Security Directory

T

TIMOCOM GmbH

timocom.ba

65

TIMOCOM GmbH operates a leading B2B digital marketplace platform specializing in road freight logistics, connecting shippers, freight forwarders, and carriers across Europe. Founded in 1997 and headquartered in Germany, the company offers a comprehensive suite of services including freight exchange, closed freight networks, tender management, route and cost calculation, transport orders, and API integrations. The website is professionally designed, multilingual, and targets logistics industry professionals seeking efficient transport solutions. Technically, the site leverages modern web technologies, HubSpot CMS, and Azure CDN hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, TIMOCOM presents a trustworthy, mature, and well-established digital logistics platform with a strong market position in Europe.

E

ENORM Digital GmbH

enorm.media

52

ENORM Digital GmbH is a specialized internet agency based in Cologne, Germany, focusing on online advertising, digital media planning, and real-time advertising services. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, particularly in the cultural and financial sectors. Their business model revolves around delivering targeted online campaigns, programmatic buying, and media optimization to increase brand visibility and lead generation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references, positioning ENORM as a trusted niche player in the German online advertising market. Technically, the website is built on the TYPO3 CMS platform and leverages modern web technologies such as jQuery, Gumby Framework, and Google Maps API. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security header implementation. The presence of multiple external marketing and advertising tools, including Google Analytics and Facebook Pixel, indicates a mature digital marketing infrastructure. From a security perspective, the site uses SSL encryption as stated in its privacy policy, but lacks visible HTTP security headers and a dedicated security policy or incident response contact. Forms are implemented securely using POST methods, and no sensitive data is exposed in the HTML. Privacy compliance is well addressed with a comprehensive privacy statement aligned with GDPR requirements, although a cookie consent mechanism is absent. Overall, the security posture is adequate but could benefit from enhancements in header security and transparency. The domain WHOIS data is unavailable or protected, which is common for small digital agencies and justified for privacy reasons. Despite this, the website provides sufficient legal and contact information, client logos, and consistent branding to establish legitimacy and trustworthiness. No signs of malicious activity or suspicious patterns were detected. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and incident response transparency to further strengthen trust and compliance.

L

Landesamt für Geoinformation und Landentwicklung Baden-Württemberg

lgl-bw.de

54

The Landesamt für Geoinformation und Landentwicklung Baden-Württemberg (LGL) is a government agency responsible for surveying, land development, and geoinformation services within the German state of Baden-Württemberg. The website serves as an official portal providing information on geospatial data, land surveying, cadastral services, and related products. It targets public sector entities, professionals in geoinformation, and the general public interested in land development and mapping services. The agency holds a strong market position as the authoritative body for geoinformation in the region, offering a broad range of services including data provision, training, and product sales. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern JavaScript libraries such as jQuery, DataTables, and Bootstrap for responsive design and interactive features. The site is hosted within the Baden-Württemberg academic network (BelWü), indicating a stable and regionally controlled infrastructure. Performance and mobile optimization are good, with accessibility and SEO practices well implemented. However, explicit security headers and privacy policies are not evident, which could be improved. From a security perspective, the site uses HTTPS and asynchronous script loading, minimizing exposure to common vulnerabilities. No signs of WAF or blocking mechanisms were detected, and no sensitive data leakage was observed. The absence of a published privacy policy, cookie consent mechanism, and vulnerability disclosure reduces the overall privacy compliance and security posture scores. The WHOIS data is minimal but consistent with the agency's regional affiliation, supporting legitimacy. Overall, the LGL website is a professional, trustworthy government portal with solid technical foundations but could enhance its privacy and security transparency. Strategic improvements in publishing privacy and cookie policies, security headers, and incident response contacts would strengthen compliance and user trust.

