Security Directory

B

BNP Paribas Asset Management

bnpparibas-am.de

71

BNP Paribas Asset Management is a leading global asset management firm with a strong focus on sustainable investment solutions. The German institutional investor website presents a professional and well-structured platform targeting institutional clients in Germany. The site highlights BNP Paribas AM's commitment to sustainability and offers a range of asset management services. Technically, the website is built on WordPress, leveraging modern JavaScript libraries and Adobe's digital marketing tools, ensuring good performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, the website reflects a mature digital presence consistent with a large financial institution, though the lack of WHOIS data limits full domain trust verification.

P

pantamedia communication

pantamedia.com

54

Pantamedia communication is a German full-service agency specializing in public relations, advertising, and marketing with over 30 years of experience. The company focuses on serving clients in the political and economic sectors, offering services such as print design, logo design, text design, and web design. The website reflects a professional and consistent brand image targeting businesses and organizations requiring strategic communication and marketing support. Technically, the site is built on WordPress using the Enfold theme and integrates Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers and explicit security or incident response policies. The absence of WHOIS data for the domain is a concern for domain legitimacy, although the website's professional presentation and compliance measures suggest a legitimate business. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

M

MicroMedia

microacademy.ba

49

MicroAcademy is an educational platform specializing in practical courses for design, marketing, and web development, backed by the experienced agency MicroMedia. The website positions itself as a practical academy offering mentorship, real project experience, and employment opportunities for top students, targeting individuals seeking career advancement in digital fields. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices, though performance is moderate. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and visible privacy compliance documentation. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security policies to improve compliance and user trust.

S

Smart kolektiv

smartkolektiv.org

45

Smart kolektiv is a well-established non-profit organization based in Serbia, focused on promoting corporate social responsibility (CSR), social innovation, and supporting civil society organizations and social entrepreneurs. Founded in 2003, it has built a strong market position as a pioneer in CSR development in Serbia, offering educational programs, consultancy, and networking services. The website reflects a professional and consistent brand image, with clear navigation and multilingual support. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and domain protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a clear privacy policy, but lacks a cookie consent mechanism and vulnerability disclosure. Overall, the website is trustworthy and serves its target audience effectively.

W

WapplerSystems

wapplersystems.de

9

WapplerSystems is a small German web agency specializing in Content Management Systems, particularly TYPO3 and WordPress. The company offers business website development and maintenance services, targeting businesses seeking expert CMS solutions. The website is built on TYPO3 CMS with Bootstrap styling, reflecting a modern and professional technical infrastructure. The site is accessible with no blocking or WAF challenges detected. However, it lacks key privacy and cookie policies, security headers, and explicit contact information, which are important for trust and compliance. The security posture is basic, with room for improvement in implementing security best practices and compliance documentation. Overall, the website presents a legitimate and stable business entity with moderate digital maturity.

Burgenland Messe Betriebsges.m.b.H. & Co. KG operates a regional trade fair and exhibition center in Oberwart, Austria, focusing on events such as educational fairs, gourmet exhibitions, building trade shows, and emergency services expos. The website serves as an informational portal linking to partner event sites and providing contact details and company information. The target audience includes local residents, students, professionals, and enthusiasts interested in education, career development, gastronomy, construction, and emergency services within the Burgenland region. Technically, the website employs a standard modern stack including Bootstrap, jQuery, and popular UI plugins like Owl Carousel and Master Slider. The site is mobile optimized with a cookie consent mechanism compliant with GDPR. However, no advanced CMS or analytics tools are detected, indicating a straightforward, content-focused implementation. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed from domain and typical practice though SSL details not explicit), and implements cookie consent. However, no explicit security headers or incident response policies are publicly disclosed. No vulnerabilities or sensitive data exposures are evident. WHOIS data aligns well with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the website is professional and trustworthy for its regional event business purpose. Strategic improvements could include enhanced security headers, public security policies, and more comprehensive privacy disclosures to strengthen compliance and trust.

