Security Directory

E

EU Reference Laboratories for Residues of Pesticides

eurl-pesticides.eu

61

The EU Reference Laboratories for Residues of Pesticides website serves as an official platform providing regulatory and scientific support related to pesticide residue analysis within the European Union. It offers resources such as proficiency tests, monitoring reports, guidance documents, and workshops aimed at official control laboratories and regulatory bodies. The site is positioned as a government/non-profit entity under EU regulation, emphasizing quality and comparability of pesticide residue testing results. Technically, the website employs basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking, including IP anonymization. The design is functional but somewhat dated, with moderate mobile optimization and accessibility. Security posture is adequate with HTTPS implied and SiteLock badge present, but lacks explicit security headers and visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy and security transparency are recommended.

D

DE-CIX Management GmbH

decix.net

77

DE-CIX Management GmbH operates as a leading global Internet Exchange provider, offering premium interconnection services across Europe, the Middle East, Africa, Asia, and the Americas. The company has a strong market position with a broad portfolio of services including peering, private interconnects, cloud connectivity, and security features. Their website reflects a mature digital presence with comprehensive service descriptions and a global footprint. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern analytics and error monitoring tools such as Google Tag Manager and Sentry. The website is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. Security-wise, the site enforces HTTPS, implements security headers, and provides a robust cookie consent mechanism, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data for the domain reduces transparency but does not detract significantly from the overall trustworthiness given the brand's reputation and professional presentation. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

L

LINX

linx.net

63

LINX operates as one of the world's largest Internet exchanges, connecting approximately 900 member ASNs across over 75 countries. The company provides critical internet exchange services facilitating network interconnection and traffic exchange for ISPs, enterprises, and network operators. The website reflects a professional and consistent brand presence with a focus on technical and business audiences in the telecommunications sector. The business model is membership-based, positioning LINX as a key player in the global internet infrastructure market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel for UI components. It integrates Google Analytics and HubSpot for analytics and marketing, alongside CleanTalk for anti-spam protection and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or malware were detected in the content, but the absence of WHOIS data and security.txt reduces transparency and trustworthiness. Overall, the website is professional and trustworthy from a business and user experience standpoint, but improvements in security transparency and contact information publication are recommended to enhance compliance and user trust.

F

France IX Services

franceix.net

66

France-IX Services operates as a leading interconnection provider in France, offering a comprehensive suite of network connectivity solutions including peering, cloud access, IP transit, and private interconnection services. The company targets businesses and network operators seeking robust and scalable interconnection platforms across major French cities. Their market position is strong within the French telecommunications sector, supported by a consistent brand presence and strategic partnerships such as with HubSIX. The website reflects a professional and well-structured digital presence, emphasizing ease of navigation and clear service offerings. Technically, the website leverages modern web technologies including Bootstrap, jQuery, HTMX, and Django as the backend CMS, ensuring a responsive and performant user experience. The site is mobile-optimized and accessible, with good SEO practices evident through meta tags and structured navigation. However, some technical gaps exist in security headers and explicit SSL configuration details, which could be improved to enhance security posture. From a security perspective, the site implements a cookie consent mechanism compliant with GDPR, but lacks visible security policies, incident response contacts, and a security.txt file. No direct company contact emails or phone numbers are provided, relying instead on contact forms. The absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and business signals strongly indicate a legitimate enterprise. Overall, France-IX presents a credible and professional business with a solid digital footprint. The primary risks relate to incomplete WHOIS data and minor security best practice gaps. Addressing these areas would strengthen trust and compliance, supporting continued growth and customer confidence.

M

Megaport

megaport.com

68

Megaport is a leading Network as a Service (NaaS) provider specializing in scalable bandwidth solutions for public and private cloud connectivity, metro ethernet, data center backhaul, and Internet Exchange services. The company positions itself as a global leader in cloud networking, targeting enterprises, cloud service providers, and data centers. The website reflects a mature digital presence with comprehensive service descriptions and a professional design. Technically, the site leverages modern web technologies including jQuery, Google Tag Manager, OneTrust for consent management, and Visual Website Optimizer for A/B testing, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. However, the absence of WHOIS registration data and explicit security policies or incident response information slightly detracts from overall trust. The site is free from adult or questionable content and maintains good privacy compliance. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

M

Megaport

ecix.net

69

Megaport is a leading provider of cloud networking and internet exchange services, offering solutions such as MegaIX to optimize traffic flow and reduce ISP costs. The company targets ISPs, enterprises, and cloud service providers with a B2B business model. The website reflects a professional and consistent brand presence with comprehensive service descriptions and a focus on technology and telecommunications sectors. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Visual Website Optimizer for A/B testing, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image, although WHOIS data is unavailable, limiting domain registration verification.