F

ForstBW

forstbw.de

53

ForstBW is a large government-related organization responsible for the ecological, social, and sustainable management of the state forests in Baden-Württemberg, Germany. The website clearly targets residents, forest owners, environmentalists, and educators with a comprehensive range of services including forest management, wood sales, hunting and fishing permits, environmental protection projects, and educational programs. The organization holds recognized certifications such as Gemeinwohlbilanzierung and the Deutscher Nachhaltigkeitspreis, reinforcing its commitment to sustainability and compliance. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a professional design. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a notable gap. Contact information is primarily via web forms, with no direct emails or phone numbers visible. Overall, ForstBW's website presents a trustworthy, professional, and secure digital presence appropriate for a public sector entity. Strategic improvements in cookie consent, security headers, and incident response transparency would further enhance its security posture and user trust.

S

STRKNG

strkng.com

62

STRKNG operates as an international online photography gallery specializing in contemporary and fine art photography. It serves photographers, models, designers, and brands by providing a platform to showcase portfolios, participate in community voting, and access photography-related events and publications. The business is positioned as a niche media platform with a strong community focus and curated content. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates with Cloudflare DNS and Google Firebase for push notifications. The site is mobile optimized and employs structured data for SEO enhancement. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The site hosts mature content including fine art nude photography, presented responsibly for a mature audience. Overall, the website is professional, trustworthy, and well-maintained with room for security enhancements.

S

Sparkasse KölnBonn

sparkasse-koelnbonn.de

73

Sparkasse KölnBonn is a prominent regional savings bank serving the Cologne and Bonn area in Germany. The institution offers a comprehensive range of financial services including checking accounts, investment products, securities trading, loans, and retirement planning. The website reflects a strong regional focus and commitment to customer service, supported by multiple contact channels and a chatbot feature. The bank is part of the larger Sparkassen-Finanzgruppe, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager (AEM), indicating a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security measures such as HTTPS, strict security headers, and secure form handling are implemented, demonstrating a solid security posture. However, explicit security policies and incident response information are not prominently published, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, including clear privacy and cookie policies. The domain registration data aligns well with the business identity, supporting legitimacy. No suspicious or malicious indicators were found, and the content is safe for general audiences. Strategic recommendations include publishing a dedicated security policy and incident response page, implementing a vulnerability disclosure policy, and continuing to monitor third-party scripts for security risks to enhance trust and compliance further.

N

norm-4 GmbH

norm-4.com

59

norm-4 GmbH is a full-service digital agency based in Cologne, Germany, specializing in custom digital solutions including websites, online portals, TYPO3 and WordPress CMS, e-commerce platforms, accessible websites, and mobile apps for iOS and Android. The company targets businesses, institutions, and public sector clients, positioning itself as a technologically competent and creative partner. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with modern plugins such as WPBakery Page Builder and Yoast SEO, and it employs Cookiebot for GDPR-compliant cookie consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, norm-4 GmbH demonstrates a solid digital maturity and trustworthy business profile.

T

TIMOCOM GmbH

timocom.rs

61

TIMOCOM GmbH operates a leading European digital marketplace specializing in road freight logistics. The platform connects shippers, freight forwarders, and carriers to optimize transport processes through services such as freight exchange, shipment tracking, and integrated interfaces. The company has a strong market presence with over 156,000 users and extensive service offerings tailored to the logistics industry. The website is professionally designed, multilingual, and optimized for mobile, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and privacy compliance mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. Overall, TIMOCOM demonstrates a robust business and technical foundation with a trustworthy online presence.

F

FiXiT d.o.o.

fixitweb.studio

47

FiXiT d.o.o. operates as a small web design studio presenting its portfolio through the Fixit Design Studio website. The company focuses on delivering web design and development services, targeting businesses and individuals seeking digital solutions. The website showcases a professional design with clear branding and a portfolio emphasis, positioning itself as a niche player in the technology sector. Technically, the site is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility features and good SEO practices. Security-wise, the website benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose compliance risks. Overall, the site is professional and safe but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

U

Ured za zekat

zekat.ba

58

The website zekat.ba serves as an informational and transactional platform for Zekat, an Islamic charitable practice, primarily targeting the Bosnian Muslim community. It provides current nisab values, educational content, a Zekat calculator, and facilitates online payments through a partner site. The site is operated by 'Ured za zekat', a non-profit religious organization. The website demonstrates a moderate level of digital maturity with modern JavaScript usage, integration of Google Analytics and Meta Pixel for tracking, and a cookie consent mechanism. However, it lacks explicit privacy and security policies, and no direct contact information is provided on the site. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are notable gaps. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced transparency and security documentation.

