife and registered hunters who can access an internal area for managing hunting grounds and reporting. The website is well-structured, professionally designed, and offers detailed content relevant to its audience. Technically, it employs modern web technologies including the Yii PHP framework, jQuery, Bootstrap, and slick carousel for UI components, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some HTTP security headers could be improved. No direct contact emails or phone numbers are published; contact is facilitated via a web form. No security policy or incident response information is publicly available. The domain WHOIS data aligns with the official nature of the site, showing consistent registration and DNS setup. Overall, the platform demonstrates a mature digital presence suitable for a government information portal with good trust indicators and compliance.

L

Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd

lel-bw.de

63

The Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd operates as a regional government agency providing comprehensive information, advisory services, and educational resources focused on agriculture, rural development, and nutrition in Baden-Württemberg, Germany. The website serves as a key portal for agricultural stakeholders, offering market data, quality assurance tools, publications, and event information. The institution holds a strong regional position as a trusted public service provider in the agricultural sector. Technically, the website employs a modern but custom CMS platform with a technology stack including jQuery, jQuery UI, Matomo analytics, and lazy loading for images. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. The use of Matomo indicates a privacy-conscious approach to analytics. From a security perspective, the site enforces HTTPS and limits cookies to technically necessary ones, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. WHOIS data confirms domain legitimacy and consistency with the stated business purpose. Overall, the website is a well-maintained, professional government portal with good content quality and business credibility. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

M

Ministerium für Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bio-aus-bw.de

60

The website bio-aus-bw.de serves as an official information portal managed by the Ministry for Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides comprehensive and up-to-date information on organic agriculture, targeting consumers, producers, educators, and students within the region. The platform offers detailed content on organic product labeling, quality assurance, education, and market information, positioning itself as a trusted government resource in the organic sector. Technically, the site employs a modern tech stack including jQuery, jQuery UI, FontAwesome, and Matomo analytics, hosted on a CMS tailored for government content management. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, while HTTPS usage is implied and cookie consent is implemented, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows generic DNS servers but aligns with the domain's governmental purpose, indicating legitimacy. Overall, the site demonstrates a solid security posture and compliance with privacy regulations, though improvements could be made in publishing explicit security policies and enhancing header configurations. The risk level is low, with no signs of malicious activity or content safety concerns.

M

Ministerium für Ländlichen Raum und Verbraucherschutz Baden-Württemberg

vondaheim.de

60

The website 'Von Daheim BW' is an official regional campaign managed by the Ministry for Rural Affairs and Consumer Protection Baden-Württemberg, Germany. It aims to promote regional food products by highlighting the families and stories behind them, targeting local consumers to increase awareness and preference for local goods. The site is well-branded, consistent, and professionally designed with clear navigation and content relevant to its mission. Technically, the site uses a government-managed CMS with modern JavaScript libraries such as jQuery and jQuery UI, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, though performance is moderate. Security practices include cookie consent with necessary cookies only, but lack explicit security headers and incident response information. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers and explicit policies. Privacy compliance is good, with a clear privacy policy and cookie banner. Business credibility is high due to official government affiliation and consistent branding. Overall, the site is trustworthy and serves its purpose well, though enhancements in security policy transparency and technical security measures are recommended for further strengthening.

F

ForstBW

forstbw.de

53

ForstBW is a large government-related organization responsible for the ecological, social, and sustainable management of the state forests in Baden-Württemberg, Germany. The website clearly targets residents, forest owners, environmentalists, and educators with a comprehensive range of services including forest management, wood sales, hunting and fishing permits, environmental protection projects, and educational programs. The organization holds recognized certifications such as Gemeinwohlbilanzierung and the Deutscher Nachhaltigkeitspreis, reinforcing its commitment to sustainability and compliance. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a professional design. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a notable gap. Contact information is primarily via web forms, with no direct emails or phone numbers visible. Overall, ForstBW's website presents a trustworthy, professional, and secure digital presence appropriate for a public sector entity. Strategic improvements in cookie consent, security headers, and incident response transparency would further enhance its security posture and user trust.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