E

ENORM Digital GmbH

enorm.digital

54

ENORM Digital GmbH is a Cologne-based internet agency specializing in digital communication projects such as websites, landing pages, one-pagers, banners, and online advertising. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, positioning itself as a trusted partner in the cultural and financial sectors. Their website demonstrates a professional and consistent brand presence with a comprehensive portfolio and client references. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The company provides detailed legal disclosures and privacy policies compliant with GDPR, enhancing trust and transparency.

S

Smarketer GmbH

smarketer.pl

66

Smarketer GmbH is a specialized Google Ads agency operating primarily in Poland and German-speaking countries, offering comprehensive digital marketing services focused exclusively on Google Ads. The company positions itself as a leader in the European market with over 14 years of experience and more than 1000 projects completed. Their services include campaign management, Google Shopping CSS, display and remarketing ads, YouTube video ads, and strategic consultation. The website demonstrates a mature digital infrastructure with WordPress CMS, modern performance optimizations, and consent management for GDPR compliance. Security posture is solid with HTTPS and form protections, though some security headers are not explicitly detected. The absence of WHOIS data is a notable gap but does not significantly detract from the overall trustworthiness given the professional presentation and certifications. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.

S

Smarketer GmbH

smarketer.it

64

Smarketer GmbH is a specialized full-service Google Ads agency operating primarily in the D-A-CH region with a strong focus on search engine advertising and Microsoft Advertising. The company serves nearly 900 clients across various sectors, offering tailored marketing strategies, professional campaign management, and performance-based compensation models. Their market position is reinforced by certifications such as Google Premium Partner and Microsoft Advertisement Elite Partner. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern optimizations including WP Rocket for performance and Consent Manager for GDPR compliance. The use of Google Tag Manager and jQuery indicates a mature digital infrastructure. The site is mobile optimized and SEO friendly, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements consent management for privacy compliance. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The website is safe for general audiences, with no adult or questionable content. Contact information is comprehensive, including emails, phone numbers, physical address, and a contact form. Social media presence is active across multiple platforms. WHOIS data confirms the legitimacy of the domain and company registration in Germany, consistent with the website claims.

S

Smarketer GmbH

smarketer.fr

58

Smarketer GmbH is a specialized digital marketing agency focused on Google Ads and Microsoft Advertising, positioning itself as the leading Google Ads agency in Europe. The company offers tailored marketing strategies, campaign management, and performance optimization services primarily targeting businesses seeking to enhance their online advertising effectiveness. Their market position is reinforced by certifications such as Google Premier Partner and Microsoft Advertising Elite Partner, along with multiple awards and client testimonials. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket and uses Google Tag Manager and Consent Manager for analytics and privacy compliance. The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. The WHOIS data is unavailable or privacy protected, which is common for commercial entities, but the website content and trust signals strongly support legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site demonstrates a professional, secure, and compliant digital presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and adding a security.txt file to improve vulnerability disclosure transparency.

S

Smarketer GmbH

smarketer.co.uk

67

Smarketer GmbH is a well-established digital marketing agency specializing in Microsoft Advertising and Google Ads services. With over 13 years of experience and a strong European presence, the company offers comprehensive campaign management, optimization, and international marketing strategies. Their website reflects a professional and modern digital infrastructure, leveraging WordPress, jQuery, Google Tag Manager, and advanced consent management tools to ensure GDPR compliance and performance optimization. Security posture is solid with HTTPS and consent mechanisms, though there is room for improvement in security headers and incident response transparency. The WHOIS data for the exact domain www.smarketer.co.uk is unavailable due to domain naming rules, but the business legitimacy is supported by certifications, client testimonials, and consistent branding across multiple regional domains.

S

Smarketer GmbH

smarketer.es

64

Smarketer GmbH is a specialized digital marketing agency focusing on Google Ads and Microsoft Advertising services, primarily serving clients in the DACH region. The company positions itself as a leading certified partner with nearly 900 active clients, offering personalized marketing strategies, campaign optimization, and performance-based remuneration. Their website reflects a professional and modern digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and uses Google Tag Manager and Consent Manager for analytics and GDPR compliance. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements consent management for privacy compliance, and shows no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, the website and business demonstrate a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital marketing service provider.

