Security Directory

The website www.supportandgo.com operates as a service platform for multiple well-known luggage brands including Samsonite, American Tourister, Tumi, Lipault, Gregory, and Hartmann. It provides users with tools to find service support, parts delivery, pick-up services, and dispute resolution. The site targets both consumers and dealers, positioning itself as a key service facilitator within the luggage retail sector. The branding is consistent and professional, reflecting the established reputation of the Samsonite group. Technically, the website is built on ASP.NET MVC framework and utilizes common libraries such as jQuery, Modernizr, and Bootstrap. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Security measures include the use of anti-forgery tokens in forms, but there is a lack of explicit security headers and cookie consent mechanisms, which are areas for improvement. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks important HTTP security headers such as Content Security Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional appearance and brand alignment of the website. Overall, the website presents a moderate risk profile with good business credibility but technical and security gaps that should be addressed. Strategic recommendations include verifying domain registration, implementing comprehensive security headers, adding cookie consent mechanisms, and publishing clear security and incident response policies to enhance trust and compliance.

А

Агенција за безбједност саобраћаја Републике Српске

absrs.org

48

The website absrs.org represents the Агенција за безбједност саобраћаја Републике Српске, a government agency dedicated to traffic safety in Republika Srpska, Bosnia and Herzegovina. The agency provides comprehensive information on traffic laws, safety campaigns, licensing procedures, and statistical data to support safer road usage. The site targets the general public, local communities, and government stakeholders, positioning itself as an authoritative source for traffic safety in the region. Technically, the website employs a moderate technology stack including Bootstrap for responsive design, jQuery, Slick Carousel, and Fancybox for UI elements, alongside Google Fonts and Google Analytics for tracking. Hosting is managed by BitLab, with domain registration dating back to 2012, indicating an established presence. The site is accessible, mobile-optimized, and features clear navigation, although some SEO and accessibility features are basic. From a security perspective, the site uses HTTPS URLs but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is implemented via an older ga.js script, and no cookie consent mechanism is detected. The WHOIS data is transparent and consistent with the agency's government status, supporting legitimacy. Overall, the website is functional and trustworthy as a government information portal but would benefit from improved security practices and privacy compliance to enhance user trust and regulatory adherence.

HugeDomains operates as a reputable domain marketplace specializing in the sale of premium domain names, offering customers options to purchase domains outright or through payment plans. The company has been in business since 2005 and serves a broad audience of businesses and individuals seeking memorable and SEO-friendly domain names. The website is professionally designed with clear navigation, customer testimonials, and trust signals such as a 30-day money back guarantee and secure payment options including PayPal and Escrow.com. Technically, the site employs modern JavaScript libraries, Google Analytics for tracking, and Google reCAPTCHA for bot protection, ensuring a secure and user-friendly experience. However, explicit security policies and incident response information are not publicly available, and WHOIS data for the domain is missing or inaccessible, which slightly impacts trust assessments. Overall, the site demonstrates a strong security posture with HTTPS and SSL encryption, complemented by cookie consent mechanisms and privacy policies that indicate GDPR compliance. The business model is clear and well-positioned in the e-commerce domain sales sector, with a medium-sized operational scale and consistent branding.

R

Republički centar za istraživanje rata, ratnih zločina i traženje nestalih lica

rcirz.org

44

The Republika Srpska Center for Research of War, War Crimes, and Searching for Missing Persons is a government institution dedicated to the investigation, documentation, and analysis of war crimes and missing persons related to conflicts in Bosnia and Herzegovina and the former Yugoslavia. The organization provides expert services including data archiving, forensic support, and cooperation with judicial and international bodies. The website serves as an informational and research platform primarily targeting government entities, researchers, and families of missing persons. Technically, the website is built on WordPress using the Divi theme, incorporating standard SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and comprehensive privacy compliance features. The absence of visible contact information and policy documents limits user trust and regulatory adherence. From a security perspective, the site uses HTTPS but does not implement key security headers, and the WHOIS data is incomplete, which raises concerns about domain transparency. No forms or sensitive data collection mechanisms were detected, reducing immediate risk exposure. However, the lack of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Overall, the website reflects a legitimate government entity with a focused mission but requires improvements in transparency, security best practices, and privacy compliance to enhance trustworthiness and regulatory alignment.

Ц

Центар за бесплатну правну помоћ

mpr-centar.org

54

The website represents the 'Центар за бесплатну правну помоћ', a government-affiliated legal aid center in Republika Srpska, Bosnia and Herzegovina. It provides free legal assistance and representation before courts and other competent authorities, targeting socially vulnerable citizens. The organization is established by the Government of Republika Srpska and operates through offices in multiple cities. The website is built on WordPress using the Divi theme and employs Yoast SEO for optimization. The technical infrastructure is modern and moderately performant, with mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is high given the official nature and consistent WHOIS data. Overall, the site is professional, trustworthy, and safe for general audiences.

