Security Directory

S

Samsonite

samsonite.nl

64

Samsonite.nl is the official Dutch e-commerce website for Samsonite, a globally recognized luggage and travel accessories brand. The site offers a comprehensive catalog of products including suitcases, backpacks, bags, and personalized items, targeting consumers primarily in the Netherlands. The business operates under Aboutbags NV, with a strong market position as a leading retailer in the luggage sector. The website demonstrates a mature digital presence with extensive marketing, analytics, and personalization technologies integrated to enhance customer experience and engagement. Technically, the site is built on Salesforce Commerce Cloud, leveraging modern web technologies and third-party services such as Google Tag Manager, Hotjar, and Emarsys. The site is optimized for performance, mobile responsiveness, and SEO, with good accessibility features. Security is robust with HTTPS enforced, multiple security headers present, and no visible vulnerabilities or exposed sensitive data. While explicit security policies and incident response contacts are not prominently published, the overall security posture is strong. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information including phone and physical address is clearly available, enhancing business credibility. Overall, Samsonite.nl presents a professional, secure, and user-friendly platform for online retail of travel products, with high trustworthiness and no indications of malicious or suspicious activity.

S

Samsonite

samsonite.lu

67

Samsonite Luxembourg operates an official e-commerce website offering a wide range of luggage, backpacks, and travel accessories tailored for the Luxembourg market and French-speaking customers. The site features comprehensive product categories, personalization services, and customer support options, positioning itself as a key player in the retail luggage sector. The website leverages Salesforce Commerce Cloud as its CMS platform and integrates multiple modern analytics and marketing technologies, including Google Tag Manager, Hotjar, and WonderPush, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a professional, trustworthy, and user-friendly experience with high content quality and branding consistency.

S

Samsonite

samsonite.ie

67

Samsonite.ie is the official Irish e-commerce website for Samsonite, a globally recognized luggage and travel accessories brand. The site offers a wide range of products including suitcases, backpacks, bags, and kids' luggage, with additional services such as product personalisation, warranty, and customer support. The website targets travelers, business professionals, and families, positioning itself as a leading retailer in the luggage sector with a strong brand presence and comprehensive product offerings. Technically, the website is built on Salesforce Commerce Cloud, leveraging modern JavaScript libraries and integrations with analytics and marketing platforms such as Google Analytics, Hotjar, and WonderPush. The site demonstrates good performance, mobile optimization, and accessibility, with a well-structured navigation system and rich content. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. Privacy and cookie policies are present and GDPR compliant, reflecting a mature privacy posture. No critical vulnerabilities or suspicious activities were detected. However, WHOIS data is unavailable or privacy protected, which is common for large brands but limits domain registration transparency. Overall, Samsonite.ie presents a secure, professional, and user-friendly online retail experience with strong business credibility. Strategic recommendations include maintaining up-to-date third-party libraries, publishing a security policy or incident response page, and considering a security.txt file to enhance vulnerability disclosure transparency.

S

Samsonite

samsonite.it

62

Samsonite Italy operates a professional e-commerce platform offering a wide range of luggage, backpacks, business bags, and travel accessories. The website targets Italian consumers and provides extensive product personalization options, customer service portals, and store locators, positioning itself as a leading retail brand in the luggage sector. The technical infrastructure leverages Salesforce Commerce Cloud, integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professionally designed, and consistent with Samsonite's global brand identity.

S

Samsonite

samsonite.hu

68

Samsonite Hungary operates a professional and comprehensive e-commerce platform specializing in luggage, backpacks, bags, and travel accessories. The website reflects a strong market position as a localized branch of the global Samsonite brand, targeting Hungarian consumers with tailored product offerings and personalization services. The platform is built on Salesforce Commerce Cloud, leveraging modern analytics and marketing technologies to optimize user experience and business intelligence. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high digital maturity and business credibility, supporting Samsonite's retail operations in Hungary effectively.

