Security Directory

D

Deutsche Finance Group

deutsche-finance-group.de

63

Deutsche Finance Group is an established international investment company specializing in institutional market access and exclusive investments in private equity real estate, infrastructure, and financial services. With over 20 years of experience, it offers institutional club deals and asset management services targeting institutional and private investors. The company maintains a strong market position supported by international awards and a professional digital presence. Technically, the website is built on WordPress with Elementor, incorporating modern SEO and analytics tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a mature and trustworthy business with clear contact information and compliance with GDPR.

S

Schroders Capital

schroderscapital.com

69

Schroders Capital is a global asset management firm specializing in private markets, offering a broad range of investment solutions including Private Equity, Real Estate, Infrastructure, and Private Debt & Credit Alternatives. The company serves professional and institutional investors worldwide, with a strong presence across 25 global locations and managing assets exceeding $99 billion. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for its target audience of professional investors. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand association and professional presentation.

W

Wellington Management

wellington.com

69

Wellington Management is a globally recognized, private investment management firm offering a wide range of asset management and advisory services primarily to institutional clients. The company has a long-standing history dating back to 1928 and maintains a strong market position in the finance sector. Their website reflects a professional and comprehensive digital presence, targeting institutional investors and financial professionals worldwide. The firm leverages modern digital marketing and analytics technologies, including Adobe Experience Manager, Google Tag Manager, and Brightcove for video content, indicating a mature technical infrastructure. Security-wise, the website enforces HTTPS, employs multiple security headers, and integrates a robust cookie consent mechanism, reflecting good security hygiene. However, the absence of publicly available WHOIS data and lack of explicit security policy or incident response information slightly detract from the overall trustworthiness. Overall, Wellington Management's online presence is professional, secure, and compliant with privacy regulations, supporting their reputation as a leading investment management firm.

H

Hamilton Lane

hamiltonlane.com

75

Hamilton Lane is a well-established global investment manager specializing in private markets solutions, serving institutional and private wealth clients. The company emphasizes a client-driven, results-oriented approach with over $958 billion in assets under management and supervision. Their services include asset management, customized solutions, technology-driven insights, private wealth strategies, and educational resources. The website reflects a mature, professional brand with consistent messaging and comprehensive content tailored to sophisticated investors. Technically, the website leverages modern analytics and tracking tools such as Google Analytics, Hotjar, LinkedIn Insight, and Google Tag Manager, integrated with a Kentico CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy compliance is robust, featuring cookie consent mechanisms and GDPR-aligned policies. From a security perspective, the site enforces HTTPS and employs standard best practices, though explicit security headers and incident response information are not prominently published. No vulnerabilities or suspicious content were detected. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and external trust signals. Overall, Hamilton Lane's website demonstrates a strong digital presence aligned with its market position, though improvements in security disclosures and WHOIS transparency could enhance trust further.

W

Wealthcap

wealthcap.com

72

Wealthcap GmbH is a German investment management company specializing in alternative investments such as real estate, private equity, portfolio funds, and energy infrastructure. The company targets both private and institutional investors, offering a broad portfolio of investment products with a strong emphasis on sustainability and ESG principles. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Usercentrics for consent management, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, secure login portals, and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. The domain WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional and comprehensive nature of the website content and business information. Overall, the site demonstrates a high level of professionalism, security, and compliance suitable for a large financial services company.

I

ICG

icgam.com

76

ICG is a global alternative asset manager with over three decades of experience, specializing in structured capital, private equity secondaries, real assets, private debt, and credit. The company targets institutional investors and clients seeking differentiated investment opportunities with a focus on responsible investing and sustainability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports its market position as a leading asset manager. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Tag Manager, and OneTrust for cookie consent, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforced and security headers present, although the absence of a published security policy and incident response information suggests room for improvement. The missing WHOIS data is a notable concern for domain legitimacy, reducing the overall trust score despite the professional appearance and business credibility. Strategic recommendations include publishing security and incident response policies, improving transparency on data protection officers, and verifying domain registration details to enhance trust.

