Security Directory

Yazaki North America operates as a major player in the automotive components sector, specializing in power distribution, data connectivity, and display technologies for vehicles. The company emphasizes innovation, environmental responsibility, and global presence with operations in 46 countries. Their product portfolio includes wiring harnesses, connectors, sensors, and hybrid electric vehicle components, targeting automotive manufacturers and suppliers. The website reflects a professional corporate identity with clear navigation and relevant content aimed at industry professionals and potential employees. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight Tag. The site is mobile optimized and accessible, with a moderate performance profile. Security is enforced through HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies are absent. From a security perspective, the site shows a solid baseline with encrypted communications and privacy compliance. However, the absence of WHOIS data and registrant information introduces some uncertainty regarding domain legitimacy. No critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit incident response contacts or vulnerability disclosure policies, which could be improved to enhance trust. Overall, Yazaki North America’s website is a credible and professional digital presence supporting their business operations. Strategic improvements in transparency, security policy publication, and WHOIS data availability would strengthen their security posture and stakeholder confidence.

A

Automotive Digital Transformation

adt.media

71

Automotive Digital Transformation (ADT) is a specialized media platform focused on providing news, insights, and resources related to automotive technology advancements including software-defined vehicles, autonomous driving, vehicle connectivity, electric vehicle technology, and human-machine interfaces. The website targets professionals and stakeholders in the automotive and technology sectors, offering a range of content types such as articles, videos, audio, and newsletters. The platform positions itself as a niche industry media outlet with a consistent and professional brand presence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Google Publisher Tags for advertising, and the Piano paywall system for user authentication and content gating. The site is responsive and optimized for mobile devices, with good SEO practices and structured data markup enhancing discoverability. Performance is moderate with lazy loading techniques applied for ads and images. From a security perspective, the site uses HTTPS with good SSL configuration and implements several security best practices, although explicit security headers like Content Security Policy are not evident. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic; while a cookie consent mechanism is present, explicit privacy and terms of service pages were not found in the provided content. The WHOIS data is privacy protected, which is reasonable for a media site, but limits direct verification of registrant details. Overall, ADT presents a professional and trustworthy online presence with moderate risk. Strategic improvements in privacy policy visibility, security header implementation, and contact information transparency would enhance compliance and user trust.

K

Komax Group

komaxgroup.com

75

Komax Group is a well-established Swiss company specializing in automated wire processing solutions, serving primarily the manufacturing and transportation sectors. The company holds a strong market position as a global leader with multiple subsidiaries and a comprehensive portfolio of machinery and automation services. Their website reflects a mature digital presence with professional design, clear navigation, and detailed business information. Technically, the site uses modern frameworks such as Tailwind CSS and integrates performance monitoring tools like New Relic, indicating a commitment to maintaining a robust online infrastructure. Security-wise, the website enforces HTTPS, employs security headers, and manages cookie consent effectively, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS registration data is a notable gap but does not detract significantly from the overall trustworthiness given the professional web presence and business credentials. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, and improving transparency around incident response to enhance trust and compliance.

C

CRH

crh.com

72

CRH is a leading global diversified building materials company, manufacturing and distributing a wide range of superior building materials used worldwide in construction projects. The website presents a professional corporate image with detailed descriptions of their business scope and global presence. Technically, the website employs standard web technologies including jQuery and custom JavaScript bundles, with moderate performance and good mobile optimization. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with no explicit security headers or SSL configuration details available, suggesting room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer privacy compliance to strengthen trust and regulatory adherence.

E

Erste Bank a.d. Novi Sad

erstebank.rs

68

Erste Bank a.d. Novi Sad operates as a major financial institution in Serbia, part of the larger Erste Bank Group serving Central and Eastern Europe. The bank offers a comprehensive range of retail and commercial banking services including payment accounts, loans, savings, insurance, and digital banking solutions targeting individuals, local communities, and SMEs. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses modern web technologies, including a proprietary CMS, Google Tag Manager for analytics, and a webchat widget for customer interaction. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved and explicit security policies published. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service in the provided content. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy banking institution.

