Security Directory

Y

Young Men Initiative

youngmeninitiative.net

58

Young Men Initiative (YMI) is a well-established non-profit organization operating since 2011, focused on empowering youth in the Balkans region by addressing gender inequalities and promoting healthy lifestyles. The organization offers educational programs, youth leadership camps, and community clubs, supported by a network of regional partners and international donors. Their digital presence is built on a WordPress platform with modern styling using Tailwind CSS, providing a professional and accessible user experience. While the website is well-structured and content-rich, it lacks explicit privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Analytics usage is moderate, leveraging Google Analytics and Jetpack, but privacy compliance is limited due to missing consent mechanisms. Overall, YMI presents a credible and trustworthy online presence aligned with its mission, though enhancements in privacy and security policies would strengthen its compliance and user confidence.

F

Forum za odgovorno poslovanje

odgovornoposlovanje.rs

45

Forum za odgovorno poslovanje is a Serbian non-profit organization that brings together leading companies committed to responsible business practices and sustainable development. Established in 2014, it serves as a platform to promote corporate social responsibility (CSR) principles and encourage active business sector participation in societal development. The website provides news, reports, and event information relevant to CSR and sustainability topics, targeting businesses and stakeholders interested in these areas. The forum maintains an active presence on major social media platforms and offers newsletter subscriptions to engage its audience.

D

DBU Digital Business University of Applied Sciences GmbH

dbuas.de

51

DBU Digital Business University of Applied Sciences GmbH is a specialized private educational institution in Germany focusing on digital business and applied sciences. The website presents a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and consent management tools. The institution targets students and professionals seeking education in the digital economy, positioning itself as a niche provider with a clear focus on future competencies. Technically, the site uses a robust stack including Google Tag Manager, Google Analytics, Meta Pixel, and Microsoft Advertising, all integrated with a comprehensive cookie consent mechanism to ensure GDPR compliance. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting a positive user experience and business credibility.

S

softstack

softstack.io

69

softstack is a German-based company specializing in Web3 services including software development, cybersecurity, and consulting. Established in 2019, it positions itself as a trusted service partner for blockchain and decentralized application projects. The company emphasizes ethical business practices and close client collaboration to deliver tailored Web3 solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google analytics tools. Security posture is good with HTTPS and domain protections, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is strong with GDPR-aligned cookie and privacy policies. Overall, softstack demonstrates high business credibility and digital maturity.

B

Blockpit

blockpit.io

68

Blockpit is a specialized fintech company providing comprehensive crypto tax calculation, portfolio tracking, and tax optimization services. The platform supports a wide range of crypto assets, exchanges, and blockchain protocols, offering country-specific tax reports compliant with local regulations. Positioned as a leading solution in the crypto tax compliance space, Blockpit targets crypto investors, tax advisors, and governmental entities. The website demonstrates a mature digital presence with professional branding, extensive integrations, and strong trust signals including expert-audited reports and positive user testimonials. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Cookiebot for consent management, and multiple analytics and advertising pixels. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is evident through comprehensive policies and cookie consent mechanisms. Despite the lack of publicly available WHOIS data due to privacy protection, the overall legitimacy and trustworthiness of the domain and business are supported by consistent branding, partner relationships, and professional content. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Blockpit presents a robust, secure, and user-friendly platform with a clear focus on crypto tax compliance and portfolio management, well-positioned in its market niche.

R

Ros Group BV

sleap.io

69

Sleap.io is a Web3-enabled travel booking platform launched in 2023 by Ros Group BV, based in the Netherlands. It offers access to over 1 million hotels and thousands of flights worldwide, with a unique value proposition of accepting payments in over 300 cryptocurrencies and providing NFT-based travel rewards. The platform targets crypto-savvy travelers and Web3 enthusiasts, positioning itself as an innovative player in the hospitality industry by integrating blockchain technology and decentralized payment options. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and comprehensive content about its services and benefits. Technically, Sleap.io leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, Facebook Pixel, and Twitter Pixel. Security posture is strong with HTTPS enforced, domain transfer restrictions, and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates a mature digital presence suitable for its niche market, with good privacy compliance and trust indicators such as testimonials and partnerships. Recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security policies and incident response.