S

Samsonite

samsonite.de

64

Samsonite Deutschland operates a professional e-commerce platform specializing in premium luggage, backpacks, bags, and travel accessories. The website targets consumers in Germany and Europe, offering a broad product range with personalization options and strong customer service features. The business is positioned as a leading global luggage brand with a large market presence and a focus on quality and sustainability. Technically, the site leverages Salesforce Commerce Cloud, integrates multiple modern analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the domain registration is consistent with the brand's European operations, and the website maintains high trustworthiness and professionalism.

S

Samsonite

samsonite.fr

66

Samsonite's French website is a comprehensive e-commerce platform specializing in luggage, backpacks, bags, and travel accessories. The site offers a wide range of products including personalization services, supported by a strong brand presence and consistent professional design. The company targets general consumers in France and operates a large-scale retail business model with a focus on quality and customer service. Technically, the site leverages Salesforce Commerce Cloud and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, and WonderPush, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy or incident response contact is noted. WHOIS data is unavailable due to AFNIC policies, but the domain and content align with a legitimate brand presence. Overall, the site is well-structured, secure, and user-friendly, supporting Samsonite's market position as a leading luggage retailer in France.

S

Samsonite

samsonite.dk

65

Samsonite.dk is the Danish e-commerce portal for Samsonite, a globally recognized brand specializing in luggage, backpacks, bags, and travel accessories. The website offers a comprehensive product catalog with personalization options, customer support, and warranty services, targeting consumers in Denmark. The site is built on Salesforce Commerce Cloud with modern web technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data limits domain trust assessment but does not detract significantly from the overall legitimacy given the brand's global presence. Strategic recommendations include publishing security policies and incident response information to enhance transparency and trust.

A

Aboutbags NV

samsonite.cz

68

Samsonite.cz is the official e-commerce platform for Samsonite products in the Czech Republic, operated by Aboutbags NV. The site offers a comprehensive catalog of luggage, backpacks, bags, and travel accessories, including personalization services. It targets consumers seeking premium travel products and maintains a strong brand presence consistent with the global Samsonite identity. Technically, the site leverages Salesforce Commerce Cloud, integrates multiple analytics and marketing tools, and demonstrates excellent performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy protected and unavailable for direct verification.

S

Samsonite

samsonite.be

64

Samsonite Belgium operates a professional and comprehensive e-commerce platform specializing in travel luggage, backpacks, laptop bags, and related accessories. The website is well-branded and localized for the Dutch-speaking Belgian market, offering product personalization and extensive customer support services. The company leverages modern digital marketing and analytics tools to enhance customer engagement and optimize sales. Technically, the site is built on Salesforce Commerce Cloud (Demandware), utilizing a robust tech stack including Google Tag Manager, Hotjar, and WonderPush for analytics and marketing automation. The website demonstrates good performance, mobile optimization, and SEO practices, ensuring a smooth user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR requirements. However, explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency on incident response, maintaining up-to-date third-party libraries, and publishing a vulnerability disclosure policy to further strengthen security posture.

A

Aboutbags NV

samsonite.at

67

Samsonite.at is the official Austrian online store for Samsonite, a globally recognized brand specializing in travel luggage, bags, backpacks, and related accessories. The website offers a comprehensive product catalog with a strong focus on customer experience, including personalization options and detailed product categories. The site targets consumers in Austria seeking high-quality travel gear and accessories. Technically, the website is built on Salesforce Commerce Cloud, leveraging modern analytics and marketing tools such as Google Tag Manager, Hotjar, Emarsys, and WonderPush, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given the strong brand presence and professional operation. Overall, the site demonstrates a high level of professionalism, security, and user experience.