C

Cryptoticker.io GmbH

cryptoticker.io

70

CryptoTicker.io GmbH operates a comprehensive Web3 and cryptocurrency news platform that offers a wide range of services including news, guides, exchange and hardware wallet comparisons, podcasts, and educational content. The company targets crypto traders, investors, beginners, and enthusiasts, positioning itself as a trusted source with a strong community presence and over 300,000 readers. The business model is primarily content-driven with premium memberships and affiliate marketing. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on AWS Cloudfront, and optimized for performance and mobile use. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

D

DBU Digital Business University of Applied Sciences GmbH

dbuas.de

51

DBU Digital Business University of Applied Sciences GmbH is a specialized private educational institution in Germany focusing on digital business and applied sciences. The website presents a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and consent management tools. The institution targets students and professionals seeking education in the digital economy, positioning itself as a niche provider with a clear focus on future competencies. Technically, the site uses a robust stack including Google Tag Manager, Google Analytics, Meta Pixel, and Microsoft Advertising, all integrated with a comprehensive cookie consent mechanism to ensure GDPR compliance. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting a positive user experience and business credibility.

B

Blockster, Ltd.

blockster.com

64

Blockster is a niche Web3 media platform established in 2003, focusing on the culture, lifestyle, and technology aspects of the blockchain and crypto space. It offers a variety of content including news, interviews, and features related to NFTs, metaverse, gaming, and Web3 technology. The platform targets Web3 enthusiasts, crypto professionals, and NFT collectors, positioning itself as a specialized media outlet within the blockchain ecosystem. Technically, the website leverages modern technologies such as the Elixir Phoenix framework with LiveView for dynamic content, ImageKit for image optimization, and Google Analytics for user tracking. The site is hosted behind Cloudflare DNS but does not use DNSSEC, and it employs HTTPS with a good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and privacy compliance mechanisms such as cookie consent. No explicit contact emails or phone numbers are provided, with contact facilitated via a web form. Overall, the website is professional, well-branded, and trustworthy with a solid domain history and consistent WHOIS data.

M

Moongate

moongate.id

68

Moongate is a technology company focused on building an attention asset protocol that leverages blockchain technology to transform the value exchange between consumers and brands. Their platform offers no-code tools for brands to deploy token campaigns, token gating, and rewards, integrating real-world activations with digital assets. The company targets brands and consumers interested in blockchain-based engagement and tokenization, positioning itself as an emerging player with backing from multiple venture capital and angel investors. Technically, the website is built on Webflow CMS, using modern web technologies including Google Fonts, Google Tag Manager, and JavaScript. The site is mobile optimized with good design quality and clear navigation. Hosting is provided by Webflow, and performance is moderate. However, some accessibility features are basic, and SEO optimization is good. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no explicit privacy or cookie policy, nor a vulnerability disclosure or incident response policy, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

F

FXStreet

fxstreet.com

67

FXStreet is a well-established online platform providing real-time forex market news, analysis, exchange rates, and educational resources. It serves a global audience of forex traders, investors, and financial analysts, positioning itself as a leading source of reliable forex information. The website offers a comprehensive suite of services including live charts, economic calendars, broker reviews, and technical analysis tools, supported by a strong social media presence and mobile-optimized design. Technically, FXStreet employs a modern technology stack with extensive use of JavaScript, third-party analytics (Google Analytics, Microsoft Clarity), push notification services (OneSignal), and performance monitoring (New Relic). The site is built on the Sitefinity CMS platform and demonstrates excellent performance, SEO, and accessibility standards. Security best practices are observed with HTTPS enforcement and security headers, although some areas like public security policies and incident response contacts could be improved. The security posture is robust with no evident vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS domain registration data and lack of explicit company contact details slightly reduce the overall business credibility and trustworthiness. Overall, FXStreet presents a professional, secure, and user-friendly platform with extensive market data and analysis offerings. Strategic improvements in transparency around domain registration and security incident handling would further enhance trust and compliance.