The Volkshochschule Südlicher Breisgau operates as a regional adult education provider in Germany, offering a broad range of courses across multiple program areas including languages, health, culture, and professional development. The institution targets local citizens of all ages, emphasizing inclusivity and accessibility. Their website reflects a well-structured educational platform with clear course offerings and community engagement. Technically, the site is built on a proprietary CMS (CMX), uses modern web technologies, and is mobile-optimized with good accessibility features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

Volkshochschule Bodenseekreis is a regional adult education provider in Germany offering a broad range of courses and events across multiple disciplines including culture, health, languages, and digital skills. The website is well-structured, content-rich, and targets a general audience interested in lifelong learning. Technically, the site uses a proprietary CMS (CMX) with modern JavaScript and CSS, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is mostly met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

V

vhs Filderstadt

vhs-filderstadt.de

44

vhs Filderstadt is a medium-sized non-profit educational institution based in Germany, providing a wide range of adult education and cultural programs including language courses, art school offerings, health and fitness classes, and integration projects. The website is professionally designed using TYPO3 CMS, with good content quality and clear navigation targeting the general public interested in lifelong learning and cultural enrichment. The institution maintains an active social media presence and offers both in-person and online courses, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and secure login forms, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with the organization's mission and community role.

V

Volkshochschule Freiburg e.V.

vhs-freiburg.de

49

Volkshochschule Freiburg e.V. is a well-established adult education provider based in Freiburg, Germany, offering a broad spectrum of courses including languages, culture, health, and professional development. The organization targets adults seeking lifelong learning and integration support, positioning itself as a key regional educational institution with recognized certifications such as AZAV-Quacert and the Alpha-Siegel for accessibility. The website reflects a professional and accessible platform with clear navigation and comprehensive course offerings. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools like Eye-Able. It is hosted on a stable provider with secure HTTPS configuration and demonstrates good mobile optimization and SEO practices. The presence of cookie consent mechanisms and privacy policy pages indicates a strong commitment to GDPR compliance. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security policy and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, showing no suspicious registration patterns, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements could include publishing a dedicated security policy and incident response details to further enhance transparency and trust.

M

Maa- ja metsätaloustuottajain Keskusliitto MTK

mtk.fi

55

Maa- ja metsätaloustuottajain Keskusliitto MTK is a professional and advocacy organization serving farmers, forest owners, and rural entrepreneurs in Finland. It holds a central position in representing agricultural and forestry producers, offering key services such as professional representation and support. The website reflects a mature digital presence with a modern CMS (Liferay) and uses contemporary web technologies including React and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a good user experience, although explicit contact and policy pages are not evident in the provided content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks published security policies or incident response information. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

The website olx.ba is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of any meaningful business, compliance, or security information from the page. The page title 'Just a moment...' and the presence of Cloudflare challenge scripts confirm that the site is protected by a Web Application Firewall (WAF) which requires human verification before access. Consequently, no privacy policies, contact information, or business details are available for analysis. The technical infrastructure is limited to Cloudflare's security platform with no visible CMS or analytics tools. The security posture cannot be fully assessed due to lack of access, but the presence of Cloudflare indicates some level of protection. Overall, the site cannot be properly evaluated until the WAF challenge is passed and the actual content is accessible.

C

Callebaut

callebaut.com

69

Callebaut is a well-established Belgian chocolate brand with a rich history dating back to 1911. The company offers a comprehensive range of chocolate products and culinary tools targeted primarily at artisans and professional chefs worldwide. Their website reflects a strong commitment to quality, sustainability, and community engagement, including professional training through the Chocolate Academy. Technically, the website is built on Drupal 10, uses modern web technologies, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS and security headers in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the brand's global recognition and consistent online presence.

