High-risk security reports

C

Communauté Emmaüs de Paris

emmaus-paris.fr

38

Emmaüs Paris is a non-profit community organization focused on social solidarity through donation collection, volunteer engagement, and operation of eight solidarity shops in Paris. The website serves as a portal for donors, buyers, and volunteers, providing information on how to contribute and participate. The organization maintains active social media profiles and provides contact information including a physical address and email. Technically, the website is built on WordPress with common plugins for SEO, forms, and maps, and enforces HTTPS for secure communication. However, the Google Maps integration suffers from API key issues, and no advanced security headers are detected. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. Overall, the site is functional, professional, and serves its community purpose effectively.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

K

KD Mlejn, z. ú.

mlejn.cz

40

KD Mlejn is a well-established non-profit cultural organization based in Prague, Czech Republic, with a history dating back to 1988 through its predecessor Klub Mlejn. The organization offers a variety of cultural services including theater performances, concerts, courses, residencies, and community events, targeting a broad audience interested in arts and culture. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site runs on WordPress with standard plugins for analytics and cookie compliance, hosted on a Czech hosting provider. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is long-registered and consistent with the organization's history, indicating legitimacy. Overall, the site is trustworthy and serves its community well, though improvements in privacy and security documentation are recommended.

A

Alfred ve dvoře

alfredvedvore.cz

40

Alfred ve dvoře is a small cultural institution based in Prague, Czech Republic, specializing in experimental and contemporary theater, dance, film, music, and visual arts. The website serves as a platform to showcase upcoming performances and events, targeting a general audience interested in avant-garde performing arts. The domain has been registered since 2003, indicating a well-established presence in the cultural sector. Technically, the website uses a custom or Nette-based CMS with jQuery and Google reCAPTCHA integration, but relies on somewhat outdated JavaScript libraries and lacks modern security headers. Privacy and cookie policies are absent, which poses compliance risks under GDPR.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

M

Mulhouse Expo S.A.E.M.L

foiredemulhouse.fr

40

Foire de Mulhouse is a well-established regional event organizer in France, hosting an annual fair with cultural themes and exhibitions. The website presents the 79th edition scheduled for May 2026, highlighting Italy as the thematic focus. The business operates primarily in the hospitality and event sector, targeting general public visitors interested in fairs and cultural events. The company behind the event is Mulhouse Expo S.A.E.M.L, a medium-sized entity with a long history since 2011. The website content is professionally presented in French, with clear navigation and relevant event information. Social media integration and partner links enhance its market presence. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap, and Google Analytics. Hosting is provided by OCI CLOUD as per WHOIS data. The site is mobile-optimized with good design quality, though some technical improvements are possible, such as updating libraries and enhancing accessibility. SEO is basic but functional. From a security perspective, the site uses HTTPS (assumed from domain and modern standards), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form collects user data but lacks visible anti-spam protections. No incident response or security policy information is provided. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and security hardening to reduce risk and enhance user trust.

M

Mulhouse Expo S.A.E.M.L

exterieursetjardin.fr

35

The website exterieursetjardin.fr represents a French event organizer, Mulhouse Expo S.A.E.M.L, specializing in gardening, outdoor living, and organic agriculture exhibitions. The site promotes the 'Extérieurs & Jardin' salon and the 'Ma Planète Bio' event, targeting gardening enthusiasts and the general public interested in bio and wellness. The business operates primarily as an event organizer with a regional market presence and a small company size founded in 2016. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap 3.3.4, and Revolution Slider, hosted on OCI CLOUD infrastructure. The site is mobile responsive with good navigation and content quality but lacks modern CMS integration and advanced SEO or accessibility features. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks important security headers such as CSP and HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. The contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional and professional but requires improvements in privacy compliance, security hardening, and modernization of technical components to enhance trust and security posture.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

S

Sencyb

sencyb.com

43

Sencyb is a small French web agency specializing in website creation, updating, SEO, and multimedia services primarily targeting clients in the Nièvre (58) and Cher (18) regions. The company offers a range of web solutions from static sites to e-commerce platforms, emphasizing tailored solutions to client needs and budgets. Their website is professionally designed using WordPress with Elementor and Astra theme, incorporating modern web technologies and analytics tools such as Google Analytics and Matomo. The presence of a client portal and blog subdomains indicates a structured service offering and client engagement strategy. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit privacy policies and security headers, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that impacts trustworthiness, though the overall digital presence suggests a legitimate business. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and improving transparency around data protection and incident response.