I

IT-Schulungen.com

it-schulungen.com

60

IT-Schulungen.com is a well-established provider of IT and management training seminars, offering a broad portfolio of over 2000 courses including public seminars, inhouse training, coaching, and consulting services. Operating primarily in the D-A-CH region with more than 30 locations, the company targets IT professionals, managers, developers, and business users seeking certifications and skills development. Their partnerships with major technology vendors and certification bodies enhance their market position and credibility. Technically, the website is built on Joomla CMS with a modern JavaScript stack including Google Tag Manager and Analytics for tracking, and uses responsive design for mobile optimization. The site implements GDPR-compliant cookie consent and privacy policies, reflecting a mature approach to privacy and user data management. However, some security best practices such as HTTP security headers and published security policies are missing. From a security perspective, the site uses HTTPS and secure login forms with CSRF tokens, but lacks explicit incident response and vulnerability disclosure information. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, IT-Schulungen.com presents a strong business and technical profile with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

A

Latest News About Cryptocurrency, Bitcoin, Altcoin - AMBCrypto

ambcrypto.com

59

AMBCrypto is a cryptocurrency-focused media website providing news and updates on Bitcoin, altcoins, and the broader crypto market. Established in 2017, it serves a niche audience of crypto enthusiasts and investors. The website operates on WordPress CMS, leveraging Cloudflare for DNS and GoDaddy as the domain registrar. The technical infrastructure is modern with use of Google Fonts and FontAwesome, and the site appears to be mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

B

Beer of Satoshi GmbH

beerofsatoshi.com

44

Beer of Satoshi GmbH is a German-based small business specializing in a unique niche product: a limited edition craft beer that integrates Bitcoin rewards via hidden QR codes under bottle caps. The company targets Bitcoin enthusiasts and craft beer lovers primarily within the European Union, leveraging a business model that combines e-commerce sales and event-based distribution. Their market position is niche but well-defined, with a strong community and partnership ecosystem supporting their brand. The website is professionally designed, mobile-optimized, and rich in content that clearly communicates the product's value proposition and legal compliance.

B

Boerse Stuttgart Digital

bsdigital.com

69

Boerse Stuttgart Digital operates as a regulated infrastructure provider specializing in crypto and digital asset services in Europe. Their offerings include brokerage, exchange (MTF), and custody solutions, targeting both institutional and retail customers. The website reflects a professional and consistent brand image, emphasizing security and regulatory compliance. Technically, the site uses modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, though explicit security and privacy policies are not prominently found. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the overall business presentation suggests a credible entity likely affiliated with the Boerse Stuttgart group.

A

AKKA Studio

akka.studio

56

AKKA Studio is a specialized design and development studio focused on the crypto and Web3 sector, offering services including design, branding, frontend development, and growth analytics. The company positions itself as a trusted partner for Web3 projects, with a portfolio of notable clients and testimonials supporting its credibility. The website is professionally designed, mobile-optimized, and hosted on Webflow, indicating a modern digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy policies, which are areas for improvement. Overall, the business appears legitimate and well-positioned in its niche, though privacy and compliance enhancements are recommended.

A

Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD)

ard.social

67

ARD.social is the official Mastodon instance operated by the Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD), a major German public broadcasting consortium. The platform serves as a decentralized social network primarily for ARD's editorial content and German-speaking audiences. The website leverages the open-source Mastodon platform (version 4.2.18) and is hosted on Google Cloud infrastructure, ensuring modern technology adoption and reliable performance. The domain was registered in 2022, aligning with the platform's recent launch. Technically, the site employs React and JavaScript frameworks, with media assets hosted on Google Cloud Storage. The website is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enforced and domain status protections in place; however, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is generally good, with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, ARD.social demonstrates a trustworthy and professional presence as a public media social platform. The absence of contact information and incident response details limits transparency in security and support channels. Strategic enhancements in DNS security, security headers, and privacy consent mechanisms would strengthen the platform's security and compliance posture.

The website www.aids-tage.de represents a well-established medical congress focused on AIDS and infectious diseases, organized by verlag moderne industrie GmbH. It targets healthcare professionals, scientists, and students, offering expert speakers, networking opportunities, and continuing education credits. The event is scheduled for March 27-29, 2026, in Berlin, reflecting a strong market position in the German healthcare event sector. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates Google Tag Manager for analytics, alongside a robust privacy consent mechanism compliant with GDPR. Security posture is good with HTTPS and consent management, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and provides comprehensive event information and contact options.