T

Tramino

tramino.net

57

Tramino is a specialized software development company founded in 2008 and based in Oberstdorf, Germany. It focuses on creating web-based software solutions primarily for the tourism sector, including content management systems, reservation and hotel management software, accreditation systems, and digital signage solutions. The company serves a niche market of tourism businesses, destinations, and event organizers, maintaining a strong regional presence with hundreds of customers. Their offerings include both standard and customized software products, supported by a professional website with clear product descriptions and contact options. Technically, the website employs a modern tech stack including jQuery, RequireJS, and Google Tag Manager, with assets hosted on Amazon S3. The site is mobile-optimized, accessible, and SEO-friendly, featuring a comprehensive cookie consent mechanism that complies with GDPR requirements. Performance is moderate with asynchronous script loading and lazy loading of images. From a security perspective, the site uses HTTPS and implements cookie consent controls effectively. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, indicating legitimacy. Overall, Tramino presents a professional, trustworthy online presence with strong business credibility and good privacy compliance. Strategic enhancements in security policies and headers could further strengthen their security posture and trustworthiness.

R

Rafinerija nafte Brod a.d.

rafinerija.com

57

Rafinerija nafte Brod a.d. is a well-established oil refinery company based in Bosnia and Herzegovina, founded in 1892. It operates as the only domestic company for crude oil processing and production of petroleum derivatives in the country, holding a leading market position. The company offers a range of services including refining, laboratory testing, natural gas trading, and environmental monitoring, supported by a corporate ethics code and safety hotline. The website reflects a professional corporate presence with consistent branding and relevant business content targeting general public and industry stakeholders. Technically, the website uses a legacy technology stack including jQuery 1.11.1 and Bootstrap, with integration of Google Analytics and Raygun for monitoring. The site is mobile optimized and provides a moderate performance experience. However, there is a lack of modern security headers and no visible privacy or cookie policies, indicating gaps in compliance and security best practices. Security posture is moderate with domain registration consistent and legitimate, but the absence of DNSSEC and security headers reduces the overall security score. No incident response or vulnerability disclosure information is provided. The website does not contain any adult or questionable content and is safe for general audiences. Overall, the site is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and modernization of technical components to strengthen its security and compliance posture.

R

Rafinerija ulja Modriča a.d.

modricaoil.com

56

Rafinerija ulja Modriča a.d. is a well-established company specializing in the production of hydrocracked base oils, lubricants, and functional fluids, serving primarily the Southeast European market. It holds a strong market position as the largest regional producer in its sector and operates under the parent company OPTIMA Grupa d.o.o. The website reflects a professional business with a clear focus on industrial clients and technical support services. Technically, the website uses a traditional tech stack including jQuery and Bootstrap, with integration of Google Analytics and Raygun for monitoring. Mobile optimization and navigation are well implemented, though some technical debt is noted with the use of an outdated jQuery version. Security posture is moderate with HTTPS usage and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in security and compliance areas.

O

OPTIMA Grupa d.o.o.

optimagrupa.net

56

OPTIMA Grupa d.o.o. is a leading integrated oil company in Bosnia and Herzegovina, operating since 2008. The company manages the entire value chain from crude oil procurement to refining, wholesale, distribution, and retail through its NESTRO gas station network. It holds a strong market position as the largest oil company in the country with subsidiaries including Rafinerija ulja Modriča, Rafinerija nafte Brod, and Nestro Petrol. The website reflects a professional corporate presence with good content quality and consistent branding, targeting both business clients and consumers in the energy sector. Technically, the website uses a custom CMS with Bootstrap, jQuery, and integrates modern analytics and error monitoring tools such as Google Analytics, Google Tag Manager, and Raygun. The site is mobile optimized and provides multilingual support. However, some technical improvements are recommended, including enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks visible privacy and cookie policies, which impacts GDPR compliance. No incident response or security contact information is provided, and no vulnerability disclosure or security certifications are evident. The use of tracking and advertising tools is moderate but lacks transparency and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response information to strengthen its security posture and regulatory adherence.

O

Okendo Pty Ltd

okendo.io

64

Okendo Pty Ltd operates a mature and professional SaaS customer marketing platform targeting e-commerce merchants, especially Shopify users. The platform offers a suite of services including reviews, quizzes, referrals, loyalty programs, and surveys to help brands build stronger customer relationships and drive growth. The website is well-designed, mobile-optimized, and SEO-friendly, leveraging WordPress with Yoast SEO and multiple integrations with major marketing and analytics platforms. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements like enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the website and domain registration data indicate a trustworthy and credible business with strong market positioning.