D

Discover

discoverstudentloans.com

69

Discover, a division of Capital One, is a major financial services company with a broad portfolio including credit cards, banking, home loans, and personal loans. The student loans product is no longer offered or serviced by Discover, with active loan accounts transferred to Firstmark Services. The website clearly communicates this transition and provides relevant contact information. The company maintains strong market positioning as a large, trusted financial institution in the United States, supported by certifications such as FDIC membership and BBB accreditation. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics and performance monitoring tools such as Google Analytics, Adobe Launch, Boomerang, and Glassbox. The site is mobile optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced, secure login forms, and bot management scripts, although explicit security headers and cookie consent mechanisms could be improved. Overall, the site is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and WHOIS transparency. The domain WHOIS data is unavailable likely due to registry restrictions rather than suspicious activity. The site does not contain any adult or explicit content and is safe for general audiences.

F

Firstmark Services

firstmarkservices.com

66

Firstmark Services is a division of Nelnet providing secure, innovative, and flexible financial solutions focused on loan servicing, customer service, and portfolio performance. The company targets financial institutions and private loan clients, positioning itself as an investment-grade rated servicer with a strong market presence supported by its parent company Nelnet. The website reflects a professional and trustworthy business with clear service offerings and a user-friendly interface. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and privacy tools such as Google Analytics, Hotjar, and the Transcend Privacy Plugin. Security posture is solid with HTTPS enabled and domain registration protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate a mature digital presence with good security hygiene and compliance awareness.

I

Islamske informativne novine Preporod

preporod.com

47

Preporod.com is the online presence of Islamske informativne novine Preporod, an established Islamic informational newspaper based in Bosnia and Herzegovina. The website serves a Bosnian-speaking Muslim audience with news, cultural, spiritual, and community content. It operates a print and digital media model with subscription options and advertising. Technically, the site is built on Joomla CMS with modern web technologies like Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for user tracking. The security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy and security practices.

P

Promotim d.o.o. Sarajevo

kupikartu.ba

59

Kupikartu.ba is a leading online ticketing platform in Bosnia and Herzegovina, operated by Promotim d.o.o. Sarajevo. The website offers a wide range of event tickets including music concerts, sports events, cultural performances, and cinema. It targets primarily Bosnian, Croatian, and Serbian speaking audiences interested in entertainment and cultural events. The business model focuses on e-commerce ticket sales with integrated payment processing partnerships. Technically, the site uses a modern responsive design built on Bootstrap with integrations for Google Analytics, Google Tag Manager, and advertising via Google Ad Manager. However, the use of an outdated jQuery version presents a security risk. Security posture is moderate with HTTPS enforced but lacks advanced security headers and visible security policies. Privacy compliance is basic with no cookie consent mechanism detected and limited GDPR indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

O

Otava Oy

otavakonserni.fi

57

Otava-konserni is a well-established Finnish media conglomerate specializing in book publishing, learning materials, and media content production. The company holds a leading market position in Finland's publishing industry, with a broad target audience including Finnish consumers, educational institutions, and media consumers. Their business model focuses on multi-channel content delivery, including digital and print formats, supported by a strong brand presence and subsidiaries such as Like and Otavamedia Oy. Technically, the website is built on a modern WordPress platform with integration of popular analytics tools like Google Analytics and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices, although there is room for improvement in accessibility and security headers. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and DNS security. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several recommended security headers. No forms or sensitive data collection points were detected on the main page, reducing immediate risk. However, the absence of explicit privacy and cookie policies and incident response information indicates gaps in compliance and transparency. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and business. Overall, Otava-konserni's website is professional, trustworthy, and well-positioned for its business goals. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory alignment.

S

STRKNG

strkng.com

62

STRKNG operates as an international online photography gallery specializing in contemporary and fine art photography. It serves photographers, models, designers, and brands by providing a platform to showcase portfolios, participate in community voting, and access photography-related events and publications. The business is positioned as a niche media platform with a strong community focus and curated content. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates with Cloudflare DNS and Google Firebase for push notifications. The site is mobile optimized and employs structured data for SEO enhancement. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The site hosts mature content including fine art nude photography, presented responsibly for a mature audience. Overall, the website is professional, trustworthy, and well-maintained with room for security enhancements.