U

Ultima Media Germany GmbH

automotiveit-kongress.eu

60

The automotiveIT Kongress website represents a well-established industry event organized by Ultima Media Germany GmbH, focusing on the automotive IT sector. It offers a comprehensive platform for professionals to engage in knowledge sharing, networking, and recognition through awards. The site is professionally designed, content-rich, and targets experts and stakeholders in automotive and IT industries primarily in Germany. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates Google Tag Manager for analytics and marketing, ensuring a good digital maturity level. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates high professionalism and trustworthiness, with minor gaps in direct contact information and security transparency.

F

FERI Cognitive Finance Institute

feri-institut.de

74

FERI Cognitive Finance Institute is a specialized think tank focused on cognitive finance, providing research, insights, and content primarily targeted at finance professionals and academics. The website positions itself as a knowledge hub with sections like Content Center and Cognitive Finance, supported by a parent company FERI AG and related partner sites in Germany, Switzerland, and Luxembourg. The digital infrastructure uses modern analytics and consent management tools, indicating a mature technical setup. Security posture is adequate with HTTPS and telemetry tools but lacks explicit security policies or incident response information. Privacy compliance is supported by Cookiebot consent management, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

The website om-zeichen.de operates as a certification and database platform under the brand Offensive Mittelstand, targeting small and medium-sized enterprises in Germany. It focuses on providing verified sustainability and occupational safety certifications (OM-Zeichen) to companies, enabling them to demonstrate compliance to customers, suppliers, and regulatory bodies. The platform offers self-assessment tools and a searchable database of certified companies, positioning itself as a niche player in the German Mittelstand market. The website content is professional, well-structured, and consistent with its business purpose. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and the Swiper.js library for interactive content. It employs Matomo analytics with cookies disabled to respect user privacy. The site appears to be built on TYPO3 CMS, inferred from file paths. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the website does not expose sensitive data and uses privacy-conscious analytics. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and the site is fully accessible. WHOIS data is limited but does not raise suspicion, though registrant details are not fully disclosed. Overall, the website presents a trustworthy and professional front for its certification services, with moderate technical maturity and a good security baseline. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

D

Deutscher Tourismusverband e.V.

deutschertourismuspreis.de

54

The Deutscher Tourismuspreis website is a professionally maintained platform operated by the Deutscher Tourismusverband e.V., a non-profit organization dedicated to promoting innovation in the German tourism sector. The site serves as the official portal for the annual tourism award, providing information on competition criteria, current news, and partner organizations. It targets tourism professionals and stakeholders interested in innovative tourism projects within Germany. The business model revolves around organizing and promoting the award to foster sustainable and creative tourism solutions. Technically, the website is built on the Tramino CMS platform, utilizing standard web technologies such as jQuery, CSS, and JavaScript. It is hosted on Schlund Technologies servers and employs HTTPS with a consent management system for GDPR compliance. The site demonstrates moderate performance and good mobile optimization, with clear navigation and consistent branding. SEO practices are adequately implemented, and social media integration supports marketing efforts. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers in the HTML source. No direct security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are evident. The site does not expose sensitive data and appears free from obvious vulnerabilities. Overall, the security posture is moderate but could be improved by adding security headers and explicit policies. The overall risk assessment is low, with the site presenting a trustworthy and professional image aligned with its non-profit mission. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing compliance and security.

BNP Paribas is a major European and international banking group with a diversified business model covering corporate, institutional, commercial, personal banking, and investment services. The website reflects a mature digital presence with comprehensive content on governance, sustainability, innovation, and career opportunities. The technical infrastructure uses modern analytics and consent management tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, domain locking, and cookie consent, though DNSSEC is not enabled and explicit security policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with the company's business identity.

D

DASDING / Südwestrundfunk - Anstalt des Öffentlichen Rechts

dasding.de

58

DASDING is a regional public radio station serving Baden-Württemberg and Rheinland-Pfalz in Germany, operated under the Südwestrundfunk public broadcasting organization. The website offers a comprehensive digital platform featuring live radio streaming, video livestreams, podcasts, music discovery, and event information targeting a young audience. The site is professionally designed with consistent branding and rich multimedia content, reflecting a mature digital presence. Technically, the site employs modern web standards, including responsive design, SVG icons, and multiple audio streaming formats, supported by analytics tools such as Chartbeat and Piano. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are absent. Privacy compliance is limited by the lack of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and credible, aligned with its public broadcaster status.