V

Visual Realm

thevisualrealm.com

66

Visual Realm is a Tampa-based digital marketing agency specializing in web design, SEO, PPC, Facebook marketing, graphic design, and logo design. The company positions itself as a trusted partner for businesses seeking to improve their online presence and generate measurable ROI. Their website demonstrates a professional and modern digital infrastructure built on WordPress with the Avada theme, integrating advanced marketing tools such as Google Analytics and LeadConnector chat widgets. The site is well-optimized for SEO and mobile devices, providing a good user experience with clear navigation and rich content including client testimonials and portfolios. Security posture is solid with HTTPS and basic security practices, though there is room for improvement in security headers and published policies. Privacy compliance is lacking, with no visible privacy or cookie policies, which poses a compliance risk. Overall, the business credibility is high, supported by clear contact information and trust signals. The domain uses privacy protection in WHOIS, which is typical for agencies and does not raise immediate concerns.

S

StepStone Group

stepstonegroup.com

73

StepStone Group is a global private markets investment advisory and asset management firm, positioning itself as a trusted partner for private wealth and institutional investors worldwide. The company emphasizes its extensive assets under management, global office presence, and comprehensive private markets solutions including advisory services, asset management, data analytics, and private wealth solutions. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern performance and SEO optimizations, including the use of Yoast SEO, Google Tag Manager, and New Relic monitoring. Accessibility features and cookie consent mechanisms are implemented, indicating a mature digital infrastructure. However, the absence of WHOIS data and explicit privacy and terms of service pages slightly detract from the overall digital maturity. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, but the lack of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The website uses multiple trusted external domains for fonts, analytics, and investor portals, supporting its operational ecosystem. Overall, the site is professional and trustworthy from a content and technical perspective, but the missing WHOIS transparency and incomplete privacy and security documentation present moderate risks. Strategic enhancements in these areas would strengthen trust and compliance.

D

Deutsche Finance Group

deutsche-finance-group.de

63

Deutsche Finance Group is an established international investment company specializing in institutional market access and exclusive investments in private equity real estate, infrastructure, and financial services. With over 20 years of experience, it offers institutional club deals and asset management services targeting institutional and private investors. The company maintains a strong market position supported by international awards and a professional digital presence. Technically, the website is built on WordPress with Elementor, incorporating modern SEO and analytics tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a mature and trustworthy business with clear contact information and compliance with GDPR.

H

Hamilton Lane

hamiltonlane.com

75

Hamilton Lane is a well-established global investment manager specializing in private markets solutions, serving institutional and private wealth clients. The company emphasizes a client-driven, results-oriented approach with over $958 billion in assets under management and supervision. Their services include asset management, customized solutions, technology-driven insights, private wealth strategies, and educational resources. The website reflects a mature, professional brand with consistent messaging and comprehensive content tailored to sophisticated investors. Technically, the website leverages modern analytics and tracking tools such as Google Analytics, Hotjar, LinkedIn Insight, and Google Tag Manager, integrated with a Kentico CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy compliance is robust, featuring cookie consent mechanisms and GDPR-aligned policies. From a security perspective, the site enforces HTTPS and employs standard best practices, though explicit security headers and incident response information are not prominently published. No vulnerabilities or suspicious content were detected. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and external trust signals. Overall, Hamilton Lane's website demonstrates a strong digital presence aligned with its market position, though improvements in security disclosures and WHOIS transparency could enhance trust further.

S

Smart kolektiv

smartkolektiv.org

45

Smart kolektiv is a well-established non-profit organization based in Serbia, focused on promoting corporate social responsibility (CSR), social innovation, and supporting civil society organizations and social entrepreneurs. Founded in 2003, it has built a strong market position as a pioneer in CSR development in Serbia, offering educational programs, consultancy, and networking services. The website reflects a professional and consistent brand image, with clear navigation and multilingual support. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and domain protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a clear privacy policy, but lacks a cookie consent mechanism and vulnerability disclosure. Overall, the website is trustworthy and serves its target audience effectively.

M

MicroMedia

micromedia.ba

46

MicroMedia is a small, professional full-service digital marketing and creative agency based in Bijeljina, Bosnia and Herzegovina. The company specializes in web design, graphic design, online marketing, and related creative services, targeting businesses seeking to enhance their digital presence. The website reflects a consistent brand image with a well-structured portfolio and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user experience, demonstrating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Open SDG is an open source platform developed and maintained by the Office for National Statistics in the UK, focused on managing and publishing data related to the UN Sustainable Development Goals. The platform targets governments, localities, and organizations involved in SDG data management, offering flexible, customizable tools and comprehensive documentation. The website is professionally designed using modern static site generation technology (Jekyll) and hosted on AWS infrastructure, ensuring good performance and mobile optimization. Analytics tools such as Google Analytics and Hotjar are used with cookie consent mechanisms in place, although privacy policy and terms of service pages are not present. Security posture is strong with HTTPS enforced and domain registration consistent with the official government entity, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy, professional, and serves a niche government/non-profit sector audience effectively.