Р

Републички хидрометеоролошки завод

rhmzrs.com

56

The Republika Srpska Hydrometeorological Institute (Републички хидрометеоролошки завод) is a government agency responsible for meteorological, seismological, hydrological, and environmental monitoring and reporting within Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing weather forecasts, seismic activity reports, hydrological bulletins, and environmental quality data primarily in Serbian language. It targets citizens, governmental bodies, agricultural stakeholders, and scientific communities. The business model is a public service institution funded and operated by the government, with a stable market position as the official source of hydrometeorological information in the region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, Leaflet.js for interactive maps, and Axios for asynchronous requests. Hosting is supported by Cloudflare DNS services, enhancing reliability and performance. The site is mobile optimized with good navigation clarity and professional design, though accessibility features are basic. SEO is implemented at a basic level with meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and has domain transfer protections. However, it lacks DNSSEC, security headers like CSP or HSTS, and a cookie consent mechanism, which are areas for improvement. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure policies are published. The WHOIS data aligns well with the website’s governmental nature, showing a consistent registration history and no privacy protection, which is appropriate. Overall, the website is a trustworthy and professional government resource with good content quality and technical implementation. Security posture is moderate with room for enhancements in headers and compliance. Privacy compliance is basic and could be improved with explicit policies and consent mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and security policies, and implementing cookie consent to enhance trust and compliance.

L

Lanaco

nasljedje.org

50

The website represents the official online presence of the Republika Srpska Institute for the Protection of Cultural-Historical and Natural Heritage, a government agency under the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It provides information on cultural and natural heritage protection, public procurement, news, projects, and contact details. The site targets the general public, cultural professionals, and government stakeholders. The business model is a government service institution focused on heritage preservation and public information dissemination. Technically, the website is built on WordPress with common plugins such as Slider Revolution and Unyson Framework, using jQuery and Bootstrap for frontend functionality. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting details are not explicitly stated but domain registration and DNS indicate a stable infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. No privacy or cookie policies are found, indicating compliance gaps. Contact information is clearly provided, enhancing trust. No signs of malicious content or adult material are present. Overall, the website is a credible government resource with good content and moderate technical maturity. Improvements in privacy compliance and security hardening are recommended to enhance trust and protect user data.

W

WINSLOT

koronavirususrpskoj.com

61

The website lighthouseeng.com/michael-gandy/ operates as an Indonesian gambling affiliate platform promoting slot games, specifically Slot88. It targets adult users interested in online gambling, offering links and promotions such as bonuses and cashback. The site uses Magento CMS and integrates various JavaScript libraries and tracking tools including Microsoft Clarity and Google Ads. The domain is well-established, registered since 2007, and uses Cloudflare DNS services. However, the website lacks critical compliance documents such as privacy policy and terms of service, and does not provide any contact information or security policies. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC. Overall, the site is accessible without WAF blocking but exhibits basic content quality and limited privacy compliance.

M

mCloud doo

certrs.org

48

CERT RS is a governmental Computer Emergency Response Team website focused on cybersecurity incident response and awareness in Serbia. The site is built on WordPress with common plugins such as WooCommerce and GiveWP, indicating some donation or e-commerce capabilities. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain is expired, which poses a significant risk to service continuity and trust. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website serves an important governmental function but requires improvements in domain management, security practices, and privacy compliance.

R

Republicka uprava civilne zastite RS

ruczrs.org

45

The website represents the Republic Civil Protection Administration of Republika Srpska, Bosnia and Herzegovina, providing governmental civil protection and emergency preparedness services. It serves as an official communication channel for public safety information, warnings, and organizational updates. The organization is positioned as a regional government authority with a focus on protecting citizens and property from natural and other disasters. The site content is primarily in Serbian Cyrillic, targeting the local population and stakeholders. Technically, the website is built on WordPress CMS with a suite of common plugins for SEO, forms, translation, and media display. The infrastructure is moderately modern with good mobile optimization and SEO practices. Performance is moderate, and accessibility is basic. The site uses HTTPS with a valid SSL certificate but lacks DNSSEC and some security headers, indicating room for security enhancements. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which is critical for GDPR adherence. Business credibility is strong given the official nature, consistent branding, and social media presence. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to enhance user trust and regulatory adherence.

П

Пореска Управа РС

poreskaupravars.org

48

The Poreska Uprava Republike Srpske (Tax Administration of Republika Srpska) is a government entity responsible for the impartial and efficient collection and control of public revenues in Republika Srpska, Bosnia and Herzegovina. The website serves as an official portal providing information, e-services, and updates to taxpayers including individuals, legal entities, and entrepreneurs. It maintains a strong market position as the authoritative tax administration body in the region, offering key services such as e-fiscalization and electronic services to facilitate tax compliance. The site is multilingual, primarily in Serbian Cyrillic and Latin scripts, with an English version available, targeting local citizens and businesses.