S

SWR/Südwestrundfunk - Anstalt des Öffentlichen Rechts

swr4.de

63

The website www.swr.de/swr4 is the official regional portal for SWR4, a public radio station operated by Südwestrundfunk (SWR), a major public broadcaster in Germany. It offers regional news, practical lifestyle tips, music programming, and event information targeted primarily at audiences in the Rheinland-Pfalz and Baden-Württemberg regions. The site demonstrates consistent branding and professional content quality, reflecting its position as a trusted media entity. Technically, the site uses modern web technologies including lazy loading, SVG icons, and analytics tools such as Chartbeat and Piano Analytics, ensuring good mobile optimization and accessibility. However, explicit privacy and cookie policies are not found in the provided content, and no direct contact information for security or incident response is disclosed. The domain registration data aligns well with the public broadcaster's identity, supporting high legitimacy and trustworthiness.

H

Herzenssache e.V.

herzenssache.de

57

Herzenssache e.V. is a well-established non-profit organization dedicated to supporting children and youth in the German regions of Baden-Württemberg, Rheinland-Pfalz, and Saarland. The website reflects a strong partnership with regional media (SWR) and financial institutions (Sparda-Bank), positioning it as a trusted charity with a clear mission to fund and promote social projects. The content is professionally presented, with excellent design, navigation, and relevant information for donors and participants. Technically, the site uses modern web technologies and integrates analytics and media players effectively, though it lacks an explicit cookie consent mechanism which is a minor GDPR compliance gap. Security posture is strong with HTTPS and no visible vulnerabilities, but could be improved by adding explicit security headers and incident response contacts. Overall, the site is trustworthy, user-friendly, and serves its charitable purpose well.

Planet Schule is an educational website operated by SWR, a German public broadcaster. It provides a wide range of educational content including films, learning games, worksheets, and teaching materials targeted primarily at students and educators in Germany. The platform is well-established and positioned as a trusted source of educational media, leveraging the reputation and resources of a public institution.

S

SWR Kindernetz

kindernetz.de

58

SWR Kindernetz is the children's content portal of the Südwestrundfunk (SWR), a major German public broadcaster. The website offers multimedia content including TV program information, audio plays, podcasts, and educational videos targeting children and families. It holds a strong market position as a trusted regional public media provider with a focus on educational and entertaining content for young audiences. The platform is well-branded and consistent with the SWR and ARD public broadcasting identity.

S

Südwestrundfunk

swr3.de

62

SWR3 is a prominent German pop radio station operated by Südwestrundfunk, a public broadcasting institution. The website offers a wide range of content including news, music, comedy, podcasts, and event information, targeting a general audience interested in entertainment and current affairs. The site is well-branded, professionally designed, and provides a rich user experience with responsive design and accessible navigation. Technically, the site employs modern web technologies, including HTML5, CSS3, JavaScript, and integrates analytics tools such as Chartbeat and Piano Analytics. The security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies could be enhanced. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content, and no consent mechanisms are evident. Contact information is minimal, with no direct emails or phone numbers visible, but social media presence is established. Overall, the site is trustworthy and credible, consistent with a public media entity.

BitLab d.o.o. is a medium-sized IT company based in Bosnia and Herzegovina, specializing in a broad range of technology services including web development, mobile applications, 3D visualization, hosting, education, and e-commerce. Established in 2015, the company has completed over 500 projects and serves a diverse clientele including government agencies and educational institutions. Their business model focuses on providing comprehensive IT solutions and digital services tailored to client needs, supported by a strong local presence and multilingual website content. Technically, BitLab employs a modern technology stack with popular frameworks and platforms, ensuring good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved further. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and published security policies, which are recommended for enhanced trust and compliance. Overall, BitLab presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security transparency.

H

Hanse Haus

hanse-haus.ch

77

Hanse Haus is a well-established German prefabricated house provider with a strong presence in Switzerland, offering individually planned turnkey and shell houses. The company emphasizes customer satisfaction, quality, and personalized service, supported by a large workforce and a history dating back to 1929. Their website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site uses TYPO3 CMS and integrates modern analytics and cookie consent tools, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure with good privacy and security practices, supporting the company's credible market position.