landwirtschaft-bw.de

64

The website www.landwirtschaft-bw.de is an official government portal managed by the Ministry of Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It serves as a comprehensive information and service platform focused on agriculture, food, and rural development. The site offers a wide range of resources including market data, advisory services, publications, event announcements, and online applications targeted primarily at agricultural businesses, advisors, and citizens within the region. The content is professionally curated, well-structured, and highly relevant to its audience, reflecting a strong government presence and authority in the sector. Technically, the website employs modern JavaScript libraries such as jQuery and jQuery UI, uses Matomo for privacy-conscious analytics, and is hosted on government infrastructure with PowerDNS nameservers. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent branding and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be more visible. No vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital infrastructure aligned with government standards, providing trustworthy and valuable services to its users. The domain registration and WHOIS data confirm legitimacy and consistency with the official government entity. Privacy compliance is well addressed with clear policies and consent mechanisms. Strategic recommendations include enhancing security header implementation, publishing incident response contacts and security.txt files, and improving transparency on data retention policies to further strengthen trust and compliance.

S

STRKNG

strkng.com

62

STRKNG operates as an international online photography gallery specializing in contemporary and fine art photography. It serves photographers, models, designers, and brands by providing a platform to showcase portfolios, participate in community voting, and access photography-related events and publications. The business is positioned as a niche media platform with a strong community focus and curated content. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates with Cloudflare DNS and Google Firebase for push notifications. The site is mobile optimized and employs structured data for SEO enhancement. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The site hosts mature content including fine art nude photography, presented responsibly for a mature audience. Overall, the website is professional, trustworthy, and well-maintained with room for security enhancements.

E

ENORM Agentur für Design und Kommunikation Köln

enorm.net

47

ENORM Agentur für Design und Kommunikation Köln is a small regional agency specializing in design, digital communication, and media services. Their website presents a professional and consistent brand image targeting businesses seeking tailored solutions in corporate design, digital projects, and online advertising. The technical infrastructure is based on TYPO3 CMS with a modern JavaScript stack and Google Analytics for user tracking. While the website is accessible and well-structured, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided on the homepage. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and technical setup appear legitimate. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies.

S

Sparkasse KölnBonn

sparkasse-koelnbonn.de

73

Sparkasse KölnBonn is a prominent regional savings bank serving the Cologne and Bonn area in Germany. The institution offers a comprehensive range of financial services including checking accounts, investment products, securities trading, loans, and retirement planning. The website reflects a strong regional focus and commitment to customer service, supported by multiple contact channels and a chatbot feature. The bank is part of the larger Sparkassen-Finanzgruppe, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager (AEM), indicating a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security measures such as HTTPS, strict security headers, and secure form handling are implemented, demonstrating a solid security posture. However, explicit security policies and incident response information are not prominently published, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, including clear privacy and cookie policies. The domain registration data aligns well with the business identity, supporting legitimacy. No suspicious or malicious indicators were found, and the content is safe for general audiences. Strategic recommendations include publishing a dedicated security policy and incident response page, implementing a vulnerability disclosure policy, and continuing to monitor third-party scripts for security risks to enhance trust and compliance further.

N

norm-4 GmbH

norm-4.com

59

norm-4 GmbH is a full-service digital agency based in Cologne, Germany, specializing in custom digital solutions including websites, online portals, TYPO3 and WordPress CMS, e-commerce platforms, accessible websites, and mobile apps for iOS and Android. The company targets businesses, institutions, and public sector clients, positioning itself as a technologically competent and creative partner. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with modern plugins such as WPBakery Page Builder and Yoast SEO, and it employs Cookiebot for GDPR-compliant cookie consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, norm-4 GmbH demonstrates a solid digital maturity and trustworthy business profile.

