Bulgaria security reports

А

Амбър

pogrebenie.net

51

Амбър е утвърдена траурна агенция в София с над 32 години опит, предлагаща широк спектър от траурни услуги и стоки, включително погребения, кремации, траурен комплекс, кетъринг и поддръжка на гробни места. Компанията разполага с няколко офиса и собствен цветарски магазин, което подсилва тяхната пазарна позиция и доверие сред клиентите. Техническата инфраструктура е базирана на Joomla CMS с използване на популярни библиотеки като jQuery и интеграция на Google Tag Manager и Google Ads за маркетинг и анализи. Сайтът е мобилно оптимизиран и предлага добра навигация и съдържание на български език. От гледна точка на сигурността, сайтът използва HTTPS и има имплементирана GDPR-съвместима политика за бисквитки с механизъм за съгласие. Въпреки това липсват някои важни HTTP заглавки за сигурност и DNSSEC не е активиран, което е препоръчително да се подобри. Липсват публично достъпни политики за сигурност и инцидентен отговор, което е препоръчително за повишаване на доверието и съответствието. Общата оценка на сайта е добра с високо ниво на бизнес достоверност и приемливо техническо изпълнение. Препоръчва се подобряване на някои аспекти на сигурността и публикуване на допълнителни политики за пълна съвместимост и прозрачност.

The website www.cclean-bg.com represents a Bulgarian professional cleaning company named КУУЛ КЛИЙН ЕООД, offering a range of cleaning services including office, home, industrial, facade cleaning, and pest control. The business targets local Bulgarian customers with a focus on professional cleaning solutions. The website content is primarily in Bulgarian and provides phone contact numbers but lacks email or physical address details. The site uses Google Analytics and Tag Manager for tracking but does not display privacy or cookie policies, which impacts compliance and user trust. Technically, the website employs standard JavaScript libraries and Google services but lacks modern CMS or frameworks. The site shows basic mobile optimization and SEO practices but no evident security headers or HTTPS confirmation in the provided data. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy and transparency. From a security perspective, the absence of HTTPS confirmation, security headers, and privacy policies indicates a low security posture. No forms or sensitive data collection points were detected on the main page, reducing immediate risk, but the lack of compliance documentation and domain registration transparency are notable weaknesses. Overall, the site is functional but requires significant improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

ДЕЙМОС ЕООД is a Bulgarian media and telecommunications company offering television and internet services alongside media production. The website is primarily in Bulgarian and targets local consumers interested in analog and digital TV, internet packages, and advertising services. The business operates a service provider model with a local/regional market focus. Technically, the website is built on Joomla CMS with several outdated technologies such as old jQuery versions and deprecated media players, which may pose security and compatibility risks. Security posture is moderate but lacks modern security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trust. Overall, the website is functional but requires modernization and improved compliance to enhance security and user trust.

S

Sirma

sirma.com

74

Sirma is a well-established technology company specializing in AI, data, cloud migration, tailored software development, managed IT services, business and IT consulting, cyber security, and system integration. With over 33 years of experience and a presence in more than 170 countries, Sirma serves a broad enterprise audience seeking advanced technology solutions. The company maintains multiple global offices and partners with leading technology providers such as Apple, IBM, Oracle, Microsoft, and VMware. Technically, the website employs modern web technologies including Astro framework, JavaScript libraries like jQuery, Tiny Slider, and Headroom.js, and integrates advanced analytics and tracking tools such as Google Analytics, Amplitude, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO and accessibility features, hosted via GoDaddy with HTTPS enabled. From a security perspective, the site uses HTTPS and Google reCAPTCHA v3 for form protection but lacks DNSSEC and security headers, and does not publish a security policy or incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. No terms of service page was found. Overall, the website is professional, trustworthy, and content-rich, with moderate security posture and privacy compliance. Strategic improvements in DNS security, cookie consent, and security transparency would enhance trust and compliance.

S

Salexor

salexor.com

60

Salexor is a technology-driven SaaS company specializing in AI-powered digital marketing solutions designed to maximize conversion rates and reduce marketing spend. The platform offers a comprehensive suite of products including real-time visitor engagement, AI agents, audience segmentation, email campaigns, automation flows, targeted offers, content management, analytics, mobile apps, and integrations with leading e-commerce and CRM platforms. The company targets businesses primarily in North America and Europe, aiming to enhance digital sales performance and customer engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed product information. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and PureCounter.js, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. WHOIS data is missing or indicates the domain may be newly registered or privacy protected, which slightly impacts trust but is mitigated by the presence of a parent company, Sirma, and detailed contact information. Overall, Salexor presents a credible and mature digital marketing platform with room for improvement in privacy compliance and security transparency.