U

Ultima Media Germany

ultimamedia.de

60

Ultima Media Germany is a professional B2B event organizer specializing in over 50 annual specialist events across sectors such as automotive, finance, production, medicine, insurance, and environment. The company operates under the parent group SV Veranstaltungen and provides knowledge transfer and networking opportunities through conferences, seminars, and congresses. The website is built on TYPO3 CMS and integrates modern marketing and privacy tools such as Google Tag Manager with consent mode and CleverPush for notifications. The site is well-structured, mobile-optimized, and provides detailed event information, reflecting a mature digital presence. However, explicit privacy policies, terms of service, and direct contact information are not found, which could be improved for better compliance and user trust. Security posture is good with HTTPS and consent mechanisms but lacks explicit security headers and incident response details.

E

EBS Universität für Wirtschaft und Recht

ebs.edu

67

EBS Universität für Wirtschaft und Recht is a well-established private university in Germany specializing in business and law education. It offers a wide range of degree programs including Bachelor, Master, MBA, and executive education, supported by strong accreditations such as AACSB and Wissenschaftsrat. The university maintains a strong market position with notable rankings and a large partner network. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools with a good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not evident. Overall, the site reflects a professional and trustworthy educational institution with comprehensive content and good privacy compliance.

H

Hostinger

hostinger.co.uk

78

Hostinger is a prominent web hosting provider offering a range of hosting solutions including shared, cloud, and VPS hosting, along with domain registration and website building tools. The company targets individuals and businesses in the UK and globally, positioning itself as an affordable and reliable hosting platform. The website reflects a mature digital presence with modern technologies such as Vue.js and Nuxt.js, supported by Cloudflare CDN and Google Tag Manager for performance and analytics. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data reduces domain registration transparency but does not detract from the professional and trustworthy appearance of the site. Overall, Hostinger demonstrates a solid business and technical foundation with room for improvement in transparency and security communication.

P

Peugeot Bosna i Hercegovina

peugeot.ba

62

Peugeot Bosnia and Herzegovina operates an official automotive brand website providing comprehensive information about Peugeot vehicles, including electric and hybrid models, financing options, servicing, and dealer locations. The site targets potential car buyers in Bosnia and Herzegovina and serves as a digital showroom and service portal. The business is positioned as a regional representative of the global Peugeot brand under the Stellantis parent company. Technically, the website leverages Adobe Experience Manager CMS, Google Tag Manager, Adobe Analytics, and GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and well-structured for user experience. Security posture is good with HTTPS enforced and consent management in place, though explicit security policies and vulnerability disclosures are absent. WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

M

MicroMedia

micromedia.ba

46

MicroMedia is a small, professional full-service digital marketing and creative agency based in Bijeljina, Bosnia and Herzegovina. The company specializes in web design, graphic design, online marketing, and related creative services, targeting businesses seeking to enhance their digital presence. The website reflects a consistent brand image with a well-structured portfolio and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user experience, demonstrating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Svi odgovori na jednom mjestu - pressrs.ba

pressrs.ba

52

Pressrs.ba is a Bosnian content portal launched in 2021, providing educational and informational articles across various life topics. The website targets a general audience seeking knowledge and answers to everyday questions. Technically, the site is built on WordPress using the Divi theme, leveraging Google Fonts, Google Tag Manager, and Google Adsense for content delivery and monetization. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices but lacks advanced security headers and explicit privacy or cookie policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and regulatory adherence.

Г

Главна служба ревизије РС

gsr-rs.org

47

The website represents the Supreme Audit Office of the Republic of Srpska, a government institution responsible for auditing public sector entities. It provides comprehensive audit reports, recommendations, and statistical data to promote transparency and accountability. The site targets government officials, auditors, and the general public interested in public sector oversight. The business model is a government service institution with a medium organizational size and a history dating back to 2000. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes accessibility enhancements via the Readabler plugin. It uses Google Tag Manager for analytics and tracking. The site is mobile-optimized and well-structured with good SEO and accessibility features. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is partially met with a privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and serves its government audit function well. Strategic improvements in security headers, DNSSEC, and privacy consent would enhance its security posture and compliance.

