Security Directory

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

The website farmabih.ba is currently a parked domain with no active business content or services. It serves primarily as a placeholder page indicating the domain may be for sale. The site relies heavily on third-party advertising scripts, mainly Google Adsense Domains CAF and DoubleClick, with no original content or user engagement features. The technical infrastructure is basic, using standard HTML and JavaScript with Amazon Cloudfront CDN for content delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie consent mechanisms. The site does not provide any contact or business information, which limits trust and credibility. Overall, the domain appears to be used for domain parking and resale rather than an operational business website.

N

NapravioBiH d.o.o.

napraviobih.ba

52

NapravioBiH d.o.o. is a Bosnian company focused on promoting and distributing products made in Bosnia and Herzegovina, targeting both local artisans and international markets. The company collaborates with sister companies across Europe to facilitate market access and employment opportunities, including for handicapped individuals. Their website reflects a small but professional business with a clear mission to improve the image and economy of Bosnia and Herzegovina through product promotion and distribution. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates social media and video content. However, it lacks advanced CMS or modern frameworks and shows only basic mobile optimization and SEO. Security posture is moderate with HTTPS usage but missing key security headers and no visible security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

Islamska zajednica u Bosni i Hercegovini - Vakufska direkcija

vakuf.ba

61

Vakufska direkcija is a non-profit organization operating under the Islamic Community in Bosnia and Herzegovina, dedicated to managing and promoting vakuf (Islamic endowment) properties and related cultural and religious activities. The website serves as an information hub for the Bosnian Muslim community and interested stakeholders, offering news, project updates, publications, and educational resources. It maintains a consistent brand presence and provides clear contact channels including email, phone, and social media. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with good mobile optimization and SEO practices. HTTPS is enforced with a CSRF token present, indicating a baseline security posture. However, the absence of security headers and explicit privacy and cookie policies highlight areas for improvement in security and compliance. The security posture is solid but could be enhanced by implementing recommended headers and formalizing incident response and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving its non-profit religious and cultural mission effectively, but would benefit from enhanced privacy compliance and security best practices.

U

U.G. BIHAMK

bihamk.ba

65

BIHAMK is the largest automotive club association in Bosnia and Herzegovina, with a long-standing history dating back to 1946. The organization provides a comprehensive range of services including roadside assistance, technical vehicle inspections, international driving documents, vehicle homologation, and rent-a-car services. Their market position is strong within the regional transportation sector, supported by memberships in international bodies such as FIA and AIT. The website reflects a mature digital presence with modern design, clear navigation, and rich content tailored to motorists and vehicle owners in Bosnia and Herzegovina and the wider region. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and uses HTTPS with strong security headers, indicating a solid security posture. However, the absence of explicit cookie consent mechanisms and dedicated security or incident response pages suggests areas for compliance and security improvement. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.

M

MASS-light

mass-light.ba

45

MASS-light is a regional retail company specializing in lighting products with physical stores across Bosnia and Herzegovina and an online e-commerce platform. The website presents a professional catalog of lighting products, including chandeliers, lamps, and outdoor lighting, targeting consumers in Bosnia and Herzegovina. The technical infrastructure uses modern web technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF tokens, but lacks publicly visible security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and compliance documentation.

S

Suomen Hintavertailu Oy

hinta.fi

56

Suomen Hintavertailu Oy operates the website hinta.fi, a well-established Finnish price comparison platform founded in 2003. The site offers consumers a comprehensive service to compare prices across over a million products and dozens of retailers, positioning itself as a trusted resource in the Finnish retail sector. The business model centers on aggregating product pricing and availability data to facilitate informed purchasing decisions for Finnish consumers. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Web1 Oy, consistent with the domain registrar and nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy, cookie consent banner, and GDPR adherence. However, no explicit security policy or incident response information is published. Overall, the website presents a low-risk profile with high legitimacy supported by consistent WHOIS data, transparent registrant information, and a long domain age. Strategic recommendations include enhancing DNS security with DNSSEC, adding security headers, and publishing security and incident response policies to further strengthen trust and compliance.