M

MicroMedia

micromedia.ba

46

MicroMedia is a small, professional full-service digital marketing and creative agency based in Bijeljina, Bosnia and Herzegovina. The company specializes in web design, graphic design, online marketing, and related creative services, targeting businesses seeking to enhance their digital presence. The website reflects a consistent brand image with a well-structured portfolio and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user experience, demonstrating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BitLab

privreda.org

44

Privreda.org is a regional business portal focused on companies and entrepreneurs in Republika Srpska and the Federation of Bosnia and Herzegovina. Operated by BitLab, the portal provides a categorized business directory, promotional services including company web page creation, advertising on the portal and social media, and additional marketing and hosting services. The website is well-established with a domain age since 2002, indicating a stable market presence. The portal targets local businesses seeking increased visibility and digital presence within the regional market. Technically, the website uses a custom CMS with common web technologies such as jQuery, Bootstrap, Font Awesome, and Slider Revolution. Hosting is provided by BitLab, the same organization listed as the domain registrant, ensuring consistency. The site is moderately performant and mobile optimized, with basic SEO and accessibility features. Advertising is integrated via Google Adsense and Twitter widgets, with minimal user tracking. From a security perspective, the site uses HTTPS and secure form tokens but lacks advanced security headers and DNSSEC. No privacy, cookie, or terms of service policies are published, indicating gaps in compliance and transparency. Incident response and vulnerability disclosure information are absent. The WHOIS data aligns well with the website content and hosting, supporting legitimacy. Overall, the website is a functional and moderately professional business portal with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

BitLab d.o.o.

eposao.info

48

ePosao.info is an established online job board platform founded in 2006, primarily serving the Balkan region including Bosnia and Herzegovina, Serbia, Croatia, and Montenegro. The platform facilitates job seekers and employers by providing job listings, candidate searches, and human resource management tools. The website is developed and hosted by BitLab d.o.o., a regional IT service provider. The platform targets a regional audience with multilingual support and a focus on quick and easy recruitment processes. Technically, the website uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, but includes some outdated components like Flash-based upload plugins and older jQuery versions. Security posture is moderate with HTTPS enabled but lacking modern security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from modernization and improved compliance.

The website autoberza.biz serves as an informational platform focused on moving services, specifically targeting local and commercial moving needs in the New Rochelle, Scarsdale, and broader New York City area. It provides blog articles offering advice on selecting moving companies, planning moves, and the benefits of professional movers. The business model appears to be service information and lead generation for moving services, catering primarily to individuals and businesses planning relocations. The site is relatively new, with domain registration dating back to 2021, consistent with a small local service provider. Technically, the website is built on WordPress using the Sparkling theme, leveraging common web technologies such as jQuery, Bootstrap, and FontAwesome. Hosting is provided by Vultr, and the site uses HTTPS, ensuring basic transport security. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. The site lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. From a security perspective, the site has a basic security posture with HTTPS enabled but no additional security headers or published security policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies, contact information, and incident response details reduces compliance and trustworthiness. No analytics or tracking scripts were detected, suggesting minimal user tracking. The domain registration is privacy protected but uses a reputable registrar, with no suspicious patterns detected, supporting legitimacy. Overall, the website is functional and provides relevant content for its target audience but lacks critical compliance and security features. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture, supporting better business credibility and user confidence.

N

NALAS

nalas.eu

43

NALAS is a well-established non-profit network representing local authorities across South-East Europe, coordinating regional initiatives and promoting decentralisation and European integration. The website is professionally designed using WordPress, with good mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS but could be improved by adding security headers and incident response information. Contact information is limited to a newsletter subscription form, which restricts direct communication channels. Overall, the site reflects a credible and trustworthy organization with room for compliance and security enhancements.

S

Sveriges Kommuner och Regioner

skr.se

61

Sveriges Kommuner och Regioner (SKR) is a well-established Swedish government-related membership and employer organization representing all municipalities and regions in Sweden. The organization provides policy development, employer services, research, and member support to enhance welfare services. The website reflects a mature digital presence with a clear focus on public sector stakeholders in Sweden. Technically, the site uses modern JavaScript frameworks including React and jQuery, hosted on Basefarm infrastructure with SiteVision CMS. Analytics are implemented via Piwik Pro with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and some security headers are missing. Contact information is clearly provided, and the site maintains a professional and trustworthy appearance.