E

ENORM Agentur für Design und Kommunikation Köln

enorm.net

47

ENORM Agentur für Design und Kommunikation Köln is a small regional agency specializing in design, digital communication, and media services. Their website presents a professional and consistent brand image targeting businesses seeking tailored solutions in corporate design, digital projects, and online advertising. The technical infrastructure is based on TYPO3 CMS with a modern JavaScript stack and Google Analytics for user tracking. While the website is accessible and well-structured, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided on the homepage. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and technical setup appear legitimate. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies.

F

FiXiT d.o.o.

fixit.ba

48

FiXiT d.o.o. is a small IT services company based in Bosnia and Herzegovina, founded in 2015. The company offers specialized IT services including IT support, web design, and toner distribution. Their website reflects a professional and consistent brand image, targeting business clients seeking reliable IT solutions. The company maintains a portfolio of reputable clients, indicating a solid market position locally. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

G

Gazi Husrev-begova biblioteka

ghb.ba

47

Gazi Husrev-begova biblioteka is a historic and culturally significant library institution in Bosnia and Herzegovina, founded in 1537. It serves researchers, students, and the general public interested in Islamic and Bosnian heritage by providing access to a vast collection of manuscripts, printed books, periodicals, archival materials, and museum exhibits. The institution also offers digital library services and publishes scholarly works. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. Google Analytics and reCAPTCHA are implemented for analytics and form security respectively. However, the site lacks a cookie consent mechanism and explicit privacy compliance features, which are important for GDPR adherence. Security-wise, the site shows no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and readiness. The WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's identity. Overall, the website is professional, trustworthy, and well-optimized for its audience, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

U

Ured za zekat

zekat.ba

58

The website zekat.ba serves as an informational and transactional platform for Zekat, an Islamic charitable practice, primarily targeting the Bosnian Muslim community. It provides current nisab values, educational content, a Zekat calculator, and facilitates online payments through a partner site. The site is operated by 'Ured za zekat', a non-profit religious organization. The website demonstrates a moderate level of digital maturity with modern JavaScript usage, integration of Google Analytics and Meta Pixel for tracking, and a cookie consent mechanism. However, it lacks explicit privacy and security policies, and no direct contact information is provided on the site. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are notable gaps. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced transparency and security documentation.

I

Islamska zajednica u Bosni i Hercegovini

islamskazajednica.ba

50

Islamska zajednica u Bosni i Hercegovini operates as the official religious authority for Muslims in Bosnia and Herzegovina, providing religious guidance, news, educational content, and community services. The website serves a Bosnian-speaking audience including local and diaspora communities, offering structured information about religious offices, events, and educational resources. The organization holds a strong market position as a government-recognized non-profit religious entity. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and Mootools. It is mobile responsive and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and HSTS. No exposed sensitive data or vulnerable libraries were detected, but the absence of explicit privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and providing clear incident response contacts to improve user trust and regulatory compliance.

S

Brand Identity Design and Visual Communications Design

sparksof.io

59

Sparks of is a brand identity and visual communications design agency based in Helsinki, Finland. The website presents a professional image focused on delivering design services to businesses seeking to establish or enhance their brand presence. The company appears to be a small agency with a clear focus on creative design solutions. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity and compliance with privacy regulations. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of public WHOIS data suggests privacy protection, which is typical for small agencies and does not raise immediate concerns. Overall, the website is well-designed, user-friendly, and trustworthy, but lacks visible contact information and formal privacy or terms of service pages.