S

Smarketer GmbH

smarketer.nl

64

Smarketer GmbH is a specialized full-service Google Ads and Microsoft Advertising agency headquartered in Berlin, Germany. Established in 2011, it serves nearly 900 clients across various sectors, focusing on search engine marketing to increase visibility, customer acquisition, and revenue. The company holds prestigious certifications such as Google Premium Partner and Microsoft Advertising Elite Partner, underscoring its market leadership in the D-A-CH region. Their business model emphasizes performance-based fees without long-term contracts, appealing to SMEs and larger enterprises alike. Technically, the website is built on WordPress with modern performance optimizations including lazy loading, preconnect hints, and asynchronous script loading. It integrates consent management tools to ensure GDPR compliance and uses Google Tag Manager for analytics and marketing tags. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs consent management for privacy compliance. However, it lacks explicit security policy pages, incident response information, and advanced security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the business claims. Overall, Smarketer presents a professional, trustworthy, and well-structured online presence with strong business credibility and compliance posture. Strategic improvements could include publishing detailed security policies and enhancing security headers to further strengthen trust and resilience.

S

Smarketer GmbH

smarketer.ch

69

Smarketer GmbH is a specialized full-service Google Ads agency operating primarily in the D-A-CH region, recognized as a market leader with over 900 clients. The company offers a comprehensive suite of digital advertising services including Google Ads, Microsoft Advertising, Google Shopping, YouTube advertising, and related coaching and consulting services. Their strong partnerships with Google and Microsoft, along with certifications and client testimonials, reinforce their market position. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading, consent management for GDPR compliance, and integration of Google Tag Manager. The site is mobile-optimized, SEO-friendly, and uses trusted third-party services for consent and analytics. Security posture is good with HTTPS and basic security headers, though there is room for improvement in advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Contact information is comprehensive and transparent, supporting business credibility. Overall, Smarketer demonstrates a mature digital presence with strong business credibility and a solid security foundation, suitable for its role as a trusted digital marketing partner.

S

Smarketer GmbH

smarketer.at

61

Smarketer GmbH is a specialized full-service Google Ads agency operating primarily in the D-A-CH region, recognized as a market leader with over 900 clients. Their core offerings include Google Ads management, Microsoft Advertising, Google Shopping CSS, and conversion optimization services. The company emphasizes performance-based billing and personalized coaching, supported by strong partnerships with Google and Microsoft. Technically, the website is built on WordPress with modern optimizations such as WP Rocket, consent management, and Google Tag Manager integration, ensuring fast performance and good SEO. Security posture is solid with HTTPS and consent mechanisms, though additional security headers and published policies could enhance trust. The absence of WHOIS data limits domain transparency but does not detract from the professional presentation and trust signals on the site.

S

Selecdoo

selecdoo.me

56

Selecdoo is a German-based affiliate marketing platform founded in 2017, offering businesses a risk-free and flexible way to generate revenue through partner programs. The platform targets publishers, influencers, and advertisers, providing tools for commission tracking, campaign management, and publisher support. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in compliance and security transparency.

Ú

Únia materských centier

materskecentra.sk

57

Únia materských centier is a Slovak non-profit organization dedicated to supporting mothers and families with young children through a network of mother and family centers. The organization runs various campaigns, educational projects, and advocacy efforts to promote parenting skills, community building, and family welfare. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent, though it lacks published security policies and vulnerability disclosures. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security and incident response.

The Sarajevo Holiday Market website represents a small-scale event organizer focused on cultural and commercial fairs held in Sarajevo since 2011. The business promotes seasonal markets including a winter holiday market and a summer market showcasing local artisans and products. The website content is bilingual, targeting both local residents and tourists, and provides essential contact information and vendor registration links. Technically, the site uses legacy JavaScript libraries such as jQuery 1.12.0 and Modernizr 2.8.3, with basic mobile optimization and moderate performance. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and missing privacy and cookie policies. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards.