T

TF Bank AB

tfbank.se

62

TF Bank AB is a Swedish financial institution established in 1987, offering retail banking services primarily focused on savings accounts with competitive interest rates and state deposit guarantees. The bank operates across multiple European countries and is publicly listed on Nasdaq Stockholm, indicating a stable market position and regulatory compliance. The website presents clear, professional content targeting Swedish customers interested in secure savings products. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager, Google Analytics, Cookiebot, and Microsoft Application Insights, hosted on a CMS likely Umbraco, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the site reflects a trustworthy and professional banking service with strong legitimacy indicators from WHOIS data and domain age.

S

Sloan Servicing

sloanservicing.com

65

Sloan Servicing is a newly established financial services company specializing in loan servicing solutions. The website is built using modern web technologies, primarily Angular 19, and integrates several marketing and analytics tools such as Pendo, Tealium, Hotjar, and Google Analytics. The technical infrastructure indicates a moderate level of digital maturity with room for improvement in performance and SEO optimization. Security measures include a Content Security Policy and various security headers; however, some misconfigurations such as the improper use of Strict-Transport-Security and lack of DNSSEC reduce the overall security posture. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no terms of service or incident response information is available. Overall, the website is functional but lacks comprehensive business and security transparency, which impacts trust and credibility.

A

Antena Radio

antena.ba

46

Antena Radio is a small media company operating an online radio streaming platform targeting general audiences interested in contemporary music. The website provides live streaming, social media integration, and mobile app distribution, positioning itself as a local/regional broadcaster in Bosnia and Herzegovina. The technical infrastructure uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates Google Analytics and Facebook SDK for tracking and social features. While the site is functional and well-branded, it uses an outdated jQuery version and loads some scripts over HTTP, which introduces security risks. The security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional but would benefit from security and privacy improvements.

Schweppes.com serves as a global brand portal for the Schweppes beverage company, providing regional navigation to localized websites primarily for North America and Europe. The site content is minimal and focused on brand presence rather than direct consumer engagement. Technically, the site uses legacy JavaScript libraries such as Prototype.js and modern tracking tools like Google Analytics and Google Tag Manager. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. The WHOIS data is notably missing or indicates the domain is unregistered, which is inconsistent with the brand's global presence and raises legitimacy concerns. Overall, the site is functional but basic, with significant gaps in compliance and security transparency.

E

EUROS Osiguranje

eurososiguranje.com

52

EUROS Osiguranje is a local insurance company operating in Bosnia and Herzegovina since 2016, offering a range of insurance products including property, auto, and health insurance. The website presents a professional and well-structured digital presence with clear service offerings targeted at residents and businesses within Bosnia and Herzegovina. The technical infrastructure includes modern web technologies such as Google Analytics and Swiper.js, hosted on DNS servers associated with crohost.net. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced compliance and security measures.

S

Satwork

satwork.net

57

Satwork is a well-established company founded in 2005 specializing in satellite vehicle tracking and fleet management services primarily in Bosnia and Herzegovina and the surrounding region. The company offers a comprehensive suite of GPS-based solutions including fuel consumption control, driver communication, route optimization, and digital tachograph data management. With subsidiaries in Serbia, Montenegro, and Austria, Satwork maintains a strong regional presence and is recognized as a market leader in its domain. The website reflects a professional and consistent brand image with detailed service descriptions and multiple contact points, supporting its credibility and customer engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. However, there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, Satwork demonstrates maturity by holding ISO 9001 and ISO/IEC 27001 certifications, indicating a commitment to quality management and information security. The website uses HTTPS for secure communications, especially on login forms, and implements user-friendly features like password visibility toggling. Nonetheless, the absence of explicit incident response contacts, vulnerability disclosure policies, and cookie consent mechanisms highlights areas for compliance enhancement. Overall, Satwork presents a trustworthy and professional online presence aligned with its business operations. The main risks relate to privacy compliance gaps and security header omissions, which should be addressed to strengthen user trust and regulatory adherence. Strategic improvements in these areas will enhance the company’s digital maturity and security posture, supporting sustained growth and customer confidence.