T

TIMOCOM GmbH

timocom.rs

61

TIMOCOM GmbH operates a leading European digital marketplace specializing in road freight logistics. The platform connects shippers, freight forwarders, and carriers to optimize transport processes through services such as freight exchange, shipment tracking, and integrated interfaces. The company has a strong market presence with over 156,000 users and extensive service offerings tailored to the logistics industry. The website is professionally designed, multilingual, and optimized for mobile, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and privacy compliance mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. Overall, TIMOCOM demonstrates a robust business and technical foundation with a trustworthy online presence.

F

FiXiT d.o.o.

fixitweb.studio

47

FiXiT d.o.o. operates as a small web design studio presenting its portfolio through the Fixit Design Studio website. The company focuses on delivering web design and development services, targeting businesses and individuals seeking digital solutions. The website showcases a professional design with clear branding and a portfolio emphasis, positioning itself as a niche player in the technology sector. Technically, the site is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility features and good SEO practices. Security-wise, the website benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose compliance risks. Overall, the site is professional and safe but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

F

FiXiT d.o.o.

fixit.ba

48

FiXiT d.o.o. is a small IT services company based in Bosnia and Herzegovina, founded in 2015. The company offers specialized IT services including IT support, web design, and toner distribution. Their website reflects a professional and consistent brand image, targeting business clients seeking reliable IT solutions. The company maintains a portfolio of reputable clients, indicating a solid market position locally. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

Р

Републичка управа за геодетске и имовинско-правне послове

rgurs.org

58

The website rgurs.org represents the official portal of the Republika Srpska Republic Administration for Geodetic and Property-Legal Affairs, a government entity responsible for cadastral and property rights management in Republika Srpska, Bosnia and Herzegovina. The site provides access to various e-services including cadastral data, property registries, licensing, and public procurement information. It targets citizens, legal entities, and professionals involved in geodetic and property-related activities. The business model is that of a public service institution with a medium-sized operational scope and a history dating back to 2006. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery, and Slick Carousel, ensuring a responsive and user-friendly interface. However, no CMS or advanced analytics tools are detected, indicating a custom or lightweight platform. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers, which are recommended for enhanced security. There is no evidence of privacy or cookie policies, GDPR compliance statements, or incident response contacts, which are critical for regulatory compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is a legitimate government portal with good content quality and business credibility but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

M

Media centar Islamske zajednice u BiH

mina.ba

47

MINA.ba is the official website of the Muslim Informative News Agency (MINA), operated by the Media Center of the Islamic Community in Bosnia and Herzegovina. The site serves as a niche regional news platform focused on delivering news, announcements, and community updates relevant to the Bosnian Muslim population. It maintains a consistent brand presence and provides clear contact information, supporting its role as a trusted community media outlet. The business model is non-profit and community-oriented, targeting a specific religious and regional audience.

E

El-Kalem

elkalem.ba

47

El-Kalem is a well-established publishing center affiliated with the Islamic Community in Bosnia and Herzegovina, specializing in Islamic literature and cultural heritage. The website serves as an e-commerce platform offering a variety of books, magazines, and educational materials targeting the Bosnian Muslim community and interested readers. The business has a clear market position as a niche regional publisher with over four decades of presence. Technically, the site is built on WordPress with WooCommerce, using modern themes and performance optimizations, providing a good user experience with mobile responsiveness and SEO best practices. Security posture is adequate with HTTPS and secure payment integrations, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though improvements in privacy compliance and security transparency are recommended.

G

Gazi Husrev-begova biblioteka

ghb.ba

47

Gazi Husrev-begova biblioteka is a historic and culturally significant library institution in Bosnia and Herzegovina, founded in 1537. It serves researchers, students, and the general public interested in Islamic and Bosnian heritage by providing access to a vast collection of manuscripts, printed books, periodicals, archival materials, and museum exhibits. The institution also offers digital library services and publishes scholarly works. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. Google Analytics and reCAPTCHA are implemented for analytics and form security respectively. However, the site lacks a cookie consent mechanism and explicit privacy compliance features, which are important for GDPR adherence. Security-wise, the site shows no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and readiness. The WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's identity. Overall, the website is professional, trustworthy, and well-optimized for its audience, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