R

Resurs Bank AB (publ)

resurs.com

74

Resurs Bank AB (publ) is a well-established Swedish financial institution offering a broad range of consumer and corporate financial services including savings accounts, loans, credit cards, factoring, payment solutions, and insurance. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to private individuals and businesses in Sweden. The company positions itself as a trusted partner to help customers manage their everyday finances with flexible and accessible financial products. Technically, the website leverages modern web technologies such as React, AWS S3 for media hosting, Google Tag Manager for analytics, and Google reCAPTCHA v3 for bot protection. The site demonstrates good performance, accessibility, and SEO practices, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, security headers, and user education on fraud prevention. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. However, explicit incident response contacts and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a low-risk profile with high trustworthiness and professionalism. The absence of WHOIS data for the www subdomain is noted but does not detract from the legitimacy of the root domain and business operations. Strategic recommendations include enhancing transparency around security incident handling and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

T

TF Bank AB

tfbank.se

62

TF Bank AB is a Swedish financial institution established in 1987, offering retail banking services primarily focused on savings accounts with competitive interest rates and state deposit guarantees. The bank operates across multiple European countries and is publicly listed on Nasdaq Stockholm, indicating a stable market position and regulatory compliance. The website presents clear, professional content targeting Swedish customers interested in secure savings products. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager, Google Analytics, Cookiebot, and Microsoft Application Insights, hosted on a CMS likely Umbraco, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the site reflects a trustworthy and professional banking service with strong legitimacy indicators from WHOIS data and domain age.

B

Brocc AB

brocc.se

62

Brocc AB is a Swedish fintech company specializing in providing smarter loan and savings solutions tailored to individual customer needs. Their platform offers competitive interest rates, cashback features, and a mobile app for comprehensive financial management. The company positions itself as an innovative player in the Swedish financial services market, targeting consumers seeking flexible and transparent financial products. The website reflects a modern, professional design with clear navigation and strong branding consistency. Technically, the site is built on Gatsby and React, hosted likely on AWS infrastructure, and integrates third-party services such as Google Tag Manager and Trustpilot for analytics and social proof. Security-wise, the site enforces HTTPS and uses BankID for secure login, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is evident with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, Brocc demonstrates a mature digital presence with room for improvement in security transparency and privacy controls.

I

interstruct AG

interstruct.com

55

interstruct AG is a Berlin-based digital creative agency specializing in UX/UI design, web development, and digital strategy. The company positions itself as a specialist in transforming complex business challenges into impactful digital platforms, focusing on measurable results and user-centric solutions. Their key services include consulting, concept development, UX/UI design, content creation, technical implementation, and analytics. The website reflects a mature, professional business with a consistent brand and clear market positioning in the technology sector.

S

Sloan Servicing

sloanservicing.com

65

Sloan Servicing is a newly established financial services company specializing in loan servicing solutions. The website is built using modern web technologies, primarily Angular 19, and integrates several marketing and analytics tools such as Pendo, Tealium, Hotjar, and Google Analytics. The technical infrastructure indicates a moderate level of digital maturity with room for improvement in performance and SEO optimization. Security measures include a Content Security Policy and various security headers; however, some misconfigurations such as the improper use of Strict-Transport-Security and lack of DNSSEC reduce the overall security posture. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no terms of service or incident response information is available. Overall, the website is functional but lacks comprehensive business and security transparency, which impacts trust and credibility.

S

Staples, Inc.

staplespromo.com

76

StaplesPromo.com is an enterprise-level e-commerce website operated by Staples, Inc., specializing in custom promotional products such as apparel, drinkware, tech accessories, and office essentials. The site targets businesses and organizations seeking branded merchandise to enhance their marketing efforts. It features a large catalog of over 4000 products and showcases trust signals including logos of major global brands. The business model is retail e-commerce with a focus on customization and branding services. The website is well-branded, professionally designed, and offers a seamless user experience with clear navigation and mobile optimization. Technically, the site leverages a modern tech stack including jQuery, Bootstrap, Dynamic Yield for personalization, Google Tag Manager, Adobe DTM, and TrustArc for consent management. It is hosted on a CDN infrastructure (Akamai) ensuring moderate performance and global reach. The platform used is Znode, a specialized e-commerce CMS. Accessibility is basic but functional, and SEO practices are good with proper meta tags and structured data. From a security perspective, the site enforces HTTPS, uses domain locking statuses to prevent unauthorized changes, and implements a consent management platform for GDPR compliance. A vulnerability disclosure policy is publicly available, indicating a mature security posture. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not found. No vulnerabilities or suspicious domains were detected. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and solid technical implementation. Recommendations include enabling DNSSEC, publishing explicit security policies, and enhancing accessibility compliance to further improve security and user trust.