N

NESTRO PETROL a.d.

nestropetrol.com

56

NESTRO PETROL a.d. operates the largest network of petrol stations in Bosnia and Herzegovina, managing over 80 retail locations under the NESTRO brand. The company offers various loyalty card programs targeting both individual and corporate customers, enhancing customer retention and engagement. The website reflects a mature business with a clear market position supported by its parent company OPTIMA Grupa d.o.o. The digital presence includes interactive maps, promotions, and news updates, catering to a general audience primarily in the Serbian language with options for Russian and English. Technically, the website utilizes a traditional tech stack including jQuery 1.11.1, Bootstrap, and Google Analytics for tracking, alongside Raygun for error monitoring. While the site is mobile optimized and well-structured, some technical debt is evident due to the use of outdated libraries and lack of modern security headers. The absence of DNSSEC and security policies indicates room for improvement in security posture. Security-wise, the domain is well-established with a consistent WHOIS record and clientTransferProhibited status, indicating domain ownership protection. However, the lack of DNSSEC, security headers, and outdated JavaScript libraries present potential vulnerabilities. No explicit privacy or cookie policies were found, which may impact GDPR compliance. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in security headers, updated libraries, and explicit privacy documentation would enhance trust and compliance. The business is credible with a strong market presence but should address technical and compliance gaps to reduce risk and improve user trust.

S

Searchspring

searchspring.net

48

Searchspring is a well-established ecommerce technology company specializing in AI-driven search, merchandising, and personalization solutions. With a domain age of over 20 years and a parent company Athos Commerce, it holds a strong market position targeting ecommerce retailers seeking to improve product discovery and conversion rates. The website demonstrates a mature digital presence with modern technologies and integrations, including WordPress CMS, HubSpot marketing tools, and multiple analytics platforms. Security posture is good with HTTPS enforced and domain status protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is robust with clear cookie consent and GDPR-aligned policies. Overall, the site is professional, trustworthy, and technically sound, supporting its business credibility and market leadership.

R

RedIRIS

rediris.es

69

RedIRIS is a well-established Spanish academic and research network providing connectivity and advanced ICT services to the academic and scientific community since 1988. It operates under the auspices of Red.es, a Spanish public entity, and holds important certifications such as ISO 27001 and ENS, underscoring its commitment to security and quality. The website reflects a professional and consistent brand image targeting academic institutions and researchers in Spain. Technically, the site uses modern web technologies including jQuery, DataTables, and Google Analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and certifications, though explicit security headers and incident response policies are not publicly visible. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy, secure, and professionally maintained, serving a critical role in Spain's academic infrastructure.

I

Instituto Nacional de Ciberseguridad (INCIBE)

incibe.es

11

INCIBE (Instituto Nacional de Ciberseguridad) is the official Spanish national cybersecurity institute dedicated to providing cybersecurity assistance, awareness, and incident response services to citizens, businesses, and government entities. The website serves as a comprehensive portal offering educational resources, cybersecurity tools, incident reporting, and training programs. It holds a strong market position as a government entity focused on national cybersecurity initiatives. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Bootstrap for responsive design and various analytics tools such as Google Analytics and Siteimprove. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. Cookie consent mechanisms and privacy compliance are implemented effectively. From a security perspective, the site enforces HTTPS and employs best practices such as cookie consent and secure content delivery. However, explicit security headers are not evident in the provided data, and there is room for improvement by publishing security.txt files and enhancing incident response contact transparency. No vulnerabilities or suspicious content were detected. Overall, INCIBE's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The lack of WHOIS data is due to Red.es restrictions but does not detract from the site's legitimacy as a government cybersecurity resource. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact information for security incidents.

J

Jewelers Mutual Group

jewelersmutual.com

10

Jewelers Mutual Group is a specialized insurance provider focusing on personal jewelry and jewelry business insurance. With over 110 years of expertise and a strong market presence evidenced by more than 11,000 five-star reviews, the company targets jewelry owners and businesses seeking dedicated insurance solutions. The website reflects a mature digital presence built on Drupal 10, integrating advanced analytics and marketing tools such as Google Tag Manager, Mixpanel, and Visual Website Optimizer, alongside a robust consent management system via TrustArc. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a dedicated security policy or incident response information is noted. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. However, the lack of WHOIS data transparency slightly reduces domain trustworthiness. Overall, the website is professional, secure, and compliant, serving a large enterprise in the finance sector with a focus on jewelry insurance.