The website represents the Délégation Intergénérationnelle du Numérique, a small non-profit association within the École Normale Supérieure focused on intergenerational digital knowledge sharing and IT support for students. The site provides clear descriptive content about its mission and activities but lacks formal privacy, cookie, or terms of service policies. Technically, the site uses a simple modern CSS framework (Bulma) and is hosted by OVH, but lacks advanced security headers and visible analytics or tracking tools. The security posture is basic with no evident vulnerabilities but also no advanced protections. Overall, the domain registration is consistent with the organization's founding date and mission, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

V

Valabre

valabre.com

49

Valabre is a French public institution specializing in civil security training, research, new technologies, and prevention against major natural and technological risks. The organization serves as a central hub for professional training in civil security, conducting research programs, and developing innovative technologies to support risk management and emergency response. The website reflects a well-established entity with a clear focus on public safety and education, targeting professionals and public agencies involved in civil security and risk prevention. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and performance optimization tools. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is limited due to the absence of clear privacy and cookie policies. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and social media presence. Overall, Valabre's digital presence is professional and trustworthy, with room for improvement in privacy disclosures and security transparency.

E

Eiffage Infra-Bau SE

eiffage-infra.de

47

Eiffage Infra-Bau SE is a large, well-established infrastructure construction company with over 150 years of experience, operating primarily in Germany and Europe. The company offers a broad range of construction and engineering services including infrastructure, rail, noise protection, and specialized construction sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and comprehensive organizational information. The technical infrastructure is modern and includes GDPR-compliant cookie consent and analytics via Google Tag Manager. Security posture is good with HTTPS enforced and basic security best practices observed, though some HTTP security headers could be improved. Contact information and multiple company locations are clearly provided, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences.

U

UP&KO

alfieformation.fr

46

Alfie Formation is a French digital marketing training organization founded in 2020 and operating under the legal entity UP&KO. The company offers personalized and actionable digital marketing training programs delivered by a network of over 220 experts across France. Their business model includes matching clients with suitable trainers, organizing training sessions, and facilitating up to 100% financing through OPCO, supported by their QUALIOPI certification. The website is professionally designed, well-structured, and optimized for SEO, targeting professionals and companies seeking digital marketing skills development. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and HubSpot. Security posture is solid with HTTPS, hCaptcha for forms, and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site presents a credible, professional, and user-friendly platform for digital marketing education.

S

SEMNAUT

semnaut.com

43

SEMNAUT operates as a SaaS platform focused on SEO project management, targeting SEO professionals, agencies, freelancers, and e-retailers. The platform offers features such as position tracking, action management, automated reporting, SEO alerts, and suggestions to improve SEO performance. The website is professionally designed, with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern plugins and analytics tools, including Matomo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks some security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

I

Impol

impol.si

33

Impol is a well-established Slovenian aluminum manufacturing group with a strong presence in Europe and the USA. The company specializes in producing a wide range of aluminum products serving diverse industries such as automotive, pharmaceutical, food, transport, and aerospace. Their market position is strong, being the 6th largest Slovenian exporter and a leader in aluminum rod production in Europe. The website reflects a mature digital presence with multilingual support, detailed product and industry information, and a focus on sustainability and innovation. Technically, the site uses WordPress with modern libraries and integrates Google Analytics and Tag Manager for tracking, alongside a comprehensive cookie consent mechanism. Security posture is good with HTTPS and reCAPTCHA in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

I

ILD d.o.o.

ild.hr

40

ILD d.o.o. is a Croatian small business specializing in innovative and patented flat roof leak detection using the EFVM® method. The company also provides maintenance, repair, and safety systems for flat roofs, including fall protection compliant with European standards. Their market position is that of a niche specialist with a strong local presence and a portfolio of reputable clients. Technically, the website is built on WordPress with Elementor, uses modern web technologies, and is hosted by a Croatian registrar. The site is mobile optimized and provides a good user experience, though it lacks some advanced SEO and accessibility features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security posture.