D

Discover Financial Services, Inc.

discover.com

73

Discover Financial Services, Inc. operates the website discover.com, providing a comprehensive suite of financial products including credit cards, online banking, personal loans, home loans, and identity theft protection. The company is a division of Capital One, N.A., and holds a strong market position as a large, enterprise-level financial institution. The website targets consumers seeking personal financial services and offers a user-friendly, mobile-optimized experience with clear navigation and professional branding. Technically, the website leverages modern technologies such as Adobe Experience Manager for content management, and integrates multiple analytics and marketing tools including Google Analytics, Adobe Launch, Facebook Pixel, TikTok Pixel, and others. Hosting and performance are optimized with Akamai services, ensuring fast load times and excellent mobile responsiveness. Accessibility and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure login forms. While no critical vulnerabilities were detected, the site could improve transparency by publishing explicit security policies and incident response contacts. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. The business credibility is high, supported by trust indicators such as FDIC membership, BBB accreditation, and clear corporate information. Overall, discover.com is a professionally managed, secure, and trustworthy financial services website with extensive content and robust technical infrastructure. The absence of WHOIS data is noted but does not detract from the site's legitimacy given the strong brand presence and comprehensive content.

K

KCUS

kcus.ba

52

KCUS is the University Clinical Center in Sarajevo, Bosnia and Herzegovina, providing a broad range of healthcare services across multiple specialized clinics. The website serves patients, visitors, and healthcare professionals with detailed information about clinics, contact details, and news. Technically, the site is built on WordPress using Elementor and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good navigation and content quality. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy and cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professional but should address privacy and security gaps to enhance user trust and regulatory compliance.

K

Kozmo Shop

kozmoshop.ba

39

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

Grand Hotel Neum is a well-established hospitality business located in Bosnia and Herzegovina, offering a wide range of services including accommodation, wellness, dining, and congress facilities. The website reflects a medium-sized hotel with a strong market position as the largest and most luxurious hotel on the Neum riviera. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and integrates third-party booking and analytics services. While the site is functional and content-rich, it lacks modern privacy and security compliance features such as privacy and cookie policies, GDPR indicators, and security headers. The domain registration data supports the legitimacy and long-term operation of the business. Overall, the website is professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

M

Mlinar

mlinar.hr

53

Mlinar is a well-established Croatian bakery and retail food company with a domain registered since 1999, indicating a mature market presence. The website presents a professional design with consistent branding and clear focus on bakery products and retail services. The technical infrastructure includes modern CSS frameworks and JavaScript libraries, with integration of popular analytics and marketing tools such as Google Analytics and Meta Pixel. Cookie consent is managed via Cookiebot, demonstrating attention to privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the website is trustworthy and professionally maintained, serving a general audience with safe content.

S

Samsonite

samsonite.com

68

Samsonite.fi is the official Finnish e-commerce website for Samsonite, a globally recognized luggage brand. The site offers a wide range of travel products including suitcases, backpacks, bags, and personalized accessories, targeting consumers in Finland. The business model is retail-focused with a strong emphasis on product personalization and customer service, supported by a comprehensive online platform. The website reflects a mature market position with consistent branding and a professional digital presence.

M

Messenger Links Generator

msng.link

54

The website msng.link offers a specialized online utility service that generates direct messaging links for a wide range of popular messenger platforms including WhatsApp, Telegram, Viber, Facebook Messenger, and others. It targets general internet users and businesses who want to facilitate direct communication via messengers. The business model appears to be free usage supported by advertising revenue, primarily through Google Adsense. The site is small in scale and focused on a niche utility function. Technically, the website employs modern web technologies including SvelteKit and Bootstrap for frontend development, and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate given the nature of the service and lack of sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving privacy compliance to build greater user trust and regulatory adherence.

P

ProfiCentar

proficentar.ba

61

ProfiCentar is a professional e-commerce retailer specializing in tools and equipment, offering over 3500 items from renowned global brands. The website targets professional users and retail customers primarily in Bosnia and Herzegovina, positioning itself as a leading supplier in the region. The business model focuses on online sales supported by a comprehensive product catalog and customer support via phone and email. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is well-structured, mobile-optimized, and employs HTTPS with appropriate security headers, reflecting a good digital maturity level. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but the absence of published security policies and incident response contacts suggests room for improvement. Overall, the site is professional and trustworthy, with recommendations to enhance compliance and transparency.