Spanish Market d.o.o. is a small manufacturing company based in Bosnia and Herzegovina specializing in the production of packaged bakery products with long shelf life. The website presents a professional and consistent brand image with clear navigation and multilingual support, targeting general consumers and business clients interested in bakery products. The business model focuses on manufacturing and distribution within the local market, supported by downloadable product catalogs and social media presence on LinkedIn and Facebook. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It is served over HTTPS, ensuring secure communication, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security policies and incident response information suggests limited maturity in security governance. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

I

Ideas Business Lab d.o.o.

ibl.ba

52

Ideas Business Lab d.o.o. is a Bosnian marketing and communications agency focused on helping clients achieve business success through creative and strategic services. Their offerings include strategy, creative design, digital marketing, media planning, events, social media management, and public relations. The company targets businesses seeking comprehensive marketing solutions in Bosnia and Herzegovina. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website uses modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Modernizr for feature detection. The site loads with moderate performance and has basic accessibility features. However, there is no detected CMS or hosting provider information. SEO is adequately addressed with meta tags and Open Graph data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no published privacy policy, cookie policy, or incident response information, which are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional marketing agency but should improve privacy compliance and security practices to enhance trust and meet regulatory requirements.

U

UNIOR TEHNA

uniortehna.ba

44

UNIOR TEHNA is a Bosnia and Herzegovina based company specializing in the wholesale and retail distribution of professional tools and equipment from internationally recognized brands. They serve both professional and hobbyist customers, offering electric tools, hand tools, welding apparatus, and abrasive materials. The company also provides authorized servicing and demo presentations to enhance customer engagement. Their market position is that of a trusted regional distributor with partnerships with over 15 global brands. Technically, the website is built on WordPress with a modern plugin ecosystem including Contact Form 7 and Google reCAPTCHA for form security. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and anti-bot measures but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

F

Fondacija Sarajevo Navigator

sarajevo.travel

64

Fondacija Sarajevo Navigator operates the official Destination Sarajevo Guide website, providing comprehensive tourism information including events, accommodations, sightseeing, and activities in Sarajevo, Bosnia and Herzegovina. The website serves as a key resource for tourists planning visits, offering detailed guides, booking integration, and cultural insights. The business is positioned as an authoritative local tourism promoter with a small organizational size and a focus on hospitality and cultural tourism. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising services including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and well-structured, with good SEO practices and consistent branding. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website farmabih.ba is currently a parked domain with no active business content or services. It serves primarily as a placeholder page indicating the domain may be for sale. The site relies heavily on third-party advertising scripts, mainly Google Adsense Domains CAF and DoubleClick, with no original content or user engagement features. The technical infrastructure is basic, using standard HTML and JavaScript with Amazon Cloudfront CDN for content delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie consent mechanisms. The site does not provide any contact or business information, which limits trust and credibility. Overall, the domain appears to be used for domain parking and resale rather than an operational business website.

M

Megamix d.o.o.

megamix.ba

46

Megamix d.o.o. is a well-established foodservice distribution and logistics company based in Bosnia-Herzegovina, with over 30 years of experience. The company serves a broad B2B audience in the hospitality and foodservice sectors, maintaining partnerships with numerous reputable brands. Their website reflects a professional and consistent brand image, targeting businesses seeking distribution and logistics solutions. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security features.

D

Dino Merlin

dinomerlin.com

50

Dino Merlin's official website serves as a comprehensive platform for promoting the artist's music, merchandise, and concert tours. The site targets a broad audience of music fans primarily in the Balkan region and offers direct links to streaming platforms, ticket sales, and an online shop. The business model revolves around media and entertainment with revenue streams from music sales, merchandise, and live events. The website is well-branded and professionally designed, reflecting the artist's established market position. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and CookieYes for cookie consent management. It uses Cloudflare for DNS services and includes parallax effects with Rellax.js. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. The domain is long-standing and registered with GoDaddy, consistent with the artist's career timeline. From a security perspective, the site enforces HTTPS and includes CSRF tokens for form security. However, it lacks DNSSEC and visible security headers, and does not publish privacy or security policies, which are compliance gaps. Tracking technologies are used extensively, indicating moderate user tracking. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in policy transparency and security headers would strengthen user trust and regulatory adherence.

A

Adazal d.o.o.

adazal.ba

45

Adazal d.o.o. operates a well-established baucenter retail business in Bosnia and Herzegovina, offering a wide range of construction materials, home appliances, garden equipment, and tools through both physical stores and an online e-commerce platform. The company has a strong market presence with over 27 years of operation, targeting general consumers and professionals in the construction and home improvement sectors. The website is professionally designed with good navigation, mobile responsiveness, and a comprehensive product catalog, supporting a positive user experience.