B

Biserje

biserje.ba

48

Biserje is an online cultural magazine based in Bosnia and Herzegovina, focusing on the intersection of tradition and modernity in culture and society. It serves a niche audience interested in Bosnian history, Islam, art, and social topics. The website is powered by WordPress with a modern tech stack including Elementor and Yoast SEO, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism detected. Overall, the site is legitimate, professionally presented, and trustworthy within its domain.

N

Nelnet Inc

nelnetinc.com

68

Nelnet Inc is a diversified enterprise primarily focused on student loan servicing, education technology, government services, consumer financial services, and renewable energy investments. Founded in 2000 and publicly traded on the NYSE (NNI), Nelnet serves millions of customers across multiple sectors including education, government, and finance. The company operates numerous subsidiaries and business units, offering a broad range of services from loan servicing to payment processing and fiber communications. Their market position is strong, supported by decades of experience and a large associate base. Technically, Nelnet's website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with company history. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, it lacks visible security headers and published security policies or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Tracking technologies such as Google Tag Manager and Facebook Pixel are used, indicating moderate user tracking. Overall, Nelnet presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Security posture is solid but could be enhanced by adding security headers and formal incident response disclosures. No critical vulnerabilities or blocking mechanisms were detected, and the content is safe for general audiences.

N

Nelnet, Inc.

nelnetinvestors.com

65

Nelnet, Inc. operates a comprehensive investor relations website providing detailed financial information, corporate governance documents, and shareholder communications. The company is positioned as a large, diversified entity primarily engaged in loan servicing, education technology, payment processing, and investments in communications and renewable energy sectors. The website targets investors, shareholders, and financial analysts with a professional and content-rich platform. Technically, the site leverages the Q4 Inc investor relations platform with modern JavaScript libraries and is optimized for accessibility and mobile use. Security posture is strong with HTTPS, anti-CSRF tokens, and cookie consent mechanisms, though some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with clear policies and GDPR indicators. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional content and official filings presented.

D

Deutsche Gesellschaft Club of Rome

clubofrome.de

49

The Deutsche Gesellschaft Club of Rome is a well-established non-profit organization focused on sustainability, future studies, and fostering knowledge exchange to promote a life-supporting future. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that aligns with the organization's mission. Technically, the site is built on WordPress with modern plugins and integrations such as Google Analytics and Iubenda for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration data is consistent and supports the legitimacy of the organization. Overall, the site presents a trustworthy and professional image suitable for its target audience.

E

Emarsys

emarsys.net

70

SAP Emarsys is a well-established enterprise providing an AI-powered omnichannel customer engagement platform targeted at marketers and large enterprises. The company is recognized as a leader in personalization and marketing automation, supported by industry accolades such as Gartner Magic Quadrant and IDC ROI reports. The website demonstrates a mature digital infrastructure with a modern tech stack, including WordPress CMS, advanced marketing tools, and analytics services. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is evident with privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a professional, trustworthy, and technically sound enterprise presence.

P

Pluro

wp-accessibility.org

64

Pluro is a technology company specializing in web accessibility solutions, offering an accessibility operating system, widget, and scanner-fixer tools to help developers and website owners make their sites accessible. The company positions itself as a niche provider in the accessibility technology market, offering a SaaS subscription model with a free trial. Technically, the website is built on WordPress with WooCommerce and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and FullStory. The site includes accessibility features and an accessibility toolbar, reflecting its business focus. Security-wise, the site uses HTTPS and some security-related plugins but lacks explicit security headers in the HTML source, which could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or terms of service detected. Overall, the domain WHOIS data is privacy protected, which is reasonable for this business type, and the website appears legitimate and professional.

M

Marq

debitmarketinghub.com

70

Marq is a technology company specializing in a SaaS platform for creating and managing visual content such as flowcharts, diagrams, and marketing materials. The platform targets businesses and educational institutions, offering collaboration and design tools to enhance productivity and communication. Marq positions itself as an established player in the online visual content creation market with a comprehensive template library and integration capabilities. Technically, Marq employs a modern web technology stack including Angular, jQuery, and various third-party services such as Google Tag Manager, Amplitude Analytics, and Marketo for marketing automation. The platform is hosted likely on AWS infrastructure, leveraging CDN and cloud services for performance and scalability. The website demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, Marq enforces HTTPS, uses reCAPTCHA for bot protection, and integrates OAuth and SSO for identity management. Security headers and cookie policies are implemented, though explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. The WHOIS data for the subdomain app.marq.com is unavailable, which is typical for subdomains, and does not raise immediate concerns. Overall, Marq presents a professional, secure, and privacy-conscious web presence suitable for enterprise customers. Strategic recommendations include publishing incident response details, adding a vulnerability disclosure policy, and continuous monitoring of third-party dependencies to maintain security posture.