K

Krka

krka.bg

10

Krka Bulgaria is a subsidiary of the well-established Krka pharmaceutical group, specializing in the development, production, and marketing of generic medicinal products. The website reflects a professional and consistent brand image, targeting healthcare professionals and consumers interested in pharmaceutical and health products. The company holds a strong market position as a leading generic pharmaceutical manufacturer with a 70-year history. Technically, the website is built on modern frameworks such as Nuxt.js, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high business credibility and compliance with GDPR requirements.

The website casinoble.bg serves as an informational portal focused on live casino games and online gambling targeted primarily at Bulgarian players. It provides detailed content about popular casino games, live dealer experiences, and responsible gambling practices. The site positions itself as a resource for players seeking information on casino bonuses, game rules, and strategies, without directly operating gambling services. Technically, the site is built on WordPress with modern analytics and tracking tools such as Google Tag Manager, RudderStack, and FingerprintJS. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. WHOIS data is privacy protected under GDPR, registered with a Bulgarian registrar, and shows no immediate red flags. Overall, the site is moderately trustworthy but would benefit from enhanced privacy disclosures and security hardening.

C

Coface

coface.bg

10

Coface Bulgaria is a leading provider of trade credit insurance, debt collection, and business information services, supporting businesses in managing credit risk and ensuring payment security. As part of the global Coface Group founded in 1946, it leverages a strong international network and expertise to serve a broad range of business clients. The website is professionally designed, localized in Bulgarian, and provides comprehensive information about its services and corporate presence. Technically, the site uses modern frameworks such as Symfony and Ibexa CMS, integrates consent management via Didomi, and employs Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence aligned with business credibility and compliance requirements.

П

ПРОФИ КРЕДИТ България ЕООД

proficredit.bg

48

PROFI CREDIT Bulgaria EOOD operates as a fast credit provider offering installment loans ranging from 100 BGN to 5000 BGN with flexible repayment terms. The company targets Bulgarian individuals aged 18 to 80, providing quick loan approvals with minimal formalities. The website demonstrates a solid market position with over 17 years of experience and multiple physical offices across Bulgaria. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics. Security posture is good with HTTPS enforced and GDPR compliance evident through privacy and cookie policies. No critical vulnerabilities were detected, and the site maintains trust through certifications and customer testimonials. Overall, the website is professional, secure, and compliant, supporting the company's credibility in the Bulgarian financial services market.

P

PANTHEON

datalab.bg

56

Datalab.bg is a Bulgarian regional provider of the PANTHEON business information system, offering ERP and business process optimization software solutions. The company targets businesses seeking to improve efficiency and organization through digital transformation. The website demonstrates a mature digital presence with multi-country partner domains, indicating a well-established market position in the Balkan region. Technically, the site is built on WordPress with the Enfold theme, integrating modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Google reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the domain registration data aligns with the business claims, supporting legitimacy. The website is safe, professional, and compliant with privacy regulations.

N

Naval Technology Bulgaria EOOD

ntb.bg

56

Naval Technology Bulgaria EOOD is a Bulgarian subsidiary of the German naval shipbuilding group NVL, specializing in naval vessel design and engineering services. Established in 2021, it operates from Varna, Bulgaria, focusing on the Multipurpose Modular Patrol Vessel (MMPV) program for the Bulgarian Navy. The company offers design, technical surveillance, integrated logistics support, and warranty engineering. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a strong business presence in the naval transportation sector. Technically, the site uses Drupal 10 CMS, integrates Matomo for analytics, and employs a cookie consent mechanism, demonstrating good digital maturity and privacy compliance. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response information are lacking. WHOIS data is privacy protected but consistent with the business claims, supporting legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility.