C

ClickEshop

clickeshop.sk

60

ClickEshop is a Slovak-based technology company specializing in providing a professional content management system for creating web pages and e-shops. Established in 2010, it serves a medium-sized market with over 10,000 projects completed, offering services including web hosting, email hosting, domain registration, and custom web design. The platform targets small to medium businesses and individuals seeking easy-to-use, customizable online presence solutions. The website is multilingual, supporting Slovak, English, German, and Czech languages, enhancing its regional reach. Technically, the website uses a proprietary CMS with modern web technologies such as jQuery, HTML5, and CSS3. It is hosted on a secure cloud infrastructure with HTTPS and DNSSEC enabled, ensuring a good security baseline. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. SEO practices are implemented, and Google Analytics is used for traffic analysis. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security policies, vulnerability disclosure, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration. Overall, ClickEshop presents a trustworthy and professional online presence with solid technical and business foundations. To enhance compliance and security posture, it should implement cookie consent, publish security policies, and consider formal vulnerability disclosure mechanisms.

C

ClickEshop

clickeshop.de

59

ClickEshop is a small technology company specializing in providing a proprietary platform for creating professional websites and webshops, including hosting, email, and domain services. With over 18 years of market presence and thousands of successful projects, it targets small to medium businesses and individuals seeking easy-to-use, customizable web solutions. The website is well-designed, mobile-optimized, and offers multilingual support, enhancing user experience and accessibility. Technically, the platform uses modern web standards such as HTML5, CSS3, and JavaScript with jQuery, and enforces HTTPS for secure communications. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. Contact information is clearly provided, including email, phone, and a contact form, supporting customer engagement. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices.

C

ClickEshop

clickeshop.cz

61

ClickEshop.cz is a Czech-based technology company specializing in providing professional web and e-shop creation services through a proprietary CMS platform. Established in 2010, the company has a strong market presence with over 10,000 projects completed and offers a comprehensive suite of services including web hosting, email hosting, customizable templates, and tailored web design solutions. The website is well-structured, targeting small to medium businesses and individuals seeking accessible and professional online presence solutions. Multi-language support through sister domains enhances its regional reach. Technically, the website employs modern web technologies such as jQuery and custom JavaScript, with a proprietary CMS platform. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Hosting is managed via their own nameservers, indicating control over infrastructure. However, some technical improvements are recommended, including the implementation of security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the security posture is adequate but could be improved to meet higher compliance standards. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing security headers. These improvements will strengthen trust, compliance, and security culture, supporting sustainable business growth.

S

Säästöpankki

saastopankki.fi

73

Säästöpankki is a Finnish savings bank offering retail banking and financial services to Finnish customers. The website presents a professional image with a clear focus on banking services, financial advice, and customer support. The site targets Finnish-speaking users primarily but offers alternate language versions. The business model centers on traditional banking with digital customer engagement. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is strong with HTTPS enforced and CSRF protections, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate online presence for a financial institution.

L

Lampa Studio d.o.o.

lampa.ba

61

Lampa Studio d.o.o. is a Bosnia and Herzegovina-based technology service provider specializing in web design, custom web development, eCommerce solutions, and mobile applications. Founded in 2011, the company targets businesses and organizations seeking modern, user-friendly digital solutions with a focus on usability and contemporary design. Their market position is supported by a strong portfolio of regional clients and active social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a credible business entity.

G

Gransy, s.r.o.

clickeshop.com

62

ClickEshop.com is a professional ecommerce and website building platform operated by Gransy, s.r.o., established in 2010. The company offers a comprehensive content management system with integrated web hosting, email services, and customizable graphic templates targeting small to medium businesses and individuals seeking easy-to-use webshop solutions. The platform boasts over 10,000 projects and more than a decade of experience, positioning itself as a reliable player in the ecommerce technology sector. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery, and features a proprietary CMS tailored for ecommerce. Mobile optimization and SEO practices are well implemented, though performance is moderate. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced protections such as DNSSEC and security headers. Privacy compliance is partial, with terms of service present but no explicit cookie or privacy policy pages. Contact information is clearly provided, including phone, email, and a contact form, enhancing business credibility. Overall, the site is accessible, professional, and safe for general audiences.