The website goldmangraff.si is currently inaccessible beyond a robot challenge screen designed to verify visitors are not automated bots. This challenge page uses JavaScript-based proof-of-work computations to mitigate automated access, indicating the presence of a Web Application Firewall or similar security mechanism. Due to this blocking, no substantive business content, contact information, or policies are available for analysis. The domain is newly registered in August 2023 and hosted by Plus Hosting Grupa d.o.o., a legitimate hosting provider in Slovenia. The technical infrastructure includes modern JavaScript cryptographic functions and Web Workers for client-side challenge processing, but lacks visible security headers or HTTPS enforcement details in the provided data. Overall, the site’s security posture shows basic bot mitigation but lacks transparency in privacy, cookie, and contact policies, limiting trust and compliance evaluation.

G

GIC

gic.si

43

GIC is a well-established Slovenian construction company specializing in a wide range of building and infrastructure services, including industrial, commercial, and residential projects. With over 33 years of experience and more than 1000 completed projects, they maintain a strong market position as experts in their field. Their integrated business model includes in-house laboratories, concrete plants, and quarries, enabling comprehensive project management and execution. The website reflects a professional and modern digital presence, leveraging technologies such as Bootstrap, Leaflet, and Google Tag Manager for analytics and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

D

DOBA Fakultet

doba.hr

45

DOBA Fakultet is a private, internationally accredited online higher education institution based in Slovenia, offering bachelor, master, and doctoral programs fully online. The institution targets students and working professionals seeking flexible and modern education aligned with EU standards and global trends such as sustainability and digitalization. The website demonstrates a mature digital presence with a modern tech stack including jQuery, Bootstrap, and various UI libraries, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security policies and incident response information are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a reputable educational business with a strong market position in online education in the region.

M

MARKO BUTINAR - odvetnik

odvetnik-butinar.si

45

MARKO BUTINAR - odvetnik is a Slovenian legal services provider specializing in tax, insolvency, commercial, labor, civil, and criminal law. The firm positions itself as a reputable small law office with memberships in several prestigious legal organizations, including the Slovenian Bar Association and international bodies such as the IBA and NYSBA. The website reflects a professional and trustworthy image, targeting individuals and businesses seeking legal counsel in Slovenia. The business model is service-oriented, focusing on personalized legal assistance with clear contact channels and transparent communication. Technically, the website is built on WordPress using the Avada theme, enhanced with Yoast SEO for search optimization and CookieYes for cookie consent management. The site is hosted by NEOSERV.si, a Slovenian hosting provider, and employs modern web technologies including HTTPS, jQuery, and Google Analytics for traffic analysis. Accessibility features and responsive design are well implemented, ensuring usability across devices. From a security perspective, the site uses HTTPS with a good SSL configuration and has implemented cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and there is no visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, with excellent content quality and user experience. Strategic recommendations include adding security headers, publishing a security policy, and implementing a security.txt file to improve transparency and incident response readiness.

Nabium, d. o. o., is a Slovenian small business specializing in consulting, education, fairy tale production, marketing services, and creative writing. The company positions itself as a provider of strategic, innovative, and cost-effective marketing and communication solutions tailored to client needs. The website reflects a professional and consistent brand image with clear contact information and a focus on client service. Technically, the site is built on WordPress using WPBakery Page Builder and standard web technologies, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security transparency.

I

IRDO – Inštitut za razvoj družbene odgovornosti

irdo.si

38

IRDO – Inštitut za razvoj družbene odgovornosti is a Slovenian non-profit institute dedicated to promoting social responsibility and sustainable development. The organization offers a range of services including conferences, training, consultation, awards, research, and publishing. It holds a national partnership with CSR Europe, positioning itself as a key player in the social responsibility sector within Slovenia and the broader EU region. The website targets managers and professionals interested in integrating social responsibility into their organizations. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder and Ultimate VC Addons, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO features.