D

Discover

discoverstudentloans.com

69

Discover, a division of Capital One, is a major financial services company with a broad portfolio including credit cards, banking, home loans, and personal loans. The student loans product is no longer offered or serviced by Discover, with active loan accounts transferred to Firstmark Services. The website clearly communicates this transition and provides relevant contact information. The company maintains strong market positioning as a large, trusted financial institution in the United States, supported by certifications such as FDIC membership and BBB accreditation. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics and performance monitoring tools such as Google Analytics, Adobe Launch, Boomerang, and Glassbox. The site is mobile optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced, secure login forms, and bot management scripts, although explicit security headers and cookie consent mechanisms could be improved. Overall, the site is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and WHOIS transparency. The domain WHOIS data is unavailable likely due to registry restrictions rather than suspicious activity. The site does not contain any adult or explicit content and is safe for general audiences.

D

Discover Card

discovercard.com

73

Discover is a major US financial services company specializing in credit card products with a strong market presence and a comprehensive portfolio including cash back, travel, student, and secured cards. The website is professionally designed, mobile-optimized, and rich in content, providing a seamless user experience for consumers seeking credit card options. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple modern marketing and analytics tools, ensuring robust performance and detailed user tracking. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not prominently published. Overall, the site reflects a mature digital infrastructure aligned with enterprise standards.

F

Firstmark Services

firstmarkservices.com

66

Firstmark Services is a division of Nelnet providing secure, innovative, and flexible financial solutions focused on loan servicing, customer service, and portfolio performance. The company targets financial institutions and private loan clients, positioning itself as an investment-grade rated servicer with a strong market presence supported by its parent company Nelnet. The website reflects a professional and trustworthy business with clear service offerings and a user-friendly interface. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and privacy tools such as Google Analytics, Hotjar, and the Transcend Privacy Plugin. Security posture is solid with HTTPS enabled and domain registration protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate a mature digital presence with good security hygiene and compliance awareness.

B

Bildungscampus Karlsruhe

bildungscampus-weststadt.de

56

Bildungscampus Karlsruhe is a cooperative educational and cultural initiative comprising three institutions: Badisches KONServatorium, Volkshochschule Karlsruhe, and Internationales Begegnungszentrum. The website serves as a platform to promote learning, cultural activities, and community events in Karlsruhe, targeting local residents interested in music, language, culture, and social engagement. The business model is non-profit and community-focused, emphasizing inclusivity and diversity. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, ensuring good SEO and privacy compliance. Hosting is provided by PixelX, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with no detected vulnerabilities or suspicious content.

V

Volkshochschule Karlsruhe

vhs-karlsruhe.blog

62

The website 'die vhs Welt' is an educational blog operated by Volkshochschule Karlsruhe, a German adult education institution. It provides content focused on learning, community engagement, and educational topics primarily in German. The site targets a diverse audience including adults, students, and professionals interested in continuing education and language learning. The business model is non-profit and community-oriented, with a strong local presence in Karlsruhe, Germany. Technically, the website is built on WordPress using the Uncode theme and several plugins including The SEO Framework and an interactive 3D flipbook plugin. The site uses HTTPS and has moderate performance and good mobile optimization. SEO practices are well implemented with structured data and meta tags. However, some security headers are missing and DNSSEC is not enabled, which could be improved. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and some HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is minimal on the blog itself but likely available on the main vhs site. Overall, the website is trustworthy, professionally maintained, and suitable for its educational purpose. Strategic recommendations include enabling DNSSEC, adding security headers, and enhancing accessibility features to further improve security and user experience.

I

insaight

insaight.io

65

insaight is a German technology company specializing in AI-powered customer service solutions, particularly a GDPR-compliant KI-VoiceBot that enables 24/7 customer support without wait times. The company targets businesses seeking to optimize customer service through automation and AI. The website is professionally designed, mobile-optimized, and provides clear information about the product benefits, including transparency, control, and data security. The technical infrastructure leverages modern web technologies such as Webflow CMS, Google Tag Manager, Smartlook, and Apollo.io for marketing and analytics, indicating a mature digital presence. Security posture is strong with HTTPS enforced and data hosted exclusively in Germany, ensuring GDPR compliance. However, explicit security policies and incident response details are not publicly available, which could be improved. Overall, insaight presents a trustworthy and professional online presence with a focus on privacy and customer satisfaction.