I

Institut za islamsku tradiciju Bošnjaka | www.iitb.ba

iitb.ba

47

Institut za islamsku tradiciju Bošnjaka (IITB) is a small, specialized scientific research institute affiliated with the Islamic Community in Bosnia and Herzegovina. The institute focuses on research and preservation of the Islamic tradition of Bosniaks, offering publications, conferences, and educational events primarily targeting the Bosnian-speaking academic and religious community. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and good SEO practices. The site is mobile optimized and provides clear navigation and contact information, including email and phone contacts, as well as social media presence on Facebook, Twitter, and YouTube. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

C

Centar za dijalog - Vesatijja

cdv.ba

47

Centar za dijalog - Vesatijja is a Bosnian non-profit organization dedicated to promoting dialogue culture among Muslims and between different religious and worldview communities. The organization focuses on scientific research, educational projects, and media publications including articles, videos, and PDF releases. Their target audience primarily consists of Bosnian-speaking Muslims and individuals interested in interreligious dialogue and Islamic cultural topics. The website reflects a niche position in the non-profit sector with a clear mission and consistent branding. Technically, the website is built on WordPress 6.8.2 with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and Font Awesome. The site is mobile optimized with good SEO practices and moderate performance. However, it lacks some advanced security headers and privacy compliance features such as cookie consent and privacy policy pages. From a security perspective, the site enforces HTTPS and uses secure contact forms, but it does not implement security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. The WHOIS data is consistent with the website's claims, supporting legitimacy. Strategic improvements in privacy policy publication, cookie consent, and security headers would strengthen the site's security posture and user trust.

U

Ured za zekat

zekat.ba

58

The website zekat.ba serves as an informational and transactional platform for Zekat, an Islamic charitable practice, primarily targeting the Bosnian Muslim community. It provides current nisab values, educational content, a Zekat calculator, and facilitates online payments through a partner site. The site is operated by 'Ured za zekat', a non-profit religious organization. The website demonstrates a moderate level of digital maturity with modern JavaScript usage, integration of Google Analytics and Meta Pixel for tracking, and a cookie consent mechanism. However, it lacks explicit privacy and security policies, and no direct contact information is provided on the site. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are notable gaps. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced transparency and security documentation.

1

1&1 Internet Inc

preporod.info

47

Preporod.info is a Bosnian language online news and community portal focusing on regional news, Islamic community affairs, and cultural topics. The website serves a niche audience interested in Bosnian and Islamic community news, providing regularly updated articles, interviews, and event information. The business operates as a small media outlet with a clear focus on community engagement and information dissemination. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for user tracking. Hosting is provided by HostEurope with a dedicated server setup. The website is mobile optimized and has a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS enabled and domain transfer protection active, but lacks DNSSEC and security headers. Privacy and cookie policies are missing, which impacts compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the domain registration is transparent and consistent with the business profile, registered with a reputable registrar in 2019. The website content is safe for general audiences with no adult or explicit content detected.

R

Radio BIR

bir.ba

44

Radio BIR is a Bosnian Islamic community radio broadcaster offering a diverse range of religious, educational, informational, political, youth, and musical programming. It serves a Bosnian-speaking Muslim audience across multiple regional FM frequencies, positioning itself as a key media outlet within the Islamic community in Bosnia and Herzegovina. The website is built on Joomla CMS and employs common web technologies such as jQuery, Bootstrap, and Font Awesome, reflecting a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is moderate; HTTPS is used, but security headers and privacy policies are lacking, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy.

B

Bošnjačka zajednica kulture

preporod.ba

50

Bošnjačka zajednica kulture is a Bosnian non-profit cultural organization undergoing a rebranding process, including a domain change from preporod.ba to bzk.ba. The website is currently under maintenance with a notice informing visitors about the changes. The technical infrastructure is based on WordPress with several common plugins, including Contact Form 7 and Slider Revolution. Security measures include HTTPS and Google reCAPTCHA, but there is a lack of explicit security headers and privacy policies. Contact information is limited to email addresses under the new domain, with no phone numbers or physical addresses provided on the maintenance page. Overall, the website shows moderate technical maturity but lacks comprehensive privacy and security documentation.