The website odmoriubih.ba currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and generic, showing outdated CMS meta tags for Joomla 1.5 and WordPress 2.5, which are no longer supported and pose security risks. No business or contact information, privacy policies, or terms of service are accessible, limiting the ability to assess the company's operations or compliance. The site uses a browser integrity check and an automated redirect, with an external link to BitNinja.io, suggesting reliance on third-party security services. From a technical perspective, the site shows signs of legacy technology usage and lacks modern SEO, accessibility, and mobile optimization features. Security headers and HTTPS enforcement are not visible in the provided content, and no analytics or advertising scripts are detected. The absence of privacy and cookie policies indicates poor privacy compliance. Overall, the site’s security posture is weak due to outdated software and lack of visible security best practices. Given the content is blocked by a security mechanism, the analysis is limited and the overall risk assessment is cautious. The site scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include upgrading the CMS, implementing HTTPS and security headers, adding privacy and cookie policies, and improving transparency with contact information and business details.

I

iNovine BH d.o.o.

inovine.ba

57

iNovine BH d.o.o. is a prominent retail company in Bosnia and Herzegovina, operating over 500 sales points and employing more than 1,000 staff. The company specializes in distributing tobacco products, print media, e-vouchers, telecom cards, lottery tickets, and event tickets, positioning itself as a market leader in retail distribution within the region. Their website reflects a professional digital presence with clear navigation and consistent branding, targeting a broad audience including retail customers and telecom users. Technically, the site employs modern web technologies such as Bootstrap, Google Analytics, and Mailchimp, ensuring moderate performance and good mobile optimization. Security-wise, the website enforces HTTPS and includes CSRF tokens but lacks some security headers and published privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the domain registration aligns well with the business claims, supporting the legitimacy of the site.

P

Planika Flex d.o.o.

planika.ba

57

Planika Flex d.o.o. operates planika.ba, an established online retail platform specializing in footwear and fashion accessories for women, men, and children. The company leverages a strong brand legacy of over 70 years, positioning itself as a trusted footwear provider in Bosnia and Herzegovina. The website offers a comprehensive catalog of products, including shoes, sneakers, sandals, boots, and related accessories, targeting a broad general audience. The business model is focused on e-commerce retail with a clear emphasis on brand variety and seasonal collections. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and responsive design frameworks likely based on Bootstrap. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Performance is moderate, with room for improvement in accessibility and technical SEO. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, indicating a baseline security posture. However, the absence of security headers and lack of publicly available security policies or vulnerability disclosure mechanisms highlight areas for enhancement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, planika.ba is a professionally managed e-commerce site with solid business credibility and technical foundation. Strategic improvements in privacy compliance, security headers, and transparency around security policies would strengthen its security posture and regulatory adherence.

P

Penny plus d.o.o. Sarajevo

pennyshop.ba

65

PENNY plus d.o.o. Sarajevo operates PENNYshop.ba, a well-established e-commerce platform founded in 1996, serving the Bosnian retail market with a wide range of products including tools, household appliances, sanitary equipment, and lighting. The website targets general consumers in Bosnia, offering convenient online shopping with a professional and consistent brand presence. Technically, the site employs modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside a chat widget for customer support. The platform appears to be custom-built with Bootstrap framework elements, providing good mobile optimization and user experience. Security posture is solid with HTTPS enforced and CSRF tokens in forms, though the absence of explicit security headers and published privacy or security policies indicates room for improvement. WHOIS data confirms the legitimacy and consistency of the business identity and domain age. Overall, the site is trustworthy and professionally maintained but should enhance privacy compliance and security transparency.

S

SportSport d.o.o.

sportsport.ba

59

SportSport d.o.o. operates SportSport.ba, a leading sports news portal in Bosnia and Herzegovina founded in 2007. The website provides comprehensive sports coverage including football, basketball, handball, and combat sports, targeting sports enthusiasts primarily within Bosnia and Herzegovina. The business model centers on digital media content delivery supported by advertising revenue through multiple ad networks and programmatic platforms. The company maintains a consistent brand presence and offers clear contact information and social media engagement channels.