B

Bošnjačka zajednica kulture

bzk.ba

42

Bošnjačka zajednica kulture (BZK) is a well-established non-profit cultural organization dedicated to preserving and promoting Bosniak culture, literature, and heritage primarily in Bosnia and Herzegovina. The website serves as a platform for news, cultural projects, publications, and events, targeting the Bosniak community and cultural scholars. The organization maintains a consistent brand presence and provides valuable cultural content, positioning itself as a key cultural institution in the region. Technically, the website is built on WordPress using common plugins such as Slider Revolution, Contact Form 7, and Mailchimp integration. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional, with no signs of malicious content or blocking mechanisms. However, it would benefit from enhanced privacy compliance and improved security headers to strengthen its security posture and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and conducting regular security audits to maintain a robust security posture.

U

up PAMINA vhs

up-pamina-vhs.org

49

up PAMINA vhs is a small, regionally focused non-profit educational institution offering bilingual German-French adult education programs, including language courses, cultural workshops, and cross-border excursions. The website targets residents in the PAMINA region, emphasizing cultural exchange and lifelong learning. Technically, the site is built on TYPO3 CMS, uses standard web technologies, and provides a good user experience with mobile optimization and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's clear contact information and professional presentation support its legitimacy. Overall, the site is well-structured, GDPR compliant, and trustworthy for its educational purpose.

V

Volkshochschulverband Baden-Württemberg e.V.

vhs-bw.de

60

The Volkshochschulverband Baden-Württemberg e.V. is a well-established non-profit association representing 159 adult education centers across Baden-Württemberg, Germany. It serves as a professional and advocacy body supporting public adult education institutions with quality certification, training, and project coordination. The website reflects a mature digital presence built on WordPress with modern SEO and accessibility features, providing comprehensive information and resources to its target audience of adult learners and educators. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, professional, and aligned with the organization's mission.

B

Blaetterbuch - professionell online blättern

blaetterbuch.de

46

Blaetterbuch is a specialized technology provider offering professional online flipbook solutions that digitize print media such as flyers, catalogs, and brochures with realistic page-turning effects. Their service targets businesses seeking to extend the reach of their print publications into digital formats accessible across all major browsers and mobile devices. The company positions itself as a niche provider with a comprehensive service including hosting, customization, and integration of multimedia elements like videos and links. Technically, the website employs a modern web stack including Bootstrap, jQuery, and popular UI libraries such as Owl Carousel and Revolution Slider. The site is mobile-optimized and features a custom CMS backend indicated by dynamic content calls. While performance is moderate, the site is well-structured with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (assumed from URL), implements cookie consent mechanisms, and provides a comprehensive privacy policy compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or malicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving technical performance for a stronger security and user experience profile.

W

Weiterbildung in Baden-Württemberg

fortbildung-bw.de

59

Weiterbildung in Baden-Württemberg operates a professional and comprehensive online portal dedicated to continuing education and training opportunities within the Baden-Württemberg region of Germany. The platform leverages advanced AI-driven recommendation systems to provide personalized course suggestions, supported by a large database of educational offerings. The website targets individuals seeking to enhance their skills and knowledge through lifelong learning, positioning itself as a key regional educational resource. The portal maintains a consistent brand identity aligned with regional government standards and offers a user-friendly experience with clear navigation and search capabilities. Technically, the website is built on WordPress using the Avada theme and incorporates a variety of modern web technologies including jQuery, jQuery UI, and several plugins for GDPR compliance, analytics, and user interaction. The use of Matomo analytics reflects a privacy-conscious approach to user data collection. The site is mobile-optimized and accessible, with good SEO practices implemented through meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms to comply with GDPR. While basic security headers are present, there is room for improvement by adding advanced headers such as Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy or incident response contact suggests an area for enhancement. Overall, the website demonstrates a strong commitment to privacy, user experience, and educational service delivery. The domain registration data aligns with the website's purpose, supporting its legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and themes to mitigate risks.

D

Dieter-Kaltenbach-Stiftung

kaltenbach-stiftung.de

50

The Dieter-Kaltenbach-Stiftung is a small non-profit foundation based in Germany focused on providing educational and social services to children, youth, and adults. Their offerings include VHS courses, holiday programs, and volunteer opportunities, positioning them as a community-oriented organization with a local/regional market presence. The website is well-structured, professionally designed, and provides clear navigation and relevant content for its target audience. Technically, the website uses common and stable technologies such as jQuery, Bootstrap 4, and FontAwesome, likely running on the REDAXO CMS platform hosted by Kasserver. The site is mobile-optimized and SEO-friendly but lacks visible advanced frameworks or platforms. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security policies or incident response contacts are found, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is limited but consistent with the hosting environment, supporting legitimacy. Overall, the website presents a trustworthy and professional image suitable for its non-profit educational mission. Strategic improvements in security headers, incident response transparency, and analytics could enhance its security posture and compliance further.