C

CTE Трейлърс

ctetrailers.bg

41

CTE Трейлърс is a Bulgarian company specializing in the sales and servicing of trailers, semi-trailers, superstructures, and parts, particularly for the Krone brand. The company positions itself as a trusted provider in Bulgaria, targeting businesses and individuals requiring transportation equipment. Their website reflects a professional digital presence built on WordPress with WooCommerce, enhanced by SEO and user experience optimizations. The technical infrastructure is modern and includes Google Analytics and reCAPTCHA for security and analytics purposes. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though improvements could be made by implementing security headers and explicit privacy policies. The domain WHOIS data is limited due to GDPR privacy protections but shows an active and legitimate registration status. Overall, the website is safe, business-focused, and trustworthy, with room for enhanced privacy compliance and security hardening.

П

Пламком ООД

plamcom.bg

48

Пламком ООД is a Bulgarian company specializing in engineering solutions for heating, ventilation, air conditioning, and solar installations primarily serving the Burgas region. The company represents Austrian brands such as Easypell and ÖkoFEN, offering products like heat pumps and pellet boilers. Their business model focuses on providing tailored engineering solutions, product sales, and maintenance services. The website reflects a regional market position with a clear focus on energy efficiency and sustainable heating technologies. Technically, the website uses a mix of legacy and modern JavaScript libraries, hosted by a reputable Bulgarian hosting provider. The site is mobile optimized and includes standard analytics tools such as Google Analytics and Tag Manager, indicating moderate user tracking. Security posture is adequate with HTTPS enforced and secure form handling, though some improvements in security headers and library updates are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration is legitimate and consistent with the business profile, though WHOIS data is privacy protected as per GDPR. The website is professional, trustworthy, and safe for general audiences.

L

Locus Publishing

locus-publishing.com

49

Locus Publishing is a Bulgarian-based small e-commerce bookstore and publishing organization established in 2004. The company operates a WordPress WooCommerce powered website with a focus on selling books and promoting knowledge investment to Bulgarian-speaking audiences. The website uses common web technologies and plugins such as Divi theme, Rank Math SEO, and Monarch social sharing, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, contact information, and advanced security headers, which limits its compliance and security posture. The domain is well-established and consistent with the business claims, hosted by a Bulgarian hosting provider. Overall, the website presents a basic but functional e-commerce platform with room for improvement in privacy, security, and user trust features.

B

Bulgarian Intelligent Transport Systems Association

bitsa.bg

43

The Bulgarian Intelligent Transport Systems Association (BITSA) is a specialized expert association focused on the development and promotion of intelligent transport systems in Bulgaria. It operates as part of the ITS Europe partner network, aiming to enhance sustainable, safe, and efficient transportation through policy advocacy, projects, and stakeholder engagement. The website reflects a professional and consistent brand presence with clear mission and vision statements targeting transport sector professionals and partners. Technically, the website is built on WordPress using Elementor and integrates modern web technologies including Bootstrap and Google reCAPTCHA for form security. Hosting is provided by a reputable Bulgarian hosting provider, inferred from the nameservers. The site is mobile-optimized and SEO-friendly with structured data and meta tags properly implemented. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is privacy protected in compliance with GDPR, which is justified for this type of organization. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, BITSA's website demonstrates a solid digital presence with good business credibility and technical implementation. Enhancing privacy compliance and security headers would further strengthen its security posture and trustworthiness.

Д

Данон България

danone.bg

48

Danone Bulgaria operates as a leading manufacturer and distributor of fresh dairy products in Bulgaria, with a strong market position since 1995. The website reflects a mature business with a comprehensive product portfolio and active social responsibility initiatives. The digital presence is professional, with good content quality and consistent branding. Technically, the site uses established frameworks like Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and advanced security headers. Privacy compliance is well addressed through detailed cookie policies and GDPR-aligned consent. Overall, the site is trustworthy and professionally maintained, supporting Danone's brand reputation in Bulgaria.

The website www.otustanausta.com is a Bulgarian language forum platform focused on user-generated recommendations for various services, specialists, and businesses across different regions in Bulgaria. It serves as a community-driven resource for sharing trusted local information, with monetization primarily through Google Adsense advertising. The site uses the phpBB forum software and integrates common web technologies such as Google Fonts and Font Awesome. While the site is accessible over HTTPS and includes basic security headers, it lacks advanced security measures such as Content Security Policy and X-Frame-Options headers. The presence of session IDs in URLs poses a potential security risk. No privacy, cookie, or terms of service policies are explicitly found, indicating limited privacy compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site provides useful community content but requires improvements in security and compliance to enhance trust and protect users.