S

Sintofarm Adriatica d.o.o.

sintofarm-adriatica.com

52

Sintofarm Adriatica d.o.o. is a Bosnia and Herzegovina based company founded in 2011, specializing in the import and distribution of veterinary pharmaceuticals, biological products, and animal feed additives. The company holds exclusive regional representation for multinational Italian companies SINTOFARM SpA and FATRO SpA, positioning itself as a key player in the regional animal health market. Their website reflects a professional business presence with clear product offerings and certifications such as ISO 9001:2008 and FAMI-QS, enhancing their credibility. Technically, the website employs a traditional tech stack including jQuery 1.9.1 and Modernizr, hosted on Hetzner infrastructure. While the site is functional and moderately optimized for performance and SEO, it lacks modern security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. The site uses HTTPS and integrates Google Analytics for user tracking but does not provide explicit privacy or cookie policies, indicating compliance gaps. From a security perspective, the absence of DNSSEC, security headers, and updated libraries suggests room for improvement. No incident response or vulnerability disclosure information is provided, which could impact the company's readiness to handle security events. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and privacy compliance to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory posture.

M

Milkprocessing

milkprocessing.ba

49

Milkprocessing d.o.o. is a consulting company specializing in the food industry, particularly dairy, meat, and confectionery sectors, with a strong focus on food safety. Founded in 1999 and based in Sarajevo, Bosnia and Herzegovina, the company has established itself as a leader in modernizing the local dairy industry. Their website reflects a professional presence with clear service offerings and industry focus. The target audience includes food industry professionals and companies seeking consulting and equipment solutions. The business model revolves around providing expert consulting services and supplying production and UV/IC equipment.

N

NapravioBiH d.o.o.

napraviobih.ba

52

NapravioBiH d.o.o. is a Bosnian company focused on promoting and distributing products made in Bosnia and Herzegovina, targeting both local artisans and international markets. The company collaborates with sister companies across Europe to facilitate market access and employment opportunities, including for handicapped individuals. Their website reflects a small but professional business with a clear mission to improve the image and economy of Bosnia and Herzegovina through product promotion and distribution. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates social media and video content. However, it lacks advanced CMS or modern frameworks and shows only basic mobile optimization and SEO. Security posture is moderate with HTTPS usage but missing key security headers and no visible security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

Islamska zajednica u Bosni i Hercegovini - Vakufska direkcija

vakuf.ba

61

Vakufska direkcija is a non-profit organization operating under the Islamic Community in Bosnia and Herzegovina, dedicated to managing and promoting vakuf (Islamic endowment) properties and related cultural and religious activities. The website serves as an information hub for the Bosnian Muslim community and interested stakeholders, offering news, project updates, publications, and educational resources. It maintains a consistent brand presence and provides clear contact channels including email, phone, and social media. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with good mobile optimization and SEO practices. HTTPS is enforced with a CSRF token present, indicating a baseline security posture. However, the absence of security headers and explicit privacy and cookie policies highlight areas for improvement in security and compliance. The security posture is solid but could be enhanced by implementing recommended headers and formalizing incident response and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving its non-profit religious and cultural mission effectively, but would benefit from enhanced privacy compliance and security best practices.

U

U.G. BIHAMK

bihamk.ba

65

BIHAMK is the largest automotive club association in Bosnia and Herzegovina, with a long-standing history dating back to 1946. The organization provides a comprehensive range of services including roadside assistance, technical vehicle inspections, international driving documents, vehicle homologation, and rent-a-car services. Their market position is strong within the regional transportation sector, supported by memberships in international bodies such as FIA and AIT. The website reflects a mature digital presence with modern design, clear navigation, and rich content tailored to motorists and vehicle owners in Bosnia and Herzegovina and the wider region. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and uses HTTPS with strong security headers, indicating a solid security posture. However, the absence of explicit cookie consent mechanisms and dedicated security or incident response pages suggests areas for compliance and security improvement. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.

M

MASS-light

mass-light.ba

45

MASS-light is a regional retail company specializing in lighting products with physical stores across Bosnia and Herzegovina and an online e-commerce platform. The website presents a professional catalog of lighting products, including chandeliers, lamps, and outdoor lighting, targeting consumers in Bosnia and Herzegovina. The technical infrastructure uses modern web technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF tokens, but lacks publicly visible security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and compliance documentation.