M

Messenger Links Generator

msng.link

54

The website msng.link offers a specialized online utility service that generates direct messaging links for a wide range of popular messenger platforms including WhatsApp, Telegram, Viber, Facebook Messenger, and others. It targets general internet users and businesses who want to facilitate direct communication via messengers. The business model appears to be free usage supported by advertising revenue, primarily through Google Adsense. The site is small in scale and focused on a niche utility function. Technically, the website employs modern web technologies including SvelteKit and Bootstrap for frontend development, and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate given the nature of the service and lack of sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving privacy compliance to build greater user trust and regulatory adherence.

P

Profi Aesthetics

profi-aesthetics.eu

39

Profi Aesthetics is a small graphic design portfolio business based in Germany, showcasing a diverse range of creative projects including artwork, book design, web design, exhibition design, and event campaigns. The website serves primarily as a visual portfolio targeting general audiences interested in graphic design services. The business model focuses on presenting past projects to attract potential clients or collaborators. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery 1.12.3, and Swiper.js for interactive slideshows. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, the use of an outdated jQuery version and lack of modern frameworks or CMS indicates room for technical modernization. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation from the provided data, which may expose it to certain risks. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. No contact or incident response information is available, limiting transparency and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

The website 'Reden bewegen – WOHIN?' is a cultural and educational initiative by the Jüdisches Museum Frankfurt in cooperation with the Bundeszentrale für politische Bildung. It focuses on democratic education and remembrance culture through a mobile sound installation and workshops targeted at secondary school students and teachers. The project is positioned as a non-profit educational offering with municipal support, emphasizing political education and democratic awareness. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript with jQuery 1.12.3. The site is accessible, well-structured, and mobile-optimized but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and implementing security best practices. Overall, the site is trustworthy, professional, and serves its educational mission effectively.

The website kaarna.fi is a parked domain primarily intended for sale, as indicated by the prominent domain sale banner and minimal content. The site lacks substantive business information, contact details, or services, positioning it as a placeholder rather than an active business site. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense and Youseasky, hosted via Cloudfront CDN. The site shows moderate performance but limited mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, suitable only as a domain sale landing page.

C

Collector

collector.se

71

Collector is a Swedish financial services provider offering personal loans, credit cards, and savings accounts primarily targeting private individuals and businesses in Sweden. The company operates under the brand Collector, which is part of Norion Bank AB. The website demonstrates a mature digital presence with a focus on user experience, clear product offerings, and compliance with privacy regulations such as GDPR. The technical infrastructure includes modern web technologies, cookie consent management, and analytics integration, reflecting a well-maintained platform. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and aligned with industry standards for financial services.

Svea Bank is a well-established financial services provider operating in Finland, offering financing, debt collection, and payment services. The website presents a professional and consistent brand image with a focus on user privacy and consent management, as evidenced by the comprehensive cookie consent mechanism. The technical infrastructure leverages modern technologies such as Astro framework, Google Tag Manager, and Matomo analytics, indicating a mature digital presence. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit security policies, which are recommended for improvement. The absence of WHOIS data limits domain legitimacy verification, but external verifications and consistent branding support the site's credibility. Overall, the website is functional, compliant with privacy regulations, and targets consumers and businesses in the Finnish financial sector.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

mlr-bw.de

66

The website represents the official online presence of the Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg, a government ministry responsible for agriculture, rural development, consumer protection, forestry, animal health, and nutrition in the German state of Baden-Württemberg. It serves as an authoritative source of information for citizens, stakeholders in agriculture and forestry, and consumers. The site offers comprehensive content including news, press releases, service information, career opportunities, and links to related government portals and campaigns. The target audience includes the general public, professionals in agriculture and forestry, and government employees. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including responsive design, SVG icons, and asynchronous JavaScript. It employs Matomo analytics with a user consent mechanism, reflecting a mature approach to privacy and data protection. The site is well-optimized for accessibility and SEO, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and integrates cookie consent for tracking. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official government domain usage, indicating legitimacy. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the website demonstrates a strong digital maturity for a government entity, balancing comprehensive public service content with privacy and security considerations. Strategic improvements could include publishing detailed security policies and enhancing security header configurations to further strengthen its security posture.