I

Islamska zajednica u Bosni i Hercegovini

islamskazajednica.ba

50

Islamska zajednica u Bosni i Hercegovini operates as the official religious authority for Muslims in Bosnia and Herzegovina, providing religious guidance, news, educational content, and community services. The website serves a Bosnian-speaking audience including local and diaspora communities, offering structured information about religious offices, events, and educational resources. The organization holds a strong market position as a government-recognized non-profit religious entity. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and Mootools. It is mobile responsive and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and HSTS. No exposed sensitive data or vulnerable libraries were detected, but the absence of explicit privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and providing clear incident response contacts to improve user trust and regulatory compliance.

T

TS-Yhtymä

ts-yhtyma.fi

53

TS-Yhtymä is a Finnish regional media and communications group based in Turku, specializing in publishing, communication, and printing services. The company has a well-established online presence with a website that clearly communicates its business focus and provides access to corporate documents such as annual reports. The website is built on WordPress and integrates modern tools such as Google Tag Manager and a consent management platform to comply with GDPR requirements. The technical infrastructure is standard for a medium-sized media company, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and consent mechanisms in place, though security headers are not visibly implemented. The domain registration data is consistent with the business identity, showing a long-standing registration since 2003, reinforcing legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

The Volkshochschule Südlicher Breisgau operates as a regional adult education provider in Germany, offering a broad range of courses across multiple program areas including languages, health, culture, and professional development. The institution targets local citizens of all ages, emphasizing inclusivity and accessibility. Their website reflects a well-structured educational platform with clear course offerings and community engagement. Technically, the site is built on a proprietary CMS (CMX), uses modern web technologies, and is mobile-optimized with good accessibility features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

V

Volkshochschule Wiesental

vhs-wiesental.de

45

Volkshochschule Wiesental operates as a regional adult education provider in Germany, offering a broad range of courses including languages, health, IT, integration, and youth education. The website reflects a well-structured educational institution with a clear target audience of adults, parents, and children. Their market position is that of a trusted community learning center with a consistent brand presence and active social media engagement. Technically, the site is built on TYPO3 CMS with modern libraries like jQuery and Bootstrap, hosted on kasserver.com, and demonstrates good mobile responsiveness and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Volkshochschule Oberes Nagoldtal

vhson.de

53

Volkshochschule Oberes Nagoldtal is a regional adult education institution based in Nagold, Germany, offering a broad range of courses including vocational training, online courses, youth art programs, and corporate training. The website serves as a comprehensive portal for course information, registration, and participant login, targeting the general public interested in continuing education. The institution holds certifications such as AZAV, indicating recognized quality standards in vocational training. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and FontAwesome, with additional accessibility support via the eyeAble tool. The site is hosted on servers associated with kasserver.com and employs HTTPS with a secure SSL configuration. Performance and mobile optimization are good, and the site includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and secure login forms, but lacks publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in formal security documentation and headers. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing HTTP security headers to further strengthen the security posture and user trust.

Volkshochschule Bodenseekreis is a regional adult education provider in Germany offering a broad range of courses and events across multiple disciplines including culture, health, languages, and digital skills. The website is well-structured, content-rich, and targets a general audience interested in lifelong learning. Technically, the site uses a proprietary CMS (CMX) with modern JavaScript and CSS, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is mostly met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

V

vhs Dossenheim

vhs-dossenheim.de

63

vhs Dossenheim is a small-sized adult education institution based in Germany, offering a variety of courses including languages, culture, health, and professional development. The website serves as an informational and program registration platform targeting the general public interested in continuing education. The institution maintains cooperative partnerships, such as with Volkshochschule Heidelberg e.V., enhancing its educational offerings and regional presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks explicit security headers and documented security policies. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

vhs Karlsruhe is a regional adult education institution based in Germany, offering a wide range of courses including languages, health, culture, professional development, and family education. The website is built on TYPO3 CMS with a modern and responsive design, providing good user experience and clear navigation. The technical infrastructure is solid, leveraging modern web technologies and asynchronous script loading for performance. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. No signs of malicious content or blocking mechanisms were detected, indicating full accessibility. Overall, the site is trustworthy and professionally maintained, serving its educational mission effectively.