C

Baubedarf Online-Shop für Handwerker – Top Preise und schnelle Liefer

craft-com.de

63

Craft-Com is an e-commerce website specializing in construction products such as crowbars and rubber hammers, targeting professional handworkers primarily in Germany. The website presents a professional design with clear product offerings and emphasizes fast delivery and quality. The technical infrastructure includes modern web technologies such as Bootstrap and Font Awesome, with marketing and analytics tools like Google Tag Manager and Sendinblue integrated. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security posture is limited based on the absence of security headers and documented policies. The WHOIS data indicates stable DNS hosting but lacks detailed registrant information, which slightly reduces trustworthiness. Overall, the website is functional and professional but requires improvements in compliance and security documentation to enhance trust and regulatory adherence.

J

J&P Media Labs

jp-labs.de

52

J&P Media Labs is a small regional advertising agency based in Nordenham near Bremen, Germany, specializing in print, web, and advertising technology design services. The company targets a broad audience including beginners, professionals, students, and adults, offering strategic and impactful design solutions. Their market position is that of a local creative agency focused on delivering tailored media and design services. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on netcup infrastructure, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and moderate performance. The use of Directus CMS indicates a flexible content management approach. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, explicit security headers are not detected, and there is no visible incident response or vulnerability disclosure information. No vulnerabilities or suspicious elements were found in the content or scripts. Overall, the website presents a professional and trustworthy digital presence with good privacy and compliance practices. Strategic improvements in security headers and incident response transparency would enhance their security posture and trustworthiness further.

D

Die Seier Gruppe

seier-gruppe.de

59

Die Seier Gruppe is a German infrastructure and construction group that operates multiple subsidiaries specializing in various infrastructure services such as broadband expansion, waste disposal, district heating, and civil engineering. The website reflects a mature digital presence built on TYPO3 CMS, with good SEO and mobile optimization. The company demonstrates compliance with GDPR through a comprehensive privacy policy and cookie consent management via Cookiebot. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. The website integrates major analytics and advertising platforms with user consent, indicating a balanced approach to marketing and privacy. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as a significant regional player in infrastructure services.

S

Schroders Capital

schroderscapital.com

69

Schroders Capital is a global asset management firm specializing in private markets, offering a broad range of investment solutions including Private Equity, Real Estate, Infrastructure, and Private Debt & Credit Alternatives. The company serves professional and institutional investors worldwide, with a strong presence across 25 global locations and managing assets exceeding $99 billion. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for its target audience of professional investors. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand association and professional presentation.

F

Fondshafen

fondshafen.de

57

Fondshafen is a specialized asset servicing initiative within the cooperative financial group Volksbanken Raiffeisenbanken, offering custody, fund services, and depot management primarily in Germany, Luxembourg, and Switzerland. The website reflects a mature business with a strong market position supported by the DZ BANK group. Technically, the site is built on Adobe Experience Manager, indicating enterprise-level infrastructure, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The domain registration and DNS settings align well with the business, supporting legitimacy. Overall, the website is professional and trustworthy but could enhance privacy compliance and security transparency.

S

SwanCap

swancap.eu

46

SwanCap is a specialized private equity investment boutique with over 20 years of experience, managing over €5 billion in assets across multiple fund generations. The company targets institutional investors and large family offices, offering diversified investment strategies including primary fund commitments, direct co-investments, and secondaries. The website reflects a professional and consistent brand image with detailed business descriptions and a clear market position in the finance sector. Technically, the site is built on TYPO3 CMS, with good mobile optimization and SEO practices, though some improvements in accessibility and security headers are recommended. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of security policies and incident response information suggests room for maturity. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, though transparency could be enhanced by publishing contact details and security-related policies.

M

Mark Hamstra Web Development

modx.today

10

MODX.today is a niche online magazine dedicated to the MODX Content Management Platform, providing news, tutorials, reviews, and community event information primarily targeting MODX developers and users. The website is operated by Mark Hamstra Web Development, a small business based in the Netherlands, with a domain registration dating back to 2014, consistent with the site's content history. The platform leverages modern web technologies including Foundation CSS framework, jQuery, Google Fonts, and integrates Google Analytics and Disqus for user engagement and analytics. The site is mobile optimized and presents a professional, consistent brand image with clear navigation and relevant content for its audience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and legitimate but would benefit from enhanced security and compliance measures.