I

Islamske informativne novine Preporod

preporod.com

47

Preporod.com is the online presence of Islamske informativne novine Preporod, an established Islamic informational newspaper based in Bosnia and Herzegovina. The website serves a Bosnian-speaking Muslim audience with news, cultural, spiritual, and community content. It operates a print and digital media model with subscription options and advertising. Technically, the site is built on Joomla CMS with modern web technologies like Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for user tracking. The security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy and security practices.

В

Влада Републике Српске

vladars.rs

58

The website vladars.rs is the official government portal of the Government of Republika Srpska, a political entity within Bosnia and Herzegovina. It serves as a comprehensive source for government news, announcements, ministry information, official documents, and multimedia content. The site targets citizens, government officials, media, and international partners, providing transparency and access to government activities. The domain is relatively new, registered in 2023, consistent with the content and recent government programs published on the site. Technically, the site is built on Microsoft SharePoint, leveraging its content management capabilities. It uses embedded videos from Vimeo and YouTube and includes social media integration with official government channels. The hosting provider is HostingMania d.o.o. Beograd, a Serbian hosting company, which aligns regionally with the website's purpose. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site uses HTTPS with valid SSL certificates, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. There is no visible privacy policy, cookie consent mechanism, or vulnerability disclosure information, which are important for compliance and user trust. No WAF or security challenge mechanisms are detected, and the site appears fully accessible. Overall, the website is a credible and professional government portal with good content quality and business credibility. However, it would benefit from improved privacy compliance, enhanced security headers, and explicit policies to strengthen user trust and regulatory adherence.

В

Влада Републике Српске

vladars.net

58

The website vladars.rs is the official government portal of the Government of Republika Srpska, providing comprehensive information about government activities, ministries, news, press releases, and multimedia content. It targets citizens, government officials, media, and international observers. The site is built on Microsoft SharePoint technology, hosted by HostingMania d.o.o. Beograd, and uses modern web technologies including Bootstrap and embedded video platforms like Vimeo and YouTube. The content is primarily in Serbian Cyrillic with options for Latin and English languages. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and serves as a key information hub for the Republika Srpska government.

T

TIMOCOM GmbH

timocom.pt

60

TIMOCOM GmbH operates a leading digital marketplace platform for the logistics and road freight transportation sector in Europe. Founded in 1997 and headquartered in Germany, the company connects shippers, freight forwarders, and carriers through a comprehensive suite of services including freight exchanges, closed freight exchanges, transport orders, and digital interfaces. The platform supports efficient and flexible logistics processes, boasting a large user base and extensive daily freight and truck offers. Technically, the website leverages modern web technologies, including HubSpot for marketing automation, Google Tag Manager, and Usercentrics for cookie consent management, hosted on Azure CDN for performance and reliability. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, well-structured, and compliant with GDPR, reflecting a mature digital presence aligned with the company's market position.

I

Initiative Pro Recyclingpapier

ceos-bekennen-farbe.de

34

The website 'CEOs bekennen Farbe' is a German non-profit campaign led by the Initiative Pro Recyclingpapier, promoting the use of recycled paper with the Blue Angel eco-label among CEOs of notable companies. It features endorsements from over 100 CEOs, news updates, and educational content aimed at encouraging sustainable paper use in the business community. The campaign is well-positioned within the German environmental non-profit sector and collaborates with recognized partners such as BMUV, NABU, and the Club of Rome. Technically, the website is built on WordPress, utilizing jQuery and Slider Revolution for interactive content, and employs Matomo for privacy-conscious analytics. Hosting is provided by kasserver.com, with proper HTTPS encryption and a cookie consent mechanism in place. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and formal security policies. From a security perspective, the site enforces HTTPS and uses minimal cookies, with Matomo configured to disable cookies, reflecting good privacy compliance. However, it does not publish explicit security policies or incident response contacts, and no vulnerability disclosure mechanisms are evident. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and aligned with its non-profit environmental mission. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to strengthen security posture and stakeholder trust.

E

ENORM Design

enorm.design

44

ENORM Design is a specialized design agency based in Cologne, Germany, focusing on corporate and brand design, editorial design, and cultural and corporate communication. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, savings banks, and publicly listed corporations, primarily in the art, culture, and finance sectors. The website demonstrates a strong market position with notable awards and a comprehensive portfolio showcasing their expertise. Technically, the website is built on TYPO3 CMS and employs modern JavaScript libraries and frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain registration trust but does not detract significantly from the overall legitimacy given the professional content and legal disclosures. Overall, ENORM Design presents a credible and professional digital presence aligned with its business objectives.