E

EU Reference Laboratories for Residues of Pesticides

crl-pesticides.eu

61

The EU Reference Laboratories for Residues of Pesticides website serves as an authoritative portal providing scientific and regulatory support for pesticide residue analysis across Europe. It offers proficiency tests, monitoring studies, guidance documents, and workshops aimed at official control laboratories and regulatory bodies. The site is government-affiliated and co-funded by the European Union, emphasizing its role in enhancing food safety and compliance with EU regulations. The content is well-structured and relevant to its specialized audience, though the design and technical implementation reflect legacy web technologies with basic mobile optimization and accessibility.

E

EU Reference Laboratories for Residues of Pesticides

eurl-pesticides.eu

61

The EU Reference Laboratories for Residues of Pesticides website serves as an official platform providing regulatory and scientific support related to pesticide residue analysis within the European Union. It offers resources such as proficiency tests, monitoring reports, guidance documents, and workshops aimed at official control laboratories and regulatory bodies. The site is positioned as a government/non-profit entity under EU regulation, emphasizing quality and comparability of pesticide residue testing results. Technically, the website employs basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking, including IP anonymization. The design is functional but somewhat dated, with moderate mobile optimization and accessibility. Security posture is adequate with HTTPS implied and SiteLock badge present, but lacks explicit security headers and visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy and security transparency are recommended.

Spanish Market d.o.o. is a small manufacturing company based in Bosnia and Herzegovina specializing in the production of packaged bakery products with long shelf life. The website presents a professional and consistent brand image with clear navigation and multilingual support, targeting general consumers and business clients interested in bakery products. The business model focuses on manufacturing and distribution within the local market, supported by downloadable product catalogs and social media presence on LinkedIn and Facebook. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It is served over HTTPS, ensuring secure communication, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of security policies and incident response information suggests limited maturity in security governance. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

The website farmabih.ba is currently a parked domain with no active business content or services. It serves primarily as a placeholder page indicating the domain may be for sale. The site relies heavily on third-party advertising scripts, mainly Google Adsense Domains CAF and DoubleClick, with no original content or user engagement features. The technical infrastructure is basic, using standard HTML and JavaScript with Amazon Cloudfront CDN for content delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie consent mechanisms. The site does not provide any contact or business information, which limits trust and credibility. Overall, the domain appears to be used for domain parking and resale rather than an operational business website.

N

NapravioBiH d.o.o.

napraviobih.ba

52

NapravioBiH d.o.o. is a Bosnian company focused on promoting and distributing products made in Bosnia and Herzegovina, targeting both local artisans and international markets. The company collaborates with sister companies across Europe to facilitate market access and employment opportunities, including for handicapped individuals. Their website reflects a small but professional business with a clear mission to improve the image and economy of Bosnia and Herzegovina through product promotion and distribution. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates social media and video content. However, it lacks advanced CMS or modern frameworks and shows only basic mobile optimization and SEO. Security posture is moderate with HTTPS usage but missing key security headers and no visible security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

Islamska zajednica u Bosni i Hercegovini - Vakufska direkcija

vakuf.ba

61

Vakufska direkcija is a non-profit organization operating under the Islamic Community in Bosnia and Herzegovina, dedicated to managing and promoting vakuf (Islamic endowment) properties and related cultural and religious activities. The website serves as an information hub for the Bosnian Muslim community and interested stakeholders, offering news, project updates, publications, and educational resources. It maintains a consistent brand presence and provides clear contact channels including email, phone, and social media. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with good mobile optimization and SEO practices. HTTPS is enforced with a CSRF token present, indicating a baseline security posture. However, the absence of security headers and explicit privacy and cookie policies highlight areas for improvement in security and compliance. The security posture is solid but could be enhanced by implementing recommended headers and formalizing incident response and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving its non-profit religious and cultural mission effectively, but would benefit from enhanced privacy compliance and security best practices.