I

International Osteoporosis Foundation

buildbetterbones.org

39

Build Better Bones is a non-profit educational website operated by the International Osteoporosis Foundation, providing global resources to individuals diagnosed with osteoporosis, their caregivers, and those seeking prevention strategies. The site offers comprehensive guidance on exercise, nutrition, and home safety to support bone health. The website is well-branded, professionally designed, and clearly targeted at a healthcare audience with a focus on osteoporosis education. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are present and linked to the parent foundation's domain, indicating good privacy compliance. However, explicit security policies and incident response information are not published. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No vulnerabilities or suspicious domains were found. WHOIS data is unavailable due to privacy protection, which is justified given the non-profit nature of the organization. Overall, the site demonstrates a trustworthy and professional presence with minor areas for security enhancement. The overall risk is low, with recommendations focusing on improving security headers, publishing security policies, and adding vulnerability disclosure information to enhance transparency and trust.

I

International Osteoporosis Foundation

iofacademy.org

40

IOF Academy is a specialized e-learning platform dedicated to osteoporosis and bone health education, operated by the International Osteoporosis Foundation. It offers a range of CME accredited courses designed by global experts, targeting healthcare professionals and researchers. The platform is well-branded, professionally designed, and provides comprehensive educational content with certificates of achievement. Technically, the website is built on Drupal 10 with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, supported by its association with a reputable international foundation.

Z

ZEOK e.V. Leipzig

zeok.de

32

ZEOK e.V. Leipzig is a small non-profit organization focused on promoting open culture, anti-racism, and peaceful coexistence in Leipzig, Saxony, and across Germany. The website presents a professional and well-structured digital presence built on WordPress with the Kadence theme and related plugins, supporting educational and cultural initiatives such as workshops, publications, and festivals. The organization targets educators, activists, and the general public interested in diversity and anti-discrimination efforts. Technically, the site is well implemented with modern technologies, good mobile optimization, and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, reflecting the organization's mission and activities effectively.

K

korientation e.V.

korientation.de

41

korientation e.V. is a small non-profit organization based in Germany, dedicated to serving the Asian-German and Asian diasporic communities with a focus on cultural, political, and social issues. The organization operates as a self-organization and network, providing community events, political education, publications, and collaborative projects against racism. Their market position is niche but well-established within their community, with a history dating back to 2008. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and libraries, hosted likely by a German hosting provider, and implements HTTPS with cookie consent mechanisms. Security posture is good but could be improved by adding explicit security headers and incident response policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and well-maintained, with moderate user tracking via analytics and a clear privacy policy compliant with GDPR.

R

RAA Berlin

raa-berlin.de

41

RAA Berlin is a medium-sized non-profit organization based in Germany focused on diversity, inclusion, and community engagement. Their website highlights projects, publications, and educational offerings aimed at promoting social inclusion and addressing marginalization. The organization maintains a consistent brand presence and targets a general audience interested in social issues. Technically, the website is built on TYPO3 CMS, hosted by netcup, and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and provides multilingual options. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response contacts. Privacy compliance is good with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

E

Each One Teach One (EOTO) e.V.

eoto-archiv.de

44

Each One Teach One (EOTO) e.V. is a small non-profit community organization based in Berlin focused on education, empowerment, and cultural preservation for Black, African, and Afro-diasporic communities. Founded in 2012, it operates a neighborhood library and organizes events, workshops, and advocacy initiatives. The website reflects a well-structured and content-rich platform targeting its community with multilingual support and clear navigation. Technically, the site uses modern web technologies including HTTPS and JavaScript libraries like Swiper.js for interactive content. Security posture is good with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

A

ACADEMIA d.o.o.

lahko.si

46

Lahko.si is a Slovenian educational platform dedicated to promoting lifelong learning through various educational programs, including live and online courses. The platform is supported by recognized educational entities such as ACADEMIA d.o.o. and ACS, positioning it as a reputable resource in the Slovenian education sector. The website offers video content with accessibility features like captions and transcripts, enhancing user engagement and inclusivity. Technically, the site is built on Drupal 10 with modern front-end technologies, ensuring a responsive and accessible user experience. However, explicit privacy policies and terms of service are not readily found, which may impact user trust and compliance. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and incident response contacts. Overall, the platform is a credible educational resource with room for improvement in privacy and security transparency.