Neue Messe Fulda GmbH operates as a regional event organizer and exhibition host based in Fulda, Germany. The company specializes in organizing trade fairs, public exhibitions, conferences, and congresses, providing a platform for businesses and visitors to connect. Their website reflects a professional and consistent brand image, targeting event organizers, exhibitors, and attendees interested in specialized trade fairs and public events. The business model centers on event management and exhibition services, positioning Neue Messe Fulda as a key player in the regional events market. Technically, the website is built on the Odoo CMS platform, utilizing modern frontend technologies such as Bootstrap and jQuery, with integrations like LightGallery for media display and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS with a valid SSL configuration and a cookie consent mechanism, although some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a reasonable posture with encrypted communications and CSRF token usage. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-aligned cookie consent and a privacy policy page. Overall, the website is trustworthy, professionally maintained, and suitable for its business purpose. Strategic enhancements in security transparency and policy publication would further strengthen its compliance and trustworthiness.

А

Аутопутеви Републике Српске

autoputevirs.com

46

Аутопутеви Републике Српске is a public enterprise responsible for the construction, maintenance, and management of highways and major roads in Republika Srpska, Bosnia and Herzegovina. The website serves as an information portal for infrastructure projects, public procurement, and traffic updates, targeting citizens, drivers, and governmental stakeholders. The company holds a significant position as a key state entity in transportation infrastructure within the region. Technically, the website is built on WordPress, utilizing common plugins such as RevSlider and Contact Form 7, with Google Analytics for traffic monitoring. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some modern security headers and privacy compliance mechanisms are missing, indicating room for improvement in security and GDPR adherence. Security posture is moderate, with HTTPS enforced and domain transfer protection enabled, but lacking DNSSEC and advanced security headers. No vulnerability disclosure or incident response information is publicly available. Overall, the site is trustworthy and professionally maintained but could enhance its security and privacy compliance. The overall risk is low, but strategic improvements in security headers, cookie consent, and transparency policies are recommended to strengthen compliance and user trust.

The website represents the Savez opština i gradova Republike Srpske, a governmental and non-profit organization supporting municipalities and cities in Republika Srpska, Bosnia and Herzegovina. It provides information on organizational structure, program areas, projects, news, and events, targeting local governments and citizens. The site demonstrates a stable market position as a local government representative with strong international partnerships. Technically, the website uses a modern frontend stack including Bootstrap 4, jQuery, Owl Carousel, and integrates third-party services such as Google Analytics and Mailchimp. It enforces HTTPS and uses client-side redirection to ensure secure connections. However, no CMS or hosting provider is explicitly identified, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a moderate posture with HTTPS enforced and domain transfer protection enabled. However, it lacks DNSSEC, explicit security headers, privacy and cookie policies, and incident response contacts. No vulnerabilities or malware indicators were found in the content. The site is safe for general audiences with no adult or questionable content. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen trust and regulatory adherence.

N

Netzwerk für berufliche Fortbildung Calw

netzwerk-cw.de

47

Netzwerk für berufliche Fortbildung Calw is a regional network of over 20 educational institutions in the Calw area of Germany, offering tailored vocational training and continuing education programs. Supported by the Baden-Württemberg Ministry of Economy, Labor and Tourism, it aims to facilitate career advancement, re-entry, and reorientation for professionals and job seekers. The website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for cookie consent and Google Analytics with privacy features enabled. The site demonstrates good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and privacy compliance, though some security headers and explicit policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, with no signs of blocking or malicious activity.

P

Promotim d.o.o.

kupipoklon.ba

57

KupiPoklon.ba is an established e-commerce platform based in Bosnia and Herzegovina, specializing in the sale of gift vouchers redeemable at a network of retail partners. The business targets general consumers and corporate clients seeking convenient gifting solutions. The website presents a professional design with clear navigation and relevant content in Croatian, supporting multiple brands and services. Technically, the site uses legacy JavaScript libraries such as jQuery 1.3.2 and plugins like Fancybox and Cycle, indicating some technical debt and potential security risks. The platform integrates payment processing partners including Monri, Mastercard, and Visa, reflecting a mature payment infrastructure. Security posture is moderate with HTTPS enforced but lacks modern security headers and uses outdated libraries. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the site is functional and credible but would benefit from modernization and enhanced security and privacy practices.