T

Turun Sanomat

ts.fi

56

Turun Sanomat is a well-established Finnish media company providing news and information services primarily to the Finnish-speaking population. The website offers a broad range of news content, multimedia, and subscription services, positioning itself as a leading regional newspaper in Finland. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, and Facebook SDK for analytics and advertising, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks explicit security headers and formal privacy/cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Suomen Hintavertailu Oy

hinta.fi

56

Suomen Hintavertailu Oy operates the website hinta.fi, a well-established Finnish price comparison platform founded in 2003. The site offers consumers a comprehensive service to compare prices across over a million products and dozens of retailers, positioning itself as a trusted resource in the Finnish retail sector. The business model centers on aggregating product pricing and availability data to facilitate informed purchasing decisions for Finnish consumers. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Web1 Oy, consistent with the domain registrar and nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy, cookie consent banner, and GDPR adherence. However, no explicit security policy or incident response information is published. Overall, the website presents a low-risk profile with high legitimacy supported by consistent WHOIS data, transparent registrant information, and a long domain age. Strategic recommendations include enhancing DNS security with DNSSEC, adding security headers, and publishing security and incident response policies to further strengthen trust and compliance.

V

Viestimedia Oy

viestimedia.fi

74

Viestimedia Oy is a leading Finnish media company specializing in content related to rural life, forestry, and detached home living. Established in 2015, the company produces both print and digital media targeting rural communities and stakeholders interested in sustainable development and lifestyle. Their market position is strong within their niche, supported by a portfolio of well-known publications and digital content offerings. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, ensuring a good user experience and SEO optimization. Security-wise, the site enforces HTTPS, uses reCAPTCHA for form protection, and implements a comprehensive cookie consent mechanism, though it could improve by adding explicit security headers and publishing a security policy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for the company.

E

Elisa Oyj

elisaviihde.fi

61

Elisa Viihde is a Finnish digital entertainment platform operated by Elisa Oyj, a major telecommunications company in Finland. The service offers streaming of TV shows, movies, and other digital content primarily targeting Finnish consumers. The website reflects a mature and professional digital presence consistent with a large enterprise in the telecommunications sector. The domain is well-established, registered since 2009, and the registrant information aligns with the corporate entity, indicating legitimacy and trustworthiness. Technically, the website employs modern technologies including React for frontend rendering, and integrates monitoring and analytics tools such as AppDynamics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, with a good performance profile. Security best practices are observed with HTTPS enforcement and multiple security headers, though DNSSEC is not implemented. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response information and lack of a vulnerability disclosure program are areas for improvement. Overall, the website presents a low risk profile with a high degree of business credibility and technical maturity. Strategic recommendations include implementing DNSSEC for enhanced DNS security, publishing a dedicated security policy and incident response details, and establishing a vulnerability disclosure program to foster transparency and proactive security management.

E

Učebnice, cvičebnice, pracovné zošity | EXPOLPEDGOGIKA

expolpedagogika.sk

60

The website www.expolpedagogika.sk operates as an e-commerce platform specializing in the sale of educational materials such as textbooks, exercise books, and workbooks primarily targeting schools and students in Slovakia. The site presents a professional and consistent brand image with a clear focus on educational products for basic, special, and secondary schools. The business model is retail-oriented with an emphasis on regional market presence and customer convenience, including free delivery for orders above a certain threshold. From a technical perspective, the website leverages a modern technology stack including OpenCart CMS, Bootstrap framework, and popular marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical enhancements. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place. However, the absence of security headers and explicit privacy and terms of service policies indicates areas for improvement. No critical vulnerabilities or WAF blocking were detected, suggesting a stable operational environment. The use of privacy protection in WHOIS data is typical for small businesses and does not raise immediate concerns. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy and security policies, improved contact information visibility, and implementation of additional security best practices to strengthen trust and compliance.

R

Raabe

raabe.sk

68

Raabe.sk is a specialized Slovak educational publisher and e-commerce platform offering a wide range of educational materials, including books, digital products, and training services targeted at teachers, school directors, healthcare professionals, and parents. The website demonstrates a mature digital presence with modern technologies such as OpenCart, Bootstrap, and integrated marketing and analytics tools. It maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and external link warnings, though some minor improvements in security headers are recommended. Overall, the site is professional, trustworthy, and well-positioned in the Slovak education and healthcare publishing market.

Y

Yrittajat.fi

yrittajat.fi

61

Yrittajat.fi is a prominent Finnish organization advocating for entrepreneurs at multiple governance levels including European, national, regional, and local. The website serves as a comprehensive resource offering membership services, advocacy, consulting, events, and informational content tailored to entrepreneurs in Finland. The organization holds a strong market position as a leading advocate and service provider for Finnish entrepreneurs. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent management. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS, employs security headers, and integrates consent management, reflecting a solid security posture. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, with no indications of malicious or suspicious activity. Strategic improvements in transparency around security and incident response would further strengthen its risk profile.