The European Platform of Transport Sciences (EPTS Foundation e.V.) operates as a non-profit organization dedicated to advancing transport sciences across Europe. Their website highlights key activities such as organizing the European Transport Congress and publishing the open-access European Transport Studies journal in collaboration with Elsevier. The target audience primarily consists of transport scientists, academics, and professionals interested in sustainable mobility and transport research. The organization positions itself as a reputable platform fostering scientific discourse and collaboration in the transport sector. Technically, the website is built on the Contao Open Source CMS and leverages several JavaScript libraries including jQuery, jQuery UI, MediaElement.js, Colorbox, and Swipe.js to enhance user experience. The site is moderately optimized for mobile devices and presents a clear navigation structure. However, some SEO and accessibility features could be improved. The website uses HTTPS as indicated by the base URL, but lacks visible security headers which could enhance its security posture. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, it lacks a cookie consent mechanism and visible security policies such as incident response or vulnerability disclosure. The WHOIS data is not publicly available due to EURid privacy policies, but this is typical for European domains and does not raise immediate concerns. Overall, the site demonstrates a moderate security posture with room for improvement in compliance and transparency. The overall risk assessment is low, with recommendations focusing on enhancing security headers, implementing cookie consent for GDPR compliance, publishing clear security policies, and improving accessibility and SEO. These steps would strengthen trust and compliance while supporting the organization's mission in transport sciences.

A

Aurora Club

auroraclub.hr

46

Aurora Club is a well-established hospitality and entertainment venue located in Primošten, Croatia, known for its large-scale nightclub facilities, multiple bars, dining options, and event hosting capabilities. The business targets tourists and locals seeking nightlife and party experiences, positioning itself as one of the premier clubs on the Croatian coast. The website reflects a mature digital presence built on WordPress with a modern theme and common plugins, offering good content quality and user experience. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response information. Overall, the site is trustworthy and professionally maintained, with clear contact channels and social media integration.

The website 'Aboutbags' serves as a brand selection portal for various luggage and bag brands under the Samsonite IP Holdings umbrella. It provides users with a simple interface to choose among brands such as Tumi, Samsonite, American Tourister, and others, likely targeting consumers interested in travel goods. The site is branded consistently with official logos and a copyright notice referencing Samsonite IP Holdings S.à r.l., indicating a legitimate business association. From a technical perspective, the site uses jQuery and jQuery Modal libraries loaded from an external domain, with basic mobile responsiveness and moderate performance. The HTML structure is valid but minimal, lacking advanced SEO or accessibility features. No CMS or hosting provider information is discernible from the content provided. Security posture is moderate; the site does not expose sensitive data or contain forms collecting personal information, but lacks visible security headers and privacy-related policies. There is no evidence of HTTPS enforcement or SSL configuration details in the provided data. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content detected. However, the absence of privacy, cookie, and terms of service policies, as well as contact information, limits its compliance and user trust. The domain registration aligns well with the business entity, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's trustworthiness and security posture.

I

interstruct AG

interstruct.com

55

interstruct AG is a Berlin-based digital creative agency specializing in UX/UI design, web development, and digital strategy. The company positions itself as a specialist in transforming complex business challenges into impactful digital platforms, focusing on measurable results and user-centric solutions. Their key services include consulting, concept development, UX/UI design, content creation, technical implementation, and analytics. The website reflects a mature, professional business with a consistent brand and clear market positioning in the technology sector.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

S

Staples, Inc.

staplespromo.com

76

StaplesPromo.com is an enterprise-level e-commerce website operated by Staples, Inc., specializing in custom promotional products such as apparel, drinkware, tech accessories, and office essentials. The site targets businesses and organizations seeking branded merchandise to enhance their marketing efforts. It features a large catalog of over 4000 products and showcases trust signals including logos of major global brands. The business model is retail e-commerce with a focus on customization and branding services. The website is well-branded, professionally designed, and offers a seamless user experience with clear navigation and mobile optimization. Technically, the site leverages a modern tech stack including jQuery, Bootstrap, Dynamic Yield for personalization, Google Tag Manager, Adobe DTM, and TrustArc for consent management. It is hosted on a CDN infrastructure (Akamai) ensuring moderate performance and global reach. The platform used is Znode, a specialized e-commerce CMS. Accessibility is basic but functional, and SEO practices are good with proper meta tags and structured data. From a security perspective, the site enforces HTTPS, uses domain locking statuses to prevent unauthorized changes, and implements a consent management platform for GDPR compliance. A vulnerability disclosure policy is publicly available, indicating a mature security posture. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not found. No vulnerabilities or suspicious domains were detected. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and solid technical implementation. Recommendations include enabling DNSSEC, publishing explicit security policies, and enhancing accessibility compliance to further improve security and user trust.

I

InterSoft d.o.o. Sarajevo

klix.ba

65

Klix.ba is the most visited and influential news portal in Bosnia and Herzegovina, providing fast and important news from Sarajevo, the country, and the world. The website operates on an advertising-supported business model, leveraging multiple ad networks including Amazon Ads, PubMatic, and Google Ad Manager. The technical infrastructure includes modern JavaScript libraries, consent management via Didomi, and analytics through DotMetrics and Google Analytics. The site is well-optimized for mobile and desktop users with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement, bot protection via reCAPTCHA, and GDPR-compliant consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, Klix.ba presents a professional, trustworthy, and compliant digital presence with a strong market position in the media sector of Bosnia and Herzegovina.