P

Pelcro

pelcro.com

68

Pelcro is a technology company offering an all-in-one subscription management platform tailored for businesses selling digital memberships, subscriptions, magazines, and newspapers. Positioned as a niche SaaS provider, Pelcro targets digital content businesses seeking streamlined subscription and membership management solutions. The website is professionally designed using the Wix platform, integrating marketing and analytics tools such as HubSpot and Google Analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security posture is solid with HTTPS enforcement, security headers, and secure cookie handling, although explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a trustworthy and professional presence with good privacy compliance and user experience, suitable for its business model and audience.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bawue-zu-tisch.de

62

The website 'Baden-Württemberg zu Tisch' is an official government platform managed by the Ministry of Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg. It promotes regional food products, sustainable nutrition, and community engagement aligned with the state's nutrition strategy. The site targets residents of Baden-Württemberg across all age groups and provides information on projects, offers, news, and downloadable resources related to nutrition and sustainability. The platform is well-branded, consistent, and trustworthy, featuring endorsements from government officials and accessibility options such as easy language and sign language.

C

Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart

cvuas.de

61

The website www.cvuas.de serves as an official information portal for the Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart and associated government veterinary and chemical testing authorities in Baden-Württemberg, Germany. It provides comprehensive information on food safety, veterinary diagnostics, pesticide monitoring, and related public health services. The site targets a broad audience including consumers, professionals, and government stakeholders, positioning itself as a trusted regional government entity with a strong focus on consumer protection and animal health. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. It uses HTTPS with a basic Content Security Policy to secure form actions. The site shows moderate performance and basic mobile optimization, with clear navigation and good content relevance. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but could improve by implementing additional security headers and publishing incident response and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance its security posture and user trust.

U

Untersuchungsämter-BW

ua-bw.de

62

The website www.ua-bw.de serves as the official information portal for the Untersuchungsämter-BW, a consortium of chemical and veterinary investigation offices in Baden-Württemberg, Germany. It provides authoritative information on food safety, animal health, and related regulatory activities, targeting both the general public and professionals. The portal features news updates, reports, job postings, and educational resources, positioning itself as a trusted government source in the region. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. The design is professional and consistent, with clear navigation and categorized content. However, mobile optimization and accessibility are basic, and no modern CMS or advanced frameworks are detected. Performance is moderate, with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site uses a Content-Security-Policy header restricting form actions to the same origin, which is a positive measure. However, other common security headers are missing, and HTTPS enforcement status is unclear from the data. There is no visible cookie consent mechanism or detailed privacy policy on the main page, which may present compliance risks under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and authoritative government portal with good content quality and business credibility. Security and privacy compliance could be improved by implementing comprehensive security headers, HTTPS enforcement, cookie consent, and explicit privacy documentation. These enhancements would strengthen trust and regulatory adherence.

W

weber.digital GmbH

weber.digital

55

weber.digital GmbH is a German-based digital agency specializing in digital transformation, product development, and digital marketing services. Established in 2015, the company targets businesses seeking to modernize and innovate their digital presence. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating GDPR compliance. Technically, the site uses modern web technologies including custom fonts and JavaScript libraries like Swiper.js, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and domain lock statuses, though additional HTTP security headers and a published security policy would enhance trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

LERROS

lerros.com

71

LERROS operates a professional e-commerce platform specializing in men's fashion apparel primarily targeting the German market. The website offers a broad range of products including plus sizes and accessories, supported by fast delivery and easy returns. The company maintains a consistent brand presence with active social media channels and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the site is built on Shopify using a modern theme and integrates multiple marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring robust marketing and customer engagement capabilities. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration transparency, but the operational website and professional presentation mitigate major concerns. Overall, LERROS presents as a credible mid-sized retail business with a solid technical foundation and good compliance practices.

The website www.dielne.sk serves as a specialized platform focused on protected workshops and social enterprises in Slovakia, facilitating companies to fulfill their legal employment obligations under Slovak law. It offers a searchable directory of 380 registered organizations, registration for new entities, and informational resources including a substitute fulfillment calculator. The platform is operated by Profesia, spol. s r.o., a member of the Alma Media group, indicating a credible backing and niche market positioning within the non-profit sector. Technically, the site employs a traditional web stack with Bootstrap 2.x, jQuery 1.8.0, and Select2 for UI components, alongside Cookiebot for cookie consent management and Google Tag Manager for analytics. While the site is functional and moderately optimized for mobile, it uses somewhat outdated libraries and lacks visible modern security headers, suggesting room for technical modernization and security hardening. From a security perspective, the site enforces cookie consent and uses HTTPS (assumed but not confirmed in data), but lacks explicit privacy policies, terms of service, and security incident response information. No critical vulnerabilities or WAF blocking were detected, but the absence of security headers and outdated libraries represent moderate risks. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional resource for its target audience but would benefit from enhanced privacy compliance, updated technical stack, and improved security practices to strengthen its posture and user trust.