I

InterSoft d.o.o. Sarajevo

klix.ba

65

Klix.ba is the most visited and influential news portal in Bosnia and Herzegovina, providing fast and important news from Sarajevo, the country, and the world. The website operates on an advertising-supported business model, leveraging multiple ad networks including Amazon Ads, PubMatic, and Google Ad Manager. The technical infrastructure includes modern JavaScript libraries, consent management via Didomi, and analytics through DotMetrics and Google Analytics. The site is well-optimized for mobile and desktop users with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement, bot protection via reCAPTCHA, and GDPR-compliant consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, Klix.ba presents a professional, trustworthy, and compliant digital presence with a strong market position in the media sector of Bosnia and Herzegovina.

Schweppes.com serves as a global brand portal for the Schweppes beverage company, providing regional navigation to localized websites primarily for North America and Europe. The site content is minimal and focused on brand presence rather than direct consumer engagement. Technically, the site uses legacy JavaScript libraries such as Prototype.js and modern tracking tools like Google Analytics and Google Tag Manager. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. The WHOIS data is notably missing or indicates the domain is unregistered, which is inconsistent with the brand's global presence and raises legitimacy concerns. Overall, the site is functional but basic, with significant gaps in compliance and security transparency.

G

Grey Goose

greygoose.com

69

Grey Goose is a premium French vodka brand owned by Bacardi Limited, targeting adult consumers seeking luxury spirits. The website showcases the brand's products, cocktail recipes, and brand stories with a professional and polished digital presence. The technical infrastructure includes modern JavaScript libraries, marketing and analytics tools, and compliance mechanisms such as age verification and cookie consent. Security posture is good with HTTPS and some security best practices, though some HTTP security headers could be improved. The domain WHOIS data is unavailable, which raises some concerns about registration transparency but does not detract from the overall legitimacy of the brand and website. Overall, the site is well-positioned in the premium spirits market with a strong brand identity and digital maturity.

P

Philip Morris Products S.A.

iqos.com

72

The IQOS website represents Philip Morris Products S.A., a global enterprise specializing in heated tobacco and electronic cigarette products as smoke-free alternatives to traditional cigarettes. The site is professionally designed with excellent content quality, targeting adult smokers seeking alternatives. It features localized versions for multiple countries, reflecting a broad international market presence. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, New Relic monitoring, Google Tag Manager, and Akamai hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are not prominently disclosed. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, which warrants further verification for domain registration legitimacy.

P

ProCredit Bank d.d. Sarajevo

procreditbank.ba

71

ProCredit Bank d.d. Sarajevo is a German-owned financial institution operating in Bosnia and Herzegovina, specializing in retail and SME banking with a strong focus on sustainability and digital innovation. The bank offers a comprehensive range of services including current accounts, savings, loans, and digital banking platforms such as ProBanking and mobile applications. Their market position is strengthened by transparent business ethics, ISO certifications, and a commitment to green financing. Technically, the website is built on modern frameworks like Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, complemented by an incident response mechanism via whistleblowing. However, the absence of a cookie consent mechanism and vulnerability disclosure page are notable compliance gaps. Overall, the bank demonstrates a high level of professionalism, trustworthiness, and digital maturity.

F

Fiare Media Tools

fiaremediatools.com

60

Fiare Media Tools operates as a specialized provider of digital tools aimed at news publishing businesses, offering custom content management systems, layout automation, and integrated newsroom solutions. The website presents a professional and consistent brand image targeting media companies seeking to digitize and automate their publishing workflows. Technically, the site employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent, and uses HTTPS to secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal privacy policies. Overall, the site is functional and well-designed but would benefit from enhanced transparency and security practices.