U

U.G. BIHAMK

bihamk.ba

65

BIHAMK is the largest automotive club association in Bosnia and Herzegovina, with a long-standing history dating back to 1946. The organization provides a comprehensive range of services including roadside assistance, technical vehicle inspections, international driving documents, vehicle homologation, and rent-a-car services. Their market position is strong within the regional transportation sector, supported by memberships in international bodies such as FIA and AIT. The website reflects a mature digital presence with modern design, clear navigation, and rich content tailored to motorists and vehicle owners in Bosnia and Herzegovina and the wider region. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and uses HTTPS with strong security headers, indicating a solid security posture. However, the absence of explicit cookie consent mechanisms and dedicated security or incident response pages suggests areas for compliance and security improvement. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.

M

MASS-light

mass-light.ba

45

MASS-light is a regional retail company specializing in lighting products with physical stores across Bosnia and Herzegovina and an online e-commerce platform. The website presents a professional catalog of lighting products, including chandeliers, lamps, and outdoor lighting, targeting consumers in Bosnia and Herzegovina. The technical infrastructure uses modern web technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF tokens, but lacks publicly visible security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and compliance documentation.

T

Turun Sanomat

ts.fi

56

Turun Sanomat is a well-established Finnish media company providing news and information services primarily to the Finnish-speaking population. The website offers a broad range of news content, multimedia, and subscription services, positioning itself as a leading regional newspaper in Finland. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, and Facebook SDK for analytics and advertising, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks explicit security headers and formal privacy/cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Suomen Hintavertailu Oy

hinta.fi

56

Suomen Hintavertailu Oy operates the website hinta.fi, a well-established Finnish price comparison platform founded in 2003. The site offers consumers a comprehensive service to compare prices across over a million products and dozens of retailers, positioning itself as a trusted resource in the Finnish retail sector. The business model centers on aggregating product pricing and availability data to facilitate informed purchasing decisions for Finnish consumers. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Web1 Oy, consistent with the domain registrar and nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy, cookie consent banner, and GDPR adherence. However, no explicit security policy or incident response information is published. Overall, the website presents a low-risk profile with high legitimacy supported by consistent WHOIS data, transparent registrant information, and a long domain age. Strategic recommendations include enhancing DNS security with DNSSEC, adding security headers, and publishing security and incident response policies to further strengthen trust and compliance.

C

ClickEshop

clickeshop.sk

60

ClickEshop is a Slovak-based technology company specializing in providing a professional content management system for creating web pages and e-shops. Established in 2010, it serves a medium-sized market with over 10,000 projects completed, offering services including web hosting, email hosting, domain registration, and custom web design. The platform targets small to medium businesses and individuals seeking easy-to-use, customizable online presence solutions. The website is multilingual, supporting Slovak, English, German, and Czech languages, enhancing its regional reach. Technically, the website uses a proprietary CMS with modern web technologies such as jQuery, HTML5, and CSS3. It is hosted on a secure cloud infrastructure with HTTPS and DNSSEC enabled, ensuring a good security baseline. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. SEO practices are implemented, and Google Analytics is used for traffic analysis. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security policies, vulnerability disclosure, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration. Overall, ClickEshop presents a trustworthy and professional online presence with solid technical and business foundations. To enhance compliance and security posture, it should implement cookie consent, publish security policies, and consider formal vulnerability disclosure mechanisms.

C

ClickEshop

clickeshop.de

59

ClickEshop is a small technology company specializing in providing a proprietary platform for creating professional websites and webshops, including hosting, email, and domain services. With over 18 years of market presence and thousands of successful projects, it targets small to medium businesses and individuals seeking easy-to-use, customizable web solutions. The website is well-designed, mobile-optimized, and offers multilingual support, enhancing user experience and accessibility. Technically, the platform uses modern web standards such as HTML5, CSS3, and JavaScript with jQuery, and enforces HTTPS for secure communications. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. Contact information is clearly provided, including email, phone, and a contact form, supporting customer engagement. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices.