NEŠKOVIĆ Group is a well-established company based in Bosnia and Herzegovina, specializing in the wholesale and retail of petroleum products, automotive sales and services, hospitality, and retail markets. The company operates multiple subsidiaries including insurance and auto centers, positioning itself as a regional leader with a broad service portfolio. The website reflects a professional digital presence built on WordPress with WooCommerce and other common plugins, offering a good user experience and clear business information. However, the technical infrastructure shows signs of aging with outdated WordPress versions and missing modern security headers. Security posture is moderate with HTTPS enforced but lacking comprehensive security policies or vulnerability disclosures. Privacy compliance is minimal, with no visible cookie consent or GDPR indicators. Overall, the website and business appear legitimate and trustworthy, but improvements in security and privacy compliance are recommended.

S

Satwork

satwork.net

57

Satwork is a well-established company founded in 2005 specializing in satellite vehicle tracking and fleet management services primarily in Bosnia and Herzegovina and the surrounding region. The company offers a comprehensive suite of GPS-based solutions including fuel consumption control, driver communication, route optimization, and digital tachograph data management. With subsidiaries in Serbia, Montenegro, and Austria, Satwork maintains a strong regional presence and is recognized as a market leader in its domain. The website reflects a professional and consistent brand image with detailed service descriptions and multiple contact points, supporting its credibility and customer engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. However, there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, Satwork demonstrates maturity by holding ISO 9001 and ISO/IEC 27001 certifications, indicating a commitment to quality management and information security. The website uses HTTPS for secure communications, especially on login forms, and implements user-friendly features like password visibility toggling. Nonetheless, the absence of explicit incident response contacts, vulnerability disclosure policies, and cookie consent mechanisms highlights areas for compliance enhancement. Overall, Satwork presents a trustworthy and professional online presence aligned with its business operations. The main risks relate to privacy compliance gaps and security header omissions, which should be addressed to strengthen user trust and regulatory adherence. Strategic improvements in these areas will enhance the company’s digital maturity and security posture, supporting sustained growth and customer confidence.

R

RedIRIS

rediris.es

69

RedIRIS is a well-established Spanish academic and research network providing connectivity and advanced ICT services to the academic and scientific community since 1988. It operates under the auspices of Red.es, a Spanish public entity, and holds important certifications such as ISO 27001 and ENS, underscoring its commitment to security and quality. The website reflects a professional and consistent brand image targeting academic institutions and researchers in Spain. Technically, the site uses modern web technologies including jQuery, DataTables, and Google Analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and certifications, though explicit security headers and incident response policies are not publicly visible. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy, secure, and professionally maintained, serving a critical role in Spain's academic infrastructure.

R

Red.es

red.es

69

Red.es is a Spanish government entity under the Ministry of Economic Affairs and Digital Transformation, dedicated to promoting digital transformation across businesses, citizens, and public administrations. The website serves as a comprehensive portal for initiatives, news, and resources related to digital innovation and funding programs in Spain. The site is well-structured, professionally designed, and targets a broad audience including SMEs, entrepreneurs, and public sector entities. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap 4.6 and utilizes Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, cookie consent management, and antibot protections on forms. However, some security headers could be improved. The security posture is strong with multiple certifications such as ISO 27001 and compliance with the Spanish National Security Scheme (ENS). No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website reflects a mature digital presence consistent with a government agency, with high trustworthiness and professionalism. The domain WHOIS data is restricted as per .es domain policies, which is typical and appropriate for this entity.

R

Red.es

nic.es

67

Dominios.es is the official Spanish government entity responsible for managing the registration of .es country code top-level domains. It operates under the umbrella of Red.es, a public enterprise of the Spanish government. The website provides comprehensive information and services related to domain registration, management, and security, targeting individuals, businesses, and authorized registrars. The entity holds recognized certifications such as ISO 9001, ISO 27001, and ENS, underscoring its commitment to quality and security. Technically, the site is built on Drupal 10 with modern web technologies and integrates Google Tag Manager and CookiesJSR for analytics and cookie management. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

W

Well BP

wellbp.com

68

Well BP is a newly founded digital consulting agency specializing in custom software development, digital product creation, and digital marketing services. The company positions itself as a trusted partner offering flexible engagement models and comprehensive digital solutions across various industries. Their website is professionally designed using WordPress and integrates modern technologies such as Google Maps API and advanced WordPress plugins. The technical infrastructure is solid with Cloudflare DNS and HTTPS enabled, though there is room for improvement in security headers and privacy compliance. The security posture is moderate with no critical vulnerabilities detected but lacks published security policies and cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy, targeting businesses seeking digital transformation services.