S

Satwork

satwork.net

57

Satwork is a well-established company founded in 2005 specializing in satellite vehicle tracking and fleet management services primarily in Bosnia and Herzegovina and the surrounding region. The company offers a comprehensive suite of GPS-based solutions including fuel consumption control, driver communication, route optimization, and digital tachograph data management. With subsidiaries in Serbia, Montenegro, and Austria, Satwork maintains a strong regional presence and is recognized as a market leader in its domain. The website reflects a professional and consistent brand image with detailed service descriptions and multiple contact points, supporting its credibility and customer engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. However, there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, Satwork demonstrates maturity by holding ISO 9001 and ISO/IEC 27001 certifications, indicating a commitment to quality management and information security. The website uses HTTPS for secure communications, especially on login forms, and implements user-friendly features like password visibility toggling. Nonetheless, the absence of explicit incident response contacts, vulnerability disclosure policies, and cookie consent mechanisms highlights areas for compliance enhancement. Overall, Satwork presents a trustworthy and professional online presence aligned with its business operations. The main risks relate to privacy compliance gaps and security header omissions, which should be addressed to strengthen user trust and regulatory adherence. Strategic improvements in these areas will enhance the company’s digital maturity and security posture, supporting sustained growth and customer confidence.

B

Barry Callebaut

barry-callebaut.com

75

Barry Callebaut is a global leader in the manufacturing of high-quality chocolate and cocoa products, with a strong emphasis on sustainability through its Forever Chocolate strategy. The website serves a broad international audience with comprehensive product, service, and corporate information. Technically, the site is built on Drupal 10, employs modern analytics and consent management tools, and is optimized for performance and mobile use. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and a dedicated security policy are absent. WHOIS data is missing or unavailable, which slightly impacts trust but does not detract from the professional presentation and business credibility of the site.

S

Searchspring

searchspring.net

48

Searchspring is a well-established ecommerce technology company specializing in AI-driven search, merchandising, and personalization solutions. With a domain age of over 20 years and a parent company Athos Commerce, it holds a strong market position targeting ecommerce retailers seeking to improve product discovery and conversion rates. The website demonstrates a mature digital presence with modern technologies and integrations, including WordPress CMS, HubSpot marketing tools, and multiple analytics platforms. Security posture is good with HTTPS enforced and domain status protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is robust with clear cookie consent and GDPR-aligned policies. Overall, the site is professional, trustworthy, and technically sound, supporting its business credibility and market leadership.

R

Red.es

red.es

69

Red.es is a Spanish government entity under the Ministry of Economic Affairs and Digital Transformation, dedicated to promoting digital transformation across businesses, citizens, and public administrations. The website serves as a comprehensive portal for initiatives, news, and resources related to digital innovation and funding programs in Spain. The site is well-structured, professionally designed, and targets a broad audience including SMEs, entrepreneurs, and public sector entities. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap 4.6 and utilizes Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, cookie consent management, and antibot protections on forms. However, some security headers could be improved. The security posture is strong with multiple certifications such as ISO 27001 and compliance with the Spanish National Security Scheme (ENS). No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website reflects a mature digital presence consistent with a government agency, with high trustworthiness and professionalism. The domain WHOIS data is restricted as per .es domain policies, which is typical and appropriate for this entity.

R

Red.es

nic.es

67

Dominios.es is the official Spanish government entity responsible for managing the registration of .es country code top-level domains. It operates under the umbrella of Red.es, a public enterprise of the Spanish government. The website provides comprehensive information and services related to domain registration, management, and security, targeting individuals, businesses, and authorized registrars. The entity holds recognized certifications such as ISO 9001, ISO 27001, and ENS, underscoring its commitment to quality and security. Technically, the site is built on Drupal 10 with modern web technologies and integrates Google Tag Manager and CookiesJSR for analytics and cookie management. The site is well-optimized for mobile and accessibility, with clear navigation and professional design.

J

Jewelers Mutual Group

jewelersmutual.com

10

Jewelers Mutual Group is a specialized insurance provider focusing on personal jewelry and jewelry business insurance. With over 110 years of expertise and a strong market presence evidenced by more than 11,000 five-star reviews, the company targets jewelry owners and businesses seeking dedicated insurance solutions. The website reflects a mature digital presence built on Drupal 10, integrating advanced analytics and marketing tools such as Google Tag Manager, Mixpanel, and Visual Website Optimizer, alongside a robust consent management system via TrustArc. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a dedicated security policy or incident response information is noted. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. However, the lack of WHOIS data transparency slightly reduces domain trustworthiness. Overall, the website is professional, secure, and compliant, serving a large enterprise in the finance sector with a focus on jewelry insurance.