P

Promotim d.o.o.

promotim.ba

44

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

S

Staples

staples.com

73

Staples is a leading enterprise retail and e-commerce company specializing in office supplies, furniture, printing services, and technology products. The website serves a broad audience including businesses and individual consumers, offering a comprehensive range of products and services with a strong emphasis on convenience such as free next-day delivery and loyalty rewards. The site demonstrates a mature digital infrastructure leveraging modern frameworks like React and Next.js, supported by robust analytics and marketing tools including Adobe DTM, New Relic, and Google Analytics. Security posture is strong with HTTPS enforcement, Content Security Policy, and multiple monitoring tools, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data slightly impacts trust but is likely due to privacy protection. Overall, the site is professional, secure, and trustworthy, serving as a critical channel for Staples' business operations.

S

Samsonite

samsonite.fi

67

Samsonite.fi is the official Finnish e-commerce website for Samsonite luggage and travel accessories, operated by Aboutbags NV based in Belgium. The site offers a comprehensive product catalog including luggage, backpacks, bags, kids' luggage, and personalisation services. It targets Finnish consumers seeking premium travel products and provides localized content and customer support. Technically, the site is built on Salesforce Commerce Cloud with modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and WonderPush. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, although explicit security policies and incident response contacts are not found. WHOIS data aligns well with the business claims, indicating high legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy posture.

HugeDomains operates as a reputable domain marketplace specializing in the sale of premium domain names, offering customers options to purchase domains outright or through payment plans. The company has been in business since 2005 and serves a broad audience of businesses and individuals seeking memorable and SEO-friendly domain names. The website is professionally designed with clear navigation, customer testimonials, and trust signals such as a 30-day money back guarantee and secure payment options including PayPal and Escrow.com. Technically, the site employs modern JavaScript libraries, Google Analytics for tracking, and Google reCAPTCHA for bot protection, ensuring a secure and user-friendly experience. However, explicit security policies and incident response information are not publicly available, and WHOIS data for the domain is missing or inaccessible, which slightly impacts trust assessments. Overall, the site demonstrates a strong security posture with HTTPS and SSL encryption, complemented by cookie consent mechanisms and privacy policies that indicate GDPR compliance. The business model is clear and well-positioned in the e-commerce domain sales sector, with a medium-sized operational scale and consistent branding.

R

Republički centar za istraživanje rata, ratnih zločina i traženje nestalih lica

rcirz.org

44

The Republika Srpska Center for Research of War, War Crimes, and Searching for Missing Persons is a government institution dedicated to the investigation, documentation, and analysis of war crimes and missing persons related to conflicts in Bosnia and Herzegovina and the former Yugoslavia. The organization provides expert services including data archiving, forensic support, and cooperation with judicial and international bodies. The website serves as an informational and research platform primarily targeting government entities, researchers, and families of missing persons. Technically, the website is built on WordPress using the Divi theme, incorporating standard SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and comprehensive privacy compliance features. The absence of visible contact information and policy documents limits user trust and regulatory adherence. From a security perspective, the site uses HTTPS but does not implement key security headers, and the WHOIS data is incomplete, which raises concerns about domain transparency. No forms or sensitive data collection mechanisms were detected, reducing immediate risk exposure. However, the lack of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Overall, the website reflects a legitimate government entity with a focused mission but requires improvements in transparency, security best practices, and privacy compliance to enhance trustworthiness and regulatory alignment.

П

Пореска Управа РС

poreskaupravars.org

48

The Poreska Uprava Republike Srpske (Tax Administration of Republika Srpska) is a government entity responsible for the impartial and efficient collection and control of public revenues in Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing information, e-services, and updates to taxpayers including individuals, legal entities, and entrepreneurs. It maintains a strong market position as the authoritative tax administration body in the region, offering key services such as e-fiscalization and electronic services to facilitate tax compliance. The site is multilingual, primarily in Serbian Cyrillic and Latin scripts, with an English version available, targeting local citizens and businesses.

I

Izrada web stranica

izradawebstranica.ba

47

Izrada web stranica is a small digital agency based in Bosnia and Herzegovina specializing in the creation of unique websites and e-commerce shops. The company positions itself as a full-service digital agency focused on brand growth and web development services. The website is built on WordPress using Elementor, enhanced with SEO tools like Rank Math, and includes modern web technologies such as Lottie animations and Google Analytics for tracking. The technical infrastructure is solid with HTTPS enabled and a professional design, although some security best practices like security headers and privacy policies are missing. The security posture is moderate with no visible vulnerabilities but lacks formal security and privacy documentation. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security practices.

D

Deutsche Gesellschaft Club of Rome

clubofrome.de

49

The Deutsche Gesellschaft Club of Rome is a well-established non-profit organization focused on sustainability, future studies, and fostering knowledge exchange to promote a life-supporting future. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that aligns with the organization's mission. Technically, the site is built on WordPress with modern plugins and integrations such as Google Analytics and Iubenda for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration data is consistent and supports the legitimacy of the organization. Overall, the site presents a trustworthy and professional image suitable for its target audience.