C

ClickEshop

clickeshop.sk

60

ClickEshop is a Slovak-based technology company specializing in providing a professional content management system for creating web pages and e-shops. Established in 2010, it serves a medium-sized market with over 10,000 projects completed, offering services including web hosting, email hosting, domain registration, and custom web design. The platform targets small to medium businesses and individuals seeking easy-to-use, customizable online presence solutions. The website is multilingual, supporting Slovak, English, German, and Czech languages, enhancing its regional reach. Technically, the website uses a proprietary CMS with modern web technologies such as jQuery, HTML5, and CSS3. It is hosted on a secure cloud infrastructure with HTTPS and DNSSEC enabled, ensuring a good security baseline. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. SEO practices are implemented, and Google Analytics is used for traffic analysis. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security policies, vulnerability disclosure, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration. Overall, ClickEshop presents a trustworthy and professional online presence with solid technical and business foundations. To enhance compliance and security posture, it should implement cookie consent, publish security policies, and consider formal vulnerability disclosure mechanisms.

C

ClickEshop

clickeshop.de

59

ClickEshop is a small technology company specializing in providing a proprietary platform for creating professional websites and webshops, including hosting, email, and domain services. With over 18 years of market presence and thousands of successful projects, it targets small to medium businesses and individuals seeking easy-to-use, customizable web solutions. The website is well-designed, mobile-optimized, and offers multilingual support, enhancing user experience and accessibility. Technically, the platform uses modern web standards such as HTML5, CSS3, and JavaScript with jQuery, and enforces HTTPS for secure communications. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. Contact information is clearly provided, including email, phone, and a contact form, supporting customer engagement. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices.

P

Planetary Quantum GmbH

planetary-quantum.net

50

Planetary Quantum GmbH is a German technology company specializing in managed Docker hosting and application hosting platforms. Their services cater primarily to startups, agencies, developers, and enterprise teams seeking reliable, secure, and GDPR-compliant hosting solutions. The company emphasizes its Berlin-based infrastructure with redundant data centers, ensuring performance and data protection aligned with European regulations. The website reflects a professional and consistent brand image, offering clear information about their products, solutions, and support services. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins such as Slider Revolution and Plausible Analytics for performance and minimal user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS with a strong SSL configuration and avoids exposing sensitive data. The absence of WHOIS data for the domain is a notable concern, potentially indicating a newly registered or unregistered domain, which slightly impacts trustworthiness. No signs of WAF blocking or security challenges were detected, and the site does not expose vulnerabilities or sensitive information. Overall, Planetary Quantum GmbH presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. The lack of WHOIS data should be investigated further to confirm domain legitimacy and registration status.

onlinevhs@BW is a regional online education platform serving the Volkshochschulen (adult education centers) in Baden-Württemberg, Germany. It offers a wide variety of online courses spanning languages, professional development, fitness, finance, pedagogy, and societal topics. The platform targets a broad general audience interested in personal and professional growth through accessible online learning. The business model revolves around providing digital access to Volkshochschulen courses, positioning itself as a key regional educational resource. Technically, the website is built on TYPO3 CMS with Bootstrap and modern JavaScript libraries, ensuring a responsive and accessible user experience. Analytics are implemented via Matomo and Google Tag Manager with some privacy-conscious configurations such as cookie disabling and consent checks. Security posture is strong with HTTPS and some best practices, but the absence of publicly linked privacy and cookie policies, terms of service, and contact information reduces compliance and trust levels. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business purpose and location. Overall, the site is professional and functional but would benefit from enhanced privacy and compliance disclosures to improve user trust and regulatory adherence.

Q

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH

azwv.de

47

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH operates a professional website focused on AZAV certification and quality management for labor market service providers in Germany. The company positions itself as a specialized certification body offering accreditation services, consulting, and training related to labor market integration and vocational education. The website content is well-structured, informative, and targeted at education and labor market institutions seeking AZAV compliance. Technically, the site uses Joomla CMS with common libraries such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The domain WHOIS data is minimal but consistent with the business profile, and no blocking or WAF mechanisms interfere with content access. Overall, the site demonstrates a good level of professionalism and trustworthiness appropriate for a small specialized certification entity.