D

Doculivery

doculivery.com

9

Doculivery is a document management software provider offering secure, efficient, and cost-effective solutions tailored for businesses seeking to digitize and streamline their document workflows. The company positions itself as an experienced player with over 30 years in the industry, serving a range of clients including large corporations. Their product suite includes document management, payroll, tax, HR, accounting, billing, and business optimization services. The website is built on WordPress with the Avada theme and integrates HubSpot marketing and analytics tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enabled and role-based access controls mentioned, but lacks visible security headers and formal security policies. The absence of WHOIS registration data raises some legitimacy concerns, though the professional website content and client logos support a credible business presence. Privacy and cookie policies are not detected, which is a compliance gap. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, but would benefit from enhanced transparency on privacy, security, and domain registration details.

The Intra-European Organisation of Tax Administrations (IOTA) operates as an international non-profit entity focused on facilitating practical collaboration and knowledge sharing among tax administrations primarily in Europe. The organization offers a range of services including conferences, workshops, publications, and resources aimed at improving tax administration efficiency and adaptability. The website reflects a professional and consistent brand image, targeting government officials and tax professionals. Technically, the site is built on the Ibexa DXP CMS platform, leveraging modern web technologies and fonts, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website demonstrates a mature digital presence suitable for its governmental and non-profit audience, with a trustworthy and professional online representation.

G

Getlink

getlink.space

56

Getlink.space is a newly launched (June 2024) online URL shortening service offering free and customizable short links with analytics and link management features. The service targets general internet users, businesses, and influencers seeking to simplify link sharing and track link performance. The website is built using modern web technologies including SvelteKit and Bootstrap, hosted with Cloudflare DNS and protected by privacy-protected domain registration. The site is mobile optimized and provides a good user experience with clear navigation and multi-language support. Security posture is moderate with HTTPS enforced and anti-bot CAPTCHA on forms, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism despite use of Google Adsense and Tag Manager. No direct company contact emails or phone numbers are provided, only a contact form. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

M

meinKölnBonn

meinkoelnbonn.de

48

meinKölnBonn is a regional content platform operated in affiliation with Sparkasse KölnBonn, providing residents of the Köln and Bonn area with financial advice, lifestyle content, business insights, and local event information. The website positions itself as a trusted source for regional financial and lifestyle topics, leveraging the brand strength of Sparkasse KölnBonn. Technically, the site is built on WordPress with modern frontend technologies such as Swiper.js and lazy loading for images, ensuring a good user experience and mobile optimization. SEO practices are well implemented with Yoast SEO and structured data markup. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the site lacks explicit security headers and a public security policy. Privacy compliance is moderate, with a cookie consent mechanism present but no explicit privacy policy page found. Overall, the site is professional, trustworthy, and safe for general audiences.

eKupon.ba is a regional e-commerce platform focused on providing discounted travel, wellness, and leisure offers primarily targeting customers in Bosnia and Herzegovina. The website presents a professional and modern design with a good user experience, showcasing a variety of hotel deals, spa treatments, and travel packages. The platform leverages modern web technologies including Alpine.js and Laravel Livewire, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by adding explicit cookie consent and detailed GDPR-compliant privacy policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site is well-positioned in its market niche but should enhance privacy and compliance transparency to improve trust and regulatory adherence.

Z

ZEIT SPRACHEN

zeit-sprachen.de

49

ZEIT SPRACHEN is a reputable language learning brand offering printed and digital magazines for multiple languages including English, French, Spanish, Italian, and German. It operates as a 100% subsidiary of the ZEIT Verlagsgruppe, a well-known German publishing group, positioning itself strongly in the education sector with high-quality journalistic content tailored for language learners and educators. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content.

Z

ZEIT SPRACHEN

spotlight-verlag.de

52

ZEIT SPRACHEN is a German-based language education publisher serving over 1.4 million users with language learning products and cultural content. The website is built on Drupal 11 and integrates modern consent management tools such as Usercentrics, reflecting a commitment to GDPR compliance. The site targets language learners, educators, companies, and advertisers, positioning itself as a reputable player in the education and media sectors within Germany. Technically, the site demonstrates good mobile optimization, SEO practices, and a moderate performance profile, hosted on servers associated with ccn.net. Security posture is adequate but could be improved by implementing security headers and publishing explicit privacy and terms of service documents. No signs of blocking or WAF interference were detected, allowing full content access and analysis.