S

Samsonite Australia

samsonite.com.au

65

Samsonite Australia operates a professional e-commerce website specializing in premium luggage, travel bags, and accessories. The brand leverages its 111 years of heritage to position itself as a market leader in the travel retail sector within Australia. The website offers a comprehensive product catalog, promotional offers, and a newsletter subscription to engage customers. Technically, the site is built on Salesforce Commerce Cloud (Demandware) and integrates multiple modern marketing and analytics tools, including Google Analytics, TikTok Pixel, Facebook Pixel, and Braintree for payment processing. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and secure payment gateways, though explicit security policies and incident response contacts are not publicly available. Overall, the domain and website present a trustworthy and mature online retail presence with room for improvement in transparency around security policies and vulnerability disclosures.

S

Samsonite

samsonite.co.uk

66

Samsonite UK operates a comprehensive e-commerce platform specializing in suitcases, travel bags, and related accessories. The website serves as the official UK online shop for Samsonite, a globally recognized luggage brand. It offers a wide range of products including luggage, backpacks, bags, kids' items, and personalisation services, targeting consumers in the UK market. The site emphasizes customer convenience with free delivery, free returns, and secure payment options. Technically, the website is built on Salesforce Commerce Cloud with modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and WonderPush. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced and appropriate security headers present. However, no explicit security policy or incident response information is published. WHOIS data was unavailable due to querying a subdomain, but the website's branding and content strongly indicate legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly experience.

S

Samsonite

samsonite.ch

68

Samsonite.ch is the official Swiss online store for Samsonite, a globally recognized luggage brand. The website offers a comprehensive catalog of luggage, backpacks, bags, and travel accessories, including personalization services. The site targets consumers in Switzerland seeking high-quality travel products and operates on a modern e-commerce platform with strong brand consistency and trust indicators. Technically, the site leverages Salesforce Commerce Cloud, Vue.js components, and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and Salesforce Marketing Cloud. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is adequate with clear privacy and cookie policies, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, secure, and trustworthy, serving a large retail business with a strong market position.

S

Samsonite

samsonite.se

65

Samsonite.se is the official Swedish online store for Samsonite, a globally recognized luggage and travel accessories brand. The website offers a comprehensive catalog of products including suitcases, backpacks, bags, kids' luggage, and personalization services. It targets consumers in Sweden seeking premium travel products. The site is built on Salesforce Commerce Cloud, leveraging modern marketing and analytics tools such as Google Tag Manager, Hotjar, and WonderPush, indicating a mature digital infrastructure. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though no explicit security policy or incident response contacts were found. Overall, the site presents a professional, trustworthy e-commerce platform with strong brand consistency and user experience.

A

Aboutbags NV

samsonite.es

65

Samsonite.es is the official Spanish e-commerce website for the Samsonite brand, operated by Aboutbags NV. The site offers a wide range of travel luggage, backpacks, bags, and accessories with features such as free shipping, free returns, and product personalization. The website is well-branded, professionally designed, and targets consumers in Spain seeking high-quality travel products. Technically, it leverages Salesforce Commerce Cloud and integrates multiple marketing and analytics tools including Google Tag Manager, Hotjar, and CQuotient, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. WHOIS data is unavailable due to registry restrictions, but the domain and website content strongly indicate legitimacy and brand authenticity. Overall, the site presents a trustworthy and professional online retail experience.

A

Aboutbags NV

samsonite.sk

68

Samsonite Slovakia's official e-commerce website operates as a regional online retail platform offering a wide range of luggage, backpacks, bags, and travel accessories. The site is well-structured, targeting Slovak consumers with localized content and product personalization options. The business is positioned as a trusted brand representative with comprehensive customer support and warranty services. Technically, the site leverages Salesforce Commerce Cloud, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and WonderPush, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly documented. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

A

Aboutbags NV

samsonite.pl

67

Samsonite Poland's official e-commerce website offers a comprehensive range of travel luggage, backpacks, bags, and accessories, including personalization services. The site targets Polish consumers seeking high-quality Samsonite products and maintains consistent branding and professional content. Technically, the site leverages Salesforce Commerce Cloud and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and Emarsys, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and vulnerability disclosures are absent. Overall, the site is legitimate, professional, and well-optimized for user experience and SEO.