J

Jugendfreizeit- und Bildungswerk

jfbw.de

45

Jugendfreizeit- und Bildungswerk (jfbw) is a small non-profit organization affiliated with Stadtjugendausschuss e.V. Karlsruhe, providing holiday leisure and educational programs for children and youth. The website serves as an informational portal targeting parents and participants, offering details about holiday camps, sports, and personal development activities. The organization positions itself as a trusted local provider with a focus on reliable childcare and enriching experiences during school holidays. Technically, the website uses a custom-built platform with legacy JavaScript and Matomo analytics for privacy-conscious tracking. Hosting is provided by saasweb.gmbh, with multiple nameservers indicating stable infrastructure. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. SEO and accessibility are basic but functional. Security posture is moderate; while HTTPS usage is assumed, no explicit security headers or cookie consent mechanisms are detected. The site does not publish security or incident response policies, which could be improved. WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional and trustworthy for its target audience but would benefit from enhanced security practices and privacy compliance improvements.

The website croatia.hr is an official Croatian government tourism portal providing comprehensive health and safety information for visitors to Croatia. It offers emergency contact numbers, procedures for lost or stolen property, and passport-related guidance, targeting tourists and travelers. The site is well-branded and consistent with government standards, reflecting a medium-sized government entity established in 2001. Technically, the site employs modern JavaScript frameworks (likely Vue.js), uses Microsoft Azure DNS hosting, and integrates Dynatrace for performance monitoring. SEO and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and monitoring but lacks visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information and incident response details are not present on the analyzed page, limiting user support options. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

P

Svi odgovori na jednom mjestu - pressrs.ba

pressrs.ba

52

Pressrs.ba is a Bosnian content portal launched in 2021, providing educational and informational articles across various life topics. The website targets a general audience seeking knowledge and answers to everyday questions. Technically, the site is built on WordPress using the Divi theme, leveraging Google Fonts, Google Tag Manager, and Google Adsense for content delivery and monetization. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices but lacks advanced security headers and explicit privacy or cookie policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and regulatory adherence.

eNovosti.info is a Serbian language online news portal established in 2007, targeting audiences primarily in Republika Srpska and Serbia. It offers a wide range of news categories including politics, sports, culture, economy, and entertainment. The site is monetized primarily through Google Adsense advertising and uses Google Analytics for visitor tracking. The portal is powered by BitLab CMS and hosted by BitLab services, indicating a partnership with a local technology provider. The website demonstrates good content quality and user experience with clear navigation and mobile optimization, but lacks critical privacy and security features such as HTTPS and privacy policies.

D

Delegation of the European Union to Bosnia and Herzegovina & European Union Special Representative in Bosnia and Herzegovina

europa.ba

72

The Delegation of the European Union to Bosnia and Herzegovina serves as the official representation of the EU in Bosnia and Herzegovina, providing comprehensive information on EU activities, projects, and policies in the country. The website is professionally designed, well-structured, and targets a broad audience including citizens, media, and stakeholders interested in EU-Bosnia relations. Technically, the site is built on Drupal 10 with modern web standards, ensuring good performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response details are not published. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR. The domain is part of the official europa.eu space, managed by EU authorities, ensuring high legitimacy despite the absence of WHOIS details due to privacy policies. Overall, the site reflects a mature, trustworthy, and authoritative EU governmental presence in Bosnia and Herzegovina.

S

Sveriges Kommuner och Regioner

skr.se

61

Sveriges Kommuner och Regioner (SKR) is a well-established Swedish government-related membership and employer organization representing all municipalities and regions in Sweden. The organization provides policy development, employer services, research, and member support to enhance welfare services. The website reflects a mature digital presence with a clear focus on public sector stakeholders in Sweden. Technically, the site uses modern JavaScript frameworks including React and jQuery, hosted on Basefarm infrastructure with SiteVision CMS. Analytics are implemented via Piwik Pro with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and some security headers are missing. Contact information is clearly provided, and the site maintains a professional and trustworthy appearance.