K

Karlsruher Pässe

karlsruher-pass.de

49

Karlsruher Pässe operates as a regional government-supported social benefit program providing passes such as the Karlsruhe Pass, Children's Pass, and 60 Plus Pass to residents of Karlsruhe and surrounding municipalities. The website serves as an informational and service portal, offering access to social discounts, cooperation details, and contact points for multiple municipalities. The business model focuses on social inclusion and support through municipal partnerships, positioning itself as a trusted regional social service provider. Technically, the website is built on WordPress with modern plugins like Slider Revolution and Borlabs Cookie for consent management. The infrastructure is hosted by saasweb.gmbh and uses standard web technologies including jQuery and Bootstrap. The site is moderately performant, mobile-optimized, and SEO-friendly, with good content quality and consistent branding. Security posture is adequate with HTTPS enabled and cookie consent implemented. However, some security headers are not explicitly detected, and there is room for improvement in security best practices such as CSP implementation and plugin vulnerability management. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact information and policies. It is safe for general audiences and does not contain adult or questionable content. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features.

J

John Brightman

john-brightman.com

10

John Brightman is a Paris-based creative agency specializing in web design, brand identity, graphic design, UI/UX, and digital strategy. Founded in 2009, the company emphasizes agile, personalized teams and long-term client relationships, serving a diverse range of businesses seeking professional branding and digital presence. The website reflects a mature digital infrastructure built on WordPress with Elementor, enhanced by SEO and performance optimizations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The missing WHOIS data raises some concerns about domain registration legitimacy, but the professional presentation and compliance with GDPR indicate a trustworthy business. Strategic improvements in security headers, contact transparency, and WHOIS clarity would enhance trust and compliance.

D

Deutsche Universitätsstiftung

deutsche-universitaetsstiftung.de

41

Deutsche Universitätsstiftung is a German foundation established in 2009 that aims to bridge science, economy, and society. The website presents itself as a professional platform built on TYPO3 CMS, targeting academic institutions, researchers, and industry partners. The foundation operates in the education and non-profit sectors, focusing on fostering cooperation between universities and the economy. Technically, the website uses modern frameworks and libraries such as TYPO3 CMS, Bootstrap, and jQuery, hosted on German nameservers. The site shows good design quality and mobile optimization but lacks comprehensive privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with no detected security headers or incident response information, and SSL configuration details are not provided. Overall, the domain registration data aligns well with the business profile, supporting legitimacy.

Neue Messe Fulda GmbH operates as a regional event organizer and exhibition host based in Fulda, Germany. The company specializes in organizing trade fairs, public exhibitions, conferences, and congresses, providing a platform for businesses and visitors to connect. Their website reflects a professional and consistent brand image, targeting event organizers, exhibitors, and attendees interested in specialized trade fairs and public events. The business model centers on event management and exhibition services, positioning Neue Messe Fulda as a key player in the regional events market. Technically, the website is built on the Odoo CMS platform, utilizing modern frontend technologies such as Bootstrap and jQuery, with integrations like LightGallery for media display and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS with a valid SSL configuration and a cookie consent mechanism, although some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a reasonable posture with encrypted communications and CSRF token usage. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-aligned cookie consent and a privacy policy page. Overall, the website is trustworthy, professionally maintained, and suitable for its business purpose. Strategic enhancements in security transparency and policy publication would further strengthen its compliance and trustworthiness.

M

mCloud doo

sdgs4all.rs

49

The website 'Održivi razvoj za sve' is a Serbian platform dedicated to facilitating public dialogue and information sharing on the Sustainable Development Goals (Agenda 2030) within Serbia. It operates as a non-profit initiative, supported by multiple partner organizations, and targets policymakers, NGOs, and the general public interested in sustainable development. The platform offers resources such as news, newsletters, e-learning modules, and document repositories to support its mission. Technically, the site is built on WordPress 6.8.2, utilizing modern web technologies including jQuery, OwlCarousel, FontAwesome, and Slider Revolution. It employs Matomo analytics for user tracking, indicating a privacy-conscious approach. The website is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and some recommended security headers. There is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is present. Cookie consent is implemented, but no explicit privacy policy page was found, which is a compliance gap. Overall, the website presents a professional and trustworthy front for its niche non-profit mission. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving accessibility features to strengthen compliance and user trust.