C

Central European Media Enterprises

seirsanduk.net

9

The website seirsanduk.net operates as an online streaming portal primarily focused on Bulgarian TV channels, notably bTV and its associated media group channels. It provides free access to live TV streams and program schedules, targeting a general Bulgarian-speaking audience interested in national television content. The business model revolves around ad-supported streaming services, leveraging partnerships and alternative links to enhance accessibility. The site is positioned as a media streaming service rather than the official broadcaster's primary domain, as indicated by the recent domain registration date compared to the long-established bTV brand.

П

ПАШОВИ КАРС ООД

pashovcars.com

57

Pashov Cars is a Bulgarian company specializing in the sale of high-quality used cars sourced from Europe, the USA, and Canada. The company offers a comprehensive range of services including free consultations, preferential leasing and credit terms, vehicle registration assistance, insurance services, and professional car servicing. Positioned as a trusted partner in the Bulgarian used car market, Pashov Cars targets individual and business customers seeking reliable automotive solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is built on a custom e-commerce solution by Valival Commerce, with moderate performance and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the security posture is adequate for the business size, with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

S

SofDestroy.com

sofdestroy.com

59

SofDestroy.com is a small Bulgarian company specializing in demolition, cleaning, and construction waste removal services primarily in Sofia. The website presents a professional image with detailed service descriptions, pricing, and customer testimonials, positioning the company as a reliable local service provider. Technically, the site is built on WordPress using the Astra theme and Rank Math SEO plugin, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and privacy compliance policies. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and security measures.

А

Адвокатска кантора Дотова и Божинова

soflaw.bg

48

Адвокатска кантора Дотова и Божинова е утвърдена малка адвокатска кантора, базирана в София, България, предлагаща широк спектър от правни услуги, включително търговско, семейно, административно, трудово и медицинско право, както и недвижими имоти и изпълнителни дела. Сайтът е професионално изработен на WordPress с използване на модерни технологии и добри SEO практики. Въпреки липсата на публично достъпна политика за поверителност и бисквитки, контактната информация е изчерпателна и лесно достъпна, а клиентските отзиви и медийните упоменавания подсилват доверието в кантората. Техническият стек е съвременен, но липсват някои важни мерки за сигурност като security headers и политика за инциденти.

P

PraneKilimi.bg

pranekilimi.bg

51

PraneKilimi.bg is a small local Bulgarian business specializing in professional carpet and textile cleaning services in Sofia. The company offers a range of services including washing carpets, rugs, mats, blankets, and other textiles with free pickup and delivery within Sofia. The website demonstrates a solid market position with over 10 years of experience and a loyal customer base including institutions. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible cookie consent mechanism and only a basic privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

E

Elinor.bg

elinor.bg

50

Elinor.bg is a Bulgarian e-commerce website specializing in the sale of perfumes, cosmetics, and makeup products. The site targets a general audience interested in beauty products and offers a large catalog with over 30,000 items. The business model is retail-focused, leveraging online sales channels to reach customers primarily in Bulgaria. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Criteo, and SendPulse, indicating a mature digital marketing infrastructure. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience.

А

Акаунт Консулт КО

acc-consultco.com

55

Акаунт Консулт КО is a professional accounting firm based in Sofia, Bulgaria, offering comprehensive accounting, tax, and payroll services tailored to various business sectors including transport, retail, healthcare, hospitality, and non-profit organizations. The company emphasizes personalized service, over 20 years of experience, and flexible solutions including remote service options. Their market position is strong within the Bulgarian accounting services sector, targeting small to medium-sized enterprises. Technically, the website is built on WordPress with standard plugins and demonstrates good SEO and mobile optimization, though some improvements in security headers and privacy compliance are recommended. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and content-rich, though it lacks formal privacy and cookie policies which impacts compliance scoring.