S

Symetra Life Insurance Company

symetra.com

77

Symetra Life Insurance Company is a well-established insurance and financial services provider founded in 1957 and operating as a subsidiary of Symetra Financial Corporation. The company offers a broad range of products including life insurance, annuities, and employee benefits targeting individuals, families, employees, and employers across the United States. Their market position is solid with over 65 years of experience and a comprehensive portfolio of services. The website reflects a professional and user-friendly digital presence with clear navigation and extensive content tailored to various customer segments. From a technical perspective, the website employs a modern technology stack including Episerver CMS, Google Tag Manager, Google Analytics 4, Facebook Pixel, and other advanced analytics and monitoring tools. The site is mobile optimized, accessible, and SEO-friendly, providing a good user experience. Performance is moderate with room for optimization. Security posture is good with HTTPS enforced and no visible exposed sensitive data. However, explicit security headers are not clearly present, and there is no dedicated security policy or incident response page, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is high with clear contact information, social media presence, and trust indicators such as regulatory disclosures. Overall, the website and business appear legitimate and trustworthy, though the lack of WHOIS data transparency slightly reduces trust. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing vulnerability disclosure information to strengthen security posture and user trust.

D

Domains By Proxy, LLC

pluro.ai

75

Pluro.ai is a newly established technology company founded in 2024, specializing in web accessibility solutions. Their platform offers instant WCAG compliance checks, issue fixing tools, and ongoing accessibility monitoring aimed primarily at web developers and businesses seeking to improve website accessibility. The company positions itself as a niche SaaS provider focused on simplifying compliance with accessibility standards such as WCAG and ADA. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including HubSpot, Google Tag Manager, Hotjar, and ContentSquare. The hosting infrastructure is based on AWS, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with comprehensive privacy and cookie policies that align with GDPR requirements. No direct contact emails or phone numbers are published, with contact primarily via web forms. Overall, the website is professional, accessible, and trustworthy, with a good balance of technical maturity and business credibility.

B

BH Telecom d.d. Sarajevo

bhtelecom.ba

65

BH Telecom d.d. Sarajevo is the leading telecommunications operator in Bosnia and Herzegovina, offering a comprehensive range of services including mobile telephony, fixed telephony, internet access, television services, and device sales. The company targets both private and business customers within the country, maintaining a strong market position supported by a professional and well-structured website. The digital infrastructure is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's business stature.

S

Samsonite

samsonite.fi

67

Samsonite.fi is the official Finnish e-commerce website for Samsonite luggage and travel accessories, operated by Aboutbags NV based in Belgium. The site offers a comprehensive product catalog including luggage, backpacks, bags, kids' luggage, and personalisation services. It targets Finnish consumers seeking premium travel products and provides localized content and customer support. Technically, the site is built on Salesforce Commerce Cloud with modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and WonderPush. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, although explicit security policies and incident response contacts are not found. WHOIS data aligns well with the business claims, indicating high legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy posture.

N

Nelnet Inc

nelnetinc.com

68

Nelnet Inc is a diversified enterprise primarily focused on student loan servicing, education technology, government services, consumer financial services, and renewable energy investments. Founded in 2000 and publicly traded on the NYSE (NNI), Nelnet serves millions of customers across multiple sectors including education, government, and finance. The company operates numerous subsidiaries and business units, offering a broad range of services from loan servicing to payment processing and fiber communications. Their market position is strong, supported by decades of experience and a large associate base. Technically, Nelnet's website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with company history. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, it lacks visible security headers and published security policies or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Tracking technologies such as Google Tag Manager and Facebook Pixel are used, indicating moderate user tracking. Overall, Nelnet presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Security posture is solid but could be enhanced by adding security headers and formal incident response disclosures. No critical vulnerabilities or blocking mechanisms were detected, and the content is safe for general audiences.