W

Webtasy, d.o.o.

teachxr.si

45

teachXR.si is a Slovenian educational project focused on integrating advanced XR (virtual, augmented, and extended reality) technologies into primary and secondary schools. The project aims to transform educational processes by equipping teachers with knowledge and tools to develop XR content, establishing learning laboratories across Slovenia, and creating digital learning materials. The website serves as an informational platform for the project, targeting educators and students within the Slovenian education system. Technically, the site is built on WordPress using the Divi child theme, with performance optimizations via LiteSpeed Cache and tracking implemented through Google Tag Manager. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed and content-rich but would benefit from enhanced privacy compliance and security best practices.

B

Bosko

bosko.si

41

Bosko.si is a small Slovenian business specializing in graphic and web design services, including corporate identity, user interface, and print materials. The website presents a minimalistic and basic online presence with a placeholder message indicating upcoming content. The company appears to have been established in 2012, consistent with the domain registration data. The technical infrastructure relies on standard web technologies such as jQuery and Google Fonts, hosted by a local Slovenian provider. However, the site lacks modern security implementations such as HTTPS and security headers, and no privacy or cookie policies are present, indicating limited compliance with GDPR and other privacy regulations. Contact information is clearly provided, but no forms or social media links are available, limiting user engagement and trust signals.

M

Domača stran | Mojaizbira

mojaizbira.si

43

Mojaizbira.si is a Slovenian governmental and educational platform dedicated to providing comprehensive information about vocational professions and schools. Supported by the Ministry of Education, Science and Sport and co-financed by the European Social Fund, it serves as an authoritative resource for students and career advisors in Slovenia. The platform offers searchable databases of over 500 professions and 150 schools, along with information on scholarships for deficit professions. Technically, the website is built on Drupal 8, hosted on Arnes infrastructure, and includes modern web technologies such as FontAwesome and Klaro for cookie consent. Google Analytics is used for traffic monitoring. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service on the homepage. Overall, the site is professional, trustworthy, and well-targeted to its audience, though improvements in transparency and security practices are recommended.

E

Europass Slovenija

europass.si

45

Europass Slovenija operates as the official national portal providing digital tools and services to facilitate employment and education opportunities through standardized documents such as CVs, cover letters, and mobility certificates. Supported by the Slovenian government and the European Union, it targets job seekers, career advisors, employers, and educational institutions. The platform emphasizes accessibility, multilingual support, and official trust signals, positioning itself as a key resource in the Slovenian education and employment ecosystem. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Fonts, with good mobile optimization and accessibility features. The site is hosted under the Arnes registrar, consistent with Slovenian academic and governmental infrastructure. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is evident through the presence of a privacy policy and cookie banner aligned with GDPR requirements. Overall, Europass Slovenija presents a trustworthy, professional, and well-maintained digital presence with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and user trust.

I

Institute of RS for VET

npk.si

39

The website npk.si/en represents the National Vocational Qualifications system managed by the Institute of RS for Vocational Education and Training in Slovenia. It serves as an authoritative platform providing information and resources for individuals and companies regarding vocational certification based on work experience and competencies. The site is well-positioned as a government-related educational service with a clear target audience and a medium organizational size. Technically, the site is built on WordPress, uses modern libraries like jQuery, and is hosted under a reputable registrar (Arnes). The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data, though it lacks explicit security headers and incident response information. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional, trustworthy, and safe for general audiences.