I

Iltalehti

il.fi

62

Iltalehti is a leading Finnish news media website operated under Alma Media, offering comprehensive news coverage including sports, entertainment, health, and lifestyle content. The site targets Finnish-speaking audiences and operates a subscription-based premium content service called Plus. Technically, the website employs modern web technologies, including responsive design, custom fonts, and asynchronous loading of scripts, ensuring good performance and mobile optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is professional, trustworthy, and well-established, but could improve transparency and compliance aspects.

S

Säästöpankki

saastopankki.fi

73

Säästöpankki is a Finnish savings bank offering retail banking and financial services to Finnish customers. The website presents a professional image with a clear focus on banking services, financial advice, and customer support. The site targets Finnish-speaking users primarily but offers alternate language versions. The business model centers on traditional banking with digital customer engagement. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is strong with HTTPS enforced and CSRF protections, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate online presence for a financial institution.

L

Lampa Studio d.o.o.

lampa.ba

61

Lampa Studio d.o.o. is a Bosnia and Herzegovina-based technology service provider specializing in web design, custom web development, eCommerce solutions, and mobile applications. Founded in 2011, the company targets businesses and organizations seeking modern, user-friendly digital solutions with a focus on usability and contemporary design. Their market position is supported by a strong portfolio of regional clients and active social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a credible business entity.

N

Nettimökki

nettivuokraus.com

65

Nettimökki operates as Finland's largest and most comprehensive online marketplace for vacation cottage rentals, offering over 6,300 listings across the country. The platform targets Finnish vacationers seeking diverse lodging options from rustic laavus to luxury villas. The website provides advanced search capabilities, user account management, and promotional tools for cottage owners. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and integrates with third-party services for analytics and advertising. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and consent management, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises questions about domain registration transparency but does not detract from the site's professional appearance and functionality. Overall, Nettimökki presents a mature digital presence in the hospitality sector with room for improvement in compliance documentation and security transparency.

G

Gransy, s.r.o.

clickeshop.com

62

ClickEshop.com is a professional ecommerce and website building platform operated by Gransy, s.r.o., established in 2010. The company offers a comprehensive content management system with integrated web hosting, email services, and customizable graphic templates targeting small to medium businesses and individuals seeking easy-to-use webshop solutions. The platform boasts over 10,000 projects and more than a decade of experience, positioning itself as a reliable player in the ecommerce technology sector. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery, and features a proprietary CMS tailored for ecommerce. Mobile optimization and SEO practices are well implemented, though performance is moderate. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced protections such as DNSSEC and security headers. Privacy compliance is partial, with terms of service present but no explicit cookie or privacy policy pages. Contact information is clearly provided, including phone, email, and a contact form, enhancing business credibility. Overall, the site is accessible, professional, and safe for general audiences.

P

Pelcro

pelcro.com

68

Pelcro is a technology company offering an all-in-one subscription management platform tailored for businesses selling digital memberships, subscriptions, magazines, and newspapers. Positioned as a niche SaaS provider, Pelcro targets digital content businesses seeking streamlined subscription and membership management solutions. The website is professionally designed using the Wix platform, integrating marketing and analytics tools such as HubSpot and Google Analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security posture is solid with HTTPS enforcement, security headers, and secure cookie handling, although explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a trustworthy and professional presence with good privacy compliance and user experience, suitable for its business model and audience.

S

StEB Köln

hw-karten.de

49

The website hw-karten.de is a government-affiliated platform operated by StEB Köln, providing flood hazard maps and related public safety information primarily for residents and local authorities in Germany. It offers interactive GIS-based mapping services focusing on flood, groundwater flooding, and heavy rain events. The site is well-branded with consistent government imagery and provides links to official resources and publications. Technically, the site is built using modern JavaScript frameworks such as Vue.js and Vuetify, with mapping functionality powered by OpenLayers and Visdom libraries. The hosting appears to be managed via known server providers, with no blocking or WAF detected, ensuring full accessibility.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bawue-zu-tisch.de

62

The website 'Baden-Württemberg zu Tisch' is an official government platform managed by the Ministry of Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg. It promotes regional food products, sustainable nutrition, and community engagement aligned with the state's nutrition strategy. The site targets residents of Baden-Württemberg across all age groups and provides information on projects, offers, news, and downloadable resources related to nutrition and sustainability. The platform is well-branded, consistent, and trustworthy, featuring endorsements from government officials and accessibility options such as easy language and sign language.