I

Imagine 2030

zamisli2030.ba

45

Imagine 2030 is a government and non-profit aligned platform dedicated to promoting and implementing the Sustainable Development Goals (SDGs) in Bosnia and Herzegovina. It serves as a central hub for information dissemination, event promotion, and resource sharing related to Agenda 2030. The platform targets government bodies, local self-governments, businesses, NGOs, and citizens interested in sustainable development. The website is built on WordPress using modern themes and plugins, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

А

Аутопутеви Републике Српске

autoputevirs.com

46

Аутопутеви Републике Српске is a public enterprise responsible for the construction, maintenance, and management of highways and major roads in Republika Srpska, Bosnia and Herzegovina. The website serves as an information portal for infrastructure projects, public procurement, and traffic updates, targeting citizens, drivers, and governmental stakeholders. The company holds a significant position as a key state entity in transportation infrastructure within the region. Technically, the website is built on WordPress, utilizing common plugins such as RevSlider and Contact Form 7, with Google Analytics for traffic monitoring. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some modern security headers and privacy compliance mechanisms are missing, indicating room for improvement in security and GDPR adherence. Security posture is moderate, with HTTPS enforced and domain transfer protection enabled, but lacking DNSSEC and advanced security headers. No vulnerability disclosure or incident response information is publicly available. Overall, the site is trustworthy and professionally maintained but could enhance its security and privacy compliance. The overall risk is low, but strategic improvements in security headers, cookie consent, and transparency policies are recommended to strengthen compliance and user trust.

The website represents the Savez opština i gradova Republike Srpske, a governmental and non-profit organization supporting municipalities and cities in Republika Srpska, Bosnia and Herzegovina. It provides information on organizational structure, program areas, projects, news, and events, targeting local governments and citizens. The site demonstrates a stable market position as a local government representative with strong international partnerships. Technically, the website uses a modern frontend stack including Bootstrap 4, jQuery, Owl Carousel, and integrates third-party services such as Google Analytics and Mailchimp. It enforces HTTPS and uses client-side redirection to ensure secure connections. However, no CMS or hosting provider is explicitly identified, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a moderate posture with HTTPS enforced and domain transfer protection enabled. However, it lacks DNSSEC, explicit security headers, privacy and cookie policies, and incident response contacts. No vulnerabilities or malware indicators were found in the content. The site is safe for general audiences with no adult or questionable content. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen trust and regulatory adherence.

A

Auto-moto savez Republike Srpske

ams-rs.com

49

Auto-moto savez Republike Srpske is a well-established non-profit organization providing roadside assistance, traffic updates, and membership services primarily in Republika Srpska, Bosnia and Herzegovina, and Europe. The website reflects a mature digital presence with a WordPress-based infrastructure, interactive maps, and live border crossing information. The organization targets local residents and travelers, offering key services such as emergency assistance and safety campaigns. The domain is long-standing and consistent with the organization's identity, enhancing trustworthiness. Technically, the site uses modern web technologies and plugins but lacks advanced security headers and DNSSEC, which could improve its security posture. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap for GDPR and regional regulations. Overall, the website is professional and functional with room for security and compliance improvements.

А

Агенција за безбједност саобраћаја Републике Српске

bslzrs.org

44

The website bslzrs.org represents the Agency for Traffic Safety of Republika Srpska, Bosnia and Herzegovina. It primarily serves as an informational platform for the XIV International Conference on Traffic Safety in Local Communities, providing detailed content about traffic safety statistics, conference agenda, speakers, thematic areas, and organizational committees. The agency operates as a governmental and non-profit entity focused on improving traffic safety through research, awareness, and collaboration with regional and international partners. The website targets professionals, researchers, and government officials involved in traffic safety and local community development. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, Slick Carousel, and Google Maps API integration. It is hosted on Bitlab Hosting and demonstrates moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic, and no CMS or advanced platforms are detected. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The WHOIS data shows privacy protection and a recent domain registration date, which is somewhat inconsistent with the historical content but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it requires improvements in privacy compliance, security headers, and transparency to enhance its security posture and regulatory adherence.