E

ENORM Digital GmbH

enorm.media

52

ENORM Digital GmbH is a specialized internet agency based in Cologne, Germany, focusing on online advertising, digital media planning, and real-time advertising services. The company serves a diverse clientele including museums, medium-sized enterprises, publishers, associations, and financial institutions, particularly in the cultural and financial sectors. Their business model revolves around delivering targeted online campaigns, programmatic buying, and media optimization to increase brand visibility and lead generation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references, positioning ENORM as a trusted niche player in the German online advertising market. Technically, the website is built on the TYPO3 CMS platform and leverages modern web technologies such as jQuery, Gumby Framework, and Google Maps API. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security header implementation. The presence of multiple external marketing and advertising tools, including Google Analytics and Facebook Pixel, indicates a mature digital marketing infrastructure. From a security perspective, the site uses SSL encryption as stated in its privacy policy, but lacks visible HTTP security headers and a dedicated security policy or incident response contact. Forms are implemented securely using POST methods, and no sensitive data is exposed in the HTML. Privacy compliance is well addressed with a comprehensive privacy statement aligned with GDPR requirements, although a cookie consent mechanism is absent. Overall, the security posture is adequate but could benefit from enhancements in header security and transparency. The domain WHOIS data is unavailable or protected, which is common for small digital agencies and justified for privacy reasons. Despite this, the website provides sufficient legal and contact information, client logos, and consistent branding to establish legitimacy and trustworthiness. No signs of malicious activity or suspicious patterns were detected. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and incident response transparency to further strengthen trust and compliance.

S

Schmeck den Süden

schmeck-den-sueden.de

48

Schmeck den Süden is a regional culinary platform dedicated to promoting the cuisine and gastronomy of Baden and Württemberg in Germany. The website offers a variety of recipes, product information, and a directory of local gastronomes, targeting food enthusiasts and regional consumers. The business model focuses on content marketing and regional product promotion, supported by newsletters and partnerships. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Borlabs Cookie for privacy compliance. The design is responsive and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, serving as a valuable resource for its target audience.

L

Landesamt für Geoinformation und Landentwicklung Baden-Württemberg

lgl-bw.de

54

The Landesamt für Geoinformation und Landentwicklung Baden-Württemberg (LGL) is a government agency responsible for surveying, land development, and geoinformation services within the German state of Baden-Württemberg. The website serves as an official portal providing information on geospatial data, land surveying, cadastral services, and related products. It targets public sector entities, professionals in geoinformation, and the general public interested in land development and mapping services. The agency holds a strong market position as the authoritative body for geoinformation in the region, offering a broad range of services including data provision, training, and product sales. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern JavaScript libraries such as jQuery, DataTables, and Bootstrap for responsive design and interactive features. The site is hosted within the Baden-Württemberg academic network (BelWü), indicating a stable and regionally controlled infrastructure. Performance and mobile optimization are good, with accessibility and SEO practices well implemented. However, explicit security headers and privacy policies are not evident, which could be improved. From a security perspective, the site uses HTTPS and asynchronous script loading, minimizing exposure to common vulnerabilities. No signs of WAF or blocking mechanisms were detected, and no sensitive data leakage was observed. The absence of a published privacy policy, cookie consent mechanism, and vulnerability disclosure reduces the overall privacy compliance and security posture scores. The WHOIS data is minimal but consistent with the agency's regional affiliation, supporting legitimacy. Overall, the LGL website is a professional, trustworthy government portal with solid technical foundations but could enhance its privacy and security transparency. Strategic improvements in publishing privacy and cookie policies, security headers, and incident response contacts would strengthen compliance and user trust.

W

Wildtierportal Baden-Württemberg

wildtierportal-bw.de

64

The Wildtierportal Baden-Württemberg is an official government-affiliated online platform providing comprehensive information on wildlife species, hunting regulations, and research activities within the Baden-Württemberg region of Germany. It serves both the general public interested in wildlife and registered hunters who can access an internal area for managing hunting grounds and reporting. The website is well-structured, professionally designed, and offers detailed content relevant to its audience. Technically, it employs modern web technologies including the Yii PHP framework, jQuery, Bootstrap, and slick carousel for UI components, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some HTTP security headers could be improved. No direct contact emails or phone numbers are published; contact is facilitated via a web form. No security policy or incident response information is publicly available. The domain WHOIS data aligns with the official nature of the site, showing consistent registration and DNS setup. Overall, the platform demonstrates a mature digital presence suitable for a government information portal with good trust indicators and compliance.

S

STRKNG

strkng.com

62

STRKNG operates as an international online photography gallery specializing in contemporary and fine art photography. It serves photographers, models, designers, and brands by providing a platform to showcase portfolios, participate in community voting, and access photography-related events and publications. The business is positioned as a niche media platform with a strong community focus and curated content. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates with Cloudflare DNS and Google Firebase for push notifications. The site is mobile optimized and employs structured data for SEO enhancement. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The site hosts mature content including fine art nude photography, presented responsibly for a mature audience. Overall, the website is professional, trustworthy, and well-maintained with room for security enhancements.