K

Kynutá buchta

kynutabuchtabistro.cz

55

Kynutá buchta is a small hospitality business operating a bistro, café, and pastry shop in the Czech Republic. The website presents a traditional and family-inspired brand focused on quality baked goods and local coffee offerings. The business targets local customers and visitors seeking authentic Czech culinary experiences. The site is built on the Webnode platform and uses AWS Cloudfront CDN for hosting, with Google Tag Manager implemented for analytics. The website is mobile-optimized and provides a user-friendly experience with clear navigation and appealing visuals. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. No direct contact emails or phone numbers are provided on the site, but social media links to Facebook and Instagram are present.

Penzion a Bistro U Kapra is a small hospitality business based in Třeboň, Czech Republic, offering accommodation and a bistro specializing in fish and local cuisine. The website presents a clear business focus with detailed descriptions of rooms, bistro offerings, and contact information, targeting tourists and local visitors. The domain is well-established since 2005, supporting business credibility. Technically, the website uses modern web technologies including HTTPS, Google reCAPTCHA, and Google Maps integration, hosted on WEDOS infrastructure. However, it lacks explicit privacy and cookie policies, and security headers are not evident, indicating areas for compliance and security improvement. Overall, the site is functional, safe, and professionally presented but could enhance trust and compliance by adding missing policies and security best practices.

H

Hudy.cz

hudy.cz

63

Hudy.cz is a well-established e-commerce retailer specializing in outdoor clothing, footwear, backpacks, and camping equipment. The website targets outdoor enthusiasts including hikers, campers, and climbers, offering a broad range of products segmented by gender and age groups. The business operates primarily in the Czech Republic and maintains a professional online presence with detailed product categories and promotional campaigns. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and analytics tools such as Exponea and Smartsupp chat, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and a consistent branding approach. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technical setup suggest legitimacy. Overall, the site scores well in content quality and technical implementation but should enhance privacy compliance and business credibility by publishing clear contact and policy information.

H

hanibal.cz

hanibal.cz

77

Hanibal.cz is a Czech Republic-based e-commerce retailer specializing in outdoor clothing and equipment for activities such as hiking, climbing, and camping. The website targets a broad audience including men, women, and children interested in outdoor sports and adventures. It offers a comprehensive product catalog with expert advice and multiple physical store locations, positioning itself as a trusted specialist in the outdoor retail market. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and advertising services, and uses HTTPS with error monitoring via Sentry, indicating a mature digital infrastructure. Security posture is solid with encrypted connections and cookie consent mechanisms, though explicit security headers and detailed privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the professional presentation and operational contact details support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with basic privacy standards, making it a reliable platform for outdoor gear shopping.

S

SERDA d.o.o. Sarajevo

serda.ba

47

SERDA d.o.o. Sarajevo operates as a regional development agency focused on supporting regional growth, EU project management, and business environment improvements in Bosnia and Herzegovina. The website reflects a professional presence with clear information about ongoing projects, events, and contact details, targeting regional governments, businesses, and EU stakeholders. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

G

Geoportal Baden-Württemberg

geoportal-bw.de

57

Geoportal Baden-Württemberg operates a regional government geospatial data portal providing access to geospatial data, thematic maps, and metadata services primarily for politics, administration, economy, science, and the public in Baden-Württemberg, Germany. The portal is well-positioned as a trusted regional government platform supporting the national GDI-DE and INSPIRE initiatives. Technically, the website is built on a modern Angular framework with Material Design components and uses OpenLayers for map rendering, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