Н

Национално Движение Русофили

rusofili.bg

51

Национално Движение Русофили is a Bulgarian non-profit organization dedicated to promoting Russian culture, history, and Bulgarian-Russian relations. The website serves as a media platform offering news, cultural event information, historical research, and educational content primarily targeted at Bulgarian-speaking audiences interested in Russian topics. The organization positions itself as a cultural and societal bridge, continuing the traditions of Russophilia in Bulgaria. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and some content protection scripts, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

Н

Нет Инфо ЕАД

abv.bg

61

АБВ Поща, operated by Нет Инфо ЕАД, is a leading Bulgarian email service provider established in 1998. The website offers a secure and user-friendly email platform with 15 GB storage, contact management, and mobile applications. It integrates a rich media ecosystem featuring news, weather, horoscopes, and entertainment content from trusted Bulgarian partners, positioning itself as a comprehensive digital portal for Bulgarian internet users. The business model combines free email services with advertising and premium offerings (ABV+). The company maintains a strong market presence with consistent branding and official mobile app distribution.

Н

НАНО-КОМ ООД

nanocom-bg.com

65

НАНО-КОМ ООД operates a Bulgarian-language website focused on alternative medicine, health, and wellness, offering informational content alongside an e-commerce platform selling related products such as literature, amulets, and crystals. The company has a long-standing online presence since 2005, positioning itself as a niche player in the Bulgarian alternative health market. The website leverages modern web technologies including Drupal 11, WordPress with WooCommerce, and Elementor for content management and e-commerce functionalities. The technical infrastructure is moderately optimized for performance and mobile responsiveness, with a good SEO foundation. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional and trustworthy within its niche but could benefit from enhanced security and compliance transparency.

П

Политическа партия Русофили за възраждане на Отечеството

ppvo.bg

43

The website represents a Bulgarian political party named "Политическа партия Русофили за възраждане на Отечеството" focused on Russian-Bulgarian relations and patriotic themes. It serves as an information and advocacy platform with regular content updates, news, and partner affiliations. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted likely by SuperHosting.BG. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though some security best practices like CSP headers and security.txt are missing. Privacy compliance is partial with a GDPR-compliant privacy policy but lacking cookie consent mechanisms. WHOIS data is limited due to GDPR but domain status and nameservers indicate legitimacy. Overall, the site is functional, trustworthy, and serves its political advocacy purpose effectively.

А

Адвокат Атанас Панчев

atanas-panchev.com

49

Адвокат Атанас Панчев is a Bulgarian legal professional offering specialized legal services primarily in civil law and related legal areas such as administrative, property, insurance, commercial, and tax law. The business operates as a small legal practice based in Sofia, Bulgaria, targeting both individual and corporate clients. The website presents a professional image with clear service descriptions and contact options, including a contact form protected by Google reCAPTCHA. The technical infrastructure is based on WordPress with Elementor and Rank Math SEO, indicating a moderate level of digital maturity. Security measures include HTTPS and cookie consent, but lack advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its local market niche.

The website 'в-к РОДОВО ИМЕНИЕ' is a Bulgarian cultural and informational site focused on the concept of 'Rodovo Imenie' — a family-owned sustainable estate. It serves a niche audience interested in permaculture, family heritage, and sustainable living. The site provides content in Bulgarian, including articles, poetry, and links to related publications and an online bookstore. The business model appears informational and community-oriented without direct e-commerce on this site. Technically, the site uses older JavaScript libraries such as jQuery 1.8.3 and integrates Google Analytics and Google Custom Search Engine for search and tracking. The site is hosted under a reputable registrar but lacks modern security features such as DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps. No direct contact information or security incident response details are provided, limiting user trust and transparency.

W

winebg.info

winebg.info

50

winebg.info is a Bulgarian media website dedicated to wine culture, events, wineries, and wine tourism in Bulgaria. The site targets wine enthusiasts and consumers in Bulgaria, providing content such as event coverage, tasting notes, winery profiles, and cultural articles. The website uses WordPress CMS with a variety of plugins to enhance user experience, including age verification to restrict underage access to alcohol-related content. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Overall, the site appears legitimate and focused on its niche audience with room for security and compliance improvements.

S

Seir Sanduk

seirsanduk.com

51

Seir Sanduk operates as a Bulgarian online TV streaming platform offering free access to a variety of national and private TV channels, including sports, documentaries, and entertainment content. The site targets Bulgarian-speaking audiences and monetizes primarily through advertising networks such as Google Adsense and several programmatic ad providers. The platform is built on WordPress with common plugins for SEO and push notifications, indicating a moderate level of digital maturity. The website is accessible, mobile-optimized, and includes GDPR-compliant consent mechanisms, reflecting awareness of privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and explicit security policies. Overall, the site is functional and content-rich but would benefit from improved transparency and security hardening.