I

IRDO – Institute for the Development of Social Responsibility

horus.si

41

The website www.horus.si represents the Slovenian Award for Social Responsibility HORUS, managed by IRDO, a non-profit institute focused on promoting social responsibility and sustainable development. The site serves as an information hub for award calls, laureates, workshops, and news updates, targeting organizations and individuals interested in social responsibility within Slovenia. The business model is non-profit, centered on recognition and promotion rather than commercial sales. The domain age and content history support a credible and established presence in this niche. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, ensuring a modern and responsive design. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malicious content were detected, and contact information is clearly provided, enhancing credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to enhance user trust and regulatory compliance.

S

SloCro klub

slo-cro-klub.hr

47

SloCro klub operates as a regional economic chamber focused on strengthening business relations between Slovenia and Croatia. The organization facilitates cooperation through partnerships, information support, and consulting services, targeting businesses and institutions engaged in cross-border economic activities. The website reflects a professional and consistent brand presence with a clear business focus on economic cooperation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is moderate, with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with a cookie consent mechanism implemented but no explicit privacy or terms of service pages found. Overall, the site is accessible, well-structured, and serves its business purpose effectively.

W

Reiseberichte :: Welt bereisen

welt-bereisen.de

47

The website 'Welt bereisen' is a niche travel blog primarily focused on European travel, with a strong emphasis on cultural, historical, and religious sites. It offers detailed travel reports, photo galleries, and rich content aimed at travel enthusiasts interested in history and culture. The site is small-scale and appears to be managed by an individual or small team, with content quality rated as good and consistent branding. Technically, the site uses a custom CMS, modern web fonts, and common JavaScript libraries such as jQuery, along with Google Analytics and Piwik for tracking. It employs HTTPS and includes a cookie consent mechanism, indicating some level of GDPR compliance. However, explicit privacy policies and terms of service are missing, and no direct contact information is provided, which limits business credibility and privacy transparency. Security posture is moderate with HTTPS but lacks security headers and formal security policies. Overall, the site is safe, professional, and well-structured but could improve in privacy and security documentation.

B

Beuroner Kunstverlag

klosterkunst.de

43

Beuroner Kunstverlag operates the Klostershop Beuron website, an e-commerce platform specializing in religious and monastic art, cards, books, candles, and gifts. The business targets Christian customers and religious communities interested in high-quality religious-themed products. The website is professionally designed with consistent branding and good navigation, optimized for mobile devices and accessibility. Technically, it leverages modern frameworks such as Bootstrap and jQuery, and is hosted on Hetzner servers, indicating a stable infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of privacy and terms of service pages indicates compliance gaps. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns with a legitimate German business, albeit with limited registrant details.

E

EMMA-Espoo Museum of Modern Art

emmazone.fi

46

EMMA Zone is a digital content platform operated by EMMA – Espoo Museum of Modern Art, providing multimedia content such as articles, videos, interviews, and podcasts focused on modern art. The platform targets art enthusiasts and the general public interested in cultural content, positioning itself as a niche digital museum experience. Technically, the site is built on Angular 13, integrates Google Tag Manager for analytics, and uses Enzuzo for cookie consent management, reflecting a modern and compliant digital infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and aligned with the museum's branding and mission.

The website brikel-bg.com is currently inaccessible due to a security block imposed by the Wordfence plugin, which returns an HTTP 503 response indicating access is limited for security reasons. The site content is effectively blocked, preventing any meaningful analysis of business or service information. The domain is long-established, registered since 2001 with Tucows Domains Inc., indicating legitimacy and stability in domain ownership. However, no privacy, cookie, or terms of service policies are publicly available, and no contact information or business details are exposed on the site. Technically, the site runs on WordPress with Wordfence security, but no further technical or SEO optimizations can be assessed due to the block. Security posture is partially positive due to the use of Wordfence but lacks DNSSEC and visible security headers. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the block and lack of public information.