M

Mittwald CM Service GmbH & Co. KG

mittwald-status.de

62

Mittwald CM Service GmbH & Co. KG operates a professional status page providing real-time system status and incident history for its hosting and cloud services. The company is positioned as a medium-sized technology provider in Germany, offering key services such as mail systems, hosting platforms, cloud systems, and a customer center. The website is well-structured and designed to communicate service availability clearly to its customers. Technically, the status page leverages modern web technologies including HTML5, CSS3, JavaScript, and is hosted on a platform provided by Statuspal with DNS managed via Cloudflare. The site demonstrates good performance and mobile optimization, though accessibility and SEO features are basic. No CMS or complex frameworks are detected, indicating a focused and lightweight implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Overall, the website is trustworthy and professional, with minor improvements recommended in privacy compliance (cookie consent) and security best practices. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) rather than an externally hosted website. This page serves as a placeholder or offline error page within the Chrome browser environment and includes embedded scripts for the Chrome offline dinosaur game. There is no business-related content, contact information, or policies present. The page is minimal and does not represent a commercial or organizational website. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering, with no external dependencies or analytics. Security posture is minimal due to the nature of the page being an internal error display with no external exposure. Privacy compliance and business credibility cannot be assessed as no relevant data or policies exist.

P

phoenix

phoenix.de

59

phoenix.de is the official website of the German public television channel 'phoenix', operated under the umbrella of ZDF, a major public broadcaster in Germany. The site offers a rich array of political and historical documentaries, talk shows, and live streaming services targeting a general audience interested in current affairs and history. The website demonstrates a professional and consistent brand presence with high-quality content and clear navigation. Technically, the site employs AngularJS and SixCMS for content management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and formal privacy and cookie policies. Analytics are implemented via piano-analytics, indicating moderate user tracking. WHOIS data confirms domain legitimacy and alignment with the parent organization ZDF. Overall, the site is trustworthy and well-positioned in the German public media landscape.

M

MACH AG

mach.de

68

MACH AG is a specialized software provider focused on digital transformation solutions for public administration and municipalities in Germany. Their offerings include ERP systems, financial management software, online services, and process management platforms tailored to the needs of government entities. The company positions itself as a trusted partner for digitalization in the public sector, serving both larger and smaller institutions. The website is professionally designed, well-structured, and provides comprehensive information about their products, services, and events such as training and webinars. Technically, the site uses modern web technologies including JavaScript, SVG graphics, lazy loading, and integrates Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, MACH AG demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

N

NOLIS GmbH

nolis.de

60

NOLIS GmbH is a well-established German company specializing in digital transformation solutions for municipalities and public sector organizations. With over 25 years of experience and more than 400 municipal clients, NOLIS offers a comprehensive suite of services including a proprietary content management system (NOLIS | CMS), an E-Government software suite, digital citizen services, recruiting solutions, and GIS-based cartography. Their business model focuses on B2B SaaS and consulting, targeting public administrations to streamline and modernize their digital presence and processes. Technically, the website demonstrates a modern and professional infrastructure utilizing HTML5, CSS3, JavaScript, and various libraries such as Swiper.js for UI components and CookieDough for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The proprietary CMS and integration of multiple digital services indicate a robust technical ecosystem tailored for government clients. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. The software suite supports advanced security features like single sign-on and two-factor authentication. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or security issues were detected in the analyzed content. Overall, NOLIS GmbH presents a trustworthy, professional, and technically sound digital presence consistent with its business claims. The domain registration data aligns with the company branding and history, supporting legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response to further strengthen trust and compliance.

The Kreisvolkshochschule Freudenstadt operates as a regional adult education provider in Germany, offering a wide range of courses including languages, health, career development, and cultural programs. The website reflects a well-structured and community-oriented institution with a clear focus on accessibility and user engagement. The technical infrastructure is based on a custom CMS platform with modern web technologies, providing good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and secure form handling, though there is room for improvement in security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its educational mission effectively.

A

Abfallwirtschaftsbetrieb des Landkreises Rastatt

awb-landkreis-rastatt.de

52

The Abfallwirtschaftsbetrieb des Landkreises Rastatt is a regional government entity responsible for waste management services in the Landkreis Rastatt area of Germany. The organization focuses on progressive waste policies, fair waste fees, and high recycling rates, serving local residents and businesses. Their website provides comprehensive information on services such as waste container registration, collection schedules, and recycling education, supported by a mobile app and digital tools. The site is well-branded and consistent with government standards, targeting the local population effectively. Technically, the website is built on the cEasy CMS platform, utilizing modern JavaScript libraries like Swiper.js for interactive elements and FontAwesome for icons. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be German-based, aligning with the organization's regional focus. Privacy and cookie compliance are well implemented, including a consent mechanism and detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's regional government identity, showing no suspicious patterns. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious content or compliance issues. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance further.