The Universalschlichtungsstelle des Bundes is an official German federal arbitration body providing neutral dispute resolution services to consumers and businesses. The website clearly communicates its mission to help resolve disputes out of court, targeting both consumers and companies. It operates as a government-affiliated entity, offering services such as case submission and informational resources. The site is built on TYPO3 CMS with modern web technologies and includes multilingual support, enhancing accessibility and user experience. Technically, the website employs a solid infrastructure with TYPO3 CMS, Bootstrap 5, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and a published security policy are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration data aligns well with the website's official nature, supporting legitimacy. However, the absence of terms of service and incident response information suggests areas for improvement in transparency and security readiness. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and establishing a vulnerability disclosure process to enhance trust and security posture further.

C

Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart

cvuas.de

61

The website www.cvuas.de serves as an official information portal for the Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart and associated government veterinary and chemical testing authorities in Baden-Württemberg, Germany. It provides comprehensive information on food safety, veterinary diagnostics, pesticide monitoring, and related public health services. The site targets a broad audience including consumers, professionals, and government stakeholders, positioning itself as a trusted regional government entity with a strong focus on consumer protection and animal health. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. It uses HTTPS with a basic Content Security Policy to secure form actions. The site shows moderate performance and basic mobile optimization, with clear navigation and good content relevance. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but could improve by implementing additional security headers and publishing incident response and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance its security posture and user trust.

U

Untersuchungsämter-BW

ua-bw.de

62

The website www.ua-bw.de serves as the official information portal for the Untersuchungsämter-BW, a consortium of chemical and veterinary investigation offices in Baden-Württemberg, Germany. It provides authoritative information on food safety, animal health, and related regulatory activities, targeting both the general public and professionals. The portal features news updates, reports, job postings, and educational resources, positioning itself as a trusted government source in the region. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. The design is professional and consistent, with clear navigation and categorized content. However, mobile optimization and accessibility are basic, and no modern CMS or advanced frameworks are detected. Performance is moderate, with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site uses a Content-Security-Policy header restricting form actions to the same origin, which is a positive measure. However, other common security headers are missing, and HTTPS enforcement status is unclear from the data. There is no visible cookie consent mechanism or detailed privacy policy on the main page, which may present compliance risks under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and authoritative government portal with good content quality and business credibility. Security and privacy compliance could be improved by implementing comprehensive security headers, HTTPS enforcement, cookie consent, and explicit privacy documentation. These enhancements would strengthen trust and regulatory adherence.

W

weber.digital GmbH

weber.digital

55

weber.digital GmbH is a German-based digital agency specializing in digital transformation, product development, and digital marketing services. Established in 2015, the company targets businesses seeking to modernize and innovate their digital presence. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating GDPR compliance. Technically, the site uses modern web technologies including custom fonts and JavaScript libraries like Swiper.js, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and domain lock statuses, though additional HTTP security headers and a published security policy would enhance trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

T

TeeGschwendner

teegschwendner.de

66

TeeGschwendner operates a professional e-commerce platform specializing in premium loose teas and related accessories, targeting primarily the German-speaking market. The website presents a well-structured, content-rich experience with clear navigation and multilingual support. The business model combines physical retail stores with an online shop, leveraging trusted third-party services such as Trusted Shops and PAYBACK to enhance customer trust and loyalty. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for consent management, hosted on servers associated with Intersolute. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies are not publicly visible. Privacy compliance is partially demonstrated through cookie consent but lacks visible privacy policy and terms of service pages in the provided content. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.