B

Barry Callebaut

chocolate-academy.com

68

The Chocolate Academy website represents a professional educational platform operated by Barry Callebaut, targeting artisans and chefs globally with chocolate training, recipes, and community support. The site is well-structured, content-rich, and optimized for mobile with modern technologies including Drupal 10, Google Tag Manager, and Plausible Analytics. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism in place. Security posture is strong with HTTPS and security headers, though explicit security and incident response policies are not published. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts business credibility. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and direct contact information.

P

Phobs

phobs.net

69

Phobs is a technology company specializing in revenue-generating IT solutions for the hospitality industry, including hotels and campsites. Their offerings include booking engines, channel management, yield management, and reservation applications, supported by a dedicated consulting and support team. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates marketing and analytics tools like HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is limited due to the absence of visible privacy and cookie policies. The lack of WHOIS data and domain registration information is a significant concern, impacting trust and legitimacy assessments.

S

Samsonite Australia

samsonite.com.au

65

Samsonite Australia operates a professional e-commerce website specializing in premium luggage, travel bags, and accessories. The brand leverages its 111 years of heritage to position itself as a market leader in the travel retail sector within Australia. The website offers a comprehensive product catalog, promotional offers, and a newsletter subscription to engage customers. Technically, the site is built on Salesforce Commerce Cloud (Demandware) and integrates multiple modern marketing and analytics tools, including Google Analytics, TikTok Pixel, Facebook Pixel, and Braintree for payment processing. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and secure payment gateways, though explicit security policies and incident response contacts are not publicly available. Overall, the domain and website present a trustworthy and mature online retail presence with room for improvement in transparency around security policies and vulnerability disclosures.

S

Samsonite

samsonite.co.uk

66

Samsonite UK operates a comprehensive e-commerce platform specializing in suitcases, travel bags, and related accessories. The website serves as the official UK online shop for Samsonite, a globally recognized luggage brand. It offers a wide range of products including luggage, backpacks, bags, kids' items, and personalisation services, targeting consumers in the UK market. The site emphasizes customer convenience with free delivery, free returns, and secure payment options. Technically, the website is built on Salesforce Commerce Cloud with modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and WonderPush. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced and appropriate security headers present. However, no explicit security policy or incident response information is published. WHOIS data was unavailable due to querying a subdomain, but the website's branding and content strongly indicate legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly experience.

S

Samsonite

samsonite.ch

68

Samsonite.ch is the official Swiss online store for Samsonite, a globally recognized luggage brand. The website offers a comprehensive catalog of luggage, backpacks, bags, and travel accessories, including personalization services. The site targets consumers in Switzerland seeking high-quality travel products and operates on a modern e-commerce platform with strong brand consistency and trust indicators. Technically, the site leverages Salesforce Commerce Cloud, Vue.js components, and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and Salesforce Marketing Cloud. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is adequate with clear privacy and cookie policies, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, secure, and trustworthy, serving a large retail business with a strong market position.

S

Samsonite

samsonite.se

65

Samsonite.se is the official Swedish online store for Samsonite, a globally recognized luggage and travel accessories brand. The website offers a comprehensive catalog of products including suitcases, backpacks, bags, kids' luggage, and personalization services. It targets consumers in Sweden seeking premium travel products. The site is built on Salesforce Commerce Cloud, leveraging modern marketing and analytics tools such as Google Tag Manager, Hotjar, and WonderPush, indicating a mature digital infrastructure. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though no explicit security policy or incident response contacts were found. Overall, the site presents a professional, trustworthy e-commerce platform with strong brand consistency and user experience.

A

Aboutbags NV

samsonite.es

65

Samsonite.es is the official Spanish e-commerce website for the Samsonite brand, operated by Aboutbags NV. The site offers a wide range of travel luggage, backpacks, bags, and accessories with features such as free shipping, free returns, and product personalization. The website is well-branded, professionally designed, and targets consumers in Spain seeking high-quality travel products. Technically, it leverages Salesforce Commerce Cloud and integrates multiple marketing and analytics tools including Google Tag Manager, Hotjar, and CQuotient, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. WHOIS data is unavailable due to registry restrictions, but the domain and website content strongly indicate legitimacy and brand authenticity. Overall, the site presents a trustworthy and professional online retail experience.