L

Landkreis Rottweil

seniorenarbeit-kreis-rottweil.de

52

The website www.seniorenarbeit-kreis-rottweil.de serves as an official government portal for senior citizen services and care in Landkreis Rottweil, Germany. It provides comprehensive information on care support, elderly assistance, and related community services, targeting senior citizens and their families within the region. The site is well-structured, accessible, and offers clear navigation to various service areas such as care counseling, housing options for seniors, and community support programs. Technically, the website is built on the cEasy CMS platform, utilizing modern web technologies including JavaScript and CSS. It demonstrates good mobile optimization and accessibility features, with a moderate performance profile. The presence of a cookie consent mechanism and privacy policy indicates attention to privacy compliance, although no explicit terms of service or security policies are published. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks visible security headers and published incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the website's government nature, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, the website presents a trustworthy and professional government service portal with good content quality and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and adding terms of service to strengthen user trust and compliance posture.

K

Kreissparkasse Böblingen

kskbb.de

70

Kreissparkasse Böblingen is a regional German savings bank offering a broad range of financial services including online banking, loans, insurance, investments, and real estate services targeting both private and business customers. The website reflects a professional and consistent brand presence aligned with the Sparkasse group, providing clear navigation and comprehensive service information. Technically, the site uses modern web technologies including React components and is built on Adobe Experience Manager CMS, delivering a mobile-optimized and accessible user experience. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure information are not publicly available. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its market segment.

The website www.dein-toelzer-land.de serves as a regional tourism and nature conservation platform for the Tölzer Land area in Germany. It promotes environmental awareness, sustainable tourism, and provides information on natural landscapes, nature experiences, and local regulations. The site targets nature enthusiasts and tourists interested in responsible travel. Technically, the website employs modern web technologies including JavaScript frameworks, Cookiebot for cookie consent, and Google Analytics with privacy features enabled. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is managed properly, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. However, explicit privacy policy and terms of service pages were not found in the provided content, which could be enhanced for better compliance. Overall, the website is professional, trustworthy, and well-positioned in its niche.

T

Tölzer Land Tourismus

toelzer-land.de

54

The website www.toelzer-land.de serves as the official tourism portal for the Tölzer Land region in Bavaria, Germany. It provides comprehensive information on outdoor activities such as cycling, hiking, and herbal tours, targeting families and wellness tourists. The site offers accommodation booking and event information, positioning itself as a regional destination marketing organization. The content is professionally presented in German, with clear navigation and a consistent brand identity. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as Cookiebot for cookie consent management and Google Analytics for visitor tracking with IP anonymization. The site is mobile-optimized and performs moderately well, though no common CMS or hosting provider is explicitly identified. Security headers are minimal, but HTTPS is enforced, and privacy compliance is supported through detailed cookie disclosures. From a security perspective, the site demonstrates good practices such as encrypted connections and consent management but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected. The WHOIS data is consistent with the website's regional focus and shows no privacy protection, enhancing trustworthiness. Overall, the website is a credible, well-maintained regional tourism platform with good privacy and security hygiene. Strategic improvements could include enhancing security headers, publishing explicit security and incident response policies, and providing direct contact information for better user trust and compliance.

W

Walhalla u. Praetoria Verlag GmbH & Co. KG

annual-multimedia.de

44

The Annual Multimedia Award website is operated by Walhalla u. Praetoria Verlag GmbH & Co. KG, a small media company based in Germany. The site serves as a platform for the Annual Multimedia Award, a digital award recognizing excellence in multimedia projects. It offers information about the competition, jury, Hall of Fame, and related publications, targeting digital media professionals and participants. The business model revolves around award management, event promotion, and publication sales, positioning itself as an established player in the multimedia awards sector with a history spanning over 25 years. Technically, the website is built using Craft CMS and employs modern web technologies such as HTML5, CSS, JavaScript, and the Canvas API. It is mobile-optimized with good SEO practices and moderate performance. Security is enforced via HTTPS with CSRF tokens implemented, but lacks some security headers and explicit cookie consent mechanisms, which are recommended for GDPR compliance. The WHOIS data is minimal, limiting full domain trust verification, but no suspicious patterns were detected. The security posture is moderate with good SSL configuration but could be improved by adding security headers and publishing a security policy. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and improving WHOIS transparency to boost trust and compliance.