А

Адвокатска кантора Дотова и Божинова

soflaw.bg

48

Адвокатска кантора Дотова и Божинова е утвърдена малка адвокатска кантора, базирана в София, България, предлагаща широк спектър от правни услуги, включително търговско, семейно, административно, трудово и медицинско право, както и недвижими имоти и изпълнителни дела. Сайтът е професионално изработен на WordPress с използване на модерни технологии и добри SEO практики. Въпреки липсата на публично достъпна политика за поверителност и бисквитки, контактната информация е изчерпателна и лесно достъпна, а клиентските отзиви и медийните упоменавания подсилват доверието в кантората. Техническият стек е съвременен, но липсват някои важни мерки за сигурност като security headers и политика за инциденти.

xmlteam GmbH & Co KG operates in the transportation sector, providing specialized software solutions for the cruise and travel industry. Their flagship product, CruiseCompass, is accessible online without requiring software downloads and integrates with various mid-office systems used by travel agencies. The company targets travel professionals and agencies seeking efficient cruise management tools. The website is currently under maintenance but provides clear access points to their services and support. Technically, the website employs modern frameworks such as Bootstrap 5.1.3 and is hosted on Hetzner servers, indicating a reliable infrastructure. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms. The design and content quality are basic but functional, with room for improvements in accessibility and SEO. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited maturity in security governance. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website and domain appear legitimate and consistent with the business profile. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance posture.

The website at web.tuhla.com presents as a minimal placeholder with no substantive content or business information. The site consists solely of a background image and a title tag, lacking any metadata, forms, external links, or contact details. The absence of WHOIS data for the domain suggests it may be unregistered or a subdomain without independent registration, which raises questions about the legitimacy and operational status of the site. Technically, the site does not demonstrate modern web practices such as HTTPS, security headers, or SEO optimization, indicating a low level of digital maturity. Security posture is weak due to missing HTTPS and lack of security policies or headers. Overall, the site appears non-operational or under construction, with significant gaps in compliance, security, and business credibility.

P

Period28.com

period28.com

49

Period28.com is a niche healthcare service offering an online female menstrual calendar that helps users track menstrual cycles, ovulation, symptoms, moods, and weight. The platform provides email notifications and diary features to support personal and medical tracking needs. The website targets women seeking an easy and discreet way to manage their menstrual health. The business operates as a small-scale online service with user registration and multilingual support, established since 2012. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.2, Google Fonts, Facebook SDK, and Google Analytics for tracking. Hosting appears to be managed through sureserver.com with domain registration via eNom, LLC. The site shows moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though some modernization opportunities exist. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC is not enabled. The use of outdated JavaScript libraries introduces potential vulnerabilities. No explicit security policies or incident response information is published. Cookie consent is implemented, but GDPR compliance is only basic. The domain registration is consistent and legitimate, with a long registration period and transfer protection status. Overall, the website is functional and trustworthy for its intended audience but would benefit from technical and security improvements to enhance protection and compliance. Strategic recommendations include updating libraries, enabling DNSSEC, adding security headers, and publishing comprehensive policies.

П

Политическа партия Русофили за възраждане на Отечеството

ppvo.bg

43

The website represents a Bulgarian political party named "Политическа партия Русофили за възраждане на Отечеството" focused on Russian-Bulgarian relations and patriotic themes. It serves as an information and advocacy platform with regular content updates, news, and partner affiliations. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted likely by SuperHosting.BG. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though some security best practices like CSP headers and security.txt are missing. Privacy compliance is partial with a GDPR-compliant privacy policy but lacking cookie consent mechanisms. WHOIS data is limited due to GDPR but domain status and nameservers indicate legitimacy. Overall, the site is functional, trustworthy, and serves its political advocacy purpose effectively.

А

Адвокат Атанас Панчев

atanas-panchev.com

49

Адвокат Атанас Панчев is a Bulgarian legal professional offering specialized legal services primarily in civil law and related legal areas such as administrative, property, insurance, commercial, and tax law. The business operates as a small legal practice based in Sofia, Bulgaria, targeting both individual and corporate clients. The website presents a professional image with clear service descriptions and contact options, including a contact form protected by Google reCAPTCHA. The technical infrastructure is based on WordPress with Elementor and Rank Math SEO, indicating a moderate level of digital maturity. Security measures include HTTPS and cookie consent, but lack advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its local market niche.