O

ORION TELEKOM d.o.o.

tickets.rs

52

Tickets.rs is an established online ticketing platform operated by ORION TELEKOM d.o.o., founded in 2008 and serving primarily the Serbian market. The platform offers online ticket sales for a variety of entertainment events including concerts, theater performances, festivals, and sports events. The website demonstrates a professional design with good user experience and clear navigation, targeting a broad audience interested in cultural and sports events. Technically, the site is built using Angular 9, integrates Google Maps and Google Analytics, and employs modern UI components such as Material Design and Swiper.js for carousels. While HTTPS is enforced and no sensitive data is exposed, the site lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak as no explicit privacy or cookie policies were found, and no consent mechanisms are implemented. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the site is functional and trustworthy but would benefit from improved privacy and security practices.

T

TF Bank AB

tfbank.fi

72

TF Bank AB operates as a consumer finance bank specializing in loans and savings accounts, primarily targeting Finnish consumers. The website presents a professional image with clear navigation and relevant content describing their financial products. The company is part of the TF Bank Group, with a domain age consistent with its business history since 2012. The technical infrastructure includes modern analytics and consent management tools, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates a mature digital presence suitable for a financial institution, with room for improvement in transparency around security and legal terms.

B

Bank Norwegian, a branch of NOBA Bank Group AB (publ)

banknorwegian.fi

74

Bank Norwegian, operating as a branch of NOBA Bank Group AB (publ), provides consumer financial services including loans, credit cards, savings accounts, and insurance products primarily targeting Finnish consumers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. The company maintains an international footprint with sister sites in multiple European countries, reinforcing its market position as a regional consumer finance provider. Technically, the website leverages modern web technologies such as React and Material-UI, with media assets hosted on Cloudinary and analytics via Google Tag Manager and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices implemented. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the website demonstrates a mature digital presence suitable for a financial institution, with minor areas for improvement in security transparency and contact information availability.

L

LINX

linx.net

63

LINX operates as one of the world's largest Internet exchanges, connecting approximately 900 member ASNs across over 75 countries. The company provides critical internet exchange services facilitating network interconnection and traffic exchange for ISPs, enterprises, and network operators. The website reflects a professional and consistent brand presence with a focus on technical and business audiences in the telecommunications sector. The business model is membership-based, positioning LINX as a key player in the global internet infrastructure market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel for UI components. It integrates Google Analytics and HubSpot for analytics and marketing, alongside CleanTalk for anti-spam protection and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or malware were detected in the content, but the absence of WHOIS data and security.txt reduces transparency and trustworthiness. Overall, the website is professional and trustworthy from a business and user experience standpoint, but improvements in security transparency and contact information publication are recommended to enhance compliance and user trust.

Spanish Market d.o.o. is a small manufacturing company based in Bosnia and Herzegovina specializing in the production of packaged bakery products with long shelf life. The website presents a professional and consistent brand image with clear navigation and multilingual support, targeting general consumers and business clients interested in bakery products. The business model focuses on manufacturing and distribution within the local market, supported by downloadable product catalogs and social media presence on LinkedIn and Facebook. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It is served over HTTPS, ensuring secure communication, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security policies and incident response information suggests limited maturity in security governance. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

I

Ideas Business Lab d.o.o.

ibl.ba

52

Ideas Business Lab d.o.o. is a Bosnian marketing and communications agency focused on helping clients achieve business success through creative and strategic services. Their offerings include strategy, creative design, digital marketing, media planning, events, social media management, and public relations. The company targets businesses seeking comprehensive marketing solutions in Bosnia and Herzegovina. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website uses modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Modernizr for feature detection. The site loads with moderate performance and has basic accessibility features. However, there is no detected CMS or hosting provider information. SEO is adequately addressed with meta tags and Open Graph data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no published privacy policy, cookie policy, or incident response information, which are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional marketing agency but should improve privacy compliance and security practices to enhance trust and meet regulatory requirements.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