U

University of South Carolina

sc.edu

59

The University of South Carolina website serves as the official digital presence of a large, established public research university in the United States. It offers comprehensive information about academic programs, research opportunities, student life, admissions, and community engagement. The site targets prospective and current students, faculty, staff, alumni, and families, providing a broad range of services and resources. The business model is centered on education and research, positioning the university as a leading institution in higher education. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript, and the Foundation CSS framework. It integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and SiteImprove Analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The CMS appears to be OmniUpdate, a platform commonly used by educational institutions. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a comprehensive privacy policy available but lacking a clear cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, with a high level of business credibility. The main areas for improvement include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to strengthen the security posture.

The website at app.hailstate.com/StateExcellencePage serves as a marketing landing page for the State Excellence Fund, likely affiliated with Mississippi State University or a related entity. It provides informational content primarily through images and offers a contact form for users to submit inquiries or membership information. The target audience appears to be current and prospective members interested in the fund. The business model focuses on information dissemination and member engagement rather than direct e-commerce or transactional services. Technically, the site is built using standard HTML5, CSS3, and JavaScript, with client-side form validation implemented via LiveValidation.js. The platform leverages Oracle Eloqua for marketing automation and tracking, as evidenced by tracking pixels and form submission endpoints. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and consistent branding. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses form validation to reduce input errors but lacks visible security headers and explicit HTTPS verification in the provided data. No privacy or cookie policies are present, which impacts compliance posture. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but this limits domain registration trust analysis. Overall, the security posture is average with room for improvement in compliance and technical security best practices. The overall risk assessment is moderate. The site is functional and professional but would benefit from enhanced privacy disclosures, security headers, and explicit contact information to improve trust and compliance. Strategic recommendations include implementing HTTPS verification, adding privacy and cookie policies, enhancing security headers, and providing clear contact details to strengthen business credibility and user trust.

G

Gator Boosters, Inc.

gatorboosters.org

53

Gator Boosters, Inc. is a well-established non-profit organization supporting University of Florida athletics through membership programs, donor engagement, and ticketing services. The website serves primarily alumni, fans, and donors interested in supporting Florida Gators sports. The organization operates under the University Athletic Association umbrella and has a clear focus on enhancing the student-athlete experience through fundraising and community involvement. Technically, the website uses modern web technologies including Google Analytics and Amazon Cloudfront CDN, with a responsive design suitable for desktop and mobile users. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The domain is long-standing and legitimate, though WHOIS privacy protection is used, which is common but reduces transparency. Overall, the site is professional and trustworthy but could improve in compliance and security posture.

F

FanMaker

fanmaker.com

65

FanMaker is a technology company specializing in sports loyalty programs and fan engagement solutions. Their offerings include loyalty programs, mobile wallet and gift card solutions, benefit and discount programs, loaded ticket integrations, kids clubs management, fan photo engagement, and custom kiosks. The company targets sports teams and organizations across major leagues such as NFL, NHL, NBA, NCAA, and professional sports networks. The website reflects a mature business with over a decade of market presence and a strong portfolio of partner teams. Technically, the website uses modern web technologies, including JavaScript frameworks and analytics tools like Google Analytics and Facebook Pixel, hosted and registered via Cloudflare. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security best practices like vulnerability disclosure and incident response contacts are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

C

cron IT GmbH

cron.eu

58

cron IT GmbH is a small German technology company specializing in TYPO3 CMS web agency services, including web project development, hosting, and support. The company operates primarily in Stuttgart and Schwäbisch Hall, offering end-to-end web solutions with a focus on TYPO3 CMS and managed hosting services. Their market position is that of an established regional agency with a professional online presence and client references. Technically, the website is built with modern web standards including HTML5, CSS3, JavaScript, and PHP, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but could enhance compliance and security transparency.

M

Mgr. Jan Svoboda, soudní exekutor

exekutor-svoboda.cz

42

Mgr. Jan Svoboda operates a judicial enforcement office in Olomouc, Czech Republic, providing services such as debt collection, property auctions, and payment plan arrangements. The website serves as an official portal for clients and the public, offering contact details, office hours, and legal information. The business is well-established since 2010 and holds official registration with the Czech Exekutorská komora. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript with jQuery and Shadowbox for UI elements, and a cookie consent mechanism compliant with GDPR. While the site is functional and mobile-optimized, some technologies like jQuery 1.5 are outdated, and security headers are not explicitly present in the HTML content. Security posture is moderate with HTTPS implied but could be improved by adding security headers and updating libraries. Privacy compliance is strong with clear cookie consent and a GDPR data processing document. Overall, the website is trustworthy and professional, with no signs of malicious content or blocking mechanisms.