С

Страна

stranabg.com

42

StranaBG is a Bulgarian-based multilingual news and press release digest platform established in 2007. It provides content primarily in Bulgarian, Russian, English, Hungarian, Romanian, Slovak, and Turkish, targeting regional audiences interested in news and PR content. The business operates as a small media entity focusing on content publishing and distribution without evident e-commerce or transactional services. Technically, the website runs on Joomla CMS and integrates common analytics tools such as Google Analytics and Statcounter. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing critical security headers and DNSSEC. No privacy or cookie policies are published, and no contact information is provided, which impacts trust and compliance. The domain registration is consistent with the business age and shows no suspicious patterns, indicating legitimacy.

B

BGtop.net

bgtop.net

45

BGtop.net operates as a Bulgarian web directory and ranking platform, providing a catalog of Bulgarian websites ranked by user votes. Established in 2002, it holds a strong market position as a popular resource for Bulgarian internet users seeking categorized website listings. The platform offers services such as site addition, editing, and statistical insights, targeting website owners and general users interested in Bulgarian web content. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Adsense for monetization, and Google Analytics for traffic analysis. Hosting appears to be managed via sureserver.com nameservers with domain registration through eNom, LLC. The website demonstrates basic mobile optimization and accessibility with moderate performance and good SEO practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Overall, the site is safe for general audiences with no adult content detected. The domain age and registration details support the legitimacy and stability of the service.

A

Alaya Tsanova

alayaart.com

53

Alaya Tsanova operates an online art gallery and e-commerce platform specializing in original artworks, prints, jewelry, and related artistic products. The website targets art enthusiasts and collectors, primarily in Bulgaria but accessible internationally. The business model focuses on direct sales through WooCommerce integrated into a WordPress site, supplemented by exhibition events and custom orders. The site demonstrates a consistent brand presence with clear navigation and professional design. Technically, the website leverages modern WordPress technologies including Elementor for page building, WooCommerce for e-commerce, and NitroPack for performance optimization. It integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital marketing approach. The site is mobile-optimized and performs well with good SEO practices. From a security perspective, the site enforces HTTPS and includes standard security headers, cookie consent mechanisms, and privacy policies aligned with GDPR. However, there is a lack of explicit security policy, incident response contacts, and vulnerability disclosure information. The absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and contact information to improve business credibility and security posture.

S

SuperHosting.BG Ltd.

obemnibukvi.eu

43

The website obemnibukvi.eu represents a Bulgarian company specializing in the design, manufacturing, and installation of volumetric letters and advertising signage. With over 26 years of experience, the company serves clients across Bulgaria with offices in Sofia, Varna, and Veliko Tarnovo. The business is positioned as an established local player offering comprehensive services including design, production, and installation of advertising letters and related signage products. The website content is primarily in Bulgarian and targets a general audience interested in advertising and signage solutions. Technically, the website is built on WordPress CMS and utilizes common web technologies such as PHP, jQuery, FancyBox for image galleries, Google Fonts, and FontAwesome icons. The hosting provider is SuperHosting.BG Ltd., a reputable Bulgarian hosting company. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. External integrations include Google Translate and StatCounter for analytics. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. There is no privacy or cookie policy present, which indicates compliance gaps with GDPR and related privacy regulations. The contact form is present and appears to have validation, but no explicit security or incident response policies are disclosed. The domain WHOIS data is transparent and consistent with the hosting provider, with no suspicious patterns detected. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, improved security headers, and formalized security policies to strengthen trust and regulatory adherence.

Р

Райц-2 ООД

bgvizitka.com

46

The website bgvizitka.com represents a small Bulgarian retail business, Райц-2 ООД, specializing in online ordering and digital printing of business cards. Established in 2006, the company offers a streamlined e-commerce platform built on WordPress and WooCommerce, targeting local businesses and individuals seeking convenient and fast printing services. The site features a product catalog, shopping cart, wishlist, and multilingual support via Google Translate, indicating a moderate level of digital maturity. Technically, the site uses common WordPress plugins and themes, hosted by a Bulgarian hosting provider, with SSL enabled for secure transactions. However, the absence of privacy and cookie policies, lack of security headers, and no visible incident response or vulnerability disclosure mechanisms highlight compliance and security gaps. Overall, the business appears legitimate and operational with room for improvement in security and privacy compliance.