F

Fondacija Sarajevo Navigator

sarajevo.travel

64

Fondacija Sarajevo Navigator operates the official Destination Sarajevo Guide website, providing comprehensive tourism information including events, accommodations, sightseeing, and activities in Sarajevo, Bosnia and Herzegovina. The website serves as a key resource for tourists planning visits, offering detailed guides, booking integration, and cultural insights. The business is positioned as an authoritative local tourism promoter with a small organizational size and a focus on hospitality and cultural tourism. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising services including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and well-structured, with good SEO practices and consistent branding. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

Megamix d.o.o.

megamix.ba

46

Megamix d.o.o. is a well-established foodservice distribution and logistics company based in Bosnia-Herzegovina, with over 30 years of experience. The company serves a broad B2B audience in the hospitality and foodservice sectors, maintaining partnerships with numerous reputable brands. Their website reflects a professional and consistent brand image, targeting businesses seeking distribution and logistics solutions. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security features.

D

Dino Merlin

dinomerlin.com

50

Dino Merlin's official website serves as a comprehensive platform for promoting the artist's music, merchandise, and concert tours. The site targets a broad audience of music fans primarily in the Balkan region and offers direct links to streaming platforms, ticket sales, and an online shop. The business model revolves around media and entertainment with revenue streams from music sales, merchandise, and live events. The website is well-branded and professionally designed, reflecting the artist's established market position. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and CookieYes for cookie consent management. It uses Cloudflare for DNS services and includes parallax effects with Rellax.js. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. The domain is long-standing and registered with GoDaddy, consistent with the artist's career timeline. From a security perspective, the site enforces HTTPS and includes CSRF tokens for form security. However, it lacks DNSSEC and visible security headers, and does not publish privacy or security policies, which are compliance gaps. Tracking technologies are used extensively, indicating moderate user tracking. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in policy transparency and security headers would strengthen user trust and regulatory adherence.

A

Adazal d.o.o.

adazal.ba

45

Adazal d.o.o. operates a well-established baucenter retail business in Bosnia and Herzegovina, offering a wide range of construction materials, home appliances, garden equipment, and tools through both physical stores and an online e-commerce platform. The company has a strong market presence with over 27 years of operation, targeting general consumers and professionals in the construction and home improvement sectors. The website is professionally designed with good navigation, mobile responsiveness, and a comprehensive product catalog, supporting a positive user experience.

I

iNovine BH d.o.o.

inovine.ba

57

iNovine BH d.o.o. is a prominent retail company in Bosnia and Herzegovina, operating over 500 sales points and employing more than 1,000 staff. The company specializes in distributing tobacco products, print media, e-vouchers, telecom cards, lottery tickets, and event tickets, positioning itself as a market leader in retail distribution within the region. Their website reflects a professional digital presence with clear navigation and consistent branding, targeting a broad audience including retail customers and telecom users. Technically, the site employs modern web technologies such as Bootstrap, Google Analytics, and Mailchimp, ensuring moderate performance and good mobile optimization. Security-wise, the website enforces HTTPS and includes CSRF tokens but lacks some security headers and published privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the domain registration aligns well with the business claims, supporting the legitimacy of the site.

P

Planika Flex d.o.o.

planika.ba

57

Planika Flex d.o.o. operates planika.ba, an established online retail platform specializing in footwear and fashion accessories for women, men, and children. The company leverages a strong brand legacy of over 70 years, positioning itself as a trusted footwear provider in Bosnia and Herzegovina. The website offers a comprehensive catalog of products, including shoes, sneakers, sandals, boots, and related accessories, targeting a broad general audience. The business model is focused on e-commerce retail with a clear emphasis on brand variety and seasonal collections. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and responsive design frameworks likely based on Bootstrap. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Performance is moderate, with room for improvement in accessibility and technical SEO. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, indicating a baseline security posture. However, the absence of security headers and lack of publicly available security policies or vulnerability disclosure mechanisms highlight areas for enhancement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, planika.ba is a professionally managed e-commerce site with solid business credibility and technical foundation. Strategic improvements in privacy compliance, security headers, and transparency around security policies would strengthen its security posture and regulatory adherence.