E

ENORM Agentur für Design und Kommunikation Köln

enorm.net

47

ENORM Agentur für Design und Kommunikation Köln is a small regional agency specializing in design, digital communication, and media services. Their website presents a professional and consistent brand image targeting businesses seeking tailored solutions in corporate design, digital projects, and online advertising. The technical infrastructure is based on TYPO3 CMS with a modern JavaScript stack and Google Analytics for user tracking. While the website is accessible and well-structured, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided on the homepage. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and technical setup appear legitimate. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies.

N

norm-4 GmbH

norm-4.com

59

norm-4 GmbH is a full-service digital agency based in Cologne, Germany, specializing in custom digital solutions including websites, online portals, TYPO3 and WordPress CMS, e-commerce platforms, accessible websites, and mobile apps for iOS and Android. The company targets businesses, institutions, and public sector clients, positioning itself as a technologically competent and creative partner. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with modern plugins such as WPBakery Page Builder and Yoast SEO, and it employs Cookiebot for GDPR-compliant cookie consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, norm-4 GmbH demonstrates a solid digital maturity and trustworthy business profile.

F

FiXiT d.o.o.

fixitweb.studio

47

FiXiT d.o.o. operates as a small web design studio presenting its portfolio through the Fixit Design Studio website. The company focuses on delivering web design and development services, targeting businesses and individuals seeking digital solutions. The website showcases a professional design with clear branding and a portfolio emphasis, positioning itself as a niche player in the technology sector. Technically, the site is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility features and good SEO practices. Security-wise, the website benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose compliance risks. Overall, the site is professional and safe but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

F

FiXiT d.o.o.

fixit.ba

48

FiXiT d.o.o. is a small IT services company based in Bosnia and Herzegovina, founded in 2015. The company offers specialized IT services including IT support, web design, and toner distribution. Their website reflects a professional and consistent brand image, targeting business clients seeking reliable IT solutions. The company maintains a portfolio of reputable clients, indicating a solid market position locally. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

E

El-Kalem

elkalem.ba

47

El-Kalem is a well-established publishing center affiliated with the Islamic Community in Bosnia and Herzegovina, specializing in Islamic literature and cultural heritage. The website serves as an e-commerce platform offering a variety of books, magazines, and educational materials targeting the Bosnian Muslim community and interested readers. The business has a clear market position as a niche regional publisher with over four decades of presence. Technically, the site is built on WordPress with WooCommerce, using modern themes and performance optimizations, providing a good user experience with mobile responsiveness and SEO best practices. Security posture is adequate with HTTPS and secure payment integrations, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though improvements in privacy compliance and security transparency are recommended.

G

Gazi Husrev-begova biblioteka

ghb.ba

47

Gazi Husrev-begova biblioteka is a historic and culturally significant library institution in Bosnia and Herzegovina, founded in 1537. It serves researchers, students, and the general public interested in Islamic and Bosnian heritage by providing access to a vast collection of manuscripts, printed books, periodicals, archival materials, and museum exhibits. The institution also offers digital library services and publishes scholarly works. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. Google Analytics and reCAPTCHA are implemented for analytics and form security respectively. However, the site lacks a cookie consent mechanism and explicit privacy compliance features, which are important for GDPR adherence. Security-wise, the site shows no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and readiness. The WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's identity. Overall, the website is professional, trustworthy, and well-optimized for its audience, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

I

Institut za islamsku tradiciju Bošnjaka | www.iitb.ba

iitb.ba

47

Institut za islamsku tradiciju Bošnjaka (IITB) is a small, specialized scientific research institute affiliated with the Islamic Community in Bosnia and Herzegovina. The institute focuses on research and preservation of the Islamic tradition of Bosniaks, offering publications, conferences, and educational events primarily targeting the Bosnian-speaking academic and religious community. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and good SEO practices. The site is mobile optimized and provides clear navigation and contact information, including email and phone contacts, as well as social media presence on Facebook, Twitter, and YouTube. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

1

1&1 Internet Inc

preporod.info

47

Preporod.info is a Bosnian language online news and community portal focusing on regional news, Islamic community affairs, and cultural topics. The website serves a niche audience interested in Bosnian and Islamic community news, providing regularly updated articles, interviews, and event information. The business operates as a small media outlet with a clear focus on community engagement and information dissemination. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for user tracking. Hosting is provided by HostEurope with a dedicated server setup. The website is mobile optimized and has a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS enabled and domain transfer protection active, but lacks DNSSEC and security headers. Privacy and cookie policies are missing, which impacts compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the domain registration is transparent and consistent with the business profile, registered with a reputable registrar in 2019. The website content is safe for general audiences with no adult or explicit content detected.