К

Кълиган България

culligan.bg

55

Culligan България is a reputable provider of filtered drinking water solutions for both business and residential customers in Bulgaria. The company offers a range of products including water dispensers, built-in filtration systems, and water softeners, supported by professional service and a one-month free test offer. The website reflects a strong market position as part of the international Culligan brand, targeting local Bulgarian audiences with clear, relevant content and consistent branding. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses industry-standard tools like Google Tag Manager, Piwik PRO analytics, and OneTrust for cookie consent management. The site is mobile-optimized, SEO-friendly, and employs HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with moderate tracking and marketing tools in use. Strategic improvements in security policy publication and accessibility could further strengthen its posture.

Б

Българска платформа за международно развитие

bpid.eu

10

The Bulgarian Platform for International Development (Българска платформа за международно развитие) is a well-established non-profit network founded in 2009, uniting 22 NGOs focused on international development, global education, and sustainable development goals. The platform serves as a national hub for advocacy, education, and cooperation in Bulgaria, with active participation in international networks such as FORUS. Their website reflects a professional and consistent brand image, targeting NGOs, educational institutions, and stakeholders interested in global development issues. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted by SuperHosting.BG Ltd., and demonstrates good mobile optimization and SEO practices.

1

11teamsports.bg

11teamsports.bg

10

11teamsports.bg is a professional e-commerce retailer specializing in football-related sportswear, footwear, and equipment targeting the Bulgarian market. The website offers a broad catalog of products from major brands such as Nike, adidas, and PUMA, catering to football players, teams, and fans. The business operates multiple regional sister sites across Central and Eastern Europe, indicating a well-established regional presence. The site demonstrates a good level of digital maturity with modern web technologies, responsive design, and integrated analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. However, direct contact information such as emails or phone numbers is not prominently displayed, relying mostly on contact forms. Overall, the domain registration is privacy protected but consistent with legitimate business practices. The website scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional online retailer.

U

Up Tombou

uptombou.bg

43

Up Tombou operates as a licensed provider of electronic food vouchers, gift cards, and corporate fuel cards in Bulgaria, targeting businesses and their employees. The website presents a professional image with clear business offerings aligned with regulatory compliance. The technical infrastructure is based on WordPress with modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the site is legitimate and functional but could improve privacy compliance and contact transparency.

R

Renault Trucks Bulgaria

renault-trucks.bg

68

Renault Trucks Bulgaria operates as a regional subsidiary of the global Renault Trucks brand, providing a comprehensive range of transport solutions and commercial vehicles tailored to various sectors including long-distance transport, construction, and municipal services. The website reflects a professional and consistent brand presence, targeting business customers in Bulgaria with localized content and services. Technically, the site is built on Drupal CMS and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and HubSpot, complemented by a OneTrust cookie consent mechanism to address privacy compliance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced for better protection. The absence of explicit privacy and terms of service policies is a notable gap in compliance documentation. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

Р

Райц-2

raitz-2.com

46

Райц-2 is a Bulgarian advertising agency established in 2001, offering a broad range of services including media advertising, print and outdoor advertising, PR, web design, and corporate branding. The company targets businesses seeking comprehensive advertising solutions and maintains a consistent brand presence with active social media channels. The website is built on WordPress with common plugins and integrates Google Analytics and Tag Manager for tracking. HTTPS is enforced, but security headers are lacking, and no privacy or cookie policies are found, indicating gaps in compliance. The domain is long-standing and registered transparently, supporting the business's legitimacy.