The website represents a small Czech law office, Advokátní kancelář Mgr. Matouše Hrabala, providing legal consultancy and advocacy services. The domain is consistent with the business age and location, registered since 2013. The site content is minimal, primarily showcasing the law office name and logo, with no detailed business descriptions or contact information. The target audience is clients seeking legal services in the Czech Republic. Technically, the website runs on WordPress with Bootstrap and jQuery, but uses outdated versions which pose security risks. The site is accessible without any WAF or blocking mechanisms and does not contain any adult or questionable content.

K

Kliniken des Landkreises Lörrach GmbH

klinloe.de

46

Kliniken des Landkreises Lörrach GmbH operates as a regional healthcare provider in Germany, offering a wide range of medical services across multiple hospital locations including Lörrach and Schopfheim. The website presents comprehensive information about their 24 specialized medical departments and ambulatory care services, targeting patients, visitors, and healthcare professionals. The organization holds membership in the CLINOTEL hospital network and partners with regional health initiatives, reinforcing its credibility and integration in the healthcare sector. Technically, the website is built on the Contao CMS platform, hosted by hosting.de, and demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are not evident. Privacy compliance is strong with a detailed privacy policy and GDPR-aligned cookie management. Overall, the site is professional, trustworthy, and well-suited for its audience.

L

Landratsamt Sigmaringen

landkreis-sigmaringen.de

50

Landkreis Sigmaringen operates an official government website providing comprehensive information and services to residents and stakeholders within the region. The site offers detailed navigation covering citizen services, administration, cultural events, and economic development. The business model is focused on public service delivery as a regional government authority in Germany. Technically, the website is built on the cEasy CMS platform, employs modern web standards, and integrates privacy-conscious analytics (Matomo) with cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a government entity.

L

Landkreis Rottweil

landkreis-rottweil.de

49

Landkreis Rottweil operates as a regional government authority in Germany, providing a broad range of public services including waste management, vehicle registration, social services, and citizen support through an online portal. The website is well-structured, targeting residents and stakeholders within the district, offering clear navigation and relevant content. The business model focuses on public administration and service delivery, positioning itself as a trusted regional authority. Technically, the site uses the cEasy CMS platform with modern JavaScript libraries and integrates Matomo analytics for privacy-conscious visitor tracking. The site is mobile optimized and accessible, with a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and serves its public sector role effectively.

R

Rems Murr Kreis

rems-murr-kreis.de

65

The Rems-Murr-Kreis website serves as the official digital presence of the Rems-Murr district government in Germany, providing comprehensive information and services to residents, businesses, and visitors. The site covers a broad range of public services including administration, social welfare, environment, transport, education, and public safety. It is positioned as a regional government authority portal with a medium organizational size and a clear focus on public service delivery. The website is built on the TYPO3 CMS platform, leveraging Matomo analytics for privacy-conscious user tracking. The technical infrastructure is modern and well-optimized for mobile and accessibility standards, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is robust, with detailed policies and a visible data protection officer contact. Overall, the site demonstrates high trustworthiness and professionalism, suitable for its government function.

L

Landratsamt Bodenseekreis

bodenseekreis.de

47

The website www.bodenseekreis.de is the official online presence of the Bodenseekreis district administration in Germany. It serves as a comprehensive information portal for residents and businesses, covering a wide range of public services including social welfare, health, transport, environment, public safety, tourism, education, culture, and local government administration. The site is built on the TYPO3 CMS platform, indicating a mature and stable technical infrastructure suitable for government use. Accessibility features such as sign language and easy language options enhance inclusivity. The presence of a chatbot named LARA further improves user engagement and service delivery. From a security perspective, the website employs HTTPS and basic security headers but lacks advanced security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are present and appear to comply with GDPR requirements, reflecting a responsible approach to user data protection. The site does not employ advertising or tracking technologies, minimizing privacy risks. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, positioning it as a trustworthy and professional government resource. Recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve transparency and security posture.