S

Städtische Volkshochschule Crailsheim

vhs-crailsheim.de

48

The Städtische Volkshochschule Crailsheim operates as a regional adult education institution in Germany, offering a wide range of courses including languages, health, arts, integration, and professional development. It maintains a solid market position as a trusted public educational provider with integration into the Baden-Württemberg online VHS portal, enhancing its digital reach. The website is well-structured, content-rich, and targets a broad audience including adults, youth, and immigrants seeking language and integration courses. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, providing a responsive and accessible user experience. Hosting appears to be with a German provider, and the site uses HTTPS with secure login forms. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows good baseline protections but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is limited but consistent with the website's German educational nature. Overall, the site is trustworthy and professional but could benefit from enhanced privacy and security disclosures. Strategically, the institution should focus on implementing cookie consent, security headers, and publishing clear security and incident response policies to strengthen trust and compliance. The digital infrastructure is solid but could be modernized with updated libraries and analytics for better user insights and performance monitoring.

V

vhs Filderstadt

vhs-filderstadt.de

44

vhs Filderstadt is a medium-sized non-profit educational institution based in Germany, providing a wide range of adult education and cultural programs including language courses, art school offerings, health and fitness classes, and integration projects. The website is professionally designed using TYPO3 CMS, with good content quality and clear navigation targeting the general public interested in lifelong learning and cultural enrichment. The institution maintains an active social media presence and offers both in-person and online courses, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and secure login forms, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with the organization's mission and community role.

V

Volkshochschule Freiburg e.V.

vhs-freiburg.de

49

Volkshochschule Freiburg e.V. is a well-established adult education provider based in Freiburg, Germany, offering a broad spectrum of courses including languages, culture, health, and professional development. The organization targets adults seeking lifelong learning and integration support, positioning itself as a key regional educational institution with recognized certifications such as AZAV-Quacert and the Alpha-Siegel for accessibility. The website reflects a professional and accessible platform with clear navigation and comprehensive course offerings. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools like Eye-Able. It is hosted on a stable provider with secure HTTPS configuration and demonstrates good mobile optimization and SEO practices. The presence of cookie consent mechanisms and privacy policy pages indicates a strong commitment to GDPR compliance. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security policy and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, showing no suspicious registration patterns, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements could include publishing a dedicated security policy and incident response details to further enhance transparency and trust.

V

Volkshochschule Lörrach & Steinen

vhs-loerrach-steinen.de

49

Volkshochschule Lörrach & Steinen is a regional adult education provider in Germany offering a broad range of courses including languages, health, culture, and professional development. The website serves as an information and registration portal for courses and events, targeting the general public interested in lifelong learning. The institution maintains a solid market position as a trusted non-profit educational entity with partnerships to local foundations and online education platforms. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates accessibility tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

V

Volkshochschule Baden-Baden

vhs-baden-baden.de

54

Volkshochschule Baden-Baden is a well-established adult education institution providing a broad range of courses including language, integration, culture, health, and IT skills. The website reflects a community-focused educational service with a clear target audience of adult learners in the Baden-Baden region. The institution maintains a solid market position as a regional educational provider with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, enhanced by accessibility tools like Eye-Able and Klaro for cookie consent. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is strong with HTTPS enforced and basic security best practices observed, though there is room for improvement in explicit security headers and published security policies. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and safe, with no indications of adult or questionable content.

V

Volkshochschule March

vhsmarch.de

46

Volkshochschule March is a local adult education institution based in March, Germany, offering a wide range of courses in politics, culture, health, languages, and digital skills. The website serves as a portal for course information, registration, and community engagement, targeting adult learners and local residents. The institution holds an EFQM certification, indicating a commitment to quality management. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good mobile responsiveness and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.