Н

НАФТСО

naftso.org

40

НАФТСО is a Bulgarian national association representing private security firms, established in 2003. The organization provides membership services, partnerships with government bodies, and access to normative documents and standards relevant to the security sector. The website serves as an information hub for members and stakeholders, offering documents, news, and contact channels. Technically, the site is built on WordPress with common plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, and uses Google Fonts and jQuery libraries. While the site is secured with HTTPS, it lacks DNSSEC and uses an outdated WordPress version, which may pose security risks. No privacy or cookie policies were found, indicating potential compliance gaps. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

Ч

Черноморски изследователски енергиен център

sharerenewables.bg

32

SHARES Gateway Bulgaria is an informational portal dedicated to supporting the development of citizen energy communities in Bulgaria. It provides comprehensive resources including project ideas, financing options, legal frameworks, best practices, and communication materials to empower citizens, SMEs, and local authorities to engage in renewable energy initiatives. The portal is positioned as a niche non-profit platform facilitating active citizen participation in the energy transition. Technically, the website is built on WordPress using the Genesis Framework and related plugins, hosted by a Bulgarian provider, and demonstrates moderate performance with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal incident response documentation. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-aligned with its mission, though improvements in security headers and privacy mechanisms are recommended.

E

ePay.bg

epaygo.bg

53

ePay.bg is a leading Bulgarian internet payment system offering a wide range of financial services including utility bill payments, bank transfers, online shopping, and tax payments. The platform serves both consumers and merchants, providing secure and convenient payment solutions integrated with major debit and credit cards as well as micro accounts. The website is professionally designed with clear navigation and mobile optimization, supporting a strong market position in Bulgaria's digital payment ecosystem. Technically, the site uses modern frameworks like Bootstrap and jQuery, with HTTPS enforced and secure login mechanisms. Security policies and insurance against fraud are prominently featured, enhancing user trust. However, some improvements are recommended such as implementing cookie consent mechanisms and security headers to strengthen privacy compliance and security posture. Overall, the domain registration is privacy protected but consistent with the business profile, indicating legitimacy and stability.

The website www.epay.bg/v3main/front is currently inaccessible, returning a 503 Service Temporarily Unavailable error with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is registered consistently with the expected business location in Bulgaria and appears legitimate based on WHOIS data. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or social media links. The security posture cannot be assessed from the provided data. Overall, the site is currently non-functional or blocked, limiting any comprehensive analysis.

Б

Българска музикална асоциация

bgma.bg

47

The Bulgarian Music Association (Българска музикална асоциация) is a professional non-profit organization representing and protecting the interests of professional musicians in Bulgaria. The website clearly communicates its mission to support musicians through advocacy, education, international cooperation, and promotion of Bulgarian music. The organization targets professional musicians and stakeholders in the Bulgarian music sector. The site is well-positioned as a leading national music association with international outreach. Technically, the website is built on WordPress with a modern tech stack including React, UIkit, and various performance and SEO plugins. It is well-optimized for mobile and desktop, with fast loading times and good accessibility. The site uses HTTPS and Google Tag Manager for analytics and tracking, indicating a mature digital infrastructure. From a security perspective, the site employs HTTPS and does not expose sensitive data. However, some standard security headers are not explicitly detected, and there is no visible security policy or incident response contact information. The WHOIS data is privacy protected in compliance with GDPR, which is appropriate for this type of organization. No suspicious patterns or vulnerabilities were found. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Bulgarian Music Association. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve transparency and trust.

C

COMTECHSYS

comtechsys.biz

47

COMTECHSYS is a small Bulgarian IT company founded in 2009, specializing in computer hardware supply, maintenance, and web development services. The website is built on Joomla CMS and targets a local Bulgarian audience with content in Bulgarian language. The technical infrastructure includes modern JavaScript libraries and Google Fonts, hosted on SuperHosting.bg. The website is mobile optimized with basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. No privacy or cookie policies are published, and contact information is not explicitly provided on the homepage. The domain registration is privacy protected but consistent with the business profile and location. Overall, the website presents a basic but functional online presence for a small IT service provider.

O

obshtini.bg

obshtini.bg

52

The website obshtini.bg serves as a centralized portal providing access to municipal normative acts for various Bulgarian municipalities. It primarily functions as a gateway linking to municipality-specific subdomains such as Sofia, Varna, Plovdiv, and others. The site targets residents and officials seeking local government legal documents. Technically, the site is built using Angular 9 with PrimeNG components, indicating a modern frontend framework, though some legacy scripts like jQuery are commented out. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate; HTTPS is assumed but no security headers were detected in the provided data, and no privacy or cookie policies are present, which impacts compliance. The WHOIS data is privacy protected due to GDPR, typical for domains related to government or public services in the EU, and the domain appears legitimate and active. Overall, the site is functional and safe but would benefit from enhanced security headers, privacy compliance, and contact transparency to improve trust and compliance.