B

Bündnis für Demokratie und Menschenrechte

buendnis-demokratie-menschenrechte.de

47

The website 'Bündnis für Demokratie und Menschenrechte' represents a regional civil society and governmental alliance based in Baden-Württemberg, Germany, focused on promoting democracy and human rights. It serves as a platform for organizations, churches, political parties, and governmental institutions to collaborate and advocate for these values. The website is built on WordPress using the Divi theme and includes event management functionality via the Modern Events Calendar plugin. The technical infrastructure is modern and moderately optimized for performance and mobile devices, with good SEO practices implemented through the Rank Math plugin and structured data markup. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response contact information. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

The website 'Hadž i umra BiH – Ured za hadž i umru' serves as the official governmental portal for organizing and providing information about Hadž and Umra pilgrimages for citizens of Bosnia and Herzegovina. It offers news, guidelines, and organizational details relevant to pilgrims, positioning itself as the authoritative source in this religious sector within the country. The site targets the Bosnian Muslim community and operates under a governmental/non-profit business model, emphasizing service and information dissemination. Technically, the website is built on WordPress 6.8.2, utilizing common plugins such as WPBakery Page Builder, Everest Forms, Contact Form 7, and Google reCAPTCHA v3 for form security. The design is modern and mobile-optimized, with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in hosting and optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, with a high business credibility score but moderate security and privacy compliance scores. Strategic improvements in privacy policy publication, security header implementation, and accessibility would enhance its security posture and compliance standing.

M

meinKölnBonn

meinkoelnbonn.de

48

meinKölnBonn is a regional content platform operated in affiliation with Sparkasse KölnBonn, providing residents of the Köln and Bonn area with financial advice, lifestyle content, business insights, and local event information. The website positions itself as a trusted source for regional financial and lifestyle topics, leveraging the brand strength of Sparkasse KölnBonn. Technically, the site is built on WordPress with modern frontend technologies such as Swiper.js and lazy loading for images, ensuring a good user experience and mobile optimization. SEO practices are well implemented with Yoast SEO and structured data markup. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the site lacks explicit security headers and a public security policy. Privacy compliance is moderate, with a cookie consent mechanism present but no explicit privacy policy page found. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Middle East Network Operators Group

menog.org

67

The Middle East Network Operators Group (MENOG) operates as a regional platform for Internet network operators and key Internet builders in the Middle East. It facilitates knowledge sharing through meetings, roadshows, and fellowship programs, positioning itself as a vital community organization in the telecommunications sector. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of network professionals. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics with cookies disabled, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the site is trustworthy and functional but could improve transparency and security practices to enhance credibility and compliance.

I

Internacionalni teatarski festival MESS

mess.ba

59

The Internacionalni teatarski festival MESS website serves as the official online presence for a well-established cultural and theatrical festival in Bosnia and Herzegovina. It provides comprehensive information about upcoming events, exhibitions, and festival news, targeting theater enthusiasts and the cultural community. The website leverages a modern WordPress infrastructure with popular plugins such as Elementor and Slider Revolution, ensuring a visually appealing and moderately performant user experience. However, it lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR adherence and user trust. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the site is credible and professional but would benefit from enhanced privacy and security practices.

P

Promotim d.o.o.

promotim.ba

44

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

D

Deutscher Landkreistag

landkreistag.de

66

The Deutscher Landkreistag (DLT) is a prominent German government association representing 294 counties, covering 96% of the country's area and serving 68% of its population. The website serves as an information hub for news, publications, events, and digital projects related to county-level governance and administration. It targets municipal officials, policymakers, and stakeholders in local government. The organization operates as a non-profit entity focused on advocacy and support for counties in Germany. Technically, the website is built on Joomla CMS with the Gantry 5 framework, leveraging modern JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia integration. Cookie consent mechanisms are implemented, reflecting GDPR compliance. However, explicit security policies and incident response information are not published. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks visible security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing consistent registration and legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its government audience effectively. Strategic improvements could include publishing detailed security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to strengthen security posture and transparency.

HERDT-Verlag für Bildungsmedien GmbH operates HERDT|Campus, a digital educational media platform targeting academic institutions in Germany. The platform restricts access to authorized university networks, providing exclusive learning content for research and teaching. The company has a stable market position as a niche provider of digital educational resources, founded in 2013 and maintaining consistent branding and contact transparency. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and the Yii framework, with Cloudflare DNS services enhancing infrastructure reliability. However, the site shows basic SEO and accessibility features and lacks visible advanced security headers or cookie consent mechanisms. Security posture is moderate, with domain registration and DNS configurations indicating legitimacy but missing DNSSEC and security policy disclosures. Overall, the site is safe, professional, and targeted at a general academic audience, but improvements in privacy compliance and security best practices are recommended.