N

Niedersächsische Landeszentrale für politische Bildung

politische-medienkompetenz.de

40

The website politische-medienkompetenz.de is an educational platform operated by the Niedersächsische Landeszentrale für politische Bildung, a governmental institution in Germany focused on political media literacy. It provides free educational materials, tools, and thematic content aimed at educators, youth, and individuals interested in political media competence. The platform holds a strong regional position as an authoritative source for political education in Lower Saxony. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, hosted on servers managed by agenturserver. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured navigation and meta tags for social sharing. Performance is moderate, with no evident technical debt or vulnerabilities in the visible code. From a security perspective, the site uses HTTPS and implements secure forms with CSRF protections. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No incident response or vulnerability disclosure policies are published, which could improve trust and security posture. Overall, the website is professional, trustworthy, and safe, with a strong focus on educational content. Strategic improvements in security headers, cookie consent, and transparency around security policies would further enhance its compliance and security maturity.

The Bundesverband Alternative Investments e.V. (BAI) is a German association representing the interests of the alternative investments sector. The website serves as a professional platform offering advocacy, publications, events, and member services targeted at professionals and organizations involved in alternative investments within Germany. The association holds a strong market position as a leading industry body in this niche. Technically, the website is built on TYPO3 CMS, featuring a modern and responsive design with good SEO and mobile optimization. Security posture is solid with HTTPS enforced, though some improvements are recommended such as adding cookie consent mechanisms and security headers. Overall, the site reflects a credible and professional organization with active engagement through events and publications.

N

Nationwide Multistate Licensing System & Registry (NMLS)

nationwidelicensingsystem.org

66

The Nationwide Multistate Licensing System & Registry (NMLS) Resource Center website serves as an authoritative platform providing mortgage licensing information and regulatory resources. It targets mortgage professionals, regulators, and consumers seeking licensing verification and related data. The site is hosted on Microsoft SharePoint Online, leveraging modern web technologies but with basic content presentation and limited interactive features. Security posture is solid with HTTPS enforced, though security headers and privacy compliance mechanisms are lacking. The absence of explicit privacy and cookie policies, as well as contact information, represents areas for improvement. Overall, the website is trustworthy and professional but could enhance user experience and compliance transparency.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

Staples Imprint Solutions operates a specialized punch-out simulation website designed to facilitate B2B ordering of customized print products. The site targets business customers and partners who use punch-out catalogs for streamlined ordering processes. The business is positioned within the retail sector under the Staples brand umbrella, with a domain age indicating a mature and stable presence since 2012. Technically, the website is built on ASP.NET Web Forms with JavaScript validation, but lacks modern SEO, accessibility, and mobile optimization features. Security posture is moderate with basic form validation but missing critical security headers and DNSSEC. No privacy or cookie policies are present, and no contact or social media information is provided, limiting transparency and user trust. Overall, the site serves a niche business function but requires improvements in security, privacy compliance, and user experience to enhance credibility and trust.

A

Antena Radio

antena.ba

46

Antena Radio is a small media company operating an online radio streaming platform targeting general audiences interested in contemporary music. The website provides live streaming, social media integration, and mobile app distribution, positioning itself as a local/regional broadcaster in Bosnia and Herzegovina. The technical infrastructure uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates Google Analytics and Facebook SDK for tracking and social features. While the site is functional and well-branded, it uses an outdated jQuery version and loads some scripts over HTTP, which introduces security risks. The security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional but would benefit from security and privacy improvements.

I

InterSoft d.o.o. Sarajevo

klix.ba

65

Klix.ba is the most visited and influential news portal in Bosnia and Herzegovina, providing fast and important news from Sarajevo, the country, and the world. The website operates on an advertising-supported business model, leveraging multiple ad networks including Amazon Ads, PubMatic, and Google Ad Manager. The technical infrastructure includes modern JavaScript libraries, consent management via Didomi, and analytics through DotMetrics and Google Analytics. The site is well-optimized for mobile and desktop users with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement, bot protection via reCAPTCHA, and GDPR-compliant consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, Klix.ba presents a professional, trustworthy, and compliant digital presence with a strong market position in the media sector of Bosnia and Herzegovina.