P

Penny plus d.o.o. Sarajevo

pennyshop.ba

65

PENNY plus d.o.o. Sarajevo operates PENNYshop.ba, a well-established e-commerce platform founded in 1996, serving the Bosnian retail market with a wide range of products including tools, household appliances, sanitary equipment, and lighting. The website targets general consumers in Bosnia, offering convenient online shopping with a professional and consistent brand presence. Technically, the site employs modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside a chat widget for customer support. The platform appears to be custom-built with Bootstrap framework elements, providing good mobile optimization and user experience. Security posture is solid with HTTPS enforced and CSRF tokens in forms, though the absence of explicit security headers and published privacy or security policies indicates room for improvement. WHOIS data confirms the legitimacy and consistency of the business identity and domain age. Overall, the site is trustworthy and professionally maintained but should enhance privacy compliance and security transparency.

S

SportSport d.o.o.

sportsport.ba

59

SportSport d.o.o. operates SportSport.ba, a leading sports news portal in Bosnia and Herzegovina founded in 2007. The website provides comprehensive sports coverage including football, basketball, handball, and combat sports, targeting sports enthusiasts primarily within Bosnia and Herzegovina. The business model centers on digital media content delivery supported by advertising revenue through multiple ad networks and programmatic platforms. The company maintains a consistent brand presence and offers clear contact information and social media engagement channels.

S

Sintofarm Adriatica d.o.o.

sintofarm-adriatica.com

52

Sintofarm Adriatica d.o.o. is a Bosnia and Herzegovina based company founded in 2011, specializing in the import and distribution of veterinary pharmaceuticals, biological products, and animal feed additives. The company holds exclusive regional representation for multinational Italian companies SINTOFARM SpA and FATRO SpA, positioning itself as a key player in the regional animal health market. Their website reflects a professional business presence with clear product offerings and certifications such as ISO 9001:2008 and FAMI-QS, enhancing their credibility. Technically, the website employs a traditional tech stack including jQuery 1.9.1 and Modernizr, hosted on Hetzner infrastructure. While the site is functional and moderately optimized for performance and SEO, it lacks modern security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. The site uses HTTPS and integrates Google Analytics for user tracking but does not provide explicit privacy or cookie policies, indicating compliance gaps. From a security perspective, the absence of DNSSEC, security headers, and updated libraries suggests room for improvement. No incident response or vulnerability disclosure information is provided, which could impact the company's readiness to handle security events. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and privacy compliance to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory posture.

M

Milkprocessing

milkprocessing.ba

49

Milkprocessing d.o.o. is a consulting company specializing in the food industry, particularly dairy, meat, and confectionery sectors, with a strong focus on food safety. Founded in 1999 and based in Sarajevo, Bosnia and Herzegovina, the company has established itself as a leader in modernizing the local dairy industry. Their website reflects a professional presence with clear service offerings and industry focus. The target audience includes food industry professionals and companies seeking consulting and equipment solutions. The business model revolves around providing expert consulting services and supplying production and UV/IC equipment.

U

U.G. BIHAMK

bihamk.ba

65

BIHAMK is the largest automotive club association in Bosnia and Herzegovina, with a long-standing history dating back to 1946. The organization provides a comprehensive range of services including roadside assistance, technical vehicle inspections, international driving documents, vehicle homologation, and rent-a-car services. Their market position is strong within the regional transportation sector, supported by memberships in international bodies such as FIA and AIT. The website reflects a mature digital presence with modern design, clear navigation, and rich content tailored to motorists and vehicle owners in Bosnia and Herzegovina and the wider region. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and uses HTTPS with strong security headers, indicating a solid security posture. However, the absence of explicit cookie consent mechanisms and dedicated security or incident response pages suggests areas for compliance and security improvement. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.