E

Europ Assistance

europ-assistance.com

63

Europ Assistance is a globally recognized assistance and insurance company, operating since 1963 and part of the Generali Group. The company provides a broad range of services including travel insurance, mobility assistance, home and living support, health services, senior care, and concierge offerings. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to both consumers and business partners worldwide. Technically, the site is built on WordPress using Elementor, enhanced with modern plugins and analytics tools such as Piwik PRO, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and corporate affiliation. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party plugin security.

D

Dieter-Kaltenbach-Stiftung

kita-ideenreich.de

40

The website represents KiTa ideenReich, a childcare facility operated by the Dieter-Kaltenbach-Stiftung and affiliated with Roche. It targets families seeking quality early childhood education and care, emphasizing developmental support and inclusion. The site is well-structured, professionally designed, and provides clear information about the facility's offerings and operational hours. Technically, the site uses a modern stack including jQuery and Bootstrap 4, hosted on a reliable provider with consistent domain registration data. Security posture is adequate with HTTPS usage, but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No forms or email contacts are directly visible, limiting direct digital communication channels. Overall, the site is trustworthy, safe, and serves its educational mission effectively.

D

Dieter-Kaltenbach-Stiftung

kita-am-baechle.de

43

KiTa Am Bächle is a childcare and kindergarten service provider located in Lörrach, Germany, operated by the Dieter-Kaltenbach-Stiftung foundation. The website serves as an informational portal for parents seeking childcare options, including a nature-focused kindergarten. The business model is non-profit and community-oriented, targeting local families exclusively. The site demonstrates a consistent brand presence and clear navigation, supporting its role as a trusted local childcare provider. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap 4, and FontAwesome, with a responsive design optimized for mobile devices. The CMS appears to be REDAXO, and hosting is likely provided by kasserver.com. Performance is moderate with good SEO practices, though accessibility features are basic. No advanced analytics or tracking scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and email obfuscation but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No forms or sensitive data collection points were found in the provided content, reducing immediate risk exposure. The WHOIS data is structured but lacks detailed registrant information, though no suspicious patterns were identified. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

Spiel- und Kulturhaus Tutti Kiesi

tuttikiesi.de

50

Tutti Kiesi is a small non-profit cultural and educational organization based in Rheinfelden, Germany, providing a variety of community services including creative courses, holiday programs, group offers, leisure activities, care, and venue rentals. The website is well-structured, professionally designed, and targets children, youth, and adults in the local community. Technically, the site uses a PHP backend with REDAXO CMS, Bootstrap 4, jQuery, and FontAwesome, hosted on kasserver.com. It is mobile optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and session management in place, though security headers and incident response policies are not explicitly published. No vulnerabilities or suspicious domains were detected. Overall, the website is trustworthy and safe with no adult or questionable content.

D

Dobra knjiga

dobraknjiga.ba

56

Dobra knjiga is a well-established Bosnian bookstore and publisher specializing in offset and digital printing, publishing, and design services. With over 18 years of experience, it serves readers across Bosnia and Herzegovina and the diaspora, offering a curated selection of quality books through an online e-commerce platform. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail and publishing operations. Security posture is solid with HTTPS and password strength enforcement, though improvements in security headers and GDPR compliance mechanisms are recommended. Overall, the site presents a professional and trustworthy online presence with clear contact information and active social media engagement.

UniCredit Bank Bosnia and Herzegovina operates a professional and comprehensive retail banking website offering a wide range of financial products including loans, savings, digital banking, and insurance. The bank is part of the UniCredit Group, a well-established international banking group, which is reflected in consistent branding and domain registration data. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager CMS, Adobe Analytics, and Tealium tag management, supporting a good user experience and mobile optimization. Security measures include HTTPS enforcement and Content Security Policy headers, although some improvements in header strictness are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes multiple channels such as phone, email, and online forms. Overall, the website is trustworthy, professionally maintained, and suitable for general audiences.

B

BH Telecom d.d. Sarajevo

bhtelecom.ba

65

BH Telecom d.d. Sarajevo is the leading telecommunications operator in Bosnia and Herzegovina, offering a comprehensive range of services including mobile telephony, fixed telephony, internet access, television services, and device sales. The company targets both private and business customers within the country, maintaining a strong market position supported by a professional and well-structured website. The digital infrastructure is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's business stature.